5 Commits

Include renames

Author	SHA256	Message	Date
Yuvomi Mobile Contributors	4b483c20e3	fix(android): retain HTTPS sessions with upstream default cookie flags ... Reproduce browser-success/native-401 with unmodified upstream SESSION_SECURE=false behind HTTPS. Keep cookies in the existing HTTPS-only origin-bound encrypted jar regardless of the server Secure attribute; preserve TLS, redirect, expiry and origin protections. Distinguish credential/2FA rejection from missing/rejected session handoff and clear stale login errors on retry. Verify 13 JVM tests plus the 7-test real-server suite in both Secure/default-cookie modes, including bad-password then successful native login. Bump Android preview to 0.2.1/code 3; extend CI and document the defect without claiming access to the user's production server.	2026-10-21 09:53:55 +02:00
Yuvomi Mobile Contributors	8c480ddca3	feat(android): replace WebView with tested native Compose API slice ... Add real native onboarding/auth/dashboard/tasks/notes/shopping, origin-bound HTTPS and encrypted AndroidKeyStore session persistence. Archive the superseded browser renderer and tests. Verify 10 JVM tests, 6 native API-35 emulator tests, lintDebug/lintRelease and debug/unsigned release APK/AAB builds; the real upstream suite passes 7 tests and exports a nonblank native fixture screenshot. Tink host-tool update removes the old generated-protobuf warning. Full module/visual parity remains explicitly incomplete.	2026-10-21 09:12:47 +02:00
Yuvomi Mobile Contributors	9ca11e4fb5	test: exercise native Android flows against pinned upstream HTTPS and OIDC ... Add an ephemeral HTTPS proxy and standards-shaped RS256/S256-PKCE test IdP around the unmodified upstream checkout. Require unlocked devices and nonempty, failure-free JUnit evidence. The extended API 35 suite passes all seven cases, including native Blob/file transfer, session recreation, outage recovery, isolated OIDC and back navigation; eight evidence-verifier regressions also pass. API 37 and real-provider/device validation remain release gates.	2026-10-21 07:32:17 +02:00
Yuvomi Mobile Contributors	2b9996ff3f	fix(android): harden origin isolation and native file lifecycles ... Block cross-origin POSTs, preserve bounded generated exports without relaxing CSP, bind picker results to their initiating context, erase camera cache and constrain platform permissions. Upgrade vulnerable build/test tooling and lock runtime/build dependencies. JVM regressions, lint and unsigned release builds pass; extended emulator validation remains separate.	2026-10-21 07:25:00 +02:00
Yuvomi Mobile Contributors	ed8d5cb1c1	feat(android): implement secure self-hosted companion and release builds ... Add native HTTPS onboarding, origin-bound WebView, isolated web authentication, persistent sessions, upload/camera picker, bounded authenticated downloads and recovery. Validate JVM policy tests, debug APK, lint and unsigned release APK/AAB. Build outputs can be relocated for WSL.	2026-10-20 23:24:45 +02:00