mirror of
https://github.com/kuhyx/utils.git
synced 2026-11-11 19:34:01 +01:00
Krzysztof kuhy Rudnicki
feaaf69103
Both the Google one-tap path and the seeded-session path deliberately write `FirebaseAccount(email: ..., password: '')` -- on those devices the refresh token in the keystore is the credential, and there is no password to store. `tryParse` rejected exactly that blob. So a device signed in with Google wrote an account marker it could never read back: every later launch saw "not configured", fell through to the mirror, and left a perfectly good refresh token unused in the keystore beside it. Only widens what parses, so no caller that previously got an account back can regress. Every call site already guards `password.isEmpty` and passes null for it -- meaning "no password on this device" -- which is precisely the case this now lets them see. An empty *email* stays rejected: it carries no identity at all. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CFSGeWxHPY5rHUGrPqhcmG |
||
|---|---|---|
| .. | ||
| device.dart | ||
| firebase_account_provisioning.dart | ||
| firebase_auth_error.dart | ||
| firebase_auth_rest.dart | ||
| firebase_client.dart | ||
| firebase_config.dart | ||
| firebase_credentials.dart | ||
| firebase_errors.dart | ||
| firebase_keys.dart | ||
| firebase_settings.dart | ||
| github_client.dart | ||
| hlc.dart | ||
| io_store.dart | ||
| log.dart | ||
| mirror_store.dart | ||
| record.dart | ||
| remote_store.dart | ||
| secure_credential_store.dart | ||
| store.dart | ||
| sync_state.dart | ||
| sync.dart | ||