halkyon-days/halkyon
Watch
1
0
Fork
You've already forked halkyon
 0
Code Issues Pull requests Projects Releases 37 Packages Wiki Activity Actions 1

fix(app): secrets are kept out of screenshots and the recent apps

Browse source 
The recovery phrase, recovery codes and an authenticator's QR code and
key now show inside a SecretScreen: on Android it holds FLAG_SECURE while
it shows (through a channel each app's MainActivity answers, counting
holds, as several may show at once; ScreenGuard.kt), so screenshots,
screen recordings and the recents view don't get them; on iOS, which has
no such flag, it covers them while the app isn't in front, so the app
switcher's picture doesn't hold them (Dart-side, not checked on a device).
Desktops do neither: a window loses focus whenever its person turns to a
password manager. Todo's debug APK builds with it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
This commit is contained in:
Tizian 「ティツィアーン」 2026-10-21 15:09:02 +02:00
commit f3c3f7fb51
Signed by: raisondetredev
GPG key ID: 07F6FCF405488B64
1 changed files with 509 additions and 180 deletions
Download patch file Download diff file Expand all files Collapse all files

1
packages/halkyon_app/lib/testing.dart
View file

@ -7,6 +7,7 @@ export 'src/testing/fake_account_crypto.dart';
export 'src/testing/fake_auth_gateway.dart';
export 'src/testing/fake_instance_checker.dart';
export 'src/testing/fake_password_gateway.dart';
export 'src/testing/fake_screen_guard.dart';
export 'src/testing/memory_account_key_store.dart';
export 'src/testing/memory_file_saver.dart';
export 'src/testing/memory_instance_store.dart';