Releases: MaxRink/jellyfin-plugin-sso
Release list
6.0.0.0-rc1 — Jellyfin 12 support
SSO Authentication 6.0.0.0-rc1 — Jellyfin 12 support
First release candidate with full Jellyfin 12 support. This build targets net10.0 and the plugin ABI 12.0.0.0, compiled against Jellyfin.Controller/Jellyfin.Model 12.0.0-rc2.
⚠️ Release candidate. Jellyfin 12 itself is still in RC. Test before relying on it in production, and back up your server/database first. A stable build will follow once Jellyfin 12 GA ships.
Requirements
- Jellyfin 12.x (won't load on 10.11 — use the 4.x/5.x releases there).
Highlights
- Ported the plugin and its F# helper project to .NET 10 and Jellyfin 12 packages (
12.0.0-rc2). - Removed the vulnerable
System.Security.Cryptography.Xmlpackage (now provided by the net10 shared framework). - Both OIDC and SAML flows retained.
Features & fixes adopted from the fork ecosystem (all GPL-3.0, credited)
- Native mobile-app SSO login (Android + Expo iOS) with error surfacing, plus a restyled sign-in handoff page and a stale-canonical-link login fix — AlexBocken
preserveAdminPermissionsoption (no more silent admin revocation on role mismatch) and role-mapped permission persistence viaUpdatePolicyAsync— Buco7854- Account-linking fix carrying the linking user id through
TimedAuthorizeState— basil-squared - OID device-code flow endpoint
POST /sso/OID/DeviceAuth/{provider}(RFC 8628) for headless/TV clients, with an adopted xUnit test suite — dustinyschild - Quick Connect through OIDC (
?qc=onOID/start) — primeral - New SSO users no longer inherit access to all library folders (9p4#29) — athendrix / eddymoulton
See the README Acknowledgements section for details.
Install
Add the plugin manifest to your Jellyfin plugin repositories:
https://raw.githubusercontent.com/MaxRink/jellyfin-plugin-sso/manifest-release/manifest.json
Or install manually: download sso-authentication_6.0.0.0.zip below and extract its contents into config/plugins/SSO-Auth_6.0.0.0/ (so meta.json and the DLLs sit at the top level of that folder), then restart Jellyfin.
Verification
- Builds clean under
dotnet build --warnaserror(0 warnings); Prettier lint passes. - 13 device-code unit tests pass.
- Plugin load verified in a Jellyfin 12 RC Docker container.
- Full end-to-end SSO login verified: a real OIDC login against authentik on Jellyfin 12 (
12.0-rc2), driven with Playwright, issues a Jellyfin session and provisions the user. The harness is committed undertest/e2e/and runs in CI.