Files
jmap-webmail/app
Matthieu MALVACHE f3bf6efedc fix(oauth): fail with a clear message when SSO is loaded over plain HTTP
OAuth2/OIDC with PKCE needs crypto.subtle.digest(), which browsers
only expose in secure contexts (HTTPS or localhost). Loading the
webmail over http://host without a TLS proxy in front surfaced as
"TypeError: can't access property 'digest', crypto.subtle is
undefined" when the user clicked "Sign in with SSO" — unhelpful.

Guard handleOAuthLogin with window.isSecureContext + a crypto.subtle
check and surface a translated message ("SSO requires a secure
connection…") in an amber warning banner instead. Key added to all 10
locales.

Closes #23.
2026-04-16 23:12:38 +02:00
..