11 Commits

Include renames

Author	SHA1	Message	Date
Linus Rath	f275fbe2e4	fix: bind stalwart auth context to credential, not cookie-claimed username	2026-05-18 13:00:40 +02:00
Linus Rath	51745ea03d	feat: web setup wizard + admin config/state dir split (#226)	2026-05-09 17:37:41 +02:00
Linus Rath	5f464d4ee2	feat: lift 5-account cap on HTTP/2	2026-05-07 12:28:33 +02:00
Linus Rath	45a4db1c22	fix: pin JMAP auth verification to configured server URL #237	2026-04-30 15:34:14 +02:00
Linus Rath	3043639d2d	fix: validate URLs before outbound fetch	2026-04-27 22:23:39 +02:00
Pascal DietrichandLinus Rath	f9052eb23f	feat: add SESSION_SECRET_FILE and OAUTH_CLIENT_SECRET_FILE env vars	2026-04-09 22:13:08 +02:00
Linus Rath	aa40c8be26	fix: harden proxy auth and SSRF defenses	2026-03-31 17:47:09 +02:00
Linus Rath	66fe7fd359	fix: enhance security by blocking plugins with dangerous JS patterns and enforcing strict session secret length	2026-03-31 15:56:32 +02:00
Linus Rath	83a0a1e235	feat: add non-interactive SSO login flow for embedded/iframe deployments (closes #69)	2026-03-21 20:45:19 +01:00
Linus Rath	d493bb17dc	feat: implement account switcher component and state management ... - Add AccountSwitcher component for managing user accounts with UI for switching, adding, and logging out. - Create account state manager to handle snapshots of account-specific states for efficient switching. - Introduce utility functions for account management, including ID generation and avatar color assignment. - Implement Zustand store for account management, supporting addition, removal, and state retrieval of accounts.	2026-03-19 10:08:57 +01:00
Matthieu MALVACHEandMatthieu MALVACHE	1b0e3e41c6	feat: add "Remember me" session persistence and simplify 2FA UX	2026-02-26 00:47:53 +01:00