Changelog von Registration

• A TV waiting for registration gets "503, retry" in the first seconds after the server starts (before: 500), with no error in the log (K22).

• Quick Connect: the automatic approval of the screen after sign-up receives the visitor's real address (needed by Quick Connect 0.1.5, which signs in a screen by itself only when it is on the local network or at the same address).
• Security: the visitor's address can no longer be spoofed with the X-Forwarded-For header. The plugin starts from the real connection address and reads X-Forwarded-For / X-Real-IP only from trusted proxies (new setting "Trusted proxies", empty = only a proxy on the same server) and CF-Connecting-IP / CF-IPCountry only from Cloudflare's network (new setting "The server is behind Cloudflare", on by default; also on automatically when Edge Shield has its zone connected). Per-address limits, wrong-code blocks, the "one request per address" rule and the country/network filter can no longer be bypassed.
• Security: the TV showing the QR code no longer receives the account password: when the account becomes active, the server creates a new session just for that TV. The phone shows "This will also sign in: (code …)" with an explicit checkbox (the same for a Quick Connect code); without it the account is created without signing in another screen. The QR code expires after 10 minutes; at most 5 open codes per address, and every start counts towards the limit.
• Security: on the admin page, text that comes from visitors (for example the browser) is now fully escaped inside attributes too.
• Wrong code attempts and statistics counters no longer rewrite the data file on every anonymous request; the block and attempt lists are capped (5000) and pruned; abuse alerts to the admin are grouped (at most one every 10 minutes, with the number grouped).
• Approving, rejecting, activating after payment and email confirmation are atomic: a double click or a payment arriving together with an approval no longer sends duplicate emails.
• Turnstile: the token must have been solved on the "Public address" host; the check is required only when both keys are set. The browser report accepts only known steps. A new family code must have at least 8 characters (the existing one keeps working).
• Licensing: license server responses must be sealed, release descriptors (update / rollback) are signature-checked, exported logs no longer contain tokens.
• Fixed: the Turnstile widget on the registration page did not start (its container is now called cf-turnstile).
• For other MediaLab plugins: the Turnstile keys can also be used by MediaLab TV (Registration.Integration.SharedTurnstile).

• Privacy: the payment QR code on the License page is now generated locally, in the page; the payment link is no longer sent to a third-party QR service (api.qrserver.com).
• Privacy: the SMTP password, the Telegram bot token, the Turnstile secret key and the form HMAC key are no longer stored in plain text in the plugin configuration: they are encrypted at rest (AES-256-GCM, random key bound to the server id, files with mode 600 in the plugin data folder) and are never sent to the browser. The page only shows "set ✓" — type a new value to replace it or press "Clear". On first start the existing values are moved automatically and blanked in the XML; nothing has to be re-entered.

• Fixed: Telegram notifications to the admin failed in the published build with a serialization error. The cause was the obfuscation (anonymous types serialized with System.Text.Json); builds are now checked automatically on every release.

• Quick Connect integration: a form opened from the Quick Connect page keeps the screen's code, and when the account becomes active (approved automatically, by an admin, or after payment through Cashier) the waiting screen signs in with the new account by itself (if the setting is on in Quick Connect 0.1.2+). New integration points for other plugins: account created / account active.
• The log is no longer sent automatically when changing the sign-in screen fails: only if the admin turned on automatic log sending.

• The TV app was removed from the plugin (the /emby/Registration/Tv/ address no longer exists).
• After signing in from a TV, the registration page no longer saves the account password in the browser: it keeps only the Emby token, as with a normal Emby Web sign-in.
• Author: MediaLab Works.

• TV app without an active license: the notice now appears in the browser's language (English or Romanian) and with the app's styling (previously the styling was blocked by the page's security policy). Without a license, the app's script is no longer served at all.

• The TV app is now included in the plugin and served at /emby/Registration/Tv/index.html (only with an active license): it no longer has to be copied into Emby's web folder after every update, and it updates or rolls back together with the plugin. The old /web/tv/ address can stay as a redirect.
• Licensing: "Install update" and rollback check the license right before running (at most once an hour: a successful response less than an hour old is reused), require a valid license and show the reason when the platform refuses (update period expired, license expired, etc.). Rolling back to the previous allowed version is also available when the version you run is covered (button on the License page). The "Check now" button respects the platform's rate limit.

• Licensing: a problem reading the plugin file can no longer block the license check. Previously, the error "The value cannot be an empty string (Parameter 'path')" could prevent activation and the daily check.
• Registration page: the phone country list is wider, so the country name is visible.
• Also includes 1.10.0 (not published separately): sign-up from TV to phone (QR code), integration with Cashier, and the sign-in screen change is reapplied automatically.
• The admin pages follow the display language chosen in Emby (Settings → Display → Language). On Emby 4.10 they previously always appeared in English.
• Licensing: when your email address already has a medialab.works account, the payment link (trial or purchase) is sent only by email and is no longer shown in the plugin. The License page shows the server's message as a notice in the "Payment in progress" card (no payment button or QR code), keeps the payment pending and checks for it until the link expires (24 hours: every 5 seconds in the first hour, then once a minute); after that it shows "The payment link has expired". Nothing changes for new addresses.

• If the license was moved to another server or the hardware changed, you now get a clear message with instructions (enter your key again).
• The hardware fingerprint stays stable across restarts (Docker, VPN and bridge interfaces, and the order of network interfaces, are ignored).

• Without a valid license the plugin stops working.
• The license status is shown in the page header.
• Automatic updates from GitHub were removed: updates come only from medialab.works, based on your active license.

First public release: medialab.works licensing, interface in English and Romanian, compatible with Emby 4.10.