Cannot login from iPhone

[sbogomolov]

I'm using authentik and can login from my laptop just fine. When I try to login from iPhone - I get redirected to authentik, authentication happens successfully, and I get redirected back to jellyfin start page (not logged in). I tried with Safari and Chrome. The log looks fine, no errors:

[2024-02-05 01:15:56.700 +01:00] [INF] [64] Jellyfin.Plugin.SSO_Auth.Api.SSOController: SSO Controller initialized
[2024-02-05 01:15:57.787 +01:00] [WRN] [70] Jellyfin.Server.Middleware.ResponseTimeMiddleware: Slow HTTP Response from "https://jellyfin.example.com/sso/OID/start/authentik" to "<ipv4_was_here>" in 0:00:01.0877651 with Status Code 302
[2024-02-05 01:15:58.567 +01:00] [INF] [70] Jellyfin.Plugin.SSO_Auth.Api.SSOController: SSO Controller initialized
[2024-02-05 01:16:01.006 +01:00] [INF] [70] Jellyfin.Plugin.SSO_Auth.Api.SSOController: Is request linking: False
[2024-02-05 01:16:01.007 +01:00] [WRN] [70] Jellyfin.Server.Middleware.ResponseTimeMiddleware: Slow HTTP Response from "https://jellyfin.example.com/sso/OID/redirect/authentik?code=<code_was_here>" to "<ipv4_was_here>" in 0:00:02.4403616 with Status Code 200
[2024-02-05 01:16:01.124 +01:00] [INF] [70] Jellyfin.Plugin.SSO_Auth.Api.SSOController: SSO Controller initialized
[2024-02-05 01:16:01.147 +01:00] [INF] [70] Jellyfin.Plugin.SSO_Auth.Api.SSOController: Auth request created...
[2024-02-05 01:16:01.148 +01:00] [INF] [70] Emby.Server.Implementations.Session.SessionManager: Current/Max sessions for user "<username>": 4/0
[2024-02-05 01:16:01.153 +01:00] [INF] [70] Emby.Server.Implementations.Session.SessionManager: Reissuing access token: "<token_was_here>"

I am able to login from my laptop. I am using Authentik for other services and these work fine from all devices. What could be wrong here?

[9p4]

You don't seem to be the first person to have an issue with the iOS/Authentik/Jellyfin combination: #113

[sbogomolov]

Did a bit more experiments. Added no-cahe, no-store to /SSO/Auth/... request. This did not fix it. Then I added logging to your JS code that sets jellyfin_credentials. I have printed the value before change and after change. Then I checked the console and saw following:

• Value before update: contains OLD_TOKEN
• Value after update: contains NEW_TOKEN

Looks good, however right after that I saw another log from main.jellyfin.bundle.js:34284. That message was Stored JSON credentials and contained OLD_TOKEN. It looks like somehow, somewhere it was cached and overwritten after your JS code updated the local storage.

[9p4]

I think I need to add something to the JS to erase the values set in the local storage, then load the iframe, then wait for the localstorage values to get repopulated, then continue with authentication.

[sbogomolov]

This is exactly what I was thinking as well :) I'll try and let you know how it went.

[sbogomolov]

This fixes it: #163.
Tested with Safari on Mac and iPhone.