Is your feature request related to a problem? Please describe.
I’m using netbird reverse proxy to expose multiple home-server services. One of which, Jellyfin. Overall I want to expose it to certain people but would prefer not having to deal with having them installing netbird, since most of them want to use it on a random TV OS.
Describe the solution you’d like
The idea came from here GitHub - zuavra/nginx-ip-whitelister: Forward authenticator for Nginx auth_request or Caddy forward_auth that whitelists remote IP address if a key is presented in URL. · GitHub
Basically I would like to have a way to whitelist and IP for X amount of time.
The difference and easier way to integrate it with Netbird, would be to still have a way to use SSO/Password/PIN Code existing authentication options but have the setting to whitelist the source public IP they made the request from for X amount of time.
Imagine the scenario.
User opens https://jellyfin.example.com on their phone/laptop. Their source IP is added to a “passthrough” whitelist and now they can use their Jellyfin TV app for X amount of time until they have to re-auth.
Yes, there’s a risk factor of course, doing this from a untrusted public network or CGNAT ISP, but the risk is still considerably lower vs doing something like country geo-block or similar.
Thoughts?