1
0
mirror of https://github.com/Mailu/Mailu.git synced 2024-12-14 10:53:30 +02:00
Commit Graph

13 Commits

Author SHA1 Message Date
bors[bot]
fc1a663da2
Merge #1754
1754: centralize Webmail authentication behind the admin panel (SSO) r=mergify[bot] a=nextgens

## What type of PR?

Enhancement: it centralizes the authentication of webmails to the admin interface.

## What does this PR do?

It implements the glue required for webmails to do SSO using the admin interface.
One of the main advantages of centralizing things this way is that it reduces significantly the attack surface available to an unauthenticated attacker (no webmail access until there is a valid Flask session).

Others include the ability to implement 2FA down the line and rate-limit things as required.

### Related issue(s)
- #783

## Prerequistes
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/guide.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2021-06-29 12:32:21 +00:00
lub
2316ef1162 update compression algorithms for dovecot 3.3.14
xz is deprecated; lz4 and zstd were not present in our configs before
2021-06-16 14:56:09 +02:00
Florent Daigniere
0917a6817f Set ADMIN=false to ensure that the tests pass 2021-02-08 10:17:43 +01:00
lub
98a6ffb497 add compression via xz and lz4 2020-11-21 12:37:08 +01:00
hoellen
d3dd4802f4 Change default password scheme to PBKDF2 (#1194) 2019-10-07 22:29:03 +02:00
Daniel Huber
d357ed67f5
Add DOCKER_PREFIX in tests and setup files 2018-12-21 18:13:08 +01:00
Tim Möhlmann
c0972face6
Correct subnetting functionality for the tests and setup 2018-12-06 16:44:12 +02:00
Tim Möhlmann
8172f3eab8
Move the Mailu Docker network to a fixed subnet.
This will make network configuration and host based authentication
more robust, across different deployment platforms.
The options `RELAYNETS` and`POD_ADDRESS_RANGE` are kept for compatibility.
However, their usage have become optional.
2018-12-06 12:08:22 +02:00
Ionut Filip
c3bc7988c9 Implemented email test for travis 2018-11-02 14:27:46 +02:00
Ionut Filip
4e9dc0c3c9 Implemented sending/reading email(local tests) 2018-11-01 11:40:54 +02:00
Tim Möhlmann
35e0fa1b9d
Drop IPv6 for travis 2018-10-25 18:23:42 +03:00
Tim Möhlmann
dde7ccca97
Created test cases from latest setup revision 2018-10-25 17:35:53 +03:00
Ionut Filip
3b1fdc6166 Migrate test script from shell to python
- test.py needs to be called with 2 arguments : test_name and timeout
  - it will cd to test_name dir and use the test_name.yml from there
  - it will sleep for an amount of time equals to timeout in minutes
- it will perform health checks for containers. If healtcheck isn't enabled will check for running state
- it will run hooks inside the test_name dir ( .py and .sh) if there are any
- printing logs in any case
2018-10-25 15:27:09 +03:00