diff options
| author | Peter Stone <thepeterstone@gmail.com> | 2026-08-22 01:07:10 +0000 |
|---|---|---|
| committer | Peter Stone <thepeterstone@gmail.com> | 2026-08-22 01:07:10 +0000 |
| commit | 78bc7b3c48eae1b68d3f35c81ea2b959d8136477 (patch) | |
| tree | 0f516424bfea2b8af815a5c218837f5b1804d8c0 /app/src/main/java/org/terst/feedreader/data/ArticleSaving.kt | |
| parent | 429594e6bc1069f7e7141060df3a0fd8bf63749b (diff) | |
Encrypt the Stash API key at rest
The key is a bearer credential for the user's own Stash server, sent
as X-API-Key on every request -- previously stored in plain DataStore
preferences, recoverable in cleartext from a rooted device, an
unlocked-bootloader device, or a local backup/extraction tool. Now
stored via EncryptedSharedPreferences (Android Keystore-backed
AES-256). An existing key is migrated from the old plaintext location
once, on first read, then the plaintext copy is cleared.
Diffstat (limited to 'app/src/main/java/org/terst/feedreader/data/ArticleSaving.kt')
0 files changed, 0 insertions, 0 deletions