Commit graph

911 commits

Author SHA1 Message Date
Andris Reinman 8db04520d6
Fixed acme cert upgrade 2022-11-16 11:38:56 +02:00
Andris Reinman 15fe3c28dc
Added new option 'bimi' for message uploads 2022-11-03 13:50:17 +02:00
Andris Reinman 0d327c1315
Added preauth API endpoint 2022-10-07 10:13:05 +03:00
Andris Reinman 4437a60a3b
Added account export and import API endpoints 2022-10-06 13:57:06 +03:00
Andris Reinman e213df2255
started with import stream parser 2022-09-20 15:49:14 +03:00
Andris Reinman c1acc970d1
started with export/import feature 2022-09-20 15:35:10 +03:00
Andris Reinman ef6fb48b3f
v1.37.5 2022-09-20 11:25:44 +03:00
Andris Reinman 3b138ef4b1
Include BIMI info in message listing 2022-08-31 12:30:13 +03:00
Andris Reinman d3efe41bfb
Mark sent messages as seen 2022-08-24 12:07:14 +03:00
Andris Reinman 4dfee77bf3
Log message restore info to Gelf 2022-08-23 10:04:26 +03:00
Andris Reinman 9c61d147df
Skip BIMI SVG errors if VMC validation succeeded 2022-08-17 22:13:02 +03:00
Andris Reinman 3f738389ba
Fixed CA handling for SNI certificates 2022-08-16 15:22:47 +03:00
jissepo 357b39c880
Remove credential transport type from authenticationOptions allowed credentials list
This is marked as SHOULD in the spec, but it causes chrome 103 to not display "android phone" as a suitable option for authentication even if it is added and the hybrid transportation type is added to the allowed list.
2022-08-15 13:43:45 +03:00
Andris Reinman a8348e893a
Added message size value to the response of message upload request 2022-08-09 11:11:06 +03:00
Andris Reinman 957359c528
Allow to limit the count of filters per account 2022-07-28 11:54:26 +03:00
Andris Reinman a2b2053222
v1.37.3 2022-07-19 13:26:42 +03:00
Andris Reinman 35d7dff0da
v1.37.2 2022-07-19 09:22:46 +03:00
Andris Reinman 7cc5b2b75c
v1.37.1 2022-07-18 23:06:41 +03:00
Andris Reinman f7d9c75cfb
Use buffers for BIMI docs 2022-07-18 23:03:56 +03:00
Andris Reinman 14d2351123
v1.37.0 2022-07-18 20:24:04 +03:00
Andris Reinman 70afcd44c8
Allow range from UID to end for message updates 2022-07-08 12:23:36 +03:00
Andris Reinman 6a5e6f7793
Removed extra $pull 2022-07-07 13:01:10 +03:00
Andris Reinman 04ba496dc7
bunch of fixes 2022-07-05 11:57:57 +03:00
Andris Reinman f8af999040
allow to configure ASP limit dynamically 2022-07-04 17:18:07 +03:00
Andris Reinman d7cbfccb79
Set a maximum limit for application passwords (50) 2022-07-04 16:52:08 +03:00
Andris Reinman 032c468e8a
prefer user email as the username for plugins 2022-06-27 11:49:07 +03:00
Andris Reinman 28cf0e9ff1
Include user id and origin IP as part of the envelope value provided to plugins 2022-06-21 11:12:59 +03:00
Andris Reinman 73e01827cb
Added partial support for running Zone-mta plugins for message queueing 2022-06-21 10:30:26 +03:00
Andris Reinman 5da63a290d
Allow to specify relaying party ID for Webauthn requests 2022-06-07 12:08:41 +03:00
Andris Reinman 4c542be9c0
Force rehashing of DES hashes 2022-05-24 17:09:24 +03:00
Andris Reinman 7ef45b2307
Added support for DES password hashes 2022-05-24 17:01:45 +03:00
jissepo cf401233cb
Webauthn registration now only excludes same type credentials
This fixes what seems to be a Mac fingerprint reader specific error, where if you have a cross platform authenticator registered, and then try to register a platform authenticator the credentials.create() function always end-s up timing out. 
But returning only the same type of credentials fixes this.
2022-05-24 13:13:29 +03:00
jissepo fda7f199ad
Added rpId to webauthnAssertAuthentication expectations
This allows for authentication from subdomains. Fido2Lib.assertionResult compares the rpIdHash returned by the users browser, and since the key is created on the main domain it can't use the passed in origin for the hash comparison. 

The related Fido2Lib line: a5003fa5bf/lib/validator.js (L437)
2022-05-24 11:43:19 +03:00
Andris Reinman 46961586c5
Changed permissions for deleteing webauthn token 2022-05-18 09:17:04 +03:00
Andris Reinman ee56f13859
fix updated interval 2022-05-16 12:11:41 +03:00
Andris Reinman ec3ec86846
Allow batch updating messages based on search query 2022-05-16 12:08:06 +03:00
Andris Reinman f47ac59f4b
use html parser when preprocessing HTML for message submit structures 2022-05-16 09:32:01 +03:00
Andris Reinman 6045004dc5
Backported API tests from the Hapi branch 2022-05-16 00:18:24 +03:00
Andris Reinman f00730a16e
allow subjects up to 2048b 2022-03-29 15:36:07 +03:00
Andris Reinman f7d0c1e80d
include session id in error log messages 2022-03-10 12:08:23 +02:00
Andris Reinman c1c08039a1
removed extra console.log 2022-03-07 10:48:17 +02:00
Andris Reinman f3517370e7
Only list specific type of keys when authenticating 2022-03-07 10:32:28 +02:00
Andris Reinman 5be8f6eb7c
Updated defaults for webauthn 2022-03-07 09:58:22 +02:00
Andris Reinman 778dfac7ed
removed u2f, added webauthn 2022-03-06 00:08:48 +02:00
Andris Reinman ea2d15c9b9
log session id for POP3 2022-01-12 13:50:17 +02:00
Andris Reinman e6bd2f1cf8
Allow to automatically delete previous draftby reference 2021-11-15 14:22:00 +02:00
Justin8303 e85a7703f2 Fixed bug where unencrypted ssl certs are not working probably 2021-11-13 15:38:44 +01:00
Andris Reinman be50d27467
do not count stats only for a single page 2021-11-02 15:55:29 +02:00
Andris Reinman bb59b538e6
Increased cursor page size 2021-10-12 19:36:51 +03:00
Andris Reinman 6b555c050f
pass loggelf for certificate handler 2021-10-08 17:30:15 +03:00