PM-36474: bug: Ensure shared totp labels do not parse secret (#6873)

This commit is contained in:
David Perez authored and GitHub committed 2026-05-05 19:20:46 +00:00
1 parent 47ef8914a9
commit d0401b310e
1 file changed
+2 -1
@@ -25,7 +25,8 @@ fun List<SharedAccountData.Account>.toAuthenticatorItems(): List<AuthenticatorIt
.pathSegments
.firstOrNull()
?.removePrefix("$issuer:")
?.takeUnless { it.isBlank() }
// If there is no scheme, then the whole uri is the secret.
?.takeUnless { it.isBlank() || uri.scheme == null }
?: cipherData.username
AuthenticatorItem(