Skip to content

0.0.10

Choose a tag to compare

@KuryGabriele KuryGabriele released this 20 Feb 22:54
· 263 commits to main since this release

Update 0.0.10

Server improvements

  • Now the server won't trust the client-side checks and is less likely to crash.
  • The websocket connection now requires a token to be accessed.
  • The websocket now authenticates the user using the given token.
  • The server will now trust its own authenticated id and not the one given by the client.
  • Added response codes to some ws requests.

Client security

  • Moved session data to session storage.
  • On each app launch the token is verified with the API and refreshed.
  • If the API responds with a 401 code, the app will logout, assuming the token has expired.

API

  • API JWT authentication is now enabled.

Known issues

  • Chat not working
  • All images fail to load (error 401)