Skip to content

Cryptext v0.3.6

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Apr 17:28
v0.3.6
bbfa88c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Cryptext v0.3.6

Added

  • Microsoft Entra (Azure AD) sign-in option on the auth page

Changed

  • Google and Entra OAuth flows share one client-side helper for the browser-open and status-poll cycle

Security

  • MLS state and metadata files at rest are now encrypted with the per-user DEK, matching the messages DB and session blob; existing plaintext files are migrated automatically on next launch
  • OAuth callback transitions are now guarded so a stale ?error= callback cannot overwrite an already-completed sign-in
  • OAuth callback now surfaces IdP-side failures (?error=, ?error_description=) instead of treating them as missing-state errors

Commit: bbfa88c

Assets 5
Loading