[postfixadmin/postfixadmin] f6a29e: 4.x: enforce TOTP policy for XML-RPC login (#1137)

[Rodrigo C. C. <no...@gi...>]

  Branch: refs/heads/postfixadmin_4.0
  Home:   https://github.com/postfixadmin/postfixadmin
  Commit: f6a29e570cc1c3533ef4c948f63b91e1012d8f37
      https://github.com/postfixadmin/postfixadmin/commit/f6a29e570cc1c3533ef4c948f63b91e1012d8f37
  Author: Rodrigo Cortés Cano <384...@us...>
  Date:   2026-09-02 (Wed, 02 Sep 2026)

  Changed paths:
    M config.inc.php
    M model/TotpPf.php
    M public/xmlrpc.php
    M tests/TotpPfTest.php

  Log Message:
  -----------
  4.x: enforce TOTP policy for XML-RPC login (#1137)

Reject password-only XML-RPC authentication for mailbox accounts that require TOTP while preserving existing behavior for accounts without TOTP.

This ports PR #1131 with PHP 7.4 compatibility and includes the documented XML-RPC/TOTP limitation requested during master review.

Refs #1128

thanks @TrapoSAMA



To unsubscribe from these emails, change your notification settings at https://github.com/postfixadmin/postfixadmin/settings/notifications