fix(security): harden Android notification receivers, token storage, and deep-link login - #7447

Open

OtavioStasiak wants to merge 26 commits into

fix.expose-broadcast-receiver-vulnerability

Commits on Jun 25, 2026

fix(security): scope auth token to (server, userId), stop exporting notification receivers, confirm
OtavioStasiak
committed
eefff9f
action: organized translations
OtavioStasiak
committed
8c9c908

Commits on Jul 1, 2026

Commits on Jul 2, 2026

chore: simplify comments
OtavioStasiak
committed
169246d
chore: i18n translation
OtavioStasiak
committed
0781686
refactor: extract token migration out of init saga into a tested async function
OtavioStasiak
committed
bdf531a
action: organized translations
OtavioStasiak
committed
36d748b
refactor(android): extract legacy token fallback into deprecated method
OtavioStasiak
committed
109a79c
refactor: dedupe migration constant, extract legacy token fallback, and simplify comments
OtavioStasiak
committed
473d490

Commits on Jul 3, 2026

fix: e2e test login on ios
OtavioStasiak
committed
9f209ae

Commits on Aug 12, 2026

Merge branch 'develop' into fix.expose-broadcast-receiver-vulnerability
OtavioStasiak
committed
879aaf1
fix: tests
OtavioStasiak
committed
f1f8fdd

Commits on Aug 14, 2026

Commits on Aug 20, 2026