Commit Graph

296 Commits

Author SHA1 Message Date
Maurus Decimus 9ec4a8dda9 Fix LDAP: Directories that store aliases as additional values of the primary address attribute provision no aliases 2026-08-16 16:50:18 +02:00
Maurus Decimus 4d7d71cb31 Fix Directory: Local group membership is cleared when the external directory is configured with a group claim or attribute that it does not return 2026-08-16 11:14:10 +02:00
Maurus Decimus 73d27006e1 HTTP: Shared reqwest clients 2026-08-14 18:24:55 +02:00
Maurus Decimus d2d16a0186 Reporting: inboundReportMaxSize setting, which bounds the size of a decompressed inbound DMARC or TLS report 2026-08-12 16:37:16 +02:00
Maurus Decimus 436deaf592 Fix CardDAV: Accept: text/vcard version negotiation is ignored whenever another parameter such as q or charset follows version= 2026-08-08 20:02:07 +02:00
Maurus Decimus 61df5a1857 Bump dependencies 2026-08-03 18:11:26 +02:00
Maurus Decimus 092c3217e4 JMAP Email Delivery Push Notifications 2026-07-29 18:41:21 +02:00
Maurus Decimus aa9f47cdb6 Fix Auth: Scoped credentials with SysApiKeyCreate or SysApiKeyUpdate permissions can regain its own accounts full rights 2026-07-23 15:49:30 +02:00
Maurus Decimus 6fb4d2b628 IMAP: Mailbox object-quota only enforced in JMAP 2026-07-19 07:52:31 +02:00
Maurus Decimus 602025464b Fix Sieve: add Received headers to auto-generated messages and detect loops 2026-07-12 16:03:53 +02:00
Maurus Decimus 8d54d0b44c Fix Directory: Update local groups only when the external directory includes a group attribute 2026-07-12 15:34:04 +02:00
Maurus Decimus 2543ec7067 Bump dependencies 2026-07-12 11:39:02 +02:00
Maurus Decimus 448a0c1b08 OIDC directory: Fetch name and group claims from userinfo endpoint when missing from the JWT token 2026-07-05 11:02:35 +02:00
Maurus Decimus 0eb08b9fb3 Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks 2026-06-25 19:24:10 +02:00
Maurus Decimus 93b3b70616 Redis Sentinel support as an in-memory store and cluster coordinator backend (closes #2430) 2026-06-25 10:26:23 +02:00
Maurus Decimus df164e07c8 DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records 2026-06-22 23:13:45 +02:00
Maurus Decimus 3f2c5632b8 Fix OIDC: Add default domain name to groups that are not email addresses 2026-06-16 21:51:48 +02:00
Maurus Decimus 33f288d0ea Fix JMAP: */changes methods leak ids of non-shared objects 2026-06-10 13:51:36 +02:00
Maurus Decimus 838a839290 OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change 2026-06-03 18:14:48 +02:00
Maurus Decimus 777cf1252b RateLimit header fields for HTTP 2026-05-23 11:41:43 +02:00
Maurus Decimus 7790645421 Bump JMAP File Storage to draft-ietf-jmap-filenode-14 2026-05-16 10:44:10 +02:00
Maurus Decimus e049f9ff4f Accept password hashes with $ or { prefixes as secure secrets 2026-05-14 16:52:15 +02:00
Maurus Decimus 415036dd64 Fix DAV: acl-principal-prop-set REPORT enforced the wrong privilege 2026-05-12 15:47:32 +02:00
Maurus Decimus bdba3f20e1 v0.16.5 2026-05-11 17:14:26 +02:00
Maurus Decimus 33cb0ee832 Fix SQL directory: Return Failed instead of Error when the query returns no results 2026-05-05 19:09:52 +02:00
Maurus Decimus 9a575d9438 Timezone changes from the AccountSettings object return invalidProperties 2026-05-01 14:55:38 +02:00
Maurus Decimus 0b7492240b Fix log viewer: All events show as INFO. 2026-04-29 09:02:34 +02:00
Maurus Decimus ed849e86ba v0.16.2 2026-04-28 16:11:49 +02:00
Maurus Decimus c0c889b7fb OIDC: Fallback to userinfo endpoint when JWT token does not contain an email claim. 2026-04-28 14:59:55 +02:00
Maurus Decimus 52733408dc Reduce minimum TLS certificate validity from 86400 to 3600 seconds 2026-04-24 20:18:38 +02:00
Maurus Decimus 3ad4aa82cb v0.16.0 2026-04-20 17:50:58 +02:00
Maurus Decimus eaf0601742 Include OAuth public endpoint in PACC responses 2026-04-19 14:35:06 +02:00
Maurus Decimus af23099e35 Box large futures 2026-04-19 08:11:56 +02:00
Maurus Decimus 1afad4d843 OAuth PKCE support and credential changes 2026-04-10 20:18:52 +02:00
Maurus Decimus fde37b670f Login screen and api endpoint reorganization 2026-04-05 19:57:23 +02:00
Maurus Decimus 71f54f7e84 Use rustls-platform-verifier for TLS certificate verification instead of webpki + Use aws-lc for cryptographic operations instead of ring 2026-04-04 12:24:41 +02:00
Maurus Decimus e451f037c8 Registry testing - all tests passing 2026-03-27 16:49:26 +01:00
Maurus Decimus 72bc8c05ab Registry testing - part 16 2026-03-26 19:10:06 +01:00
mdecimus e0105bc43b Registry testing - part 5 2026-03-15 18:01:12 +01:00
mdecimus 7c143c85f8 Registry testing - part 1 2026-03-11 18:28:31 +01:00
mdecimus 92c60fff7a JMAP Registry API implementation - part 8 2026-03-11 17:12:22 +01:00
mdecimus 9ccc2ed6f0 JMAP Registry API implementation - part 6 2026-03-11 17:12:22 +01:00
mdecimus f2c2ad6748 Registry object implementation 2026-03-11 17:08:00 +01:00
mdecimus ddf9cc7ba7 Registry caching and directory synchronization 2026-03-11 17:08:00 +01:00
mdecimus 726e8d9c79 Update all modules to use registry - part 4 2026-03-11 17:08:00 +01:00
mdecimus f7c2fe10c1 Update all modules to use registry - part 3 2026-03-11 17:07:58 +01:00
mdecimus 298b5bc23f Authenticate using registry - part 4 2026-03-11 17:00:39 +01:00
mdecimus 22e5f5a5ab Authenticate using registry - part 3 2026-03-11 17:00:39 +01:00
mdecimus 1a780ca294 Authenticate using registry - part 2 2026-03-11 17:00:39 +01:00
mdecimus 0af735540d Authenticate using registry - part 1 2026-03-11 17:00:39 +01:00