Jellyfin 12.0 (.NET 10) beta 5.0.0-JF12-beta (plugin version 5.0.0.27).
Install via the beta repository URL (a Jellyfin 12.0 server picks this build automatically by targetAbi):
https://raw.githubusercontent.com/iderex/jellyfin-plugin-sso/manifest-beta/manifest.json
Scope note (#743): the JF12/5.0 line is not validated against a live Jellyfin 12.0 server yet — no 12.0 GA server exists to run the E2E checklist against. It is CI-built and unit/conformance-tested only, and it is NOT part of the 4.x (Jellyfin 10.11) release-candidate gate; the 5.0 line clears its own live-validation gate when a Jellyfin 12.0 RC/GA build is available. Use these betas for testing, not production.
What's Changed
- Validate id_token auth_time against max_age; fail closed by @iderex in #972
- Add OIDC back-channel logout (logout_token validation + endpoint) by @iderex in #973
- Add opt-in login-time deprovisioning on role-denied SSO logins by @iderex in #975
- Read the manifest via jq --rawfile so the beta publish survives arg-length growth by @iderex in #979
- Publish the newest JF11 beta as the repo's Latest release by @iderex in #981
- Add a changelog entry for the managed login-page buttons by @iderex in #983
- Add the SAML deprovision-off parity test by @iderex in #984
Full Changelog: 4.3.0-beta.12...5.0.0-JF12-beta.27