Commit Graph

289 Commits

Author SHA1 Message Date
root
831f3dc677 feat(auth): verify Basic credentials through OIDC provider 2026-07-29 02:31:01 +02:00
Maurus Decimus
6fb4d2b628 IMAP: Mailbox object-quota only enforced in JMAP 2026-07-19 07:52:31 +02:00
Maurus Decimus
602025464b Fix Sieve: add Received headers to auto-generated messages and detect loops 2026-07-12 16:03:53 +02:00
Maurus Decimus
8d54d0b44c Fix Directory: Update local groups only when the external directory includes a group attribute 2026-07-12 15:34:04 +02:00
Maurus Decimus
2543ec7067 Bump dependencies 2026-07-12 11:39:02 +02:00
Maurus Decimus
448a0c1b08 OIDC directory: Fetch name and group claims from userinfo endpoint when missing from the JWT token 2026-07-05 11:02:35 +02:00
Maurus Decimus
0eb08b9fb3 Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks 2026-06-25 19:24:10 +02:00
Maurus Decimus
93b3b70616 Redis Sentinel support as an in-memory store and cluster coordinator backend (closes #2430) 2026-06-25 10:26:23 +02:00
Maurus Decimus
df164e07c8 DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records 2026-06-22 23:13:45 +02:00
Maurus Decimus
3f2c5632b8 Fix OIDC: Add default domain name to groups that are not email addresses 2026-06-16 21:51:48 +02:00
Maurus Decimus
33f288d0ea Fix JMAP: */changes methods leak ids of non-shared objects 2026-06-10 13:51:36 +02:00
Maurus Decimus
838a839290 OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change 2026-06-03 18:14:48 +02:00
Maurus Decimus
777cf1252b RateLimit header fields for HTTP 2026-05-23 11:41:43 +02:00
Maurus Decimus
7790645421 Bump JMAP File Storage to draft-ietf-jmap-filenode-14 2026-05-16 10:44:10 +02:00
Maurus Decimus
e049f9ff4f Accept password hashes with $ or { prefixes as secure secrets 2026-05-14 16:52:15 +02:00
Maurus Decimus
415036dd64 Fix DAV: acl-principal-prop-set REPORT enforced the wrong privilege 2026-05-12 15:47:32 +02:00
Maurus Decimus
bdba3f20e1 v0.16.5 2026-05-11 17:14:26 +02:00
Maurus Decimus
33cb0ee832 Fix SQL directory: Return Failed instead of Error when the query returns no results 2026-05-05 19:09:52 +02:00
Maurus Decimus
9a575d9438 Timezone changes from the AccountSettings object return invalidProperties 2026-05-01 14:55:38 +02:00
Maurus Decimus
0b7492240b Fix log viewer: All events show as INFO. 2026-04-29 09:02:34 +02:00
Maurus Decimus
ed849e86ba v0.16.2 2026-04-28 16:11:49 +02:00
Maurus Decimus
c0c889b7fb OIDC: Fallback to userinfo endpoint when JWT token does not contain an email claim. 2026-04-28 14:59:55 +02:00
Maurus Decimus
52733408dc Reduce minimum TLS certificate validity from 86400 to 3600 seconds 2026-04-24 20:18:38 +02:00
Maurus Decimus
3ad4aa82cb v0.16.0 2026-04-20 17:50:58 +02:00
Maurus Decimus
eaf0601742 Include OAuth public endpoint in PACC responses 2026-04-19 14:35:06 +02:00
Maurus Decimus
af23099e35 Box large futures 2026-04-19 08:11:56 +02:00
Maurus Decimus
1afad4d843 OAuth PKCE support and credential changes 2026-04-10 20:18:52 +02:00
Maurus Decimus
fde37b670f Login screen and api endpoint reorganization 2026-04-05 19:57:23 +02:00
Maurus Decimus
71f54f7e84 Use rustls-platform-verifier for TLS certificate verification instead of webpki + Use aws-lc for cryptographic operations instead of ring 2026-04-04 12:24:41 +02:00
Maurus Decimus
e451f037c8 Registry testing - all tests passing 2026-03-27 16:49:26 +01:00
Maurus Decimus
72bc8c05ab Registry testing - part 16 2026-03-26 19:10:06 +01:00
mdecimus
e0105bc43b Registry testing - part 5 2026-03-15 18:01:12 +01:00
mdecimus
7c143c85f8 Registry testing - part 1 2026-03-11 18:28:31 +01:00
mdecimus
92c60fff7a JMAP Registry API implementation - part 8 2026-03-11 17:12:22 +01:00
mdecimus
9ccc2ed6f0 JMAP Registry API implementation - part 6 2026-03-11 17:12:22 +01:00
mdecimus
f2c2ad6748 Registry object implementation 2026-03-11 17:08:00 +01:00
mdecimus
ddf9cc7ba7 Registry caching and directory synchronization 2026-03-11 17:08:00 +01:00
mdecimus
726e8d9c79 Update all modules to use registry - part 4 2026-03-11 17:08:00 +01:00
mdecimus
f7c2fe10c1 Update all modules to use registry - part 3 2026-03-11 17:07:58 +01:00
mdecimus
298b5bc23f Authenticate using registry - part 4 2026-03-11 17:00:39 +01:00
mdecimus
22e5f5a5ab Authenticate using registry - part 3 2026-03-11 17:00:39 +01:00
mdecimus
1a780ca294 Authenticate using registry - part 2 2026-03-11 17:00:39 +01:00
mdecimus
0af735540d Authenticate using registry - part 1 2026-03-11 17:00:39 +01:00
mdecimus
7c8be27fcf Bootstrap from registry - part 7 2026-03-11 17:00:39 +01:00
mdecimus
b2a808911f v0.15.5 2026-02-14 18:55:56 +00:00
mdecimus
3c0312df1e v0.15.4 2026-01-19 08:23:35 -03:00
mdecimus
8b09a01c73 v0.15.3 2025-12-29 15:32:39 +01:00
mdecimus
74d9ab1659 v0.15.2 2025-12-21 17:30:02 +01:00
mdecimus
c59cc8c9d3 Lowercase LDAP attribute comparison - credits to @pdf (fixes #2363 closes #2378) 2025-12-18 15:12:41 +01:00
mdecimus
8c016b4907 v0.15.1 2025-12-17 16:30:05 +01:00