92f317f5e5
GrapheneOS Vanadium browser blocks intent: URLs from web pages as a security hardening measure. This is why every URL format we tried caused "malformed request" — Vanadium was blocking the intent before Amber ever saw it. New flow that works on ALL Android browsers including GrapheneOS: 1. Tap "Open Amber" → navigates to nostrsigner: URL with no callbackUrl (Amber copies pubkey to clipboard when no callbackUrl is given) 2. User approves in Amber, comes back to app 3. App tries navigator.clipboard.readText() automatically on visibilitychange 4. If clipboard permission denied → shows paste input for hex pubkey 5. User pastes pubkey → logged in No intent: scheme, no callback URL, no redirect loop. Simple and bulletproof. Co-authored-by: shakespeare.diy <assistant@shakespeare.diy>
5 lines
321 B
Text
5 lines
321 B
Text
v1.0.31 — Amber login redesigned for GrapheneOS
|
|
|
|
- GrapheneOS Vanadium blocks intent: URLs from web pages (security hardening)
|
|
- New flow: tap Open Amber → approve in Amber → app tries clipboard auto-read → if denied, shows paste input for hex pubkey
|
|
- Works on all Android browsers including GrapheneOS Vanadium
|