jcoffey-dev 8857bdac30 Sign in on the mail server's own page (OAuth with PKCE), sessions hold tokens; tenants on every edition ...

Contract C-8 and C-10: with OAUTH_CLIENT_SECRET set, sign-in goes through the
server's page and the session keeps sealed tokens, renewed before they expire,
instead of a password. Push keeps a credential that renews itself. A password
change signs the session out, since the server revokes its tokens. The mock
answers OAuth for tests and development. Eleven new strings, in all nine
catalogues.

2026-09-18 15:30:37 -07:00

..

public

Keep only the app page as the app page (#396)

2026-09-16 15:07:45 -07:00

src

Sign in on the mail server's own page (OAuth with PKCE), sessions hold tokens; tenants on every edition

2026-09-18 15:30:37 -07:00

index.html

Use American English spelling throughout

2026-09-15 11:45:58 -07:00

package.json

Precompress the bundle, validate the shell, and pass byte ranges on

2026-09-16 10:54:14 -07:00

tsconfig.json

Point the @ alias at a relative path, and drop baseUrl

2026-09-10 07:57:57 -07:00

vite.config.ts

Fetch the rest of a new build in the background (#394)

2026-09-16 13:29:57 -07:00