mirror of
https://github.com/jellyfin/jellyfin.git
synced 2026-05-04 18:09:12 +03:00
[PR #15559] [MERGED] Disable legacy authorization methods by default #14344
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/jellyfin/jellyfin/pull/15559
Author: @nielsvanvelzen
Created: 11/18/2025
Status: ✅ Merged
Merged: 11/27/2025
Merged by: @nielsvanvelzen
Base:
master← Head:disable-legacy-auth📝 Commits (2)
196c243Disable legacy authorization methods by default67c67dfUse async migration📊 Changes
2 files changed (+33 additions, -1 deletions)
View changed files
➕
Jellyfin.Server/Migrations/Routines/DisableLegacyAuthorization.cs(+32 -0)📝
MediaBrowser.Model/Configuration/ServerConfiguration.cs(+1 -1)📄 Description
This is part 2 of 3 for the removal of legacy authorization method. Previously we added an configuration options that is disabled by default in #13306 which released with 10.11. This PR will change the EnableLegacyAuthorization option to false for all installs, allowing a user to (temporarily) keep using the legacy method if they use an client that is not updated yet.
Getting this into 10.12 unstable builds early so clients that haven't migrated yet will know in time.
We'll remove this configuration option (and the authorization methods) in a future release, likely 10.13.
Changes
Issues
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.