SRCmail

Files

T

History

Bernd Rodler cfdd091d22 feat: Phase 3+4 — security hardening + polish + offline + Electron push

Phase 3 (security):
- P3.1: Feature gate server-side enforcement (403 on disabled features)
- P3.2: Unified auth error interceptor (401→logout)
- P3.3: Store-level state isolation via StoreSnapshot contract
  (added message-list-tabs + task stores to snapshot/restore cycle)
- P3.4: Push event bus extraction — email-store no longer imports
  calendar/contact/filter/file stores directly
- P1.3: Auth localStorage AES-GCM encryption via custom Zustand adapter

Phase 4 (polish):
- P4.1: Offline write queue — pending operations in localStorage,
  auto-retry on reconnect, offline-queue-indicator banner
- P4.2: Identity spoofing — fromOverrideEmail domain validation
- P4.3: WebSocket push for Electron via main-process IPC bridge
  (ws package with Authorization headers)

2026-08-07 22:10:26 +02:00

active-account-slot.ts

fix: harden proxy auth and SSRF defenses

2026-03-31 17:47:09 +02:00

crypto.ts

feat: web setup wizard + admin config/state dir split (#226 )

2026-05-09 17:37:41 +02:00

local-storage-crypto.ts

feat: Phase 3+4 — security hardening + polish + offline + Electron push

2026-08-07 22:10:26 +02:00

pair-reauth.ts

feat: require re-authentication for device pairing and SSO