null
|
39255c8733
|
fix: prevent invite code enumeration via Cloud Function (batch v0.2.18)
- Remove client-side read access to invites (only inviter can read own invite)
- Deny direct client update to invites (server-side only via Admin SDK)
- Add acceptInviteCallable Cloud Function: validates code, creates couple,
updates user docs, marks invite accepted, returns wrapped key for local decryption
- Update Android client: FirestoreInviteDataSource calls callable function,
InviteConfirmViewModel uses acceptInvite + unwrapAndStore flow
- Deprecate CoupleRepositoryImpl.createCouple (client-side path removed)
- Update Firestore rules tests: unpaired read now denied, direct update now denied
- 118/118 tests passing
|
2026-06-19 21:46:12 -05:00 |
|
null
|
6828be72fc
|
feat: Cloud Functions — leaveCoupleCallable, onUserDelete cascade (batch v0.2.8)
- Add leaveCoupleCallable: HTTPS callable that atomically unlinks couple via Admin SDK (clears both user coupleIds, recursiveDelete couple doc)
- Add onUserDelete: Auth deletion trigger that cascades cleanup — unpairs partner, sends FCM notification, deletes Storage objects, recursiveDelete user doc
- Replace client-side batch leaveCouple with callable invocation (Firestore rules prevent cross-user writes)
- Remove CoupleRepository/UserRepository from DeleteAccountViewModel — cleanup now handled by onUserDelete trigger
- Wire new functions into index.ts exports
|
2026-06-19 20:04:18 -05:00 |
|
null
|
0e0a33a6dd
|
feat: add FCM game retention notification functions, messaging service updates, ThisOrThat screen fixes
|
2026-06-19 02:23:52 -05:00 |
|
null
|
2b8e05b29b
|
fix: address Neo review — fix cloud function partnerName scope, WheelCompleteScreen session ID, polling isActive, navigateTo reset
|
2026-06-18 01:28:43 -05:00 |
|
null
|
c0696cfb80
|
feat: partner leave notification, real-time couple state sync, in-app unpair alerts
|
2026-06-18 00:25:52 -05:00 |
|
null
|
eaac8ffcc9
|
feat: couple-scoped daily question, answer sync, partner notifications, and answer review
|
2026-06-18 00:18:05 -05:00 |
|
null
|
c816033e74
|
feat: cloud function for date match cleanup, ViewModel and repo improvements
|
2026-06-17 20:26:24 -05:00 |
|
null
|
ec315c63e0
|
feat: add App Integrity + device attestation modules
|
2026-06-17 19:37:19 -05:00 |
|
null
|
534bb076c7
|
feat: implement Ed25519 RevenueCat webhook signature verification
|
2026-06-17 19:08:53 -05:00 |
|
null
|
f3bad90ec6
|
feat(notifications): FCM token registration, quiet hours, notification permission helper, reminder Cloud Functions (batch 11)
|
2026-06-17 01:30:04 -05:00 |
|
null
|
b9ad713ddb
|
feat(billing): server-side entitlement sync — RevenueCat webhook handler, entitlement logic, Firestore EntitlementChecker, Hilt DI, callable sync function (batch 10)
|
2026-06-17 01:25:51 -05:00 |