Extracting a QR login from a production app and closing 11 security holes before merge

· Dev.to