feat: Password protected public share

[FabianDevel]

Add the possibility to open a password protected public share directly in the application instead of going to the browser.

[Copilot]

Pull request overview

This PR enables opening password-protected public shares directly in the Android app by adding a password validation flow that retrieves and propagates a share-link auth token across public-share API calls and file operations.

Changes:

• Replace the “not supported” password screen with an in-app password submission/validation flow and navigation into the public share file list.
• Introduce a PublicShareToken response model and propagate sharelink_token through public-share API routes (listing, counts, archives, previews/downloads).
• Attach public-share auth context (UUID + token) to File objects so downstream features (thumbnails, previews, downloads, counts) can work for protected shares.

Reviewed changes

Copilot reviewed 19 out of 19 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
app/src/main/res/values/strings.xml	Removes obsolete “password not supported” string.
app/src/main/res/values-it/strings.xml	Same string removal + copyright year bump.
app/src/main/res/values-fr/strings.xml	Same string removal + copyright year bump.
app/src/main/res/values-es/strings.xml	Same string removal + copyright year bump.
app/src/main/res/values-de/strings.xml	Same string removal + copyright year bump.
app/src/main/res/layout/fragment_public_share_password.xml	Updates UI copy/visibility/button label for password entry & validation.
app/src/main/java/com/infomaniak/drive/utils/PreviewUtils.kt	Uses safer query appending for OnlyOffice PDF downloads.
app/src/main/java/com/infomaniak/drive/ui/publicShare/PublicShareViewModel.kt	Adds token-aware init/root file fetch/listing/import/archive behavior; tracks rootFileId.
app/src/main/java/com/infomaniak/drive/ui/publicShare/PublicSharePasswordFragment.kt	Implements in-app password validation and navigates to list on success.
app/src/main/java/com/infomaniak/drive/ui/publicShare/PublicShareMultiSelectActionsBottomSheetDialog.kt	Adds token to public-share archive download URL generation.
app/src/main/java/com/infomaniak/drive/ui/publicShare/PublicShareListFragment.kt	Updates navigation and root file handling for password-protected entry flow.
app/src/main/java/com/infomaniak/drive/ui/publicShare/PublicShareActivity.kt	Initializes rootFileId from navigation args.
app/src/main/java/com/infomaniak/drive/ui/fileList/FileListViewModel.kt	Adds token to public-share file count requests.
app/src/main/java/com/infomaniak/drive/ui/LaunchActivity.kt	Copyright year bump only.
app/src/main/java/com/infomaniak/drive/data/models/File.kt	Adds publicShareAuthToken field (non-persisted/non-parceled).
app/src/main/java/com/infomaniak/drive/data/api/publicshare/PublicShareToken.kt	New parcelable model for password auth response token.
app/src/main/java/com/infomaniak/drive/data/api/publicshare/PublicShareApiRepository.kt	Adds token support across public-share endpoints and centralizes URL token injection.
app/src/main/java/com/infomaniak/drive/data/api/ApiRoutes.kt	Adds token-aware public-share URL helpers + appendQuery utility.
app/src/main/java/com/infomaniak/drive/MatomoDrive.kt	Adds ValidatePassword tracking event and removes unused OpenInBrowser.

Comments suppressed due to low confidence (1)

app/src/main/java/com/infomaniak/drive/ui/publicShare/PublicSharePasswordFragment.kt:95

• observeSubmitPasswordResult treats any empty token as a wrong password and clears the field. With the current ViewModel behavior, an empty token also happens on network/server errors, so users will get a “wrong password” message in those cases. Consider observing a richer result (token + error) and showing an appropriate error message when the auth call fails for reasons other than an invalid password.

        publicShareViewModel.submitPasswordResult.observe(viewLifecycleOwner) { authToken ->
            if (authToken.isNotEmpty()) {
                publicShareViewModel.hasBeenAuthenticated = true
                publicShareViewModel.initPublicShare(authToken)
            } else {
                passwordValidateButton.hideProgressCatching(R.string.buttonValid)
                publicSharePasswordEditText.text = null
                publicSharePasswordLayout.error = getString(R.string.errorWrongPassword)
            }

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

The changes implement comprehensive authentication token support for password-protected public shares, replacing the temporary browser-opening workaround with proper password validation and token propagation across API routes. The introduction of the PublicShareSubmitPasswordResult sealed class improves error handling type safety, while the new appendQueryParams utility ensures proper URL encoding. The ViewModel refactoring cleanly separates root file initialization from children fetching, consolidating the download logic into a single entry point.

#ai-review-summary

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud