Skip to content

v0.4.0

Choose a tag to compare

View all tags
@churichard churichard released this 16 Jul 01:57
· 33 commits to main since this release
v0.4.0
6d6d2c8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changed

  • Breaking: require every new mailbox, API key, and stdio connection to name a member; existing memberless API keys become management-only credentials and can no longer read mail (#34)
  • Breaking: identify a mailbox by its email address across providers; on first startup, keep the Gmail connection when duplicates exist, or otherwise keep the oldest connection, and remove the other duplicates (#34)
  • Breaking: exclude Spam and Trash from queries that omit folder or use folder: "all"; query either folder directly to include those messages (#49)
  • Breaking: add required sharingMode and sharedMemberIds fields to Account, replace its deprecated memberId field with ownerId, and add required supplementalCapabilities to PermissionPolicy (#34)
  • Breaking: require an authenticated key with admin.accounts for POST /auth/connections, even when FLUXMAIL_AUTH=none, and require HTTPS for remote administrative requests (#44)
  • Require mailbox owners to reassign or delete their mailboxes before removing the member (#34)
  • Separate mail permissions from the admin.accounts, admin.api_keys, and admin.license capabilities (#44)

Added

  • Add Microsoft 365 and Outlook.com support through Microsoft Graph, including local PKCE and hosted OAuth flows (#40)
  • Add a JSON REST API at /api/v1 with an OpenAPI 3.1 schema, raw attachment downloads, and stored idempotency results for sends and forwards (#41)
  • Add authenticated administrative REST endpoints for mailbox connections, API keys, and license activation, with explicit capabilities and audit records (#44)
  • Add member roles, private and shared mailbox access, selected-member sharing, and mailbox allowlists for API keys and stdio connections (#34)

Fixed

  • Check Outlook attachment metadata before downloading content when a size limit is active, avoiding unnecessary buffering for oversized files (#42)
  • Preserve the separate Trash and Archive permissions in Outlook move operations, including moves that use Microsoft folder aliases (#43)
  • Prevent hosted Microsoft OAuth responses from forwarding connection credentials through the HTTP referrer (#43)
  • Stop a pending IMAP connection immediately when its provider closes during setup (#49)

Full Changelog: v0.3.0...v0.4.0

Assets 2
Loading