danvics/selfhostblocks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix: add OIDC scopes to Jellyfin service

Browse source 
Also adds <DisabledPushedAuthorization>true</DisablePushedAuthorization>, as
otherwise I get "Error preparing login: Unauthorized - Failed to push
authorization parameters"
This commit is contained in:
Cody Wright 2025-12-26 05:10:48 +00:00 committed by ibizaman
parent abd3bf7ceb
commit 0f30a8bccd
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
modules/services/jellyfin.nix
View file

@ -550,6 +550,7 @@ in
<string>groups</string> <string>groups</string>
</OidScopes> </OidScopes>
<CanonicalLinks /> <CanonicalLinks />
<DisablePushedAuthorization>true</DisablePushedAuthorization>
</PluginConfiguration> </PluginConfiguration>
</value> </value>
</item> </item>
@ -839,7 +840,15 @@ in
require_pkce = true; require_pkce = true;
pkce_challenge_method = "S256"; pkce_challenge_method = "S256";
userinfo_signed_response_alg = "none"; userinfo_signed_response_alg = "none";
# Jellyfin SSO plugin uses client_secret_post for token exchange
token_endpoint_auth_method = "client_secret_post"; token_endpoint_auth_method = "client_secret_post";
# Required OIDC scopes for Authelia to return group claims
scopes = [
"openid"
"profile"
"email"
"groups"
];
} }
]; ];
}; };