Skip to content

Conversation

@AmanRajSinghMourya
Copy link
Contributor

Description

Tests

AmanRajSinghMourya and others added 30 commits December 21, 2025 23:26
Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment on lines +463 to 466
await showBaseBottomSheet(
context,
headerSpacing: 20,
title: context.strings.signOutFromOtherDevices,

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Prevent implicit logout when dialog is dismissed

The new showBaseBottomSheet call uses the default isDismissible: true (see base_bottom_sheet.dart), while logOutFromOther is initialized to true. If the user taps outside the sheet or closes it without choosing, this function still returns true, and _updatePassword will log out other sessions without explicit consent. Consider making the sheet non‑dismissible or returning false on dismiss to avoid unintended logouts.

Useful? React with 👍 / 👎.

Comment on lines 24 to 25
git:
url: https://github.com/ente-io/ente.git
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why we are adding dependency on commit ? it will close clone the whole repo for building.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is done to avoid breaking for auth as the redesign is done on the packages/account which is used for auth as well. So I pinned these packages to main

Copy link
Member

@ua741 ua741 Jan 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This feels like bad design as it breaks the primary purpose of having common packages. It completely defeats the purpose of having common packages.
Let's discuss this in person

Comment on lines 198 to 204
_logger.severe(e, s);
if (e.response?.statusCode == 401) {
_logger.info("Session expired in trash sync, triggering logout");
Bus.instance.fire(TriggerLogoutEvent());
throw UnauthorizedError();
}
rethrow;
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why is this require here? Ideally, during collections diff sync itself or remote sync we should get this exception and handle it at that place instead of doing this at every api place

AmanRajSinghMourya and others added 2 commits January 6, 2026 10:00
Session expiry is already handled centrally in CollectionApiClient.

Co-Authored-By: Claude <[email protected]>
@socket-security
Copy link

socket-security bot commented Jan 7, 2026

No dependency changes detected. Learn more about Socket for GitHub.

👍 No dependency changes detected in pull request

@AmanRajSinghMourya AmanRajSinghMourya merged commit 150809d into main Jan 8, 2026
4 checks passed
@AmanRajSinghMourya AmanRajSinghMourya deleted the login branch January 8, 2026 16:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants