Skip to content

fix(auth): implement PKCE for Google Auth and sync latest upstream notifications - #4927

Open
ranjank2alpha wants to merge 21 commits into
block:mainfrom
ranjank2alpha:main
Open

fix(auth): implement PKCE for Google Auth and sync latest upstream notifications#4927
ranjank2alpha wants to merge 21 commits into
block:mainfrom
ranjank2alpha:main

Conversation

@ranjank2alpha

Copy link
Copy Markdown

Summary

  • Implements PKCE (code_challenge and code_verifier with S256 method) for native Google OAuth2 login flow in google_auth.rs.
  • Adds explicit HTTP status verification (status().is_success()) before parsing OAuth token exchange JSON responses to prevent unwrap crashes on 4xx responses.
  • Merges latest upstream main updates and resolves notification sound/active target check conflicts in use-feed-desktop-notifications.ts.

Testing

  • Code audit completed across Rust and TypeScript network boundary handlers.
  • Verified PKCE parameter generation and error body logging.

Ranjan added 17 commits August 4, 2026 09:21
…tray support

Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>
…esult

Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>
This commit addresses the following issues:
- Moved Google SSO to the primary landing screen, removing the legacy welcome screen.
- Bypassed the redundant importIdentity call that caused users to loop on the login screen after OAuth success.
- Cleaned up NostrKeyImportForm.tsx to strictly handle manual imports, removing the out-of-place Google Login button.
- Added Tauri setup hook for set_app_user_model_id in lib.rs to allow Windows to register notifications natively.
- Updated CONTEXT.md with new KIs for Google SSO and Windows Notifications.

Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>
Signed-off-by: Ranjan <ranjan@local.dev>

# Conflicts:
#	desktop/src/features/notifications/use-feed-desktop-notifications.ts
@ranjank2alpha
ranjank2alpha requested a review from a team as a code owner August 5, 2026 18:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant