1
0
mirror of https://github.com/Mailu/Mailu.git synced 2025-06-27 00:41:00 +02:00
Commit Graph

74 Commits

Author SHA1 Message Date
5cfec650df s/nginx/front 2024-08-09 15:55:33 +02:00
78c5d34227 as per review 2024-08-09 15:29:51 +02:00
148c8f9ede Remove this insanity since we don't use nginx 2024-08-08 10:24:43 +02:00
eb110c8431 master uses SSO 2023-10-28 14:02:06 +02:00
2494a344a7 Ammend wording as suggested 2023-10-27 15:14:51 +02:00
435508be1e Introduce AUTH_REQUIRE_TOKENS 2023-10-27 13:39:36 +02:00
9b7bb3b7f5 doh 2023-08-07 11:15:53 +02:00
1413001705 take care of sieve too 2023-08-07 09:06:02 +02:00
40b5e7ca39 Avoid a stack-trace when the ratelimit is hit 2023-08-05 18:24:11 +02:00
69229436cf Merge #2866
2866: Improve tokens (add ipranges) r=nextgens a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Allow multiple IP addresses/networks to be set for tokens.

### Related issue(s)


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-06-26 10:02:58 +00:00
372f008eab bugfix for dovecot-proxy 2023-06-23 16:01:24 +02:00
fbc2f47003 bugfix for dovecot-proxy 2023-06-23 15:57:37 +02:00
29cd857c5f Allow multiple IP addresses/networks to be set for tokens 2023-06-23 15:56:41 +02:00
f143aa3dc8 Use dovecot-proxy where appropriate 2023-06-05 10:23:30 +02:00
50f8a5cb65 Ensure we log which account is invalid 2023-06-02 11:39:42 +02:00
10a3d1eabb Get the password from the source.
Remove password from response (not needed)
2023-05-30 15:06:32 +00:00
008cbdb6b1 Also url encode the password when authentication fails 2023-05-30 14:31:29 +00:00
5f94be871c Authentication failed for email clients when the password contained a non latin-1 character. 2023-05-30 14:09:16 +00:00
589c426601 Merge #2818
2818: Improve auth-related logging r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Improve auth-related logging

### Related issue(s)
- closes #2803 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2023-05-30 09:01:42 +00:00
c68f4d93cf Merge remote-tracking branch 'origin/improve-logs' into improve-logs 2023-05-13 11:59:22 +02:00
1ffb78103f quote the comments 2023-05-13 11:55:54 +02:00
1042911732 Update nginx.py
Fix typo
2023-05-12 21:14:39 +02:00
e88199e274 Update nginx.py
Doh
2023-05-12 20:27:29 +02:00
c60e2fa52c add token.comment too 2023-05-12 19:41:32 +02:00
c44537d318 Need this too 2023-05-09 12:17:16 +02:00
6ee913502e Improve auth-related logging 2023-05-06 17:37:16 +02:00
86ff5f7b71 Merge remote-tracking branch 'upstream/master' into managesieve-proxy 2023-04-20 18:53:17 +02:00
107b0ab5ff Implement managesieve support 2023-04-20 15:36:17 +02:00
c363378005 Always exempt app-tokens from rate limits 2023-04-14 12:51:43 +02:00
04a2cdab2f Only account for distinct attempts in rate limits 2023-04-01 11:33:02 +02:00
4e3874b0c1 Enable dynamic resolution of hostnames 2022-12-08 13:00:50 +01:00
00f07ef533 close #2451: prevent an auth-loop on webmails 2022-11-29 13:29:03 +01:00
91f86a4c2a Resolve using socrate function 2022-10-31 23:58:52 +01:00
23d06a5761 Fix a bunch of typos 2022-10-19 19:41:49 +02:00
64ad6931e9 Move 'is_valid_user = user is not None' into else 2022-03-18 20:08:16 +01:00
d723326b8e style 2022-03-07 09:04:40 +01:00
f01d8cd9b9 improve 2022-03-05 18:41:06 +01:00
7b9c4e01f7 improve 2022-03-05 18:36:27 +01:00
8cf76afbab Catch the ValueError instead 2022-03-05 18:01:30 +01:00
fe18cf9743 Fix 2080
Ensure that webmail tokens are in sync with sessions
2021-12-19 23:24:44 +01:00
d76773b1df Also check the SMTP port for webmail/token 2021-12-14 14:52:15 +00:00
f26fa8da84 Fix Webmail token check. Fix Auth-Port for Webmail. #2079 2021-12-14 11:26:33 +00:00
f3c93212c6 The Rate-limiter should run after the deny 2021-10-31 19:41:12 +01:00
c674f1567a Merge branch 'ratelimits' of https://github.com/nextgens/Mailu into ratelimits 2021-10-16 09:55:15 +02:00
8414dd5cf0 Merge remote-tracking branch 'upstream/master' into ratelimits 2021-10-16 09:52:20 +02:00
e14d2e7c03 Error out explictely if Auth-Port isn't set 2021-10-16 09:49:01 +02:00
57b0dd490c Initialize user_email in all cases 2021-10-16 09:29:17 +02:00
7277e0b4e4 Merge branch 'master' into ratelimits 2021-10-12 14:47:00 +02:00
65133a960a Prevent traceback when using non-email in login
There's a traceback when the username used to log via SMTPAUTH
in is not an email address:

=== before ===
```
[...] ERROR in app: Exception on /internal/auth/email [GET]
Traceback (most recent call last):
  File "/usr/lib/python3.9/site-packages/sqlalchemy/engine/base.py", line 1179, in _execute_context
    context = constructor(dialect, self, conn, *args)
  File "/usr/lib/python3.9/site-packages/sqlalchemy/engine/default.py", line 719, in _init_compiled
    param.append(processors[key](compiled_params[key]))
  File "/usr/lib/python3.9/site-packages/sqlalchemy/sql/type_api.py", line 1201, in process
    return process_param(value, dialect)
  File "/app/mailu/models.py", line 60, in process_bind_param
    localpart, domain_name = value.lower().rsplit('@', 1)
ValueError: not enough values to unpack (expected 2, got 1)
[...]
[parameters: [{'%(140657157923216 param)s': 'foobar'}]]
```

=== after ===
```
[...] WARNING in nginx: Invalid user 'foobar': (builtins.ValueError) invalid email address (no "@")
```
2021-09-28 10:38:37 +02:00
cab0ce2017 doh 2021-09-23 19:01:09 +02:00