pepepper/fluxer
1
0 Fork 0
mirror of https://github.com/fluxerapp/fluxer synced 2026-10-19 05:55:34 +09:00
Code Issues Packages Projects Releases Wiki Activity

fix(auth): require a hashed poll secret for desktop handoff (#2357)

Browse Source
This commit is contained in:
Hampus authored and GitHub committed 2026-09-02 17:25:54 +02:00
1 parent b82681b77a
commit f703969e80
45 files changed
+382 -188
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

fluxer_app/src/features/auth/flow/BrowserLoginHandoffModal.tsx
+3 -1
View File
@@ -38,6 +38,7 @@ const BrowserLoginHandoffModal = observer(({onSuccess, prefillEmail}: BrowserLog
const [isGenerating, setIsGenerating] = useState(false);
const [error, setError] = useState<string | null>(null);
const pollingRef = useRef(false);
const handoffPollSecretRef = useRef<string | null>(null);
const completedRef = useRef(false);
const generateCode = useCallback(async () => {
setIsGenerating(true);
@@ -46,6 +47,7 @@ const BrowserLoginHandoffModal = observer(({onSuccess, prefillEmail}: BrowserLog
setHandoffExpiresAt(null);
try {
const result = await AuthenticationCommands.initiateDesktopHandoff();
handoffPollSecretRef.current = result.poll_secret ?? null;
setHandoffCode(result.code);
setHandoffExpiresAt(result.expires_at);
} catch (e) {
@@ -63,7 +65,7 @@ const BrowserLoginHandoffModal = observer(({onSuccess, prefillEmail}: BrowserLog
const timer = setInterval(async () => {
if (!pollingRef.current) return;
try {
const result = await AuthenticationCommands.pollDesktopHandoffStatus(handoffCode);
const result = await AuthenticationCommands.pollDesktopHandoffStatus(handoffCode, handoffPollSecretRef.current);
if (result.status === 'completed' && result.token && result.user_id) {
pollingRef.current = false;
completedRef.current = true;