mirror of
https://github.com/kuhyx/utils.git
synced 2026-11-10 21:27:14 +01:00
Both the Google one-tap path and the seeded-session path deliberately write `FirebaseAccount(email: ..., password: '')` -- on those devices the refresh token in the keystore is the credential, and there is no password to store. `tryParse` rejected exactly that blob. So a device signed in with Google wrote an account marker it could never read back: every later launch saw "not configured", fell through to the mirror, and left a perfectly good refresh token unused in the keystore beside it. Only widens what parses, so no caller that previously got an account back can regress. Every call site already guards `password.isEmpty` and passes null for it -- meaning "no password on this device" -- which is precisely the case this now lets them see. An empty *email* stays rejected: it carries no identity at all. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CFSGeWxHPY5rHUGrPqhcmG |
||
|---|---|---|
| .. | ||
| src | ||
| crdt_sync_io.dart | ||
| crdt_sync.dart | ||