Linus Rath 50b3ddccec feat: let admins keep the refresh token valid on sign-out so Stalwart keeps the consent #1388

2026-10-29 20:47:18 +01:00

..

active-account-slot.ts

fix: harden proxy auth and SSRF defenses

2026-03-31 17:47:09 +02:00

client-address.ts

fix: stop forwarding a loopback client address that a migrated Stalwart 1.0 rejects

2026-10-26 20:51:48 +01:00

crypto.ts

feat: refuse to restore or renew sessions older than the admin-set maximum length

2026-10-28 02:30:32 +01:00

instance-details.ts

feat: let admins scope the user policy per domain or group

2026-10-28 00:29:02 +01:00

lite-oauth.ts

fix: ask Stalwart 1.0 for mail, contacts, calendar and file access when signing in with SSO

2026-10-26 20:25:42 +01:00

lite-tokens.ts

feat: let admins keep the refresh token valid on sign-out so Stalwart keeps the consent #1388

2026-10-29 20:47:18 +01:00

mobile-handoff.ts

fix: hand a mobile sign-in to the app when the browser was already signed in

2026-10-22 08:02:08 +02:00

pair-attempts.ts

fix: limit pairing password attempts per mail account and per day

2026-09-27 04:49:03 +02:00

pair-bundle.ts

fix: say up front when the mobile app cannot use an http mail server

2026-09-27 04:53:49 +02:00

pair-grant.ts

fix: sign in with password and TOTP on Stalwart 1.0

2026-10-26 20:25:42 +01:00

pair-reauth.ts

fix: link the mobile app from every account with a sign-in of its own

2026-09-27 04:16:18 +02:00

pairing-store.ts

fix: clean up after pairings a phone never completes

2026-09-27 04:51:30 +02:00

password-session.ts

fix: show password and two-factor settings after a password and TOTP sign-in #1432

2026-10-29 15:50:56 +01:00

session-age.ts

fix: bind the sign-in time to the refresh token and count unstamped sessions from a fixed time

2026-10-28 03:42:19 +01:00

session-cookie.ts

feat: lift 5-account cap on HTTP/2

2026-05-07 12:28:33 +02:00

session-secret.ts

feat: generate a session secret on first start when none is configured

2026-10-13 13:17:34 +02:00

stalwart-login-request.ts

fix: sign in to Bulwark Lite with password and TOTP on Stalwart 1.0

2026-10-26 20:27:16 +01:00

stalwart-password-login.ts

fix: sign in to Bulwark Lite with password and TOTP on Stalwart 1.0

2026-10-26 20:27:16 +01:00

verification-failure.ts

fix: explain why calendar subscriptions fail with not authenticated #1073

2026-09-23 18:31:27 +02:00

verify-budget.ts

fix: budget failed sign-ins per client and forward the client address to the mail server

2026-10-19 00:43:00 +02:00

verify-jmap-auth.ts

fix: stop a bare login name from claiming an address on another domain

2026-10-26 11:33:37 +01:00