You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Jan remote connections: Jan validates the Host header for DNS-rebinding protection and rejects IP addresses. DTS now sends Host: localhost for all Jan requests, so remote Jan instances (e.g. 192.168.1.25) work correctly.
Jan API key persistence: kSecUseDataProtectionKeychain silently failed on ad-hoc/Debug builds (no team ID → errSecMissingEntitlement), causing the API key to reset to empty on every launch. Switched to the standard login keychain — API key now persists correctly.
Connection error clarity: 401/403 responses now show "Unauthorized — check API key" instead of the generic "Invalid response". HTTP status code shown for other failures.
Jan settings hint: Updated to explain where to find the API key (Jan Settings → Developers) and how to enable remote access.
LoRA browsing (HTTP)
/sdapi/v1/loras returning 404 (endpoint not implemented in Draw Things HTTP API) now returns an empty list gracefully instead of throwing. Status message clarifies LoRA browsing requires gRPC transport.