jjbrunton/Sauci
1
0 Fork 0
mirror of https://github.com/jjbrunton/Sauci.git synced 2026-10-31 18:19:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(invite-funnel): set real Android app signing cert fingerprint

Browse Source 
Replace the assetlinks.json placeholder with the Play App Signing key
SHA-256 certificate fingerprint so Android App Links for
https://sauci.app/join/* can verify.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
jjbruntonandClaude Fable 5 committed 2026-08-30 18:06:42 +01:00
1 parent d48b44baa8
commit 4f9950f21b
3 files changed
+8 -8
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

apps/web/public/.well-known/assetlinks.json
+1 -1
View File
@@ -5,7 +5,7 @@
"namespace": "android_app", "namespace": "android_app",
"package_name": "com.sauci.app", "package_name": "com.sauci.app",
"sha256_cert_fingerprints": [ "sha256_cert_fingerprints": [
"PLACEHOLDER_ANDROID_RELEASE_SHA256_CERT_FINGERPRINT" "65:2F:E7:60:3F:2E:D2:54:8B:4A:EF:0E:F1:AC:35:3E:DD:13:13:EF:35:E7:90:A7:01:1F:89:0F:4F:71:E2:21"
] ]
} }
} }
apps/web/public/.well-known/well-known.test.ts
+3 -3
View File
@@ -23,8 +23,8 @@ describe('assetlinks.json', () => {
expect(data[0].target.package_name).toBe('com.sauci.app') expect(data[0].target.package_name).toBe('com.sauci.app')
expect(data[0].target.namespace).toBe('android_app') expect(data[0].target.namespace).toBe('android_app')
// The real release cert fingerprint is not present in this repository; // Must be the Play App Signing key certificate fingerprint (Play Console >
// this placeholder must be replaced before Android App Links will verify. // Test and release > Setup > App signing), colon-separated uppercase hex.
expect(data[0].target.sha256_cert_fingerprints[0]).toContain('PLACEHOLDER') expect(data[0].target.sha256_cert_fingerprints[0]).toMatch(/^([0-9A-F]{2}:){31}[0-9A-F]{2}$/)
}) })
}) })
docs/couple-pairing.md
+4 -4
View File
@@ -285,10 +285,10 @@ and `apps/web/public/.well-known/assetlinks.json` authorize `sauci.app` to open
the app for `/join/*`. The Apple Team ID (`BXVPBATDZY`, from the app for `/join/*`. The Apple Team ID (`BXVPBATDZY`, from
`apps/mobile/app.json` and `apps/mobile/eas.json`) and bundle/package id `apps/mobile/app.json` and `apps/mobile/eas.json`) and bundle/package id
(`com.sauci.app`) are real values already used elsewhere in the repo. The (`com.sauci.app`) are real values already used elsewhere in the repo. The
Android release certificate SHA-256 fingerprint in `assetlinks.json` is a SHA-256 fingerprint in `assetlinks.json` is the Play App Signing key
placeholder (`PLACEHOLDER_ANDROID_RELEASE_SHA256_CERT_FINGERPRINT`) and must certificate fingerprint from the Play Console (Test and release > Setup >
be replaced with the real release signing certificate fingerprint before App signing); if the app signing key ever rotates, this file must be updated
Android App Links will verify. or Android App Links will stop verifying.
**Mobile link handling:** `apps/mobile/app.json` declares **Mobile link handling:** `apps/mobile/app.json` declares
`associatedDomains: ["applinks:sauci.app"]` (iOS) and an intent filter for `associatedDomains: ["applinks:sauci.app"]` (iOS) and an intent filter for