Matthew Meszaros 0ca6e7e642 feat: let the confirm-it-is-you prompt offer only the methods an account has, adding passkey, Google/Apple/SSO popup and native iOS Apple/Google re-authentication bound to the session and linked identity, across backend, dashboard, admin, iOS and docs

2026-10-15 15:26:25 +02:00

..

app

feat: defer single and bulk mailbox disconnect until Cloud ownership is confirmed and cover loading failures

2026-10-13 13:21:55 +00:00

auth

feat: complete invited signup in the dashboard and atomically provision accounts with workspace roles and resource grants

2026-10-10 04:11:45 +00:00

cli

feat: proxy dashboard and editor image previews with SSRF-safe bounded fetching while preserving original customer email URLs

2026-10-06 07:28:25 +00:00

cloud-oauth/done

feat: send OAuth sign-in windows that lost their opener (allowed from a blocked-popup prompt) back to the waiting dashboard tab via a new /oauth-return page and same-origin BroadcastChannel, marking dashboard-started mailbox states so the native app keeps its warmbly:// callback

2026-10-05 05:40:23 +00:00

connect

feat: proxy dashboard and editor image previews with SSRF-safe bounded fetching while preserving original customer email URLs

2026-10-06 07:28:25 +00:00

invite

feat: complete invited signup in the dashboard and atomically provision accounts with workspace roles and resource grants

2026-10-10 04:11:45 +00:00

oauth

feat: mark unverified OAuth apps as not affiliated with Warmbly on the consent screen, reserve the Warmbly name in third-party app names (registration, edit, import, and self-registered clients), and show no website for self-registered clients

2026-10-09 06:19:09 +02:00

oauth-return

feat: send OAuth sign-in windows that lost their opener (allowed from a blocked-popup prompt) back to the waiting dashboard tab via a new /oauth-return page and same-origin BroadcastChannel, marking dashboard-started mailbox states so the native app keeps its warmbly:// callback

2026-10-05 05:40:23 +00:00

onboarding

feat: generate static dashboard CSP hashes and isolate email preview styling across Vite nginx and Pages

2026-10-06 05:46:52 +00:00

reauth/complete

feat: let the confirm-it-is-you prompt offer only the methods an account has, adding passkey, Google/Apple/SSO popup and native iOS Apple/Google re-authentication bound to the session and linked identity, across backend, dashboard, admin, iOS and docs

2026-10-15 15:26:25 +02:00

select-org

feat: generate static dashboard CSP hashes and isolate email preview styling across Vite nginx and Pages

2026-10-06 05:46:52 +00:00

setup

feat: generate static dashboard CSP hashes and isolate email preview styling across Vite nginx and Pages

2026-10-06 05:46:52 +00:00

slack/link

feat: proxy dashboard and editor image previews with SSRF-safe bounded fetching while preserving original customer email URLs

2026-10-06 07:28:25 +00:00

layout.tsx

feat: move the dashboard to TanStack Router with lazy route chunks, hover preloading, route loaders that prefetch each page's data, a parallel session boot behind an app-frame skeleton, self-hosted preloaded Inter to end the load flash, and optimistic updates for frequent mailbox, campaign, CRM, label and template actions

2026-10-04 10:38:14 -07:00

not-found.tsx

feat: move the dashboard to TanStack Router with lazy route chunks, hover preloading, route loaders that prefetch each page's data, a parallel session boot behind an app-frame skeleton, self-hosted preloaded Inter to end the load flash, and optimistic updates for frequent mailbox, campaign, CRM, label and template actions

2026-10-04 10:38:14 -07:00