Bernd Rodler a622e3755b fix: Phase 1 critical+high fixes (17/18 items) ...

CRITICAL fixes:
- C1: Error swallowing - throw TransportError on network failure in getEmails/searchEmails
- C2: Recurrence expansion ID delimiter changed from ':' to '::occurrence::'
- C3: Cross-account calendar event UID dedup after multi-account aggregation
- C4: Admin session token revocation via JTI blacklist on logout
- C6: FTS5 schema-drop - add warning log for automatic reindex trigger
- C7: Settings lock - gate updateSetting() with isSettingLocked() check
- C8: Offline push pause - add offline event handler that closes push transports

HIGH fixes:
- H1: Push handler - add ContactCard and FileNode branches
- H2: WS fallback - await state snapshot before reconcileAfterWebSocketFallback
- H3: Auth rate limiting - add checkUserAuthRateLimit to session and token routes
- H4: OAuth logs - strip access_token from error log context
- H7: Template XSS - apply DOMPurify to HTML template body on import
- H8: Secure cookie - derive from x-forwarded-proto, not NODE_ENV
- H9: bcrypt fix - remove bcrypt prefixes from isHashed() so scrypt-only
- H13: calendarTasksEnabled - apply admin gate at runtime in calendar page
- H14: Task mutations - add try/catch error handling to update/delete/toggle
- H18: autoSelectReplyIdentity default changed from false to true

Deferred: P1.3 (C5 auth localStorage encryption) - requires custom Zustand persist adapter.

2026-08-07 12:17:41 +02:00

..

__tests__

Merge pull request #724 from paulhenry46/userlogout-api-hook

2026-08-01 23:09:39 +02:00

account-security-store.ts

fix: surface server errors on password change and TOTP toggle

2026-06-24 18:02:18 +02:00

account-store.ts

fix: recognize canonicalized login usernames in account-switch guard

2026-07-22 17:37:33 +02:00

admin-tab-store.ts

feat(admin): build the AI Policy console (§6) — approved, spec now implemented

2026-08-06 08:48:30 +02:00

auth-store.ts

feat(electron): real offline mail replica — delta sync, full bodies, retention

2026-08-05 17:40:13 +02:00

calendar-notification-store.ts

feat(calendar): add event notifications with alert evaluation

2026-02-16 23:49:35 +01:00

calendar-store.ts

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:17:41 +02:00

client-registry.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

contact-store.ts

Feature: contact groups as single expandable recipient chips

2026-07-09 17:46:06 +02:00

email-store.ts

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:17:41 +02:00

file-store.ts

fix: files show creation date instead of modification date #700

2026-07-30 19:41:02 +02:00

filter-store.ts

feat: add message-list category tabs

2026-07-22 17:22:20 +02:00

identity-store.ts

fix(identity): sync default sender identity per account (#507)

2026-07-13 21:21:34 +02:00

locale-store.ts

fix: respect server-resolved locale on first visit #309

2026-05-20 23:53:44 +02:00

managed-account-store.ts

feat: manage shared/group account settings from Accounts page

2026-06-14 17:05:29 +02:00

message-list-tabs-store.ts

feat: add message-list category tabs

2026-07-22 17:22:20 +02:00

plugin-store.ts

feat: add privileged same-origin plugin tier + crypto API surface

2026-06-28 16:51:42 +02:00

policy-store.ts

feat: apiFetch helper for mount-prefix-aware API calls

2026-04-14 14:37:19 +02:00

pro-tab-store.ts

fix(pro): prompt to save or discard draft when closing compose tab via tab-bar X

2026-06-30 06:51:24 +02:00

settings-store.ts

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:17:41 +02:00

task-store.ts

fix: Phase 1 critical+high fixes (17/18 items)

2026-08-07 12:17:41 +02:00

template-store.ts

fix: replace unguarded crypto.randomUUID() with safe generateUUID() utility

2026-04-02 14:51:21 +02:00

theme-store.ts

feat(theme): VNClagoon brand theme (navy + cyan) as default, dark-first

2026-08-03 17:42:04 +02:00

toast-store.ts

feat(send): 'Send now' on the send-delay toast

2026-07-21 20:58:27 +02:00

totp-reauth-store.ts

fix: handle 2FA/TOTP session expiry with basic auth #117

2026-03-30 16:37:07 +02:00

ui-store.ts

feat: add Reading Pane at Bottom mail layout #262

2026-05-11 15:35:43 +02:00

update-store.ts

chore: update version to 1.6.2

2026-05-06 20:07:36 +02:00

vacation-store.ts

feat: manage shared/group account settings from Accounts page

2026-06-14 17:05:29 +02:00

webdav-store.ts

feat: add WebDAV file browser with auth improvements

2026-03-15 05:24:27 +01:00