Jellyfin Quick Connecr: Wrong User or Password

Issue description:

Hello!

When I try to connect to my jellyfin server via quick connect m, it gives me this error.

Before the 14.0.0 update, it would not even show the quick connect code, but now jellyfin says it’s able to authenticate the connection, but synfonium runs into the error.

The user is signed in via sso (oauth) as opposed to standard username/password authentication

Logs:

Upload description: 2br-2b

Additional information:

 

 

Reproduction steps:

 

 

Media provider:

Jellyfin

Screenshots:

     

Check on Jellyfin / your auth system logs, it works and give a token and then the token is refused.

You’re right: I found the problem.

Is there any way I can prevent synfonium from making all these invalid requests to prevent it from being rate limited?

The calls are not invalid … They check if your server have lyrics and it report the playback state to the server.

Fix your security tool.

I asked Claude, and he provided this fix for me (for whoever else is running into this niche situation):

    s01-whitelist: 
       whitelist-jellyfin.yaml: | 
         name: whitelist-jellyfin-api 
         description: "Whitelist false positives from Synfonium/Jellyfin normal API usage" 
         whitelist: 
           reason: "Jellyfin API - Synfonium legitimate requests (lyrics 404s and playback 403s)" 
           expression: 
             - "evt.Overflow.Alert.GetScenario() == 'crowdsecurity/http-probing' && any(evt.Overflow.Alert.Events, {.GetMeta('http_host') == 'example.com' && .GetMeta('target_uri') startsWith '/audio/'})" 
             - "evt.Overflow.Alert.GetScenario() == 'LePresidente/http-generic-403-bf' && any(evt.Overflow.Alert.Events, {.GetMeta('http_host') == 'example.com' && .GetMeta('target_uri') startsWith '/Items/' && .GetMeta('target_uri') contains 'PlaybackInfo'})"

Thanks for the help, and for fixing quick connect! Synfonium is definitely the best music player app out there for Android!