Skip to content
Discussion options

You must be logged in to vote

If you do not have a Base URL set in Jellyfin server settings than you have to have an "Always Allow Path /" rule along with a plethora of rules for other endpoints. After adding Always Allow rules all of those, I follow them up with a "Always Deny Path *" rule.

These are the paths that I allow and I am able to log in via the android app. Note that this does exclude Jellyfin itself from the Pangolin Authentication but only allows valid Jellyfin endpoint and denies all others. I'm sure this list isn't exhaustive but here is what I currently allow:

/
/system/info/public
/System/Info/Public
/Users/AuthenticateByName
/Users/Public
/users/public
/QuickConnect/Initiate
/QuickConnect/Connect
/Qu…

Replies: 2 comments 6 replies

Comment options

You must be logged in to vote
4 replies
@Edward-selfhost
Comment options

@taking
Comment options

@Edward-selfhost
Comment options

@v1rusnl
Comment options

Comment options

You must be logged in to vote
2 replies
@VinterSolen
Comment options

@Edward-selfhost
Comment options

Answer selected by Edward-selfhost
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
5 participants