Go to file

Daniil Klimov 44c759c190 fix: security hardening — Keychain, no hardcoded creds, safe URLs

- Add KeychainService for encrypted token storage (auth, refresh, health JWT, API key)
- Remove hardcoded email/password from HealthAPIService, store in Keychain
- Move all tokens from UserDefaults to Keychain
- API key sent via X-API-Key header instead of URL query parameter
- Replace force unwrap URL(string:)! with guard let + throws
- Fix force unwrap Calendar.date() in HealthKitService
- Mark HealthKitService @MainActor for thread-safe @Published
- Use withTaskGroup for parallel habit log fetching in TrackerView
- Check notification permission before scheduling reminders
- Add input validation (title max 200 chars)
- Add privacy policy and terms links in Settings
- Update CLAUDE.md with security section

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 14:11:10 +03:00

PulseHealth

fix: security hardening — Keychain, no hardcoded creds, safe URLs

2026-04-06 14:11:10 +03:00

.gitignore

feat: Initial iOS Health Dashboard app (Swift + SwiftUI)

2026-03-25 10:38:58 +00:00

CLAUDE.md

fix: security hardening — Keychain, no hardcoded creds, safe URLs

2026-04-06 14:11:10 +03:00

project.yml

feat: major app overhaul — API fixes, glassmorphism UI, health dashboard, notifications