Skip to content

KeyFlow Desktop v26.6.2801

Latest
Latest

Choose a tag to compare

View all tags
@taehwandev taehwandev released this 28 Jun 12:28
v26.6.2801
7e99b00
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Secure Desktop Device Auth

[KO] 이번 릴리즈는 KeyFlow Desktop 로그인 흐름을 더 안전한 브라우저 승인 + 디바이스 credential 방식으로 전환합니다.

[EN] This release moves KeyFlow Desktop sign-in to a safer browser approval and device credential flow.

New

  • Secure desktop approval flow

    • [KO] Desktop은 전용 /ko/manage/desktop/auth 승인 페이지를 열고, state와 PKCE challenge를 사용해 브라우저 승인 결과를 검증합니다.
    • [EN] Desktop now opens the dedicated /ko/manage/desktop/auth approval page and validates the browser approval with state and a PKCE challenge.

  • Device credential based local session

    • [KO] 브라우저가 Firebase refresh token이나 ID token을 Desktop으로 넘기지 않습니다. Desktop은 일회용 code를 서버에서 KeyFlow device credential로 교환해 로컬 세션에 저장합니다.
    • [EN] The browser no longer passes Firebase refresh tokens or ID tokens to Desktop. Desktop exchanges a one-time code for a KeyFlow device credential and stores that local session.

  • Clearer Sync account progress

    • [KO] Settings의 Sync 화면에서 브라우저 열기, 승인 대기, code 교환, credential 저장 등 앱 내부 로그인 단계를 표시합니다.
    • [EN] The Settings Sync screen now shows app-side sign-in progress, including browser approval, code exchange, and device credential storage.

Compatibility

  • [KO] 기존 refreshToken 기반 로컬 설정은 레거시 fallback으로만 읽고, 새 로그인은 device credential을 저장합니다.
  • [EN] Existing refreshToken based local settings are read only as a legacy fallback. New sign-ins store a device credential.

Verification

  • [KO] Desktop auth 계약 테스트, 계정 hydration 테스트, 전체 단위 테스트, production build, Tauri local build를 통과했습니다.
  • [EN] Passed Desktop auth contract tests, account hydration tests, the full unit test suite, production build, and local Tauri build.
Assets 5
Loading