2 Commits

Author	SHA1	Message	Date
Pascal Linxweiler	7dc79bf003	fix: admin role mapping grants only, revoke behind opt-in ... SSO login for an existing admin whose token lacked the admin role was silently demoting the account, locking admins out of the dashboard. Missing admin role now leaves the flag alone unless RevokeAdminWithoutRole is enabled. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-13 14:44:07 +02:00
Pascal Linxweiler	2380e97e79	feat: initial Jellyfin OIDC auth plugin ... OpenID Connect SSO for Jellyfin 10.10 (net8.0). Authorization code flow with PKCE via IdentityModel.OidcClient, automatic user creation with random password, role based admin/access mapping, plugin repo manifest. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-13 13:07:54 +02:00