v1.2.1

Plex Photos Screensaver 1.2.1

Needs Kiosk Satellite 2026.10.36 or newer. Update Kiosk Satellite before updating the plugin. Older versions refuse to install this release.

Changed

• Renamed to Plex Photos Screensaver. The plugin ID is unchanged, so your settings and screensaver selection carry over. The screensaver mode is still called Plex Photos.
• The Plex token is now a secret setting. Plugin Manager and the remote admin mask it and only let you replace or clear it. The plugin still encrypts it with a key held in the kiosk's Android Keystore.
• Settings are saved one at a time. When the plugin saves a setting itself, such as after Sign in with Plex, it now saves only what changed, so an edit you're making at the same time isn't overwritten.

Added

• An icon for Community Plugins and Browse plugins.
• README sections on installation, including the Install in Kiosk Satellite button, and on where your data goes: your Plex server, and plex.tv only during sign-in.

Upgrading

Update from Plugin Manager. No sign-in is needed. Your saved token is kept and stays encrypted.

This plugin is not affiliated with Plex, Inc.

v1.2.0

Sign in with Plex and store the token encrypted (1.2.0)

Sign in with Plex
- New "Sign in with Plex" switch and command. The kiosk gets a code from
  plex.tv and shows it in a floating window, the plugin status and, when
  nothing is set up yet, on the screensaver. Entering it at plex.tv/link
  hands the kiosk a token, so nobody copies tokens around.
- After sign-in the plugin lists the account's servers and picks an
  address that answers as that server: the plex.direct HTTPS address
  first, then plain HTTP on the LAN, never relays. A configured address is
  kept and matched to its server's own token.
- Each kiosk gets its own client ID and reports its KS device name, so
  each appears separately under Plex's Authorized Devices and can be
  signed out on its own.

Encrypted token
- The token is saved encrypted with an AES-GCM key held in the Android
  Keystore, so the value KS shows in its settings and remote admin cannot
  be used elsewhere. A pasted token is encrypted as soon as it is saved;
  1.1.0 tokens are encrypted on first start.
- If the key is lost (KS data cleared or reinstalled) the plugin asks to
  sign in again. If a tablet cannot encrypt, it says so and keeps the
  token unencrypted.

Adds the overlay capability for the sign-in window, vault tests to
tools/test.sh, and README sections on signing in and token storage.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01H7i3hoEzhLE1GvMg1MDCHG

v1.1.0

Add Buy Me a Coffee button and GitHub funding link

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01H7i3hoEzhLE1GvMg1MDCHG