Commit Graph

23341 Commits

Author SHA1 Message Date
Pascal Bleser
112c49e162 groupware: add threadSize property in the email summary endpoint 2026-06-16 16:50:10 +02:00
Pascal Bleser
6e2dc1d18d groupware: improve email sanitization by using the mime package to parse the part type, in order to recognize HTML ones that need sanitization 2026-06-16 16:50:10 +02:00
Pascal Bleser
81382655f6 groupware: add headers Unmatched-Path and Unsupported-Method to make
development of the web UI easier
2026-06-16 16:50:10 +02:00
Pascal Bleser
79d0c1e1d7 groupware: add markAsSeen=true to mark an email as $seen before it is
retrieved
2026-06-16 16:50:10 +02:00
Pascal Bleser
a880152912 groupware: add the Retry-After header in responses when the session cannot be retrieved 2026-06-16 16:50:10 +02:00
Pascal Bleser
dea3496275 groupware: add searching emails by their Message-Id + retrieving an email by its ID as message/rfc822 2026-06-16 16:50:10 +02:00
Pascal Bleser
b243a38d2c groupware: add email HTML sanitization
* sanitize email text/html body parts using bluemonday

 * deps(groupware):
   - new dependency: github.com/microcosm-cc/bluemonday
   - transitive dependencies:
     - github.com/aymerick/douceur
     - github.com/gorilla/css
2026-06-16 16:50:09 +02:00
Pascal Bleser
82923c88dd groupware: add identity deletion 2026-06-16 16:49:44 +02:00
Pascal Bleser
92dff35a21 groupware:
* made several email related operations multi-account:
   QueryEmailSnippets, QueryEmails, QueryEmailsWithSnippets

 * add GetIdentitiesForAllAccounts

 * add GetEmailsForAllAccounts

 * jmap: add CreateIdentity, UpdateIdentity; groupware: add
   GetIdentityById, AddIdentity, ModifyIdentity

 * add temporary workaround until Calendars, Tasks, Contacts are
   implemented in Stalwart when determining the default account for
   those: use the mail one in the mean time
2026-06-16 16:49:44 +02:00
Pascal Bleser
da2743de95 groupware: add instructions for using stalwart-admin 2026-06-16 16:49:44 +02:00
Pascal Bleser
79d9c3af18 groupware: fix NPE when one of the accounts is a group account 2026-06-16 16:49:44 +02:00
Pascal Bleser
03b34799a9 groupware: fix devtools LDAP passwords, as it was breaking regular opencloud drive authentication 2026-06-16 16:49:44 +02:00
Pascal Bleser
bfde4c5926 groupware: DEVELOPER.md: add note explaining LDAPTLS_REQCERT 2026-06-16 16:49:44 +02:00
Pascal Bleser
0d5fce0a36 groupware: accept both '_' and '*' as the 'default account' placeholder 2026-06-16 16:49:44 +02:00
Pascal Bleser
fe78e837ce groupware: DEVELOPER.md: explain how to set a quota on a user using the Stalwart management API 2026-06-16 16:49:44 +02:00
Pascal Bleser
601be19976 groupware: jmap: don't collpase threads when searching for emails, and add dumping of JMAP request payloads when trace logging is enabled 2026-06-16 16:49:44 +02:00
Pascal Bleser
ffab61aa30 groupware: try an alternative way to configure Stalwart dynamically in the devtools Docker Compose setup, by using separate files and ${STALWART_AUTH_DIRECTORY} to name to file to mount 2026-06-16 16:49:44 +02:00
Pascal Bleser
8f64806c98 jmap: add GetInboxNameForMultipleAccounts 2026-06-16 16:49:44 +02:00
Pascal Bleser
a8fbb38a19 groupware: add Mermaid diagrams to describe the two setup options 2026-06-16 16:49:44 +02:00
Pascal Bleser
54a421449a groupware: implement email updating and email keyword updating endpoints 2026-06-16 16:49:44 +02:00
Pascal Bleser
a4949fc021 docs(groupware): upgrade @redocly/cli 2.3.1 -> 2.4.0 2026-06-16 16:49:44 +02:00
Pascal Bleser
ff393b7878 jmap: fix Email/set 2026-06-16 16:49:44 +02:00
Pascal Bleser
3e3cdbce0f groupware: further updates to make everything work with the builtin LDAP and OIDC 2026-06-16 16:49:44 +02:00
Pascal Bleser
51219c69bf groupware: for /accounts/all/emails/latest/summary, rename the ?unread query parameter into ?seen as that is more intuitive 2026-06-16 16:49:43 +02:00
Pascal Bleser
e9a131a4d7 groupware: make everything also work with the built-in LDAP and IDP 2026-06-16 16:49:43 +02:00
Pascal Bleser
919e7d23b1 groupware: devtools: Stalwart: add internal LDAP configuration 2026-06-16 16:49:43 +02:00
Pascal Bleser
14ab0b861b groupware: update @redocly/cli from 2.3.0 to 2.3.1 2026-06-16 16:49:43 +02:00
Pascal Bleser
e982755cfa docs(groupware): fix basepath in OpenAPI, /groupware instead of /groupware/groupware 2026-06-16 16:49:43 +02:00
Viktor Scharf
067ec169ad fixed connection reset issue. adapted make file to generate swagger docs on mac 2026-06-16 16:49:43 +02:00
Pascal Bleser
a0b88c0ad1 groupware: improve jmap integration tests
* use gofakeit instead of loremipsum, as it can also fake images for
   attachments

 * random emails for testing: generate threads, add attachments
2026-06-16 16:49:43 +02:00
Pascal Bleser
1f7f690b33 groupware: rewrite JMAP integration test to be more reusable, and upgrade Stalwart container to 0.13.4 2026-06-16 16:49:43 +02:00
Pascal Bleser
a6fcfa7aa6 groupware: upgrade Stalwart in devtools from 0.13.2 to 0.13.4
* changes from 0.13.4:
   - JMAP: Protocol layer rewrite for zero-copy deserialization and
     architectural improvements.
   - IMAP: Unbounded memory allocation in request parser
     (CVE-2025-61600)
   - IMAP: Wrong permission checked for GETACL.
   - JMAP: References to previous method fail when there are no results
     (stalwartlabs#1507).
   - JMAP: Enforce quota checks on Blob/copy.
   - JMAP: Mailbox/get fails without accountId argument (stalwartlabs#1936).
   - JMAP: Do not return invalidProperties when email update doesn't
     contain changes (stalwartlabs#1139)
   - iTIP: Include date properties in REPLY (stalwartlabs#2102).
   - OIDC: Do not set username field if it is the same as the email field.
   - Telemetry: Fix calculateMetrics housekeeper task (stalwartlabs#2155).
   - Directory: Always use rsplit to extract the domain part from email
     addresses.

  * changes from 0.13.3:
   - CLI: Health checks
   - WebDAV: Assisted discovery v2
   - iTIP: Do not send a REPLY when deleting an event that was not
     accepted.
   - iTIP: Include event details in REPLY messages (stalwart#2102).
   - iTIP: Add organizer to iMIP replies if missing to deal with MS
     Exchange 2010 bug.
   - OIDC: Do not overwrite locally defined aliases (stalwart#2065).
   - HTTP: Scan ban should only be triggered by HTTP parse errors.
   - HTTP: Skip scanner fail2ban checks when the proxy client IP can't
     be parsed (stalwart#2121).
   - JMAP: Do not allow roles to be removed from system mailboxes
     (stalwart#1977).
   - JMAP WS: Fix panic when using invalid server url.
   - SMTP: Do no send EHLO twice when STARTTLS is unavailable
     (stalwart#2050).
   - IMAP: Allow ENABLE UTF8 in IMAPrev1.
   - IMAP: Include administer permission in ACL responses.
   - IMAP: Add owner rights to ACL get responses.
   - IMAP: Do not auto-train Bayes when moving messages from Junk to
     Trash.
   - IMAP/ManageSieve: Increase maximum quoted argument size
     (stalwart#2039).
   - CalDAV: Limit recurrence expansions in calendar reports
     (CVE-2025-59045).
   - WebDAV: Do not fix percent encoding on WebDAV FS (stalwart#2036).
2026-06-16 16:49:43 +02:00
Pascal Bleser
908bf9fc07 groupware: add bootstrapping on / with quotas for all accounts 2026-06-16 16:49:43 +02:00
Pascal Bleser
8a42e20c74 groupware: add /quota for all accounts 2026-06-16 16:49:43 +02:00
Pascal Bleser
08c3f71b12 groupware: improve instructions in DEVELOPER.md 2026-06-16 16:49:43 +02:00
Pascal Bleser
f4aa170af6 groupware: update @redocly/cli: 2.2.2 -> 2.3.0 2026-06-16 16:49:43 +02:00
Pascal Bleser
08f7ec6700 groupware: add quota API + add support for Accept-Language and Content-Language 2026-06-16 16:49:43 +02:00
Pascal Bleser
f582f09121 groupware: minor improvements to the DEVELOPER.md 2026-06-16 16:49:43 +02:00
Pascal Bleser
f64e0799b2 groupware: add flag to currently ignore session capability checks for calendars, contacts and tasks, as those are not implemented in Stalwart yet; will need to remove it in the future 2026-06-16 16:49:43 +02:00
Pascal Bleser
f47d31e4b0 groupware: add JMAP capability checking (in part: for contacts, calendars, tasks) 2026-06-16 16:49:43 +02:00
Pascal Bleser
9e318e898b /auth: add SkipXAccessToken:true 2026-06-16 16:49:43 +02:00
Pascal Bleser
aad36825c8 groupware: add mock endpoints for tasklists and tasks 2026-06-16 16:49:43 +02:00
Pascal Bleser
2a37612230 groupware: implement JMAP Task specification 2026-06-16 16:49:43 +02:00
Pascal Bleser
052de5293f groupware: more mock data, added missing JMAP types 2026-06-16 16:49:43 +02:00
Pascal Bleser
e6cf66aac8 groupware: add mock endpoints for addressbooks and contacts 2026-06-16 16:49:43 +02:00
Pascal Bleser
c85104c5d4 opencloud_full: also keep the 'Trace-Id' HTTP header 2026-06-16 16:49:43 +02:00
Pascal Bleser
06da420e45 implement JSCalendar (RFC 8984) 2026-06-16 16:49:43 +02:00
Pascal Bleser
30742044ad services/groupware/DEVELOPER.md: adapt to new path for the opencloud_full deployment 2026-06-16 16:49:43 +02:00
Pascal Bleser
3e4f9a8eaf JSContact: refactored after full test coverage, stronger typing for enumerations 2026-06-16 16:49:43 +02:00
Pascal Bleser
d893b01662 Implement JSContact (RFC9553) Model
* add pkg/jscontact with the implementation of the RFC9553 data model

 * add JMAP Calendar session capabilities support in pkg/jmap
2026-06-16 16:49:43 +02:00