Skip to content

0.1.7: Account Guard + Token Rotation Fix

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Mar 12:35
0.1.7
508b7d4

What's New

Account Guard System

  • Pre-sync identity verification — the plugin now calls /api/v1/auth/me/ before every sync to confirm you're connected to the right account
  • Account switch detection — if you change credentials, the plugin detects the account mismatch and blocks sync until you confirm
  • Sync state reset on credential change — changing tokens automatically clears sync state so entries aren't incorrectly marked as "already synced"
  • Connected account display — settings page shows which account you're connected to

Token Rotation Fix

  • Refresh token rotation now works correctly — previously, rotated refresh tokens weren't captured, causing tokens to expire after extended inactivity
  • Plugin now sends device_id in refresh requests and captures rotated refresh tokens from the response

Backend (requires server update)

  • New /api/v1/auth/me/ endpoint
  • Fixed TokenRefreshSerializer to implement proper token rotation (blacklist old, return new)
Assets 5
Loading