Florent Daigniere
4e3874b0c1
Enable dynamic resolution of hostnames
2022-12-08 13:00:50 +01:00
Florent Daigniere
00f07ef533
close #2451 : prevent an auth-loop on webmails
2022-11-29 13:29:03 +01:00
Alexander Graf
91f86a4c2a
Resolve using socrate function
2022-10-31 23:58:52 +01:00
Vincent Kling
23d06a5761
Fix a bunch of typos
2022-10-19 19:41:49 +02:00
Alexander Graf
64ad6931e9
Move 'is_valid_user = user is not None' into else
2022-03-18 20:08:16 +01:00
Florent Daigniere
d723326b8e
style
2022-03-07 09:04:40 +01:00
Florent Daigniere
f01d8cd9b9
improve
2022-03-05 18:41:06 +01:00
Florent Daigniere
7b9c4e01f7
improve
2022-03-05 18:36:27 +01:00
Florent Daigniere
8cf76afbab
Catch the ValueError instead
2022-03-05 18:01:30 +01:00
Florent Daigniere
fe18cf9743
Fix 2080
...
Ensure that webmail tokens are in sync with sessions
2021-12-19 23:24:44 +01:00
Dimitri Huisman
d76773b1df
Also check the SMTP port for webmail/token
2021-12-14 14:52:15 +00:00
Dimitri Huisman
f26fa8da84
Fix Webmail token check. Fix Auth-Port for Webmail. #2079
2021-12-14 11:26:33 +00:00
Florent Daigniere
f3c93212c6
The Rate-limiter should run after the deny
2021-10-31 19:41:12 +01:00
Florent Daigniere
c674f1567a
Merge branch 'ratelimits' of https://github.com/nextgens/Mailu into ratelimits
2021-10-16 09:55:15 +02:00
Florent Daigniere
8414dd5cf0
Merge remote-tracking branch 'upstream/master' into ratelimits
2021-10-16 09:52:20 +02:00
Florent Daigniere
e14d2e7c03
Error out explictely if Auth-Port isn't set
2021-10-16 09:49:01 +02:00
Florent Daigniere
57b0dd490c
Initialize user_email in all cases
2021-10-16 09:29:17 +02:00
Florent Daigniere
7277e0b4e4
Merge branch 'master' into ratelimits
2021-10-12 14:47:00 +02:00
Alexander Graf
65133a960a
Prevent traceback when using non-email in login
...
There's a traceback when the username used to log via SMTPAUTH
in is not an email address:
=== before ===
```
[...] ERROR in app: Exception on /internal/auth/email [GET]
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/sqlalchemy/engine/base.py", line 1179, in _execute_context
context = constructor(dialect, self, conn, *args)
File "/usr/lib/python3.9/site-packages/sqlalchemy/engine/default.py", line 719, in _init_compiled
param.append(processors[key](compiled_params[key]))
File "/usr/lib/python3.9/site-packages/sqlalchemy/sql/type_api.py", line 1201, in process
return process_param(value, dialect)
File "/app/mailu/models.py", line 60, in process_bind_param
localpart, domain_name = value.lower().rsplit('@', 1)
ValueError: not enough values to unpack (expected 2, got 1)
[...]
[parameters: [{'%(140657157923216 param)s': 'foobar'}]]
```
=== after ===
```
[...] WARNING in nginx: Invalid user 'foobar': (builtins.ValueError) invalid email address (no "@")
```
2021-09-28 10:38:37 +02:00
Florent Daigniere
cab0ce2017
doh
2021-09-23 19:01:09 +02:00
Florent Daigniere
89ea51d570
Implement rate-limits
2021-09-23 18:40:49 +02:00
Alexander Graf
90c96bdddc
optimize handle_authentication
...
- catch decoding of nginx headers (utf-8 exception)
- re-ordered function
2021-09-05 19:47:10 +02:00
Florent Daigniere
dccd8afd51
Thanks @Diman0!
...
ENEEDSLEEP
2021-08-10 10:20:15 +02:00
Florent Daigniere
5e7d5adf17
AUTH shouldn't happen on port 25
2021-08-09 20:10:49 +02:00
Florent Daigniere
dd3d03f06d
Merge remote-tracking branch 'upstream/master' into webmail-sso
2021-03-10 14:41:12 +01:00
lub
f3f0a4d86d
Merge branch 'master' into enforce-tls-admin
2021-03-09 23:40:51 +01:00
Florent Daigniere
df230cb482
Refactor auth under nginx.check_credentials()
2021-03-09 12:05:46 +01:00
Florent Daigniere
58b2cdc428
Don't do more work than necessary
2021-03-09 12:04:42 +01:00
Florent Daigniere
b49554bec1
merge artifact
2021-02-07 18:12:00 +01:00
Florent Daigniere
906a051925
Make rainloop use internal auth
2021-02-07 17:50:17 +01:00
cbachert
72a9ec5b7c
Fix extract_host_port port separation
...
Regex quantifier should be lazy to make port separation work.
2020-10-24 00:25:53 +01:00
lub
05e2af1802
fix small typo in Auth-SSL
2020-09-02 15:16:10 +02:00
lub
f0f873ffe7
add option to enforce inbound starttls
2020-09-01 21:48:09 +02:00
kaiyou
9b7a027d6f
Fix the encoding of incoming user email and password
2020-01-13 20:34:24 +01:00
Michael Wyraz
de2f166bd1
Resolve HOST_* to *_ADDRESS only if *_ADDRESS is not already set
2019-08-31 18:18:58 +02:00
Ionut Filip
0ce0b5ec02
Fix addresses in front
2019-02-18 15:41:22 +02:00
Ionut Filip
f8dffe5a19
Resolve hosts in admin
2019-01-25 17:26:45 +02:00
kaiyou
fc24426291
First batch of refactoring, using the app factory pattern
2018-10-18 15:57:43 +02:00
Stefan Auditor
6fc22e5432
Respect user.enabled status in internal authentication
2018-04-15 13:43:30 +02:00
Mildred Ki'Lya
f538e33dcf
Parametrize hosts
...
Allows to use mailu without docker-compose when hostnames are not set up
by docker itself but provided via a separate resolver.
Use case: use mailu using nomad scheduler and consul resolver instead of
docker-compose. Other servers are provided by the DNS resolver that
resolves names like admin.service.consul or webmail.service.consul.
These names needs to be configurable.
2018-01-24 22:54:41 +01:00
kaiyou
c545b8d110
Honor feature limitations for imap and pop3
2017-11-21 20:46:32 +01:00
kaiyou
6e61500eb1
Fix the authentication behavior with non-existing users
2017-11-10 10:15:30 +01:00
kaiyou
45902ae012
Fix a bug when trying to authenticate with a non existing user
2017-11-05 18:12:50 +01:00
kaiyou
689be5f2d9
Move all directories per theme
2017-11-01 12:11:04 +01:00