amorfo77/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2026-08-20 05:53:18 +00:00
Code Issues Projects Releases Wiki Activity
7,679 Commits 37 Branches 93 Tags
161f763b6c7cdc045b93700cc7664b4c98d3147d
Commit Graph
353 Commits
Author SHA1 Message Date
FreddleSpl0itandGitHub 161f763b6c Merge branch 'staging' into feat/new-imapsync 2026-08-19 09:01:47 +02:00
FreddleSpl0itandGitHub d80b15b06c Merge pull request #7376 from smpaz7467/fix/extended-sender-acl-authsource 
[Web] show external sender addresses regardless of authsource
 2026-08-18 14:41:20 +02:00
FreddleSpl0itandGitHub 4d5b9d1c80 Merge pull request #7342 from FrauJulian/feat/show-password 
[Web] Add show/hide password toggle on login pages
 2026-08-18 14:25:22 +02:00
FreddleSpl0itandGitHub c665d430de Merge pull request #7344 from smpaz7467/fix/forced-pw-change-raw-lang-key 
[Web] translate password errors in the forced password change modal
 2026-08-18 13:31:35 +02:00
FreddleSpl0it d64c923aca [ACME] Skip mta-sts certificate request when MTA-STS is not active for a domain 2026-07-30 10:33:55 +02:00
Stephen Ritz 9cd16f0001 [Web] show external sender addresses regardless of authsource 
The extended_sender_acl field sat inside the
`{% if not result.authsource or result.authsource == 'mailcow' %}` block
that hides the local password fields for mailboxes authenticating against
an external identity provider. As a result the "External sender addresses"
input was not rendered at all for keycloak / generic-oidc / ldap mailboxes,
even for a full admin, so those addresses could neither be reviewed nor
edited in the UI while the underlying sender_acl rows stayed active.

Extended sender ACLs are unrelated to local password management. Move the
field out of that block; it stays gated by acl.extend_sender_acl as intended.

Fixes #7365
 2026-07-28 07:12:17 -07:00
FreddleSpl0it 7e63061b30 [Imapsync] switch from order_id to prio 2026-07-22 13:08:15 +02:00
FreddleSpl0it 52ca8f95c2 [Imapsync] fix custom params 2026-07-21 17:13:33 +02:00
FreddleSpl0it 6758999cf3 [Imapsync] Remove oauth source hint 2026-07-21 12:20:13 +02:00
FreddleSpl0it 5c5f251d35 [Imapsync] hide user1 input on oauth user login flow 2026-07-21 12:13:38 +02:00
FreddleSpl0it 069b89629e [Imapsync] Use dropdown for custom params 2026-07-17 20:45:46 +02:00
FreddleSpl0it 496c3a51ac [Imapsync] Add parallel imapsync support 2026-07-17 19:31:09 +02:00
FreddleSpl0it 06a2a14c55 [Imapsync] Add oauth support 2026-07-17 16:04:42 +02:00
Stephen RitzandClaude Opus 4.8 4cba448671 [Web] translate password errors in the forced password change modal 
The forced password change modal posts to the JSON API and renders
data[0].msg directly. The API returns raw language keys rather than
translated strings, so a user who fails the complexity policy is shown
the literal text "password_complexity" instead of a message.

Every other password form renders errors through alertbox_log_parser(),
which resolves the key against $lang. The modal is the only one that
talks to the API directly, and it never resolved the key.

Resolve it against lang_danger, which base.twig already exposes for this
purpose. This also covers password_mismatch, password_empty and
access_denied, and applies to the admin path as well. Unknown keys still
fall through unchanged.

The lookup is guarded with hasOwnProperty because msg is attacker-
independent but dynamic: a bare lang_danger[msg] would resolve inherited
Object.prototype members such as "constructor" to a function, which
jQuery's .text() would then invoke as a callback.

Language files are untouched: prerequisites.inc.php loads lang.en-gb.json
as the base and merges the active locale over it, so locales that lack the
key inherit the English string.

Fixes #7301

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-14 15:11:17 -07:00
Paul SeebachandJulian Lechner 5408bc809d [Web] Use input-group-text for password toggle button 
Replaces btn-outline-secondary with input-group-text so the toggle
button border matches the surrounding input group consistently.
 2026-07-14 21:20:58 +02:00
Paul SeebachandJulian Lechner bd5c18b145 [Web] Add show/hide password toggle on login pages 
Adds an eye icon button to the password field on the user, admin, and
domain admin login pages. Clicking it toggles between hidden and visible
password text, using Bootstrap Icons (bi-eye / bi-eye-slash).

Closes #6893
 2026-07-14 21:20:58 +02:00
Snafu 0fafda696b Fix force_tfa not available in mailbox template #7216 2026-06-07 17:03:52 +02:00
FreddleSpl0it 33547d1d73 [Web] escape HTML in sieve filter edit view and queue manager 2026-05-12 08:31:51 +02:00
FreddleSpl0it 8c039f694f Improve template URI escaping and parameter handling 2026-03-19 12:48:43 +01:00
rezzorix 293b885a85 Fix theme localStorage collision with rspamd UI 2026-03-11 13:32:53 +08:00
FreddleSpl0it d40252ccce [Web] Add missing EAS and DAV protocol options to mailbox bulk actions 2026-03-03 14:39:41 +01:00
FreddleSpl0it ad5b94af5e [Web] Add forced 2FA setup and password update enforcement 2026-02-24 10:44:33 +01:00
FreddleSpl0itandGitHub c1d4f04c22 Merge branch 'staging' into feat/restrict-alias-sending 2026-01-28 10:02:03 +01:00
FreddleSpl0it 56ea4302ed [Web] Allow admins to limit EAS and DAV access for mailbox users 2026-01-28 09:49:33 +01:00
FreddleSpl0it c06112b26e [Postfix] Configurable send permissions for alias addresses 2026-01-27 09:05:51 +01:00
CopilotGitHubDerLinkmancopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
 		3ebf2c2d2d Prevent duplicate/plaintext login announcement rendering (#6963) 
* Initial plan

* Fix duplicate login announcement display

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>
 2025-12-12 12:34:20 +01:00
JoshGitHubDerLinkman
 		0413d26855 Allow making spam aliases permanent (#6888) 
* Allow making spam aliases permanent

* added german translation

* updated Spamalias Twig + Rename in Spam Alias

* compose: update image tags to align to vendor version

---------

Co-authored-by: DerLinkman <niklas.meyer@servercow.de>
 2025-11-13 16:05:01 +01:00
FreddleSpl0it b85837c803 [Web] Add password verification when setting recovery email 2025-10-13 12:05:17 +02:00
FreddleSpl0itandGitHub 4c83147d01 Merge pull request #6781 from patschi/pw-field-name-consistency 
Rename password fields for AppPasswords same way for consistency
 2025-09-29 11:52:08 +02:00
FreddleSpl0itandGitHub 4a331929d0 Merge pull request #6787 from patschi/hide-relayhosts-if-no-acl 
Hide relayhosts when ACL does not allow
 2025-09-29 11:38:52 +02:00
FreddleSpl0itandGitHub 748bc893b6 Merge pull request #6788 from patschi/lastmodified-default-value 
Show "Never" by default if no last-modified date saved
 2025-09-29 11:37:52 +02:00
Patrik Kernstock 20f04ecf6b Make domain description field readonly when no ACL 2025-09-26 17:13:24 +02:00
Patrik Kernstock ff43799763 Show "Never" by default if no last-modified date 2025-09-26 17:02:22 +02:00
Patrik Kernstock 85ca197615 Hide relayhosts when ACL does not allow 2025-09-26 16:50:58 +02:00
Patrik Kernstock ce219668cf Rename AppPasswds fields uniquely like 'add' 2025-09-26 03:37:49 +02:00
FreddleSpl0it 1e192e14f4 [Web] Only include mailcow_info in JS when mailcow_cc_username is set 2025-09-09 11:09:09 +02:00
FreddleSpl0it f67c0530f5 [Rspamd][Web] Internal alias support 2025-09-09 10:37:54 +02:00
DerLinkmanandGitHub 0b0a65a3f3 web: rename login placeholder for mailbox to email address (#6693) 2025-08-28 17:02:16 +02:00
DerLinkmanGitHubFreddleSpl0it
 		c39712af67 pf/php: add mta-sts support (outbound) (#6686) 
* added mta-sts-resolver into postfix config + daemon

* [Web] Add MTA-STS support

* [Web] Fix mta-sts server_name

* updated .gitignore

* [ACME] fetch cert for mta-sts subdomain

* [Web] change MTA-STS id to human-readable timestamp

* [Web] Remove MTA-STS version STSv2

* [Web] Fix MTA-STS DNS check

* [Web] add max_age limit for MTA-STS policy

* Added tooltips and info texts to mta-sts webui page

* postfix: replace mta-sts-resolver with postfix-tlspol

---------

Co-authored-by: FreddleSpl0it <75116288+FreddleSpl0it@users.noreply.github.com>
 2025-08-26 09:57:05 +02:00
FreddleSpl0itandGitHub 1e42b8dd21 [Web] Add delimiter_action to mailbox and mailbox_template add/edit admin forms (#6620) 2025-08-06 09:40:47 +02:00
Denis EversGitHubDenis EversDerLinkman
 		95eb350f15 [netfilter] fix negative timer, no unbanning of IPs (#6575) 
* [netfilter] added debug logs and updated autopurge

* updated "Allow/Blacklist" terms

* netfilter: bumped compose version

* netfilter: changed black/whitelist terms in code

---------

Co-authored-by: Denis Evers <git@evers.sh>
Co-authored-by: DerLinkman <niklas.meyer@servercow.de>
 2025-07-16 10:08:55 +02:00
FreddleSpl0it 1b2f424edc [Web] Add identity_provider option to disable auto-creation of users on login 2025-05-12 12:20:23 +02:00
FreddleSpl0it ea0944d743 [Web] Add quick links to other login pages and option to disable mailcow login form 2025-05-09 15:13:44 +02:00
FreddleSpl0itandGitHub e7a1f24c78 Merge pull request #6483 from PseudoResonance/oauth2-redirect-extra-domain 
Allow additional domains in OAuth2 redirect URLs
 2025-05-09 09:48:08 +02:00
FreddleSpl0itandGitHub 0c8e7bfeca Merge pull request #6376 from NickBouwhuis/staging 
feat/replace bgp.he.net with bgp.tools
 2025-05-08 14:31:57 +02:00
PseudoResonance 692355a08a Allow additional domains in OAuth2 redirect URLs 2025-04-12 06:24:37 -07:00
FreddleSpl0it 402bf53a5c [Web] Improve clarity of LDAP SSL/TLS settings 2025-04-04 13:18:42 +02:00
FreddleSpl0it 805634f9a9 Fix sasl_logs 2025-04-03 10:19:30 +02:00
FreddleSpl0it cf2d3c1b4e Merge branch 'staging' into nightly 2025-03-24 11:38:59 +01:00
FreddleSpl0itandGitHub ba7437a8f3 Merge pull request #6380 from mailcow/feat/legacy-switch 
Add Legacy Updates
 2025-03-20 14:25:13 +01:00