4.3.0-beta

Jellyfin 10.11 beta 4.3.0-beta (plugin version 4.3.0.9).
Install via the beta repository URL:
https://raw.githubusercontent.com/iderex/jellyfin-plugin-sso/manifest-beta/manifest.json

What's Changed

• Link the ASVS/RFC 9700 conformance self-assessment from SECURITY by @iderex in #846
• Enable deterministic build settings and document reproducibility by @iderex in #847
• Route the OpenID discovery/JWKS/token fetches through the SSRF-hardened transport by @iderex in #848
• Enforce a minimum asymmetric signing-key strength for IdP signing keys [#733] by @iderex in #849
• Provision new SSO users disabled pending admin approval [#737] by @iderex in #850
• Support step-up / MFA passthrough for OpenID [#757] by @iderex in #851
• Map IdP groups to a parental-rating ceiling (MaxParentalRatingScore) [#736] by @iderex in #852
• Show and copy the exact OIDC redirect URI on the provider form [#724] by @iderex in #853
• Import SAML provider config from IdP metadata (URL or XML) [#735] by @iderex in #854
• Add a SAML provider configuration admin UI [#725] by @iderex in #855
• Correct the actions/checkout pin comment to its exact tag [#858] by @iderex in #859
• Add one-click provider templates to the config page [#726] by @iderex in #857
• Auto-manage the login-page sign-in buttons (core) [#722] by @iderex in #860
• Add the Single Logout session-state store (SLO-1) [#727] by @iderex in #861
• Capture the id_token at login for Single Logout (SLO-1b) [#727] by @iderex in #862
• OIDC RP-initiated logout (SLO-2) [#727] by @iderex in #863
• Deduplicate the SAML metadata action doc; document two nested members by @iderex in #874
• Add a shared TestUsers.Named factory; remove three copied user helpers by @iderex in #875
• Finish the module placement: SSOViewsController + RequestHelpers into Http, dissolve the Kernel test folder by @iderex in #877
• Collapse the two identical SAML signing-key resolvers into one helper by @iderex in #876
• Delete the zero-consumer ILoginService interface by @iderex in #878
• Consolidate served assets into one flat Web/ folder; add a resource-resolution test by @iderex in #879
• Pin namespace to folder under Api/ with a conformance test by @iderex in #880
• Document the internal API surface and enforce it via SA1600 by @iderex in #881
• Pin the internal-doc gate severities so it cannot be silently disabled by @iderex in #882
• Point the repo docs at the consolidated wiki; fix module-table and beta-trigger drift by @iderex in #883
• Add a CI wiki-lint drift guard by @iderex in #884
• Record the OIDC/SAML shared-abstraction evaluation; codify the ≥2-consumer rule by @iderex in #885
• Enable nullable reference types on the Flows module by @iderex in #886
• Enable nullable reference types on the LoginButtons module by @iderex in #887
• Bump System.Security.Cryptography.Xml to 10.0.10 (CVE-2026-47302, -47304) by @iderex in #889
• Enable nullable reference types on the Linking module by @iderex in #891
• Enable nullable reference types on the Logout module by @iderex in #888
• Enable nullable reference types on the Config module by @iderex in #892
• Enable nullable reference types on the Oidc module by @iderex in #893
• Enable nullable reference types on the Saml module (completes #799) by @iderex in #894
• Enable nullable reference types project-wide [#799] by @iderex in #895
• Generate and attach a CycloneDX SBOM to every release [#729] by @iderex in #896
• Adopt a DCO sign-off with a self-contained check [#746] by @iderex in #897

Full Changelog: 4.3.0-beta.8...4.3.0-beta.9