nexxo 3278f063ea Validate purpose mappings against real mailboxes, and clear stale verification on identity changes ... savePurposes() only checked that each key was a nonempty string, so a stale or tampered mailbox key (reachable by posting straight to /livewire/update) saved successfully while MailboxResolver silently returned null for it. Every purpose's key must now name a mailbox that exists; system's must additionally be active, since every unmapped or inactive OTHER purpose falls through to it. EditMailbox::save() also cleared last_verified_at only when the password changed, but smtpUsername() depends on address and username too (falling back to address when username is blank) — changing either while leaving the password untouched kept showing a successful verification for an identity nothing had actually tested.		2026-07-28 04:35:16 +02:00
..
admin.php	Give the mailboxes a page, and the support sender its own capability	2026-07-28 01:57:11 +02:00
admin_settings.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00
auth.php	Land a sign-in where it was performed, not always in the customer portal	2026-07-27 06:15:16 +02:00
backups.php	feat(portal): full sidebar — Cloud, Users, Backups, Invoices, Support	2026-07-25 08:08:33 +02:00
billing.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
cloud.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
coming_soon.php	Dress the placeholder page, and record why the obvious VPN fix cannot work	2026-07-27 09:19:30 +02:00
common.php	feat(admin): VPN access management with live peer state	2026-07-25 21:38:12 +02:00
dashboard.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
datacenters.php	Let people change their own password, and a location be switched off while editing it	2026-07-27 07:49:07 +02:00
errors.php	Make the console's access list reach the proxy, price in euros, and answer errors	2026-07-27 06:51:05 +02:00
hosts.php	feat(admin): host reserve edit + maintenance drain; customer suspend/reactivate	2026-07-25 14:30:21 +02:00
impersonate.php	feat(admin): impersonate customer portal — session login + return banner	2026-07-25 13:46:48 +02:00
instances.php	feat(admin): administrator access to a customer's Nextcloud	2026-07-26 05:30:59 +02:00
invoices.php	feat(portal): full sidebar — Cloud, Users, Backups, Invoices, Support	2026-07-25 08:08:33 +02:00
mail_settings.php	Validate purpose mappings against real mailboxes, and clear stale verification on identity changes	2026-07-28 04:35:16 +02:00
maintenance.php	fix(portal): move notices into the header, so the page stops scrolling twice	2026-07-26 00:13:20 +02:00
plans.php	Make the console's access list reach the proxy, price in euros, and answer errors	2026-07-27 06:51:05 +02:00
provisioning.php	chore(engine-b): provisioning step/mail i18n (DE+EN) + demo seed data	2026-07-25 11:59:06 +02:00
secrets.php	Move the one SMTP account into the mailbox table it outgrew	2026-07-28 00:24:54 +02:00
settings.php	Give customers two-factor, and stop every button on the settings page reacting at once	2026-07-27 08:48:34 +02:00
status.php	Make the console's access list reach the proxy, price in euros, and answer errors	2026-07-27 06:51:05 +02:00
support.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00
updating.php	feat(ops): update page, automatic 419 recovery, CI workflow	2026-07-26 00:58:27 +02:00
users.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00
vpn.php	feat(vpn): explain a missing download, and offer a way out	2026-07-26 01:20:04 +02:00