HolgerHatGarKeineNode 54c959d18e Return the signed event to the app via custom scheme, not a browser page ...

A signer-owned Custom Tab never reliably displayed the browser handoff
page, so the token never returned. The Nostr launcher now uses the app's
custom scheme as the callback (einundzwanzig://signed/{k1}/): Amber opens
it directly after signing and the app exchanges the event for a token via
/api/mobile/token — no browser handoff in the loop.

2026-06-12 01:14:01 +02:00

..

Api

Add mobile app auth flow with Sanctum token handoff via deep link

2026-06-11 18:01:50 +02:00

Auth

🌐 Add multilingual configuration and translation files

2025-11-22 23:53:15 +01:00

Controller.php

🚀 initial commit

2025-11-21 04:28:08 +01:00

DownloadMeetupCalendar.php

security: critical fixes (test route, edit authz, nostr signature, calendar IDOR)

2026-05-03 12:51:10 +00:00

ImageController.php

security: high-severity fixes (api throttle, fillable, idor, path, rel)

2026-05-03 12:55:09 +00:00

LnurlAuthController.php

✨ Add Super-Admin tools for managing any model

2026-06-08 13:39:04 +02:00

MobileAuthController.php

Return the signed event to the app via custom scheme, not a browser page

2026-06-12 01:14:01 +02:00