mirror of
https://github.com/bulwarkmail/native.git
synced 2026-10-31 16:06:32 +00:00
Linus Rath
1131073323
The webmail's QR encodes a `bulwarkmail://pair?...` link, but nothing registered that scheme: scanning it with the system camera or Google Lens did nothing, and without a camera there was no way in at all. - `bulwarkmail` is registered in `app.config.js` (iOS) and the committed AndroidManifest. Links are parked in a small store and picked up by the sign-in screen, or by "Add account" when already signed in, once per launch. - "Paste sign-in link" on the sign-in screen (and next to the server step's scan hint) takes a link copied from the webmail. - While pairing, the waiting screen names the webmail being paired with.
105 lines
3.4 KiB
JavaScript
105 lines
3.4 KiB
JavaScript
const fs = require('node:fs');
|
|
const path = require('node:path');
|
|
const { execSync } = require('node:child_process');
|
|
|
|
const VERSION = fs.readFileSync(path.join(__dirname, 'VERSION'), 'utf8').trim();
|
|
|
|
let COMMIT = process.env.GITHUB_SHA || '';
|
|
if (!COMMIT) {
|
|
try {
|
|
COMMIT = execSync('git rev-parse --short HEAD', { cwd: __dirname, stdio: ['ignore', 'pipe', 'ignore'] })
|
|
.toString()
|
|
.trim();
|
|
} catch {
|
|
COMMIT = 'dev';
|
|
}
|
|
}
|
|
COMMIT = COMMIT.slice(0, 7);
|
|
|
|
// App Store Connect rejects a build whose CFBundleVersion it has already seen
|
|
// for this CFBundleShortVersionString, so this has to advance on every upload
|
|
// even when VERSION does not. CI passes the workflow run number; local builds
|
|
// fall back to 1 (never uploaded).
|
|
const IOS_BUILD_NUMBER = process.env.IOS_BUILD_NUMBER || '1';
|
|
|
|
module.exports = {
|
|
expo: {
|
|
name: 'Bulwark Mobile',
|
|
slug: 'bulwark-mobile',
|
|
// mailto: lets Android/iOS offer the app for mail links in other apps;
|
|
// bulwarkmail: is the webmail's sign-in link (bulwarkmail://pair?...).
|
|
// Android's manifest is maintained by hand and lists the same schemes.
|
|
scheme: ['bulwarkmobile', 'bulwarkmail', 'mailto'],
|
|
version: VERSION,
|
|
orientation: 'portrait',
|
|
icon: './assets/icon.png',
|
|
userInterfaceStyle: 'automatic',
|
|
newArchEnabled: true,
|
|
splash: {
|
|
image: './assets/splash-icon.png',
|
|
resizeMode: 'contain',
|
|
backgroundColor: '#ffffff',
|
|
dark: {
|
|
image: './assets/splash-icon.png',
|
|
backgroundColor: '#09090b',
|
|
},
|
|
},
|
|
ios: {
|
|
supportsTablet: true,
|
|
bundleIdentifier: 'org.bulwarkmail.mobile',
|
|
buildNumber: IOS_BUILD_NUMBER,
|
|
config: {
|
|
// The app only speaks HTTPS/TLS and uses platform crypto, which is
|
|
// exempt. Declaring it here skips the manual export-compliance
|
|
// questionnaire that otherwise blocks every TestFlight build.
|
|
usesNonExemptEncryption: false,
|
|
},
|
|
},
|
|
android: {
|
|
adaptiveIcon: {
|
|
foregroundImage: './assets/adaptive-icon.png',
|
|
backgroundColor: '#09090b',
|
|
},
|
|
edgeToEdgeEnabled: true,
|
|
predictiveBackGestureEnabled: false,
|
|
package: 'com.anonymous.bulwarkmobile',
|
|
// The AsyncStorage database holds cached message bodies, the outbox and
|
|
// the account registry; the platform backup would ship all of it to the
|
|
// user's Google account. Credentials live in SecureStore (excluded by
|
|
// its own rules) but the mail cache must not leave the device either.
|
|
allowBackup: false,
|
|
},
|
|
web: {
|
|
favicon: './assets/favicon.png',
|
|
},
|
|
plugins: [
|
|
'expo-secure-store',
|
|
'@react-native-community/datetimepicker',
|
|
'expo-localization',
|
|
[
|
|
'expo-camera',
|
|
{
|
|
cameraPermission:
|
|
'Bulwark Mail uses the camera to scan sign-in QR codes shown in webmail.',
|
|
// QR scanning never records audio; leaving the mic entry in would be
|
|
// an unexplained permission in App Review.
|
|
microphonePermission: false,
|
|
},
|
|
],
|
|
[
|
|
'expo-image-picker',
|
|
{
|
|
photosPermission:
|
|
'Bulwark Mail needs access to your photos so you can attach them to emails and set contact photos.',
|
|
// Only launchImageLibraryAsync is used - no in-app capture.
|
|
cameraPermission: false,
|
|
microphonePermission: false,
|
|
},
|
|
],
|
|
],
|
|
extra: {
|
|
commit: COMMIT,
|
|
},
|
|
},
|
|
};
|