v6.2.10
Changed
SECURE_COOKIESauto-detection — Default changed fromtrueto auto-detect. The viewer now inspects theX-Forwarded-Protoheader and request scheme to set theSecurecookie flag automatically. Behind HTTPS reverse proxies it isSecure; over plain HTTP it is not. Explicittrue/falseoverride still works. This fixes silent login failures for users accessing the viewer over HTTP without setting the env var.
Fixed
- Archived chats visible in restricted viewers — The
/api/archived/countendpoint now respectsDISPLAY_CHAT_IDS, so the "Archived Chats" row only appears if there are actually archived chats visible to the viewer instance. - Doubled archived chats on first click — Fixed an infinite scroll race condition where navigating to the archived view could trigger a concurrent append fetch (stale
hasMoreChatsfrom the previous view), duplicating all chat entries on first visit.
📋 Full changelog: docs/CHANGELOG.md