Joshua Tauberer e884c4774f Replace HMAC-based session API keys with tokens stored in memory in the daemon process ...

Since the session cache clears keys after a period of time, this fixes #1821.

Based on https://github.com/mail-in-a-box/mailinabox/pull/2012, and so:

Co-Authored-By: NewbieOrange <NewbieOrange@users.noreply.github.com>

Also fixes #2029 by not revealing through the login failure error message whether a user exists or not.

2021-09-06 09:23:58 -04:00

..

bootstrap.sh

v0.54

2021-06-20 15:50:04 -04:00

dkim.sh

Enable sending DMARC failure reports (#1929)

2021-02-28 08:21:15 -05:00

dns.sh

Use $(...) notation instead of legacy backtick notation for embedded shell commands

2021-05-03 19:28:23 -04:00

firstuser.sh

Use $(...) notation instead of legacy backtick notation for embedded shell commands

2021-05-03 19:28:23 -04:00

functions.sh

Fix warnings reported by shellcheck

2021-05-03 19:25:09 -04:00

mail-dovecot.sh

Rewrite envelope from address in sieve forwards (#1949)

2021-05-08 08:30:53 -04:00

mail-postfix.sh

Enable and recommend port 465 for mail submission instead of port 587 (fixes #1849)

2021-05-15 16:42:14 -04:00

mail-users.sh

Remove unique key constraint on foreign key user_id in mfa table

2020-09-29 19:39:40 +02:00

management.sh

Replace HMAC-based session API keys with tokens stored in memory in the daemon process

2021-09-06 09:23:58 -04:00

migrate.py

Remove unique key constraint on foreign key user_id in mfa table

2020-09-29 19:39:40 +02:00

munin.sh

Fix upgrade issue broken by 802e7a1f4d

2019-12-01 17:44:12 -05:00

network-checks.sh

prevent apt from asking the user any questions

2015-02-13 13:41:52 +00:00

nextcloud.sh

Fix exit status issue cased by 69fc2fdd

2021-05-08 09:02:48 -04:00

preflight.sh

Use $(...) notation instead of legacy backtick notation for embedded shell commands

2021-05-03 19:28:23 -04:00

questions.sh

Fix some more $DEFAULT_PUBLIC_IP issues (#1494)

2018-12-26 15:39:47 -05:00

spamassassin.sh

Implement SPF/DMARC checks, add spam weight to those mails (#1836)

2020-12-25 17:22:24 -05:00

ssl.sh

Enable and recommend port 465 for mail submission instead of port 587 (fixes #1849)

2021-05-15 16:42:14 -04:00

start.sh

Fix to allow for non forced "enforce" MTA_STS_MODE (#1970)

2021-05-08 08:18:49 -04:00

system.sh

Enable Backblaze B2 backups

2021-02-28 08:04:14 -05:00

web.sh

Fix to allow for non forced "enforce" MTA_STS_MODE (#1970)

2021-05-08 08:18:49 -04:00

webmail.sh

Roundcube 1.5 RC

2021-09-06 09:23:58 -04:00

zpush.sh

Merged point release branch for v0.53a

2021-05-08 08:14:39 -04:00