In D5090#64308, @machniak wrote:When $verifyMFA=true you still call hash() and store it in the cache. When using $verifyMFA=false that hash would be used. If you add to this not using $clientIP it looks to me like a potential geo-lock bypass.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Feb 20 2025
Feb 20 2025
mollekopf updated the summary of D5110: Turn Domain Configuration into a more generic DNS configuration.
mollekopf requested review of D5110: Turn Domain Configuration into a more generic DNS configuration.
Feb 19 2025
Feb 19 2025
Feb 15 2025
Feb 15 2025
Feb 11 2025
Feb 11 2025
Jan 29 2025
Jan 29 2025
Jan 27 2025
Jan 27 2025
Addressed comments
Jan 14 2025
Jan 14 2025
Lookup by id
mollekopf added a reviewer for D5086: Lookup existing clients by id, not by name: Restricted Project.
mollekopf added inline comments to D5084: Fix mail attachment duplicates, improve attachment Method and IsInline values.
Jan 10 2025
Jan 10 2025
Jan 8 2025
Jan 8 2025
Jan 6 2025
Jan 6 2025
Moved the token validation to findAndAuthenticate, so we can skip mfa when a token has been validated.
Comment style
Now with an actual test
Addressed comments
Jan 1 2025
Jan 1 2025
mollekopf added a reviewer for D5074: Token validation when providing it as a password: Restricted Project.
Dec 27 2024
Dec 27 2024
Dec 24 2024
Dec 24 2024
mollekopf committed R113:de3d000b6f34: Reset internal cache in appropriate places to be on a safe side (authored by machniak).
mollekopf committed R113:6c53df30b8d3: IMAP: Partial support for ANNOTATE-EXPERIMENT-1 extension (RFC 5257) (authored by machniak).
Can be shipped after that adjustments IMO.
I think because of the latest change, this is now required:
Dec 23 2024
Dec 23 2024
Dec 19 2024
Dec 19 2024
It's a bit of a mess indeed.
I think it's not needed because default_port will be ignored if the port is part of the host string.
I'm unsure how to clean this up without breaking anything, so I'll just stick to doing what we do elsewhere.
Adjust to doing the same as iRony/syncroton
Dec 18 2024
Dec 18 2024
Dec 17 2024
Dec 17 2024