Skip to content

fix: send empty login password as zero bytes for read-only ACL#29

Open
rinchen wants to merge 1 commit into
meshcore-dev:masterfrom
rinchen:fix/empty-password-readonly-login
Open

fix: send empty login password as zero bytes for read-only ACL#29
rinchen wants to merge 1 commit into
meshcore-dev:masterfrom
rinchen:fix/empty-password-readonly-login

Conversation

@rinchen

@rinchen rinchen commented Jul 19, 2026

Copy link
Copy Markdown

Summary

  • Empty guest/read-only login passwords are sent as a zero-byte remainder after the 32-byte public key (matches official MeshCore Android companion ACL).
  • Non-empty passwords still use writeString as before.

Context

Colorado-Mesh/mesh-client currently carries this as a pnpm patch against @liamcottle/meshcore.js@1.13.0. Upstreaming so other clients get correct read-only room/repeater login without a local patch.

Test plan

  • Login to a room server with a blank guest password (read-only ACL) and confirm LoginSuccess
  • Login with a non-empty guest/admin password still works

Room/repeater guest (read-only) login uses a zero-length password payload,
matching the official MeshCore Android companion. Explicitly skip
writeString when password is empty so the frame ends after the public key.

Carried as a pnpm patch in Colorado-Mesh/mesh-client.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant