Ricardo 2a4ac75c77 fix: use HTML+JS redirect for native app OAuth callbacks ...

Android Chrome Custom Tabs block 302 redirects to custom URI schemes
(fedilab://, moshidon-android-auth://) for security. The server sends
the redirect correctly but the WebView silently ignores it — "nothing
happens" when the user taps Authorize.

Fix: detect non-HTTP redirect URIs and render an HTML page with both
a JavaScript window.location redirect and a meta refresh fallback.
Client-side navigation to custom schemes is allowed by WebViews.

HTTP(S) redirect URIs (Phanpy, Elk) still use standard 302.

2026-03-21 09:42:31 +01:00

..

entities

fix: rename variable to avoid 'published' redeclaration (SyntaxError)

2026-03-20 20:36:51 +01:00

helpers

fix: sort Mastodon API timeline by published date instead of ObjectId

2026-03-20 18:05:45 +01:00

middleware

feat: add Mastodon Client API layer for Phanpy/Elk compatibility

2026-03-18 12:50:52 +01:00

routes

fix: use HTML+JS redirect for native app OAuth callbacks

2026-03-21 09:42:31 +01:00

router.js

feat: add Mastodon Client API layer for Phanpy/Elk compatibility

2026-03-18 12:50:52 +01:00