Commit graph

1832 commits

Author SHA1 Message Date
Son Nguyen Kim
cc650f9fae remove unused import 2021-07-12 18:56:43 +02:00
Son Nguyen Kim
99599bb09f make sure user needs to go through MFA when resetting password 2021-07-12 18:56:09 +02:00
Son Nguyen Kim
0b063cb409 Add EmailLog.alias_id column 2021-07-11 12:27:30 +02:00
Son Nguyen Kim
fe1f8e9eb8 make the reverse-alias replacement visible 2021-07-11 09:07:25 +02:00
Son NK
f59651045d use data-bouncer-message instead of title to display error message 2021-07-03 17:50:54 +02:00
Son NK
95d6fa3478 make sure user can create new alias to receive an alias transfer 2021-07-03 17:12:03 +02:00
Son NK
01815b9153 replace get_suffix() by User.get_random_alias_suffix() 2021-06-27 17:51:13 +02:00
Son NK
09d00df363 reformat imports 2021-06-27 17:50:36 +02:00
Raymond Nook
4469a64de6
Merge branch 'simple-login:master' into master 2021-06-24 02:57:17 -07:00
Son NK
6532e0de93 Return 550 instead of 421 when rate limited. Rename greylisting to rate limit 2021-06-24 09:47:01 +02:00
Son NK
e8cee6de80 increase greylisting threshold 2021-06-23 19:55:41 +02:00
Son NK
70b51b5002 return 550 instead of 421 in case of SMTPRecipientsRefused 2021-06-23 19:50:42 +02:00
Son NK
6fa267e92b refactor: put all SMTP statuses into status.py 2021-06-23 19:47:06 +02:00
Son NK
b84eb13ab5 Discard ignored email
Create IgnoredEmail model
2021-06-22 17:52:24 +02:00
Raymond Nook
101c6c85ef
Merge branch 'simple-login:master' into master 2021-06-17 20:19:01 -07:00
Son
93991816c9 fix "Received" header is not str 2021-06-17 23:02:25 +02:00
Raymond Nook
e40c276a68
Merge branch 'master' into master 2021-06-05 22:57:27 -07:00
devStorm
e79959c330
🐛 imported but unused 2021-06-05 22:53:16 -07:00
Son NK
3308919906 Remove /alias/custom/new 2021-06-05 17:41:28 +02:00
Son NK
ef32998e99 Remove /alias/options, /v2/alias/options, /v3/alias/options 2021-06-05 17:41:18 +02:00
Son NK
a2ffc53c62 user can have manual subscription applied if their current subscription is canceled 2021-06-05 17:28:04 +02:00
Son NK
78df95395b improve upgrade_channel 2021-06-05 17:20:42 +02:00
Son NK
79d0ef8906 Use Postfix queue-id as log message-id 2021-06-04 17:15:59 +02:00
Son NK
10414a6b96 flake8 2021-06-02 19:04:58 +02:00
Son NK
62683a221a black 2021-06-02 18:48:35 +02:00
Son Nguyen Kim
b14d79c8f7
Merge pull request #496 from nbraud/pw_hash/refactor
Fix minor issues with password-handling, refactor
2021-06-02 18:33:56 +02:00
Son NK
eb2adc870a make sure only premium user can create new mailbox via API 2021-06-02 17:17:28 +02:00
Son NK
3897f6b633 refactor handle_bounce() 2021-06-02 11:38:52 +02:00
Son NK
ed938dd86a Add query2str 2021-05-30 19:58:46 +02:00
nicoo
586654e08e app.pw_models: Refactor, use constant-time equality 2021-05-29 17:42:46 +02:00
Son NK
28285f28ac Add index for AliasHibp 2021-05-28 19:59:26 +02:00
Son NK
aa667851e9 log user-agent in deprecated endpoint 2021-05-28 17:46:34 +02:00
nicoo
ecd74b801b app.pw_models: Use unicode normalization
Per NIST [SP800-63B, §5.1.1.2] Memorized Secret Verifiers :
> the verifier SHOULD apply the Normalization Process for
> Stabilized Strings using either the NFKC or NFKD normalization

This is necessary for Unicode passwords to work reliably.
ASCII-only passwords aren't affected.

[SP800-63B, §5.1.1.2]: https://pages.nist.gov/800-63-3/sp800-63b.html#-5112-memorized-secret-verifiers
2021-05-27 22:16:07 +02:00
devStorm
e6192ece01
style 2021-05-26 22:34:50 -07:00
Raymond Nook
258d505cbf
Merge branch 'master' into master 2021-05-26 22:33:20 -07:00
devStorm
f7bef3941a
replace random_word with get_suffix(user) 2021-05-26 22:30:12 -07:00
nicoo
52d4d2abdb app.models: minor refactor (extract pw auth) 2021-05-26 18:18:47 +02:00
Son NK
8cfd5e01dc add alerts on /alias/custom/new and /v3/alias/options and below 2021-05-25 19:36:45 +02:00
Son NK
99d26a01cb UI tweak 2021-05-25 18:30:14 +02:00
Son NK
388a425cac Only show pagination control if there are previous/next page 2021-05-25 18:27:06 +02:00
Son NK
b23e3d94fd make sure AliasHibp has cascade ondelete 2021-05-25 18:14:44 +02:00
Son NK
fb97f384e4 small UI tweak 2021-05-25 17:59:40 +02:00
Son NK
2f96322977 make sure BOUNCE_PREFIX_FOR_REPLY_PHASE can't be used as directory name or for creating aliases on-the-fly 2021-05-25 17:59:40 +02:00
Son NK
a918cc3670 Add BOUNCE_PREFIX_FOR_REPLY_PHASE 2021-05-25 17:59:40 +02:00
Son NK
159843a923 Add log for sl_sendmail 2021-05-24 12:04:22 +02:00
Son NK
ade07f9449 return empty name when name can't be decoded 2021-05-22 16:47:44 +02:00
Sylvia van Os
1ee941647f Add direct link to HIBP pwned info 2021-05-21 12:08:00 +02:00
Son NK
d4e930c930 Remove nullsfirst as not compatible with sqlite. Add more logging 2021-05-19 12:46:55 +02:00
Son Nguyen Kim
b3f8fd6789
Merge pull request #472 from TheLastProject/feature/hibp
Add HIBP checks
2021-05-19 12:37:04 +02:00
Sylvia van Os
a08b0c05cc Don't override id 2021-05-17 21:29:29 +02:00
Sylvia van Os
969616d671 Date compare in DB instead of model function 2021-05-17 18:20:35 +02:00
Sylvia van Os
bee468e055 Black 2021-05-15 18:04:50 +02:00
devStorm
4a0fc8380f
variable naming 2021-05-14 11:03:16 -07:00
Sylvia van Os
f67f5297f2 Add HIBP checks 2021-05-14 19:50:32 +02:00
Son NK
ef2eb7f959 add Paddle subscription_id in admin 2021-05-14 16:10:34 +02:00
devStorm
30183ac8c3
🐛 fix style 2021-05-13 19:34:54 -07:00
devStorm
5c74ad2dc0
⚠️ Remove word list check 2021-05-13 16:55:46 -07:00
devStorm
178ce34399
Enum, setting 2021-05-13 16:53:01 -07:00
devStorm
3fc250018d
basic implementation of random suffix 2021-05-13 16:13:19 -07:00
Son NK
edaf293398 Create admin pages for Referral and Payout 2021-05-10 15:51:39 +02:00
Son NK
93a8873192 show payouts on referral page 2021-05-10 13:03:44 +02:00
Son NK
229d2c644b Add Payout model 2021-05-10 13:03:19 +02:00
Son NK
5317b8ab84 move the api key page back to menu 2021-05-05 18:51:15 +02:00
Son NK
e5926978c8 use bouncer on custom alias page 2021-04-30 11:45:00 +02:00
Son NK
ceacf8e3a7 support dot in alias prefix 2021-04-30 11:37:17 +02:00
Son NK
e74dbd7e98 increase monthly plan to $4 2021-04-23 12:08:27 +02:00
Son NK
c5697fbf3c remove unused import 2021-04-23 12:07:49 +02:00
Son NK
7946879308 schedule account deletion 2021-04-23 11:50:26 +02:00
Son NK
f3b04b9d81 add more logging 2021-04-16 18:37:16 +02:00
Son NK
0039b4c301 disable an alias if the user has too many bounces recently 2021-04-16 17:57:25 +02:00
Son NK
cfb52a2eba add price mention on billing page 2021-04-12 10:14:35 +02:00
Son NK
5040e7b74b add filters for alias and mailbox admin 2021-04-12 10:07:17 +02:00
Son NK
9bfd9ebf07 fix 2021-04-09 12:46:51 +02:00
Son NK
aad1270e0d free trial account can't create more than MAX_NB_EMAIL_FREE_PLAN aliases 2021-04-09 12:40:55 +02:00
Son NK
f45e7b53d0 create admin for Client 2021-04-06 19:46:38 +02:00
Son NK
f8540808bc remove Client.published 2021-04-06 19:46:21 +02:00
Son NK
e42fb0816d Improve SIWSL wording 2021-04-06 18:12:06 +02:00
Son NK
ea5281de95 automatically show how-to-use 2021-04-06 18:10:32 +02:00
Son NK
7c1af6a265 improve should_disable(): take into account repetitive bounces 2021-04-06 17:24:06 +02:00
Son NK
c715f87526 improve SIWSL UI 2021-04-06 12:06:46 +02:00
Son NK
9e4ff01b17 improve login, register UI 2021-04-06 12:06:11 +02:00
Son NK
af9597cf5a improve copy when app isn't approved 2021-04-01 18:10:39 +02:00
Son NK
085dec069b allow any redirect_uri if the app isn't approved 2021-04-01 18:04:45 +02:00
Son NK
03976ea1c2 improve copy in app approval 2021-04-01 18:04:35 +02:00
Son NK
9757b12b95 user can remove the app link 2021-04-01 14:20:13 +02:00
Son NK
efae1710c8 extract the app/website to a separate page 2021-04-01 14:09:16 +02:00
Son NK
3c4a1413e0 Remove ClientUser.nonce 2021-04-01 12:49:32 +02:00
Son NK
e6d8815ac5 take into account nonce in openid 2021-04-01 12:49:23 +02:00
Son NK
da17f51778 add AuthorizationCode.nonce 2021-04-01 12:35:21 +02:00
Son NK
313b442af7 do not display AppId 2021-04-01 12:32:14 +02:00
Son NK
36e7cf3fdc add ClientUser.nonce 2021-04-01 12:31:37 +02:00
Son NK
46109770fc prettify 2021-04-01 11:05:58 +02:00
Son NK
b13c65166f Add OpenID Connect Discovery Document URL 2021-04-01 11:05:21 +02:00
Son NK
a90fa49636 add submit for approval for app 2021-04-01 10:52:51 +02:00
Son NK
c3d57ed6e4 reformat code 2021-04-01 10:50:53 +02:00
Son NK
7d4e1048af show warning on authorize page for non-approved app 2021-04-01 10:50:37 +02:00
Son NK
bbfb69d774 Add Client approved, description columns 2021-04-01 10:50:11 +02:00
Son NK
eab4f5f7ac prettify app page 2021-04-01 10:02:08 +02:00
Son NK
d5de99afe9 Restore /alias/custom/new as currently used by safari 2021-03-31 14:41:32 +02:00
Son NK
e31e19047c improve admin 2021-03-30 19:08:41 +02:00