Linus Rath 022b83c005 feat: let plugins use accounts and API keys through the server without seeing them ...

Plugins that talk to Nextcloud, Paperless or an AI provider used to need
the password or key in their own settings, readable by the plugin and
stored in the browser. A plugin can now declare credentials in its
manifest and send requests "with credential X" through the server:

- `credentials` in the manifest: admin scope (secret and server from the
  admin config) or user scope (the user connects an account; the server
  address is fixed or chosen by the user)
- `/api/plugin-secrets`: the user's connected accounts, encrypted per
  mail account under `PLUGIN_SECRETS_DIR`; listing never returns secrets
- `/api/plugin-proxy`: adds the secret and forwards only to the
  credential's own origin, through the SSRF guard unless the admin set
  the server up or listed it in `PLUGIN_PROXY_PRIVATE_ORIGINS`; no
  redirects or WebDAV moves to other servers, streamed bodies capped at
  512 MB up and 2 GB down, 300 requests a minute per plugin, 8 at once
  per user, and one audit line per request without paths or bodies
- a capture mode that stores a secret from a sign-in response (Nextcloud
  Login Flow v2) and removes it from what the plugin gets back

2026-10-14 04:00:36 +02:00

..

__tests__

feat: let plugins use accounts and API keys through the server without seeing them

2026-10-14 04:00:36 +02:00

admin

feat: let plugins use accounts and API keys through the server without seeing them

2026-10-14 04:00:36 +02:00

auth

feat: let plugins use accounts and API keys through the server without seeing them

2026-10-14 04:00:36 +02:00

connector

feat: resolve deep links to the local instance

2026-09-20 19:59:37 +02:00

demo

fix: let tasks move into and live in calendars shared with you #1204

2026-10-12 07:36:46 +02:00

filters

feat: run saved rules on a folder from its context menu #1166

2026-10-11 19:16:51 +02:00

global-search

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

impersonation

fix: read impersonation secrets from *_FILE when the variable is empty #897

2026-09-30 14:23:09 +02:00

jmap

fix: set the sender's Message-ID on calendar invitations and replies

2026-10-13 16:32:25 +02:00

oauth

fix: show default oauth scopes in the admin dashboard #1126

2026-09-30 12:17:25 +02:00

plugin-sandbox

refactor: describe every plugin hook in one catalogue

2026-10-14 03:14:29 +02:00

plugin-secrets

feat: let plugins use accounts and API keys through the server without seeing them

2026-10-14 04:00:36 +02:00

protocol-handlers

feat: deep links for mail, calendar, contacts, files, settings and improve screen reader support

2026-08-06 16:47:20 +02:00

security

Merge remote-tracking branch 'origin/main' into fix/admin-cookie-secure-by-request

2026-09-30 08:54:14 +02:00

setup

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

sieve

fix: keep the filter script editable elsewhere after switching out-of-office forwarding off #1152

2026-10-06 23:31:03 +02:00

stalwart

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

telemetry

fix: check telemetry targets at connect time and fail closed

2026-09-26 15:15:23 +02:00

version-check

fix: invalidate persisted update status after an upgrade

2026-08-29 12:46:39 +02:00

webdav

fix: pin supported-calendar-component-set on created calendars #760

2026-08-25 19:16:20 +02:00

wopi

fix: open read-only documents in ONLYOFFICE without the -103 warning #1187

2026-10-08 14:32:39 +02:00

account-archive-client.ts

feat: optional encrypted backup of the account list

2026-10-09 10:54:38 +02:00

account-archive-storage.ts

feat: optional encrypted backup of the account list

2026-10-09 10:54:38 +02:00

account-archive.ts

feat: optional encrypted backup of the account list

2026-10-09 10:54:38 +02:00

account-inbox-unread.ts

feat: add Mountain View, an optional alternative layout

2026-10-05 10:36:20 +02:00

account-state-manager.ts

Merge remote-tracking branch 'origin/main' into fix/cross-account-selection-key

2026-09-30 09:02:58 +02:00

account-utils.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

attachment-visibility.ts

fix: hide body-embedded cid parts declared as octet-stream from the attachment list

2026-09-10 10:45:45 +02:00

birthday-calendar.ts

chore: clear pre-commit eslint warnings (unused symbols, stale disables, test any)

2026-06-19 12:31:07 +02:00

browser-navigation.ts

feat: add Bulwark Lite build for Stalwart Applications

2026-09-19 00:53:53 +02:00

builtin-themes.ts

feat: add "Flat fields" theme

2026-09-19 13:01:07 +02:00

calendar-alerts.ts

feat: start new events on the calendar's default reminders #1209

2026-10-13 15:56:10 +02:00

calendar-component-detection.ts

fix(calendar): hide tasks-only calendars from the event calendar UI

2026-08-16 21:18:57 +02:00

calendar-display-range.ts

feat: limit the day and week views to working hours and days #1164

2026-10-02 22:56:16 +02:00

calendar-duplicate.ts

fix: keep the meeting link when duplicating an event #1170

2026-10-05 23:09:48 +02:00

calendar-editability.ts

fix: rsvp controls

2026-09-03 22:12:15 -07:00

calendar-event-normalization.ts

feat: use Stalwart synthetic ids for recurring occurrences #140

2026-08-29 11:03:48 +02:00

calendar-ics-export.ts

i18n: add missing translation keys

2026-04-21 17:42:52 +02:00

calendar-invitation.ts

fix: export isCalendarMimeType for use in email attachment filtering

2026-04-16 16:54:09 +02:00

calendar-participants.ts

Merge pull request #748 from lucletoffe/fix/calendar-blank-cn-and-description

2026-09-30 14:21:20 +02:00

calendar-scroll-window.ts

feat: setting to turn off free scrolling in the calendar

2026-09-09 18:27:01 +02:00

calendar-tasks.ts

feat: show tasks with due dates in the calendar month view #1107

2026-09-26 20:47:13 +02:00

calendar-utils.ts

feat: freely scrolling month, week and day views #759

2026-09-09 16:38:55 +02:00

clear-cached-data.ts

fix: route multi-account email lookups and invitation parsing by source account #847

2026-08-25 18:50:50 +02:00

color-transform.ts

fix: recolour mails for dark mode instead of inverting them

2026-10-11 18:43:04 +02:00

config-validation.ts

feat: remember every sign-in unless the admin shows the remember me box

2026-10-13 13:13:56 +02:00

debug.ts

feat: store trusted senders in a dedicated JMAP address book #176

2026-04-12 01:10:28 +02:00

deep-link-handoff.ts

feat: open global search hits through the owning login on every surface #847

2026-09-01 20:55:13 +02:00

deep-links.ts

fix: open the inbox instead of the last folder when the app starts

2026-10-02 16:31:44 +02:00

download-filename.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

email-action-toast.ts

feat: add missing mail action toasts and show sonner toasts again

2026-09-21 20:52:02 +02:00

email-body-selection.ts

fix: take a re-opened draft's body from its body parts only

2026-10-11 18:04:26 +00:00

email-composer-utils.ts

fix: add the highlighted suggestion on Enter instead of the typed text

2026-10-11 18:53:15 +02:00

email-dark-mode.ts

fix: stop painting plain mails on a gray background in dark mode

2026-10-11 22:19:05 +02:00

email-date.ts

fix: parse calendar invitations in directly viewed shared folders against the folder owner #867

2026-08-25 19:36:04 +02:00

email-fit-width.ts

fix: wrap text in fixed-width tables to the screen on iOS #1020

2026-09-23 19:41:44 +02:00

email-headers.ts

feat: warn when a message's sender can't be verified

2026-10-07 19:04:15 +02:00

email-sanitization.ts

fix: recolour mails for dark mode instead of inverting them

2026-10-11 18:43:04 +02:00

email-source.ts

feat: add plugin hooks for email details, headers, and source

2026-06-25 01:04:26 +02:00

email-threading.ts

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

eml-import.ts

feat: support importing emails from .zip archives

2026-05-22 15:22:33 +02:00

event-links.ts

fix(calendar): keep app-scheme meeting links and match service labels exactly

2026-09-24 10:00:01 +02:00

extension-origins.ts

fix: check plugin and theme packages the same way on every install path

2026-10-14 01:43:43 +02:00

extension-package.ts

feat: let plugins use accounts and API keys through the server without seeing them

2026-10-14 04:00:36 +02:00

favicon-badge.ts

feat: redesign the unread favicon badge as a compact keyline badge

2026-08-20 16:49:31 +02:00

file-name-rules.ts

fix: handle the file names and types Stalwart refuses

2026-09-22 20:54:01 +02:00

file-preview.ts

fix: preview audio, video and icon attachments sent with a catch-all type

2026-09-30 15:08:31 +02:00

folder-list-cache.ts

perf(mail): open a visited folder at once and load it behind its rows

2026-10-08 10:15:20 +02:00

folder-tree-dnd.ts

fix: folder drag & drop can move folders into other parents #855

2026-08-20 14:21:41 +02:00

forward-as-attachment.ts

fix: strip from/to names from forward-as-attachment filenames

2026-07-29 11:41:34 +12:00

html-to-text.ts

fix: mark quotes and list items in the plain-text part of sent mail

2026-10-11 20:00:47 +02:00

idn.ts

fix: sign in and show addresses on internationalized domains #1100

2026-09-24 21:15:22 +02:00

iframe-bridge.ts

fix: pin parent origin in iframe-bridge to block cross-frame postMessage

2026-05-18 16:01:29 +02:00

ios-viewport-heal.ts

fix: restore the full screen height when the iOS app resumes #1226

2026-10-13 14:53:23 +02:00

jalali-utils.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

keyboard.ts

fix: detect typing inside the QuotedHtml shadow island via composedPath #654

2026-07-21 23:26:51 +02:00

keyword-discovery.ts

feat: detect and import unrecognized JMAP keywords as tags #658

2026-08-06 18:44:14 +02:00

keyword-format.ts

feat: Add nesting of tags in a tree

2026-07-29 17:18:38 +02:00

keyword-nesting.ts

feat: allow hidden tags, either permanent or when there are no unread messages

2026-07-29 17:18:42 +02:00

list-attachments.ts

fix: keep message list from jumping while attachment chips load

2026-09-26 20:24:23 +02:00

lite-config.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

lite-link-segments.ts

fix: harden Bulwark Lite login, deep-link replay and settings gating

2026-09-18 22:16:57 +02:00

lite-mounted-href.ts

feat: add Bulwark Lite build for Stalwart Applications

2026-09-19 00:53:53 +02:00

lite-static-params.ts

feat: add Bulwark Lite static export build

2026-09-17 23:54:33 +02:00

lite.ts

feat: add Bulwark Lite build for Stalwart Applications

2026-09-19 00:53:53 +02:00

logger.ts

feat: add contacts phase 2, advanced search, vacation responder, Docker & TOTP 2FA

2026-02-16 18:51:30 +01:00

mailbox-label.ts

fix: localize special-folder names by JMAP role #404

2026-06-24 19:32:13 +02:00

mdn.ts

fix: strip CR/LF from read-receipt header values (GHSA-w38p-hpqv-g89c)

2026-09-17 20:55:39 +02:00

message-list-order.ts

fix: keep an opened mail in place in unread-first lists until another is opened

2026-09-29 20:28:39 +02:00

move-targets.ts

fix: offer the shared account's folders first when moving its mail #1149

2026-10-02 23:04:28 +02:00

notification-sound.ts

Fix: notification sound preview - base-path prefix + longer default beep

2026-07-04 14:52:26 +02:00

pending-notification-store.ts

feat: surface CalendarEventNotification invitations and updates

2026-08-29 18:11:50 +02:00

plugin-hook-catalog.ts

feat: tell plugins about layout changes, drag and drop, and sidebar apps

2026-10-14 03:40:04 +02:00

plugin-hooks.ts

feat: tell plugins when toasts are shown and dismissed

2026-10-14 03:25:53 +02:00

plugin-loader.ts

fix: count each plugin hook failure once and keep a plugin that kept failing turned off

2026-10-14 02:33:45 +02:00

plugin-oauth.ts

fix: deliver a plugin OAuth callback only to the plugin that started the flow

2026-10-14 03:04:17 +02:00

plugin-projection.ts

feat: add plain-data views of messages, events, contacts, tasks and files for plugin hooks

2026-10-14 03:16:25 +02:00

plugin-settings.ts

fix: give plugins their default settings and apply setting changes without a reload

2026-10-14 02:21:45 +02:00

plugin-storage.ts

fix: clear the accounts' leftovers when everyone signs out

2026-09-26 16:55:34 +02:00

plugin-types.ts

feat: let plugins use accounts and API keys through the server without seeing them

2026-10-14 04:00:36 +02:00

plugin-validator.ts

fix: install Theme API v2 themes and their skins from the admin page and the marketplace

2026-10-14 01:47:58 +02:00

push-bindings.ts

perf(push): reconcile push bindings instead of rebuilding them

2026-09-30 19:03:34 +02:00

push-relays.ts

feat: pick push relay from admin-defined list instead of a URL field

2026-08-16 23:04:22 +02:00

quote-collapse.ts

feat: collapse quoted reply text behind a "..." toggle #480

2026-07-22 19:17:23 +02:00

quote-header.ts

fix: HTML-escape sender/subject in reply/forward quote header (#482)

2026-06-25 00:25:28 +02:00

read-file-env.ts

feat: add SESSION_SECRET_FILE and OAUTH_CLIENT_SECRET_FILE env vars

2026-04-09 22:13:08 +02:00

recipient-mentions.ts

feat: mention a recipient by first name with @ in the message body

2026-09-30 22:43:59 +02:00

recurrence-expansion.ts

fix: keep daily recurring events going past a DST gap

2026-09-26 15:45:59 +02:00

recurrence-instances.ts

fix: keep single-occurrence edits on that occurrence and keep its details

2026-09-23 13:40:01 +02:00

recurrence-overrides.ts

fix: keep single-occurrence edits on that occurrence and keep its details

2026-09-23 13:40:01 +02:00

recurrence-rule.ts

fix(calendar): drop default SKIP=OMIT from recurrence rules (DAVx5 sync)

2026-08-25 21:13:34 +02:00

reply-identity.ts

feat: choose exact-address or same-domain matching for reply from received address #1000

2026-09-09 19:27:08 +02:00

reply-recipients.ts

fix(reply): honour an external Reply-To even on a self-sent message

2026-08-16 21:12:21 +02:00

rfc5322-mailbox.ts

fix: split "Name <addr>" recipients into the JMAP name and email fields #672

2026-08-06 19:19:18 +02:00

schedule-presets.ts

feat: offer one-click times in the Schedule send dialog

2026-10-11 20:03:42 +02:00

scheduled-send-label.ts

fix: show the scheduled time rounded to the minute and with its date

2026-10-11 19:50:40 +02:00

search-scope-folders.ts

feat: show the folder hierarchy in the search folder dropdown

2026-09-29 20:15:14 +02:00

search-snippet.ts

feat: highlight search hits with SearchSnippet/get

2026-08-29 17:47:23 +02:00

search-suggestions.ts

feat: search suggestions with recent searches and contact autocomplete #845

2026-08-25 20:09:18 +02:00

server-auth-status.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

settings-search.ts

feat: let users hide shared mail accounts from the sidebar #1228

2026-10-13 15:55:54 +02:00

settings-sync.ts

feat: web setup wizard + admin config/state dir split (#226)

2026-05-09 17:37:41 +02:00

shared-calendar-colors.ts

Feature: per-viewer colors for shared calendars (#345)

2026-05-31 15:52:27 +02:00

shared-mail-visibility.ts

feat: let users hide shared mail accounts from the sidebar #1228

2026-10-13 15:55:54 +02:00

sidebar-apps.ts

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

sign-out-cleanup.ts

fix: stop a previous account's settings leaking into the next sign-in #1185

2026-10-06 23:26:27 +02:00

signature-delimiter.ts

fix: show one signature separator and keep its trailing space

2026-10-11 19:41:48 +02:00

signature-utils.ts

fix: show one signature separator and keep its trailing space

2026-10-11 19:41:48 +02:00

store-epoch.ts

fix: drop folder and filter fetches that finish after an account switch

2026-09-26 15:31:05 +02:00

sub-addressing.ts

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

subject-prefix.ts

fix: keep the fresh-compose tab title clear of the selected email subject

2026-08-18 15:48:05 +02:00

tab-title.ts

feat: let operators keep the message subject out of the tab title

2026-10-07 08:26:51 +03:00

template-merge.ts

fix: stop stale tabs and devices from dropping synced templates

2026-10-06 22:14:29 +02:00

template-types.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

template-utils.ts

fix: stop stale tabs and devices from dropping synced templates

2026-10-06 22:14:29 +02:00

theme-color-meta.ts

fix: sync PWA title bar colour with the active theme #671

2026-08-06 18:23:21 +02:00

theme-compiler.ts

fix: close theme CSS sanitizer bypasses and enforce :root/.dark selectors

2026-09-26 14:36:02 +02:00

theme-flat-fields.ts

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

theme-loader.ts

fix: close theme CSS sanitizer bypasses and enforce :root/.dark selectors

2026-09-26 14:36:02 +02:00

thread-routing.ts

fix: open right conversations in shared mailbox #814

2026-08-16 02:19:04 +02:00

thread-utils.ts

Merge remote-tracking branch 'origin/main' into fix/cross-account-selection-key

2026-09-30 09:02:58 +02:00

timezone.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

tnef.ts

fix: stop a crafted winmail.dat from freezing the tab

2026-09-26 14:15:10 +02:00

totp-issuer.ts

fix: keep Stalwart as the authenticator entry name on unbranded installs #1177

2026-10-06 23:29:42 +02:00

unified-mailbox.ts

fix: include sent mail when searching from unified all mail

2026-10-07 19:28:44 +02:00

upload-progress.ts

feat: real byte progress for attachment uploads, stock and plugin-offloaded

2026-08-23 19:44:56 +06:00

utils.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

validation.ts

fix: show what a mailto unsubscribe sends and limit it to one recipient

2026-09-26 14:41:14 +02:00

vcard.ts

fix: set name.full on all contact write paths so vCards carry mandatory FN #430

2026-08-31 23:53:24 +02:00

verification-code.ts

fix: stop offering ISO timestamps as verification codes #1236

2026-10-14 00:15:08 +02:00

version-compare.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

web-push.ts

Merge pull request #1054 from lucamzanon/feat/multi-account-push

2026-10-10 19:24:10 +02:00