Reproduce browser-success/native-401 with unmodified upstream SESSION_SECURE=false behind HTTPS. Keep cookies in the existing HTTPS-only origin-bound encrypted jar regardless of the server Secure attribute; preserve TLS, redirect, expiry and origin protections. Distinguish credential/2FA rejection from missing/rejected session handoff and clear stale login errors on retry. Verify 13 JVM tests plus the 7-test real-server suite in both Secure/default-cookie modes, including bad-password then successful native login. Bump Android preview to 0.2.1/code 3; extend CI and document the defect without claiming access to the user's production server.
Yuvomi Mobile
Independent native Android (Kotlin/Jetpack Compose) and iOS (SwiftUI) clients for user-owned Yuvomi servers. Not affiliated with or endorsed by upstream.
Native rebuild in progress — not full PWA parity or production-ready.
The previous WebView wrapper did not meet the requested native implementation.
It is archived under legacy/ and is not the shipped application surface.
Read the feature-by-feature parity tracker and
current validation before installing a preview.
No mobile backend, advertisements, telemetry, tracking, subscriptions, or mandatory cloud.
The apps render native controls and call the existing server API. The server owns
authorization, recurrence, synchronization and household business rules.
Use a root-hosted HTTPS instance with a valid certificate, including private servers accessible through your VPN. Custom ports are supported. HTTP and subpath deployments are intentionally rejected. Enter the server on first launch; use Mehr to remove the native session and switch installations. The native client does not import a browser/WebView session; sign in again after upgrading the prototype.
- Architecture
- Native preview delivery report
- Android build / iOS build
- Compatibility and authentication
- Release process
- Gitea CI runners
- Maintainer continuation
MIT licensed. Upstream notices are preserved in THIRD_PARTY_NOTICES.md.
This implementation is AI-assisted (OpenAI via OpenCode) and requires human security
review before release. No upstream modification or public submission is authorized.