Quick Connect changelog

Fixed (licensing): the license key field is always visible, so a new key can be activated even while the saved license still shows as active; a refused key no longer replaces the saved key and the page shows why; when the last check fails (for example a deleted or revoked license), the page and the log show a warning with the date until which the saved license keeps working; activation, manual checks and release are written to the log.

• Fixed: the screen no longer gets stuck without a code and QR code when its network reached 5 pending requests (all devices behind the same NAT share the limit). A screen gets its own code back (lifetime extended) instead of a new one, and its own requests no longer count toward the per-network limit.
• New: one-tap approval on the same local network. When the phone is already signed in to the server and the waiting screen is on the same network, the phone page shows "Approve screen" and a single tap approves — no confirmation digits. From another network the flow with the digits on the screen is unchanged (QC-1 intact).
• Robustness: the screen checks for an existing session even when the settings (ScreenSettings) cannot be read — it no longer shows the code pointlessly to an already signed-in browser.
• Maintenance: silently swallowed exceptions from the website-patch check and license startup now reach the log.
• The screen marks its code on the server (15 minutes, code + IP only) for the network comparison of the one-tap approval.

• Security: the phone page shows a warning ("approve only if you can see the code on a screen in front of you"). When the code comes from a link or the QR code, the page no longer shows the digits, and the 6 digits on the screen must be typed before approving: a received link can no longer be approved with a single tap.
• Security: "Administrators cannot approve" is on by default for new installs; existing installs keep their saved setting.
• Security: the wrong-attempt limit now also applies per account, and for IPv6 to the whole /64 prefix; attempt counters are cleaned up periodically.
• Licensing: unsealed license-server responses are rejected, versions offered for update or rollback must be signed, sent logs are redacted.

• Privacy: the payment QR code on the License page is now generated locally, in the page; the payment link is no longer sent to a third-party QR service (api.qrserver.com).
• If the browser already has a valid session on this server, the screen skips the code and goes straight to the configured destination (Jellyfin Web or the Netflix-style MediaLab TV page, which gets ?fs=1 and offers full screen). ?switch=1 still shows the code (another account). New panel button: “MediaLab TV (Netflix-style)”.

• The after-sign-in address is set in the panel: the screen can open Jellyfin Web (default), the TV web interface or any path/https address the admin chooses.
• Local and external addresses (HTTPS only): the external address may use a different name and SSL port than the local one. The screen shows both, and the QR code opens the external address (or the local one, if preferred). The panel suggests the local address from the Jellyfin network settings.

• Corrected plugin repository link.

• First release: a phone page with a QR code that approves the Quick Connect code of any Jellyfin app (with the phone's Jellyfin session or with username and password); a screen with a code and QR code for TV browsers, which then signs in to Jellyfin Web; attempt limits, disabled accounts refused; an admin panel with the Quick Connect status, settings and recent approvals. Author: MediaLab Works.