git subrepo commit (merge) mailcow/src/mailcow-dockerized
subrepo: subdir: "mailcow/src/mailcow-dockerized"
merged: "c7b1dc37"
upstream: origin: "https://github.com/mailcow/mailcow-dockerized.git"
branch: "master"
commit: "a366494c"
git-subrepo: version: "0.4.6"
origin: "???"
commit: "???"
Change-Id: Id574ecd4e02e3c4fbf8a1efd49be11c0b6d19a3f
diff --git a/mailcow/src/mailcow-dockerized/data/web/api/openapi.yaml b/mailcow/src/mailcow-dockerized/data/web/api/openapi.yaml
index 6310aa5..18e8093 100644
--- a/mailcow/src/mailcow-dockerized/data/web/api/openapi.yaml
+++ b/mailcow/src/mailcow-dockerized/data/web/api/openapi.yaml
@@ -1,4 +1,4 @@
-openapi: 3.0.0
+openapi: 3.1.0
info:
description: >-
mailcow is complete e-mailing solution with advanced antispam, antivirus,
@@ -699,6 +699,38 @@
type: string
type: object
summary: Create Domain Admin user
+ /api/v1/add/sso/domain-admin:
+ post:
+ responses:
+ "401":
+ $ref: "#/components/responses/Unauthorized"
+ "200":
+ content:
+ application/json:
+ examples:
+ response:
+ value:
+ token: "591F6D-5C3DD2-7455CD-DAF1C1-AA4FCC"
+ description: OK
+ headers: { }
+ tags:
+ - Single Sign-On
+ description: >-
+ Using this endpoint you can issue a token for Domain Admin user. This token can be used for
+ autologin Domain Admin user by using query_string var sso_token={token}. Token expiration time is 30s
+ operationId: Issue Domain Admin SSO token
+ requestBody:
+ content:
+ application/json:
+ schema:
+ example:
+ username: testadmin
+ properties:
+ username:
+ description: the username for the admin user
+ type: object
+ type: object
+ summary: Issue Domain Admin SSO token
/api/v1/edit/da-acl:
post:
responses:
@@ -2993,7 +3025,7 @@
application/json:
schema:
type: array
- items:
+ items:
type: object
properties:
log:
@@ -3144,8 +3176,10 @@
example:
attr:
ban_time: "86400"
+ ban_time_increment: "1"
blacklist: "10.100.6.5/32,10.100.8.4/32"
max_attempts: "5"
+ max_ban_time: "86400"
netban_ipv4: "24"
netban_ipv6: "64"
retry_window: "600"
@@ -3159,11 +3193,17 @@
description: the backlisted ips or hostnames separated by comma
type: string
ban_time:
- description: the time a ip should be banned
+ description: the time an ip should be banned
type: number
+ ban_time_increment:
+ description: if the time of the ban should increase each time
+ type: boolean
max_attempts:
description: the maximum numbe of wrong logins before a ip is banned
type: number
+ max_ban_time:
+ description: the maximum time an ip should be banned
+ type: number
netban_ipv4:
description: the networks mask to ban for ipv4
type: number
@@ -4081,10 +4121,12 @@
response:
value:
ban_time: 604800
+ ban_time_increment: 1
blacklist: |-
45.82.153.37/32
92.118.38.52/32
max_attempts: 1
+ max_ban_time: 604800
netban_ipv4: 32
netban_ipv6: 128
perm_bans:
@@ -5560,6 +5602,50 @@
description: You can list all mailboxes existing in system for a specific domain.
operationId: Get mailboxes of a domain
summary: Get mailboxes of a domain
+ /api/v1/edit/cors:
+ post:
+ responses:
+ "401":
+ $ref: "#/components/responses/Unauthorized"
+ "200":
+ content:
+ application/json:
+ examples:
+ response:
+ value:
+ - type: "success"
+ log: ["cors", "edit", {"allowed_origins": ["*", "mail.mailcow.tld"], "allowed_methods": ["POST", "GET", "DELETE", "PUT"]}]
+ msg: "cors_headers_edited"
+ description: OK
+ headers: { }
+ tags:
+ - Cross-Origin Resource Sharing (CORS)
+ description: >-
+ This endpoint allows you to manage Cross-Origin Resource Sharing (CORS) settings for the API.
+ CORS is a security feature implemented by web browsers to prevent unauthorized cross-origin requests.
+ By editing the CORS settings, you can specify which domains and which methods are permitted to access the API resources from outside the mailcow domain.
+ operationId: Edit Cross-Origin Resource Sharing (CORS) settings
+ requestBody:
+ content:
+ application/json:
+ schema:
+ example:
+ attr:
+ allowed_origins: ["*", "mail.mailcow.tld"]
+ allowed_methods: ["POST", "GET", "DELETE", "PUT"]
+ properties:
+ attr:
+ type: object
+ properties:
+ allowed_origins:
+ type: array
+ items:
+ type: string
+ allowed_methods:
+ type: array
+ items:
+ type: string
+ summary: Edit Cross-Origin Resource Sharing (CORS) settings
tags:
- name: Domains
@@ -5586,6 +5672,8 @@
description: Manage DKIM keys
- name: Domain admin
description: Create or udpdate domain admin users
+ - name: Single Sign-On
+ description: Issue tokens for users
- name: Address Rewriting
description: Create BCC maps or recipient maps
- name: Outgoing TLS Policy Map Overrides
@@ -5602,3 +5690,5 @@
description: Get the status of your cow
- name: Ratelimits
description: Edit domain ratelimits
+ - name: Cross-Origin Resource Sharing (CORS)
+ description: Manage Cross-Origin Resource Sharing (CORS) settings