Tags

- BUGFIX: the user object was not stored into session efficiently
- increase MySQL's session size from `BLOB` to `MEDIUMBLOB`

- Fix of a suboptimal phrasing of a translation

- various security and UI improvements to the "switch to user" feature introduced in version `v2.5.0`

- Enable administrators to access mailboxes on behalf of managed accounts

- BUGFIX: do not crash when received a quota update with NULL bytes (meaning, the quota record was deleted)

- Distinguish connections to MongoDB from different parts of the application with MongoDB's `appName` connection string parameter

- BUGFIX: improve the MongoDB connection string parsing logic, so that it parses all combinations of one or multiple servers with or without port specified, and always returns port number, needed for the `wait-for-it.sh` script

- BUGFIX: support multiple servers in the MongoDB connection string; in the case of multiple servers, wait for all of them to become available before applying initial MongoDB migrations

- Rebuild to use newer version of parent image (`docker/lap:13.1`) that fixes configuration of mail client

- BUGFIX: the index route did not respect user's preferred locale

- Create new index route on the website root ("/") to redirect to the account homepage

- BUGFIX: do not break when user does not have any 2FA backup codes and requests new ones to be regenerated

- Introduce 2FA backup codes
- Remember me - users can opt-in to stay logged-in
- Introduce leeway for Google Authenticator - to allow small time differences between client and server
- Various visual improvements with 2FA codes (split code with spaces to improve readability, new copy-paste icon with animation)
- Introduce login throttling 
- Fix autocomplete attributes on the login form for better support of password managers
- Display tip on various places to encourage users to set up 2FA
- New ENV variables to define "server name" and "issuer" for Google Authenticator QR code

- Security fix: use Twig's `trans` filter instead of `trans()` function, to use autoescaping

- Introduce support for 2FA
- New "user home" section

- Switch to PHP 8.3 (by switching to parent container's new major version)
- Parent container now adds a `probe.sh` script, to be used as K8s liveness/readiness probes
- Remove the authentication policy endpoint for Dovecot - it's now a separate service (see https://gitlab.com/craynic.com/craynic.net/mail/policy-server)

- BUGFIX: quota usage update failed when quota's max was set to 0

- Show users in the Dovecot's UserDB even when their login is disabled (so that `doveadm` works even when login disabled)

- BUGFIX: readmodels crashed for domains with no DKIM configured

- Move "Checking access" log message to DEBUG
- Stop "request.INFO" logging in production