iOS: Add universal links for private session invites (#232)

SloMR · web-flow · commit fae8efd354a5 · 2026-07-08T23:29:49.000+03:00
### Summary Adds iOS universal link support so `https://pastepoint.com/private/<code>` invite links open PastePoint and join the matching private session directly. This also serves the Apple App Site Association file from the web/nginx stack and bumps client version policy for the new release. ### What changed **Universal links** - Add the Apple App Site Association file for `/private/*` links. - Include `.well-known/apple-app-site-association` in the Angular build assets. - Copy the AASA file into the nginx image. - Serve the AASA file from nginx with `application/json`. - Add the iOS Associated Domains entitlement for `applinks:pastepoint.com`. **iOS** - Handle incoming universal links with `.onOpenURL`. - Parse and validate private session invite URLs before joining. - Join the private session from a universal link using the same connection flow as manual joins. - Ignore links for the already-active private session. - Close settings and refresh rooms/user state after joining from a link. - Skip a redundant reconnect on the first network path monitor update. **Nginx / static serving** - Add an explicit route for `/.well-known/apple-app-site-association`. - Simplify static `try_files` behavior for `robots.txt` and `sitemap.xml`. **Version policy / bumps** - iOS → `0.10.0` - web → `0.21.0` - server policy minimum/latest: - iOS → `0.10.0` - web → `0.21.0` - Set the iOS update gate URL to the real App Store URL.
diff --git a/client/ios/PastePoint.xcodeproj/project.pbxproj b/client/ios/PastePoint.xcodeproj/project.pbxproj
@@ -435,6 +435,7 @@
 			buildSettings = {
 				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
 				ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = "";
+				CODE_SIGN_ENTITLEMENTS = "$(PROJECT_DIR)/PastePoint/Resources/PastePoint.entitlements";
 				CODE_SIGN_STYLE = Automatic;
 				CURRENT_PROJECT_VERSION = 1;
 				DEVELOPMENT_TEAM = KH5NHCFH44;
@@ -451,7 +452,7 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				MARKETING_VERSION = 0.9.0;
+				MARKETING_VERSION = 0.10.0;
 				PRODUCT_BUNDLE_IDENTIFIER = com.pastepoint.ios;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				STRING_CATALOG_GENERATE_SYMBOLS = YES;
@@ -473,6 +474,7 @@
 			buildSettings = {
 				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
 				ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = "";
+				CODE_SIGN_ENTITLEMENTS = "$(PROJECT_DIR)/PastePoint/Resources/PastePoint.entitlements";
 				CODE_SIGN_STYLE = Automatic;
 				CURRENT_PROJECT_VERSION = 1;
 				DEVELOPMENT_TEAM = KH5NHCFH44;
@@ -489,7 +491,7 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				MARKETING_VERSION = 0.9.0;
+				MARKETING_VERSION = 0.10.0;
 				PRODUCT_BUNDLE_IDENTIFIER = com.pastepoint.ios;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				STRING_CATALOG_GENERATE_SYMBOLS = YES;
diff --git a/client/ios/PastePoint/App/ContentView+Events.swift b/client/ios/PastePoint/App/ContentView+Events.swift
@@ -18,7 +18,17 @@ private struct ChatEventHandlers: ViewModifier {
   let owner: ContentView
 
   func body(content: Content) -> some View {
-    connectionHandlers(fileTransferHandlers(messageHandlers(content)))
+    deepLinkHandlers(connectionHandlers(fileTransferHandlers(messageHandlers(content))))
+  }
+
+  // MARK: - Deep links
+
+  /// Universal links (`https://pastepoint.com/private/<code>`) join the invited session.
+  private func deepLinkHandlers(_ content: some View) -> some View {
+    content
+      .onOpenURL { url in
+        owner.handleIncomingURL(url)
+      }
   }
 
   // MARK: - Incoming messages
diff --git a/client/ios/PastePoint/App/ContentView+Handlers.swift b/client/ios/PastePoint/App/ContentView+Handlers.swift
@@ -3,6 +3,7 @@
 //  SPDX-License-Identifier: GPL-3.0-only
 //
 
+import Logging
 import SwiftUI
 
 // MARK: - Handlers
@@ -61,6 +62,35 @@ extension ContentView {
     return true
   }
 
+  /// Universal-link entry: validates an invite URL and joins its private session,
+  /// mirroring the manual join flow in `SettingsJoinPrivateView`.
+  func handleIncomingURL(_ url: URL) {
+    guard
+      let code = AppEnvironment.privateSessionCode(from: url.absoluteString),
+      SessionService.isValidSessionCode(code)
+    else {
+      logger.warning("Ignoring invalid incoming URL")
+      toast.show(.error(.invalidSessionCode))
+      return
+    }
+
+    // Already in this session
+    guard services.wsService.currentSessionCode != code else { return }
+
+    logger.info("Joining private session from universal link")
+    Task {
+      await services.wsService.setupPrivateSession(code)
+      guard await services.connectIfPermitted() else {
+        toast.show(.error(.localNetworkOffJoin))
+        return
+      }
+      setSettingsVisible(false)
+      pendingPrivateJoin = true
+      await services.roomService.listRooms()
+      await services.userService.getUsername()
+    }
+  }
+
   func handleAcceptFile(fromUser: String, fileId: String) {
     Task {
       let result = await services.fileTransferService.acceptFileOffer(fromUser: fromUser, fileId: fileId)
diff --git a/client/ios/PastePoint/App/ContentView.swift b/client/ios/PastePoint/App/ContentView.swift
@@ -193,7 +193,7 @@ struct ContentView: View {
   // MARK: - Settings presentation
 
   /// Shows/hides settings inside one animation transaction (gear toggle + panel close).
-  private func setSettingsVisible(_ visible: Bool) {
+  func setSettingsVisible(_ visible: Bool) {
     withAnimation(.easeInOut(duration: 0.25)) {
       showSettings = visible
     }
diff --git a/client/ios/PastePoint/Core/Services/App/AppServices.swift b/client/ios/PastePoint/Core/Services/App/AppServices.swift
@@ -31,7 +31,7 @@ final class AppServices: ObservableObject {
   private var isInBackground = false
   private var isForegroundHandling = false
   private let networkMonitor = NWPathMonitor()
-  private var lastPathStatus: NWPath.Status?
+  private var lastPathStatus: NWPath.Status = .satisfied
   private var cancellables = Set<AnyCancellable>()
 
   private init() {
diff --git a/client/ios/PastePoint/Resources/PastePoint.entitlements b/client/ios/PastePoint/Resources/PastePoint.entitlements
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.developer.associated-domains</key>
+	<array>
+		<string>applinks:pastepoint.com</string>
+	</array>
+</dict>
+</plist>
diff --git a/client/web/Dockerfile b/client/web/Dockerfile
@@ -64,6 +64,7 @@ RUN apk add --no-cache gettext=0.24.1-r1
 # Copy only the specific static files needed
 COPY --from=builder /usr/src/app/dist/web/browser/robots.txt /usr/share/nginx/html/browser/robots.txt
 COPY --from=builder /usr/src/app/dist/web/browser/sitemap.xml /usr/share/nginx/html/browser/sitemap.xml
+COPY --from=builder /usr/src/app/dist/web/browser/.well-known/apple-app-site-association /usr/share/nginx/html/browser/.well-known/apple-app-site-association
 
 # Copy nginx config files
 COPY nginx/nginx.conf /etc/nginx/conf.d/default.conf.template
diff --git a/client/web/angular.json b/client/web/angular.json
@@ -32,6 +32,11 @@
               {
                 "glob": "**/*",
                 "input": "public"
+              },
+              {
+                "glob": "**/*",
+                "input": "public/.well-known",
+                "output": "/.well-known"
               }
             ],
             "styles": ["src/styles.css", "node_modules/@ngxpert/hot-toast/src/styles/styles.css"],
diff --git a/client/web/package-lock.json b/client/web/package-lock.json
diff --git a/client/web/package.json b/client/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "web",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "scripts": {
     "ng": "ng",
     "start": "ng serve",
diff --git a/client/web/public/.well-known/apple-app-site-association b/client/web/public/.well-known/apple-app-site-association
@@ -0,0 +1,15 @@
+{
+  "applinks": {
+    "details": [
+      {
+        "appIDs": ["KH5NHCFH44.com.pastepoint.ios"],
+        "components": [
+          {
+            "/": "/private/*",
+            "comment": "Private session invite links open the iOS app when installed"
+          }
+        ]
+      }
+    ]
+  }
+}
diff --git a/nginx/locations.conf b/nginx/locations.conf
@@ -100,7 +100,21 @@ location = /robots.txt {
     expires 1d;
 
     root /usr/share/nginx/html/browser;
-    try_files $uri /robots.txt =404;
+    try_files $uri =404;
+}
+
+# Apple App Site Association
+location = /.well-known/apple-app-site-association {
+    limit_req   zone=seo_req_limit burst=20;
+    limit_conn  conn_limit  10;
+    include /etc/nginx/includes/common_rate_limiting.conf;
+
+    include /etc/nginx/security/security_headers.conf;
+    default_type application/json;
+    expires 1d;
+
+    root /usr/share/nginx/html/browser;
+    try_files $uri =404;
 }
 
 # Explicitly serve sitemap.xml with correct content type
@@ -114,7 +128,7 @@ location = /sitemap.xml {
     expires 1d;
 
     root /usr/share/nginx/html/browser;
-    try_files $uri /sitemap.xml =404;
+    try_files $uri =404;
 }
 
 # Security blocks
diff --git a/server/config/development.toml b/server/config/development.toml
@@ -11,13 +11,13 @@ cors_allowed_origins = "https://127.0.0.1"
 # Client update policy (GET /version). minimum = force floor, latest = soft nudge.
 # Raise these only AFTER the build is live on the store/web, or you soft-brick users.
 [client_version.ios]
-minimum = "0.9.0"
-latest = "0.9.0"
-url = "https://apps.apple.com/app/id000000000"
+minimum = "0.10.0"
+latest = "0.10.0"
+url = "https://apps.apple.com/app/id6788860511"
 
 [client_version.web]
-minimum = "0.20.0"
-latest = "0.20.0"
+minimum = "0.21.0"
+latest = "0.21.0"
 url = "https://127.0.0.1"
 
 [sentry]
diff --git a/server/config/docker-dev.toml b/server/config/docker-dev.toml
@@ -11,13 +11,13 @@ cors_allowed_origins = "https://127.0.0.1"
 # Client update policy (GET /version). minimum = force floor, latest = soft nudge.
 # Raise these only AFTER the build is live on the store/web, or you soft-brick users.
 [client_version.ios]
-minimum = "0.9.0"
-latest = "0.9.0"
-url = "https://apps.apple.com/app/id000000000"
+minimum = "0.10.0"
+latest = "0.10.0"
+url = "https://apps.apple.com/app/id6788860511"
 
 [client_version.web]
-minimum = "0.20.0"
-latest = "0.20.0"
+minimum = "0.21.0"
+latest = "0.21.0"
 url = "https://127.0.0.1"
 
 [sentry]
diff --git a/server/config/production.toml b/server/config/production.toml
@@ -11,13 +11,13 @@ cors_allowed_origins = "https://pastepoint.com"
 # Client update policy (GET /version). minimum = force floor, latest = soft nudge.
 # Raise these only AFTER the build is live on the store/web, or you soft-brick users.
 [client_version.ios]
-minimum = "0.9.0"
-latest = "0.9.0"
-url = "https://apps.apple.com/app/id000000000"
+minimum = "0.10.0"
+latest = "0.10.0"
+url = "https://apps.apple.com/app/id6788860511"
 
 [client_version.web]
-minimum = "0.20.0"
-latest = "0.20.0"
+minimum = "0.21.0"
+latest = "0.21.0"
 url = "https://pastepoint.com"
 
 [sentry]

Original file line number	Diff line number	Diff line change
`@@ -193,7 +193,7 @@ struct ContentView: View {`
`193`	`193`	`// MARK: - Settings presentation`
`194`	`194`
`195`	`195`	`/// Shows/hides settings inside one animation transaction (gear toggle + panel close).`
`196`		`- private func setSettingsVisible(_ visible: Bool) {`
	`196`	`+ func setSettingsVisible(_ visible: Bool) {`
`197`	`197`	`withAnimation(.easeInOut(duration: 0.25)) {`
`198`	`198`	`showSettings = visible`
`199`	`199`	`}`
Original file line number	Diff line number	Diff line change
`@@ -32,6 +32,11 @@`
`32`	`32`	`{`
`33`	`33`	`"glob": "*/",`
`34`	`34`	`"input": "public"`
	`35`	`+ },`
	`36`	`+ {`
	`37`	`+ "glob": "*/",`
	`38`	`+ "input": "public/.well-known",`
	`39`	`+ "output": "/.well-known"`
`35`	`40`	`}`
`36`	`41`	`],`
`37`	`42`	`"styles": ["src/styles.css", "node_modules/@ngxpert/hot-toast/src/styles/styles.css"],`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "web",`
`3`		`- "version": "0.20.0",`
	`3`	`+ "version": "0.21.0",`
`4`	`4`	`"scripts": {`
`5`	`5`	`"ng": "ng",`
`6`	`6`	`"start": "ng serve",`