Linus Rath 6e5d8faec6 feat: refuse to restore or renew sessions older than the admin-set maximum length

2026-10-28 02:30:32 +01:00

..

impersonate

fix: make the impersonation handoff really clear the previous account list and ignore ?impersonated=1 links from elsewhere

2026-10-26 14:58:31 +01:00

oauth/metadata

fix: discover OIDC metadata server-side to avoid CORS failures #382

2026-06-02 00:15:50 +02:00

pair

fix: say up front when the mobile app cannot use an http mail server

2026-09-27 04:53:49 +02:00

reauth/sso/complete

fix: refuse a pairing re-auth the identity provider did not make fresh

2026-09-27 04:49:54 +02:00

session

feat: refuse to restore or renew sessions older than the admin-set maximum length

2026-10-28 02:30:32 +01:00

sso

feat: refuse to restore or renew sessions older than the admin-set maximum length

2026-10-28 02:30:32 +01:00

stalwart-context

feat: refuse to restore or renew sessions older than the admin-set maximum length

2026-10-28 02:30:32 +01:00

token

feat: refuse to restore or renew sessions older than the admin-set maximum length

2026-10-28 02:30:32 +01:00

totp-token-exchange

feat: refuse to restore or renew sessions older than the admin-set maximum length

2026-10-28 02:30:32 +01:00

verify

fix: budget failed sign-ins per client and forward the client address to the mail server

2026-10-19 00:43:00 +02:00