1619 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
namailu	e446052e06	JMAP session urls follow the requested host (STALWART_PUBLIC_URL_HOSTS) ... The session document hands the client absolute urls built from the single configured public url, so a client that discovered the server on one brand's hostname was told to continue on another brand's hostname. With STALWART_PUBLIC_URL_HOSTS=namailu.cz,mailows.com the session follows the host the request came in on; anything not on that allowlist (including a spoofed Host header) keeps the configured public url, which still serves OAuth metadata, its issuer and the web admin links — those must stay on one stable host.	2026-08-18 00:39:01 +02:00
root	dc9c52ae1d	docs: point fork metadata at canonical repository	2026-07-29 15:20:13 +02:00
root	b4c5c4c25c	docs: record pending public repository creation	2026-07-29 02:35:02 +02:00
root	831f3dc677	feat(auth): verify Basic credentials through OIDC provider	2026-07-29 02:31:01 +02:00
Maurus Decimus	425d034ae7	Use of Voluntary Application Server Identification (VAPID) in JMAP Web Push v0.16.14	2026-07-20 13:55:00 +02:00
Maurus Decimus	2553d8ee4c	Fix Telemetry: Tasks are serialized to the wrong store when using separate stores for telemetry and data	2026-07-20 11:35:46 +02:00
Maurus Decimus	3cc348726b	Fix MTA: queue_name variable not available in rate limiter expressions	2026-07-19 23:09:31 +02:00
Maurus Decimus	2d08933fbc	Fix Calendar: No expanded occurrences are returned for a daily recurrences crossing DST	2026-07-19 22:59:03 +02:00
Maurus Decimus	152db36247	Fix HTTP: Disable allowedEndpoints expression in recovery mode	2026-07-19 22:09:17 +02:00
Maurus Decimus	acd45e1f9e	Fix JMAP: Stale push subscription can block verification of a new one	2026-07-19 21:50:37 +02:00
Maurus Decimus	c105cff8fb	Fix CalDAV: calendar-query REPORT returns empty calendar-data for JMAP-created events	2026-07-19 21:27:01 +02:00
Maurus Decimus	2bce0d22fd	Fix JMAP: PushSubscription/set rejects the unpadded base64url keys the W3C Push API produces	2026-07-19 21:00:45 +02:00
Maurus Decimus	2c04d4473c	Fix IMAP: Pipelined STORE and EXPUNGE can execute out of order	2026-07-19 16:02:20 +02:00
Maurus Decimus	f967132971	Fix MTA: DMARC is skipped when MAIL FROM SPF is unavailable	2026-07-19 15:44:06 +02:00
Maurus Decimus	3de53f9c31	Fix JMAP: CalendarEvent/set silently ignores ifInState	2026-07-19 15:29:55 +02:00
Maurus Decimus	2d4d3a55be	Fix JMAP: Email/import does not send push notifications for imported messages	2026-07-19 15:22:54 +02:00
Maurus Decimus	eacec4c45d	Fix JMAP: Web Push payloads with Content-Encoding: aes128gcm should not be base64-encoded but sent as raw bytes	2026-07-19 15:17:40 +02:00
Maurus Decimus	6076659e4d	Fix Calendar: Scheduling invitations on a shared, non-owned calendar fail with MAIL FROM unauthorized	2026-07-19 12:19:50 +02:00
Maurus Decimus	18dbbda298	Fix Calendar: Uppercase MAILTO calendar addresses become invalid SMTP recipients	2026-07-19 10:29:07 +02:00
Maurus Decimus	bd44943661	Fix JMAP: Read-only sharee cannot set isSubscribed on a shared mailbox	2026-07-19 07:54:33 +02:00
Maurus Decimus	6fb4d2b628	IMAP: Mailbox object-quota only enforced in JMAP	2026-07-19 07:52:31 +02:00
Martin	45602a35ba	Various FreeBSD improvements (#3219) ... * Fix permission denied (/var/run/stalwart.pid) on FreeBSD install * Remove jemalloc dependency on FreeBSD (which is already using jemalloc) * Enabling binding to privileged ports on FreeBSD	2026-07-14 08:56:05 +02:00
Maurus Decimus	764c2c1e1c	v0.16.13	2026-07-12 19:18:29 +02:00
Maurus Decimus	602025464b	Fix Sieve: add Received headers to auto-generated messages and detect loops	2026-07-12 16:03:53 +02:00
Maurus Decimus	ca5971e9a1	Fix Misconfigured in-memory store cannot be recovered in recovery mode	2026-07-12 16:02:28 +02:00
Maurus Decimus	0f6fb0c321	Fix MTA: Resume queue processing does not work	2026-07-12 15:51:37 +02:00
Maurus Decimus	b5c703e4e3	Fix DNS Management: CAA management deletes too third-party CAA entries	2026-07-12 15:48:08 +02:00
Maurus Decimus	8d54d0b44c	Fix Directory: Update local groups only when the external directory includes a group attribute	2026-07-12 15:34:04 +02:00
Maurus Decimus	e8192d1920	Fix JMAP VacationResponse: isEnabled reset to false whenever properties are changed	2026-07-12 15:20:50 +02:00
Maurus Decimus	b8122c8e0f	Fix Sieve: add Received headers to auto-generated messages and detect loops	2026-07-12 15:08:17 +02:00
Maurus Decimus	f7e82c3fbc	Fix Branding: Custom logos for domains do not work	2026-07-12 15:04:26 +02:00
Maurus Decimus	b17da02d3e	Fix JMAP: Return RFC-3339-conformant UTCDate literals in capabilities: min 0001-01-01T00:00:00Z, max 9999-12-31T23:59:59Z	2026-07-12 14:58:31 +02:00
Maurus Decimus	f73fefdd69	Fix: Reject invalid duration values (e.g. 1h30m)	2026-07-12 14:43:51 +02:00
Maurus Decimus	2543ec7067	Bump dependencies	2026-07-12 11:39:02 +02:00
Martin	520dbe9d71	Add FreeBSD support to install.sh and update docs (#3216)	2026-07-11 12:48:10 +02:00
Martin	9a5f5c11f7	Add FreeBSD (x86_64, aarch64) support (#3214) ... * Add FreeBSD (x86_64, aarch64) support Closes https://github.com/stalwartlabs/stalwart/issues/253 Closes https://github.com/stalwartlabs/stalwart/issues/1736 * Disable FreeBSD aarch64 builds for now	2026-07-10 11:19:51 +02:00
Maurus Decimus	e21fc8bc9d	Clippy fixes	2026-07-09 15:26:03 +02:00
Maurus Decimus	e2d0505013	Disable DANE when there are no TCP resolvers configured	2026-07-09 09:48:05 +02:00
Hugh Cole-Baker	448f735d55	Fix Store PostgreSQL channel binding (#3212) ... The former behaviour to always use a SHA-256 hash of the server certificate for the tls-server-end-point channel binding was incorrect with regard to RFC5929, which specifies if the signature algorithm uses a single hash function, that hash function should be used, unless the signature algorithm uses MD5 or SHA-1, in which case the channel binding should use an SHA-256 hash. This change attempts to align with the behaviour of OpenSSL, used by PostgreSQL, in using the signature algorithm's hash function.	2026-07-08 23:00:16 +02:00
Maurus Decimus	1cadee382f	Update PR action	2026-07-08 22:59:13 +02:00
Maurus Decimus	546d801810	Updated contributing guidelines	2026-07-08 15:23:47 +02:00
Maurus Decimus	548ff03f30	OAuth resource indicators: Accept imap, smtp, pop3 and sieve as valid resource indicators for OAuth access tokens	2026-07-06 15:37:57 +02:00
Maurus Decimus	d368b53ca1	DMARCbis implementation	2026-07-05 16:34:57 +02:00
Maurus Decimus	fb993f0cc1	Cluster: Broadcast MTA queue refresh events to all nodes	2026-07-05 12:05:46 +02:00
Maurus Decimus	aad2cbcde1	Fix Network listener: Accept loop spins all CPU cores with no back-off when the process hits EMFILE (too many open files)	2026-07-05 12:02:26 +02:00
Maurus Decimus	5325b57dff	Fix Calendar scheduling: Wrong RSVP base URL is used	2026-07-05 11:44:56 +02:00
Maurus Decimus	5376d83f3a	Fix Snowflake past id generation fails when the provided duration is longer than 4 years	2026-07-05 11:42:10 +02:00
Maurus Decimus	9908baf2eb	Fix CalDAV: calendar-query REPORT returns invalid HTTP 404 when no events match the query	2026-07-05 11:39:30 +02:00
Maurus Decimus	74ac0a7f0d	Fix Meilisearch: Limit the text search scope using attributesToSearchOn	2026-07-05 11:22:09 +02:00
Maurus Decimus	448a0c1b08	OIDC directory: Fetch name and group claims from userinfo endpoint when missing from the JWT token	2026-07-05 11:02:35 +02:00