Linus Rath f02e96b47a fix: stop the password and TOTP sign-in from re-posting the password to another host when the mail server redirects

2026-10-26 14:58:31 +01:00

..

active-account-slot.ts

fix: harden proxy auth and SSRF defenses

2026-03-31 17:47:09 +02:00

client-address.ts

fix: budget failed sign-ins per client and forward the client address to the mail server

2026-10-19 00:43:00 +02:00

crypto.ts

feat: let plugins use accounts and API keys through the server without seeing them

2026-10-14 04:00:36 +02:00

instance-details.ts

fix: end admin sessions on sign-out and when the admin password changes

2026-10-26 14:52:04 +01:00

lite-oauth.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

lite-tokens.ts

feat: sign in with an access token

2026-10-01 00:24:47 +02:00

mobile-handoff.ts

fix: hand a mobile sign-in to the app when the browser was already signed in

2026-10-22 08:02:08 +02:00

pair-attempts.ts

fix: limit pairing password attempts per mail account and per day

2026-09-27 04:49:03 +02:00

pair-bundle.ts

fix: say up front when the mobile app cannot use an http mail server

2026-09-27 04:53:49 +02:00

pair-grant.ts

fix: clean up after pairings a phone never completes

2026-09-27 04:51:30 +02:00

pair-reauth.ts

fix: link the mobile app from every account with a sign-in of its own

2026-09-27 04:16:18 +02:00

pairing-store.ts

fix: clean up after pairings a phone never completes

2026-09-27 04:51:30 +02:00

session-cookie.ts

feat: lift 5-account cap on HTTP/2

2026-05-07 12:28:33 +02:00

session-secret.ts

feat: generate a session secret on first start when none is configured

2026-10-13 13:17:34 +02:00

stalwart-password-login.ts

fix: stop the password and TOTP sign-in from re-posting the password to another host when the mail server redirects

2026-10-26 14:58:31 +01:00

verification-failure.ts

fix: explain why calendar subscriptions fail with not authenticated #1073

2026-09-23 18:31:27 +02:00

verify-budget.ts

fix: budget failed sign-ins per client and forward the client address to the mail server

2026-10-19 00:43:00 +02:00

verify-jmap-auth.ts

fix: stop a bare login name from claiming an address on another domain

2026-10-26 11:33:37 +01:00