r-zakarya 138abea88d fix(android): Sync ouvrait le coffre sans demander le code ...

Le garde de DoSync ne couvrait que l'empreinte, et les deux protections
s'excluent : un cache scelle par un code porte VER_PIN, donc
VaultNeedsAuth y est FAUX. Synchroniser reconstruisait le coffre depuis
le depot et l'affichait sans que le code soit demande - il ne gardait
qu'un bouton sur deux.

Exiger un champ rempli n'aurait rien valu : le depot est scelle par le
mot de passe de sync, pas par le code, donc rien ici ne le confronte a
quoi que ce soit et n'importe quelle frappe serait passee. Seul LoadVault
sait si le code est le bon, et c'est "Open vault" qui l'appelle - d'ou le
renvoi vers lui.

Place AVANT ReconcileWithRemote et PublishPending, qui sortent de DoSync
par leurs propres chemins.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-08-28 12:41:36 +01:00

android-client

feat(android): l'accueil ne repete plus Settings quand le coffre est la

2026-08-28 12:36:49 +01:00

css

fix(list): keep the header gap constant when it sticks

2026-08-02 00:09:33 +01:00

delphi-backend

feat(autofill): la barrette revient allumee si elle l'etait

2026-08-27 14:26:18 +01:00

js

feat: the last three passwords travel, and the phone can show them

2026-08-22 16:14:04 +01:00

server-php

fix(sync-php): read Authorization via getallheaders and tolerate ETag forms

2026-08-14 17:58:48 +01:00

.gitattributes

fix(android): overload both Cipher.init declarations, restore CRLF line endings

2026-08-15 00:49:37 +01:00

.gitignore

build(android): build and sign a release, without the password touching anything

2026-08-22 01:05:42 +01:00

AndroidManifest.template.xml

chore(android): section 5 - ten permissions down to three, no secrets in release

2026-08-21 17:38:46 +01:00

api.php

Add CSP header and session rotation on login

2026-05-09 22:24:08 +01:00

CLAUDE.md

feat(autofill): la barrette revient allumee si elle l'etait

2026-08-27 14:26:18 +01:00

CODE_AUDIT.md

fix(kdf): neutralize the /migrate-kdf endpoint server-side (6c-1 / 6c-4)

2026-07-20 05:43:39 +01:00

icon-hex-16.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-hex.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-key.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-shield.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-vault.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

index.html

feat(desktop): sync to a private Gitea repo, chosen by the URL

2026-08-17 14:37:39 +01:00

mainApk.fmx

feat(android): crypto self-test harness on the new FMX project

2026-08-14 18:29:12 +01:00

mainApk.pas

fix(android): Sync ouvrait le coffre sans demander le code

2026-08-28 12:41:36 +01:00

make-icons.ps1

feat(android): blue instead of cyan, everywhere at once

2026-08-15 19:55:06 +01:00

package.json

test: add frontend unit suite + fix mixed local/UTC timestamps

2026-07-04 19:17:33 +01:00

pmserverApk.deployproj

docs(android): the adb reverse tunnel dies with the USB link

2026-08-15 13:00:28 +01:00

pmserverApk.dpr

feat(android): an entry can get its icon, through the same relay as the desktop

2026-08-22 15:39:19 +01:00

pmserverApk.dproj

feat(android): Skia renders the text, so Arabic reads properly

2026-08-15 15:44:43 +01:00

security-issues.md

Mark resolved issues in security-issues.md

2026-05-09 22:29:09 +01:00

test_pbkdf2.php

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

TEST_PLAN.md

feat: PIN unlock + table column picker + edit-position chooser + UX

2026-06-29 04:41:39 +01:00

TEST_REGRESSION.md

feat: sticky slideover Save + uncategorised-view polish + regression plan

2026-07-01 13:04:45 +01:00

TEST_SCENARIOS.md

fix(import): count the trash when deduplicating by uuid

2026-08-07 17:35:40 +01:00

TEST_SYNC.md

feat: WebDAV sync + batch DnD + clean shutdown + center-modal UX bundle

2026-06-30 00:32:12 +01:00

S

Description

full local password manager

24 MiB

Languages

Pascal 46.7%

JavaScript 35.4%

HTML 9.4%

CSS 4.9%

PHP 2.1%

Other 1.4%