build / apk (push) Has been cancelled

Details

1.2.3: sign in through the new NikoAuth SSO (browser handoff)

The web chat moved from the in-app Google flow to NikoAuth (auth.n1ko.dev);
the old bridge no longer exists, so sign-in was impossible: the WebView
follows /api/auth/start out to the SSO host, and every non-chat host opens
in the system browser.

Sign-in now leaves for the system browser on purpose: the app intercepts
/api/auth/start and appends app=1, and the server answers the finished
callback with the /app-auth App Link, which hands the fresh session back
into the app's WebView (google blocks its own login inside WebViews, so
that round trip cannot happen in-app).

2026-10-17 16:18:39 +03:00

3.3 KiB

Raw Permalink Blame History

NikoGPT for Android

Open-source Android client for the NikoGPT web chat (chat.n1ko.dev) — a thin, auditable WebView shell around the same web interface that runs in the browser. No analytics, no trackers, no third-party SDKs: the whole app is one activity and a handful of resources.

Android 10+ (minSdk 29), targets Android 15.
Everything the web app can do: conversations, attachments (system file picker), images, generated files, settings, themes.
Downloads go through Android's DownloadManager (with your session cookies), links to other sites open in the system browser.
Open in the browser only: chat.n1ko.dev loads inside; anything else leaves the app.
TLS errors are never bypassed, no cleartext traffic, no backup.
Day/night theme follows the system; the page keeps its own theme setting.
Back gesture navigates the chat history, pull-to-refresh reloads.

Install

Download the APK from the releases page: https://git.n1ko.dev/Niko/nikogpt_android/releases

Latest build: https://git.n1ko.dev/Niko/nikogpt_android/releases/download/v1.2.3/nikogpt-android-1.2.3.apk

Open the APK on the phone (allow installing apps from this source when Android asks). The APKs are signed with the project's release key; Android may still warn because the app is installed from outside Play.

Build

Requirements: JDK 17, Android SDK (platform 35, build-tools 35.0.0).

./gradlew assembleDebug     # app/build/outputs/apk/debug/app-debug.apk
./gradlew assembleRelease   # release; signed with the keystore when configured

Or just open the project in Android Studio.

Release signing

The published APKs are signed with the project's release keystore (keystore.properties + the .jks file, both outside git). To build them yourself, create a keystore and point keystore.properties at it:

keytool -genkeypair -v -keystore nikogpt.jks -alias nikogpt \
  -keyalg RSA -keysize 2048 -validity 10000
cat > keystore.properties <<EOF
storeFile=../nikogpt.jks
storePassword=...
keyAlias=nikogpt
keyPassword=...
EOF
./gradlew assembleRelease

Installing over a debug-signed build requires uninstalling it first (the signatures differ). The release certificate's SHA-256 must be listed in web.android_cert_sha256 in the bot config for App Links verification.

All credentials live on NikoAuth (auth.n1ko.dev): password, e-mail codes, 2FA and Google. The app opens the login in the system browser — Google refuses WebView logins, and a WebView never shares the browser's cookie jar — and comes back through a verified App Link (https://chat.n1ko.dev/app-auth?...) once the login is done; the server hands the fresh session to the app's WebView on that link. Requires the release certificate's SHA-256 in the bot's web.android_cert_sha256 for App Links verification.

Structure

Path	Purpose
`app/src/main/java/dev/n1ko/nikogpt/MainActivity.kt`	the whole app: WebView setup, file chooser, downloads, back handling
`app/src/main/res/layout/activity_main.xml`	WebView + progress bar + retry screen
`.forgejo/workflows/build.yml`	CI: builds the APK on tags

License

MIT — see LICENSE. The Tabler-based icons used by the web chat come from f.n1ko.dev/assets/ui (MIT).

3.3 KiB Raw Permalink Blame History