Releases: MSW-Digital/glean-feed-ios-sdk
Releases · MSW-Digital/glean-feed-ios-sdk
Release list
v0.1.2 — logout session fix
Security and release fix for the public beta.
- Clears the embedded portal WebView session during
GleanFeed.logout()so a same-device account switch cannot reopen an SDK surface with the previous portal session. - Ensures the next SDK surface waits for pending portal-session cleanup before resolving a URL.
- Scopes cookie cleanup to Glean Feed portal hosts and exact custom-domain hosts.
- Bumps the public SDK version and install examples to exact
0.1.2.
Validation:
swift testpassed locally and in GitHub CI.- iOS simulator build passed locally and in GitHub CI.
v0.1.1 — clean public beta
Clean public beta release. Use this tag for exact-version installs.
What changed
- Points the SDK version and install guidance to
0.1.1. - Ships from the cleaned public tree:
Sources/,Tests/,Package.swift,README.md,LICENSE, and GitHub CI/issue templates only. - Keeps the WebView navigation containment hardening from the launch-readiness pass: in-container navigation must match the exact resolved portal origin, including scheme and port.
Install
.package(url: "https://github.com/MSW-Digital/glean-feed-ios-sdk", exact: "0.1.1")Verified
swift test- iOS simulator build with
xcodebuild build -scheme GleanFeed -destination 'generic/platform=iOS Simulator' CODE_SIGNING_ALLOWED=NO - Fresh consuming-app import/build smoke against the public package URL
The SDK is still beta; the public API may change before 1.0.0.
v0.1.0 — public beta
First public beta of the Glean Feed iOS SDK. iOS 14+, Swift Package Manager. The public API may change before 1.0.0 — pin an exact version.
Included
GleanFeed.setup(workspaceId:workspaceSlug:environment:)— configure once at launch.environmentdefaults to.production; use.custom(baseURL:)for a dev/self-hosted stack.GleanFeed.identify(userId:email:name:signature:)andlogout()— server-signed identity. The long-lived user token is stored in the Keychain; the short-lived SSO token is memory-only. The SDK never computes signatures or holds a secret.- Hosted feedback, roadmap, and changelog surfaces in a native
WKWebView. - UIKit presenters and SwiftUI modifiers.
GleanFeed.unreadCount()for a native badge or "What’s new" dot.GleanFeed.sendDiagnostics()— explicit, opt-in, bounded toplatform,appVersion,osVersion, andsdkVersion. Nothing else is collected.
Security & privacy
- No widget secret or signing helper in the package; signatures are generated on the customer backend only.
- No token logging; tokens never appear in error descriptions.
- Portal navigation stays inside the WebView for the workspace origin; external links and unsafe schemes are not loaded in the SDK WebView.
Known limitations
- The public API may change before
1.0.0. - iOS 14+ only. No macOS, Android, React Native, or Flutter.
- No push notifications, background polling, app-icon badges, screenshots, file attachments, or offline queueing.
logout()clears SDK tokens and in-memory identity but not the WebView portal session cookie.
Install: .package(url: "https://github.com/MSW-Digital/glean-feed-ios-sdk", exact: "0.1.0")