8 Commits

Include renames

Author	SHA1	Message	Date
Linus Rath	45a4db1c22	fix: pin JMAP auth verification to configured server URL #237	2026-04-30 15:34:14 +02:00
Linus Rath	3043639d2d	fix: validate URLs before outbound fetch	2026-04-27 22:23:39 +02:00
Pascal DietrichandLinus Rath	f9052eb23f	feat: add SESSION_SECRET_FILE and OAUTH_CLIENT_SECRET_FILE env vars	2026-04-09 22:13:08 +02:00
Linus Rath	aa40c8be26	fix: harden proxy auth and SSRF defenses	2026-03-31 17:47:09 +02:00
Linus Rath	66fe7fd359	fix: enhance security by blocking plugins with dangerous JS patterns and enforcing strict session secret length	2026-03-31 15:56:32 +02:00
Linus Rath	83a0a1e235	feat: add non-interactive SSO login flow for embedded/iframe deployments (closes #69)	2026-03-21 20:45:19 +01:00
Linus Rath	d493bb17dc	feat: implement account switcher component and state management ... - Add AccountSwitcher component for managing user accounts with UI for switching, adding, and logging out. - Create account state manager to handle snapshots of account-specific states for efficient switching. - Introduce utility functions for account management, including ID generation and avatar color assignment. - Implement Zustand store for account management, supporting addition, removal, and state retrieval of accounts.	2026-03-19 10:08:57 +01:00
Matthieu MALVACHEandMatthieu MALVACHE	1b0e3e41c6	feat: add "Remember me" session persistence and simplify 2FA UX	2026-02-26 00:47:53 +01:00