60 commits

Author	SHA1	Message	Date
github-actions[bot]	4b5d5b0be7	Release v7.6.0	2026-05-07 01:20:07 +00:00
github-actions[bot]	fccc3f7d16	Release v7.5.0	2026-05-07 01:01:54 +00:00
github-actions[bot]	c0f83c704e	Release v7.4.0	2026-05-07 00:45:32 +00:00
github-actions[bot]	46fe3ec29c	Release v7.3.0	2026-05-06 21:35:12 +00:00
github-actions[bot]	8a705ddf7b	Release v7.2.1	2026-05-06 21:32:00 +00:00
github-actions[bot]	8ea79bcfb9	Release v7.2.0	2026-05-06 21:29:30 +00:00
github-actions[bot]	b4a84ca7f1	Release v7.1.5	2026-05-06 21:08:07 +00:00
github-actions[bot]	3704a0dca0	Release v7.1.4	2026-05-06 21:04:49 +00:00
github-actions[bot]	b21c921526	Release v7.1.3	2026-05-06 06:19:42 +00:00
github-actions[bot]	12a27b437d	Release v7.1.2	2026-05-06 06:04:06 +00:00
github-actions[bot]	685f0f93f1	Release v7.1.1	2026-05-06 05:42:13 +00:00
Daniel	5df760c5e5	Release v7.0.0	2026-04-28 03:11:55 +02:00
Daniel	8f49c4dcb9	feat(mobile): biometric sign-in (Face ID / Touch ID / fingerprint) ... Adds opt-in biometric login to the Capacitor app. Replaces the password step on subsequent sign-ins; the 2FA step (if any) still applies — by design, defense in depth. How it works: - After a successful password sign-in on a Capacitor build, prompt the user to enroll. If they accept, capacitor-native-biometric.setCredentials stores the (email, password) pair in the iOS Keychain / Android Keystore with biometric-protected access. The local flag ped_bio_enabled=1 is set so the next launch knows to probe. - On the login form, if isNativeApp() + bioStored() + bioAvailable.ok, reveal the "Sign in with Face ID / Touch ID / fingerprint" button at the top. Label is set from the actual biometryType returned by the plugin so users see what their device supports. - Tap → verifyIdentity (OS prompt) → getCredentials → fill the email + password fields → fire the existing form submit so all the regular flow runs (turnstile, 2FA prompt, error handling, session storage). - Explicit logout deletes credentials AND clears the local flag, hiding the button on the next visit. Auto-logout (token expiry, network) does NOT come through that path, so biometric persists across silent session resets. Storage choice — password not JWT: - JWTs expire and the storage would constantly need refresh. - Storing the password lets the standard /api/auth/login flow run, which already handles password-rotation (a stale stored password just fails 401 → user falls back to typing the new one → re-enrolls). - The password sits in OS-level secure storage, accessible only after successful biometric verification — same security posture as a password manager autofill. Files: - mobile/package.json: add capacitor-native-biometric@^5.0.0 (Capacitor 6 compat) - mobile/android/app/src/main/AndroidManifest.xml: add USE_BIOMETRIC uses-permission - mobile/ios/App/App/Info.plist: add NSFaceIDUsageDescription string - public/js/auth.js: bioPlugin/bioAvailable/bioStored/bioEnroll/ bioRetrieve/bioForget helpers; window.PedBio surface; reveal-on-load; click handler; post-login enrollment prompt; logout cleanup - public/index.html: hidden #btn-bio-login + #bio-divider above the email field on the login form - public/css/styles.css: themed gradient button + hover lift - mobile/README.md: feature list updated Build steps for Daniel: cd mobile && npm install # picks up capacitor-native-biometric npx cap sync # ports the plugin into android/ + ios/ # then build APK / IPA as usual	2026-04-28 03:09:38 +02:00
github-actions[bot]	7a1303e117	Release v6.53.2	2026-04-24 23:44:32 +00:00
github-actions[bot]	93bb2c3a42	Release v6.53.1	2026-04-24 23:35:20 +00:00
github-actions[bot]	99b8bb65f6	Release v6.53.0	2026-04-24 23:02:58 +00:00
github-actions[bot]	4893099757	Release v6.52.1	2026-04-24 11:22:36 +00:00
github-actions[bot]	552e137d0b	Release v6.52.0	2026-04-24 10:49:31 +00:00
github-actions[bot]	240f284570	Release v6.51.0	2026-04-24 10:45:40 +00:00
github-actions[bot]	7f8255a728	Release v6.50.0	2026-04-24 04:18:56 +00:00
github-actions[bot]	992bfac03b	Release v6.20.0	2026-04-22 20:57:21 +00:00
github-actions[bot]	5ccce6e4d2	Release v6.19.0	2026-04-22 19:51:04 +00:00
github-actions[bot]	04762bded8	Release v6.18.0	2026-04-22 19:10:45 +00:00
github-actions[bot]	4f44a9e505	Release v6.17.1	2026-04-22 19:04:54 +00:00
github-actions[bot]	1011449f63	Release v6.17.0	2026-04-22 19:00:54 +00:00
github-actions[bot]	da9492a1ce	Release v6.16.0	2026-04-22 18:15:16 +00:00
github-actions[bot]	2b403c9e46	Release v6.15.0	2026-04-22 18:10:04 +00:00
github-actions[bot]	6ec9971621	Release v6.14.0	2026-04-22 17:35:12 +00:00
github-actions[bot]	2392f4a089	Release v6.13.1	2026-04-22 17:30:03 +00:00
github-actions[bot]	b51cb1adb1	Release v6.13.0	2026-04-22 16:54:37 +00:00
github-actions[bot]	c159fe57b9	Release v6.12.0	2026-04-22 15:15:37 +00:00
github-actions[bot]	27b1f6f089	Release v6.11.0	2026-04-22 14:52:24 +00:00
github-actions[bot]	958b35998e	Release v6.10.3	2026-04-22 11:11:43 +00:00
github-actions[bot]	2456074481	Release v6.10.2	2026-04-22 10:41:25 +00:00
github-actions[bot]	601d35ef4c	Release v6.10.1	2026-04-22 03:52:10 +00:00
github-actions[bot]	da4dca06e1	Release v6.10.0	2026-04-22 01:59:19 +00:00
github-actions[bot]	09f8a1a3db	Release v6.9.0	2026-04-21 23:01:09 +00:00
github-actions[bot]	b5dbc98c75	Release v6.8.0	2026-04-21 20:20:21 +00:00
github-actions[bot]	359807b86e	Release v6.7.0	2026-04-20 21:20:01 +00:00
github-actions[bot]	2992ea1424	Release v6.6.0	2026-04-20 02:23:33 +00:00
github-actions[bot]	cd131e0b02	Release v6.5.0	2026-04-20 01:51:30 +00:00
github-actions[bot]	725e35bf96	Release v6.4.0	2026-04-20 00:49:55 +00:00
github-actions[bot]	8097b0fe0b	Release v6.3.1	2026-04-19 19:26:56 +00:00
github-actions[bot]	0ab48eeb98	Release v6.3.0	2026-04-19 00:17:21 +00:00
github-actions[bot]	b64a39f8ea	Release v6.2.1	2026-04-14 22:10:45 +00:00
github-actions[bot]	9a437c831c	Release v6.2.0	2026-04-14 21:51:17 +00:00
Daniel	26857d52da	Release v6.1.1	2026-04-14 23:40:10 +02:00
Daniel	c6d238c560	Untrack Capacitor-generated files + node_modules in mobile/ ... The mobile/ wrapper had 1700+ node_modules files tracked, plus the Capacitor-regenerated artifacts that get rewritten on every `npx cap sync android` (capacitor.build.gradle, capacitor.config.json, capacitor.plugins.json, capacitor.settings.gradle, the cordova-android- plugins subtree). Every local dev or CI sync caused noisy drift that blocked scripts/release.sh from running. Added mobile/.gitignore covering node_modules, cap-sync outputs, Android build outputs, .jks/.apk/.aab files, and .DS_Store. Kept package-lock.json tracked for reproducible npm install. No logic changes — only stopped tracking files that are always regenerated.	2026-04-14 23:35:23 +02:00
Daniel	6d6b4b90d2	Version alignment + release script — single source of truth ... Aligns every version string in the repo to 6.1.0: - package.json: 6.0.0 → 6.1.0 - mobile/package.json: 1.0.0 → 6.1.0 - mobile/android/app/build.gradle: versionCode 1 → 610, versionName "1.0" → "6.1.0" - server.js: hardcoded "v6.0" → reads root package.json at boot - /api/health/detailed now reports APP_VERSION from package.json Adds scripts/release.sh — a one-command bump: scripts/release.sh 6.1.1 # local bump + tag scripts/release.sh 6.1.1 --push # + git push scripts/release.sh 6.1.1 --push --gh # + GitHub release (uploads APK if already built) Updates all three version sites, commits "Release v6.1.1", creates annotated tag, optionally pushes and opens a release. versionCode encoded as MAJ*100000 + MIN*1000 + PATCH so patch updates always increment monotonically.	2026-04-14 23:18:47 +02:00
Daniel	cdf178b1c3	Mobile app hardening — security + Android 14 compat ... capacitor.config.json: - webContentsDebuggingEnabled: true → false (was leaving Chrome DevTools able to attach to released builds) - allowMixedContent: true → false (API is HTTPS-only; no need to permit cleartext loads) - server.allowNavigation: ["*"] → restricted to pedshub.com / peds.danvics.com origins (prevents WebView following an attacker-controlled redirect) AndroidManifest.xml: - android:allowBackup="false" + data_extraction_rules.xml (Android system backup would otherwise copy EncryptedSharedPreferences containing the auth token into Google Cloud backups) - Removed USE_BIOMETRIC permission (feature removed earlier) AudioRecordingService.java: - startForeground(id, notif, TYPE_MICROPHONE) on Android 14+ (without the explicit type Android 14 kills the service with MissingForegroundServiceTypeException) - WakeLock cap: 1h → 8h (still bounded, onDestroy releases early) MainActivity.java: - Removed dead biometric code path and androidx.biometric imports mobile/package.json: - Dropped @aparajita/capacitor-biometric-auth — orphan dependency	2026-04-14 04:15:27 +02:00