Linus Rath eb2787bcc9 fix: end admin sessions on sign-out and when the admin password changes

2026-10-26 14:52:04 +01:00

..

__tests__

fix: write the admin config, password hash and setup token readable only by the app's own user

2026-10-26 11:48:38 +01:00

admin-nav.ts

feat: rework the admin panel around a settings-style sidebar and one URL per page

2026-10-20 15:16:05 +02:00

audit.ts

fix: keep OAuth client secrets and the session secret out of the admin audit log, config API and dashboard writes

2026-10-19 00:50:16 +02:00

branding-asset.ts

fix: pin resolved IP for stored custom JMAP endpoints and branding URLs

2026-08-26 23:02:19 +02:00

config-manager.ts

fix: write the admin config, password hash and setup token readable only by the app's own user

2026-10-26 11:48:38 +01:00

config-read-only-response.ts

fix: load the admin panel when the config is read-only #1249

2026-10-17 19:17:48 +02:00

csp-frame-origins.ts

fix: check dev-directory plugins like uploads and keep their files inside the plugin folder

2026-10-14 02:26:56 +02:00

directory-keys.ts

fix: refuse an extension directory keyring older than the newest one seen

2026-10-19 01:32:25 +02:00

directory-url.ts

fix: keep the extension directory URL off private addresses

2026-10-19 01:32:25 +02:00

domain-branding.ts

fix: use callable .get to detect Headers in pickRequestHost

2026-07-09 13:51:12 +02:00

extension-cleanup.ts

fix: keep an extension's admin state on re-upload and remove its config when it is deleted

2026-10-14 02:25:45 +02:00

extension-history.ts

feat: keep replaced plugin and theme versions and roll back to them

2026-10-19 00:08:10 +02:00

jmap-servers.ts

fix: keep OAuth client secrets and the session secret out of the admin audit log, config API and dashboard writes

2026-10-19 00:50:16 +02:00

marketplace-directory.ts

fix: stop reading a marketplace bundle download once it passes the package size limit

2026-10-26 11:29:37 +01:00

migrate.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

password.ts

fix: end admin sessions on sign-out and when the admin password changes

2026-10-26 14:52:04 +01:00

paths.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

plugin-approvals.ts

fix: keep plugin approval requests that several users send at once

2026-10-26 11:29:37 +01:00

plugin-config.ts

fix: keep an extension's admin state on re-upload and remove its config when it is deleted

2026-10-14 02:25:45 +02:00

plugin-dev.ts

feat: let plugins use accounts and API keys through the server without seeing them

2026-10-14 04:00:36 +02:00

plugin-registry.ts

feat: keep replaced plugin and theme versions and roll back to them

2026-10-19 00:08:10 +02:00

plugin-signing.ts

fix: treat an empty PLUGIN_SIGNING_KEY_FILE as unset #996

2026-09-30 14:24:29 +02:00

policy-defaults.ts

fix: apply admin policy defaults to user settings #1248

2026-10-17 19:17:46 +02:00

rate-limit.ts

fix: cap admin sign-in attempts across all clients (GHSA-7pj2-232x-6698)

2026-09-26 15:07:09 +02:00

session.ts

fix: end admin sessions on sign-out and when the admin password changes

2026-10-26 14:52:04 +01:00

stalwart-admin-access.ts

feat: make Stalwart admin access to the dashboard configurable #870

2026-08-25 18:39:07 +02:00

theme-asset.ts

fix: install Theme API v2 themes and their skins from the admin page and the marketplace

2026-10-14 01:47:58 +02:00

types.ts

fix: end admin sessions on sign-out and when the admin password changes

2026-10-26 14:52:04 +01:00