Linus Rath 1e462fc67e Merge pull request #1436 from shukiv/fix/impersonation-expired-app-passwords ...

fix: let a mailbox be opened through the handoff more than five times

2026-10-31 16:24:52 +01:00

..

handoff

docs: move the mobile hand-off contract to the website

2026-10-31 14:32:39 +01:00

impersonate

fix: let a mailbox be opened through the handoff more than five times

2026-10-29 16:37:06 +00:00

oauth/metadata

fix: discover OIDC metadata server-side to avoid CORS failures #382

2026-06-02 00:15:50 +02:00

pair

fix: say up front when the mobile app cannot use an http mail server

2026-09-27 04:53:49 +02:00

reauth/sso/complete

fix: refuse a pairing re-auth the identity provider did not make fresh

2026-09-27 04:49:54 +02:00

session

fix: bind the sign-in time to the refresh token and count unstamped sessions from a fixed time

2026-10-28 03:42:19 +01:00

sso

feat: send an oauth resource indicator when one is configured #1461

2026-10-31 16:14:35 +01:00

stalwart-context

fix: bind the sign-in time to the refresh token and count unstamped sessions from a fixed time

2026-10-28 03:42:19 +01:00

token

feat: let admins keep the refresh token valid on sign-out so Stalwart keeps the consent #1388

2026-10-29 20:47:18 +01:00

totp-token-exchange

feat: offer remember me on the sso-only login and apply it to every sso path #1437

2026-10-29 20:06:44 +01:00

verify

fix: budget failed sign-ins per client and forward the client address to the mail server

2026-10-19 00:43:00 +02:00