b104f26974
Merge pull request #100 from christianlouis/codex/mail-source-import-history-ui
...
feat: show mail import history
2026-05-22 19:44:41 +02:00
69aa1459eb
feat: show mail import history
2026-05-22 19:44:18 +02:00
648e3742f8
chore(release): v1.10.0
2026-05-22 17:39:19 +00:00
40f7d52df2
Merge pull request #99 from christianlouis/codex/report-persistence
...
feat: persist imported DMARC reports
2026-05-22 19:38:31 +02:00
b9041012de
feat: persist imported DMARC reports
2026-05-22 19:38:03 +02:00
9630944460
chore(release): v1.9.0
2026-05-22 17:31:05 +00:00
1fdfa016ed
Merge pull request #98 from christianlouis/codex/mail-source-import-history
...
feat: add mail source import history
2026-05-22 19:30:13 +02:00
4fc69602b3
feat: add mail source import history
2026-05-22 19:29:49 +02:00
d72c27d881
chore(release): v1.8.5
2026-05-22 17:18:28 +00:00
07b2ea400e
fix: harden DMARC mail import
2026-05-22 19:17:32 +02:00
9e9df108c8
ci: publish release image tags
2026-05-22 15:07:02 +02:00
bf76e2d450
Merge pull request #97 from dependabot/pip/docs/readthedocs/pymdown-extensions-10.21.3
...
Bump pymdown-extensions in docs/readthedocs to fix the moderate security advisory.
2026-05-21 13:05:18 +02:00
00e1ee2a72
chore(deps): bump pymdown-extensions in /docs/readthedocs
...
Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions ) from 10.16.1 to 10.21.3.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases )
- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.16.1...10.21.3 )
---
updated-dependencies:
- dependency-name: pymdown-extensions
dependency-version: 10.21.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-19 21:06:25 +00:00
181b43bff9
address copilot review followups ( #96 )
2026-05-18 19:17:36 +02:00
ee7c15ce4b
Merge pull request #95 from christianlouis/codex/address-backend-security-and-test-suggestions
...
[codex] address backend security and test suggestions
2026-05-18 16:52:50 +02:00
b4191e956c
address backend security and test suggestions
2026-05-18 16:44:06 +02:00
8f7c41193f
chore(release): v1.8.4
2026-04-02 17:49:04 +00:00
20dddd0824
Merge pull request #92 from christianlouis/copilot/fix-login-and-profile-management
...
Fix profile page: use Logto Account Center prebuilt flows for password change and MFA
2026-04-02 19:48:06 +02:00
523b0529f4
fix: use Logto Account Center routes for password change and MFA management
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/d566f8d7-4560-4945-b9e5-388259f626a3
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-04-02 17:05:20 +00:00
b0e643bdf3
chore(release): v1.8.3
2026-03-31 14:00:29 +00:00
f8d4f936a7
Merge pull request #90 from christianlouis/copilot/fix-id-token-claims-extraction
...
fix: remove erroneous await from synchronous getIdTokenClaims() + add callback endpoint tests
2026-03-31 15:59:36 +02:00
32351a2134
test: add TestCallbackEndpoint tests to cover /callback auth endpoint
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/0683a057-d74b-4b1a-aeab-47f5bfbe4190
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-31 08:57:05 +00:00
2c9e5f4ca9
Merge pull request #91 from christianlouis/copilot/implement-password-reset-and-mfa-management
...
Add password reset link on login screen and MFA management via Logto account portal
2026-03-31 10:15:42 +02:00
c81173e417
implement password reset on login screen and MFA management for users
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/0419399d-3a03-4f02-a3a8-fc75da7172bc
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 19:58:40 +00:00
9f1494a090
fix: remove erroneous await from getIdTokenClaims() call
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/2a043a05-25c6-4750-a9e8-da2b1651b55b
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 19:51:43 +00:00
6805ae301a
Initial plan
2026-03-30 19:50:34 +00:00
c4a5d7da53
Initial plan
2026-03-30 19:48:00 +00:00
6581cf05b2
Merge pull request #89 from christianlouis/copilot/fix-logto-callback-error
...
Fix Logto callback failure: extend LOGTO_SKIP_SSL_VERIFY to cover JWKS fetch (PyJWKClient/urllib)
2026-03-30 21:42:23 +02:00
3a5b75e964
Fix Logto callback SSL error: extend LOGTO_SKIP_SSL_VERIFY patch to PyJWKClient (JWKS/urllib)
...
The 'Fail to fetch data from the url' callback error came from PyJWT's
PyJWKClient.fetch_data() using urllib to retrieve the JWKS, which is not
covered by the existing aiohttp.ClientSession SSL monkey-patch.
Extend _apply_logto_ssl_patch() to also replace PyJWKClient inside
logto.OidcCore with a subclass that injects the non-verifying ssl.SSLContext
via the ssl_context constructor parameter, ensuring both the OIDC discovery/
token requests (aiohttp) and ID-token JWKS verification (urllib) honour
LOGTO_SKIP_SSL_VERIFY=True.
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/14676b1a-3421-4839-9ba3-8229a3e5adf1
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 17:15:58 +00:00
8d75f2e045
Initial plan
2026-03-30 17:06:35 +00:00
74ce9a7e37
Merge pull request #88 from christianlouis/copilot/implement-secure-api-key-storage
...
Add LOGTO_SKIP_SSL_VERIFY setting to support self-signed certificates on Logto instances
2026-03-30 18:56:48 +02:00
92d6a06a33
Default LOGTO_SKIP_SSL_VERIFY to true; update comment and docs
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/8a17f133-904d-45c7-bc35-b3f5c1d2c97e
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 16:46:25 +00:00
8d98d96afc
Merge pull request #87 from christianlouis/copilot/exclude-static-assets-login
...
Exclude static asset file extensions from auth redirect middleware
2026-03-30 18:43:36 +02:00
9e579972ca
Initial plan
2026-03-30 16:38:37 +00:00
3fb90dbcf6
Exclude static asset extensions from auth redirect middleware
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/3e1fe3d2-54b1-4eb4-90d2-173a5e95d376
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 16:36:28 +00:00
3c6d737139
chore(release): v1.8.2
2026-03-30 16:33:46 +00:00
a463599d05
Merge pull request #86 from christianlouis/copilot/fix-asgi-application-exception
...
Fix AttributeError: Scope.offlineAccess removed in logto SDK 0.2.x
2026-03-30 18:32:53 +02:00
420975c1d7
Initial plan
2026-03-30 16:32:32 +00:00
9f5e2c1258
fix: use OAuthScope.offlineAccess instead of Scope.offlineAccess for logto SDK compatibility
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/2982bcbd-abe6-474a-94ff-e7c6aabe4890
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 15:57:24 +00:00
bf7cb918bf
Merge pull request #85 from christianlouis/copilot/add-favicon-to-app
...
Add favicon to the DMARQ web app
2026-03-30 17:54:47 +02:00
a808c62d4f
Initial plan
2026-03-30 15:53:55 +00:00
274b0b09c5
Add favicon to the app
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/d5386c25-5b4f-4f21-8537-ae2d0fc06c04
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 15:46:23 +00:00
f31877b964
Initial plan
2026-03-30 15:43:40 +00:00
11440f4a02
chore(release): v1.8.1
2026-03-30 14:52:49 +00:00
a23c69011a
Merge pull request #84 from christianlouis/copilot/fix-internal-server-error
...
fix: resolve TemplateNotFound 500 on /dashboard endpoint
2026-03-30 16:51:57 +02:00
975f14c3f7
fix: resolve 500 error on /dashboard by using existing index.html template
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/e0466584-8008-4217-bb87-f6d6b9d77387
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 14:40:56 +00:00
797567d441
Initial plan
2026-03-30 14:34:05 +00:00
3e35eab5ed
chore(release): v1.8.0
2026-03-30 14:29:53 +00:00
63ce49ab66
Merge pull request #83 from christianlouis/copilot/fix-unauthorized-access-settings-api
...
feat: Logto OIDC authentication + AUTH_DISABLED no-auth fallback
2026-03-30 16:28:55 +02:00
04931172dd
feat: add AUTH_DISABLED no-auth fallback mode
...
- config.py: AUTH_DISABLED: bool = False setting
- middleware/auth.py: bypass all checks when AUTH_DISABLED=True
- security.py: require_admin_auth returns synthetic context when disabled
- endpoints/auth.py: /me returns synthetic admin; /sign-out → / when disabled
- main.py: startup WARNING when disabled; pass auth_disabled to login.html
- templates/login.html: info banner with Go to dashboard link when disabled
- templates/setup.html: document AUTH_DISABLED option with security warning
- tests/test_auth.py: 4 new AUTH_DISABLED tests (445 total, all pass)
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/18f41bf2-0b68-4b7d-afb5-d2894c212a8f
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 11:38:52 +00:00
Christian Krakau-Louis