r-zakarya 3232f6f163 fix(android): the ETag dies with the plaintext it describes ...

Unlock, lock, download again: the app sent If-None-Match, got 304, and had nothing to show - on Windows there is no local cache to fall back on, so the only way back in was restarting. FETag outlived the vault it belonged to; LockVault now clears it. The 304 branch also stopped re-reading the cache file (which can fail on an expired authentication) and serves the plaintext it already holds - in memory, or the copy read at the start of the call.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-08-15 06:04:43 +01:00

android-client

feat(crypto): wire AES-GCM and PBKDF2 to Windows CNG

2026-08-15 05:59:36 +01:00

css

fix(list): keep the header gap constant when it sticks

2026-08-02 00:09:33 +01:00

delphi-backend

feat(backup): include the trash in exports and auto-backups

2026-08-07 15:04:41 +01:00

js

fix(import): count the trash when deduplicating by uuid

2026-08-07 17:35:40 +01:00

server-php

fix(sync-php): read Authorization via getallheaders and tolerate ETag forms

2026-08-14 17:58:48 +01:00

.gitattributes

fix(android): overload both Cipher.init declarations, restore CRLF line endings

2026-08-15 00:49:37 +01:00

.gitignore

feat(android): prefill the sync password from a local, untracked include

2026-08-15 01:04:08 +01:00

AndroidManifest.template.xml

feat(android): HTTP client for the sync endpoint, with ETag reuse

2026-08-14 23:37:06 +01:00

api.php

Add CSP header and session rotation on login

2026-05-09 22:24:08 +01:00

CLAUDE.md

feat(backup): include the trash in exports and auto-backups

2026-08-07 15:04:41 +01:00

CODE_AUDIT.md

fix(kdf): neutralize the /migrate-kdf endpoint server-side (6c-1 / 6c-4)

2026-07-20 05:43:39 +01:00

icon-hex-16.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-hex.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-key.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-shield.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-vault.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

index.html

feat(autofill): Ctrl+Shift+T types the 2FA code

2026-07-25 16:53:00 +01:00

mainApk.fmx

feat(android): crypto self-test harness on the new FMX project

2026-08-14 18:29:12 +01:00

mainApk.pas

fix(android): the ETag dies with the plaintext it describes

2026-08-15 06:04:43 +01:00

package.json

test: add frontend unit suite + fix mixed local/UTC timestamps

2026-07-04 19:17:33 +01:00

pmserverApk.deployproj

feat(android): end-to-end read path validated on device, add the container diagnostic

2026-08-15 00:31:01 +01:00

pmserverApk.dpr

feat(android): read-only viewer - unlock, search, detail

2026-08-15 01:19:47 +01:00

pmserverApk.dproj

fix(android): declare KeySpec so the native PBKDF2 call resolves, and report why it fails

2026-08-14 23:22:56 +01:00

security-issues.md

Mark resolved issues in security-issues.md

2026-05-09 22:29:09 +01:00

test_pbkdf2.php

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

TEST_PLAN.md

feat: PIN unlock + table column picker + edit-position chooser + UX

2026-06-29 04:41:39 +01:00

TEST_REGRESSION.md

feat: sticky slideover Save + uncategorised-view polish + regression plan

2026-07-01 13:04:45 +01:00

TEST_SCENARIOS.md

fix(import): count the trash when deduplicating by uuid

2026-08-07 17:35:40 +01:00

TEST_SYNC.md

feat: WebDAV sync + batch DnD + clean shutdown + center-modal UX bundle

2026-06-30 00:32:12 +01:00

S

Description

full local password manager

24 MiB

Languages

Pascal 46.7%

JavaScript 35.4%

HTML 9.4%

CSS 4.9%

PHP 2.1%

Other 1.4%