This release adds import support for Proton Pass and 1Password data, including files, websites, and passkeys. Passkey PRF secrets are now carried through creation, storage, credential exchange, and Android's Credential Manager provider.
- Fastmail Masked Email is now available as an alias provider.
- The import preview now counts attachments in its summary line.
- The vault no longer lets a breach check that never answers hold up a save, and it now reports when a save is stuck and what it is waiting on.
- Websites on a login are grouped under one label in view mode.
- Passkey requests are now bound to the page that made them, and the user is verified before a passkey is claimed.
All changes (27)
Features
- group a login's websites under one label in its view mode
- count attachments in the preview's summary line
- bring Proton Pass files and every website across (#166)
- bring a 1Password export's files across
- answer the prf extension from the Credential Manager provider
- carry passkey PRF secrets and other FIDO2 extension data through credential exchange
- keep Proton Pass passkeys' PRF secrets
- carry PRF secrets through the TS crypto surface and the stored passkey
- mint PRF secrets and evaluate the WebAuthn prf extension in the core
- Fastmail Masked Email (#133)
- bring Proton Pass passkeys across (#166)
Bug Fixes
- stop a breach check that never answers from holding a save
- say when a save is stuck, and what it is waiting on
- refuse a joiner whose roster id belongs to another device
- bound relay-forward reassembly before allocating for a frame
- carry an HLC counter past its limit into the wall instead of throwing
- spool picked attachments to the cache, and sweep leftovers
- keep a KeePass file on a login pinned to its port
- bind passkeys to an entitled caller and verify the user for real
- validate stored PRF secrets and cap credential-exchange and zip imports
- verify the user for real before claiming it in the extension
- bind each request to the page that made it, not the focused tab
- draw under the system bars on older Android, match their icons to the theme
- use a passkey's rpId when a transfer has no website
- read a website saved without a scheme as https
- read credential-exchange dates as UNIX seconds
Refactors
- fold the duplicated ceremony and request plumbing
Full Changelog: 0.26.0-android...0.27.0-android