Videos from my Jellyfin server used to play on my WordPress site, not any more

[Aubrey Zhang]

Hello, I installed Jellyfin on my self-hosted server two years ago and I used following two ways to display media on my WordPress site. Both worked fine until I upgraded the Ubuntu system server and Jellyfin install a week ago. Media still play fine on the Jellyfin site but not on my WordPress site.

1. The built-in WordPress video code:

Code:

<video style="width:100%;height:100%" controls="controls" src="https://mydomain.com/Items/73dec1a7d3fab395eb7d4e9ff9bd1f6d/Download?api_key=xxxxxxxxxxxxxxxx"></video>

This used to display an thumnail image from the video and played when I clicked.

2. Use a code suggested by a WordPress plugin called "WP Lightbox Ultimate" to display a link for the video from my Jellyfin server and when I clicked the link, the video played:

Code:

[wp_lightbox_flowplayer_anchor_text_video link="https://mydomain.com/Items/3523f66c6eabfe7270ca927e5b2dadd6/Download?api_key=xxxxxxxxxxxxxxx" width="1280" height="720" title="" text="One word to explain PyraPOD" autoplay="true"]

As you can see at the following test page: https://pyrapod.com/jellyfin-video the first link is for a YouTube video which works, but the second link (using the above code) does not work - the error code is this: "html5: Video file not found".

Both codes worked before, but after upgrading the server operating system (Ubuntu 20.04) and the Jellyfin installation, both codes stop to work anymore.

Hope someone here can help me dig out the problem. Thank you so much!

[Aubrey Zhang]

I asked the author of the WordPress plugin "WP Lightbox Ultimate" and this is what she says...

We don't advertise any Jellyfin integration so this is something that
we are not familiar with. I just had a look at the page you shared. It
looks like that Jellyfin site might be adding a captcha in there (this
is most likely something new they added). This is why you didn't see
this before.

The question is, is there a captcha mechanism added to the newest version of Jellyfin?

[niels]

Jellyfin is not meant to be used this way. You're publicly exposing your API keys allowing malicious users to have access to one of your Jellyfin users (hopefully you didn't copy this link as the admin user).

[Aubrey Zhang]

OK, thanks for telling me that. Then I will lock everything for a private circle to access the media then.