Michael Schättgen
1f69bf558e
Temporarily disable failed test output in Github Actions
2 years ago
Michael Schättgen
dd88f5bb0c
Fix crash when using non latin language
2 years ago
elena
af9be15ae0
Reveal hidden code on HOTP increment click
2 years ago
Alexander Bakker
8562fafda7
Release v2.1-beta1
2 years ago
Alexander Bakker
708a5f4a19
Update translations from Crowdin
2 years ago
Alexander Bakker
fcc7b7baa2
Use MaterialDividerItemDecoration for compact view mode
...
This allows us to disable the divider for the "Showing x entries" footer
2 years ago
Alexander Bakker
7c0b22920d
Fix minor entry margin issues
...
Accidentally introduced with the entry pinning feature
This also moves the favorite field to the vault instead of shared
preference in order to avoid some complexity
2 years ago
Alexander Bakker
c27d080a11
Fix call to notifyItemMoved when entry change causes sort change
...
This fixes an issue introduced in ffcbaffcfc
2 years ago
Alexander Bakker
0ee74bfeb2
Install HAXM before running the instrumented tests
2 years ago
Alexander Bakker
289b8775d3
Update ZXing to 3.5.1
2 years ago
Alexander Bakker
c12397a509
Update dependencies
2 years ago
Alexander Bakker
0aef57e610
Add context to favorite strings to indicate that they're verbs
2 years ago
Alexander Bakker
7993142cc5
Show a warning when a separate export/backup password is configured
2 years ago
Alexander Bakker
031a11250a
Merge pull request #1006 from beemdevelopment/feature/favorites
...
Add ability to pin/favorite entries
2 years ago
Michael Schättgen
5ec1e33a31
Add ability to favorite/pin entries
2 years ago
Alexander Bakker
c58b773878
Rename some things related to plaintext backup warning
2 years ago
Alexander Bakker
681326839c
Fix back navigation in preferences when pressing the home action button
2 years ago
Alexander Bakker
3d124d225e
Use VaultLockReceiver in a Context-registered manner
...
Turns out we can't listen from ACTION_SCREEN_OFF from a
manifest-registered broadcast receiver
2 years ago
Alexander Bakker
8292173297
Remove unused code for storage read permission request results
2 years ago
Alexander Bakker
84e179f9d3
Add helper to simplify animation end listeners
2 years ago
Alexander Bakker
41eba76b05
Merge pull request #1005 from alexbakker/predictive-back
...
Add support for predictive back gesture
2 years ago
Alexander Bakker
ad77bd687f
Add support for predictive back gesture
2 years ago
Alexander Bakker
c6888b11df
Add an icon to the backup status in preferences
2 years ago
Alexander Bakker
427be4d56b
Merge pull request #992 from orange-elephant/code-grouping-options
...
Additional code grouping options
2 years ago
elena
c206d4bee8
Additional code grouping options
2 years ago
Alexander Bakker
7de7fba2c8
Disable R8 obfuscation
2 years ago
Alexander Bakker
8ea28327db
Optimize APK size by fixing R8 rules and excluding some BC resources
2 years ago
Alexander Bakker
80c37556c7
Prevent double launches of the intro and auth activities
...
Since API level 33: When opening Aegis right after installing it,
Android will send a configuration change event (CONFIG_ASSETS_PATHS),
causing MainActivity to restart almost immediately. This would also
cause two IntroActivity's to be started on top of eachother.
2 years ago
Alexander Bakker
35d3675561
Update GitHub Actions
2 years ago
Alexander Bakker
7517cfc975
Update dependencies
2 years ago
Alexander Bakker
4198ca3bb7
Update Gradle
2 years ago
Alexander Bakker
3927ddec3e
Make vault lock intent used in notifications more explicit
...
Aegis can display a notification to the user as a reminder that the vault is
unlocked. If the user taps the notification, the vault is locked. CodeQL
reported that Aegis may be vulnerable to CWE-927, because of the use of an
implicit intent wrapped by a PendingIntent in that notification.
This does not appear to be exploitable in our case, because we use
``PendingIntent.getBroadcast`` and explicitly set the action of the wrapped
intent. Aegis also does not read or act on any information from the received
intent. This means that a malicious app cannot launch activities or send a
broadcast with a different action, as is common with these type of weakness. The
worst an app with notification access can do, is lock the vault.
Either way, it's good to make the intent explicit, so this patch addresses that.
Additionally, for API level 23 and up, we've made the wrapped intent immutable a
while back.
We'd like to thank John Rune, who ran a CodeQL scan on the Aegis codebase and
privately disclosed this finding to us.
2 years ago
Alexander Bakker
8c9ab38153
Add a workflow for CodeQL analysis
2 years ago
Alexander Bakker
3c10b234ea
Merge pull request #1000 from xconverge/fixSomeTypos
...
Fix some typos in docs
2 years ago
Sean Kelly
8a9a0856fb
Fix some typos in docs
2 years ago
Alexander Bakker
adc9179364
Always copy VaultFileCredentials when accessing it
...
This makes sure that mutations to the credentails can only ever be persisted
intentionally.
2 years ago
Alexander Bakker
8ae8130b71
Store and display backup error messages more clearly
2 years ago
Alexander Bakker
4427498d5e
Rename the instrumented tests to be more consistent
2 years ago
Alexander Bakker
aad6d78750
Move the panic trigger setting to the Security fragment
2 years ago
Alexander Bakker
ef2e803e04
Make the entry count text a bit smaller
2 years ago
Alexander Bakker
c718ea79c5
Update dependencies
2 years ago
Alexander Bakker
acc6b9a3de
Merge pull request #973 from orange-elephant/entries-shown-count
...
Add entries showing count
2 years ago
elena
4bf807c46a
Add entries showing count
2 years ago
Alexander Bakker
e4798703f0
Make the FAB scroll listener a less sensitive
...
This should help minimize the glitchiness that can occur when scrolling
through the entry list.
Close #963 .
2 years ago
Alexander Bakker
80624f844c
Perform a version check when importing from the Steam app
...
Fixes #986 .
2 years ago
Alexander Bakker
714459c528
Merge pull request #969 from digitalheir/minimize-after-copy
...
Minimize or Close app after copying OTP #805
2 years ago
Maarten Trompper
78feb25543
Minimize or Close app after copying OTP
...
Close #805
2 years ago
Alexander Bakker
3bc10bd4b8
Disallow importing empty secrets
...
Fixes #975
And display "ERROR" for any existing bad entries. This is kind of ugly,
but it's better than crashing, and there are probably very few (or zero)
users who have bad entries anyway.
2 years ago
Alexander Bakker
66b7fd38d6
Merge pull request #964 from orange-elephant/google-auth-style-export
...
Google Authenticator compatible export
2 years ago
elena
bc665b6980
Google Authenticator compatible export
2 years ago