Jellyfin OIDC + Moonfin + Seerr with OIDC

[Khaaz]

Hello,
OIDC is (finally) coming to Seerr in the upcoming weeks. See seerr-team/seerr#2715

For context:
I use Jellyfin via https://github.com/9p4/jellyfin-plugin-sso (or the new fork: https://github.com/Buco7854/jellyfin-plugin-sso) with quick connect. Jellyfin users are strictly SSO users (besides main admin users).
With Seerr with OIDC, same users will have their Seerr account.

I am not using Moonfin yet but I am strongly considering it. Will this workflow be supported? User will connect to jellyfin via OIDC, then with moonfin, will be able to access their "connected" Seerr account?

Thanks in advance for clarifying

[RadicalMuffinMan]

Yes, that workflow should work. Moonfin already signs you in to Seerr without a password when you log in to Jellyfin with Quick Connect. The Moonfin plugin approves a Quick Connect request with Seerr for you, so there's no code to type. You need Seerr 3.4.0 or newer, Moonfin 2.3.1 or newer, and Quick Connect turned on in Jellyfin. Seerr matches you to your account by your Jellyfin user. If someone doesn't have a Seerr account yet, Seerr only creates one when "Enable New Jellyfin Sign-In" is on. Otherwise they need to be imported first.

The one thing to watch with Seerr's OIDC is how accounts get linked. In the current OIDC PR, Seerr finds your account only through an OIDC link on it. It doesn't match by email, and accounts it creates on first OIDC login aren't tied to Jellyfin. So the smoothest setup is to have the Seerr accounts come from Jellyfin first, by importing users or letting them sign in once through Moonfin. Then each person links their OIDC login under Profile > Linked Accounts in Seerr. If someone already has an OIDC-only Seerr account, they can link Jellyfin to it from the same page using Quick Connect. Without one of those links, Moonfin would end up making a second Seerr account for that person, or get turned away.

This is based on the OIDC PR as it stands now, so details could change before it merges.