Fixed (licensing): the license key field is always visible, so a new key can be activated even while the saved license still shows as active; a refused key no longer replaces the saved key and the page shows why; when the last check fails (for example a deleted or revoked license), the page and the log show a warning with the date until which the saved license keeps working; activation, manual checks and release are written to the log.
Plan Guard changelog
Every published version, newest first. Downloads are in your account; subscriptions and trials always get the latest version, lifetime licenses get updates within their update window.
0.1.2
Requires Emby Server 4.10.1.0+- Security: the stream limit counts real playback requests (per login and title), not just playback reported by the app or the DeviceId — a second login with the same DeviceId or a player that does not report playback no longer bypasses the limit; "Stopped" no longer resets escalation; /Items/{id}/File, downloads and HLS segments are included (unknown media routes are treated as streams); the quality cap (bitrate, height) also applies to direct requests, and direct play above the cap is refused; sharing history is capped per account.
- Security (Emby): the real client address comes from the connection; X-Forwarded-For is used only from loopback or from the trusted proxies in a new setting; new option "treat every client as outside the network".
- New: Library Guard — Emby does not check libraries on direct by-id requests; Plan Guard now answers 404 for titles the user cannot see (details, series/season lists, PlaybackInfo, stream, HLS, download); admins and Share Links guests are not affected; setting on the page.
- Security (licensing): logs sent to medialab.works or exported no longer contain tokens, passwords or keys (lines are selected by the plugin's logger and secrets are masked); unencrypted license-server replies are refused; update and rollback install only packages with a verified MediaLab signature (and a size limit); the log export no longer puts the token in the URL; the License page escapes text in attributes correctly.
- Fixed: the active-license badge in the page header is readable on the dark theme (the text is no longer black).
- Author: MediaLab Works.
- Also includes the privacy changes from 0.1.1: the payment QR code on the License page is generated locally, the payment link is no longer sent to a third-party QR service.
0.1.1
Requires Emby Server 4.10.1.0+- Privacy: the payment QR code on the License page is now generated locally, in the page; the payment link is no longer sent to a third-party QR service (api.qrserver.com).
0.1.0
Requires Emby Server 4.10.1.0+- First release: Streaming limits per user or per plan, enforced live, plus detection of accounts shared with other people.