Skip to content

v0.6.8 — Jan remote connections + keychain fix

Choose a tag to compare

@skeptict skeptict released this 18 Mar 19:37
· 530 commits to main since this release

What's new

Bug fixes

  • Jan remote connections: Jan validates the Host header for DNS-rebinding protection and rejects IP addresses. DTS now sends Host: localhost for all Jan requests, so remote Jan instances (e.g. 192.168.1.25) work correctly.
  • Jan API key persistence: kSecUseDataProtectionKeychain silently failed on ad-hoc/Debug builds (no team ID → errSecMissingEntitlement), causing the API key to reset to empty on every launch. Switched to the standard login keychain — API key now persists correctly.
  • Connection error clarity: 401/403 responses now show "Unauthorized — check API key" instead of the generic "Invalid response". HTTP status code shown for other failures.
  • Jan settings hint: Updated to explain where to find the API key (Jan Settings → Developers) and how to enable remote access.

LoRA browsing (HTTP)

  • /sdapi/v1/loras returning 404 (endpoint not implemented in Draw Things HTTP API) now returns an empty list gracefully instead of throwing. Status message clarifies LoRA browsing requires gRPC transport.