Skip to content

UR-Heart Production Release v1.1.0 - Security Hardening & Perf Boost

Latest
Latest

Choose a tag to compare

View all tags
@anubhav7773 anubhav7773 released this 19 Aug 11:17
· 30 commits to main since this release
v1.1.0-beta
2310dcf

💖 UR-Heart Production Release v1.1.0 — Security Hardening & Performance Boost

Welcome to UR-Heart v1.1.0! This milestone update delivers enterprise-grade security hardening, anti-scam protection, zero-drift O2O date radar navigation, and substantial database performance optimizations.

🛡️ 1. Security & Privacy Hardening (Phases 1–3 Complete)

  • BOLA / IDOR Defense: Enforced strict conversation participant checks on all read/write chat operations (403 Forbidden on unauthorized access).
  • Anti-Trilateration GPS Privacy: Sealed Discovery Feed (/feed) and Profile endpoints to return only radial distances (distance_km), completely stripping raw coordinates (lat/lon).
  • Hardware Screen Protection: Enabled native Android FLAG_SECURE to block screenshots, malicious screen recordings, and recent-app task switcher snapshots.
  • Encrypted Storage: Migrated sensitive auth and user credentials to hardware-backed Keystore/Keychain via FlutterSecureStorage.
  • Network Restraints (Anti-MitM): Restricted network configuration to reject unencrypted HTTP traffic and untrusted proxy certificates.
  • Release Obfuscation: Enabled R8 / ProGuard shrinking and class repackaging for hardened binary security.

🚀 2. O2O "Date Spot Radar" & Deep-Link Navigation

  • Fast Multi-Tier Spot Engine: Fast commercial venue scanning (Cafes, Restaurants, Lounges, Chai Spots) with a strict 50 km hard ceiling.
  • Zero-Drift Navigation: Integrated coordinate-locked map intent linking to open Google Maps directly on exact GPS markers.
  • Native In-Chat Suggestion Bubbles: Suggest verified spots inside chat via rich interactive cards without triggering Safe Bridge link-protection filters.

⚡ 3. Real-Time Chat & Backend Performance

  • DDoS & Spam Defense: Implemented multi-tier sliding-window rate limiting on messaging, feed swiping, and location endpoints.
  • Cryptographic WebSocket Handshake: Secured real-time chat with JWT token signature verification and automatic stale-session cleanup.
  • Database Query Acceleration: Added composite indexes across messages, users, and matches tables, reducing query latency.
  • Deep-Link Lifecycle Fixes: Resolved route hijacking on notification clicks to ensure seamless, direct navigation into active chat threads.

🧪 Automated QA & Test Metrics

  • Backend: 40+ automated security & unit tests passed (pytest)
  • Mobile: 0 errors / 0 warnings (flutter analyze)
Assets 3
Loading