Lucas RayanandClaude Opus 5
8b69521c76
The counts were computed inline in JSX where nothing could test them. The
sidebar matched a folder by a special-use role folders do not always carry, its
badges were fetched once and then froze - new mail did not raise them and
reading a message did not lower it - and the list header printed the size of
the loaded page, capped at 50, as the size of the folder. The rules now live in
mailCounts.ts behind tests, useFolders keeps them current from the server's
push and from this tab's own changes, and each filter chip carries its number.
Inline images never left the server: RenderMessage dropped every part a body
references as cid:, so mail written by any normal client rendered with broken
icons. They now come back as bounded data URIs, refusing image/svg+xml, and the
reader resolves them, sizes its frame from the message instead of a fixed
500px, and renders on the light surface mail assumes.
Reading mail no longer asks for a second factor - the mailbox is behind the
account's own password - while the console still requires one unconditionally,
now collected by a step-up that does not ask again for the password the session
in hand just proved. An admin sign-in issues the webmail session too, so
leaving the console is a link rather than another login.
Two defects found while testing the above:
- The admin sign-in checked the password and the second factor and never the
role, so any account that had enrolled a factor from its own settings could
obtain an admin-audience session.
- Session tokens carried nothing that varied below one second, so signing in
twice within the same second minted the identical token and collided with
the unique index on web_sessions.refresh_token_hash. A correct password
answered 500, and a double-clicked sign-in was enough to do it. Tokens now
carry a jti.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
309 lines
12 KiB
JSON
309 lines
12 KiB
JSON
{
|
|
"admin": {
|
|
"addAlias": "Add alias",
|
|
"aliasesTitle": "Aliases",
|
|
"auditLog": "Audit log",
|
|
"backToWebmail": "Back to webmail",
|
|
"cancelJob": "Cancel",
|
|
"certificateState": "Certificate",
|
|
"checksPassed": "{passed} of {total} passed",
|
|
"createAccount": "Create account",
|
|
"createAlias": "Create a routing alias",
|
|
"csvPreview": "Preview",
|
|
"dashboardSubtitle": "Live figures read from the database.",
|
|
"dashboardTitle": "Overview",
|
|
"dkimAlgorithm": "Key type",
|
|
"dkimOverlap": "Both keys sign outbound mail for {days} days so nothing fails while DNS propagates.",
|
|
"dkimPublishRecord": "Publish this record in DNS:",
|
|
"dkimRotate": "Generate a new key",
|
|
"dkimSelector": "Selector",
|
|
"dkimTitle": "DKIM key rotation",
|
|
"dmarcSubtitle": "Breakdown of the aggregate XML reports that have been ingested.",
|
|
"dmarcTitle": "DMARC reports",
|
|
"dnsRecordsFor": "DNS records for {domain}",
|
|
"dnsStatusDrift": "Drift",
|
|
"dnsStatusPartial": "Partial",
|
|
"dnsStatusVerified": "Verified",
|
|
"domainName": "Domain name",
|
|
"domainsTitle": "Domains",
|
|
"expiresInDays": "Expires in {days} days",
|
|
"freezeDomain": "Freeze domain",
|
|
"greylistScore": "Greylist score",
|
|
"headerScore": "Header-tagging score",
|
|
"jobCancelled": "Job {id} was cancelled.",
|
|
"jobRetried": "Job {id} was queued for another attempt.",
|
|
"lastChecked": "Last checked: {when}",
|
|
"lastReload": "Last reload",
|
|
"mailHost": "Mail host",
|
|
"mailboxCount": "{count} mailboxes",
|
|
"mailboxesSubtitle": "Accounts, aliases, CSV import and the second-factor policy.",
|
|
"mailboxesTitle": "Mailboxes",
|
|
"mfaAdmins": "Required for admins",
|
|
"mfaEveryone": "Required for everyone",
|
|
"mfaOptional": "Optional",
|
|
"mfaPolicyIntro": "Choose how strictly this domain requires a second factor.",
|
|
"mfaPolicyTitle": "Second-factor requirement",
|
|
"noCertificate": "No certificate is loaded for this host.",
|
|
"noChecks": "No checks reported.",
|
|
"noDomains": "No domains have been onboarded yet.",
|
|
"notPublished": "Not published",
|
|
"onboardIntro": "Creates the domain and its standard RFC 2142 aliases, pointed at your address.",
|
|
"onboardTitle": "Add a domain",
|
|
"openAdmin": "Admin console",
|
|
"preflightTitle": "Readiness checks",
|
|
"presentProxied": "Present (proxied)",
|
|
"queueEmpty": "The outbound queue is empty.",
|
|
"queueSubtitle": "Inspect the outbound queue, retry a job, or cancel one.",
|
|
"queueTitle": "Outbound queue",
|
|
"readinessIntro": "Checks the server reports about itself before it carries production mail.",
|
|
"reconcileDns": "Reconcile DNS",
|
|
"reconcileNotImplemented": "Per-record DNS verification is not implemented yet: this records the request and re-reads the stored status, it does not query a resolver.",
|
|
"rejectScore": "Reject score",
|
|
"retryJob": "Retry",
|
|
"rspamdIntro": "Scores that trigger greylisting, header tagging and rejection.",
|
|
"rspamdSaved": "Thresholds saved.",
|
|
"saveThresholds": "Save thresholds",
|
|
"securitySubtitle": "Readiness checks, TLS state, spam thresholds and the audit trail.",
|
|
"securityTitle": "Security",
|
|
"tabAudit": "Audit trail",
|
|
"tabReadiness": "Readiness",
|
|
"tabRspamd": "Spam thresholds",
|
|
"tabTls": "TLS",
|
|
"tlsMode": "TLS mode",
|
|
"tlsTitle": "Certificate and transport",
|
|
"traceNoResults": "No trace found for that queue ID.",
|
|
"tracePlaceholder": "Queue ID",
|
|
"traceTitle": "Trace a message",
|
|
"unknownSni": "Unknown SNI requests",
|
|
"verifyIntro": "Resolves every expected record against public resolvers and reports each one.",
|
|
"watcherHealthy": "Certificate watcher"
|
|
},
|
|
"auth": {
|
|
"adminLoginTitle": "Admin console",
|
|
"adminStepUpNote": "The admin console asks for your second factor again, even though you are already signed in to webmail.",
|
|
"authFailed": "Authentication failed",
|
|
"cantScanQr": "Cannot scan? Enter this key manually:",
|
|
"emailLabel": "Email address",
|
|
"enrolmentFailed": "Could not start the second-factor setup",
|
|
"enrolmentIntro": "The admin console requires a second factor. Set one up now to continue.",
|
|
"genericError": "Something went wrong",
|
|
"invalidCredentials": "Invalid email or password",
|
|
"mfaRequired": "Enter the six-digit code from your authenticator app.",
|
|
"orRecoveryCode": "Lost your phone? A recovery code works here too.",
|
|
"passwordLabel": "Password",
|
|
"qrCodeAlt": "QR code for two-factor setup",
|
|
"scanQr": "Scan this code with Google Authenticator, Aegis, Authy or 1Password.",
|
|
"signInButton": "Sign in",
|
|
"signOutOfAdmin": "Leave admin",
|
|
"stepUpIntro": "You are already signed in, so only your second factor is needed. Your password is not asked for again.",
|
|
"stepUpSignedInAs": "Signed in as {email}",
|
|
"stepUpTitle": "Open the admin console",
|
|
"totpCodeLabel": "Authentication code",
|
|
"userLoginTitle": "Sign in to your mailbox",
|
|
"verificationFailed": "Verification failed",
|
|
"verifyCodeButton": "Verify code"
|
|
},
|
|
"common": {
|
|
"actions": "Actions",
|
|
"add": "Add",
|
|
"adminPortal": "Admin",
|
|
"appName": "LambdaMail",
|
|
"back": "Back",
|
|
"cancel": "Cancel",
|
|
"confirm": "Confirm",
|
|
"continue": "Continue",
|
|
"copied": "Copied",
|
|
"copy": "Copy",
|
|
"delete": "Delete",
|
|
"loading": "Loading...",
|
|
"logout": "Sign out",
|
|
"never": "Never",
|
|
"none": "None",
|
|
"refresh": "Refresh",
|
|
"retry": "Retry",
|
|
"save": "Save",
|
|
"search": "Search",
|
|
"status": "Status",
|
|
"unavailable": "Unavailable",
|
|
"userPortal": "Webmail"
|
|
},
|
|
"errors": {
|
|
"forbidden": "You do not have access to this",
|
|
"loadFailed": "Could not load the data",
|
|
"serverError": "Something went wrong on the server",
|
|
"unauthorized": "Please sign in again"
|
|
},
|
|
"mail": {
|
|
"addFiles": "Add files...",
|
|
"allMessages": "All",
|
|
"archive": "Archive",
|
|
"attachments": "Attachments ({count})",
|
|
"attachmentsFilter": "With attachments",
|
|
"attachmentsUnsupported": "Attachments are listed by name only; file upload is not wired up yet.",
|
|
"backToList": "Back to the message list",
|
|
"bold": "Bold",
|
|
"bulletList": "Bulleted list",
|
|
"compose": "Compose",
|
|
"discard": "Discard",
|
|
"draftSaveFailed": "Draft could not be saved",
|
|
"draftSaved": "Draft saved automatically",
|
|
"draftSaving": "Saving draft...",
|
|
"drafts": "Drafts",
|
|
"emptyBody": "This message has no text body.",
|
|
"forward": "Forward",
|
|
"imagesEnabled": "Images loaded",
|
|
"hideCcBcc": "- Hide Cc/Bcc",
|
|
"inbox": "Inbox",
|
|
"insertLink": "Insert link",
|
|
"insertUrl": "Enter the URL:",
|
|
"italic": "Italic",
|
|
"junk": "Spam",
|
|
"loadImages": "Load images",
|
|
"markRead": "Mark as read",
|
|
"markUnread": "Mark as unread",
|
|
"messagesInFolder": "{count} messages",
|
|
"noMatches": "Nothing matched that search",
|
|
"noMessages": "No messages",
|
|
"noSubject": "(No subject)",
|
|
"numberedList": "Numbered list",
|
|
"remoteContentBlocked": "Remote images were blocked so this message cannot track you.",
|
|
"reply": "Reply",
|
|
"searchMatches": "{count} found",
|
|
"searchPlaceholder": "Search (from:, subject:)...",
|
|
"selectAMessage": "Select a message to read it",
|
|
"sendMessage": "Send message",
|
|
"sending": "Sending...",
|
|
"sent": "Sent",
|
|
"showCcBcc": "+ Add Cc/Bcc",
|
|
"strikethrough": "Strikethrough",
|
|
"trash": "Trash",
|
|
"underline": "Underline",
|
|
"undoSend": "Sending in {seconds}s",
|
|
"undoSendAction": "Undo",
|
|
"unreadCount": "{count} unread",
|
|
"unreadFilter": "Unread"
|
|
},
|
|
"settings": {
|
|
"actionDiscard": "Discard",
|
|
"actionFlag": "Flag message",
|
|
"actionMove": "Move to Archive",
|
|
"addRule": "Add rule",
|
|
"appPasswordPlaceholder": "Thunderbird / Outlook Mobile",
|
|
"appPasswords": "App passwords",
|
|
"autoReplySaveFailed": "Could not save the auto-reply",
|
|
"enableMfa": "Enable two-factor",
|
|
"fieldFrom": "From",
|
|
"fieldHeader": "Header",
|
|
"fieldSubject": "Subject",
|
|
"generateAppPassword": "Generate",
|
|
"langEn": "English",
|
|
"langEs": "Español",
|
|
"langPtBR": "Português (Brasil)",
|
|
"language": "Language",
|
|
"matchContains": "contains",
|
|
"matchEquals": "is exactly",
|
|
"matchRegex": "matches regex",
|
|
"mfaDisabled": "Disabled",
|
|
"mfaEnabled": "Enabled",
|
|
"mfaStatus": "Two-factor status",
|
|
"recoveryCodesTitle": "Recovery codes",
|
|
"ruleIf": "IF",
|
|
"ruleThen": "THEN",
|
|
"saveAutoReply": "Save auto-reply",
|
|
"saveRecoveryCodes": "Save these somewhere safe. Each one works once, and they are shown only now.",
|
|
"security": "Security",
|
|
"sessions": "Sessions",
|
|
"settingsSaved": "Settings saved.",
|
|
"sieveIntro": "Rules that sort incoming mail automatically.",
|
|
"sieveTitle": "Filters (Sieve)",
|
|
"signOut": "Sign out",
|
|
"signatureIntro": "Appended automatically to the messages you compose.",
|
|
"signaturePlaceholder": "Kind regards,\nYour name\nYour role",
|
|
"signatureSaveFailed": "Could not save the signature",
|
|
"signatureSaved": "Signature saved.",
|
|
"signatureTitle": "Email signature",
|
|
"sixDigitCode": "Six-digit code",
|
|
"startOverMfa": "Lost the entry? Start over with a new key",
|
|
"subtitle": "Two-factor authentication, filters, auto-reply and your signature.",
|
|
"title": "Settings",
|
|
"twoFactorIntro": "Protect your account with Google Authenticator, Aegis, Authy or 1Password.",
|
|
"vacationBodyLabel": "Reply message",
|
|
"vacationDefaultBody": "Thank you for your message. I am currently away and will reply when I return.",
|
|
"vacationDefaultSubject": "Out of office",
|
|
"vacationIntro": "Reply automatically to incoming mail while you are away.",
|
|
"vacationSubjectLabel": "Reply subject",
|
|
"vacationTitle": "Out-of-office auto-reply",
|
|
"valuePlaceholder": "Value to match..."
|
|
},
|
|
"ui": {
|
|
"accountStatus": "Account status",
|
|
"actions": "Actions",
|
|
"active": "Active",
|
|
"activeSessions": "Active sessions",
|
|
"actor": "Actor",
|
|
"actualRecord": "Actual value",
|
|
"allChecksPassed": "All checks passed",
|
|
"appPasswordGenerated": "App password generated",
|
|
"appPasswordsSection": "App passwords",
|
|
"attempts": "Attempts",
|
|
"bounceRate": "Bounce rate",
|
|
"ccRecipients": "Cc",
|
|
"changePassword": "Change password",
|
|
"clientIp": "Client IP",
|
|
"copyPasswordNow": "Copy it now. It is not shown again.",
|
|
"coreInfra": "Core services",
|
|
"currentPassword": "Current password",
|
|
"currentSession": "This device",
|
|
"daneVerified": "DANE verified",
|
|
"destination": "Destination",
|
|
"diskUsed": "Storage used",
|
|
"dkimAlignment": "DKIM alignment",
|
|
"dkimResult": "DKIM",
|
|
"dmarcEnforcement": "DMARC policy",
|
|
"domainVerification": "Domain verification",
|
|
"domainsVerified": "Domains verified",
|
|
"emailAddress": "Email address",
|
|
"eventAction": "Action",
|
|
"expectedValue": "Expected value",
|
|
"healthy": "Healthy",
|
|
"imapEngine": "IMAP service",
|
|
"inboundVolume": "Received (24h)",
|
|
"jobId": "Job",
|
|
"lastError": "Last error",
|
|
"liveMetrics": "Live metrics",
|
|
"localDisk": "Local disk",
|
|
"mailboxesActive": "Active mailboxes",
|
|
"messageBody": "Message",
|
|
"messageVolume": "Messages",
|
|
"newPassword": "New password",
|
|
"noAppPasswords": "No app passwords yet.",
|
|
"noData": "No data yet",
|
|
"online": "Online",
|
|
"outboundDelivered": "Sent (24h)",
|
|
"passwordChanged": "Password changed.",
|
|
"postgresRunner": "Postgres-backed queue",
|
|
"preflightTitle": "Readiness",
|
|
"provisionMailbox": "Create mailbox",
|
|
"queueDepth": "Queue depth",
|
|
"recipient": "Recipient",
|
|
"recordName": "Record",
|
|
"reportingOrg": "Reporting organisation",
|
|
"scanners": "Spam and virus scanning",
|
|
"sender": "Sender",
|
|
"signOutOthers": "Sign out other devices",
|
|
"smtpListener": "SMTP service",
|
|
"sourceIp": "Source IP",
|
|
"spfRatio": "SPF pass rate",
|
|
"spfResult": "SPF",
|
|
"storageQuota": "Storage quota",
|
|
"subject": "Subject",
|
|
"targetObject": "Target",
|
|
"timestamp": "Time",
|
|
"toRecipients": "To",
|
|
"toggleMenu": "Toggle menu",
|
|
"totalEvaluated": "Messages evaluated",
|
|
"twoFactorSection": "Two-factor authentication",
|
|
"watching": "Watching"
|
|
}
|
|
}
|