feat: HMAC-sign cached account info to close subscription tampering (#80)
check.yml #166 -Commit
2d7d1e05d2
pushed by
maximus
feat: HMAC-sign cached account info to close subscription tampering (#80)
check.yml #165 -Commit
2d7d1e05d2
pushed by
maximus
ci: install libdbus-1-dev for keyring build, drop appimage target (#79)
check.yml #164 -Commit
481018e1e3
pushed by
maximus
ci: install libdbus-1-dev for keyring build, drop appimage target (#79)
check.yml #163 -Commit
481018e1e3
pushed by
maximus
feat: migrate OAuth tokens to OS keychain via token_store (#78)
check.yml #162 -Commit
feaed4058d
pushed by
maximus
feat: migrate OAuth tokens to OS keychain via token_store (#78)
check.yml #161 -Commit
feaed4058d
pushed by
maximus
fix(deps): bump vite to 6.4.2 to resolve GHSA-4w7w-66w2-5vf9 and GHSA-p9ff-h696-f583
check.yml #160 -Commit
813d29e38a
pushed by
maximus
fix(deps): bump vite to 6.4.2 to resolve GHSA-4w7w-66w2-5vf9 and GHSA-p9ff-h696-f583
check.yml #159 -Commit
813d29e38a
pushed by
maximus
fix: use on_open_url for OAuth deep-link callback
release.yml #158 -Commit
f5d74b4664
pushed by
maximus
fix: temporarily open auto-update to Free edition
release.yml #157 -Commit
f14ac3c6f8
pushed by
maximus
fix: wire single-instance plugin for OAuth deep-link callback
release.yml #156 -Commit
88e1fff253
pushed by
maximus
fix: remove handle_auth_callback from invoke_handler
check.yml #154 -Commit
e314bbe1e3
pushed by
maximus
fix: remove handle_auth_callback from invoke_handler
check.yml #153 -Commit
e314bbe1e3
pushed by
maximus
fix: tighten CSP img-src, show initials instead of external avatar
check.yml #152 -Commit
60b995394e
pushed by
maximus
fix: tighten CSP img-src, show initials instead of external avatar
check.yml #151 -Commit
60b995394e
pushed by
maximus
fix: restrict last_check file perms + add useAuth to architecture docs
check.yml #150 -Commit
4e92882724
pushed by
maximus
fix: restrict last_check file perms + add useAuth to architecture docs
check.yml #149 -Commit
4e92882724
pushed by
maximus
fix: use write_restricted for account.json (0600 perms)
check.yml #148 -Commit
ca3005bc0e
pushed by
maximus
fix: use write_restricted for account.json (0600 perms)
check.yml #147 -Commit
ca3005bc0e
pushed by
maximus
fix: use base64 crate, restrict token file perms, safer chrono_now
check.yml #146 -Commit
9e26ad58d1
pushed by
maximus
fix: use base64 crate, restrict token file perms, safer chrono_now
check.yml #145 -Commit
9e26ad58d1
pushed by
maximus
fix: URL-decode auth code + replace Mutex unwrap with map_err
check.yml #144 -Commit
be5f6a55c5
pushed by
maximus
fix: URL-decode auth code + replace Mutex unwrap with map_err
check.yml #143 -Commit
be5f6a55c5
pushed by
maximus
feat: Maximus Account OAuth2 PKCE + machine activation + subscription check (#51, #53)
check.yml #142 -Commit
b53a902f11
pushed by
maximus
feat: Maximus Account OAuth2 PKCE + machine activation + subscription check (#51, #53)
check.yml #141 -Commit
b53a902f11
pushed by
maximus
feat: gate auto-updates behind license entitlement (#48)
check.yml #137 -Commit
6d67ab8935
pushed by
maximus