1
0
mirror of https://github.com/Mailu/Mailu.git synced 2025-07-01 00:44:57 +02:00
Commit Graph

60 Commits

Author SHA1 Message Date
50f8a5cb65 Ensure we log which account is invalid 2023-06-02 11:39:42 +02:00
10a3d1eabb Get the password from the source.
Remove password from response (not needed)
2023-05-30 15:06:32 +00:00
008cbdb6b1 Also url encode the password when authentication fails 2023-05-30 14:31:29 +00:00
5f94be871c Authentication failed for email clients when the password contained a non latin-1 character. 2023-05-30 14:09:16 +00:00
589c426601 Merge #2818
2818: Improve auth-related logging r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Improve auth-related logging

### Related issue(s)
- closes #2803 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2023-05-30 09:01:42 +00:00
c68f4d93cf Merge remote-tracking branch 'origin/improve-logs' into improve-logs 2023-05-13 11:59:22 +02:00
1ffb78103f quote the comments 2023-05-13 11:55:54 +02:00
1042911732 Update nginx.py
Fix typo
2023-05-12 21:14:39 +02:00
e88199e274 Update nginx.py
Doh
2023-05-12 20:27:29 +02:00
c60e2fa52c add token.comment too 2023-05-12 19:41:32 +02:00
c44537d318 Need this too 2023-05-09 12:17:16 +02:00
6ee913502e Improve auth-related logging 2023-05-06 17:37:16 +02:00
86ff5f7b71 Merge remote-tracking branch 'upstream/master' into managesieve-proxy 2023-04-20 18:53:17 +02:00
107b0ab5ff Implement managesieve support 2023-04-20 15:36:17 +02:00
c363378005 Always exempt app-tokens from rate limits 2023-04-14 12:51:43 +02:00
04a2cdab2f Only account for distinct attempts in rate limits 2023-04-01 11:33:02 +02:00
4e3874b0c1 Enable dynamic resolution of hostnames 2022-12-08 13:00:50 +01:00
00f07ef533 close #2451: prevent an auth-loop on webmails 2022-11-29 13:29:03 +01:00
91f86a4c2a Resolve using socrate function 2022-10-31 23:58:52 +01:00
23d06a5761 Fix a bunch of typos 2022-10-19 19:41:49 +02:00
64ad6931e9 Move 'is_valid_user = user is not None' into else 2022-03-18 20:08:16 +01:00
d723326b8e style 2022-03-07 09:04:40 +01:00
f01d8cd9b9 improve 2022-03-05 18:41:06 +01:00
7b9c4e01f7 improve 2022-03-05 18:36:27 +01:00
8cf76afbab Catch the ValueError instead 2022-03-05 18:01:30 +01:00
fe18cf9743 Fix 2080
Ensure that webmail tokens are in sync with sessions
2021-12-19 23:24:44 +01:00
d76773b1df Also check the SMTP port for webmail/token 2021-12-14 14:52:15 +00:00
f26fa8da84 Fix Webmail token check. Fix Auth-Port for Webmail. #2079 2021-12-14 11:26:33 +00:00
f3c93212c6 The Rate-limiter should run after the deny 2021-10-31 19:41:12 +01:00
c674f1567a Merge branch 'ratelimits' of https://github.com/nextgens/Mailu into ratelimits 2021-10-16 09:55:15 +02:00
8414dd5cf0 Merge remote-tracking branch 'upstream/master' into ratelimits 2021-10-16 09:52:20 +02:00
e14d2e7c03 Error out explictely if Auth-Port isn't set 2021-10-16 09:49:01 +02:00
57b0dd490c Initialize user_email in all cases 2021-10-16 09:29:17 +02:00
7277e0b4e4 Merge branch 'master' into ratelimits 2021-10-12 14:47:00 +02:00
65133a960a Prevent traceback when using non-email in login
There's a traceback when the username used to log via SMTPAUTH
in is not an email address:

=== before ===
```
[...] ERROR in app: Exception on /internal/auth/email [GET]
Traceback (most recent call last):
  File "/usr/lib/python3.9/site-packages/sqlalchemy/engine/base.py", line 1179, in _execute_context
    context = constructor(dialect, self, conn, *args)
  File "/usr/lib/python3.9/site-packages/sqlalchemy/engine/default.py", line 719, in _init_compiled
    param.append(processors[key](compiled_params[key]))
  File "/usr/lib/python3.9/site-packages/sqlalchemy/sql/type_api.py", line 1201, in process
    return process_param(value, dialect)
  File "/app/mailu/models.py", line 60, in process_bind_param
    localpart, domain_name = value.lower().rsplit('@', 1)
ValueError: not enough values to unpack (expected 2, got 1)
[...]
[parameters: [{'%(140657157923216 param)s': 'foobar'}]]
```

=== after ===
```
[...] WARNING in nginx: Invalid user 'foobar': (builtins.ValueError) invalid email address (no "@")
```
2021-09-28 10:38:37 +02:00
cab0ce2017 doh 2021-09-23 19:01:09 +02:00
89ea51d570 Implement rate-limits 2021-09-23 18:40:49 +02:00
90c96bdddc optimize handle_authentication
- catch decoding of nginx headers (utf-8 exception)
- re-ordered function
2021-09-05 19:47:10 +02:00
dccd8afd51 Thanks @Diman0!
ENEEDSLEEP
2021-08-10 10:20:15 +02:00
5e7d5adf17 AUTH shouldn't happen on port 25 2021-08-09 20:10:49 +02:00
dd3d03f06d Merge remote-tracking branch 'upstream/master' into webmail-sso 2021-03-10 14:41:12 +01:00
lub
f3f0a4d86d Merge branch 'master' into enforce-tls-admin 2021-03-09 23:40:51 +01:00
df230cb482 Refactor auth under nginx.check_credentials() 2021-03-09 12:05:46 +01:00
58b2cdc428 Don't do more work than necessary 2021-03-09 12:04:42 +01:00
b49554bec1 merge artifact 2021-02-07 18:12:00 +01:00
906a051925 Make rainloop use internal auth 2021-02-07 17:50:17 +01:00
72a9ec5b7c Fix extract_host_port port separation
Regex quantifier should be lazy to make port separation work.
2020-10-24 00:25:53 +01:00
lub
05e2af1802 fix small typo in Auth-SSL 2020-09-02 15:16:10 +02:00
lub
f0f873ffe7 add option to enforce inbound starttls 2020-09-01 21:48:09 +02:00
9b7a027d6f Fix the encoding of incoming user email and password 2020-01-13 20:34:24 +01:00