dustin/melo-app
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Security: Cloud-Auth auf Bearer-JWT umgestellt (IDOR-Luecke geschlossen)

Browse Source 
- cloud_service: echter Login gegen baka-auth, Token statt X-API-Key/X-User
- app_config: hartcodierten API-Key-Default entfernt
- download_service + melo_logger: Bearer-Token statt X-API-Key
- navidrome: Passwort in flutter_secure_storage (Keychain/Keystore)
- song: token-haltige stream_url wird nicht mehr in SQLite persistiert
- cloud_screen: Pfad-Traversal beim Download-Dateinamen gefixt (p.basename)
- home_screen: Login-Dialog mit Passwort-Feld, Auto-Sync nutzt restoreLogin
This commit is contained in:
Hermes (Server)
2026-07-31 14:31:12 +02:00
parent 3e9389ab59
commit 9a880b0f21
17 changed files with 1552 additions and 181 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pubspec.yaml
+2 -4
View File
@@ -28,14 +28,12 @@ dependencies:
# HTTP (Navidrome Server-Sync)
http: ^1.2.0
crypto: ^3.0.6
# UI
cupertino_icons: ^1.0.8
flutter_secure_storage: ^10.3.1
dev_dependencies:
flutter_test:
sdk: flutter
flutter_lints: ^6.0.0
flutter_lints: ^5.0.0
flutter:
uses-material-design: true