Skip to content

chore: remove external repository option - #231

Merged
pando85 merged 3 commits into
mainfrom
chore/remove-external-repository
Oct 27, 2026
Merged

pando85 merged 3 commits into
mainfrom
chore/remove-external-repository

Conversation

@pando85

@pando85 pando85 commented Oct 27, 2026

Copy link
Copy Markdown
Owner

Summary

Removes the external/shared repository option (Documents/PasswordStore) that came in with the upstream sync (#228, port of upstream agrahn#1168), before it is ever released.

Why

  • This fork syncs only through Git; the option exists upstream for Syncthing/file-manager sync.
  • Shared storage weakens passkey storage guarantees: other apps with broad storage access can read or replace files, and passkey folder names reveal which sites have passkeys.
  • No storage permission is declared; under scoped storage the app can lose access to its own store after reinstall/data clear.
  • With the option, passkey storage (long-lived singletons with path confinement) would need to be rebuilt on root changes; without it the fixed app-private root is correct again.

The option is unreleased (only in [Unreleased]), so no data migration is needed.

Changes

Validation

CI=true ./gradlew lint spotlessCheck test -PslimTests assembleDebug passes locally.

…port)

This fork syncs only through Git. Storing the password store, and with it
passkeys, in shared Documents storage exposes passkey metadata to other
apps, undermines the confined passkey file store and can lose access after
a reinstall. The option was never released, so no migration is needed.

Reverts 0c12eb6 and its passkey storage-root follow-up 4f33963.
@pando85
pando85 enabled auto-merge October 27, 2026 21:50
@pando85
pando85 merged commit 3d16520 into main Oct 27, 2026
5 checks passed
@pando85
pando85 deleted the chore/remove-external-repository branch October 27, 2026 22:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant