Linus Rath 3f264367af fix: harden the app lock: forget in an order that can't leave a sign-in without a PIN, hear wipes and clear subjects while locked, and refuse obvious PINs

2026-11-03 17:08:02 +01:00

..

desktop-oauth

feat: sign in through the system browser in the desktop app, and refresh at the account's own server

2026-11-03 06:32:43 +01:00

handoff

fix: give a hand-off redeem back when the store fails, and hand out a sign-in whose tombstone couldn't be written #1066

2026-11-01 00:03:19 +01:00

impersonate

fix: answer 503 when an impersonation link's use can't be recorded and keep used links as expiring keys #1066

2026-11-01 00:07:41 +01:00

oauth/metadata

fix: discover OIDC metadata server-side to avoid CORS failures #382

2026-06-02 00:15:50 +02:00

pair

fix: give a pair step-up attempt back only to the windows it was counted in #1066

2026-11-01 00:05:09 +01:00

reauth/sso/complete

feat: let a phone pair through any instance and keep pairing secrets sealed in the shared store #1066

2026-10-31 23:16:11 +01:00

session

fix: hold forced policies against spoofed plugins, recommended values and stopped servers

2026-11-03 12:06:21 +01:00

sso

fix: harden the app lock: forget in an order that can't leave a sign-in without a PIN, hear wipes and clear subjects while locked, and refuse obvious PINs

2026-11-03 17:08:02 +01:00

stalwart-context

feat: enforce the desktop app's OS policies for plugins, mail servers and offline mail

2026-11-03 10:15:15 +01:00

token

fix: hold forced policies against spoofed plugins, recommended values and stopped servers

2026-11-03 12:06:21 +01:00

totp-token-exchange

feat: enforce the desktop app's OS policies for plugins, mail servers and offline mail

2026-11-03 10:15:15 +01:00

verify

feat: enforce the desktop app's OS policies for plugins, mail servers and offline mail

2026-11-03 10:15:15 +01:00