6435406690
account: stop rotating the SRP challenge on every getPassword read
...
GetPassword minted a brand-new random SRP server secret and B on every call
while only ever assigning SRPID once (when zero). Two account.getPassword
calls in a row -- e.g. a settings screen refreshing state, then the transfer-
ownership dialog's own cloudPassword().reload() moments later -- silently
invalidated each other's B with no signal the client could detect (SRPID
unchanged), so a password check built from the first response's B failed
with PASSWORD_HASH_INVALID even though the typed password was correct.
The challenge now stays stable across reads and only rotates when it's
missing entirely; UpdatePasswordSettings/RecoverPassword already mint their
own fresh challenge whenever the password actually changes.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-14 12:06:46 +01:00
onysd
2f1818d656
merged with fixes
2026-09-09 02:49:30 +03:00
onysd
21a0856587
merged from gramsrv upstream
2026-09-01 12:06:31 +03:00
onysd
ac6a50c5ff
Merge remote-tracking branch 'upstream/main' into merge-gramsrv-9106877
2026-08-03 23:29:20 +03:00
iamxvbaba
2512eab51d
fix: sync harden auth, privacy, and PTS state
2026-08-02 14:12:04 +08:00
onysd
58ca71f0b7
fix for security bug
2026-07-31 15:29:04 +03:00
iamxvbaba
9f467f4be7
feat: sync durable moderation and appeals
2026-07-24 11:56:59 +08:00
onysd
ebb0be38d9
Merge remote-tracking branch 'upstream/main' into merge-gramsrv-2965f5d
2026-07-20 23:43:51 +03:00
A
2848ff0987
feat: sync visible product branding
...
Sync telesrv c779c48 (feat(branding): unify visible product naming).
Skipped private www files and preserved public README files; mapped orange appearance seed names to public default names.
2026-07-20 16:49:17 +08:00
A
edb7057757
feat: sync account deletion lifecycle
...
Sync telesrv 73f5c91 (feat(account): implement unified account deletion lifecycle).
Skipped telesrv docs changes per public sync rules.
2026-07-19 20:35:58 +08:00
onysd
6b29556ef8
Merge remote-tracking branch 'upstream/main' into dev
2026-07-18 09:19:27 +03:00
A
6af61f26ba
feat: sync configurable OTP delivery providers
2026-07-17 17:04:39 +08:00
onysd
1eaa06d961
added config for virtual phone number
2026-07-14 18:37:27 +03:00
onysd
3409f190b9
fix for phone generation on email signup
2026-07-14 00:30:52 +03:00
onysd
3d9b0f1de7
changes for email signup
2026-07-13 20:09:57 +03:00
A
4390ebf5a9
perf: sync protocol and core hardening updates
2026-07-11 19:48:26 +08:00
A
da04c0fa6a
feat: sync public links and phone change updates
2026-07-10 22:01:44 +08:00
A
9a501f900a
feat: sync login email verification support
2026-07-08 17:09:44 +08:00
A
2a9c12263f
feat: sync chatlist sharing support
2026-07-06 21:06:33 +08:00
A
6867d201ed
feat: sync built-in sticker bot
2026-07-01 21:55:55 +08:00
A
70b6820474
chore: refresh gramsrv public release
2026-06-30 14:37:43 +08:00
A
6dc42942c8
auth: complete account authorization flows
...
(cherry picked from commit 04f4527df32ad5c35720cccc41d27fe51549612f)
2026-06-16 01:43:31 +08:00
A
74992e893f
Initial open source release
2026-06-04 01:37:39 +08:00
