fixing authentication for services

Just want to share the results of some tinkering and maybe get people's input. I use Jellyfin, but as we all know, it doesn't really support OIDC and what it does have I wasn't comfortable exposing to the internet. So, using Authentik, i set up proxy authentication for it, meaning you hit Authentik before anything and get redirected to Jellyfin only if you log in successfully. This seemed to work great, but the Jellyfin Android app could not log in anymore, as the API calls were not being handled by this setup. I could still log in from a browser, but I kind of don't like that approach and I was wondering if there was some solution like electron apps on linux. Since I have no experience at this part, I ended up vibe-coding an apk, that uses webview and basically does exactly that, you get an app, but it just runs a browser to a fixed web address and without seeing the browser controls. In the end, this solution seems to work great. However, It's the first time I blindly vibe coded like this, I literally have no idea of the bits and pieces that went into the apk, I mean, the AI explained the pieces it was gonna use, but I completely space out at the code it spat out. Weirdest feeling, however, I assume that since everything uses HTTPS, and I own the services it goes to and the phone running the apk, it can't have that many security holes ... Thoughts?