11 Commits

Author	SHA1	Message	Date
Joshua Tauberer	e9e6d94e3b	the control panel auth hmac message should also include the user's password so that resetting a password in the database forces that user to log in to the control panel again; also use a sha256 hmac	2015-06-06 12:38:19 +00:00
Joshua Tauberer	c03e00035f	prevent archiving of the user's own account because they'll lose access to the control panel	2015-04-28 07:17:21 -04:00
Joshua Tauberer	35f4a49d10	my html5 stub was wrong; 8c3aed2846	2015-04-19 13:21:38 +00:00
Joshua Tauberer	680191d7cb	drop the list of aliases from the users control panel page because with more than 50 aliases it seems to be so slow it times out ... see https://discourse.mailinabox.email/t/small-bug-in-admin-panel-when-49-aliases/378	2015-03-22 13:59:05 +00:00
Joshua Tauberer	1bf8f1991f	internationalized domain names (DNS, web, CSRs, normalize to Unicode in database, prohibit non-ASCII characters in user account names) ... * For non-ASCII domain names, we will keep the Unicode encoding in our users/aliases table. This is nice for the user and also simplifies things like sorting domain names (using Unicode lexicographic order is good, using ASCII lexicogrpahic order on IDNA is confusing). * Write nsd config, nsd zone files, nginx config, and SSL CSRs with domains in IDNA-encoded ASCII. * When checking SSL certificates, treat the CN and SANs as IDNA. * Since Chrome has an interesting feature of converting Unicode to IDNA in <input type="email"> form fields, we'll also forcibly convert IDNA to Unicode in the domain part of email addresses before saving email addresses in the users/aliases tables so that the table is normalized to Unicode. * Don't allow non-ASCII characters in user account email addresses. Dovecot gets confused when querying the Sqlite database (which we observed even for non-word ASCII characters too, so it may not be related to the character encoding).	2015-01-19 23:31:55 +00:00
Joshua Tauberer	06a8ce1c9d	in the admin, show user mailbox sizes, fixes #210	2014-10-07 20:24:11 +00:00
Joshua Tauberer	990649af2d	in the admin, group users by domain, fixes 209	2014-10-07 19:47:43 +00:00
Joshua Tauberer	846768efcb	admin: update user's password from the admin	2014-09-21 17:24:01 +00:00
Joshua Tauberer	8dfbb90f3a	admin: simplify the users table a bit	2014-09-21 17:10:23 +00:00
Joshua Tauberer	b420e560c3	dont show 'make admin' on archived mailbox accounts and other control panel cleanup	2014-09-03 10:17:46 +00:00
Joshua Tauberer	b30d7ad80a	web-based administrative UI ... closes #19	2014-08-17 22:46:06 +00:00