amir
be3f46287a
CRITICAL - SftpProvider: replace PromiscuousVerifier with TofuHostKeyVerifier (trust-on-first-use; stores SHA-256 fingerprints in EncryptedSharedPreferences; rejects key changes on subsequent connections) HIGH - GoogleDriveProvider: replace raw string interpolation with buildJsonObject in uploadFile, createDirectory, and moveFile to prevent JSON injection - DropboxProvider: replace all raw JSON strings and Dropbox-API-Arg headers with buildJsonObject for the same reason - OAuthHelper: add cryptographically random state parameter to Dropbox and OneDrive authorization URLs (stored alongside the PKCE verifier) - OAuthRedirectActivity: validate returned state against stored value before exchanging the authorization code (CSRF protection) MEDIUM - WebDavProvider: block cross-host redirects in the manual redirect interceptor so Authorization headers are never forwarded to a different server - AccountSetupScreen: set FLAG_SECURE on the window while credential fields are visible to prevent screenshots and screen-recording capture - libs.versions.toml: security-crypto alpha06 → stable 1.0.0; biometric-ktx alpha05 → biometric 1.1.0 (stable, non-ktx artifact matches the BiometricManager/BiometricPrompt API actually used in MainActivity) - CredentialStore: migrate to security-crypto 1.0.0 API (MasterKeys.getOrCreate + positional create() args); add saveHostKey/getHostFingerprint for SFTP TOFU Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
126 lines
6.2 KiB
TOML
126 lines
6.2 KiB
TOML
[versions]
|
|
agp = "8.4.2"
|
|
kotlin = "2.0.0"
|
|
coreKtx = "1.13.1"
|
|
lifecycleRuntime = "2.8.3"
|
|
activityCompose = "1.9.0"
|
|
appcompat = "1.7.0"
|
|
composeBom = "2024.06.00"
|
|
navigationCompose = "2.7.7"
|
|
hilt = "2.51.1"
|
|
hiltNavigationCompose = "1.2.0"
|
|
ksp = "2.0.0-1.0.22"
|
|
room = "2.6.1"
|
|
workManager = "2.9.0"
|
|
datastore = "1.1.1"
|
|
okhttp = "4.12.0"
|
|
retrofit = "2.11.0"
|
|
kotlinxSerialization = "1.7.0"
|
|
kotlinxCoroutines = "1.8.1"
|
|
googleApiClient = "2.6.0"
|
|
googleDrive = "v3-rev20231219-2.0.0"
|
|
dropboxSdk = "7.0.0"
|
|
microsoftGraph = "6.6.0"
|
|
sshj = "0.38.0"
|
|
sardine = "REMOVED" # replaced by OkHttp WebDAV implementation
|
|
browser = "1.8.0"
|
|
localbroadcastmanager = "1.1.0"
|
|
coil = "2.7.0"
|
|
splashscreen = "1.0.1"
|
|
timber = "5.0.1"
|
|
securityCrypto = "1.0.0"
|
|
biometric = "1.1.0"
|
|
junit = "4.13.2"
|
|
androidxTestExt = "1.2.1"
|
|
espresso = "3.6.1"
|
|
|
|
[libraries]
|
|
# AndroidX Core
|
|
androidx-core-ktx = { group = "androidx.core", name = "core-ktx", version.ref = "coreKtx" }
|
|
androidx-lifecycle-runtime-ktx = { group = "androidx.lifecycle", name = "lifecycle-runtime-ktx", version.ref = "lifecycleRuntime" }
|
|
androidx-lifecycle-viewmodel-compose = { group = "androidx.lifecycle", name = "lifecycle-viewmodel-compose", version.ref = "lifecycleRuntime" }
|
|
androidx-activity-compose = { group = "androidx.activity", name = "activity-compose", version.ref = "activityCompose" }
|
|
androidx-appcompat = { group = "androidx.appcompat", name = "appcompat", version.ref = "appcompat" }
|
|
androidx-splashscreen = { group = "androidx.core", name = "core-splashscreen", version.ref = "splashscreen" }
|
|
|
|
# Compose BOM
|
|
androidx-compose-bom = { group = "androidx.compose", name = "compose-bom", version.ref = "composeBom" }
|
|
androidx-ui = { group = "androidx.compose.ui", name = "ui" }
|
|
androidx-ui-graphics = { group = "androidx.compose.ui", name = "ui-graphics" }
|
|
androidx-ui-tooling-preview = { group = "androidx.compose.ui", name = "ui-tooling-preview" }
|
|
androidx-ui-tooling = { group = "androidx.compose.ui", name = "ui-tooling" }
|
|
androidx-material3 = { group = "androidx.compose.material3", name = "material3" }
|
|
androidx-material-icons-extended = { group = "androidx.compose.material", name = "material-icons-extended" }
|
|
|
|
# Navigation
|
|
androidx-navigation-compose = { group = "androidx.navigation", name = "navigation-compose", version.ref = "navigationCompose" }
|
|
|
|
# Hilt DI
|
|
hilt-android = { group = "com.google.dagger", name = "hilt-android", version.ref = "hilt" }
|
|
hilt-compiler = { group = "com.google.dagger", name = "hilt-android-compiler", version.ref = "hilt" }
|
|
hilt-navigation-compose = { group = "androidx.hilt", name = "hilt-navigation-compose", version.ref = "hiltNavigationCompose" }
|
|
|
|
# Room
|
|
room-runtime = { group = "androidx.room", name = "room-runtime", version.ref = "room" }
|
|
room-ktx = { group = "androidx.room", name = "room-ktx", version.ref = "room" }
|
|
room-compiler = { group = "androidx.room", name = "room-compiler", version.ref = "room" }
|
|
|
|
# WorkManager
|
|
work-runtime-ktx = { group = "androidx.work", name = "work-runtime-ktx", version.ref = "workManager" }
|
|
hilt-work = { group = "androidx.hilt", name = "hilt-work", version = "1.2.0" }
|
|
hilt-work-compiler = { group = "androidx.hilt", name = "hilt-compiler", version = "1.2.0" }
|
|
|
|
# DataStore
|
|
datastore-preferences = { group = "androidx.datastore", name = "datastore-preferences", version.ref = "datastore" }
|
|
|
|
# Networking
|
|
okhttp = { group = "com.squareup.okhttp3", name = "okhttp", version.ref = "okhttp" }
|
|
okhttp-logging = { group = "com.squareup.okhttp3", name = "logging-interceptor", version.ref = "okhttp" }
|
|
retrofit = { group = "com.squareup.retrofit2", name = "retrofit", version.ref = "retrofit" }
|
|
retrofit-kotlinx-serialization = { group = "com.jakewharton.retrofit", name = "retrofit2-kotlinx-serialization-converter", version = "1.0.0" }
|
|
|
|
# Kotlin Serialization
|
|
kotlinx-serialization-json = { group = "org.jetbrains.kotlinx", name = "kotlinx-serialization-json", version.ref = "kotlinxSerialization" }
|
|
|
|
# Coroutines
|
|
kotlinx-coroutines-android = { group = "org.jetbrains.kotlinx", name = "kotlinx-coroutines-android", version.ref = "kotlinxCoroutines" }
|
|
|
|
# Cloud SDKs
|
|
google-api-client-android = { group = "com.google.api-client", name = "google-api-client-android", version.ref = "googleApiClient" }
|
|
google-drive = { group = "com.google.apis", name = "google-api-services-drive", version.ref = "googleDrive" }
|
|
google-auth-library = { group = "com.google.auth", name = "google-auth-library-oauth2-http", version = "1.23.0" }
|
|
dropbox-sdk = { group = "com.dropbox.core", name = "dropbox-core-sdk", version.ref = "dropboxSdk" }
|
|
microsoft-graph = { group = "com.microsoft.graph", name = "microsoft-graph", version.ref = "microsoftGraph" }
|
|
microsoft-identity = { group = "com.microsoft.identity.client", name = "msal", version = "5.1.0" }
|
|
|
|
# SFTP / WebDAV
|
|
sshj = { group = "com.hierynomus", name = "sshj", version.ref = "sshj" }
|
|
# sardine-android removed — WebDAV implemented via OkHttp directly
|
|
|
|
# Browser / OAuth
|
|
androidx-browser = { group = "androidx.browser", name = "browser", version.ref = "browser" }
|
|
androidx-localbroadcastmanager = { group = "androidx.localbroadcastmanager", name = "localbroadcastmanager", version.ref = "localbroadcastmanager" }
|
|
|
|
# Image loading
|
|
coil-compose = { group = "io.coil-kt", name = "coil-compose", version.ref = "coil" }
|
|
|
|
# Security
|
|
security-crypto = { group = "androidx.security", name = "security-crypto", version.ref = "securityCrypto" }
|
|
biometric = { group = "androidx.biometric", name = "biometric", version.ref = "biometric" }
|
|
|
|
# Logging
|
|
timber = { group = "com.jakewharton.timber", name = "timber", version.ref = "timber" }
|
|
|
|
# Testing
|
|
junit = { group = "junit", name = "junit", version.ref = "junit" }
|
|
androidx-junit = { group = "androidx.test.ext", name = "junit", version.ref = "androidxTestExt" }
|
|
androidx-espresso-core = { group = "androidx.test.espresso", name = "espresso-core", version.ref = "espresso" }
|
|
|
|
[plugins]
|
|
android-application = { id = "com.android.application", version.ref = "agp" }
|
|
kotlin-android = { id = "org.jetbrains.kotlin.android", version.ref = "kotlin" }
|
|
kotlin-compose = { id = "org.jetbrains.kotlin.plugin.compose", version.ref = "kotlin" }
|
|
kotlin-serialization = { id = "org.jetbrains.kotlin.plugin.serialization", version.ref = "kotlin" }
|
|
hilt = { id = "com.google.dagger.hilt.android", version.ref = "hilt" }
|
|
ksp = { id = "com.google.devtools.ksp", version.ref = "ksp" }
|