The mobile app

In preview

One app for the servers you run. It signs in through the phone's browser, so passkeys and your identity provider work as they do on a desktop, and it locks behind the phone's biometrics.

Built and lab-tested

  • Sign-in through the system browser (Custom Tabs) with PKCE, so passkeys, authenticator codes and single sign-on behave as on a desktop. The app receives a one-time code, not your password.
  • After sign-in the app shows the real panel for your server, with phone safe areas and a "My servers" menu to switch between servers.
  • Tokens are kept in the phone's secure storage, one item per server. Access tokens last 15 minutes and refresh rotates; reuse of an old refresh token signs the device out.
  • A biometric or device-credential lock that comes back after the idle time you set, and the app's preview in the recent-apps list is cleared.
  • A device list: end any phone from the panel and its sessions and refresh tokens are deleted in one step. An operator can set a minimum app version.
  • Push through a relay: the panel stores push tokens (never returned by the API) and the relay sends generic text per category, authenticated by the licence.

Not there yet

  • Not in the app stores. The Android keystore and Play listing, the Apple account, push credentials and a Mac or CI build for iOS are still the owner's to arrange.
  • The build tooling in the repository makes an Android package; no iOS build is described.
  • Push is compiled in only when a Firebase configuration file is present in the build.

Until it is in the stores

The app is for early-access installs. You can use the panel from a phone browser today: the panel was checked at 390 px wide on every route linked from Home or the sidebar.

Every action in this area is in the panel, one keystroke away in the command palette (Ctrl K), on the command line and in the API, and most changes can be previewed as a plan first. Built and tested in our lab; RespireCloud is not released yet.

Modules in this area