3 Commits

Include renames

Author	SHA256	Message	Date
Yuvomi Mobile Contributors	9ca11e4fb5	test: exercise native Android flows against pinned upstream HTTPS and OIDC ... Add an ephemeral HTTPS proxy and standards-shaped RS256/S256-PKCE test IdP around the unmodified upstream checkout. Require unlocked devices and nonempty, failure-free JUnit evidence. The extended API 35 suite passes all seven cases, including native Blob/file transfer, session recreation, outage recovery, isolated OIDC and back navigation; eight evidence-verifier regressions also pass. API 37 and real-provider/device validation remain release gates.	2026-10-21 07:32:17 +02:00
Yuvomi Mobile Contributors	2b9996ff3f	fix(android): harden origin isolation and native file lifecycles ... Block cross-origin POSTs, preserve bounded generated exports without relaxing CSP, bind picker results to their initiating context, erase camera cache and constrain platform permissions. Upgrade vulnerable build/test tooling and lock runtime/build dependencies. JVM regressions, lint and unsigned release builds pass; extended emulator validation remains separate.	2026-10-21 07:25:00 +02:00
Yuvomi Mobile Contributors	ed8d5cb1c1	feat(android): implement secure self-hosted companion and release builds ... Add native HTTPS onboarding, origin-bound WebView, isolated web authentication, persistent sessions, upload/camera picker, bounded authenticated downloads and recovery. Validate JVM policy tests, debug APK, lint and unsigned release APK/AAB. Build outputs can be relocated for WSL.	2026-10-20 23:24:45 +02:00