Linus Rath defe4e93f3 fix: bind the sign-in time to the refresh token and count unstamped sessions from a fixed time

2026-10-28 03:42:19 +01:00

..

impersonate

fix: make the impersonation handoff really clear the previous account list and ignore ?impersonated=1 links from elsewhere

2026-10-26 14:58:31 +01:00

oauth/metadata

fix: discover OIDC metadata server-side to avoid CORS failures #382

2026-06-02 00:15:50 +02:00

pair

fix: say up front when the mobile app cannot use an http mail server

2026-09-27 04:53:49 +02:00

reauth/sso/complete

fix: refuse a pairing re-auth the identity provider did not make fresh

2026-09-27 04:49:54 +02:00

session

fix: bind the sign-in time to the refresh token and count unstamped sessions from a fixed time

2026-10-28 03:42:19 +01:00

sso

fix: bind the sign-in time to the refresh token and count unstamped sessions from a fixed time

2026-10-28 03:42:19 +01:00

stalwart-context

fix: bind the sign-in time to the refresh token and count unstamped sessions from a fixed time

2026-10-28 03:42:19 +01:00

token

fix: bind the sign-in time to the refresh token and count unstamped sessions from a fixed time

2026-10-28 03:42:19 +01:00

totp-token-exchange

fix: bind the sign-in time to the refresh token and count unstamped sessions from a fixed time

2026-10-28 03:42:19 +01:00

verify

fix: budget failed sign-ins per client and forward the client address to the mail server

2026-10-19 00:43:00 +02:00