Skip to content

Remove backdoor authentication bypass#19

Merged
dadachi merged 1 commit intomainfrom
Backdoor_Authentication_Bypass
Mar 21, 2026
Merged

Remove backdoor authentication bypass#19
dadachi merged 1 commit intomainfrom
Backdoor_Authentication_Bypass

Conversation

@dadachi
Copy link
Copy Markdown
Contributor

@dadachi dadachi commented Mar 21, 2026

Summary

  • Remove Shopkeeper+Backdoor.swift which allowed bypassing authentication via a UserDefaults token
  • Update SessionController to use only the standard login repository for authentication
  • Fix password reset instruction message to use a more secure, non-revealing wording
  • Update Xcode project version settings

Test plan

  • Verify login flow works correctly without the backdoor
  • Verify password reset shows the updated message
  • Build and run all tests

🤖 Generated with Claude Code

Delete Shopkeeper+Backdoor.swift and its usage in SessionController,
fix password reset instruction message, and update Xcode project version.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@dadachi dadachi merged commit 8b350d4 into main Mar 21, 2026
2 checks passed
@dadachi dadachi deleted the Backdoor_Authentication_Bypass branch March 21, 2026 09:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant