Disable normal login?

[poperigby]

I currently have the plugin setup with Authelia, but there are two options for logging in, the custom Login with SSO button that uses Authelia, or just logging in normally. This Authelia user has the same username as a pre-existing Jellyfin user. Can I make it so you have to go through Authelia to login?

[9p4]

you could change the password for the user to something long and random and forget about it, or you could modify the database to remove the authentication provider from the user so that password auth is disabled. The first option is easier.

[MatthiasGrandl]

I am guessing option 2 isn't something this plugin could optionally enforce? I am looking into this to improve the security of my Jellyfin instance.

[MatthiasGrandl]

PS: I just tried manually removing the default authentication provider from my user, but it didn't work. Was just added back on server restart and I could login with password.

[MatthiasGrandl]

PPS: Solved this by disabling the login endpoint in my reverse proxy config. In my case for Caddy:

@block_login {
		method POST
		path /Users/authenticatebyname
	}
	handle @block_login {
		respond 403
	}
	```

[C8opmBM]

nice, what would be the equivalent for traefik?

[duckling-strg]

nice, what would be the equivalent for traefik?

You could just prohibit the path itself, returning a 404: Host(...) && !Path(/Users/authenticatebyname)