Linus Rath 91a1b1cb51 fix: let non-admin users see their name and change a TOTP password ...

Bulwark read the live display name (#900) and the account profile with
`x:Account/get`, which Stalwart only allows for admins. Every other
user got `forbidden`, so the settings page showed no name and the
identity kept the stale snapshot. The name now comes from
`x:AccountSettings/get`, the account's own settings object; aliases
and quota still use `x:Account/get` where it is permitted.

With TOTP on, Stalwart requires the current code for a password change
and for switching TOTP off ("Current OTP code is required"). Neither
dialog asked for it. Both now do, and the password change sends it as
the `otpAuth/otpCode` patch, because a whole `otpAuth` object would
reset `otpUrl` and turn TOTP off.

Saving the display name also ignored a `notUpdated` answer and showed
success.

2026-09-22 20:28:01 +02:00

..

__tests__

fix: let non-admin users see their name and change a TOTP password

2026-09-22 20:28:01 +02:00

admin

feat: resolve deep links to the local instance

2026-09-20 19:59:37 +02:00

auth

feat: add OpenID Connect login to the Stalwart Lite bundle

2026-09-21 23:45:08 +02:00

connector

feat: resolve deep links to the local instance

2026-09-20 19:59:37 +02:00

demo

fix: report calendar clear failures instead of counting zero #434

2026-09-07 22:34:47 +02:00

global-search

fix: drop unused symbols left by the search dedupe change

2026-09-01 22:16:58 +02:00

impersonation

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

jmap

fix: report failed JMAP calls in send and search instead of succeeding

2026-09-22 20:27:16 +02:00

oauth

fix(oauth): normalize the discovery base so a session JMAP_SERVER_URL refreshes (#971)

2026-09-08 19:17:18 +00:00

plugin-sandbox

fix: bind the plugin sandbox to its framing window (GHSA-96cx-gx36-3g79)

2026-09-17 20:31:39 +02:00

protocol-handlers

feat: deep links for mail, calendar, contacts, files, settings and improve screen reader support

2026-08-06 16:47:20 +02:00

security

fix: reject cross-site requests to /api/auth/* to stop session fixation (GHSA-qvr9-m8cq-7wvg)

2026-09-17 20:01:35 +02:00

setup

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

sieve

fix: stop folder rules from pulling spam out of Junk

2026-09-22 20:14:42 +02:00

stalwart

fix: let non-admin users see their name and change a TOTP password

2026-09-22 20:28:01 +02:00

telemetry

fix: close IPv6 transition-address and redirect bypasses in endpoint guard

2026-08-25 20:50:35 +02:00

version-check

fix: invalidate persisted update status after an upgrade

2026-08-29 12:46:39 +02:00

webdav

fix: pin supported-calendar-component-set on created calendars #760

2026-08-25 19:16:20 +02:00

wopi

fix: bind a purpose into encrypted payloads (GHSA-cqqx-mjcf-mh55)

2026-09-17 20:16:51 +02:00

account-state-manager.ts

fix(files): reset the account-scoped Files drive on every account switch

2026-08-13 23:01:41 +02:00

account-utils.ts

fix: detect HTTP/2 from the initial navigation timing so accounts aren't capped at five

2026-09-10 10:14:25 +02:00

attachment-visibility.ts

fix: hide body-embedded cid parts declared as octet-stream from the attachment list

2026-09-10 10:45:45 +02:00

birthday-calendar.ts

chore: clear pre-commit eslint warnings (unused symbols, stale disables, test any)

2026-06-19 12:31:07 +02:00

browser-navigation.ts

feat: add Bulwark Lite build for Stalwart Applications

2026-09-19 00:53:53 +02:00

builtin-themes.ts

feat: add "Flat fields" theme

2026-09-19 13:01:07 +02:00

calendar-alerts.ts

fix: strike through cancelled events and mute their reminders #572

2026-07-07 23:26:36 +02:00

calendar-component-detection.ts

fix(calendar): hide tasks-only calendars from the event calendar UI

2026-08-16 21:18:57 +02:00

calendar-editability.ts

fix: rsvp controls

2026-09-03 22:12:15 -07:00

calendar-event-normalization.ts

feat: use Stalwart synthetic ids for recurring occurrences #140

2026-08-29 11:03:48 +02:00

calendar-ics-export.ts

i18n: add missing translation keys

2026-04-21 17:42:52 +02:00

calendar-invitation.ts

fix: export isCalendarMimeType for use in email attachment filtering

2026-04-16 16:54:09 +02:00

calendar-participants.ts

fix(calendar): dedupe participants, resolve contact names, show organizer status

2026-09-07 16:48:26 +08:00

calendar-scroll-window.ts

feat: setting to turn off free scrolling in the calendar

2026-09-09 18:27:01 +02:00

calendar-utils.ts

feat: freely scrolling month, week and day views #759

2026-09-09 16:38:55 +02:00

clear-cached-data.ts

fix: route multi-account email lookups and invitation parsing by source account #847

2026-08-25 18:50:50 +02:00

color-transform.ts

feat: add participant scheduling with iTIP invitations and inline calendar invitation banner

2026-02-17 01:09:57 +01:00

debug.ts

feat: store trusted senders in a dedicated JMAP address book #176

2026-04-12 01:10:28 +02:00

deep-link-handoff.ts

feat: open global search hits through the owning login on every surface #847

2026-09-01 20:55:13 +02:00

deep-links.ts

feat: open global search hits through the owning login on every surface #847

2026-09-01 20:55:13 +02:00

download-filename.ts

fix: never loop forever when deduping drag-out .eml names #1039

2026-09-17 21:42:16 +02:00

email-action-toast.ts

feat: add missing mail action toasts and show sonner toasts again

2026-09-21 20:52:02 +02:00

email-body-selection.ts

fix: render plain-text-only mail as text in the mobile thread view #489

2026-08-31 20:41:45 +02:00

email-composer-utils.ts

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

email-date.ts

fix: parse calendar invitations in directly viewed shared folders against the folder owner #867

2026-08-25 19:36:04 +02:00

email-fit-width.ts

fix: pad attachment preview overlays for the iOS PWA safe area #936

2026-08-31 21:03:08 +02:00

email-headers.ts

fix: stop HELO spf=none from downgrading a MAIL FROM spf=pass #650

2026-07-21 23:03:34 +02:00

email-sanitization.ts

fix: keep security headers on dotted app paths and neutralise cid: blobs (GHSA-xvjh-v9c6-qcvc)

2026-09-17 21:08:37 +02:00

email-source.ts

feat: add plugin hooks for email details, headers, and source

2026-06-25 01:04:26 +02:00

email-threading.ts

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

eml-import.ts

feat: support importing emails from .zip archives

2026-05-22 15:22:33 +02:00

favicon-badge.ts

feat: redesign the unread favicon badge as a compact keyline badge

2026-08-20 16:49:31 +02:00

file-preview.ts

fix: keep security headers on dotted app paths and neutralise cid: blobs (GHSA-xvjh-v9c6-qcvc)

2026-09-17 21:08:37 +02:00

folder-tree-dnd.ts

fix: folder drag & drop can move folders into other parents #855

2026-08-20 14:21:41 +02:00

forward-as-attachment.ts

fix: strip from/to names from forward-as-attachment filenames

2026-07-29 11:41:34 +12:00

html-to-text.ts

fix: preserve line breaks in generated text/plain alternative #421

2026-06-15 23:15:04 +02:00

iframe-bridge.ts

fix: pin parent origin in iframe-bridge to block cross-frame postMessage

2026-05-18 16:01:29 +02:00

jalali-utils.ts

feat: add Jalali (Persian/Shamsi) calendar support with Saturday as week start (#490)

2026-07-08 15:42:42 +02:00

keyboard.ts

fix: detect typing inside the QuotedHtml shadow island via composedPath #654

2026-07-21 23:26:51 +02:00

keyword-discovery.ts

feat: detect and import unrecognized JMAP keywords as tags #658

2026-08-06 18:44:14 +02:00

keyword-format.ts

feat: Add nesting of tags in a tree

2026-07-29 17:18:38 +02:00

keyword-nesting.ts

feat: allow hidden tags, either permanent or when there are no unread messages

2026-07-29 17:18:42 +02:00

lite-config.ts

feat: add OpenID Connect login to the Stalwart Lite bundle

2026-09-21 23:45:08 +02:00

lite-link-segments.ts

fix: harden Bulwark Lite login, deep-link replay and settings gating

2026-09-18 22:16:57 +02:00

lite-mounted-href.ts

feat: add Bulwark Lite build for Stalwart Applications

2026-09-19 00:53:53 +02:00

lite-static-params.ts

feat: add Bulwark Lite static export build

2026-09-17 23:54:33 +02:00

lite.ts

feat: add Bulwark Lite build for Stalwart Applications

2026-09-19 00:53:53 +02:00

logger.ts

feat: add contacts phase 2, advanced search, vacation responder, Docker & TOTP 2FA

2026-02-16 18:51:30 +01:00

mailbox-label.ts

fix: localize special-folder names by JMAP role #404

2026-06-24 19:32:13 +02:00

mdn.ts

fix: strip CR/LF from read-receipt header values (GHSA-w38p-hpqv-g89c)

2026-09-17 20:55:39 +02:00

message-list-order.ts

feat: configurable message-list ordering #718

2026-08-25 19:20:48 +02:00

notification-sound.ts

Fix: notification sound preview - base-path prefix + longer default beep

2026-07-04 14:52:26 +02:00

pending-notification-store.ts

feat: surface CalendarEventNotification invitations and updates

2026-08-29 18:11:50 +02:00

plugin-hooks.ts

feat: OAuth handler for plugins; extended contacts and addressbook API

2026-08-31 09:55:06 +02:00

plugin-loader.ts

Feature: localizable sandboxed plugins (manifest locales + api.i18n.t)

2026-05-30 15:56:55 +02:00

plugin-oauth.ts

feat: OAuth handler for plugins; extended contacts and addressbook API

2026-08-31 09:55:06 +02:00

plugin-projection.ts

feat: add plugin hooks for email details, headers, and source

2026-06-25 01:04:26 +02:00

plugin-storage.ts

fix: fail fast when the plugin storage database is blocked #840

2026-09-07 22:34:47 +02:00

plugin-types.ts

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

plugin-validator.ts

chore: update version to 1.5.3

2026-04-28 17:34:06 +02:00

push-relays.ts

feat: pick push relay from admin-defined list instead of a URL field

2026-08-16 23:04:22 +02:00

quote-collapse.ts

feat: collapse quoted reply text behind a "..." toggle #480

2026-07-22 19:17:23 +02:00

quote-header.ts

fix: HTML-escape sender/subject in reply/forward quote header (#482)

2026-06-25 00:25:28 +02:00

read-file-env.ts

feat: add SESSION_SECRET_FILE and OAUTH_CLIENT_SECRET_FILE env vars

2026-04-09 22:13:08 +02:00

recurrence-expansion.ts

feat: use Stalwart synthetic ids for recurring occurrences #140

2026-08-29 11:03:48 +02:00

recurrence-instances.ts

feat: use Stalwart synthetic ids for recurring occurrences #140

2026-08-29 11:03:48 +02:00

recurrence-overrides.ts

fix(calendar): edit a single recurring occurrence via a one-shot override patch

2026-08-16 21:24:52 +02:00

recurrence-rule.ts

fix(calendar): drop default SKIP=OMIT from recurrence rules (DAVx5 sync)

2026-08-25 21:13:34 +02:00

reply-identity.ts

feat: choose exact-address or same-domain matching for reply from received address #1000

2026-09-09 19:27:08 +02:00

reply-recipients.ts

fix(reply): honour an external Reply-To even on a self-sent message

2026-08-16 21:12:21 +02:00

rfc5322-mailbox.ts

fix: split "Name <addr>" recipients into the JMAP name and email fields #672

2026-08-06 19:19:18 +02:00

search-scope-folders.ts

fix: include shared accounts in "All folders" mail search #1082

2026-09-22 17:25:43 +02:00

search-snippet.ts

feat: highlight search hits with SearchSnippet/get

2026-08-29 17:47:23 +02:00

search-suggestions.ts

feat: search suggestions with recent searches and contact autocomplete #845

2026-08-25 20:09:18 +02:00

settings-search.ts

feat: choose exact-address or same-domain matching for reply from received address #1000

2026-09-09 19:27:08 +02:00

settings-sync.ts

feat: web setup wizard + admin config/state dir split (#226)

2026-05-09 17:37:41 +02:00

shared-calendar-colors.ts

Feature: per-viewer colors for shared calendars (#345)

2026-05-31 15:52:27 +02:00

sidebar-apps.ts

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

signature-utils.ts

fix: keep already written text when applying a template in compose #540

2026-08-16 22:20:49 +02:00

sub-addressing.ts

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

subject-prefix.ts

fix: keep the fresh-compose tab title clear of the selected email subject

2026-08-18 15:48:05 +02:00

template-types.ts

feat(templates): add support for HTML templates

2026-07-19 10:10:31 +02:00

template-utils.ts

fix: keep already written text when applying a template in compose #540

2026-08-16 22:20:49 +02:00

theme-color-meta.ts

fix: sync PWA title bar colour with the active theme #671

2026-08-06 18:23:21 +02:00

theme-compiler.ts

chore: update version to 1.5.3

2026-04-28 17:34:06 +02:00

theme-flat-fields.ts

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

theme-loader.ts

fix: sync PWA title bar colour with the active theme #671

2026-08-06 18:23:21 +02:00

thread-routing.ts

fix: open right conversations in shared mailbox #814

2026-08-16 02:19:04 +02:00

thread-utils.ts

fix: scope thread identity to the owning account in unified views #1012

2026-09-18 18:33:02 +02:00

timezone.ts

feat: freely scrolling month, week and day views #759

2026-09-09 16:38:55 +02:00

tnef.ts

fix: standardize punctuation

2026-04-16 19:07:42 +02:00

unified-mailbox.ts

fix: include shared accounts in "All folders" mail search #1082

2026-09-22 17:25:43 +02:00

upload-progress.ts

feat: real byte progress for attachment uploads, stock and plugin-offloaded

2026-08-23 19:44:56 +06:00

utils.ts

feat: add custom time zone setting overriding browser detection #755

2026-08-25 19:18:16 +02:00

validation.ts

Fix: send mailto unsubscribe ourselves instead of via the OS handler

2026-07-08 15:41:46 +02:00

vcard.ts

fix: set name.full on all contact write paths so vCards carry mandatory FN #430

2026-08-31 23:53:24 +02:00

version-compare.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

web-push.ts

feat: add Bulwark Lite static export build

2026-09-17 23:54:33 +02:00