Matthew Meszaros 408f1fea94 Merge pull request #671 from warmbly/feat/vendor-connect-fields ...

feat: connect inbox vendors with only an API key and pick mailboxes by workspace

2026-09-24 04:35:42 +00:00

..

app

Merge pull request #671 from warmbly/feat/vendor-connect-fields

2026-09-24 04:35:42 +00:00

auth

feat: bind a browser sign-in to the browser that started it, so a handoff link cannot be forwarded: one-time state proves the callback answers a request this server made, not one THIS browser made, so anyone could run the flow against their own Google or OIDC account and send the resulting URL to someone else, whose browser would then hold the sender's session (RFC 9700 4.7.1); begin now mints a binding secret that never reaches the provider and never appears in a URL, the callback carries it into the handoff, and the exchange refuses a collection that cannot present it with sso_wrong_browser, while the comments this PR added are condensed to the constraint they exist to state

2026-08-28 01:44:39 -07:00

captcha

fix: clear every open issue in error tracking by fixing the bugs behind them rather than the reports: a document-level mouseleave handing RippleProvider the document itself, whose classList is undefined; the admin panel posting /getaway without the /v1 its baseURL omits, so its realtime socket 404d on every page; Gmail throttles classified from the 403 status alone and told to re-authorize instead of back off; consumer flag and folder events retrying forever on a message the unibox never stored; a lost token-refresh race answered 500 instead of the documented 401; a nil email_accounts slice crashing the admin user page; Turnstile mounted with an empty sitekey; conditional passkey autofill run after the user navigated away; a boot log filed as an issue; and one publish failure per message on a topic the broker refuses (#519)

2026-09-14 21:06:14 -07:00

icons

Dashboard with shadcn, tailwind, zustand & react-query

2026-01-30 08:47:26 +01:00

layout

feat: rebuild mailbox import around column mapping and automatic host and sign-in detection (CSV, XLSX, pasted lists, saved mappings, retryable rows with fixes, migrations 000205-000206), connect whole Google Workspace domains and Microsoft 365 organizations through a proved administrator grant, import from inbox vendors (InboxKit, Zapmail, Mailforge, Infraforge, Maildoso, Cheap Inboxes, ScaledMail) with vendor-managed forwarding and DNS, add a sending domains page with per-domain tracking and verified root redirects, unify Add account into one Google and one Microsoft entry with per-method choices, mark per-mailbox Google sign-in as retiring with in-place moves to the admin grant or an app password, allow the loopback security mode in the credential columns (migration 000207), read semicolon-separated CSVs, and add a mock vendor API to the sandbox

2026-09-23 08:41:01 -07:00

shared

Every shortcut the ? modal shows now runs, and both resize handles share one gesture (#487)

2026-09-13 05:28:34 -07:00

ui

feat: validate every person, workspace and company name through internal/pkg/displayname on each write path (profile, onboarding, setup, IdP sign-in, org create and rename, org import, enterprise inquiry, admin testers, warmblyctl) with a 400 invalid_name code, render stored names in platform email through the same rules, mirror them in the web forms, check the org slug format, and document the rules in error-codes, security and AGENTS.md

2026-09-21 03:34:03 -07:00

default-link.tsx

Add sample auth UI theme

2026-02-10 19:30:47 +01:00

input.tsx

Add sample auth UI theme

2026-02-10 19:30:47 +01:00

loader.tsx

Dashboard with shadcn, tailwind, zustand & react-query

2026-01-30 08:47:26 +01:00

LoadingScreen.tsx

feat: add warmup health tracking, migrate repos to postgres, and overhaul web UI

2026-04-03 06:08:52 +00:00

svg.tsx

feat(web): taste pass — serif page titles, soft elevations, sky rail nav, fix invisible logo

2026-05-22 15:44:29 +00:00