Skip to content

6.0.0.0-rc1 — Jellyfin 12 support

Pre-release
Pre-release

Choose a tag to compare

View all tags
@MaxRink MaxRink released this 11 Jul 16:47
v6.0.0.0-rc1
a03c085

SSO Authentication 6.0.0.0-rc1 — Jellyfin 12 support

First release candidate with full Jellyfin 12 support. This build targets net10.0 and the plugin ABI 12.0.0.0, compiled against Jellyfin.Controller/Jellyfin.Model 12.0.0-rc2.

⚠️ Release candidate. Jellyfin 12 itself is still in RC. Test before relying on it in production, and back up your server/database first. A stable build will follow once Jellyfin 12 GA ships.

Requirements

  • Jellyfin 12.x (won't load on 10.11 — use the 4.x/5.x releases there).

Highlights

  • Ported the plugin and its F# helper project to .NET 10 and Jellyfin 12 packages (12.0.0-rc2).
  • Removed the vulnerable System.Security.Cryptography.Xml package (now provided by the net10 shared framework).
  • Both OIDC and SAML flows retained.

Features & fixes adopted from the fork ecosystem (all GPL-3.0, credited)

  • Native mobile-app SSO login (Android + Expo iOS) with error surfacing, plus a restyled sign-in handoff page and a stale-canonical-link login fix — AlexBocken
  • preserveAdminPermissions option (no more silent admin revocation on role mismatch) and role-mapped permission persistence via UpdatePolicyAsync — Buco7854
  • Account-linking fix carrying the linking user id through TimedAuthorizeState — basil-squared
  • OID device-code flow endpoint POST /sso/OID/DeviceAuth/{provider} (RFC 8628) for headless/TV clients, with an adopted xUnit test suite — dustinyschild
  • Quick Connect through OIDC (?qc= on OID/start) — primeral
  • New SSO users no longer inherit access to all library folders (9p4#29) — athendrix / eddymoulton

See the README Acknowledgements section for details.

Install

Add the plugin manifest to your Jellyfin plugin repositories:
https://raw.githubusercontent.com/MaxRink/jellyfin-plugin-sso/manifest-release/manifest.json

Or install manually: download sso-authentication_6.0.0.0.zip below and extract its contents into config/plugins/SSO-Auth_6.0.0.0/ (so meta.json and the DLLs sit at the top level of that folder), then restart Jellyfin.

Verification

  • Builds clean under dotnet build --warnaserror (0 warnings); Prettier lint passes.
  • 13 device-code unit tests pass.
  • Plugin load verified in a Jellyfin 12 RC Docker container.
  • Full end-to-end SSO login verified: a real OIDC login against authentik on Jellyfin 12 (12.0-rc2), driven with Playwright, issues a Jellyfin session and provisions the user. The harness is committed under test/e2e/ and runs in CI.
Assets 5
Loading