DerLinkman ee15721550 feat: implement passwordless autodiscover endpoint ...

- Remove HTTP Basic Authentication requirement from autodiscover.php
- Extract email address from XML request body instead of AUTH headers
- Validate mailbox existence and active status before returning config
- Improve security by eliminating password transmission
- Add comprehensive error handling for invalid/inactive mailboxes
- Follow industry standards (Microsoft, Google, Apple)
- Maintain backward compatibility with existing email clients
- Keep full logging functionality in Redis AUTODISCOVER_LOG

This change enhances security while improving user experience and
follows modern email client configuration best practices.

2025-12-17 13:39:05 +01:00

..

admin

[Web] Add quick links to other login pages and option to disable mailcow login form

2025-05-09 15:13:44 +02:00

api

Allow additional domains in OAuth2 redirect URLs

2025-04-12 06:24:37 -07:00

css

[Web] Use absolute paths for flag SVGs

2025-03-26 10:59:56 +01:00

domainadmin

[Web] Add quick links to other login pages and option to disable mailcow login form

2025-05-09 15:13:44 +02:00

fonts

[Web] remove remote Google fonts from lumen theme

2023-01-06 09:11:51 +01:00

img

[BS5] add light and dark rspamd logo

2022-07-08 11:27:34 +02:00

inc

Add MTA-STS support for alias domains (#6972)

2025-12-15 16:29:21 +01:00

js

ui: fix global filters ui tickbox reappearing (#6966)

2025-12-12 16:01:18 +01:00

lang

Translations update from Weblate (#6965)

2025-12-12 15:21:04 +01:00

oauth

[Web] oauth authorize - added missing twig templating

2021-10-22 14:37:26 +02:00

templates

Prevent duplicate/plaintext login announcement rendering (#6963)

2025-12-12 12:34:20 +01:00

_rspamderror.php

Enable password protection for Redis

2024-11-19 14:25:31 +01:00

_status.502.html

mailcow.github.io -> docs.mailcow.email

2023-09-27 18:34:53 +02:00

autoconfig.php

Update legacy admin dashboard links

2025-04-13 16:09:47 +03:00

autodiscover-json.php

[Web] Fix potential XSS in autodiscover-json.php

2021-09-07 18:58:05 +02:00

autodiscover.php

feat: implement passwordless autodiscover endpoint

2025-12-17 13:39:05 +01:00

edit.php

pf/php: add mta-sts support (outbound) (#6686)

2025-08-26 09:57:05 +02:00

f2b-banlist.php

[Web] remove f2b banlist from json_api.php

2024-11-19 14:13:37 +01:00

favicon.png

fixed favicon.png (#6570)

2025-08-06 09:42:43 +02:00

index.php

[Web] Fix SOGo redirection after login

2025-10-10 10:05:56 +02:00

json_api.php

fix(api): add missing break in CORS switch block causing save to hang (#6926)

2025-12-09 11:54:20 +01:00

mobileconfig.php

[Web] Updated lang.ro.json (#4396)

2021-12-22 19:34:50 +01:00

mta-sts.php

Add MTA-STS support for alias domains (#6972)

2025-12-15 16:29:21 +01:00

qhandler.php

[Web] qhandler - added missing twig templating

2021-10-22 08:52:05 +02:00

quarantine.php

[BS5] Replace FooTable with jquery Datatables

2022-05-19 15:06:18 +02:00

reset-password.php

[Web] Fix password reset

2025-04-01 16:39:15 +02:00

resource.php

[Web] Fix resource.php and /cache/ warning message

2022-03-20 22:05:28 +01:00

robots.txt

mailcow dockerized

2016-12-09 20:39:02 +01:00

sogo-auth.php

[SOGo][Web] Enable SOGo URL Encryption

2025-09-22 12:28:09 +02:00

user.php

[Web] Separate Login pages

2025-01-27 15:59:50 +01:00