243
Netflix now requires every user profile to be tied to unique email address (arstechnica.com)
submitted 3 months ago by to c/technology@lemmy.world
123 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 3 months ago* (10 children)

A security focused authentication service would be the most successful, straightforward, and simple to implement solution.

Unfortunately Jellyfin, nearly alone amongst its FOSS peers has not implemented support for these services. It’s the only one of my many dozens of selfhosted services that I can’t properly secure.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 1 point 3 months ago (9 children)

    There are plugins for SSO.
    There are 3rd party plugins for OIDC and I think LDAP is even first party.
    The issue comes when intercepting the signin-progress with 1st party clients. Jellyfin (to my knowledge) doesnt support redirects/callbacks like a homeassistant companion app does.
    And how many media servers are there? The 2 other major offerings (Plex and Emby) don't support OIDC either.
    Plex does it's own sauce and Emby doesnt support it. Authentik has a guide to implement it via LDAP.

    And Jellyfin has a tech-debt history being forked from emby. Stark contrast to newly developed projects which were started when SSO and OIDC wasbstarting to become popular.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 1 point 3 months ago (5 children)

    Yeah, natively Jellyfin supports LDAP (1st party plug-in anyway), which means I can use my personal IdP to centrally manage accounts and it works across all their apps I've tried (as oppose to the OIDC plugin which seems to still break their apps).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 2 points 3 months ago (4 children)

    Forgot that LDAP is sort of first party.
    Does the jellyfin app support the ldap auth?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 3 months ago (3 children)

    Yep, as far as I'm aware, it's the only way to use a separate IdP with the official apps.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 3 months ago (2 children)

    Very neat!
    Sadly I suspect that if I'd access it through authelia (and other reverse proxies) that the redirect will break the accessibility.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 3 months ago (2 children)

    Plugins for SSO and OIDC are not a solution as they will only work with the web clients, so that’s a non-starter.

    Jellyfin can blame it on the tech debt all they want but implementing it really wouldn’t be that hard, they just haven’t prioritized it, simple as.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 3 months ago (1 child)

    This sounds lile you are very knowledgable about it.
    Why not propose a dev-draft or propose a feature on their feature voting website?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 3 months ago* (last edited 3 months ago)

    Because it’s already a proposed feature on their feature voting website. In fact It’s been one of the top voted features for the last 7 years straight. It’s at this point the most often talked about drawback of Jellyfin and biggest stated reason why people won’t switch away from Plex. It’s been so long that the SSO plugin has been archived because the maintainer only made it on a temporary basis and he was tired of maintaining it, likely because it’s only taken the pressure off of the Jellyfin team to implement native SSO because folks like you like to point to it as a solution to the problem.

  • permalink
  • fedilink
  • source
  • parent