ThetaDev/jellyfin-plugin-keycloak-auth
1
0
Fork 0
Code Issues Pull requests Projects Releases Activity
No description
13 commits 1 branch 0 tags 86 KiB
C# 64.5%
HTML 35.5%
Find a file
Exact
ThetaDev c33c61d69e
add improvements
2025-03-31 00:08:54 +02:00
.github add improvements 2025-03-31 00:08:54 +02:00
Jellyfin.Plugin.Keycloak add improvements 2025-03-31 00:08:54 +02:00
.editorconfig Initial commit 2021-03-27 20:48:52 +11:00
.gitignore Updated .gitignore 2022-01-01 08:05:49 +01:00
build.yaml First Commit 2021-03-28 16:15:33 +11:00
Jellyfin.Plugin.Keycloak.sln First Commit 2021-03-28 16:15:33 +11:00
jellyfin.ruleset Added jellyfin default ruleset for stylecop 2022-01-01 08:08:04 +01:00
LICENSE Initial commit 2021-03-27 20:48:52 +11:00
README.md Fix Readme 2021-03-28 16:17:09 +11:00

README.md

Keycloak Authentication Plugin

A simple plugin for Jellyfin to authenticate against a Keycloak instance.

Requirements

  • Your keycloak client config needs to have Direct Access Grants Enabled enabled.
  • You need to add the following roles your defined client administrator, allowed_access, allow_media_downloads
  • Map at least allowed_access to the users you want to be able to access jellyfin (or map it to a group)

Limitations

  • This only provides a an authentication method against Keycloak, it does not handle token renewal/revoking.
    eg: If you delete/invalidate/etc a users session/account in keycloak the session will remain active in Jellyfin.
    (However if you remove the allowed_access role and the user logs in again all sessions in Jellyfin are revoked.)

  • It does not provide a true 'Single Sign On' as if the user is signed into the Realm already the user will still be prompted to authenticate to Jellyfin.

  • It does not follow oauth2 or oidc worflow, it mearly requests a token from keycloak with the username/password provided if we get a token we mark the authentication request as successfull.

Build/Installation

  1. Have .NET SDK 5.0
  2. dotnet publish --configuration Release --output bin
  3. Make a directory called keycloak (or whatever you want) in your jellyfin keycloak directory
    Windows: %localappdata%\jellyfin\plugins
    Linux: /var/lib/jellyfin/plugins
    Place the built Jellyfin.Plugin.Keycloak.dll and JWT.dll in the directory and restart Jellyfin
  4. Configure the plugin in the webui Admin Dashboard -> Advanced -> Plugins