Linus Rath 8523289a4b feat: let an admin wipe a lost device, and clear an account the server refuses for good ...

Until now a lost laptop kept its offline mail for as long as anyone could
open it, and an account whose login the server had ended kept its copy too.

- `lib/devices`, `app/api/devices`: browsers with offline on and desktop
  apps register, in a durable collection with no expiry. A check-in goes
  by a per-device secret, so a revoked device still hears its wipe.
- `app/api/admin/devices` and the org devices page: wipe one device or all
  of a user's, with audit entries for each request and each confirmation.
- `lib/offline/device-wipe.ts`: a start finishes any wipe cut short, then
  waits up to a second for the instance before showing the local copy. A
  wipe takes the store, keys, plugin databases and handoffs, signs out,
  and reports back, again at the next contact if the report failed.
- `lib/jmap/client.ts`, `stores/auth-store.ts`: only `invalid_grant`, the
  session limit, or a 401 lasting past a re-auth count as refused. A 500,
  a proxy page or an outage never do.
- Settings: "Remove everything from this device", with a confirmation.

`lib/shared-store/__tests__/import-data.test.ts` changes its assertion
because it lists every collection the import copies, and `devices` is new.

2026-11-03 13:19:44 +01:00

..

admin.ts

fix: import the audit log in batches and finish an import that stopped halfway #1066

2026-11-01 00:08:39 +01:00

auth.ts

feat: carry the session-limit start and office editor revocations into the shared store on import #1066

2026-10-31 23:31:00 +01:00

data.ts

feat: let an admin wipe a lost device, and clear an account the server refuses for good

2026-11-03 13:19:44 +01:00

ext.ts

fix: drop files of removed plugins on export and read only the approval files on import #1066

2026-11-01 01:07:30 +01:00