LCE-Hub-Mirrors/LCE-Emerald-Launcher
1
2
Fork 0
mirror of https://github.com/LCE-Hub/LCE-Emerald-Launcher.git synced 2026-07-20 09:17:14 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
339 commits 2 branches 8 tags 51 MiB
Commit graph

339 commits

This branch
This branch
All branches
Author SHA1 Message Date
M1noa 8f6aea866f fix(LCEL-08): move LCEOnline token to Rust-side secret store 
the access token used to live in localStorage under lceonline_session.
localStorage is readable by any JS in the webview origin (XSS exposure).

added three new IPC commands:
- lceonline_token_store(token, username): writes session.json under
  app_data_dir with 0600 perms (POSIX).
- lceonline_token_load(): reads session.json and returns {token, username}.
- lceonline_token_clear(): removes session.json.

the frontend now uses invoke() to call these instead of localStorage.
the token never enters the webview's storage surface.
 2026-07-16 20:27:35 -05:00
M1noa 3ab1e2cffa fix(LCEL-08): document LCEOnline token in localStorage 
the access token currently lives in localStorage under
lceonline_session. any XSS in the React frontend (or a browser
extension / devtools access to the webview's localStorage) yields
the bearer token = full LCEOnline account takeover.

added a comment documenting the issue and a TODO for moving the
token to a Rust-side secret store accessed via a narrow IPC that
returns only scoped capability, or to use an httpOnly cookie +
same-site strict backend auth flow.

the proper fix is a multi-file change touching the auth flow,
the IPC surface, and the backend. left as a TODO so this commit
stays minimal and reviewable.
 2026-07-16 20:27:35 -05:00
Edward? 8da6a217bc
Feat: Nix Flake install method with ci (#146)
Some checks are pending
Nix / build (push) Waiting to run
Details
2026-07-16 21:08:19 +03:00
Jan Dróżdż 4a561a0c78
Fixed bug with the audio track skipping on Windows (#143) 
Co-authored-by: /home/neo <158327205+neoapps-dev@users.noreply.github.com>
 2026-07-15 15:57:45 +03:00
Byte b164a52bf8
fix(lceonline): Always use the latest download available (#139) 2026-07-14 15:25:55 +03:00
str1k3r 1c65b48958
fix(lceonline): user turning null by refreshing token when app is opened (#138) 2026-07-13 14:15:06 +03:00
/home/neo 9cf05611a3
feat(hooks/useGameManager): partnership with LapboardMC (#137) 2026-07-13 13:17:31 +03:00
str1k3r 0d316a6518
fix: appheader and panorama not showing on setup (#136) 2026-07-13 12:02:19 +03:00
/home/neo 5f04f26eb8
bump (#133) 2026-07-12 20:11:06 +03:00
/home/neo 0a32333019
1.6.0 drop 1 (#132) 2026-07-12 20:07:52 +03:00
/home/neo 0594d330be
fix(versions): custom path empty directory, fixes #127 (#131) 2026-07-12 10:06:37 +03:00
str1k3r e8038f3c3e
fix(lceonline): client not opening & webview window for lceonline login (#129) 2026-07-12 09:43:17 +03:00
/home/neo 124bbad12c
docs: readme (#126) 2026-07-11 21:24:01 +03:00
/home/neo 034fbf5737
feat: 1.5.0 drop 2 (#122) 
Co-authored-by: str1k3r <115313679+S1l3ntStr1ke87@users.noreply.github.com>
 2026-07-11 21:04:53 +03:00
/home/neo f46453f1cd
feat: extended description and required versions (#119) 2026-07-07 17:10:20 +03:00
/home/neo b8c448dab8
feat(workshop): dependencies support (#118) 2026-07-07 16:30:48 +03:00
/home/neo dd3048b88c
chore: bump (#117) 2026-07-06 22:11:40 +03:00
neoapps-dev 7124b4a316 chore: bump 2026-07-06 21:55:04 +03:00
/home/neo ecf3ca084f
feat(credits): more people (#115) 2026-07-04 15:56:19 +03:00
/home/neo f7177b43bd
feat(credits): more people (#114) 
Co-authored-by: Sarah <asdyousif22.acc2@gmail.com>
 2026-07-04 15:32:11 +03:00
/home/neo 5238a9de4e
feat(hooks/useGameManager): Moon Edition panorama (#113) 2026-07-04 14:17:51 +03:00
/home/neo d9441c9a52
feat(devtools): initial model editor (#112) 2026-07-04 14:01:20 +03:00
/home/neo 121a0bf4cf
fix(hooks/useGamepad): focus state (#110) 2026-07-02 15:52:28 +03:00
/home/neo 2e8e6cdec3
feat(devtools): community guides (#109) 2026-07-02 15:25:21 +03:00
Specifix d7eca9ea60
Fix typo in Free Multiplayer section (#107) 
Corrected a typo in the README regarding multiplayer service.
 2026-07-01 11:21:33 +03:00
/home/neo 58581203e0
feat(icon): macOS style (#106) 2026-06-30 22:31:11 +03:00
/home/neo 3842bee2ab
feat: bad apple (#105) 2026-06-28 23:33:12 +03:00
/home/neo 9b4d7c7167
feat(downloadoverlay): custom image (#104) 2026-06-28 22:35:12 +03:00
/home/neo 074c1e50b9
feat: titlebar dragging (#103) 2026-06-28 20:48:50 +03:00
/home/neo b5667532ca
feat: savedata parsing and 360revived new link (#101) 2026-06-28 20:36:29 +03:00
/home/neo a94e4ec758
feat: parallel downloads, redesigned download overlay (#100) 2026-06-28 18:12:40 +03:00
/home/neo 92bd9c6f2a
feat(credits): more logos and moon edition (#99) 2026-06-28 17:11:49 +03:00
/home/neo e2459777b2
feat: neoLegacy official DLCs support (#98) 2026-06-28 17:03:53 +03:00
/home/neo e2a58ab948
fix(workshop): no image for plugins, and description bug fix (#97) 2026-06-28 15:56:05 +03:00
/home/neo 62b81e5145
feat: bring back titlebar on non-macOS systems, and show on fullscreen (#96) 2026-06-28 15:26:55 +03:00
/home/neo 98f92c3173
feat: download retry and error surfacing (#95) 2026-06-28 14:38:33 +03:00
/home/neo 85855ac4af
feat: workaround neoLegacy slim skin support (#94) 2026-06-27 14:44:33 +03:00
/home/neo 2e57576200
feat(intro): skip on keypress or click (#92) 2026-06-26 21:47:01 +03:00
/home/neo 0459370846
feat: neoLegacy gitea link, placeholder for moon edition, and bluerne… (#91) 2026-06-26 21:04:44 +03:00
/home/neo ef2dbc085f
feat(GameManager): new hellish ends logo (#90) 2026-06-25 14:19:05 +03:00
str1k3r 4e5a0ebb12
fix(lceonline): no image not showing when no icon is specified (#89) 2026-06-25 13:06:29 +03:00
str1k3r a1558b6693
fix: black screen when opening server plugins (#88) 2026-06-25 01:08:02 +03:00
/home/neo 5d7d2148cc
feat(VersionsMenu): download to custom path (#87) 2026-06-24 19:58:34 +03:00
/home/neo e65ea4e06a
fix: fresh install fullscreen (#86) 2026-06-24 13:41:17 +03:00
/home/neo d90c95da7f
bump (#84) 2026-06-23 18:58:21 +03:00
neoapps-dev 587d1983b8 fix: sfx issue, closes #80 2026-06-22 22:29:03 +03:00
neoapps-dev b3162d4e02 feat: revelations logo and instance deletion 2026-06-22 14:25:43 +03:00
neoapps-dev 4dc55c918a fix!: bug that deleted the instance right after downloading 2026-06-22 13:58:57 +03:00
neoapps-dev b7c8ef7e86 ci: release notes 2026-06-22 13:50:03 +03:00
/home/neo 9f617d4b40
docs: update screenshots 2026-06-22 13:34:18 +03:00