danvics/selfhostblocks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix: add OIDC scopes to Jellyfin service

Browse source 
Also adds
<DisabledPushedAuthorization>true</DisablePushedAuthorization>, as
otherwise I get "Error preparing login: Unauthorized - Failed to push
authorization parameters"
This commit is contained in:
Cody Wright 2025-12-26 05:10:48 +00:00
parent f17e9885d2
commit 9139bb6808
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
modules/services/jellyfin.nix
View file

@ -483,6 +483,7 @@ in
<string>groups</string> <string>groups</string>
</OidScopes> </OidScopes>
<CanonicalLinks /> <CanonicalLinks />
<DisablePushedAuthorization>true</DisablePushedAuthorization>
</PluginConfiguration> </PluginConfiguration>
</value> </value>
</item> </item>
@ -732,7 +733,10 @@ in
require_pkce = true; require_pkce = true;
pkce_challenge_method = "S256"; pkce_challenge_method = "S256";
userinfo_signed_response_alg = "none"; userinfo_signed_response_alg = "none";
# Jellyfin SSO plugin uses client_secret_post for token exchange
token_endpoint_auth_method = "client_secret_post"; token_endpoint_auth_method = "client_secret_post";
# Required OIDC scopes for Authelia to return group claims
scopes = ["openid" "profile" "email" "groups"];
} }
]; ];
}; };