webmail

starred/webmail

Fork 0

mirror of https://github.com/bulwarkmail/webmail.git synced 2026-10-31 16:13:15 +00:00

Files

T

History

Maarten DraijerandClaude Opus 4.8 65cb6be8a9 feat(login): add LOGIN_SHOW_TOTP and LOGIN_SHOW_VERSION config flags

Two opt-out branding/login flags, both default true (no behaviour change
for existing deployments):

- LOGIN_SHOW_TOTP=false hides the manual "I have a 2FA code" toggle on the
  login form. Deployments that delegate auth to an external directory
  (LDAP/OIDC) where 2FA lives in the IdP have no server-side TOTP, so the
  toggle only ever leads to a failed login. Server-required TOTP
  (totp_required, which auto-shows the field) is unaffected.
- LOGIN_SHOW_VERSION=false hides the build version in the login footer, so
  the exact version isn't disclosed to unauthenticated visitors.

Wired through the existing config registry (CONFIG_ENV_MAP) → /api/config →
useConfig, matching the surrounding LOGIN_* options.

Refs #519.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-29 12:04:10 +00:00

audit.ts

feat: web setup wizard + admin config/state dir split (#226 )

2026-05-09 17:37:41 +02:00

config-manager.ts

feat: web setup wizard + admin config/state dir split (#226 )

2026-05-09 17:37:41 +02:00

csp-frame-origins.ts

fix: correct regex for valid API post path validation

2026-05-18 12:44:54 +02:00

domain-branding.ts

Feature: configurable PWA install screenshots (per-domain)