7x31/mailcow-dockerized
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
6,018 Commits 18 Branches 41 Tags
6824a5650f265d0e5b347064654ebe33b1895fa8
Commit Graph

911 Commits

Author SHA1 Message Date
Niklas Meyer
355ea71877 Merge pull request #4428 from FreddleSpl0it/master 
Migrating from U2F to WebAuthn for 2FA
 2022-01-21 12:19:25 +01:00
FreddleSpl0it
af1b90fa18 [WebAuthn] rename env var 2022-01-20 14:37:20 +01:00
FreddleSpl0it
7df2bb28f8 [WebAuthn] disable rootCA default 2022-01-19 21:35:21 +01:00
FreddleSpl0it
0f464658cc [WebAuthn] disable webauthn rootca by mailcow.conf 2022-01-19 19:10:43 +01:00
FreddleSpl0it
5712192bcb [WebAuthn] fix error on android 2022-01-18 11:40:06 +01:00
FreddleSpl0it
0e4ddacf92 [WebAuthn] cleanup 2022-01-18 10:23:32 +01:00
FreddleSpl0it
8316e763fa [WebAuthn] remove old u2f functions 2022-01-18 10:14:18 +01:00
FreddleSpl0it
a849d03a00 [WebAuthn] show user deprecated warning 2022-01-18 10:14:18 +01:00
FreddlePat
68abd6a535 migrating from u2f-api.js to webauthn 2022-01-12 21:57:21 +01:00
FreddlePat
be4af41e64 migrating from u2f-api.js to webauthn 2022-01-12 21:26:42 +01:00
FreddlePat
d1d134038f migrating from u2f-api.js to webauthn 2022-01-12 21:09:18 +01:00
El-Virus
ea1a02bd7d Fix "The operation is insecure." when trying to register fido2 device. 
navigator.credentials.create(); Doesn't accept a port in the "id" parameter. So, when trying to register a fido2 device via WebAuthn throws: "The operation is insecure." on firefox and "The relying party ID is not a registrable domain suffix of, nor equal to the current domain." on Chrome or Edge.
This commit replaces `$_SERVER['HTTP_HOST']` with `$_SERVER['SERVER_NAME']` when initializing `$WebAuthn` which excludes the port to formulate correct requests.
Now Mailcow allows the registration of fido2 devices when running in a non-standard port(eg. 443).
 2021-12-26 17:11:06 +01:00
andryyy
e4d23b7887 [Web] Add default sieve accessq 2021-12-07 13:56:56 +01:00
Kristian Feldsam
08f8eeb2e6 [web] fixed html in alerts 
Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-11-28 22:49:18 +01:00
André Peters
f4319a0e20 Revert "Add app-passwd list (#4281) (#4311)" (#4318) 
This reverts commit 8dad04e0e6.
 2021-11-11 13:48:47 +01:00
Felix
8dad04e0e6 Add app-passwd list (#4281) (#4311) 
* Add list option for app passwords

* Add app-passwd option to OpenAPI documentation
 2021-11-11 13:45:04 +01:00
andryyy
116c7919e3 [Web] Add missing sieve permission 2021-10-31 08:46:54 +01:00
jkellerer
9946bb3427 [Web] Display app password name in last login (#4304) 2021-10-30 16:51:26 +02:00
andryyy
f0aae22f77 [Dovecot, Web] Fix remaining issues of app password enhancements from #4296 2021-10-30 14:34:33 +02:00
andryyy
644b1f85d1 [Dovecot, Web] Allow SOGo access with app password when imap is disabled; Add sieve to mailbox protocol access restrictions 2021-10-30 08:03:41 +02:00
andryyy
51c8d43223 [Web] Fix array 2021-10-29 07:33:44 +02:00
andryyy
15ce95e78d [Web, Dovecot] Add sieve and pop3 to protocol access for app passwords 2021-10-29 06:15:10 +02:00
andryyy
514340b2a7 [Web] Minor fix 2021-10-28 22:05:28 +02:00
andryyy
e13bc242a4 [Web, Dovecot] Allow to define scope of services for app passwords 2021-10-28 21:57:19 +02:00
andryyy
f01de1a5c0 [Web] Disable SSO button when admin login is disabled, fixes #4297 2021-10-27 13:42:45 +02:00
Jürgen Kellerer
d38c371253 Removed toggle ALLOW_APP_PASSWORDS_IN_EAS 2021-10-27 09:39:34 +02:00
Jürgen Kellerer
2ac5294d55 Supporting app-passwds in cal/carddav & ActiveSync 2021-10-24 17:29:35 +02:00
andryyy
8769a91388 [Web] Allow multiple TOTP 2021-10-23 17:14:43 +02:00
Kristian Feldsam
974100400b [Web] fixed totp var in twig 
Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-10-21 09:06:13 +02:00
Kristian Feldsam
a7612e6c39 [web] alerts - fixed double quotes and escaped html 
Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-10-16 15:24:27 +02:00
Kristian Feldsam
40b5ed4d72 [web] fix annoucements and notifications close #4292 
Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-10-15 17:21:47 +02:00
andryyy
3c9b84ff6f [Compose] Update PHP and netfilter images 2021-10-15 13:06:48 +02:00
Kristian Feldsam
0b64967ec5 [web] implemented twig templating system (#4264) 
Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-09-22 20:47:10 +02:00
andryyy
4d5ebafc1a [Web] Fix password issue on first login when adding new admin 2021-09-06 11:46:09 +02:00
Kristian Feldsam
0d53df3a4d [Web] PHP8 fix, fixes #4259 (#4261) 
Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-09-02 19:30:14 +02:00
andryyy
e616755072 [Web] Fix app password editing, fixes #4239 2021-09-01 18:11:00 +02:00
Kristian Feldsam
c1dcb529f3 [Web] Add DKIM key when adding a domain or alias domain (#4254) 
Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-09-01 16:51:10 +02:00
Kristian Feldsam
54c4d7e49c [Dovecot: Imapsync] Parse, save and show last run status (#4253) 
* [imapsync] - check for errors in returned_text

Signed-off-by: Kristian Feldsam <feldsam@gmail.com>

* [imapsync] parse and save exit status

Signed-off-by: Kristian Feldsam <feldsam@gmail.com>

* [dovecot] updated image version

Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-09-01 16:29:11 +02:00
Kristian Feldsam
e3b58c6b80 [Web] Fido2 support for M1 Macs with Touch ID (#4255) 
Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-09-01 16:28:37 +02:00
andryyy
50c90badb0 [Web] Cast all DNS check results to arrays 2021-08-21 15:47:17 +02:00
andryyy
913e9cbb11 [Web] Fix transport validation 2021-08-17 22:07:06 +02:00
andryyy
d6eb21f7a6 [Web] Fix some empty responses in alert box 2021-08-15 20:19:28 +02:00
andryyy
2dfcfd16d0 [Web] Fix DKIM import 2021-08-14 07:31:52 +02:00
andryyy
c925951bca [Web] Fix wrong autoconfig port 2021-08-10 09:06:42 +02:00
André Peters
639e751678 Revert "[Web] Fix broken autoconfig ports, fixes #4221 (#4223)" (#4226) 
This reverts commit 9afea99189.
 2021-08-10 09:05:01 +02:00
Kristian Feldsam
9afea99189 [Web] Fix broken autoconfig ports, fixes #4221 (#4223) 
Refactored to use function, moved another function

Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-08-10 02:08:04 +02:00
andryyy
c13c521699 [Web] Fix broken autoconfig ports, fixes #4221 2021-08-09 21:35:19 +02:00
andryyy
2cd0b56b14 [Web] Various PHP 8 fixes, partly fixes #4219 2021-08-09 08:28:22 +02:00
andryyy
cf8fdae277 [Web] Some minor fixes and improvements for PHP 8 2021-08-08 16:06:55 +02:00
Kristian Feldsam
96e055e226 [Web] Customized apps name in header (#4201) 
Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-08-01 18:00:14 +02:00