Paul Schneider
18ce58e84a
The custom URI scheme (postit://callback) is now the only production redirect on desktop. The loopback listener at 127.0.0.1:7890 is dead since the previous scheme-handler refactor; this commit removes it from every place that could pick it as a default. Changes: - Settings.RedirectUri now defaults to DefaultDesktopRedirectUri (postit://callback) instead of DefaultLoopbackRedirectUri. - Settings.ApplyJson falls back to DefaultDesktopRedirectUri when the user settings file omits the RedirectUri field (was DefaultLoopbackRedirectUri before). - postit-settings sample.json: RedirectUri flipped to postit://callback so anyone copying the sample gets a working config. - DefaultLoopbackRedirectUri kept as a legacy constant (now documented as test-only); OidcStubAuthority / FakeAuthorizingBrowser continue to use it as a test fixture. - The doc on RedirectUri now describes the custom-scheme path and references AndroidRedirectUri for mobile. Reminder for the operator: also remove the matching http://127.0.0.1:7890/ entry from the Yavsc.Org server's allowed redirect URIs (see src/Yavsc.Org/Extensions/HostingExtensions.cs) since no client uses it any more. Tests: 21/21 still green. No code path now sends anything to port 7890 in production. |
||
|---|---|---|
| .. | ||
| PostIt | ||
| PostIt.Android | ||
| PostIt.Browser | ||
| PostIt.Desktop | ||
| Directory.Packages.props | ||