Uncategorized

• ci: do not run tests or lint on tag #2846
• Use CSRF in the admin routes also #2843
• feat: disable creation of new OAuth clients (Sign in with SimpleLogin) #2848
• Revoke trusted browsers when the second factor changes #2849
• fix: reject subdomains of SL domains in custom domain flow #2850
• ADRIPROTON-68 fix(api): return 401 when session user lacks allow-cookies header #2852
• feat: let callers pass AliasOptions to set_default_alias_domain #2853
• ADRIPROTON-62: cap unverified custom domains per user and clean them up after 5 days #2851
• introduce trigram index for email regex lookups #2854