ZL154/JellyfinSecurity v1.2.3

v1.2.3 — Fast-fail bad logins + Setup link in sidebar AND settings

on GitHub

Fixes

• Wrong-password latency. `RequestBlockerMiddleware` was running Jellyfin's claim resolver on every `AuthenticateByName` POST because the `X-Emby-Authorization` client-metadata header was being misread as a real auth token. Bad credentials now fail fast.

• Setup link visibility. "Two-Factor Auth" now appears in:

  • Jellyfin's main side drawer (next to Settings)
  • The per-user settings drawer
  • The settings page tile list (`#!/mypreferencesmenu.html`)

  Selectors broadened so it survives custom themes (STARTRACK and friends).

Upgrade

Install v1.2.3 over v1.2.2 and hard-refresh every browser (Ctrl+Shift+R) so the new `inject.js` loads.