Lucas RayanandClaude Sonnet 5.5 026f24a64a fix(auth): sign the webmail token for 30 days, not only its cookie ...

issueSession raised the cookie and the session row to 30 days but still let
createJwt default to 8 hours, so the session would have died at 8 hours with
a cookie that outlived it. Also covers account switching, sign-out and
renewal against a real database.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-22 15:04:24 -03:00

..

auth

fix(auth): sign the webmail token for 30 days, not only its cookie

2026-10-22 15:04:24 -03:00

migrations

#21: run the new images as non-root, and scope the image scan honestly

2026-08-02 14:48:48 -03:00

protocols

fix(bimi): each domain's logo under its own URL, and the publisher actually wired

2026-10-16 18:49:52 -03:00

rspamd

#21: run the new images as non-root, and scope the image scan honestly

2026-08-02 14:48:48 -03:00

storage

#21: keep devDependencies in the build stage regardless of NODE_ENV

2026-08-02 14:08:09 -03:00

webmail

feat(webmail): keep a message's own stylesheet so designed mail renders as sent

2026-10-22 14:45:34 -03:00