Repository navigation
Release v0.4.31: Apple token revocation, and Launch App opens AppHelm - #168
Merged
Merged
Conversation
…etes their account Apple requires apps that offer Sign in with Apple and account deletion to revoke the user's tokens on deletion (App Review 5.1.1(v)). At Apple sign-in the authorization code is now exchanged for a refresh token, kept encrypted in apple_sign_in_tokens; confirm-account-closure revokes it with Apple before deleting the account. The client secret is minted with core-api's AppleClientSecretFactory from the store's APN channel key when it also has Sign in with Apple enabled, or from a new 'apple_sign_in' notification channel, matched by bundle ID = the identity token's audience. Missing keys and Apple failures are logged and never block sign-in or deletion.
It linked to the GitHub repository. Fleetbase Cloud accounts now sign in with the account they're already using and land on their Storefront project; a self-hosted install goes to the page that explains the service. Cloud is told apart by the API host.
fix(ci): let composer resolve past the unpatched illuminate/mail advisory
feat(customers): revoke Sign in with Apple tokens when a customer deletes their account
Point Launch App at the app publishing service
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #168 +/- ##
============================================
Coverage 100.00% 100.00%
- Complexity 4014 4058 +44
============================================
Files 229 230 +1
Lines 14221 14357 +136
============================================
+ Hits 14221 14357 +136
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
…panies and key files
6 tasks done
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Collects two changes, which merge into this branch first:
Before merging
composer installcurrently fails, because Composer refusesilluminate/mailover advisory PKSA-zwc5-qtrz-zm1n (CVE-2026-48019). This isn't caused by these changes, and it's being handled separately.resume=1. Until that ships, each press of Launch App creates another project.main, so feat(customers): revoke Sign in with Apple tokens when a customer deletes their account #165 and Point Launch App at the app publishing service #167 won't run them on this branch. They'll run here on this PR.The release notes describe both changes, so merge both before this one.