Help with authentication provided by reverse proxy

[jose1711]

Hello,

following https://blog.sjain.dev/caddy-sso/ I started to migrate my services behind Caddy reverse proxy with a SSO configured. For Jellyfin I did something like this (Caddyfile):

Code:

{
..
  security {
        authorization policy admin_policy {
          set auth url https://portal.mydomain.com
          allow roles authp/admin
    }
  }
}
jellyfin.mydomain.com {
  authorize with admin_policy
  reverse_proxy http://localhost:8096
}

When accessing https://jellyfin.mydomain.com I am redirected to https://portal.mydomain.com where I am queried for credentials (configured inside Caddy's local store) and once validated I am redirected back and presented with Jellyfin login window. Here I need to log in once more.

Is there a way to tell Jellyfin - that a user foo is a valid user and his/her identity has been proven already? I saw several questions floating on the forums/github but could not find a definitive answer whether this is supported or not.

Thanks, j

[crobibero]

You would need to use something like the SSO plugin. https://github.com/9p4/jellyfin-plugin-sso

[jose1711]

This would be too much, I am looking for a header authentication but it seems this is not yet supported (as per https://features.jellyfin.org/posts/471/...entication)

[jose1711]

Eventually I used Caddy with Authelia (https://www.authelia.com/integration/ope.../jellyfin/) and SSO plugin you mentioned.