jacobh2 b985ce969d E-17: fcm_token at most 512 characters (security L-4) ...

An authenticated device could store a token of up to the 1 MiB body limit, sent to FCM in every push for it. Now
(proposed D-114) more than 512 characters after trimming is 400 invalid_request with field fcm_token, like the
empty string (D-034); E-17's only documented error stays the only one. Test at 512 and 513.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TQd3pEP9UeN2uifbHknQ7B

2026-10-18 22:43:54 +02:00

..

kvitt-domain

Contracts for 14 default categories and the category suggestion (UX-3, UX-8)

2026-10-18 08:10:57 +02:00

kvitt-import

Server overhaul: clear clippy::pedantic wins

2026-10-18 22:43:54 +02:00

kvitt-server

E-17: fcm_token at most 512 characters (security L-4)

2026-10-18 22:43:54 +02:00