Fixed (licensing): the license key field is always visible, so a new key can be activated even while the saved license still shows as active; a refused key no longer replaces the saved key and the page shows why; when the last check fails (for example a deleted or revoked license), the page and the log show a warning with the date until which the saved license keeps working; activation, manual checks and release are written to the log.
Share Links changelog
Every published version, newest first. Downloads are in your account; subscriptions and trials always get the latest version, lifetime licenses get updates within their update window.
0.1.4
Latest- Security (important): a link's guest user (share-…) now gets a long random password that nobody knows. Before, it was created without a password, and anyone with an account on the server could find it in the user list and sign in as it with an empty password, bypassing the link's proxy. On startup, guests created by earlier versions also get a random password.
- Security: the guest still sees only the libraries of the link's titles (Jellyfin needs library access for playback), and its token stays on the server; a code comment explains why it cannot be narrower.
- Security: lockouts after wrong attempts (per IP, and a link's PIN lock from any IP) are kept on disk and stay in force after a restart.
- Extending a link now needs an active license, like the other admin actions; playback reporting sends the same security headers as the other public routes.
- License: license-server responses are accepted only encrypted and signed (including update and rollback offers), with protection against a clock set back; the log export is safer.
- Also included from 0.1.1–0.1.2: the "Share" button and "My links" on medialab Server; the payment QR code on the License page is generated locally.
On medialab Server: a Share button on the title page and My links in the web client menu, for users allowed to share. No change on official Jellyfin.
First release: expiring links to a movie, episode, season or series for people without an account, opened in a browser or on a TV with a short code or QR, in the plugin's own player; a hidden temporary guest user per link whose token never leaves the server, an allowlist proxy, optional PIN, opens and viewers limits, bitrate cap, brute-force locks, sharing by regular users with 30-day quotas (Cashier plans), My links page, EN/RO.