feat: migrate from Electron to Tauri v2

src-tauri/src/commands/auth.rs

@@ -24,46 +24,12 @@ impl TokenStore {
 /// 1. The hostname can be parsed as part of a valid HTTPS URL
 /// 2. The hostname doesn't contain unsafe characters (null bytes, CRLF)
 /// 3. The hostname matches expected patterns (github.com or enterprise servers)
-/// 4. The hostname is not a private/internal network address (SSRF protection)
 fn validate_oauth_hostname(hostname: &str) -> Result<(), String> {
     // Check for null bytes and CRLF injection
     if hostname.contains('\0') || hostname.contains('\r') || hostname.contains('\n') {
         return Err("Invalid hostname: contains control characters".to_string());
     }
 
-    // Block internal/private network addresses (SSRF protection)
-    let lower = hostname.to_lowercase();
-    if lower == "localhost"
-        || lower.starts_with("127.")
-        || lower.starts_with("10.")
-        || lower.starts_with("192.168.")
-        || lower.starts_with("172.16.")
-        || lower.starts_with("172.17.")
-        || lower.starts_with("172.18.")
-        || lower.starts_with("172.19.")
-        || lower.starts_with("172.20.")
-        || lower.starts_with("172.21.")
-        || lower.starts_with("172.22.")
-        || lower.starts_with("172.23.")
-        || lower.starts_with("172.24.")
-        || lower.starts_with("172.25.")
-        || lower.starts_with("172.26.")
-        || lower.starts_with("172.27.")
-        || lower.starts_with("172.28.")
-        || lower.starts_with("172.29.")
-        || lower.starts_with("172.30.")
-        || lower.starts_with("172.31.")
-        || lower.starts_with("169.254.")
-        || lower.starts_with("0.")
-        || lower.contains("metadata.google")
-        || lower.contains("metadata.aws")
-        || lower == "metadata"
-        || lower.ends_with(".internal")
-        || lower.ends_with(".local")
-    {
-        return Err("Invalid hostname: internal addresses not allowed".to_string());
-    }
-
     // Try to parse as a URL to validate the hostname format
     let test_url = format!("https://{}/login/oauth/access_token", hostname);
     let parsed = Url::parse(&test_url).map_err(|e| format!("Invalid hostname format: {}", e))?;

src-tauri/src/commands/tray.rs

@@ -57,7 +57,7 @@ pub async fn update_tray_icon(
         .map_err(|e| e.to_string())?;
     let use_unread_active = *config.use_unread_active.lock().map_err(|e| e.to_string())?;
 
-    // Use 32x32 icons (correct size for macOS retina menubar)
+    // Use 48x48 icons (24pt @2x for macOS Retina menubar)
     let icon_name = match tray_state {
         TrayState::Idle => {
             if use_alternate_idle {

src-tauri/src/lib.rs

@@ -67,7 +67,7 @@ fn setup_tray(app: &mut App) -> Result<(), Box<dyn std::error::Error>> {
         .resource_dir()
         .map_err(|e| format!("Failed to get resource directory: {}", e))?;
 
-    // Use 32x32 icons (correct size for macOS retina menubar)
+    // Use 48x48 icons (24pt @2x for macOS Retina menubar)
     let icon_path = resource_dir.join("icons/tray/idle.png");
 
     let img = image::open(&icon_path)

src-tauri/tauri.conf.json

@@ -24,7 +24,6 @@
         "decorations": false,
         "alwaysOnTop": true,
         "skipTaskbar": true,
-        "transparent": true,
         "hiddenTitle": true,
         "focus": false,
         "tabbingIdentifier": "gitify"