Scarriffle 3f5de5cdfa fix(security): store auth token in Keychain and restrict ATS to local networking ...

- Move the bearer token from UserDefaults to the Keychain (accessible after
  first unlock), with a one-time migration so existing logins survive.
- Replace NSAllowsArbitraryLoads=YES with NSAllowsLocalNetworking=YES so ATS
  still permits cleartext to LAN/self-hosted servers but enforces TLS for
  public hosts (no arbitrary cleartext/MITM).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-06 14:32:01 +02:00

..

AppIcon.icon

Liquid Glass ICON

2026-06-08 19:20:10 +02:00

Assets.xcassets

Add localization (DE/EN), vertical-scroll month view, context menus, custom colors

2026-05-19 22:00:49 +02:00

Models

feat(sharing): show shared calendars read-only (parity with server/Android)

2026-07-04 18:56:32 +02:00

Services

feat: surface per-calendar sync errors from /api/caldav/events

2026-07-02 18:25:47 +02:00

Views

feat(sharing): show shared calendars read-only (parity with server/Android)

2026-07-04 18:56:32 +02:00

Calendarr iOS.entitlements

Widget anpassung vorbereitung

2026-05-25 11:53:02 +02:00

CalendarrApp.swift

fix(security): store auth token in Keychain and restrict ATS to local networking

2026-07-06 14:32:01 +02:00