Hi everyone! After a long break, I finally manage to release an update for Practice Suite with much needed bug fixes and requested features. Here’s what’s new:

🚀 New Features

• Play Progress in Recording Tiles: You can now see your play progress directly on recording tiles where the recording duration is, making it easier to track your practice sessions at a glance.

• Keep Screen Awake for Metronome, Tuner, and Recorder: No more interruptions! Your screen will now stay awake while using the metronome, tuner, or recorder, so you can stay focused on your practice.

• Persist Metronome Values on Restart: We've added the ability for the app to remember your metronome settings even after a restart, ensuring your workflow remains uninterrupted.

• Themable Adaptive Launcher Icons: Customize your experience further with themable adaptive launcher icons, blending perfectly with your device’s theme.

🎨 Design Enhancements

• Material 3 Design: The app has been updated to the latest Material 3 design standards, offering a more modern and intuitive user interface.

• Background Color of On/Off Buttons: I’ve tweaked the background color of the on/off buttons for better visual clarity and accessibility.

⚙️ Under the Hood

• Updated Packages: I’ve updated various packages to improve performance, stability, and security.

• Flutter 3.24: The app now runs on the latest version of Flutter, bringing performance optimizations and new capabilities.

🛠️ Bug Fixes

• Squashed Bugs: A number of pesky bugs have been fixed, ensuring a smoother experience.

• Improved Translations: I’ve refined the translations across the app to better serve our global user base.

Enjoy the update and if you have questions or issues, hit the matrix channel or projects issues page. Downloads should soon be available through Play Store, App Store, F-Droid and Codeberg releases.

Hey everyone,

I’ve got some exciting news – Keyoxide Mobile just got a fresh update! 🎉 I’ve been working hard to bring you version 2.4.0, and it’s packed with the most requested feature: offline mode.

What’s New in Keyoxide Mobile 2.4.0?

Offline-Mode: If you are stuck without internet and need to access your contacts or your full profile, I’ve got you covered. A copy of your full profile is now saved locally, encrypted on the device, and accessed when needed for user profiles and contacts. A 'last refreshed' date is also shown so you will know how old the profile is. With this, you can now open your contacts and profiles even when you’re offline. No more scrambling for Wi-Fi or data!

Swipe Right to Refresh on Contact Tile: I wanted to make refreshing your contact profiles as smooth as possible. Now, you can just swipe right on a contact tile to update it. It’s quick, easy, and super convenient.

Refresh All Contacts at Once from the Menu: Got a bunch of contacts that need updating? No problem. Head to the menu and refresh all your contacts at once. This should save you a ton of time and keep everything up-to-date with a single tap.

Bug Fixes

Unresponsive UI on Language Change When Offline: I fixed a pesky bug that was making the app unresponsive when you changed the language while offline. Now, everything should work seamlessly, whether you’re connected to the internet or not.

Updates

Updated Packages and Flutter Version: To make sure everything runs smoothly, I’ve updated the packages and upgraded Flutter to version 3.22.2. This means better stability, security, and performance for you.

As always, your feedback is super important to me. Let me know your thoughts, suggestions, or any issues you encounter on Matrix channel or community forum.

If you would like to help with the effort, hit our websites Keyoxide, Keyoxide Mobile, Keyoxide Docs and of course translations.

Happy updating!

Hi everyone! This will be a very short one I promise. On this update, I implemented some of the user requested features and I will walk you through two of them.

1. Language selection in settings

   There is a new section in the settings > system called language now. You will be able to choose your preferred language or default to system which follows the system language.

   

2. Profile privacy settings

   There is a new switch on the profile cards 'Hide profile', when enabled the profile will be excluded from the profile list. In the settings, you can choose if you want to include the hidden profiles in the list. If the authentication is enabled, 'Show hidden profiles' switch in the settings is protected with authentication.

   

On top of the new features, bunch of other stuff was updated under the hood. Lots of upstream fixes and performance improvements from the packages used. Also we now use the latest gradle build tools to build Android versions. And the flutter was updated to the latest version as well which the app was built with. I fixed and tested the data migration issue as well, your data should persist between the updates but I would still backup the contacts and profiles just in case.

This is it for now. Thanks for reading, enjoy the update! For download links, visit Keyoxide Mobile. If you'd like to help with the effort, hit Keyoxide translations, Keyoxide repository, for donations Open Collective, wanna drop by and say hello Keyoxide Matrix Space or Community Forum.

Adds Contacts Feature and Guided Tour

Hi everyone, it's been a month again and here we are with another update. In this blog post, we'll dive into the details of these new additions and how they enhance the user experience.

This update has a bunch of small changes and improvements and two new features. I'll start with the new features:

Contacts Feature:

One of the most significant addition in this release is the contacts feature. I have been meaning to implement this since some time because there are lots of people in Keyoxide circle I'd love to follow their accounts of and remembering their fingerprints or taking a note of them is just too much of a hassle. Users can now easily add profiles of people they know to their address book (contacts) within the app, view their profiles on tap or delete them on left swipe. Just a convenient and quick way to store your most visited profiles. They can also import & export the contacts to & from a json file. Because of a bug in the file_picker package, for now, export feature is implemented a bit different depending on the platform, where on iOS, the contacts are exported directly to a keyoxide_contacts.json file in the application folder and on Android, you are able to chose the export directory yourself.

Guided Tour:

In addition to the new contacts feature, we have introduced a guided tour that walks users through the app's most important features at first launch. This tutorial helps users understand how to get started with managing their personal information.

Other small changes:

1. Flutter is updated and app is built with the latest version to date 3.19.2 which has a lot of benefits and performance improvements.

2. All the packages and dependencies are updated to their latest.

3. Translations are more complete now, if you would like to help with it, hit our codeberg translations.

4. UI and bug fixes.

IMPORTANT INFO: The update might delete your current profiles and settings. Please export your profiles before updating!

That's it for this update. Enjoy and drop by the community forum or matrix space if you wanna say hi.

After a lot of work and effort, we are rolling out an exciting update for Keyoxide Mobile, bringing a host of new features and improvements that enhance user experience and security. In this blog post, I'll delve into the details of the latest update.

New Additions

Advanced ASP Profile Management

Keyoxide now allows users to have comprehensive control over their ASP (Ariadne Signature Profile) profiles. The latest update enables you to:

• Create, edit, delete, import, and export profiles effortlessly.

• Manage claims associated with your ASP profiles, ensuring you have full control over your online identity.

Enhanced PGP & ASP Profile Capabilities

Storing multiple PGP and ASP profiles is now possible, allowing for greater flexibility and convenience in managing various identities or roles. Let's say you have different accounts for business and private purposes, you can now separate your claims and save them in individual profiles within the app.

Custom Domain and Validation Support

Keyoxide now supports custom domains. If you host your verification or ASPE server yourself, you will be able to validate and add your own domain (server) and manage your profiles privately within the app.

Server Update Availability

With the new network section in the settings, you will stay informed about server updates and check if an update is available, keeping you up-to-date with the latest enhancements.

Improved Security with Biometric and Other Authentication Methods

If you have already setup a local authentication for your device such as biometric, PIN, password, pattern, you name it.. App takes advantage of it to protect your profiles so an unknown person can't mess your profiles or delete them. Don't forget to turn on a authentication method from your device system settings.

User profiles and user defined settings settings are now saved on the device encrypted.

Expanded Language Support

There are two new languages in our weblate translations portal. Portuguese and Chinese, catering to a wider audience and enhancing the app's accessibility. With that we have ten supported languages, Chinese, German, English, Dutch, French, Galician, Polish, Portuguese, Spanish and Turkish.

Bug Fixes and UI Overhauls

The update addresses numerous bugs and UI inconsistencies, ensuring a smoother, more reliable experience.

Changes

Revamped Localization Service

There is a new localization service with in-app translation strings, we no longer download and cache the latest translations on the app launch but get the translation on build time and embed them in the app. Which solved a lot of issues our users were having..

Updated User Interface

Significant changes have been made to the user view, profile display view, and Settings UI to accommodate the new features implemented.

Technical Updates

Under the hood, we updated all the packages to their latest and upgraded Flutter to version 3.16.9, ensuring better performance and compatibility.

This update represents a significant step forward for Keyoxide in its mission to provide a secure and user-friendly platform for decentralized identity verification. We hope with it's new features and improvements, Keyoxide is poised to become an even more essential tool for anyone looking to manage their online identity with ease and security.

For download links and more, please hit the Keyoxide Mobile website. Stay tuned for more updates and improvements from Keyoxide!

Hello, everyone! I hope you all had a fantastic summer. Yarmo released the API update much earlier, but we held off until it was fully matured for the app. Now, it's ripe and ready for you to enjoy. If you're not yet familiar with the ASP profiles (Ariadne Signature Profile), I recommend checking out Keyoxide blog and the latest post for more information. Here are some exciting highlights from this release:

Support for ASP Profiles: I won't delve into the technical details here, but for non-technical users interested in creating a profile, you can easily do so in the web client and add your claims directly within the client. Our app is now fully compatible with ASP profiles, offering features like deep linking and QR code support. We're also working on bringing profile creation functionality to the app, so stay tuned for updates!

Design Overhaul: Yarmo has given our design a significant facelift, resulting in a sleeker and simpler appearance. This fresh look is particularly beneficial for users with numerous claims. We've also added neat little service provider icons for the claims, enhancing your overall experience. We've strived to incorporate this new design sensibility into the app, and we're confident you'll appreciate it. Take a sneak peek:

Loading Overlay with Claim Count: We now show a loading circle with the claim count, improving user experience. We've implemented a two-step process, making an initial API call to retrieve the claim count and displaying it to the user before proceeding with verification. This change provides a much smoother and more informative experience, in our humble opinion.

Package and Flutter Version Updates: We've also updated all packages and the Flutter version, incorporating numerous upstream bug fixes and performance enhancements. While I won't dive into the specifics, rest assured that this update brings better overall stability and performance.

To sum it up, this update will soon be available in app stores. However, if you can't wait, you have the option to download the Android APK directly from Codeberg releases. You can find the app links on the dedicated mobile page or the new apps page. If you'd like to contribute to translations, please visit the translations page. Your assistance is greatly appreciated!

Thank you for your continued support, and we hope you enjoy this exciting update.

Hi everyone, I have been hard at work implementing the NLnet milestones alongside improving and fixing the bugs. Keyoxide Mobile recently underwent a comprehensive security audit by Radically Open Security (ROS).

Photo by Franck on Unsplash

“The Keyoxide mobile application presented overall a high level of security, even if some medium to low issues were found.”

ROS

The audit revealed several areas that required attention, including incomplete cleanup of shared preferences, improper TLS certificate validation, improper input validation, and improper input validation of server response.

Enhancing Security:

The security audit conducted on Keyoxide Mobile uncovered several vulnerabilities that needed immediate attention. I took swift action to rectify these issues, ensuring that users' data and privacy remain safeguarded. Here are the key security improvements implemented after the audit findings:

1. Complete Cleanup of Shared Preferences:

Shared preferences might contain sensitive data from users profile (It normally shouldn’t but who knows). Failing to clear these preferences thoroughly could leave traces of sensitive information. App now ensures complete cleanup of shared preferences.

2. Proper TLS Certificate Validation:

Validating the Transport Layer Security (TLS) certificates used in secure connections is crucial to prevent man-in-the-middle attacks and protect the integrity of data transmission. By addressing the improper TLS certificate validation, app now enforces robust security measures, guaranteeing secure and encrypted communication between the app and its servers. ( I had to revert this fix because of frequent certificate renewals but once I implement the local profile verification, we won’t need this server request at all.)

3. Improved Input Validation:

Input validation is a critical defense against common security vulnerabilities such as injection attacks and cross-site scripting. I bolstered the input validation mechanism by using the DIO package parameters instead of string concatenation when constructing the URLs, which ensures that user-supplied data is thoroughly checked and sanitized to prevent malicious code execution or unintended data manipulation.

4. Strengthened Validation of Server Response:

Just added a simple check to make sure the data returned from the server is in JSON format.

Accessibility:

Apart from addressing security concerns, I have been working on enhancing accessibility. Here's an overview of the accessibility improvements:

1. Semantics:

I incorporated semantic elements into the user interface, enabling assistive technologies to better understand and navigate the app's content. By leveraging semantic tags & widgets and proper structuring, Keyoxide Mobile now offers improved accessibility for users relying on screen readers or other assistive technologies.

2. Dyslexic Font:

Understanding the challenges faced by individuals with dyslexia, Keyoxide Mobile now includes a dyslexic font option. This feature enhances readability and comprehension, making the app more accessible for users with dyslexia or reading difficulties.

3. Seed color

We now have a new section in the theming which lets you chose a seed color, the app then create a color palette from the chosen color and applies it across the app. It’s suppose to have the right contrast for accessibility and looks really neat if you ask me.

We also updated the design from material 2 to material 3. You will notice the new material 3 widgets like bottom navigation, theme mode buttons etc.

Unit and Bloc Tests for Reliability:

Ensuring the reliability of an application is crucial for maintaining user trust and satisfaction. I integrated unit and bloc tests into the development process. These tests validate the individual units of code and cubits of application states, respectively, ensuring that the app functions as intended and minimizing the risk of regression issues. The unit tests are integrated to the CI/CD process, if the tests doesn’t pass, build process stops and sends me an email with the report so I can fix the issue.

This is it for now. You can find all the changes and fixes in the new version 1.5.0. If you wanna get these seldom updates to your inbox, subscribe below. Through semantic labels I had to add a lot of new text to the weblate waiting to be translated.

If you haven’t seen the Keyoxide Mobile’s NLnet funding milestones yet, one of them is localization. When I heard the Codeberg is launching a translation service, I thought it would be the perfect candidate for Keyoxide Mobile since we host all our source code in codeberg and I wasn’t wrong. After adding Keyoxide Mobile to codeberg translations, we had eight Languages translated at 100% in just two weeks with the help of the awesome community behind codeberg translations and Keyoxide. Currently available languages are English, Dutch, French, Galician, German, Polish, Spanish and Turkish.

Codeberg translations is a Weblate instance, for those who never heard of Weblate, Weblate is a free, open-source web-based translation management system that enables collaborative translation of software, documentation, and other types of content. Keyoxide joins a growing number of projects on Weblate, including popular open-source projects like VLC media player, Nextcloud, and Django, here is the complete list.

Photo by Hannah Wright on Unsplash

With the addition of localization support on codeberg translations, we hope to increase the accessibility of the mobile app to a wider audience. Non-English speaking users can now contribute translations to the app, making it easier to use and more intuitive.

To contribute translations, users can simply create an account on Codeberg or login with their existing account and navigate to the Keyoxide project. From there, they can choose their preferred language and begin translating the app's interface, even add a new language if it’s not there.

Localization on codeberg translations and Weblate is just one of the many steps Keyoxide is taking to make the platform more accessible to users around the world.

Another feature we have implemented is deep linking. When a user clicks on a deep link, their device will recognize the URL scheme (OPENPGP4FPR) and launch the Keyoxide app and view the profile directly. For example, go to the demo profile here: https://keyoxide.org/project@keyoxide.org and then click the fingerprint key and then hit ‘SHOW OPENPGP FINGERPRINT QR’ button and click the OPENPGP4FPR link which should launch the app and view the profile.

Updates will be available shortly on the store of your choice and download links can be found on Keyoxide Mobile website.

This is it for now. If you're interested in contributing to the localization effort for the Keyoxide, head over to codeberg translations and start translating today!

When I set out to find an open source localization service for Keyoxide Mobile, I couldn’t find many open source services with easy implementation and than I remembered codeberg announcing a translation service, a weblate instance. Since we host all our code on codeberg, I decided to check it out and I’m glad I did.

Weblate is a free, open-source web-based translation management system that enables collaborative translation of software, documentation, and other types of content. Keyoxide joins a growing number of projects on Weblate, including popular open-source projects like VLC media player, Nextcloud, and Django. It supports translation service suggestions such as DeepL to make translating a breeze.

When it comes to open source projects, Weblate is the go-to localization service. What makes it especially attractive for flutter developers is, there is an unofficial weblate sdk package in pub.dev which makes the integration very easy. The developer of the package @cozvtieg9 is incredibly responsive, he was able to fix a bug I encountered less then a few hours and helped me with the integration as well. He even implemented a feature request I made in less then 24 hours.

Enough talk, lets get to the code. First you need to have a weblate instance, if you don’t want to host a weblate instance yourself, I would recommend the codeberg instance. You can check the weblate docs for further info. Once you created your project and added your app as a component:

1. go to project > Manage > API access, from there hit the Teams tab on top. Create a new team and name it ‘Languages’ or whatever you want, don’t change anything else and hit Add button at the bottom.

   

Once you have your ‘Languages’ team, go to API access and create a project token, name it whatever you want, choose an expiry date. When you hit create, you will get to chose Teams, here we will un-select the Administration team and select the team we created before, in my case ‘Languages’. We don’t want our token to have admin privileges. Afterwards you copy the token somewhere safe, we will need it later.

1. Now go to profile > settings > API access tab and copy the API root URL we will need later on.

2. In the app first we will need to add localization support and the weblate_sdk package to our pubspec.yml file

    weblate_sdk: latest
    flutter_localizations:
        sdk: flutter
   

3. In our main function, we initialize the weblate_sdk. In my case the API root URL was https://translate.codeberg.org/api/ but https://translate.codeberg.org worked as well so if the root URL from weblate doesn’t work for you, remove the /api/ at the end and try again. If you need more info about the parameters, you can find it in the documentation.

     await WebLateSdk.initialize(
        token: 'the project token we created in step 2',
        host: 'API root URL from step 3',
        projectName: 'name of project',
        componentName: 'name of component',
        defaultLanguage: 'en',
        disableCache: false, //optional
        cacheLive: const Duration(days: 1), //optional
        fallbackJson: 'assets/default.json', //optional
      );
   

4. Next you just need to create a few strings in your component and use your localized strings in your code.

    context.localizedValueOf('key')
   

5. You can also use formatted strings

    context.localizedValueOf('key', format: ['John'])
   
    Note: To use formatted strings you should highlight the interpolated string with { }. For example: 'Welcome {username}!'
    Output: Welcome John!
   

That’s it really! Now you need to take your time and localize all the text in your app. Codeberg weblate instance has such a strong community that after adding my app, I got 8 languages translated at 100% in a week or so.

If you liked this article and want to know more about open source content for flutter, follow on Mastodon and Twitter.