ismis-helper

12 Commits 2 Branches 3 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
adrianbonpin	7adad7cbc8	feat(security): encrypt profile passwords at rest with AES-GCM ci / test (push) Successful in 57s Details ci / test (pull_request) Successful in 52s Details Passwords are now encrypted with Web Crypto AES-GCM (256-bit) before being stored in browser.storage.local. The random key is persisted so it survives browser/service-worker restarts (otherwise old ciphertext could never be decrypted). Encryption/decryption happen in the background via encrypt-password/decrypt-password messages; autoLogin decrypts on the fly and falls back to a legacy plaintext password for pre-encryption profiles. The popup never reveals a stored password and preserves it when editing with a blank field. Removes the plaintext-password-at-rest smell flagged in the design review. Note: this is at-rest obfuscation-level security (the key ships with the extension); the extension only talks to the school portal.	2026-08-20 12:27:57 +08:00
adrianbonpin	53d5ca6d04	feat(v1.4.0): CSV/Excel/JSON/NextUp exports + hybrid smart year standing - Export modules (export-csv/json/xlsx) mirroring the PDF layout, plus a Next Up import CSV matching the raycast/nextup column contract. - Hybrid Year Level: View Grades history (exact per-semester standing), falling back to units math (prospectus total - lacking), then profile. Popup adds a year-mode setting (auto/custom/off). - On-page button row now offers PDF / CSV / Excel / JSON / Next Up. - Bump version to 1.4.0. - Tag-only build workflow with an optional AMO sign step for a signed .xpi; separate ci.yml keeps tests on pushes/PRs. - Tests: year-standing parser tests + export tests (CSV quoting, JSON schema, XLSX structure); CI validates XLSX via openpyxl.	2026-08-20 06:45:21 +08:00
adrianbonpin	9cc4fa5c97	ISMIS Helper: cross-browser build, CI, PDF fixes, Chrome download fix build-extension / build (push) Successful in 37s Details Squash merge of feat/ismis-helper into prod.	2026-08-18 19:13:49 +00:00

Author

SHA1

Message

Date

adrianbonpin

7adad7cbc8

feat(security): encrypt profile passwords at rest with AES-GCM

ci / test (push) Successful in 57s

Details

ci / test (pull_request) Successful in 52s

Details

Passwords are now encrypted with Web Crypto AES-GCM (256-bit) before being
stored in browser.storage.local. The random key is persisted so it survives
browser/service-worker restarts (otherwise old ciphertext could never be
decrypted). Encryption/decryption happen in the background via
encrypt-password/decrypt-password messages; autoLogin decrypts on the fly and
falls back to a legacy plaintext password for pre-encryption profiles. The
popup never reveals a stored password and preserves it when editing with a
blank field.

Removes the plaintext-password-at-rest smell flagged in the design review.
Note: this is at-rest obfuscation-level security (the key ships with the
extension); the extension only talks to the school portal.

2026-08-20 12:27:57 +08:00

adrianbonpin

53d5ca6d04

feat(v1.4.0): CSV/Excel/JSON/NextUp exports + hybrid smart year standing

- Export modules (export-csv/json/xlsx) mirroring the PDF layout, plus a
  Next Up import CSV matching the raycast/nextup column contract.
- Hybrid Year Level: View Grades history (exact per-semester standing),
  falling back to units math (prospectus total - lacking), then profile.
  Popup adds a year-mode setting (auto/custom/off).
- On-page button row now offers PDF / CSV / Excel / JSON / Next Up.
- Bump version to 1.4.0.
- Tag-only build workflow with an optional AMO sign step for a signed .xpi;
  separate ci.yml keeps tests on pushes/PRs.
- Tests: year-standing parser tests + export tests (CSV quoting, JSON schema,
  XLSX structure); CI validates XLSX via openpyxl.

2026-08-20 06:45:21 +08:00

adrianbonpin

9cc4fa5c97

ISMIS Helper: cross-browser build, CI, PDF fixes, Chrome download fix

build-extension / build (push) Successful in 37s

Details

Squash merge of feat/ismis-helper into prod.

2026-08-18 19:13:49 +00:00