Authelia in front of jellyfin android and tv app

[Vacate1464]

Hi all,

I have jellyfin running behind nginx for external access via a vpn. I also have authelia protecting the service. Everything works with the exception of the mobile apps and tv app.
What i'd like to know is if there is a specific url that the apps use so that I can add an exclusion to my authelia config file?

[crobibero]

The apps use a lot of the api so that isn’t an easy thing to accomplish.

[gaming09]

I tried this and failed, short of bypassing the actual url i wasn't able to get it running, authelia or authentik. across android/androidtv/roku/appletv. That said, i've run the webfront end through its paces and run monthly pen tests and havent really been successful in cracking in.

[Vacate1464]

Thanks for the input y'all. I'll save my time and stop trying to get it to work. What i'll do is create a separate URL for mobile and TV access. However I'd like for this URL to be quick connect login only so that users will have to log into their account to get a code.

[gaming09]

Thanks for the input y'all. I'll save my time and stop trying to get it to work. What i'll do is create a separate URL for mobile and TV access. However I'd like for this URL to be quick connect login only so that users will have to log into their account to get a code.

Quick connect will only work on the LAN not via WAN. I'm not sure what benefit you'll gain from splitting the url, ultimately if you're set up correctly all your 443 traffic will hit the same proxy either way

[Vacate1464]

Thanks for the input y'all. I'll save my time and stop trying to get it to work. What i'll do is create a separate URL for mobile and TV access. However I'd like for this URL to be quick connect login only so that users will have to log into their account to get a code.

Quick connect will only work on the LAN not via WAN. I'm not sure what benefit you'll gain from splitting the url, ultimately if you're set up correctly all your 443 traffic will hit the same proxy either way

I've done some testing and Quick connect does work via WAN. Just so we are on the same page, my setup is as follows;

VPS > Wireguard tunnel > Nginx proxy manager > Jellyfin

With Quick connect working what i would like to achieve is as follows.

1. URL#1 e.g. auth.jf.com
2. URL#2 e.g. app.jf.com

URL#1 is requires that a use authenticates via authelia.
URL#2 does not require authelia authentication but I would like that the only option to login is via quick connect, so no option for password, on a mobile or TV app? So a valid user will need to access their jellyfin account via URL#1 (behind authelia) to authorise URL#2. Seems tedious for the end user but URL#2 is only for mobile and TV app which only requires a one time authentication.