v1.4.0 - Security Fixes & Update Improvements
What's New in v1.4.0
π Security Fixes (Critical)
- Fixed FCM Server Key vulnerability - Removed exposed server key from client code
- Disabled insecure client-side push notifications - Notifications should now be sent via Cloud Functions
- Restricted user data access - User profiles now require authentication to read
π Bug Fixes
- Fixed app crash on startup - Resolved ClassNotFoundException for OpenFileProvider
- Improved update permission flow - Install permission now requested after download completes
- Better error handling - Clear error messages when permission is denied with option to open Settings
π Update Flow Improvements
- Download completes before requesting Android install permission
- Shows detailed error messages for failed updates
- Provides direct link to Settings when permission is permanently denied
Full Changelog: v1.3.0...v1.4.0