webmail

mirror of https://github.com/bulwarkmail/webmail.git synced 2026-11-04 08:15:41 +00:00

Files

T

Linus Rath af6cdfb997 fix: keep unsent mail through the idle and session limits, and mark a signed-out account in the switcher

The timers used to delete everything an account kept, unsent mail included.
They now follow the refused-login rule: sign out and hide, the next sign-in
brings it back, otherwise it goes after 30 days. A login without "Remember
me" that ends with the browser, an admin wipe and a wipe from settings don't
change.

- `wipeOnRefusedLogin` is now `wipeOnForcedSignOut`, since it also covers the
  limits. The server's `SESSION_TOO_OLD` goes the same way, as `session`.
- A refused account beside one that stays signed in shows in the switcher as
  needing sign-in, with the count and the date, and gets one toast.

Existing tests changed because the rule did: the session timer tests expected
a plain `logoutAll`, and the auth store tests expected no hook at the session
limit.

2026-11-03 16:36:13 +01:00

__tests__

fix: keep unsent mail through the idle and session limits, and mark a signed-out account in the switcher

2026-11-03 16:36:13 +01:00

credentials-rejected.ts

fix: keep unsent mail through the idle and session limits, and mark a signed-out account in the switcher

2026-11-03 16:36:13 +01:00

device-wipe.ts

fix: keep unsent mail through the idle and session limits, and mark a signed-out account in the switcher

2026-11-03 16:36:13 +01:00

evicted-secrets.ts

feat: hide an account's mail when its login is refused, until the new password or 30 days