mirror of
https://github.com/root-fr/jmap-webmail.git
synced 2026-09-26 08:01:20 +00:00
OAuth2/OIDC with PKCE needs crypto.subtle.digest(), which browsers only expose in secure contexts (HTTPS or localhost). Loading the webmail over http://host without a TLS proxy in front surfaced as "TypeError: can't access property 'digest', crypto.subtle is undefined" when the user clicked "Sign in with SSO" — unhelpful. Guard handleOAuthLogin with window.isSecureContext + a crypto.subtle check and surface a translated message ("SSO requires a secure connection…") in an amber warning banner instead. Key added to all 10 locales. Closes #23.