BotoX
768f2ee844
Improve dovecot mail-crypt postpassword script security (pipe password instead of passing on cmdline)
...
Suggested from: https://github.com/postfixadmin/postfixadmin/issues/441#issuecomment-774736944
2021-06-13 12:24:27 +02:00
David Goodwin
8518d53906
merge postfixadmin_3.3 into master
2021-05-13 13:15:27 +01:00
David Goodwin
584e4ef41d
type hinting changes
2021-05-13 12:56:38 +01:00
Andrey Miroshnichenko
0ebb006888
Adds an ability to update password_expity field when user changes own password
2021-05-13 00:23:05 +03:00
David Goodwin
2edabc3e03
phpcs insists on some brace changes
2021-04-13 21:19:16 +01:00
David Goodwin
823f27b29d
phpcs wants to change ...
2021-03-22 09:28:28 +00:00
Sven Seeberg
160fb32441
Change Login changePassword, fixes #456
...
* The db_udpate function already sets backticks around the table
name, which results and error name if the string passed as argument
for the table name already contains backticks.
Signed-off-by: Sven Seeberg <mail@sven-seeberg.de>
2021-02-19 08:58:08 +01:00
David Goodwin
c755e82a36
Merge branch 'postfixadmin_3.3'
2021-02-18 12:12:27 +00:00
David Goodwin
b2831d1241
psalm improvements
2021-02-17 21:29:18 +00:00
David Goodwin
237615502a
Merge remote-tracking branch 'origin/postfixadmin_3.3'
2021-01-27 09:29:57 +00:00
David Goodwin
52933a6307
remove change to table_by_key() as the original bug has been found in Login
2021-01-26 21:06:15 +00:00
David Goodwin
84ad0ebec7
perhaps better error logging if mailbox_postpassword_script fails
2021-01-25 22:04:04 +00:00
David Goodwin
336259957d
Merge remote-tracking branch 'origin/postfixadmin_3.3'
2021-01-25 21:58:31 +00:00
David Goodwin
a442b7331d
hint for future people
2021-01-25 17:00:16 +00:00
David Goodwin
481c465712
merge e7e1ce9c28
to fix PostgreSQL tests
2021-01-19 19:24:08 +00:00
David Goodwin
e7e1ce9c28
fix postgresql test
2021-01-19 16:50:56 +00:00
David Goodwin
dd7d94912b
fix psalm issue(s); fix incorrect variable; throw exception if mailbox_postpassword_script fails
2021-01-15 19:26:07 +00:00
David Goodwin
70bf59edc4
composer format; fix syntax issue; comment out code in model/Login which fails psalm check
2021-01-14 22:22:27 +00:00
David Goodwin
cb161a7cec
Merge pull request #421 from BotoX/master-crypt
...
Suport for dovecot mail-crypt-plugin via new mailbox_postpassword_script hook
2021-01-14 20:11:14 +00:00
David Goodwin
79737bc049
reformat
2021-01-14 17:07:55 +00:00
David Goodwin
ab56724a15
add hash_equals call
2021-01-14 17:07:55 +00:00
David Goodwin
85960b7096
more Login pacrypt() exception handling - see https://github.com/postfixadmin/postfixadmin/issues/420
2021-01-14 17:07:55 +00:00
David Goodwin
0a55868736
require a password to be non-empty on login
2021-01-14 17:07:55 +00:00
David Goodwin
30e3132a34
wrap pacrypt() call with a try/catch to log/handle issues where an exception is thrown - see https://github.com/postfixadmin/postfixadmin/issues/420
2021-01-14 17:07:55 +00:00
David Goodwin
18a019690c
reformat
2021-01-14 11:26:04 +00:00
David Goodwin
2060422d9a
add hash_equals call
2021-01-14 11:16:31 +00:00
David Goodwin
8b1adbcf1f
more Login pacrypt() exception handling - see https://github.com/postfixadmin/postfixadmin/issues/420
2021-01-14 11:13:02 +00:00
David Goodwin
5827a12628
require a password to be non-empty on login
2021-01-13 22:46:33 +00:00
David Goodwin
72ded8494a
wrap pacrypt() call with a try/catch to log/handle issues where an exception is thrown - see https://github.com/postfixadmin/postfixadmin/issues/420
2021-01-13 22:44:09 +00:00
BotoX
c6ae3ea2f3
Suport for dovecot mail-crypt-plugin via new mailbox_postpassword_script hook.
...
Uses doveadm mailbox cryptokey on create user / password change to adjust user encryption key.
https://doc.dovecot.org/configuration_manual/mail_crypt_plugin/
2021-01-11 21:07:45 +01:00
David Goodwin
b8fa60bb8a
more type hints / psalm fixes
2020-09-28 20:33:54 +01:00
David Goodwin
e4d5e4bee0
reformat
2020-09-26 09:58:16 +01:00
David Goodwin
ce8c636eb5
rejig Login::__construct() as only one arg is really needed
2020-09-26 09:58:05 +01:00
David Goodwin
7107e17c4c
composer format
2020-09-25 21:33:26 +01:00
David Goodwin
f091948381
move password check and recovery code generation out of PFAHandlers and into a Login class
2020-09-25 21:32:03 +01:00