secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-28 21:17:36 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

docs: APK rebuilt + republished (SW v11, peertube, upload, 401 re-login)
Some checks are pending
License Headers / check (push) Waiting to run
Details

Browse Source 
Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
This commit is contained in:
CyberMind-FR 2026-07-17 11:12:06 +02:00
parent c9f2164c26
commit c2c1d0e008
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.claude/HISTORY.md
View File

@ -15,6 +15,8 @@ Sessions became auditable, the two stub Companion modules became real, and bille
- **`GET /admin/api/billets`** — the authoring list. The public feed can't serve it: its item `id` is a permalink URL (**why Edit/Delete 404'd**) and it hides drafts. - **`GET /admin/api/billets`** — the authoring list. The public feed can't serve it: its item `id` is a permalink URL (**why Edit/Delete 404'd**) and it hides drafts.
- **Companion 401 re-login** 🔓 — box tokens live 24h but the Companion seals one at pairing and reuses it forever → a day later every authed call 401'd with no escape but unpairing ("Failed: unauthorized" in billets + podcaster). `api.js` now triggers re-auth and **replays the request once**, single-flight (one prompt, not one per request), so an in-flight write survives. SW v10. - **Companion 401 re-login** 🔓 — box tokens live 24h but the Companion seals one at pairing and reuses it forever → a day later every authed call 401'd with no escape but unpairing ("Failed: unauthorized" in billets + podcaster). `api.js` now triggers re-auth and **replays the request once**, single-flight (one prompt, not one per request), so an in-flight write survives. SW v10.
**APK rebuilt + republished** 📱 — the shipped APK (16/07) bundled pre-fix code (SW v5, the `/feed` 404, no upload, no peertube); Capacitor **bundles** `www`, so no service worker could ever refresh it. Rebuilt with the tracked `android/` scaffold (JAVA_HOME=Android Studio JBR — the system JDK has no `jlink`; `cap copy` not `cap sync`; gradle **8.9-bin**, not the default 8.7-all; TLS was not MITM-intercepted this run so no truststore needed). Debug signer digest is **unchanged** (`5e6163f9…`) → installs over the old app, no uninstall. Live at `https://companion.gk2.secubox.in/secubox-companion.apk` (3.9 MB, carries SW v11 + peertube). Previous APK kept as `.apk.prev`.
Follow-ups: rebuild the billets `.deb` (migration 0004 + tags.py); consider a token refresh so re-login isn't needed every 24h. Follow-ups: rebuild the billets `.deb` (migration 0004 + tags.py); consider a token refresh so re-login isn't needed every 24h.
--- ---

2
.claude/WIP.md
View File

@ -18,7 +18,7 @@ Sessions traçables, les 2 modules Companion stubs deviennent réels, billets ga
### ⬜ Next / follow-ups ### ⬜ Next / follow-ups
- **Rebuild `.deb` billets** (migration 0004 + `services/tags.py` + postinst .pth). - **Rebuild `.deb` billets** (migration 0004 + `services/tags.py` + postinst .pth).
- **Refresh token** : éviter la re-login toutes les 24h sur le Companion. - **Refresh token** : éviter la re-login toutes les 24h sur le Companion.
- **APK périmé** : l'APK publié (16/07) embarque le vieux code (SW v5, `/feed`) — rebuild nécessaire. - ✅ **APK rebuild fait** : republié le 17/07 (SW v11, peertube, upload, re-login 401). Recette : `JAVA_HOME`=JBR Android Studio (le JDK système n'a pas `jlink`), `cap copy` (pas `sync`), gradle **8.9-bin**. Signer debug **inchangé** (`5e6163f9…`) → install par-dessus sans désinstaller. Ancien APK conservé en `.apk.prev`. `android/` est désormais versionné → build reproductible ailleurs.
--- ---