feat(android): add Auth Tab login for self-managed front doors - #4536

Open

btli wants to merge 32 commits into

omnigent-ai:mainfrom

btli:polly/android-authtab

Commits on Aug 11, 2026

feat(android): sign in to front-door-auth servers via the Auth Tab

btli
and
omnigent
committed
c3fc393
fix(auth): bind native login to a PKCE code exchange, drop the VIEW callback

btli
and
omnigent
committed
d828a6b
fix(android): bind auth tab callbacks to verified apps
btli
committed
b4540b6
fix(android): harden auth tab login
btli
committed
d3f4d7b
fix(android): make auth tab login capability-driven
btli
committed
ec92393
fix(android): preserve Auth Tab login fallbacks
btli
committed
27ea9ac
fix(android): accept all valid signing fingerprints
btli
committed
4431b54
test(android): cover system-browser auth tab fallback
btli
committed
33ba34b
fix(web): keep the Workspace rail clear of the OS status and nav bars
btli
committed
c6a5af0
fix(web): give the execution-logs panel the native safe-area insets
btli
committed
b2e3070
test(web): reject nested Workspace rail rule
btli
committed
5332c2c
test(web): inspect every Workspace rail margin rule
btli
committed
2534466
test(web): check the inset vars across every Workspace margin rule
btli
committed
063f4f0
test(web): treat shorthand margin as a Workspace rail override
btli
committed
5866cdf
test(web): allow only one Workspace rail margin rule
btli
committed
300cc07
test(web): count the logical margin properties as overrides
btli
committed
0f7d38e
test(web): match any spelling of the Workspace attribute selector
btli
committed
1f92aeb
test(web): derive the rail's at-rule check from the matched rule
btli
committed
3b58fc1
test(web): assert the rail rule's nesting depth rather than its ancestors
btli
committed
dbb557c
fix(native): apply four-edge safe areas to the workspace rail
btli
committed
d3d27be
refactor(web): share the safe-area assertions in the CSS layout test
btli
committed
8ace4ba
fix(android): scope the injected panel inset rule to phone widths
btli
committed
f9b9785
chore: restore uv.lock registry URLs to PyPI
btli
committed
29170d5
test(e2e): cover the Workspace rail four-edge safe-area fold on Android
btli
committed
6ff30cf
fix(web): give docked md+ panels the rail's safe-area treatment
btli
committed
5bb15b2
test(web): pin the insetStyles template-literal invariant
btli
committed
fca10da
fix(web): drop the stale rail margin from the workspace panel offset
btli
committed
25eda75
fix(android): keep the md+ conversations sidebar clear of the system bars
btli
committed
511beee
fix(android): make OIDC login flows origin-bound and cancellable
btli
committed
749b01e
fix(android): drop OIDC tokens minted for a different origin
btli
committed
81f0f27
style(web): format right-rail assertion
btli
committed
599277c
test(android): avoid secret scan false positive
btli
committed
08f440b

Navigation Menu

Uh oh!

feat(android): add Auth Tab login for self-managed front doors - #4536

feat(android): add Auth Tab login for self-managed front doors#4536
btli wants to merge 32 commits into
omnigent-ai:mainfrom
btli:polly/android-authtab

Commits on Aug 11, 2026

feat(android): sign in to front-door-auth servers via the Auth Tab

fix(auth): bind native login to a PKCE code exchange, drop the VIEW callback

fix(android): bind auth tab callbacks to verified apps

fix(android): harden auth tab login

fix(android): make auth tab login capability-driven

fix(android): preserve Auth Tab login fallbacks

fix(android): accept all valid signing fingerprints

test(android): cover system-browser auth tab fallback

fix(web): keep the Workspace rail clear of the OS status and nav bars

fix(web): give the execution-logs panel the native safe-area insets

test(web): reject nested Workspace rail rule

test(web): inspect every Workspace rail margin rule

test(web): check the inset vars across every Workspace margin rule

test(web): treat shorthand margin as a Workspace rail override

test(web): allow only one Workspace rail margin rule

test(web): count the logical margin properties as overrides

test(web): match any spelling of the Workspace attribute selector

test(web): derive the rail's at-rule check from the matched rule

test(web): assert the rail rule's nesting depth rather than its ancestors

fix(native): apply four-edge safe areas to the workspace rail

refactor(web): share the safe-area assertions in the CSS layout test

fix(android): scope the injected panel inset rule to phone widths

chore: restore uv.lock registry URLs to PyPI

test(e2e): cover the Workspace rail four-edge safe-area fold on Android

fix(web): give docked md+ panels the rail's safe-area treatment

test(web): pin the insetStyles template-literal invariant

fix(web): drop the stale rail margin from the workspace panel offset

fix(android): keep the md+ conversations sidebar clear of the system bars

fix(android): make OIDC login flows origin-bound and cancellable

fix(android): drop OIDC tokens minted for a different origin

style(web): format right-rail assertion

test(android): avoid secret scan false positive