URL parameter authentication for sharing test/demo accounts

[NivSv]

Summary

I've implemented URL parameter authentication to simplify sharing test/demo accounts.

Example: http://server/#/login?username=testuser&password=testpass

Status

✅ Already implemented and tested - seeking approval before submitting PR

Use Case

Primary use case: Share demo/test accounts with a single link instead of sending credentials separately.

Examples:

• Share with friends/family: Give access to a test account without explaining how to login
• Demo accounts: One-click access for people trying out your instance
• Guest access: Easy login for temporary users
• Automated Testing: CI/CD pipelines and browser automation tools
• Documentation: Include working login links in guides

Instead of:

1. "Go to my server"
2. "Username is testuser"
3. "Password is test123"

Just share: http://myserver/#/login?username=testuser&password=test123

Implementation

Modified src/controllers/session/login/index.js:

• Detects username and password URL parameters
• Handles already-logged-in users (redirect or switch accounts)
• Uses existing authenticateUserByName() function
• Supports redirect via url parameter
• ESLint and TypeScript checks pass

Documentation

If approved, I'm happy to:

• Write user documentation explaining the feature
• Include security warnings about credential exposure
• Provide examples for testing workflows

Questions

1. Is this acceptable for Jellyfin?
2. Should it have a server config option to enable/disable?
3. Any implementation concerns?

Seeking team feedback before submitting PR. Happy to make changes based on your input.

[thornbill]

This is terribly insecure, so it would never be accepted.