v1.0.8 (January 2026) - Security Update
├── Added real-time password strength indicator
├── Added password requirements checklist UI
├── Added client-side password complexity validation
├── Added common password detection
├── Fixed encryption key extractable flag (now false)
├── Lowered strict_min_version to 109.0
├── Updated all browser.* API calls
└── Updated version strings across all files

Bug fixes

GME FinSnap v1.0.6 - Release Notes
What's New:

User-level environment support for Sandbox/Production testing
Improved OAuth flow with environment-specific authentication
Enhanced security with AES-256 token encryption

Features:

Instant QuickBooks financial snapshot from browser toolbar
Cash balance, invoices, bills, and A/R aging at a glance
Multi-company support with one-click switching
Local-only encrypted data storage

Security:

OAuth 2.0 secure authentication
AES-256-GCM token encryption
CSRF protection
Intuit security compliant

Requirements:

QuickBooks Online account
Firefox 109 or later

Support: tech@gmeltdus.com

v1.0.5:
- Fixed disconnect flow - user now stays logged into GME FinSnap after disconnecting QuickBooks
- Disconnect confirmation now shows Company ID (RealmID) and reconnect instructions
- Added "Connect to QuickBooks" button on disconnect screen for easy reconnection
- Added "Manage Other Companies" button when multiple companies are connected
- Fixed Manage Companies screen not displaying connected companies
- Fixed spacing between dates and amounts in dashboard lists
- Added migration for pre-existing QuickBooks connections
- Improved data sync between storage and UI

NEW FEATURES:
- User authentication with email verification
- Forgot password / password reset flow
- Multi-company support - connect multiple QuickBooks companies
- Company switcher to switch between connected companies
- Manage Companies screen with per-company disconnect

SECURITY:
- AES-256 encrypted token storage
- Rate limiting on all auth endpoints
- XSS protection on all dynamic content

FIXES:
- Updated minimum Firefox version to 142
- Replaced innerHTML with DOMParser for security compliance

DASHBOARD:
- Cash balance across bank accounts
- A/R aging breakdown
- Bills due this week
- Open estimates
- Recent payments
- Monthly expenses

Security Enhancements:
- AES-256-GCM encryption for OAuth token storage
- Secure message-based token handling
- Enhanced error log sanitization
- Encryption keys stored separately from tokens

Improvements:
- Improved OAuth flow reliability
- Enhanced CSRF protection
- Better session expiry handling
- Optimized token refresh mechanism

Bug Fixes:
- Fixed popup display issues
- Resolved token refresh edge cases
- Improved error messages

Version 1.0.2

New Features:
- Added Expenses This Month section - view your recent expenses with totals and transaction details

Improvements:
- Fixed OAuth connection flow for more reliable QuickBooks authentication
- Improved token storage and session handling
- Better error messages for troubleshooting

Bug Fixes:
- Fixed issue where dashboard wouldn't load after connecting
- Fixed connection state not persisting between sessions