Yuvomi Mobile Contributors 4b483c20e3
Android validation / emulator (37.0) (push) Failing after 3s
Android validation / emulator (35) (push) Failing after 9s
iOS validation / simulator (push) Successful in 1m48s
Android validation / build (push) Successful in 5m10s
fix(android): retain HTTPS sessions with upstream default cookie flags
Reproduce browser-success/native-401 with unmodified upstream SESSION_SECURE=false behind HTTPS. Keep cookies in the existing HTTPS-only origin-bound encrypted jar regardless of the server Secure attribute; preserve TLS, redirect, expiry and origin protections. Distinguish credential/2FA rejection from missing/rejected session handoff and clear stale login errors on retry. Verify 13 JVM tests plus the 7-test real-server suite in both Secure/default-cookie modes, including bad-password then successful native login. Bump Android preview to 0.2.1/code 3; extend CI and document the defect without claiming access to the user's production server.
2026-10-21 09:53:55 +02:00

Yuvomi Mobile

Independent native Android (Kotlin/Jetpack Compose) and iOS (SwiftUI) clients for user-owned Yuvomi servers. Not affiliated with or endorsed by upstream.

Native rebuild in progress — not full PWA parity or production-ready. The previous WebView wrapper did not meet the requested native implementation. It is archived under legacy/ and is not the shipped application surface. Read the feature-by-feature parity tracker and current validation before installing a preview. No mobile backend, advertisements, telemetry, tracking, subscriptions, or mandatory cloud. The apps render native controls and call the existing server API. The server owns authorization, recurrence, synchronization and household business rules.

Use a root-hosted HTTPS instance with a valid certificate, including private servers accessible through your VPN. Custom ports are supported. HTTP and subpath deployments are intentionally rejected. Enter the server on first launch; use Mehr to remove the native session and switch installations. The native client does not import a browser/WebView session; sign in again after upgrading the prototype.

MIT licensed. Upstream notices are preserved in THIRD_PARTY_NOTICES.md. This implementation is AI-assisted (OpenAI via OpenCode) and requires human security review before release. No upstream modification or public submission is authorized.

S
Description
No description provided
Readme MIT
1.2 MiB
0 Stars 1 Watchers 0 Forks
Languages
Kotlin 61%
Swift 22.6%
Python 11.1%
JavaScript 4.8%
Shell 0.5%