7 Commits

Include renames

Author	SHA1	Message	Date
Matthew Meszaros	ec46f57d22	feat: redesign the iOS app (inbox with inbox agent drafted replies edited in the full composer, Remie, home, analytics, CRM, contacts, settings hubs, mailbox connect flow covering every dashboard source) and replace Turnstile in the app with Apple App Attest (attested keys in app_attest_keys, challenge and key endpoints, verifyHuman gate on login, registration and password reset, auth config flag, docs and OpenAPI)	2026-10-11 19:00:50 +02:00
Matthew Meszaros	8bb60e9449	feat: accept only Salesforce domains as an org's API host and call it through the SSRF-guarded client, register the Warmbly Cloud link only on self-hosted instances behind the instance admin with a second factor and dial it through safehttp with fixed error text, keep automation signing secrets in the sealed connection config, answer integration service failures with fixed messages, add security headers to the forms, tracking and docs origins and TLS 1.2+ to the nginx template, compare the captcha bypass in constant time, require TLS 1.2 for IMAP probes, and drop the unused RSA helpers	2026-10-04 02:58:43 -07:00
Matthew Meszaros	51dedc90ee	feat: put every runtime behind one optional error-reporting story: a single internal/observability/errs wrapper that is now the only package importing sentry-go, InitSentry for cmd/forms, release and environment tags on every service from the existing build stamp, optional Sentry in the admin panel and the public forms app, the sentry crate in the Rust tracking service, release tagging in realtime, CI source-map upload that only runs when a Sentry token is configured, and docs covering the DSN for each service	2026-09-07 03:51:06 -07:00
Matthew Meszaros	fc91d71492	feat: make google, apple and turnstile optional at boot	2026-07-20 09:56:17 +02:00
Matthew Meszaros	d8d88c7f69	feat: add warmup health tracking, migrate repos to postgres, and overhaul web UI	2026-04-03 06:08:52 +00:00
Matthew MeszarosandClaude Opus 4.6	fbb55379c5	fix: propagate captcha errors and fix JWT signing ... - Return actual captcha verification errors instead of generic internal errors in login, registration, and reset password flows - Fix Sentry capturing wrong variable (err -> xerr) in RegistrationConfirm - Pass AuthSecret as []byte to JWT SignedString/keyfunc - Send form data in request body instead of PostForm for Turnstile - Improve Turnstile non-200 error handling with response body logging Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-18 06:30:50 +01:00
Matthew Meszaros	772c19820d	New Repository: Add Backend Code	2026-01-17 14:11:14 +00:00