ZacharyZhang-NYandClaude bd68382921 C12.4: mail credentials and OAuth sign-in ...

Passwords and refresh tokens go only to the system keychain; a refused
keychain keeps them in memory until exit and says why. Gmail and
Microsoft sign in by authorization code with S256 PKCE on a loopback
redirect; refresh tokens are kept, and revoked grants ask to sign in
again. Client IDs come from the build (env or oauth.env). ureq trace
records never reach the log.

Co-Authored-By: Claude <noreply@anthropic.com>

2026-10-19 18:59:56 -04:00

..

reviews

C12.4: mail credentials and OAuth sign-in

2026-10-19 18:59:56 -04:00

BUGS.md

0.1.5 update video and Chinese changelog

2026-10-15 09:24:06 -04:00

R4-acceptance.md

R4.11: close as [~] after round 3

2026-10-14 22:57:21 -04:00

TASKS.md

C12.4: mail credentials and OAuth sign-in

2026-10-19 18:59:56 -04:00