MDM MVP 0.3.6 and SuperApp MVP 0.2.0

MDM MVP 0.3.6

1. Incoming files

MDM adds a new scenario for centralized delivery of files and certificates to users. This allows the administrator to securely transfer business documents, certificates, and other files to devices without external exchange channels.

  • Added sending of files and certificates to users through groups.
  • The admin console provides delivery creation, status viewing, resending, and file download.
  • The MDM mobile application now has an Incoming files section.
  • The user can download a file, open it, and refresh the list manually.
  • A push notification opens the required file directly from the application.
  • Added a checksum check to rule out file corruption during download.
  • Added support for storing files in S3.
  • Added support for deliveries with no expiration.

2. Delivery control

File delivery transparency has been improved: the administrator can see the stage each user’s file is at.

  • Added delivery statuses: created, sent, available, downloaded, opened, error.
  • On resending, the recipient list is synchronized with the current membership of the group.
  • Users removed from the group are excluded from the current delivery.
  • Download and open errors are recorded in the statuses.

3. MDM security

This release strengthens the security of backend services and inter-service communication.

  • Service endpoints are now protected by mandatory authorization.
  • Added service-to-service authorization.
  • Added protection of push calls through OIDC.
  • Aligned the JWT signature between services.
  • Protected download links are used for file downloads.
  • Sensitive data is excluded from audit/debug logs.
  • Added server-side validation of API and gRPC messages.

4. Platform stability

The reliability of the build, tests, and backend infrastructure has been improved.

  • Improved isolation of integration tests.
  • Added smoke tests for service startup.
  • Enabled checks against regressions of warning/analyzer errors.
  • Improved the predictability of migrations and runtime behavior.

SuperApp MVP 0.2.0

1. MDM-managed email attachments

SuperApp now supports centralized management of email attachment handling rules through MDM. This improves the security of corporate email and reduces the risk of data leaks.

  • SuperApp reads the managed configuration from MDM.
  • Allowed and prohibited file extensions are supported.
  • A maximum attachment size limit is supported.
  • A ban on opening attachments in external applications is supported.
  • An internal-view-only mode is supported.
  • Added automatic cleanup of temporary files after opening.
  • Added logging of applied and invalid policy keys.

2. Attachments in incoming email

Attachment handling in incoming messages has been extended.

  • Added an email attachment model.
  • Added attachment parsing from ActiveSync.
  • Attachments are displayed in the opened message.
  • Attachment download is supported.
  • Added image preview.
  • Added PDF preview.
  • Fixed the handling of inline attachments and MIME data.
  • Added checks of file type, size, and content.

3. Attachments in outgoing email

The user can work with files fully when composing and forwarding messages.

  • Added file selection when composing a message.
  • Added sending of multipart attachments.
  • Sending attachments when forwarding a message is supported.
  • Added restoration of attachments in drafts.
  • Improved the reliability of MIME data handling.

4. Managed Configuration

SuperApp setup through MDM has been simplified.

  • The admin console adds the SuperApp Android and SuperApp iOS presets.
  • SuperApp identifiers have been moved to environment variables.
  • Added protection against accidental overwriting of the form by a preset.
  • The contract of the mail.attachments.* keys has been fixed.

5. New and improved modules

SuperApp has come closer to being a full-fledged corporate work application.

  • Improved the calendar.
  • Added calendar settings.
  • Added an offline queue of calendar changes.
  • Added a corporate contacts module.
  • Added a notification center.
  • Added a corporate profile screen.
  • Improved the mail, calendar, and notification screens.

6. SuperApp security

The security of data storage and network communication has been improved.

  • The auth storage has been moved to secure storage.
  • Added certificate pinning for API, VPN, and EAS.
  • Added a kill-switch for pinning.
  • Fixed access token refresh and retry after 401.
  • Removed sensitive data from debug logs.
  • Added localization of validation errors.
  • Improved the resilience of loading notifications and error dictionaries.

Conclusion

MDM MVP 0.3.6 adds secure file delivery and strengthens the backend platform. SuperApp MVP 0.2.0 extends work with corporate email, attachments, calendar, contacts, and notifications, and also improves the security of data storage and network communication.

Last updated