Florent Daigniere
28c28b1c84
INBOUND_TLS_ENFORCE makes no sense.
2024-09-06 09:40:26 +02:00
Florent Daigniere
5ea3840fc4
doh
2024-09-05 23:22:55 +02:00
Florent Daigniere
b426c67949
doh
2024-09-05 22:37:30 +02:00
Florent Daigniere
e5790a297a
fix #3403
2024-09-05 22:33:23 +02:00
Florent Daigniere
5cfec650df
s/nginx/front
2024-08-09 15:55:33 +02:00
Florent Daigniere
78c5d34227
as per review
2024-08-09 15:29:51 +02:00
Florent Daigniere
148c8f9ede
Remove this insanity since we don't use nginx
2024-08-08 10:24:43 +02:00
Florent Daigniere
eb110c8431
master uses SSO
2023-10-28 14:02:06 +02:00
Florent Daigniere
2494a344a7
Ammend wording as suggested
2023-10-27 15:14:51 +02:00
Florent Daigniere
435508be1e
Introduce AUTH_REQUIRE_TOKENS
2023-10-27 13:39:36 +02:00
Florent Daigniere
9b7bb3b7f5
doh
2023-08-07 11:15:53 +02:00
Florent Daigniere
1413001705
take care of sieve too
2023-08-07 09:06:02 +02:00
Florent Daigniere
40b5e7ca39
Avoid a stack-trace when the ratelimit is hit
2023-08-05 18:24:11 +02:00
bors[bot]
69229436cf
Merge #2866
...
2866: Improve tokens (add ipranges) r=nextgens a=nextgens
## What type of PR?
enhancement
## What does this PR do?
Allow multiple IP addresses/networks to be set for tokens.
### Related issue(s)
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.
- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog ) entry file.
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org >
2023-06-26 10:02:58 +00:00
Florent Daigniere
372f008eab
bugfix for dovecot-proxy
2023-06-23 16:01:24 +02:00
Florent Daigniere
fbc2f47003
bugfix for dovecot-proxy
2023-06-23 15:57:37 +02:00
Florent Daigniere
29cd857c5f
Allow multiple IP addresses/networks to be set for tokens
2023-06-23 15:56:41 +02:00
Florent Daigniere
f143aa3dc8
Use dovecot-proxy where appropriate
2023-06-05 10:23:30 +02:00
Florent Daigniere
50f8a5cb65
Ensure we log which account is invalid
2023-06-02 11:39:42 +02:00
Dimitri Huisman
10a3d1eabb
Get the password from the source.
...
Remove password from response (not needed)
2023-05-30 15:06:32 +00:00
Dimitri Huisman
008cbdb6b1
Also url encode the password when authentication fails
2023-05-30 14:31:29 +00:00
Dimitri Huisman
5f94be871c
Authentication failed for email clients when the password contained a non latin-1 character.
2023-05-30 14:09:16 +00:00
bors[bot]
589c426601
Merge #2818
...
2818: Improve auth-related logging r=mergify[bot] a=nextgens
## What type of PR?
enhancement
## What does this PR do?
Improve auth-related logging
### Related issue(s)
- closes #2803
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.
- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog ) entry file.
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org >
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com >
2023-05-30 09:01:42 +00:00
Florent Daigniere
c68f4d93cf
Merge remote-tracking branch 'origin/improve-logs' into improve-logs
2023-05-13 11:59:22 +02:00
Florent Daigniere
1ffb78103f
quote the comments
2023-05-13 11:55:54 +02:00
Florent Daigniere
1042911732
Update nginx.py
...
Fix typo
2023-05-12 21:14:39 +02:00
Florent Daigniere
e88199e274
Update nginx.py
...
Doh
2023-05-12 20:27:29 +02:00
Florent Daigniere
c60e2fa52c
add token.comment too
2023-05-12 19:41:32 +02:00
Florent Daigniere
c44537d318
Need this too
2023-05-09 12:17:16 +02:00
Florent Daigniere
6ee913502e
Improve auth-related logging
2023-05-06 17:37:16 +02:00
Florent Daigniere
86ff5f7b71
Merge remote-tracking branch 'upstream/master' into managesieve-proxy
2023-04-20 18:53:17 +02:00
Florent Daigniere
107b0ab5ff
Implement managesieve support
2023-04-20 15:36:17 +02:00
Florent Daigniere
c363378005
Always exempt app-tokens from rate limits
2023-04-14 12:51:43 +02:00
Florent Daigniere
04a2cdab2f
Only account for distinct attempts in rate limits
2023-04-01 11:33:02 +02:00
Florent Daigniere
4e3874b0c1
Enable dynamic resolution of hostnames
2022-12-08 13:00:50 +01:00
Florent Daigniere
00f07ef533
close #2451 : prevent an auth-loop on webmails
2022-11-29 13:29:03 +01:00
Alexander Graf
91f86a4c2a
Resolve using socrate function
2022-10-31 23:58:52 +01:00
Vincent Kling
23d06a5761
Fix a bunch of typos
2022-10-19 19:41:49 +02:00
Alexander Graf
64ad6931e9
Move 'is_valid_user = user is not None' into else
2022-03-18 20:08:16 +01:00
Florent Daigniere
d723326b8e
style
2022-03-07 09:04:40 +01:00
Florent Daigniere
f01d8cd9b9
improve
2022-03-05 18:41:06 +01:00
Florent Daigniere
7b9c4e01f7
improve
2022-03-05 18:36:27 +01:00
Florent Daigniere
8cf76afbab
Catch the ValueError instead
2022-03-05 18:01:30 +01:00
Florent Daigniere
fe18cf9743
Fix 2080
...
Ensure that webmail tokens are in sync with sessions
2021-12-19 23:24:44 +01:00
Dimitri Huisman
d76773b1df
Also check the SMTP port for webmail/token
2021-12-14 14:52:15 +00:00
Dimitri Huisman
f26fa8da84
Fix Webmail token check. Fix Auth-Port for Webmail. #2079
2021-12-14 11:26:33 +00:00
Florent Daigniere
f3c93212c6
The Rate-limiter should run after the deny
2021-10-31 19:41:12 +01:00
Florent Daigniere
c674f1567a
Merge branch 'ratelimits' of https://github.com/nextgens/Mailu into ratelimits
2021-10-16 09:55:15 +02:00
Florent Daigniere
8414dd5cf0
Merge remote-tracking branch 'upstream/master' into ratelimits
2021-10-16 09:52:20 +02:00
Florent Daigniere
e14d2e7c03
Error out explictely if Auth-Port isn't set
2021-10-16 09:49:01 +02:00
