Linus Rath 50b3ddccec feat: let admins keep the refresh token valid on sign-out so Stalwart keeps the consent #1388

2026-10-29 20:47:18 +01:00

..

impersonate

fix: make the impersonation handoff really clear the previous account list and ignore ?impersonated=1 links from elsewhere

2026-10-26 14:58:31 +01:00

oauth/metadata

fix: discover OIDC metadata server-side to avoid CORS failures #382

2026-06-02 00:15:50 +02:00

pair

fix: say up front when the mobile app cannot use an http mail server

2026-09-27 04:53:49 +02:00

reauth/sso/complete

fix: refuse a pairing re-auth the identity provider did not make fresh

2026-09-27 04:49:54 +02:00

session

fix: bind the sign-in time to the refresh token and count unstamped sessions from a fixed time

2026-10-28 03:42:19 +01:00

sso

feat: offer remember me on the sso-only login and apply it to every sso path #1437

2026-10-29 20:06:44 +01:00

stalwart-context

fix: bind the sign-in time to the refresh token and count unstamped sessions from a fixed time

2026-10-28 03:42:19 +01:00

token

feat: let admins keep the refresh token valid on sign-out so Stalwart keeps the consent #1388

2026-10-29 20:47:18 +01:00

totp-token-exchange

feat: offer remember me on the sso-only login and apply it to every sso path #1437

2026-10-29 20:06:44 +01:00

verify

fix: budget failed sign-ins per client and forward the client address to the mail server

2026-10-19 00:43:00 +02:00