Kolab Groupware OBS

roundcubemail.spec Changed

@@ -48,15 +48,16 @@
 %global logdir /var/log/roundcubemail
 %global tmpdir /var/lib/roundcubemail
 
-%global rc_version 1.5.3
+%global rc_version 1.5
 %global plugin_version 3.5.11
 %global skin_version 0.5.0
 #%%global rc_rel_suffix rc2.12
 %global dot_rel_suffix %{?rc_rel_suffix:.%{rc_rel_suffix}}
 %global dash_rel_suffix %{?rc_rel_suffix:-%{rc_rel_suffix}}
+%global basedir %{name}-%{rc_version}%{?dash_rel_suffix}
 
 Name:           roundcubemail
-Version:        %{rc_version}
+Version:        %{rc_version}.4
 
 Release:        4%{?dot_rel_suffix}%{?dist}
 
@@ -66,7 +67,7 @@
 License:        GPLv2
 URL:            http://www.roundcube.net
 
-Source0:        roundcubemail-%{version}%{?dash_rel_suffix}.tar.gz
+Source0:        roundcubemail-%{rc_version}.tar.gz
 
 Source20:       roundcubemail.conf
 Source21:       roundcubemail.logrotate
@@ -283,9 +284,9 @@
 Roundcube Webmail for Kolab
 
 %prep
-%setup -q -c "%{name}-%{version}%{?dash_rel_suffix}"
+%setup -q -c "%{basedir}"
 
-pushd %{name}-%{version}%{?dash_rel_suffix}
+pushd %{basedir}
 
 cp -vf "%{SOURCE200}" SQL/mysql/
 rm -rvf SQL/mysql/2016081200.sql
@@ -351,9 +352,9 @@
 rm -rf plugins/password/helpers/chpass-wrapper.py
 popd
 
-cp -a %{name}-%{version}%{?dash_rel_suffix}/{CHANGELOG.md,LICENSE,README.md} .
+cp -a %{basedir}/{CHANGELOG.md,LICENSE,README.md} .
 
-rm -rf %{name}-%{version}%{?dash_rel_suffix}/plugins/jqueryui/themes/redmond
+rm -rf %{basedir}/plugins/jqueryui/themes/redmond
 
 
 %build
@@ -372,7 +373,7 @@
     %{buildroot}%{tmpdir}/plugins \
     %{buildroot}%{tmpdir}/plugins/enigma
 
-pushd %{name}-%{version}%{?dash_rel_suffix}
+pushd %{basedir}
 
 %if 0%{?plesk} < 1
 %{__install} -pm 644 %SOURCE20 %{buildroot}%{_ap_sysconfdir}/conf.d
@@ -421,8 +422,8 @@
 
 %{__mkdir_p} ${asset_path}
 
-orig_dir="%{name}-%{version}%{?dash_rel_suffix}"
-asset_dir="%{name}-%{version}%{?dash_rel_suffix}$(echo ${asset_path} | %{__sed} -e 's|%{buildroot}%{datadir}||g')"
+orig_dir="%{basedir}"
+asset_dir="%{basedir}$(echo ${asset_path} | %{__sed} -e 's|%{buildroot}%{datadir}||g')"
 
 # Remove the skins and installer directories from ${orig_dir}
 #TODO?
@@ -492,7 +493,7 @@
 
 
 %check
-pushd %{name}-%{version}%{?dash_rel_suffix}/tests
+pushd %{basedir}/tests
 phpunit --debug || :
 popd
 
@@ -566,42 +567,29 @@
 # Process all sql updates (requires the php-mysqlnd package for the pdo driver for the system php)
 ${php} %{_datadir}/roundcubemail/bin/updatedb.sh \
     --dir %{_datadir}/doc/roundcubemail-%{version}/SQL/ \
-    --package roundcube || : \
-    >/dev/null 2>&1
+    --package roundcube || :
 %else
 php="/usr/bin/php"
 ${php} %{_datadir}/roundcubemail/bin/updatedb.sh \
     --dir %{_datadir}/doc/roundcubemail/SQL/ \
-    --package roundcube || : \
-    >/dev/null 2>&1
+    --package roundcube || :
 %endif
 
+${php} %{_datadir}/roundcubemail/bin/updatedb.sh \
+    --dir %{_datadir}/roundcubemail/plugins/libkolab/SQL/ \
+    --package libkolab || :
 
-for plugin in $(find /usr/share/roundcubemail/plugins -mindepth 1 -maxdepth 1 -type d | sort); do
-    if  ! -z "$(find ${plugin} -type d -name SQL)" ; then
-        for dir in $(find /usr/share/roundcubemail/plugins/$(basename ${plugin})/ -type d -name SQL); do
-            # Skip plugins with multiple drivers and no kolab driver
-            if  ! -z "$(echo $dir | grep driver)" ; then
-                if  -z "$(echo $dir | grep kolab)" ; then
-                    continue
-                fi
-            fi
-
-            ${php} %{_datadir}/roundcubemail/bin/updatedb.sh \
-                --dir $dir \
-                --package $(basename ${plugin}) \
-                >/dev/null 2>&1 || :
-        done
-    fi
-done
+${php} %{_datadir}/roundcubemail/bin/updatedb.sh \
+    --dir %{_datadir}/roundcubemail/plugins/calendar/drivers/kolab/SQL/ \
+    --package calendar-kolab || :
 
 exit 0
 
 %files
 %defattr(-,root,root,-)
-%doc %{name}-%{version}%{?dash_rel_suffix}/LICENSE
-%doc %{name}-%{version}%{?dash_rel_suffix}/UPGRADING
-%doc %{name}-%{version}%{?dash_rel_suffix}/SQL
+%doc %{basedir}/LICENSE
+%doc %{basedir}/UPGRADING
+%doc %{basedir}/SQL
 
 %{_datadir}/%{name}/
 %{_sharedstatedir}/%{name}/

buildroundcubemailtarball.sh Changed

@@ -3,8 +3,8 @@
 set -e
 set -x
 
-VERSION=1.5.3
-GIT_REF=dev/kolab-1.5
+VERSION=1.5
+GIT_REF=dev/kolab-$VERSION
 PLUGINS_GIT_REF=master
 NAME=roundcubemail-$VERSION
 source buildroundcubemailtarball.config
@@ -139,6 +139,34 @@
             }
         },
         {
+            "type": "path",
+            "url": "$PWD/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "$PWD/roundcubemail-plugins-kolab-latest/plugins/logon_page",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "$PWD/roundcubemail-plugins-kolab-latest/plugins/nextcloud_link",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "$PWD/roundcubemail-plugins-kolab-latest/plugins/kolab_sso",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
             "type": "composer",
             "url": "https://plugins.roundcube.net"
         }
@@ -172,6 +200,10 @@
         "kolab/odfviewer": "~3.4.0",
         "kolab/pdfviewer": "~3.4.0",
         "kolab/tasklist": "~3.5.10",
+        "kolab/kolab_2fa": "~3.5.11",
+        "kolab/kolab_sso": "~3.5.4",
+        "kolab/logon_page": "~3.4.2",
+        "kolab/nextcloud_link": "~1.0",
         "johndoh/contextmenu": "~3.2.1",
         "zf1/zend-json": "~1.12.11",
         "zf1/zend-log": "~1.12.11",

debian.changelog Changed

roundcubemail-1.5.3.tar.gz/CHANGELOG.md -> roundcubemail-1.5.tar.gz/CHANGELOG.md Changed

roundcubemail-1.5.3.tar.gz/bin/updatedb.sh -> roundcubemail-1.5.tar.gz/bin/updatedb.sh Changed

roundcubemail-1.5.3.tar.gz/composer.json -> roundcubemail-1.5.tar.gz/composer.json Changed

@@ -10,112 +10,140 @@
     "repositories": 
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_addressbook",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_addressbook",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_auth",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_auth",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_config",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_config",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_delegation",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_delegation",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_files",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_files",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_folders",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_folders",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_notes",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_notes",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_tags",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_tags",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_chat",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_chat",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/odfviewer",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/odfviewer",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/pdfviewer",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/pdfviewer",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/tasklist",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/tasklist",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/calendar",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/calendar",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/libcalendaring",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/libcalendaring",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/libkolab",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/libkolab",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/logon_page",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/nextcloud_link",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_sso",
             "options": {
                 "symlink": false
             }
@@ -154,6 +182,10 @@
         "kolab/odfviewer": "~3.4.0",
         "kolab/pdfviewer": "~3.4.0",
         "kolab/tasklist": "~3.5.10",
+        "kolab/kolab_2fa": "~3.5.11",
+        "kolab/kolab_sso": "~3.5.4",
+        "kolab/logon_page": "~3.4.2",
+        "kolab/nextcloud_link": "~1.0",
         "johndoh/contextmenu": "~3.2.1",
         "zf1/zend-json": "~1.12.11",
         "zf1/zend-log": "~1.12.11",

roundcubemail-1.5.3.tar.gz/composer.lock -> roundcubemail-1.5.tar.gz/composer.lock Changed

@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ,
-    "content-hash": "13f0998cd1e11000c55bf173b95c57b7",
+    "content-hash": "40398d947556f0b4fed19d61bfd005b6",
     "packages": 
         {
             "name": "caxy/php-htmldiff",
@@ -67,6 +67,65 @@
             "time": "2019-02-20T18:52:14+00:00"
         },
         {
+            "name": "christian-riesen/base32",
+            "version": "1.6.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ChristianRiesen/base32.git",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ChristianRiesen/base32/zipball/2e82dab3baa008e24a505649b0d583c31d31e894",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "require-dev": {
+                "friendsofphp/php-cs-fixer": "^2.17",
+                "phpstan/phpstan": "^0.12",
+                "phpunit/phpunit": "^8.5.13 || ^9.5"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Base32\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Christian Riesen",
+                    "email": "chris.riesen@gmail.com",
+                    "homepage": "http://christianriesen.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Base32 encoder/decoder according to RFC 4648",
+            "homepage": "https://github.com/ChristianRiesen/base32",
+            "keywords": 
+                "base32",
+                "decode",
+                "encode",
+                "rfc4648"
+            ,
+            "support": {
+                "issues": "https://github.com/ChristianRiesen/base32/issues",
+                "source": "https://github.com/ChristianRiesen/base32/tree/1.6.0"
+            },
+            "time": "2021-02-26T10:19:33+00:00"
+        },
+        {
             "name": "endroid/qr-code",
             "version": "1.6.6",
             "source": {
@@ -121,6 +180,59 @@
             "time": "2016-05-29T07:37:18+00:00"
         },
         {
+            "name": "enygma/yubikey",
+            "version": "3.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/enygma/yubikey.git",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/enygma/yubikey/zipball/2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.1"
+            },
+            "require-dev": {
+                "codeclimate/php-test-reporter": "dev-master",
+                "phpunit/phpunit": "4.3.2"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-0": {
+                    "Yubikey": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Chris Cornutt",
+                    "email": "ccornutt@phpdeveloper.org",
+                    "homepage": "http://www.phpdeveloper.org/"
+                }
+            ,
+            "description": "PHP library to interface with the Yubikey REST API",
+            "homepage": "https://github.com/enygma/yubikey.git",
+            "keywords": 
+                "api",
+                "rest",
+                "twofactor",
+                "yubico",
+                "yubikey"
+            ,
+            "support": {
+                "issues": "https://github.com/enygma/yubikey/issues",
+                "source": "https://github.com/enygma/yubikey/tree/master"
+            },
+            "time": "2018-03-08T20:38:39+00:00"
+        },
+        {
             "name": "ezyang/htmlpurifier",
             "version": "v4.16.0",
             "source": {
@@ -533,7 +645,7 @@
             "version": "3.5.11",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/calendar",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/calendar",
                 "reference": "bcca59cdaa6cf7b2109eac32685bb750425c305e"
             },
             "require": {
@@ -572,11 +684,49 @@
             }
         },
         {
+            "name": "kolab/kolab_2fa",
+            "version": "3.5.11",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+                "reference": "ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e"
+            },
+            "require": {
+                "endroid/qr-code": "~1.6.5",
+                "enygma/yubikey": "~3.2",
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3",
+                "spomky-labs/otphp": "~5.0.0"
+            },
+            "type": "roundcube-plugin",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Thomas Bruederli",
+                    "email": "bruederli@kolabsys.com",
+                    "role": "Lead"
+                },
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Kolab 2-Factor Authentication",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            }
+        },
+        {
             "name": "kolab/kolab_activesync",
             "version": "3.5.6",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
                 "reference": "7e8c46290074fe6c1ab72bc9f6b90aa271ee16ef"
             },
             "require": {
@@ -612,7 +762,7 @@
             "version": "3.5.10",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_addressbook",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_addressbook",
                 "reference": "45572ac8d5cc1b6ead5a59aa4a065d338c3fcb66"
             },
             "require": {
@@ -648,7 +798,7 @@
             "version": "3.5.8",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_auth",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_auth",
                 "reference": "ab0ed459f74a03f8eab6822652e084f0430a4f07"
             },
             "require": {
@@ -684,7 +834,7 @@
             "version": "3.5.4",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_chat",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_chat",
                 "reference": "b2f85fcb8324b9961dd02fb3e3acd92be33b558e"
             },
             "require": {
@@ -715,7 +865,7 @@
             "version": "3.4.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_config",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_config",
                 "reference": "b31a76c1700679249fc222c46582ecbd1215f117"
             },
             "require": {
@@ -746,7 +896,7 @@
             "version": "3.5.11",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_delegation",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_delegation",
                 "reference": "9fd01ca88c10959bea6742b9855979da8f79834f"
             },
             "require": {
@@ -778,7 +928,7 @@
             "version": "3.5.2",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_files",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_files",
                 "reference": "0439d3783b59d6e52f23e86046881fd0ca8c0bd5"
             },
             "require": {
@@ -809,7 +959,7 @@
             "version": "3.5.2",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_folders",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_folders",
                 "reference": "c70560fcfe40bf1582ea79debf3ae2aebbe94688"
             },
             "require": {
@@ -840,7 +990,7 @@
             "version": "3.5.5",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_notes",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_notes",
                 "reference": "07297b8ea8b3827d0ba46801760854b0db560576"
             },
             "require": {
@@ -872,11 +1022,43 @@
             }
         },
         {
+            "name": "kolab/kolab_sso",
+            "version": "3.5.4",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_sso",
+                "reference": "a15ea62c786c8ffa4bb6fe27cbb7d4de7f193917"
+            },
+            "require": {
+                "kolab/libkolab": ">=3.4.0",
+                "pear/http_request2": "~2.5.0",
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Lead"
+                }
+            ,
+            "description": "Single Sign On for Kolab",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            }
+        },
+        {
             "name": "kolab/kolab_tags",
             "version": "3.5.2",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_tags",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_tags",
                 "reference": "62ffa5279d9f351941be6b23b0d0478aeff91bfd"
             },
             "require": {
@@ -907,7 +1089,7 @@
             "version": "3.5.11",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/libcalendaring",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/libcalendaring",
                 "reference": "cd512d567ce2af09863960878d72f79e1f7ffd74"
             },
             "require": {
@@ -943,7 +1125,7 @@
             "version": "3.5.11",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/libkolab",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/libkolab",
                 "reference": "30bad7150f1999a5a2a0d33c9bcd490514a4a307"
             },
             "require": {
@@ -977,6 +1159,36 @@
             }
         },
         {
+            "name": "kolab/logon_page",
+            "version": "3.4.2",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/logon_page",
+                "reference": "262a87c48721ba04a581eb5c1f8dcfd44a565993"
+            },
+            "require": {
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Lead"
+                }
+            ,
+            "description": "Logon screen additions",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            }
+        },
+        {
             "name": "kolab/net_ldap3",
             "version": "v1.1.4",
             "source": {
@@ -1031,11 +1243,46 @@
             "time": "2021-11-11T09:02:56+00:00"
         },
         {
+            "name": "kolab/nextcloud_link",
+            "version": "1.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/nextcloud_link",
+                "reference": "f00215f711dc4d376fb667d0d97c238c0b9e791f"
+            },
+            "require": {
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "extra": {
+                "roundcube": {
+                    "min-version": "1.4.0"
+                }
+            },
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@apheleia-it.ch",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Adds a link to Nextcloud in the task menu",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            }
+        },
+        {
             "name": "kolab/odfviewer",
             "version": "3.4.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/odfviewer",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/odfviewer",
                 "reference": "43f3c0cf314cb818f9bc96d6bd378793e22a4ed4"
             },
             "require": {
@@ -1065,7 +1312,7 @@
             "version": "3.4.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/pdfviewer",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/pdfviewer",
                 "reference": "3437085223a60d929fbf076c232008e4377407c1"
             },
             "require": {
@@ -1095,7 +1342,7 @@
             "version": "3.5.10",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/tasklist",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/tasklist",
                 "reference": "f0f524d2443404c86efaa43fdb72fbe1a9f0acc6"
             },
             "require": {
@@ -2774,6 +3021,67 @@
             "time": "2023-03-28T19:45:54+00:00"
         },
         {
+            "name": "spomky-labs/otphp",
+            "version": "v5.0.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/Spomky-Labs/otphp.git",
+                "reference": "ada44930d9d85be1480123eca418c8c24e9a1f96"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/Spomky-Labs/otphp/zipball/ada44930d9d85be1480123eca418c8c24e9a1f96",
+                "reference": "ada44930d9d85be1480123eca418c8c24e9a1f96",
+                "shasum": ""
+            },
+            "require": {
+                "christian-riesen/base32": "~1.1",
+                "php": ">=5.3.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "~4.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.0.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "OTPHP\\": "lib/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Florent Morselli",
+                    "homepage": "https://github.com/Spomky"
+                },
+                {
+                    "name": "All contributors",
+                    "homepage": "https://github.com/Spomky-Labs/otphp/contributors"
+                }
+            ,
+            "description": "PHP OTP Library compatible with Google Authenticator",
+            "homepage": "https://github.com/Spomky-Labs/otphp",
+            "keywords": 
+                "RFC 4226",
+                "RFC 6238",
+                "hotp",
+                "otp",
+                "totp"
+            ,
+            "support": {
+                "issues": "https://github.com/Spomky-Labs/otphp/issues",
+                "source": "https://github.com/Spomky-Labs/otphp/tree/v5.0.1"
+            },
+            "time": "2015-06-26T11:44:37+00:00"
+        },
+        {
             "name": "symfony/polyfill-intl-idn",
             "version": "v1.27.0",
             "source": {
@@ -4069,16 +4377,16 @@
         },
         {
             "name": "phpstan/phpstan",
-            "version": "1.10.15",
+            "version": "1.10.18",
             "source": {
                 "type": "git",
                 "url": "https://github.com/phpstan/phpstan.git",
-                "reference": "762c4dac4da6f8756eebb80e528c3a47855da9bd"
+                "reference": "52b6416c579663eebdd2f1d97df21971daf3b43f"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/762c4dac4da6f8756eebb80e528c3a47855da9bd",
-                "reference": "762c4dac4da6f8756eebb80e528c3a47855da9bd",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/52b6416c579663eebdd2f1d97df21971daf3b43f",
+                "reference": "52b6416c579663eebdd2f1d97df21971daf3b43f",
                 "shasum": ""
             },
             "require": {
@@ -4127,7 +4435,7 @@
                     "type": "tidelift"
                 }
             ,
-            "time": "2023-05-09T15:28:01+00:00"
+            "time": "2023-06-07T22:00:43+00:00"
         },
         {
             "name": "phpunit/php-code-coverage",

roundcubemail-1.5.3.tar.gz/node_modules/.package-lock.json -> roundcubemail-1.5.tar.gz/node_modules/.package-lock.json Changed

roundcubemail-1.5.3.tar.gz/package-lock.json -> roundcubemail-1.5.tar.gz/package-lock.json Changed

roundcubemail-1.5.3.tar.gz/plugins/acl/acl.php -> roundcubemail-1.5.tar.gz/plugins/acl/acl.php Changed

roundcubemail-1.5.3.tar.gz/plugins/calendar/drivers/kolab/kolab_calendar.php -> roundcubemail-1.5.tar.gz/plugins/calendar/drivers/kolab/kolab_calendar.php Changed

roundcubemail-1.5.3.tar.gz/plugins/calendar/localization/en_US.inc -> roundcubemail-1.5.tar.gz/plugins/calendar/localization/en_US.inc Changed

@@ -208,6 +208,10 @@
 $labels'itipmailbodydelegated' = "\$sender has delegated the participation in the following event:\n\n*\$title*\n\nWhen: \$date";
 $labels'itipmailbodydelegatedto' = "\$sender has delegated the participation in the following event to you:\n\n*\$title*\n\nWhen: \$date";
 
+$labels'itipmailbodyresourceaccepted' = "\$sender has accepted the following resource booking:\n\n*\$title*\n\nWhen: \$date\n\nInvitees: \$attendees";
+$labels'itipmailbodyresourcetentative' = "\$sender has tentatively accepted the following resource booking:\n\n*\$title*\n\nWhen: \$date\n\nInvitees: \$attendees";
+$labels'itipmailbodyresourcedeclined' = "\$sender has declined the the following resource booking:\n\n*\$title*\n\nWhen: \$date\n\nInvitees: \$attendees";
+
 $labels'itipdeclineevent' = 'Do you want to decline your invitation to this event?';
 $labels'declinedeleteconfirm' = 'Do you also want to delete this declined event from your calendar?';
 $labels'itipcomment' = 'Invitation/notification comment';
@@ -318,4 +322,9 @@
 $labels'arialabelresourceselection' = 'Available resources';
 $labels'arialabeleventform' = 'Event editing form';
 
+// Nextcloud Talk integration
+$labels'createtalkroom' = 'Create Talk room';
+$labels'talkroomcreating' = 'Creating a Talk room for the event...';
+$labels'talkroomcreateerror' = 'Failed to create a Talk room.';
+$labels'talkroomname' = 'Room for an event';
 ?>

roundcubemail-1.5.tar.gz/plugins/kolab_2fa Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/README.md Added

@@ -0,0 +1,113 @@
+Kolab Multi-Factor Authentication Plugin
+========================================
+
+The plugin is designed to be a generic container for different 2nd factor 
+authentication mechanisms paired with different ways to store the related 
+data for Roundcube user accounts. Both drivers and storage backends are derived 
+from abstract classes which define the common interface and are configurable.
+
+Drivers
+-------
+
+Multiple methods for 2nd factor authentication can be enabled for the users 
+to select from. The basic implementation covers TOTP, HOTP and Yubikey methods.
+
+TOTP (RFC 6238) and HOTP (RFC 4226) can be used in conjunction with freely available 
+mobile phone apps like FreeOTP (TOTP only!) or Google Authenticator. To provision 
+the app with your account settings, a QR code is displayed which can be scanned 
+with the mobile phone camera.
+
+The Yubikey driver uses the Yubico Validation Service either by using the public 
+YubiCloud API or another locally hosted verification server. The host(s) to use 
+for validation are configurable.
+
+
+Storage Backends
+----------------
+
+Some authentication methods require to store secret data per user account on the 
+server. For this, one of different storage backends can be selected:
+
+**Roundcube**
+
+The simplest way is to store authentication secrets and configuration in the 
+user preferences of Roundcube itself.
+
+**LDAP**
+
+For an external storage option, the LDAP module can be used. This keeps the 
+authentication data separated from the Roundcube user database. See //LDAP Storage// 
+below for more information. The LDAP connection parameters are defined through the 
+`kolab_2fa_storage_config` config option.
+
+
+Installation
+------------
+
+After placing the plugin contents into Roundcube's plugins directory, the 3rd party 
+libraries need to be installed using Composer:
+
+```
+$ composer require "endroid/qrcode" "~1.5.0" --no-update
+$ composer require "spomky-labs/otphp" "~5.0.0" --no-update
+$ composer require "enygma/yubikey" "~3.2"
+```
+
+See the `composer.json` file for the actual module names and versions.
+
+
+Configuration
+-------------
+
+Copy the sample `config.inc.php.dist` file into `config.inc.php` and adjust the 
+settings according to your desired setup. All options are described with inline 
+comments directly in the sample file.
+
+When using the LDAP storage together with a Kolab installation, you may want to save 
+an additional LDAP lookup for authentication factors on every login, the LDAP driver 
+can assign roles to the user record when registering authentication factors
+(see `user_roles` storage config option). With the following additions to the 
+`kolab_auth` plugin config, these roles can be used to determine whether the user 
+has multi-factor authentication enabled:
+
+```
+// Disable lokkups by default:
+$config'kolab_2fa_check' = false;
+
+// Enable 2nd factor lookup on a role-by-role basis
+$config'kolab_auth_role_settings' = array(
+    'cn=totp-user,dc=example,dc=org' => array(
+        'kolab_2fa_check' => array(
+            'mode' => 'override',
+            'value' => true,
+        ),
+    ),
+);
+```
+
+LDAP Storage
+------------
+
+Define an `organizationalunit` with DN `ou=Tokens,dc=example,dc=org` to store 
+all authentication tokens.
+
+For token records, the https://git.fedorahosted.org/cgit/freeipa.git/tree/install/share/70ipaotp.ldif | FreeIPA OTP schema 
+can be used. Please install this schema in your Kolab LDAP directory.
+
+This is an example record for a TOTP token registered to user doe@example.org:
+
+```
+dn: ipatokenUniqueID=totp:c4a1ced768a0da55df662e73,ou=Tokens,dc=example,dc=org
+objectClass: top
+objectClass: ipaToken
+objectClass: ipatokenTOTP
+objectClass: ldapSubEntry
+cn: Mobile App (TOTP)
+ipatokenUniqueID: totp:c4a1ced768a0da55df662e73
+ipatokenOwner: uid=doe,ou=People,dc=example,dc=org
+ipatokenNotBefore: 201506110211Z
+ipatokenOTPkey: 4T5CI7SOKWYQ5JTM
+ipatokenDisabled: TRUE
+```
+
+

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/composer.json Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/config.inc.php Added

@@ -0,0 +1,125 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin configuration
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+// available methods/providers. Supported methods are: 'totp','hotp','yubikey'
+$config'kolab_2fa_drivers' = array('totp');
+
+// backend for storing 2-factor-auth related per-user settings
+// available backends are: 'roundcube', 'ldap', 'sql'
+$config'kolab_2fa_storage' = 'roundcube';
+
+// additional config options for the above storage backend
+// here an example for the LDAP backend:
+$config'kolab_2fa_storage_config' = array(
+    'debug'     => false,
+    'hosts'     => array('localhost'),
+    'port'      => 389,
+    'bind_dn'   => 'uid=kolab-auth-service,ou=Special Users,dc=example,dc=org',
+    'bind_pass' => 'Welcome2KolabSystems',
+    'base_dn'   => 'ou=Tokens,dc=example,dc=org',
+    // filter used to list stored factors for a user
+    'filter'    => '(&(objectClass=ipaToken)(objectclass=ldapSubEntry)(ipatokenOwner=%fu))',
+    'scope'     => 'sub',
+    // translates driver properties to LDAP attributes
+    'fieldmap'  => array(
+        'label'    => 'cn',
+        'id'       => 'ipatokenUniqueID',
+        'active'   => 'ipatokenDisabled',
+        'created'  => 'ipatokenNotBefore',
+        'userdn'   => 'ipatokenOwner',
+        'secret'   => 'ipatokenOTPkey',
+        // HOTP attributes
+        'counter'  => 'ipatokenHOTPcounter',
+        'digest'   => 'ipatokenOTPalgorithm',
+        'digits'   => 'ipatokenOTPdigits',
+    ),
+    // LDAP object classes derived from factor IDs (prefix)
+    // will be translated into the %c placeholder
+    'classmap' => array(
+        'totp:' => 'ipatokenTOTP',
+        'hotp:' => 'ipatokenHOTP',
+        '*'     => 'ipaToken',
+    ),
+    // translates property values into LDAP attribute values and vice versa
+    'valuemap' => array(
+        'active' => array(
+            false   => 'TRUE',
+            true    => 'FALSE',
+        ),
+    ),
+    // specify non-string data types for properties for implicit conversion
+    'attrtypes' => array(
+        'created' => 'datetime',
+        'counter' => 'integer',
+        'digits'  => 'integer',
+    ),
+    // apply these default values to factor records if not specified by the drivers
+    'defaults' => array(
+        'active' => false,
+        // these are required for ipatokenHOTP records and should match the kolab_2fa_hotp parameters
+        'digest' => 'sha1',
+        'digits' => 6,
+    ),
+    // use this LDAP attribute to compose DN values for factor entries
+    'rdn'       => 'ipatokenUniqueID',
+    // assign these object classes to new factor entries
+    'objectclass' => array(
+        'top',
+        'ipaToken',
+        '%c',
+        'ldapSubEntry',
+    ),
+    // add these roles to the user's LDAP record if key prefix-matches a factor entry
+    'user_roles' => array(
+        'totp:' => 'cn=totp-user,dc=example,dc=org',
+        'hotp:' => 'cn=hotp-user,dc=example,dc=org',
+    ),
+);
+
+// force a lookup for active authentication factors for this user.
+// to be set by another plugin (e.g. kolab_auth based on LDAP roles)
+// $config'kolab_2fa_check' = true;
+
+// timeout for 2nd factor auth submission (in seconds)
+$config'kolab_2fa_timeout' = 120;
+
+// configuration parameters for TOTP (uncomment to adjust)
+$config'kolab_2fa_totp' = array(
+    // 'digits'   => 6,
+    // 'interval' => 30,
+    // 'digest'   => 'sha1',
+    // 'issuer'   => 'Roundcube',
+);
+
+// configuration parameters for HOTP (uncomment to adjust)
+$config'kolab_2fa_hotp' = array(
+    // 'digits' => 6,
+    // 'window' => 4,
+    // 'digest' => 'sha1',
+);
+
+// configuration parameters for Yubikey (uncomment to adjust)
+$config'kolab_2fa_yubikey' = array(
+    'clientid' => '123456',
+    'apikey' => '<your-server-api-key>',
+    // 'hosts'  => array('api.myhost1.com','api2.myhost.com'),
+    'use_https' => true,  // connect via https if set to true
+);
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/config.inc.php.dist Added

@@ -0,0 +1,125 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin configuration
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+// available methods/providers. Supported methods are: 'totp','hotp','yubikey'
+$config'kolab_2fa_drivers' = array('totp');
+
+// backend for storing 2-factor-auth related per-user settings
+// available backends are: 'roundcube', 'ldap', 'sql'
+$config'kolab_2fa_storage' = 'roundcube';
+
+// additional config options for the above storage backend
+// here an example for the LDAP backend:
+$config'kolab_2fa_storage_config' = array(
+    'debug'     => false,
+    'hosts'     => array('localhost'),
+    'port'      => 389,
+    'bind_dn'   => 'uid=kolab-auth-service,ou=Special Users,dc=example,dc=org',
+    'bind_pass' => 'Welcome2KolabSystems',
+    'base_dn'   => 'ou=Tokens,dc=example,dc=org',
+    // filter used to list stored factors for a user
+    'filter'    => '(&(objectClass=ipaToken)(objectclass=ldapSubEntry)(ipatokenOwner=%fu))',
+    'scope'     => 'sub',
+    // translates driver properties to LDAP attributes
+    'fieldmap'  => array(
+        'label'    => 'cn',
+        'id'       => 'ipatokenUniqueID',
+        'active'   => 'ipatokenDisabled',
+        'created'  => 'ipatokenNotBefore',
+        'userdn'   => 'ipatokenOwner',
+        'secret'   => 'ipatokenOTPkey',
+        // HOTP attributes
+        'counter'  => 'ipatokenHOTPcounter',
+        'digest'   => 'ipatokenOTPalgorithm',
+        'digits'   => 'ipatokenOTPdigits',
+    ),
+    // LDAP object classes derived from factor IDs (prefix)
+    // will be translated into the %c placeholder
+    'classmap' => array(
+        'totp:' => 'ipatokenTOTP',
+        'hotp:' => 'ipatokenHOTP',
+        '*'     => 'ipaToken',
+    ),
+    // translates property values into LDAP attribute values and vice versa
+    'valuemap' => array(
+        'active' => array(
+            false   => 'TRUE',
+            true    => 'FALSE',
+        ),
+    ),
+    // specify non-string data types for properties for implicit conversion
+    'attrtypes' => array(
+        'created' => 'datetime',
+        'counter' => 'integer',
+        'digits'  => 'integer',
+    ),
+    // apply these default values to factor records if not specified by the drivers
+    'defaults' => array(
+        'active' => false,
+        // these are required for ipatokenHOTP records and should match the kolab_2fa_hotp parameters
+        'digest' => 'sha1',
+        'digits' => 6,
+    ),
+    // use this LDAP attribute to compose DN values for factor entries
+    'rdn'       => 'ipatokenUniqueID',
+    // assign these object classes to new factor entries
+    'objectclass' => array(
+        'top',
+        'ipaToken',
+        '%c',
+        'ldapSubEntry',
+    ),
+    // add these roles to the user's LDAP record if key prefix-matches a factor entry
+    'user_roles' => array(
+        'totp:' => 'cn=totp-user,dc=example,dc=org',
+        'hotp:' => 'cn=hotp-user,dc=example,dc=org',
+    ),
+);
+
+// force a lookup for active authentication factors for this user.
+// to be set by another plugin (e.g. kolab_auth based on LDAP roles)
+// $config'kolab_2fa_check' = true;
+
+// timeout for 2nd factor auth submission (in seconds)
+$config'kolab_2fa_timeout' = 120;
+
+// configuration parameters for TOTP (uncomment to adjust)
+$config'kolab_2fa_totp' = array(
+    // 'digits'   => 6,
+    // 'interval' => 30,
+    // 'digest'   => 'sha1',
+    // 'issuer'   => 'Roundcube',
+);
+
+// configuration parameters for HOTP (uncomment to adjust)
+$config'kolab_2fa_hotp' = array(
+    // 'digits' => 6,
+    // 'window' => 4,
+    // 'digest' => 'sha1',
+);
+
+// configuration parameters for Yubikey (uncomment to adjust)
+$config'kolab_2fa_yubikey' = array(
+    'clientid' => '123456',
+    'apikey' => '<your-server-api-key>',
+    // 'hosts'  => array('api.myhost1.com','api2.myhost.com'),
+    'use_https' => true,  // connect via https if set to true
+);
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/kolab2fa.js Added

@@ -0,0 +1,367 @@
+/**
+ * Kolab 2-Factor-Authentication plugin client functions
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * @licstart  The following is the entire license notice for the
+ * JavaScript code in this page.
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ * @licend  The above is the entire license notice
+ * for the JavaScript code in this page.
+ */
+
+window.rcmail && rcmail.addEventListener('init', function(evt) {
+    var highsec_call_stack = ;
+    var highsec_dialog;
+    var factor_dialog;
+
+    if (!rcmail.env.kolab_2fa_factors) {
+        rcmail.env.kolab_2fa_factors = {};
+    }
+
+    /**
+     * Equivalend of PHP time()
+     */
+    function time() {
+        return Math.round(new Date().getTime() / 1000);
+    }
+
+    /**
+     * Render the settings UI
+     */
+    function render() {
+        var table = $('#kolab2fa-factors tbody');
+        table.html('');
+
+        var rows = 0;
+        $.each(rcmail.env.kolab_2fa_factors, function(id, props) {
+            if (props.active) {
+                var tr = $('<tr>').addClass(props.method).appendTo(table),
+                    button = $('<a class="button icon delete">').attr({href: '#', rel: id})
+                        .append($('<span class="inner">').text(rcmail.get_label('remove','kolab_2fa')));
+
+                $('<td>').addClass('name').text(props.label || props.name).appendTo(tr);
+                $('<td>').addClass('created').text(props.created || '??').appendTo(tr);
+                $('<td>').addClass('actions buttons-cell').append(button).appendTo(tr);
+                rows++;
+            }
+        });
+
+        table.parent()(rows > 0 ? 'show' : 'hide')();
+    }
+
+    /**
+     * Open dialog to add the given authentication factor
+     */
+    function add_factor(method) {
+        var lock, form = $('#kolab2fa-prop-' + method),
+            props = rcmail.env.kolab_2fa_factorsmethod;
+
+        if (form.length) {
+            form.get(0).reset();
+            form.find('img.qrcode').attr('src', 'data:image/gif;base64,R0lGODlhDwAPAIAAAMDAwAAAACH5BAEAAAAALAAAAAAPAA8AQAINhI+py+0Po5y02otnAQA7');
+            form.off('submit');
+
+            factor_dialog = rcmail.show_popup_dialog(
+                form.show(),
+                rcmail.get_label('addfactor', 'kolab_2fa'),
+                
+                    {
+                        text: rcmail.gettext('save', 'kolab_2fa'),
+                        'class': 'mainaction save',
+                        click: function(e) {
+                            save_data(method);
+                        }
+                    },
+                    {
+                        text: rcmail.gettext('cancel'),
+                        'class': 'cancel',
+                        click: function() {
+                            factor_dialog.dialog('close');
+                        }
+                    }
+                ,
+                {
+                    open: function(event, ui) {
+                        $(event.target).find('inputname="_verify_code"').keypress(function(e) {
+                            if (e.which == 13) {
+                                $(e.target).closest('.ui-dialog').find('button.mainaction').click();
+                            }
+                        });
+                    },
+                    close: function(event, ui) {
+                        form.hide().appendTo(document.body);
+                        factor_dialog = null;
+                    }
+                }
+            )
+            .data('method', method)
+            .data('timestamp', time());
+
+            form.on('submit', function(e) {
+                save_data(method);
+                return false;
+            });
+
+            // load generated data
+            lock = rcmail.set_busy(true, 'loading');
+            rcmail.http_post('plugin.kolab-2fa-data', { _method: method }, lock);
+        }
+    }
+
+    /**
+     * Remove the given factor from the account
+     */
+    function remove_factor(id) {
+        var lock = rcmail.set_busy(true, 'saving');
+        rcmail.http_post('plugin.kolab-2fa-save', { _method: id, _data: 'false' }, lock);
+    }
+
+    /**
+     * Submit factor settings form
+     */
+    function save_data(method) {
+        var lock, data, form = $('#kolab2fa-prop-' + method),
+            verify = form.find('inputname="_verify_code"');
+
+        if (verify.length && !verify.val().length) {
+            alert(rcmail.get_label('verifycodemissing','kolab_2fa'));
+            verify.select();
+            return false;
+        }
+
+        data = form_data(form);
+        lock = rcmail.set_busy(true, 'saving');
+        rcmail.http_post('plugin.kolab-2fa-save', {
+            _method: data.id || method,
+            _data: JSON.stringify(data),
+            _verify_code: verify.val(),
+            _timestamp: factor_dialog ? factor_dialog.data('timestamp') : null
+        }, lock);
+    }
+
+    /**
+     * Collect all factor properties from the form
+     */
+    function form_data(form)
+    {
+        var data = {};
+        form.find('input, select').each(function(i, elem) {
+            if (elem.name.indexOf('_prop') === 0) {
+                k = elem.name.match(/\(a-z0-9_.-+)\$/i) ? RegExp.$1 : null;
+                if (k) {
+                    datak = elem.tagName == 'SELECT' ? $('option:selected', elem).val() : $(elem).val();
+                }
+            }
+        });
+
+        return data;
+    }
+
+    /**
+     * Execute the given function after the user authorized the session with a 2nd factor
+     */
+    function require_high_security(func, exclude)
+    {
+        // request 2nd factor auth
+        if (rcmail.env.session_secured !== true && rcmail.env.session_secured < time() - 180) {
+            var method, name;
+
+            // find an active factor
+            $.each(rcmail.env.kolab_2fa_factors, function(id, prop) {
+                if (prop.active && !method || method == exclude) {
+                    method = id;
+                    name = prop.label || prop.name;
+                    if (!exclude || id !== exclude) {
+                        return true;
+                    }
+                }
+            });
+
+            // we have a registered factor, use it
+            if (method) {
+                highsec_call_stack.push(func);
+
+                // TODO: list all active factors to choose from
+                var html = String($('#kolab2fa-highsecuritydialog').html()).replace('$name', name);
+
+                highsec_dialog = rcmail.show_popup_dialog(
+                    html,
+                    rcmail.get_label('highsecurityrequired', 'kolab_2fa'),
+                    
+                        {
+                            text: rcmail.gettext('enterhighsecurity', 'kolab_2fa'),
+                            click: function(e) {
+                                var lock, code = highsec_dialog.find('inputname="_code"').val();
+
+                                if (code && code.length) {
+                                    lock = rcmail.set_busy(true, 'verifying');
+                                    rcmail.http_post('plugin.kolab-2fa-verify', {
+                                        _method: method,
+                                        _code: code,
+                                        _session: 1,
+                                        _timestamp: highsec_dialog.data('timestamp')
+                                    }, lock);
+                                }
+                                else {
+                                    highsec_dialog.find('inputname="_code"').select();
+                                }
+                            },
+                            'class': 'mainaction save'
+                        },
+                        {
+                            text: rcmail.gettext('cancel'),
+                            'class': 'cancel',
+                            click: function() {
+                                highsec_dialog.dialog('close');
+                            }
+                        }
+                    ,
+                    {
+                        open: function(event, ui) {
+                            // submit code on <Enter>
+                            $(event.target).find('inputname="_code"').keypress(function(e) {
+                                if (e.which == 13) {
+                                    $(e.target).closest('.ui-dialog').find('button.mainaction').click();
+                                }
+                            }).select();
+                        },
+                        close: function(event, ui) {
+                            $(this).remove();
+                            highsec_dialog = null;
+                            highsec_call_stack.pop();
+                        }
+                    }
+                ).data('timestamp', time());
+
+                return false;
+            }
+        }
+
+        // just trigger the callback
+        func.call(this);
+    };
+
+    // callback for factor data provided by the server
+    rcmail.addEventListener('plugin.render_data', function(data) {
+        var method = data.method,
+            form = $('#kolab2fa-prop-' + method);
+
+        if (form.length) {
+            $.each(data, function(field, value) {
+                form.find('name="_prop' + field + '"').val(value);
+            });
+
+            if (data.qrcode) {
+                $('img.qrcoderel='+method+'').attr('src', "data:image/png;base64," + data.qrcode);
+            }
+        }
+        else if (window.console) {
+            console.error("Cannot assign auth data", data);
+        }
+    });
+
+    // callback for save action
+    rcmail.addEventListener('plugin.save_success', function(data) {
+        if (!data.active && rcmail.env.kolab_2fa_factorsdata.id) {
+            delete rcmail.env.kolab_2fa_factorsdata.id;
+        }
+        else if (rcmail.env.kolab_2fa_factorsdata.id) {
+            $.extend(rcmail.env.kolab_2fa_factorsdata.id, data);
+        }
+        else {
+            rcmail.env.kolab_2fa_factorsdata.id = data;
+        }
+
+        if (factor_dialog) {
+            factor_dialog.dialog('close');
+        }
+
+        render();
+    });
+
+    // callback for verify action
+    rcmail.addEventListener('plugin.verify_response', function(data) {
+        // execute high-security call stack and close dialog
+        if (data.success && highsec_dialog && highsec_dialog.is(':visible')) {
+            var func;
+            while (highsec_call_stack.length) {
+                func = highsec_call_stack.pop();
+                func();
+            }
+
+            highsec_dialog.dialog('close');
+            rcmail.env.session_secured = time();
+        }
+        else {
+            rcmail.display_message(data.message, data.success ? 'confirmation' : 'warning');
+
+            if (highsec_dialog && highsec_dialog.is(':visible')) {
+                highsec_dialog.find('inputname="_code"').val('').select();
+            }
+            else {
+                $('#kolab2fa-prop-' + data.method + ' input.k2fa-verify').val('').select();
+            }
+        }
+    });
+
+    // callback for save failure
+    rcmail.addEventListener('plugin.reset_form', function(method) {
+        if (method && rcmail.env.kolab_2fa_factorsmethod) {
+            rcmail.env.kolab_2fa_factorsmethod.active = false;
+        }
+
+        render();
+    });
+
+    // handler for selections
+    $('#kolab2fa-add').change(function() {
+        var method = $('option:selected', this).val();
+
+        // require auth verification
+        require_high_security(function() {
+            add_factor(method);
+        });
+
+        this.selectedIndex = 0;
+    });
+
+    // handler for delete button clicks
+    $('#kolab2fa-factors tbody').on('click', '.button.delete', function(e) {
+        var id = $(this).attr('rel');
+
+        // require auth verification
+        require_high_security(function() {
+            if (confirm(rcmail.get_label('authremoveconfirm', 'kolab_2fa'))) {
+                remove_factor(id);
+            }
+        }, id);
+
+        return false;
+    });
+
+    // submit verification code on <Enter>
+    $('.propform input.k2fa-verify').keypress(function(e) {
+        if (e.which == 13) {
+            $(this).closest('.propform').find('.button.verify').click();
+        }
+    });
+
+    // render list initially
+    render();
+});
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/kolab_2fa.php Added

@@ -0,0 +1,795 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class kolab_2fa extends rcube_plugin
+{
+    public $task = '(login|settings)';
+
+    protected $login_verified = null;
+    protected $login_factors = array();
+    protected $drivers = array();
+    protected $storage;
+
+    /**
+     * Plugin init
+     */
+    public function init()
+    {
+        $this->load_config();
+        $this->add_hook('startup', array($this, 'startup'));
+    }
+
+    /**
+     * Startup hook
+     */
+    public function startup($args)
+    {
+        $rcmail = rcmail::get_instance();
+
+        // register library namespace to autoloader
+        $loader = include(INSTALL_PATH . 'vendor/autoload.php');
+        $loader->set('Kolab2FA', array($this->home . '/lib'));
+
+        if ($args'task' === 'login' && $this->api->output) {
+            $this->add_texts('localization/', false);
+            $this->add_hook('authenticate', array($this, 'authenticate'));
+
+            // process 2nd factor auth step after regular login
+            if ($args'action' === 'plugin.kolab-2fa-login' /* || !empty($_SESSION'kolab_2fa_factors') */) {
+                return $this->login_verify($args);
+            }
+        }
+        else if ($args'task' === 'settings') {
+            $this->add_texts('localization/', !$this->api->output->ajax_call);
+            $this->add_hook('settings_actions', array($this, 'settings_actions'));
+            $this->register_action('plugin.kolab-2fa', array($this, 'settings_view'));
+            $this->register_action('plugin.kolab-2fa-data', array($this, 'settings_data'));
+            $this->register_action('plugin.kolab-2fa-save', array($this, 'settings_save'));
+            $this->register_action('plugin.kolab-2fa-verify', array($this, 'settings_verify'));
+        }
+
+        return $args;
+    }
+
+    /**
+     * Handler for 'authenticate' plugin hook.
+     *
+     * ATTENTION: needs to be called *after* kolab_auth::authenticate()
+     */
+    public function authenticate($args)
+    {
+        // nothing to be done for me
+        if ($args'abort' || $this->login_verified !== null) {
+            return $args;
+        }
+
+        $rcmail = rcmail::get_instance();
+
+        // parse $host URL
+        $a_host = parse_url($args'host');
+        $hostname = $_SESSION'hostname' = $a_host'host' ?: $args'host';
+        $username = !empty($_SESSION'kolab_auth_admin') ? $_SESSION'kolab_auth_admin' : $args'user';
+
+        // Convert username to lowercase. Copied from rcmail::login()
+        $login_lc = $rcmail->config->get('login_lc', 2);
+        if ($login_lc) {
+            if ($login_lc == 2 || $login_lc === true) {
+                $username = mb_strtolower($username);
+            }
+            else if (strpos($username, '@')) {
+                // lowercase domain name
+                list($local, $domain) = explode('@', $username);
+                $username = $local . '@' . mb_strtolower($domain);
+            }
+        }
+
+        // 2a. let plugins provide the list of active authentication factors
+        $lookup = $rcmail->plugins->exec_hook('kolab_2fa_lookup', array(
+            'user'    => $username,
+            'host'    => $hostname,
+            'factors' => null,
+            'check'   => $rcmail->config->get('kolab_2fa_check', true),
+        ));
+
+        if (isset($lookup'factors')) {
+            $factors = (array)$lookup'factors';
+        }
+        // 2b. check storage if this user has 2FA enabled
+        else if ($lookup'check' !== false && ($storage = $this->get_storage($username))) {
+            $factors = (array)$storage->enumerate();
+        }
+
+        if (count($factors) > 0) {
+            $args'abort' = true;
+            $factors = array_unique($factors);
+
+            // 3. flag session for 2nd factor verification
+            $_SESSION'kolab_2fa_time'    = time();
+            $_SESSION'kolab_2fa_nonce'   = bin2hex(openssl_random_pseudo_bytes(32));
+            $_SESSION'kolab_2fa_factors' = $factors;
+
+            $_SESSION'username' = $args'user';
+            $_SESSION'host'     = $args'host';
+            $_SESSION'password' = $rcmail->encrypt($args'pass');
+
+            // 4. render to 2nd auth step
+            $this->login_step($factors);
+        }
+
+        return $args;
+    }
+
+    /**
+     * Handler for the additional login step requesting the 2FA verification code
+     */
+    public function login_step($factors)
+    {
+        // replace handler for login form
+        $this->login_factors = array_values($factors);
+        $this->api->output->add_handler('loginform', array($this, 'auth_form'));
+
+        // focus the code input field on load
+        $this->api->output->add_script('$("input.kolab2facode").first().select();', 'docready');
+
+        $this->api->output->send('login');
+    }
+
+    /**
+     * Process the 2nd factor code verification form submission
+     */
+    public function login_verify($args)
+    {
+        $this->login_verified = false;
+
+        $rcmail = rcmail::get_instance();
+
+        $time     = $_SESSION'kolab_2fa_time';
+        $nonce    = $_SESSION'kolab_2fa_nonce';
+        $factors  = (array)$_SESSION'kolab_2fa_factors';
+        $expired  = $time < time() - $rcmail->config->get('kolab_2fa_timeout', 120);
+        $username = !empty($_SESSION'kolab_auth_admin') ? $_SESSION'kolab_auth_admin' : $_SESSION'username';
+
+        if (!empty($factors) && !empty($nonce) && !$expired) {
+            // TODO: check signature
+
+            // try to verify each configured factor
+            foreach ($factors as $factor) {
+                list($method) = explode(':', $factor, 2);
+
+                // verify the submitted code
+                $code = rcube_utils::get_input_value("_${nonce}_${method}", rcube_utils::INPUT_POST);
+                $this->login_verified = $this->verify_factor_auth($factor, $code, $username);
+
+                // accept first successful method
+                if ($this->login_verified) {
+                    break;
+                }
+            }
+        }
+
+        if ($this->login_verified) {
+            // restore POST data from session
+            $_POST'_user' = $_SESSION'username';
+            $_POST'_host' = $_SESSION'host';
+            $_POST'_pass' = $rcmail->decrypt($_SESSION'password');
+
+            if ($_SESSION'kolab_auth_admin') {
+                $_POST'_user'    = $_SESSION'kolab_auth_admin';
+                $_POST'_loginas' = $_SESSION'username';
+            }
+        }
+
+        // proceed with regular login ...
+        $args'action' = 'login';
+
+        // session data will be reset in index.php thus additional
+        // auth attempts with intercepted data will be rejected
+        // $rcmail->kill_session();
+
+        // we can't display any custom error messages on failed login
+        // but that's actually desired to expose as little information as possible
+
+        return $args;
+    }
+
+    /**
+     * Helper method to verify the given method/code tuple
+     */
+    protected function verify_factor_auth($method, $code, $username)
+    {
+        if (strlen($code) && ($driver = $this->get_driver($method))) {
+            // set properties from login
+            $driver->username = $username;
+
+            try {
+                // verify the submitted code
+                return $driver->verify($code, $_SESSION'kolab_2fa_time');
+            }
+            catch (Exception $e) {
+                rcube::raise_error($e, true, false);
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * Render 2nd factor authentication form in place of the regular login form
+     */
+    public function auth_form($attrib = array())
+    {
+        $form_name  = !empty($attrib'form') ? $attrib'form' : 'form';
+        $nonce = $_SESSION'kolab_2fa_nonce';
+
+        $methods = array_unique(array_map(function($factor) {
+                list($method, $id) = explode(':', $factor);
+                return $method;
+            },
+            $this->login_factors
+        ));
+
+        // forward these values as the regular login screen would submit them
+        $input_task   = new html_hiddenfield(array('name' => '_task', 'value' => 'login'));
+        $input_action = new html_hiddenfield(array('name' => '_action', 'value' => 'plugin.kolab-2fa-login'));
+        $input_tzone  = new html_hiddenfield(array('name' => '_timezone', 'id' => 'rcmlogintz', 'value' => rcube_utils::get_input_value('_timezone', rcube_utils::INPUT_POST)));
+        $input_url    = new html_hiddenfield(array('name' => '_url', 'id' => 'rcmloginurl', 'value' => rcube_utils::get_input_value('_url', rcube_utils::INPUT_POST)));
+
+        // create HTML table with two cols
+        $table = new html_table(array('cols' => 2));
+        $required = count($methods) > 1 ? null : 'required';
+
+        // render input for each configured auth method
+        foreach ($methods as $i => $method) {
+            if ($row++ > 0) {
+                $table->add(array('colspan' => 2, 'class' => 'title hint', 'style' => 'text-align:center'),
+                    $this->gettext('or'));
+            }
+
+            $field_id = "rcmlogin2fa$method";
+            $input_code = new html_inputfield(array(
+                    'name'         => "_${nonce}_${method}",
+                    'class'        => 'kolab2facode',
+                    'id'           => $field_id,
+                    'required'     => $required,
+                    'autocomplete' => 'off',
+                    'data-icon'    => 'key' // for Elastic
+                ) + $attrib);
+            $table->add('title', html::label($field_id, html::quote($this->gettext($method))));
+            $table->add('input', $input_code->show(''));
+        }
+
+        $out  = $input_task->show();
+        $out .= $input_action->show();
+        $out .= $input_tzone->show();
+        $out .= $input_url->show();
+        $out .= $table->show();
+
+        // add submit button
+        if (rcube_utils::get_boolean($attrib'submit')) {
+            $out .= html::p('formbuttons', html::tag('button', array(
+                    'type'  => 'submit',
+                    'id'    => 'rcmloginsubmit',
+                    'class' => 'button mainaction save',
+                ), $this->gettext('continue'))
+            );
+        }
+
+        // surround html output with a form tag
+        if (empty($attrib'form')) {
+            $out = $this->api->output->form_tag(array('name' => $form_name, 'method' => 'post'), $out);
+        }
+
+        return $out;
+    }
+
+    /**
+     * Load driver class for the given authentication factor
+     *
+     * @param string $factor Factor identifier (<method>:<id>)
+     * @return Kolab2FA\Driver\Base
+     */
+    public function get_driver($factor)
+    {
+        list($method) = explode(':', $factor, 2);
+
+        $rcmail = rcmail::get_instance();
+
+        if ($this->drivers$factor) {
+            return $this->drivers$factor;
+        }
+
+        $config = $rcmail->config->get('kolab_2fa_' . $method, array());
+
+        // use product name as "issuer""
+        if (empty($config'issuer')) {
+            $config'issuer' = $rcmail->config->get('product_name');
+        }
+
+        try {
+            // TODO: use external auth service if configured
+
+            $driver = \Kolab2FA\Driver\Base::factory($factor, $config);
+
+            // attach storage
+            $driver->storage = $this->get_storage();
+
+            if ($rcmail->user->ID) {
+                $driver->username  = $rcmail->get_user_name();
+            }
+
+            $this->drivers$factor = $driver;
+            return $driver;
+        }
+        catch (Exception $e) {
+            $error = strval($e);
+        }
+
+        rcube::raise_error(array(
+                'code' => 600,
+                'type' => 'php',
+                'file' => __FILE__,
+                'line' => __LINE__,
+                'message' => $error),
+            true, false);
+
+        return false;
+    }
+
+    /**
+     * Getter for a storage instance singleton
+     */
+    public function get_storage($for = null)
+    {
+        if (!isset($this->storage) || (!empty($for) && $this->storage->username !== $for)) {
+            $rcmail = rcmail::get_instance();
+            try {
+                $this->storage = \Kolab2FA\Storage\Base::factory(
+                    $rcmail->config->get('kolab_2fa_storage', 'roundcube'),
+                    $rcmail->config->get('kolab_2fa_storage_config', array())
+                );
+
+                $this->storage->set_username($for);
+                $this->storage->set_logger(new \Kolab2FA\Log\RcubeLogger());
+
+                // set user properties from active session
+                if (!empty($_SESSION'kolab_dn')) {
+                    $this->storage->userdn = $_SESSION'kolab_dn';
+                }
+            }
+            catch (Exception $e) {
+                $this->storage = false;
+
+                rcube::raise_error(array(
+                        'code' => 600,
+                        'type' => 'php',
+                        'file' => __FILE__,
+                        'line' => __LINE__,
+                        'message' => $error),
+                    true, false);
+            }
+        }
+
+        return $this->storage;
+    }
+
+    /**
+     * Handler for 'settings_actions' hook
+     */
+    public function settings_actions($args)
+    {
+        // register as settings action
+        $args'actions' = array(
+            'action' => 'plugin.kolab-2fa',
+            'class'  => 'twofactorauth',
+            'label'  => 'settingslist',
+            'title'  => 'settingstitle',
+            'domain' => 'kolab_2fa',
+        );
+
+        return $args;
+    }
+
+    /**
+     * Handler for settings/plugin.kolab-2fa requests
+     */
+    public function settings_view()
+    {
+        $this->register_handler('plugin.settingsform', array($this, 'settings_form'));
+        $this->register_handler('plugin.settingslist', array($this, 'settings_list'));
+        $this->register_handler('plugin.factoradder', array($this, 'settings_factoradder'));
+        $this->register_handler('plugin.highsecuritydialog', array($this, 'settings_highsecuritydialog'));
+
+        $this->include_script('kolab2fa.js');
+        $this->include_stylesheet($this->local_skin_path() . '/kolab2fa.css');
+
+        $this->api->output->set_env('session_secured', $this->check_secure_mode());
+        $this->api->output->add_label('save','cancel');
+        $this->api->output->set_pagetitle($this->gettext('settingstitle'));
+        $this->api->output->send('kolab_2fa.config');
+    }
+
+    /**
+     * Render the menu to add another authentication factor
+     */
+    public function settings_factoradder($attrib)
+    {
+        $rcmail = rcmail::get_instance();
+
+        $attrib'id' = 'kolab2fa-add';
+
+        $select = new html_select($attrib);
+        $select->add($this->gettext('addfactor') . '...', '');
+        foreach ((array)$rcmail->config->get('kolab_2fa_drivers', array()) as $method) {
+            $select->add($this->gettext($method), $method);
+        }
+
+        return $select->show();
+    }
+
+    /**
+     * Render a list of active factor this user has configured
+     */
+    public function settings_list($attrib = array())
+    {
+        $attrib'id' = 'kolab2fa-factors';
+        $table = new html_table(array('cols' => 3));
+
+        $table->add_header('name', $this->gettext('factor'));
+        $table->add_header('created', $this->gettext('created'));
+        $table->add_header('actions', '');
+
+        return $table->show($attrib);
+    }
+
+    /**
+     * Render the settings form template object
+     */
+    public function settings_form($attrib = array())
+    {
+        $rcmail = rcmail::get_instance();
+        $storage = $this->get_storage($rcmail->get_user_name());
+        $factors = $storage ? (array)$storage->enumerate() : array();
+        $drivers = (array)$rcmail->config->get('kolab_2fa_drivers', array());
+        $env_methods = array();
+
+        foreach ($drivers as $j => $method) {
+            $out .= $this->settings_factor($method, $attrib);
+            $env_methods$method = array(
+                'name'   => $this->gettext($method),
+                'active' => 0,
+            );
+        }
+
+        $me = $this;
+        $factors = array_combine(
+            $factors,
+            array_map(function($id) use ($me, &$env_methods) {
+                $props = array('id' => $id);
+
+                if ($driver = $me->get_driver($id)) {
+                    $props += $this->format_props($driver->props());
+                    $props'method' = $driver->method;
+                    $props'name' = $me->gettext($driver->method);
+                    $env_methods$driver->method'active'++;
+                }
+
+                return $props;
+            }, $factors)
+        );
+
+        $this->api->output->set_env('kolab_2fa_methods', $env_methods);
+        $this->api->output->set_env('kolab_2fa_factors', !empty($factors) ? $factors : null);
+
+        return html::div(array('id' => 'kolab2fapropform'), $out);
+    }
+
+    /**
+     * Render the settings UI for the given method/driver
+     */
+    protected function settings_factor($method, $attrib)
+    {
+        $out = '';
+        $rcmail = rcmail::get_instance();
+        $attrib += array('class' => 'propform');
+
+        if ($driver = $this->get_driver($method)) {
+            $table = new html_table(array('cols' => 2, 'class' => $attrib'class'));
+
+            foreach ($driver->props() as $field => $prop) {
+                if (!$prop'editable') {
+                    continue;
+                }
+
+                switch ($prop'type') {
+                    case 'boolean':
+                    case 'checkbox':
+                        $input = new html_checkbox(array('value' => '1'));
+                        break;
+
+                    case 'enum':
+                    case 'select':
+                        $input = new html_select(array('disabled' => $prop'readonly'));
+                        $input->add(array_map(array($this, 'gettext'), $prop'options'), $prop'options');
+                        break;
+
+                    default:
+                        $input = new html_inputfield(array('size' => $prop'size' ?: 30, 'disabled' => !$prop'editable'));
+                }
+
+                $explain_label = $field . 'explain' . $method;
+                $explain_html = $rcmail->text_exists($explain_label, 'kolab_2fa') ? html::div('explain form-text', $this->gettext($explain_label)) : '';
+
+                $field_id = 'rcmk2fa' . $method . $field;
+                $table->add('title', html::label($field_id, $this->gettext($field)));
+                $table->add(null, $input->show('', array('id' => $field_id, 'name' => "_prop$field")) . $explain_html);
+            }
+
+            // add row for displaying the QR code
+            if (method_exists($driver, 'get_provisioning_uri')) {
+                $table->add('title', $this->gettext('qrcode'));
+                $table->add(null,
+                    html::div('explain form-text', $this->gettext("qrcodeexplain$method"))
+                    . html::tag('img', array('src' => 'data:image/gif;base64,R0lGODlhDwAPAIAAAMDAwAAAACH5BAEAAAAALAAAAAAPAA8AQAINhI+py+0Po5y02otnAQA7', 'class' => 'qrcode', 'rel' => $method))
+                );
+
+                // add row for testing the factor
+                $field_id = 'rcmk2faverify' . $method;
+                $table->add('title', html::label($field_id, $this->gettext('verifycode')));
+                $table->add(null,
+                    html::tag('input', array('type' => 'text', 'name' => '_verify_code', 'id' => $field_id, 'class' => 'k2fa-verify', 'size' => 20, 'required' => true)) .
+                    html::div('explain form-text', $this->gettext("verifycodeexplain$method"))
+                );
+
+            }
+
+            $input_id = new html_hiddenfield(array('name' => '_propid', 'value' => ''));
+
+            $out .= html::tag('form', array(
+                    'method' => 'post',
+                    'action' => '#',
+                    'id'     => 'kolab2fa-prop-' . $method,
+                    'style'  => 'display:none',
+                    'class'  => 'propform',
+                ),
+                html::tag('fieldset', array(),
+                    html::tag('legend', array(), $this->gettext($method)) .
+                    html::div('factorprop', $table->show()) .
+                    $input_id->show()
+                )
+            );
+        }
+
+        return $out;
+    }
+
+    /**
+     * Render the high-security-dialog content
+     */
+    public function settings_highsecuritydialog($attrib = array())
+    {
+        $attrib += array('id' => 'kolab2fa-highsecuritydialog');
+
+        $field_id = 'rcmk2facode';
+        $input = new html_inputfield(array('name' => '_code', 'id' => $field_id, 'class' => 'verifycode', 'size' => 20));
+        $label = html::label(array('for' => $field_id, 'class' => 'col-form-label col-sm-4'), '$name');
+
+        return html::div($attrib,
+            html::div('explain form-text', $this->gettext('highsecuritydialog'))
+            . html::div('propform row form-group', $label . html::div('col-sm-8', $input->show('')))
+        );
+    }
+
+    /**
+     * Handler for settings/plugin.kolab-2fa-save requests
+     */
+    public function settings_save()
+    {
+        $method = rcube_utils::get_input_value('_method', rcube_utils::INPUT_POST);
+        $data   = @json_decode(rcube_utils::get_input_value('_data', rcube_utils::INPUT_POST), true);
+
+        $rcmail = rcmail::get_instance();
+        $storage = $this->get_storage($rcmail->get_user_name());
+        $success = false;
+        $errors = 0;
+        $save_data = array();
+
+        if ($driver = $this->get_driver($method)) {
+            if ($data === false) {
+                if ($this->check_secure_mode()) {
+                    // remove method from active factors and clear stored settings
+                    $success = $driver->clear();
+                }
+                else {
+                    $errors++;
+                }
+            }
+            else {
+                // verify the submitted code before saving
+                $verify_code = rcube_utils::get_input_value('_verify_code', rcube_utils::INPUT_POST);
+                $timestamp = intval(rcube_utils::get_input_value('_timestamp', rcube_utils::INPUT_POST));
+                if (!empty($verify_code)) {
+                    if (!$driver->verify($verify_code, $timestamp)) {
+                        $this->api->output->command('plugin.verify_response', array(
+                            'id'      => $driver->id,
+                            'method'  => $driver->method,
+                            'success' => false,
+                            'message' => str_replace('$method', $this->gettext($driver->method), $this->gettext('codeverificationfailed'))
+                        ));
+                        $this->api->output->send();
+                    }
+                }
+
+                foreach ($data as $prop => $value) {
+                    if (!$driver->set($prop, $value)) {
+                        $errors++;
+                    }
+                }
+
+                $driver->set('active', true);
+            }
+
+            // commit changes to the user properties
+            if (!$errors) {
+                if ($success = $driver->commit()) {
+                    $save_data = $data !== false ? $this->format_props($driver->props()) : array();
+                }
+                else {
+                    $errors++;
+                }
+            }
+        }
+
+        if ($success) {
+            $this->api->output->show_message($data === false ? $this->gettext('factorremovesuccess') : $this->gettext('factorsavesuccess'), 'confirmation');
+            $this->api->output->command('plugin.save_success', array(
+                    'method' => $method,
+                    'active' => $data !== false,
+                    'id'     => $driver->id) + $save_data);
+        }
+        else if ($errors) {
+            $this->api->output->show_message($this->gettext('factorsaveerror'), 'error');
+            $this->api->output->command('plugin.reset_form', $data !== false ? $method : null);
+        }
+
+        $this->api->output->send();
+    }
+
+    /**
+     * Handler for settings/plugin.kolab-2fa-data requests
+     */
+    public function settings_data()
+    {
+        $method = rcube_utils::get_input_value('_method', rcube_utils::INPUT_POST);
+
+        if ($driver = $this->get_driver($method)) {
+            $data = array('method' => $method, 'id' => $driver->id);
+
+            foreach ($driver->props(true) as $field => $prop) {
+                $data$field = $prop'text' ?: $prop'value';
+            }
+
+            // generate QR code for provisioning URI
+            if (method_exists($driver, 'get_provisioning_uri')) {
+                try {
+                    $uri = $driver->get_provisioning_uri();
+
+                    $qr = new Endroid\QrCode\QrCode();
+                    $qr->setText($uri)
+                       ->setSize(240)
+                       ->setPadding(10)
+                       ->setErrorCorrection('high')
+                       ->setForegroundColor(array('r' => 0, 'g' => 0, 'b' => 0, 'a' => 0))
+                       ->setBackgroundColor(array('r' => 255, 'g' => 255, 'b' => 255, 'a' => 0));
+                    $data'qrcode' = base64_encode($qr->get());
+                }
+                catch (Exception $e) {
+                    rcube::raise_error($e, true, false);
+                }
+            }
+
+            $this->api->output->command('plugin.render_data', $data);
+        }
+
+        $this->api->output->send();
+    }
+
+    /**
+     * Handler for settings/plugin.kolab-2fa-verify requests
+     */
+    public function settings_verify()
+    {
+        $method = rcube_utils::get_input_value('_method', rcube_utils::INPUT_POST);
+        $timestamp = intval(rcube_utils::get_input_value('_timestamp', rcube_utils::INPUT_POST));
+        $success = false;
+
+        if ($driver = $this->get_driver($method)) {
+            $data = @json_decode(rcube_utils::get_input_value('_data', rcube_utils::INPUT_POST), true);
+            if (is_array($data)) {
+                foreach ($data as $key => $value) {
+                    if ($value !== '******') {
+                        $driver->$key = $value;
+                    }
+                }
+            }
+
+            $success = $driver->verify(rcube_utils::get_input_value('_code', rcube_utils::INPUT_POST), $timestamp);
+            $method = $driver->method;
+        }
+
+        // put session into high-security mode
+        if ($success && !empty($_POST'_session')) {
+            $_SESSION'kolab_2fa_secure_mode' = time();
+        }
+
+        $this->api->output->command('plugin.verify_response', array(
+            'method' => $method,
+            'success' => $success,
+            'message' => str_replace('$method', $this->gettext($method),
+                $this->gettext($success ? 'codeverificationpassed' : 'codeverificationfailed'))
+        ));
+
+        $this->api->output->send();
+    }
+
+    /**
+     *
+     */
+    protected function format_props($props)
+    {
+        $rcmail = rcmail::get_instance();
+        $values = array();
+
+        foreach ($props as $key => $prop) {
+            switch ($prop'type') {
+                case 'datetime':
+                    $value = $rcmail->format_date($prop'value');
+                    break;
+
+                default:
+                    $value = $prop'value';
+            }
+
+            $values$key = $value;
+        }
+
+        return $values;
+    }
+
+    /**
+     * Check whether the session is secured with 2FA (excluding the logon)
+     */
+    protected function check_secure_mode()
+    {
+        // Allow admins that used kolab_auth's "login as" feature to act without
+        // being asked for the user's second factor
+        if (!empty($_SESSION'kolab_auth_admin') && !empty($_SESSION'kolab_auth_password')) {
+            return true;
+        }
+
+        if ($_SESSION'kolab_2fa_secure_mode' && $_SESSION'kolab_2fa_secure_mode' > time() - 180) {
+            return $_SESSION'kolab_2fa_secure_mode';
+        }
+
+        return false;
+    }
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Base.php Added

@@ -0,0 +1,344 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Driver base class
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+abstract class Base
+{
+    public $method;
+    public $id;
+    public $storage;
+
+    protected $config          = array();
+    protected $props           = array();
+    protected $user_props      = array();
+    protected $pending_changes = false;
+    protected $temporary       = false;
+    protected $allowed_props   = array('username');
+
+    public $user_settings = array(
+        'active' => array(
+            'type'     => 'boolean',
+            'editable' => false,
+            'hidden'   => false,
+            'default'  => false,
+        ),
+        'label' => array(
+            'type'      => 'text',
+            'editable'  => true,
+            'label'     => 'label',
+            'generator' => 'default_label',
+        ),
+        'created' => array(
+            'type'      => 'datetime',
+            'editable'  => false,
+            'hidden'    => false,
+            'label'     => 'created',
+            'generator' => 'time',
+        ),
+    );
+
+    /**
+     * Static factory method
+     */
+    public static function factory($id, $config)
+    {
+        list($method) = explode(':', $id);
+
+        $classmap = array(
+            'totp'    => '\\Kolab2FA\\Driver\\TOTP',
+            'hotp'    => '\\Kolab2FA\\Driver\\HOTP',
+            'yubikey' => '\\Kolab2FA\\Driver\\Yubikey',
+        );
+
+        $cls = $classmapstrtolower($method);
+        if ($cls && class_exists($cls)) {
+            return new $cls($config, $id);
+        }
+
+        throw new Exception("Unknown 2FA driver '$method'");
+    }
+
+    /**
+     * Default constructor
+     */
+    public function __construct($config = null, $id = null)
+    {
+        $this->init($config);
+
+        if (!empty($id) && $id != $this->method) {
+            $this->id = $id;
+        }
+        else { // generate random ID
+            $this->id = $this->method . ':' . bin2hex(openssl_random_pseudo_bytes(12));
+            $this->temporary = true;
+        }
+    }
+
+    /**
+     * Initialize the driver with the given config options
+     */
+    public function init($config)
+    {
+        if (is_array($config)) {
+            $this->config = array_merge($this->config, $config);
+        }
+
+        if ($config'storage') {
+            $this->storage = \Kolab2FA\Storage\Base::factory($config'storage', $config'storage_config');
+        }
+    }
+
+    /**
+     * Verify the submitted authentication code
+     *
+     * @param string $code The 2nd authentication factor to verify
+     * @param int    $timestamp  Timestamp of authentication process (window start)
+     * @return boolean True if valid, false otherwise
+     */
+    abstract function verify($code, $timestamp = null);
+
+    /**
+     * Getter for user-visible properties
+     */
+    public function props($force = false)
+    {
+        $data = array();
+
+        foreach ($this->user_settings as $key => $p) {
+            if ($p'private') {
+                continue;
+            }
+
+            $data$key = array(
+                'type'     => $p'type',
+                'editable' => $p'editable',
+                'hidden'   => $p'hidden',
+                'label'    => $p'label',
+                'value'    => $this->get($key, $force),
+            );
+
+            // format value into text
+            switch ($p'type') {
+                case 'boolean':
+                    $data$key'value' = (bool)$data$key'value';
+                    $data$key'text' = $data$key'value' ? 'yes' : 'no';
+                    break;
+
+                case 'datetime':
+                    if (is_numeric($data$key'value')) {
+                        $data$key'text' = date('c', $data$key'value');
+                        break;
+                    }
+
+                default:
+                    $data$key'text' = $data$key'value';
+            }
+        }
+
+        return $data;
+    }
+
+    /**
+     * Implement this method if the driver can be prpvisioned via QR code
+     */
+    /* abstract function get_provisioning_uri(); */
+
+    /**
+     * Generate a random secret string
+     */
+    public function generate_secret($length = 16)
+    {
+        // Base32 characters
+        $chars = array(
+            'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', //  7
+            'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P', // 15
+            'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X', // 23
+            'Y', 'Z', '2', '3', '4', '5', '6', '7', // 31
+        );
+
+        $secret = '';
+        for ($i = 0; $i < $length; $i++) {
+            $secret .= $charsarray_rand($chars);
+        }
+        return $secret;
+    }
+
+    /**
+     * Generate the default label based on the method
+     */
+    public function default_label()
+    {
+        if (class_exists('\\rcmail', false)) {
+            return \rcmail::get_instance()->gettext($this->method, 'kolab_2fa');
+        }
+
+        return strtoupper($this->method);
+    }
+
+    /**
+     * Getter for read-only access to driver properties
+     */
+    public function get($key, $force = false)
+    {
+        // this is a per-user property: get from persistent storage
+        if (isset($this->user_settings$key)) {
+            $value = $this->get_user_prop($key);
+
+            // generate property value
+            if (!isset($value) && $force && $this->user_settings$key'generator') {
+                $func = $this->user_settings$key'generator';
+                if (is_string($func) && !is_callable($func)) {
+                    $func = array($this, $func);
+                }
+                if (is_callable($func)) {
+                    $value = call_user_func($func);
+                }
+                if (isset($value)) {
+                    $this->set_user_prop($key, $value);
+                }
+            }
+        }
+        else {
+            $value = $this->props$key;
+        }
+
+        return $value;
+    }
+
+    /**
+     * Setter for restricted access to driver properties
+     */
+    public function set($key, $value, $persistent = true)
+    {
+        // store as per-user property
+        if (isset($this->user_settings$key)) {
+            if ($persistent) {
+                return $this->set_user_prop($key, $value);
+            }
+            $this->user_props$key = $value;
+        }
+
+        $setter = 'set_' . $key;
+        if (method_exists($this, $setter)) {
+            call_user_func(array($this, $setter), $value);
+        }
+        else if (in_array($key, $this->allowed_props)) {
+            $this->props$key = $value;
+        }
+
+        return true;
+    }
+
+    /**
+     * Commit changes to storage
+     */
+    public function commit()
+    {
+        if (!empty($this->user_props) && $this->storage && $this->pending_changes) {
+            if ($this->storage->write($this->id, $this->user_props)) {
+                $this->pending_changes = false;
+                $this->temporary = false;
+            }
+        }
+
+        return !$this->pending_changes;
+    }
+
+    /**
+     * Dedicated setter for the username property
+     */
+    public function set_username($username)
+    {
+        $this->props'username' = $username;
+
+        if ($this->storage) {
+            $this->storage->set_username($username);
+        }
+
+        return true;
+    }
+
+    /**
+     * Clear data stored for this driver
+     */
+    public function clear()
+    {
+        if ($this->storage) {
+            return $this->storage->remove($this->id);
+        }
+
+        return false;
+    }
+
+    /**
+     * Getter for per-user properties for this method
+     */
+    protected function get_user_prop($key)
+    {
+        if (!isset($this->user_props$key) && $this->storage && !$this->pending_changes && !$this->temporary) {
+            $this->user_props = (array)$this->storage->read($this->id);
+        }
+
+        return $this->user_props$key;
+    }
+
+    /**
+     * Setter for per-user properties for this method
+     */
+    protected function set_user_prop($key, $value)
+    {
+        $this->pending_changes |= ($this->user_props$key !== $value);
+        $this->user_props$key = $value;
+        return true;
+    }
+
+    /**
+     * Magic getter for read-only access to driver properties
+     */
+    public function __get($key)
+    {
+        // this is a per-user property: get from persistent storage
+        if (isset($this->user_settings$key)) {
+            return $this->get_user_prop($key);
+        }
+
+        return $this->props$key;
+    }
+
+    /**
+     * Magic setter for restricted access to driver properties
+     */
+    public function __set($key, $value)
+    {
+        $this->set($key, $value, false);
+    }
+
+    /**
+     * Magic check if driver property is defined
+     */
+    public function __isset($key)
+    {
+        return isset($this->props$key);
+    }
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Exception.php Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/HOTP.php Added

@@ -0,0 +1,128 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication HOTP driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class HOTP extends Base
+{
+    public $method = 'hotp';
+
+    protected $config = array(
+        'digits'   => 6,
+        'window'   => 4,
+        'digest'   => 'sha1',
+    );
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'secret' => array(
+                'type'      => 'text',
+                'private'   => true,
+                'label'     => 'secret',
+                'generator' => 'generate_secret',
+            ),
+            'counter' => array(
+                'type'      => 'integer',
+                'editable'  => false,
+                'hidden'    => true,
+                'generator' => 'random_counter',
+            ),
+        );
+
+        // copy config options
+        $this->backend = new \Kolab2FA\OTP\HOTP();
+        $this->backend
+            ->setDigits($this->config'digits')
+            ->setDigest($this->config'digest')
+            ->setIssuer($this->config'issuer')
+            ->setIssuerIncludedAsParameter(true);
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $secret  = $this->get('secret');
+        $counter = $this->get('counter');
+
+        if (!strlen($secret)) {
+            // LOG: "no secret set for user $this->username"
+            // rcube::console("VERIFY HOTP: no secret set for user $this->username");
+            return false;
+        }
+
+        try {
+            $this->backend->setLabel($this->username)->setSecret($secret)->setCounter(intval($this->get('counter')));
+            $pass = $this->backend->verify($code, $counter, $this->config'window');
+
+            // store incremented counter value
+            $this->set('counter', $this->backend->getCounter());
+            $this->commit();
+        }
+        catch (\Exception $e) {
+            // LOG: exception
+            // rcube::console("VERIFY HOTP: $this->id, " . strval($e));
+            $pass = false;
+        }
+
+        // rcube::console('VERIFY HOTP', $this->username, $secret, $counter, $code, $pass);
+        return $pass;
+    }
+
+    /**
+     *
+     */
+    public function get_provisioning_uri()
+    {
+        if (!$this->secret) {
+            // generate new secret and store it
+            $this->set('secret', $this->get('secret', true));
+            $this->set('counter', $this->get('counter', true));
+            $this->set('created', $this->get('created', true));
+            $this->commit();
+        }
+
+        // TODO: deny call if already active?
+
+        $this->backend->setLabel($this->username)->setSecret($this->secret)->setCounter(intval($this->get('counter')));
+        return $this->backend->getProvisioningUri();
+    }
+
+    /**
+     * Generate a random counter value
+     */
+    public function random_counter()
+    {
+        return mt_rand(1, 999);
+    }
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/TOTP.php Added

@@ -0,0 +1,120 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication TOTP driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class TOTP extends Base
+{
+    public $method = 'totp';
+
+    protected $config = array(
+        'digits'   => 6,
+        'interval' => 30,
+        'digest'   => 'sha1',
+    );
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'secret' => array(
+                'type'      => 'text',
+                'private'   => true,
+                'label'     => 'secret',
+                'generator' => 'generate_secret',
+            ),
+        );
+
+        // copy config options
+        $this->backend = new \Kolab2FA\OTP\TOTP();
+        $this->backend
+            ->setDigits($this->config'digits')
+            ->setInterval($this->config'interval')
+            ->setDigest($this->config'digest')
+            ->setIssuer($this->config'issuer')
+            ->setIssuerIncludedAsParameter(true);
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $secret = $this->get('secret');
+
+        if (!strlen($secret)) {
+            // LOG: "no secret set for user $this->username"
+            // rcube::console("VERIFY TOTP: no secret set for user $this->username");
+            return false;
+        }
+
+        $this->backend->setLabel($this->username)->setSecret($secret);
+
+        // PHP gets a string, but we're comparing integers.
+        $code = (int)$code;
+
+        // Pass a window to indicate the maximum timeslip between client (mobile
+        // device) and server.
+        $pass = $this->backend->verify($code, $timestamp, 150);
+
+        // try all codes from $timestamp till now
+        if (!$pass && $timestamp) {
+            $now = time();
+            while (!$pass && $timestamp < $now) {
+                $pass = $code === $this->backend->at($timestamp);
+                $timestamp += $this->config'interval';
+            }
+        }
+
+        // rcube::console('VERIFY TOTP', $this->username, $secret, $code, $timestamp, $pass);
+        return $pass;
+    }
+
+    /**
+     *
+     */
+    public function get_provisioning_uri()
+    {
+        // rcube::console('PROV', $this->secret);
+        if (!$this->secret) {
+            // generate new secret and store it
+            $this->set('secret', $this->get('secret', true));
+            $this->set('created', $this->get('created', true));
+            // rcube::console('PROV2', $this->secret);
+            $this->commit();
+        }
+
+        // TODO: deny call if already active?
+
+        $this->backend->setLabel($this->username)->setSecret($this->secret);
+        return $this->backend->getProvisioningUri();
+    }
+
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Yubikey.php Added

@@ -0,0 +1,126 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Yubikey driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class Yubikey extends Base
+{
+    public $method = 'yubikey';
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'yubikeyid' => array(
+                'type'     => 'text',
+                'editable' => true,
+                'label'    => 'secret',
+            ),
+        );
+
+        // initialize validator
+        $this->backend = new \Yubikey\Validate($this->config'apikey', $this->config'clientid');
+
+        // set configured validation hosts
+        if (!empty($this->config'hosts')) {
+            $this->backend->setHosts((array)$this->config'hosts');
+        }
+
+        if (isset($this->config'use_https')) {
+            $this->backend->setUseSecure((bool)$this->config'use_https');
+        }
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $keyid = $this->get('yubikeyid');
+        $pass  = false;
+
+        if (!strlen($keyid)) {
+            // LOG: "no key registered for user $this->username"
+            return false;
+        }
+
+        // check key prefix with associated Yubikey ID
+        if (strpos($code, $keyid) === 0) {
+            try {
+                $response = $this->backend->check($code);
+                $pass     = $response->success() === true;
+            }
+            catch (\Exception $e) {
+                // TODO: log exception
+            }
+        }
+
+        // rcube::console('VERIFY Yubikey', $this->username, $keyid, $code, $pass);
+        return $pass;
+    }
+
+    /**
+     * @override
+     */
+    public function set($key, $value, $persistent = true)
+    {
+        if ($key == 'yubikeyid' && strlen($value) > 12) {
+            // verify the submitted code
+            try {
+                $response = $this->backend->check($value);
+                if ($response->success() !== true) {
+                    // TODO: report error
+                    return false;
+                }
+            }
+            catch (\Exception $e) {
+                return false;
+            }
+
+            // truncate the submitted yubikey code to 12 characters
+            $value = substr($value, 0, 12);
+        }
+
+        return parent::set($key, $value, $persistent);
+    }
+
+    /**
+     * @override
+     */
+    protected function set_user_prop($key, $value)
+    {
+        // set created timestamp
+        if ($key !== 'created' && !isset($this->created)) {
+            parent::set_user_prop('created', $this->get('created', true));
+        }
+
+        return parent::set_user_prop($key, $value);
+    }
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/Logger.php Added

@@ -0,0 +1,42 @@
+<?php
+
+/**
+ * Logging interface for the Kolab 2-Factor-Authentication components
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+interface Logger
+{
+    /**
+     * Setter for the log name
+     */
+    public function set_name($name);
+
+    /**
+     * Setter for the minimum log level
+     */
+    public function set_level($level);
+
+    /**
+     * Do log the given message at the given level
+     */
+    public function log($level, $message);
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/RcubeLogger.php Added

@@ -0,0 +1,80 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Logging class to log messages
+ * through the Roundcube logging facilities.
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+use \rcube;
+
+class RcubeLogger implements Logger
+{
+    protected $name = null;
+    protected $level = LOG_DEBUG;
+
+    public function __construct($name = null)
+    {
+        if ($name !== null) {
+            $this->set_name($name);
+        }
+    }
+
+    public function set_name($name)
+    {
+        $this->name = $name;
+    }
+
+    public function set_level($name)
+    {
+        $this->level = $level;
+    }
+
+    public function log($level, $message)
+    {
+        if (!is_string($message)) {
+            $message = var_export($message, true);
+        }
+
+        switch ($level) {
+        case LOG_DEBUG:
+        case LOG_INFO:
+        case LOG_NOTICE:
+            if ($level >= $this->level) {
+                rcube::write_log($this->name ?: 'console', $message);
+            }
+            break;
+
+        case LOG_EMERGE:
+        case LOG_ALERT:
+        case LOG_CRIT:
+        case LOG_ERR:
+        case LOG_WARNING:
+            rcube::raise_error(array(
+                'code' => 600,
+                'type' => 'php',
+                'message' => $message,
+            ), true, false);
+            break;
+        }
+    }
+}
+

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/Syslog.php Added

@@ -0,0 +1,54 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Logging class to log messages
+ * through the Roundcube logging facilities.
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+use \rcube;
+
+class Syslog implements Logger
+{
+    protected $name = 'Kolab2FA';
+    protected $level = LOG_INFO;
+
+    public function set_name($name)
+    {
+        $this->name = $name;
+    }
+
+    public function set_level($name)
+    {
+        $this->level = $level;
+    }
+
+    public function log($level, $message)
+    {
+        if ($level >= $this->level) {
+            if (!is_string($message)) {
+                $message = var_export($message, true);
+            }
+
+            syslog($level, '' . $this->name . ' ' . $message);
+        }
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/HOTP.php Added

@@ -0,0 +1,58 @@
+<?php
+
+/**
+ * Kolab HOTP implementation based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+namespace Kolab2FA\OTP;
+
+use OTPHP\HOTP as Base;
+
+class HOTP extends Base
+{
+    use OTP;
+    protected $counter = 0;
+
+    public function setCounter($counter)
+    {
+        if (!is_integer($counter) || $counter < 0) {
+            throw new \Exception('Counter must be at least 0.');
+        }
+        $this->counter = $counter;
+
+        return $this;
+    }
+
+    public function getCounter()
+    {
+        return $this->counter;
+    }
+
+    public function updateCounter($counter)
+    {
+        $this->counter = $counter;
+
+        return $this;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/OTP.php Added

@@ -0,0 +1,133 @@
+<?php
+
+/**
+ * Kolab OTP trait based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\OTP;
+
+trait OTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+
+    public function setSecret($secret)
+    {
+        $this->secret = $secret;
+
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception('Label must not contain a semi-colon.');
+        }
+        $this->label = $label;
+
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception('Issuer must not contain a semi-colon.');
+        }
+        $this->issuer = $issuer;
+
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if (!is_numeric($digits) || $digits < 1) {
+            throw new \Exception('Digits must be at least 1.');
+        }
+        $this->digits = $digits;
+
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if (!in_array($digest, array('md5', 'sha1', 'sha256', 'sha512'))) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/TOTP.php Added

@@ -0,0 +1,50 @@
+<?php
+
+/**
+ * Kolab TOTP implementation based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\OTP;
+
+use OTPHP\TOTP as Base;
+
+class TOTP extends Base
+{
+    use OTP;
+    protected $interval = 30;
+
+    public function setInterval($interval)
+    {
+        if (!is_integer($interval) || $interval < 1) {
+            throw new \Exception('Interval must be at least 1.');
+        }
+        $this->interval = $interval;
+
+        return $this;
+    }
+
+    public function getInterval()
+    {
+        return $this->interval;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/Base.php Added

@@ -0,0 +1,127 @@
+<?php
+
+/**
+ * Abstract storage backend class for the Kolab 2-Factor-Authentication plugin
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \Kolab2FA\Log;
+
+
+abstract class Base
+{
+    public $username = null;
+    protected $config = array();
+    protected $logger;
+
+    /**
+     *
+     */
+    public static function factory($backend, $config)
+    {
+        $classmap = array(
+            'ldap' => '\\Kolab2FA\\Storage\\LDAP',
+            'roundcube' => '\\Kolab2FA\\Storage\\RcubeUser',
+            'rcubeuser' => '\\Kolab2FA\\Storage\\RcubeUser',
+        );
+
+        $cls = $classmapstrtolower($backend);
+        if ($cls && class_exists($cls)) {
+            return new $cls($config);
+        }
+
+        throw new Exception("Unknown storage backend '$backend'");
+    }
+
+    /**
+     * Default constructor
+     */
+    public function __construct($config = null)
+    {
+        if (is_array($config)) {
+            $this->init($config);
+        }
+    }
+
+    /**
+     * Initialize the driver with the given config options
+     */
+    public function init(array $config)
+    {
+        $this->config = array_merge($this->config, $config);
+
+        // use syslog logger by default
+        $this->set_logger(new Log\Syslog());
+    }
+
+    /**
+     * 
+     */
+    public function set_logger(Log\Logger $logger)
+    {
+        $this->logger = $logger;
+
+        if ($this->config'debug') {
+            $this->logger->set_level(LOG_DEBUG);
+        }
+        else if ($this->config'loglevel') {
+            $this->logger->set_level($this->config'loglevel');
+        }
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        $this->username = $username;
+    }
+
+    /**
+     * Send messager to the logging system
+     */
+    protected function log($level, $message)
+    {
+        if ($this->logger) {
+            $this->logger->log($level, $message);
+        }
+    }
+
+    /**
+     * List keys holding settings for 2-factor-authentication
+     */
+    abstract public function enumerate();
+
+    /**
+     * Read data for the given key
+     */
+    abstract public function read($key);
+
+    /**
+     * Save data for the given key
+     */
+    abstract public function write($key, $value);
+
+    /**
+     * Remove the data stored for the given key
+     */
+    abstract public function remove($key);
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/Exception.php Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/LDAP.php Added

@@ -0,0 +1,349 @@
+<?php
+
+/**
+ * Storage backend to store 2-Factor-Authentication settings in LDAP
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \Net_LDAP3;
+use \Kolab2FA\Log\Logger;
+
+class LDAP extends Base
+{
+    public $userdn;
+
+    private $cache = array();
+    private $ldapcache = array();
+    private $conn;
+    private $error;
+
+    public function init(array $config)
+    {
+        parent::init($config);
+
+        $this->conn = new Net_LDAP3($config);
+        $this->conn->config_set('log_hook', array($this, 'log'));
+
+        $this->conn->connect();
+
+        $bind_pass = $this->config'bind_pass';
+        $bind_user = $this->config'bind_user';
+        $bind_dn   = $this->config'bind_dn';
+
+        $this->ready = $this->conn->bind($bind_dn, $bind_pass);
+
+        if (!$this->ready) {
+            throw new Exception("LDAP storage not ready: " . $this->error);
+        }
+    }
+
+    /**
+     * List/set methods activated for this user
+     */
+    public function enumerate($active = true)
+    {
+        $filter  = $this->parse_vars($this->config'filter',  '*');
+        $base_dn = $this->parse_vars($this->config'base_dn', '*');
+        $scope   = $this->config'scope' ?: 'sub';
+        $ids     = array();
+
+        if ($this->ready && ($result = $this->conn->search($base_dn, $filter, $scope, array($this->config'fieldmap''id', $this->config'fieldmap''active')))) {
+            foreach ($result as $dn => $entry) {
+                $rec = $this->field_mapping($dn, Net_LDAP3::normalize_entry($entry, true));
+                if (!empty($rec'id') && ($active === null || $active == $rec'active')) {
+                    $ids = $rec'id';
+                }
+            }
+        }
+
+        // TODO: cache this in memory
+
+        return $ids;
+    }
+
+    /**
+     * Read data for the given key
+     */
+    public function read($key)
+    {
+        if (!isset($this->cache$key)) {
+            $this->cache$key = $this->get_ldap_record($this->username, $key);
+        }
+
+        return $this->cache$key;
+    }
+
+    /**
+     * Save data for the given key
+     */
+    public function write($key, $value)
+    {
+        $success = false;
+        $ldap_attrs = array();
+
+        if (is_array($value)) {
+            // add some default values
+            $value += (array)$this->config'defaults' + array('active' => false, 'username' => $this->username, 'userdn' => $this->userdn);
+
+            foreach ($value as $k => $val) {
+                if ($attr = $this->config'fieldmap'$k) {
+                    $ldap_attrs$attr = $this->value_mapping($k, $val, false);
+                }
+            }
+        }
+        else {
+            // invalid data structure
+            return false;
+        }
+
+        // update existing record
+        if ($rec = $this->get_ldap_record($this->username, $key)) {
+            $old_attrs = $rec'_raw';
+            $new_attrs = array_merge($old_attrs, $ldap_attrs);
+
+            $result = $this->conn->modify_entry($rec'_dn', $old_attrs, $new_attrs);
+            $success = !empty($result);
+        }
+        // insert new record
+        else if ($this->ready) {
+            $entry_dn = $this->get_entry_dn($this->username, $key);
+
+            // add object class attribute
+            $me = $this;
+            $ldap_attrs'objectclass' = array_map(function($cls) use ($me, $key) {
+                return $me->parse_vars($cls, $key);
+            }, (array)$this->config'objectclass');
+
+            $success = $this->conn->add_entry($entry_dn, $ldap_attrs);
+        }
+
+        if ($success) {
+            $this->cache$key = $value;
+            $this->ldapcache = array();
+
+            // cleanup: remove disabled/inactive/temporary entries
+            if ($value'active') {
+                foreach ($this->enumerate(false) as $id) {
+                    if ($id != $key) {
+                        $this->remove($id);
+                    }
+                }
+
+                // set user roles according to active factors
+                $this->set_user_roles();
+            }
+        }
+
+        return $success;
+    }
+
+    /**
+     * Remove the data stored for the given key
+     */
+    public function remove($key)
+    {
+        if ($this->ready) {
+            $entry_dn = $this->get_entry_dn($this->username, $key);
+            $success = $this->conn->delete_entry($entry_dn);
+
+            // set user roles according to active factors
+            if ($success) {
+                $this->set_user_roles();
+            }
+
+            return $success;
+        }
+
+        return false;
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        parent::set_username($username);
+
+        // reset cached values
+        $this->cache = array();
+        $this->ldapcache = array();
+    }
+
+    /**
+     *
+     */
+    protected function set_user_roles()
+    {
+        if (!$this->ready || !$this->userdn || empty($this->config'user_roles')) {
+            return false;
+        }
+
+        $auth_roles = array();
+        foreach ($this->enumerate(true) as $id) {
+            foreach ($this->config'user_roles' as $prefix => $role) {
+                if (strpos($id, $prefix) === 0) {
+                    $auth_roles = $role;
+                }
+            }
+        }
+
+        $role_attr = $this->config'fieldmap''roles' ?: 'nsroledn';
+        if ($user_attrs = $this->conn->get_entry($this->userdn, array($role_attr))) {
+            $internals = array_values($this->config'user_roles');
+            $new_attrs = $old_attrs = Net_LDAP3::normalize_entry($user_attrs);
+            $new_attrs$role_attr = array_merge(
+                array_unique($auth_roles),
+                array_filter((array)$old_attrs$role_attr, function($f) use ($internals) { return !in_array($f, $internals); })
+            );
+
+            $result = $this->conn->modify_entry($this->userdn, $old_attrs, $new_attrs);
+            return !empty($result);
+        }
+
+        return false;
+    }
+
+    /**
+     * Fetches user data from LDAP addressbook
+     */
+    protected function get_ldap_record($user, $key)
+    {
+        $entry_dn = $this->get_entry_dn($user, $key);
+
+        if (!isset($this->ldapcache$entry_dn)) {
+            $this->ldapcache$entry_dn = array();
+
+            if ($this->ready && ($entry = $this->conn->get_entry($entry_dn, array_values($this->config'fieldmap')))) {
+                $this->ldapcache$entry_dn = $this->field_mapping($entry_dn, Net_LDAP3::normalize_entry($entry, true));
+            }
+        }
+
+        return $this->ldapcache$entry_dn;
+    }
+
+    /**
+     * Compose a full DN for the given record identifier
+     */
+    protected function get_entry_dn($user, $key)
+    {
+        $base_dn = $this->parse_vars($this->config'base_dn', $key);
+        return sprintf('%s=%s,%s', $this->config'rdn', Net_LDAP3::quote_string($key, true), $base_dn);
+    }
+
+    /**
+     * Maps LDAP attributes to defined fields
+     */
+    protected function field_mapping($dn, $entry)
+    {
+        $entry'_dn' = $dn;
+        $entry'_raw' = $entry;
+
+        // fields mapping
+        foreach ($this->config'fieldmap' as $field => $attr) {
+            $attr_lc = strtolower($attr);
+            if (isset($entry$attr_lc)) {
+                $entry$field = $this->value_mapping($field, $entry$attr_lc, true);
+            }
+            else if (isset($entry$attr)) {
+                $entry$field = $this->value_mapping($field, $entry$attr, true);
+            }
+        }
+
+        return $entry;
+    }
+
+    /**
+     *
+     */
+    protected function value_mapping($attr, $value, $reverse = false)
+    {
+        if ($map = $this->config'valuemap'$attr) {
+            if ($reverse) {
+                $map = array_flip($map);
+            }
+
+            if (is_array($value)) {
+                $value = array_filter(array_map(function($val) use ($map) {
+                    return $map$val;
+                }, $value));
+            }
+            else {
+                $value = $map$value;
+            }
+        }
+
+        // convert (date) type
+        switch ($this->config'attrtypes'$attr) {
+            case 'datetime':
+                $ts = is_numeric($value) ? $value : strtotime($value);
+                if ($ts) {
+                    $value = gmdate($reverse ? 'U' : 'YmdHi\Z', $ts);
+                }
+                break;
+
+            case 'integer':
+                $value = intval($value);
+                break;
+        }
+
+        return $value;
+    }
+
+    /**
+     * Prepares filter query for LDAP search
+     */
+    protected function parse_vars($str, $key)
+    {
+        $user = $this->username;
+
+        if (strpos($user, '@') > 0) {
+            list($u, $d) = explode('@', $user);
+        }
+        else if ($this->userdn) {
+            $u = $this->userdn;
+            $d = trim(str_replace(',dc=', '.', substr($u, strpos($u, ',dc='))), '.');
+        }
+
+        if ($this->userdn) {
+            $user = $this->userdn;
+        }
+
+        // build hierarchal domain string
+        $dc = $this->conn->domain_root_dn($d);
+
+        $class = $this->config'classmap' ? $this->config'classmap''*' : '*';
+
+        // map key to objectclass
+        if (is_array($this->config'classmap')) {
+            foreach ($this->config'classmap' as $k => $c) {
+                if (strpos($key, $k) === 0) {
+                    $class = $c;
+                    break;
+                }
+            }
+        }
+
+        $replaces = array('%dc' => $dc, '%d' => $d, '%fu' => $user, '%u' => $u, '%c' => $class);
+
+        return strtr($str, $replaces);
+    }
+
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/RcubeUser.php Added

@@ -0,0 +1,195 @@
+<?php
+
+/**
+ * Storage backend to use the Roundcube user prefs to store 2-Factor-Authentication settings
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \rcmail;
+use \rcube_user;
+
+class RcubeUser extends Base
+{
+    // sefault config
+    protected $config = array(
+        'keymap' => array(),
+    );
+
+    private $cache = array();
+    private $user;
+
+    public function init(array $config)
+    {
+        parent::init($config);
+
+        $rcmail = rcmail::get_instance();
+        $this->config'hostname' = $rcmail->user->ID ? $rcmail->user->data'mail_host' : $_SESSION'hostname';
+    }
+
+    /**
+     * List/set methods activated for this user
+     */
+    public function enumerate()
+    {
+        if ($factors = $this->get_factors()) {
+            return array_keys(array_filter($factors, function($prop) {
+                return !empty($prop'active');
+            }));
+        }
+
+        return array();
+    }
+
+    /**
+     * Read data for the given key
+     */
+    public function read($key)
+    {
+        if (!isset($this->cache$key)) {
+            $factors = $this->get_factors();
+            $this->log(LOG_DEBUG, 'RcubeUser::read() ' . $key);
+            $this->cache$key = $factors$key;
+        }
+
+        return $this->cache$key;
+    }
+
+    /**
+     * Save data for the given key
+     */
+    public function write($key, $value)
+    {
+        $this->log(LOG_DEBUG, 'RcubeUser::write() ' . @json_encode($value));
+
+        if ($user = $this->get_user($this->username)) {
+            $this->cache$key = $value;
+
+            $factors = $this->get_factors();
+            $factors$key = $value;
+
+            $pkey = $this->key2property('blob');
+            $save_data = array($pkey => $factors);
+            $update_index = false;
+
+            // remove entry
+            if ($value === null) {
+                unset($factors$key);
+                $update_index = true;
+            }
+            // remove non-active entries
+            else if (!empty($value'active')) {
+                $factors = array_filter($factors, function($prop) {
+                    return !empty($prop'active');
+                });
+                $update_index = true;
+            }
+
+            // update the index of active factors
+            if ($update_index) {
+                $save_data$this->key2property('factors') = array_keys(
+                    array_filter($factors, function($prop) {
+                        return !empty($prop'active');
+                    })
+                );
+            }
+
+            $success = $user->save_prefs($save_data, true);
+
+            if (!$success) {
+                $this->log(LOG_WARNING, sprintf('Failed to save prefs for user %s', $this->username));
+            }
+
+            return $success;
+        }
+
+        return false;
+    }
+
+    /**
+     * Remove the data stored for the given key
+     */
+    public function remove($key)
+    {
+        return $this->write($key, null);
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        parent::set_username($username);
+
+        // reset cached values
+        $this->cache = array();
+        $this->user = null;
+    }
+
+    /**
+     * Helper method to get a rcube_user instance for storing prefs
+     */
+    private function get_user($username)
+    {
+        // use global instance if we have a valid Roundcube session
+        $rcmail = rcmail::get_instance();
+        if ($rcmail->user->ID && $rcmail->user->get_username() == $username) {
+            return $rcmail->user;
+        }
+
+        if (!$this->user) {
+            $this->user = rcube_user::query($username, $this->config'hostname');
+        }
+
+        if (!$this->user) {
+            $this->log(LOG_WARNING, sprintf('No user record found for %s @ %s', $username, $this->config'hostname'));
+        }
+
+        return $this->user;
+    }
+
+    /**
+     *
+     */
+    private function get_factors()
+    {
+        if ($user = $this->get_user($this->username)) {
+            $prefs = $user->get_prefs();
+            return (array)$prefs$this->key2property('blob');
+        }
+
+        return null;
+    }
+
+    /**
+     *
+     */
+    private function key2property($key)
+    {
+        // map key to configured property name
+        if (is_array($this->config'keymap') && isset($this->config'keymap'$key)) {
+            return $this->config'keymap'$key;
+        }
+
+        // default
+        return 'kolab_2fa_' . $key;
+    }
+
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/bg_BG.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/ca_ES.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/cs_CZ.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/da_DK.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/de.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/de_CH.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/de_DE.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/el.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/en_US.inc Added

@@ -0,0 +1,57 @@
+<?php
+
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+
+$labels'factor' = 'Factor';
+$labels'secret' = 'Secret Key';
+$labels'created' = 'Created';
+$labels'remove' = 'Remove';
+$labels'continue' = 'Continue';
+
+$labels'settingslist' = 'Multi-Factor Auth';
+$labels'settingstitle' = 'Authentication Factors';
+
+$labels'totp' = 'Mobile App (TOTP)';
+$labels'hotp' = 'Mobile App (HOTP)';
+$labels'yubikey' = 'Yubikey';
+
+$labels'or' = 'or';
+$labels'yes' = 'yes';
+$labels'no' = 'no';
+
+$labels'label' = 'Name';
+$labels'qrcode' = 'QR Code';
+$labels'showqrcode' = 'Show QR Code';
+$labels'qrcodeexplaintotp' = 'Download an authenticator app on your phone. Two apps which work well are <strong>FreeOTP</strong> and <strong>Google Authenticator</strong>, but any other TOTP app should also work.<br/><br/>
+Launch the app on your phone, and add a new entry for this service. When prompted, scan the QR code below to configure your mobile app.';
+$labels'qrcodeexplainhotp' = 'Download an authenticator app on your phone. One app known to work well is <strong>Google Authenticator</strong>, but any other HOTP app should also work.<br/><br/>
+Launch the app on your phone, and add a new entry for this service. When prompted, scan the QR code below to configure your mobile app.';
+
+$labels'yubikeyid' = 'Your YubiKey ID';
+$labels'yubikeyidexplainyubikey' = 'Press your YubiKey once and submit the generated code';
+
+$labels'addfactor' = 'Add Authentication Factor';
+$labels'testfactor' = 'Test this factor';
+$labels'verifycode' = 'Verify Code';
+$labels'verifycodeexplaintotp' = 'Once you have scanned the QR code, enter the 6-digit verification code generated by the authenticator app.';
+$labels'verifycodeexplainhotp' = 'Once you have scanned the QR code, enter the 6-digit verification code generated by the authenticator app.';
+
+$labels'loginexpired' = 'Login request expired! Please try again.';
+$labels'authremoveconfirm' = 'Do you really want to remove this authentication factor from your account?';
+$labels'verifycodemissing' = 'Please enter the verification code from your device';
+
+$labels'factorsavesuccess' = 'Successfully saved authentication factor';
+$labels'factorremovesuccess' = 'Successfully removed the authentication factor';
+$labels'factorsaveerror' = 'Failed to save authentication factor settings';
+$labels'codeverificationpassed' = 'Code verification for $method passed';
+$labels'codeverificationfailed' = 'Code verification for $method failed';
+
+$labels'highsecurityrequired' = 'Entering High Security - Verification required';
+$labels'highsecuritydialog' = 'High security mode helps protect your account from security threats, like session theft or someone messing with your stuff while you\'re away. To enter high security mode, confirm your credentials with the additional authentication factor:';
+$labels'enterhighsecurity' = 'Confirm';

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/es_AR.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/es_ES.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/et_EE.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/fi_FI.inc Added

@@ -0,0 +1,35 @@
+<?php
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+$labels'factor' = 'Tekijä';
+$labels'secret' = 'Salainen avain';
+$labels'created' = 'Luotu';
+$labels'remove' = 'Poista';
+$labels'continue' = 'Jatka';
+$labels'settingslist' = 'Monivaiheinen tunnistautuminen';
+$labels'settingstitle' = 'Tunnistautumistekijät';
+$labels'totp' = 'Mobiilisovellus (TOTP)';
+$labels'hotp' = 'Mobiilisovellus (HOTP)';
+$labels'yubikey' = 'Yubikey';
+$labels'or' = 'tai';
+$labels'yes' = 'kyllä';
+$labels'no' = 'ei';
+$labels'label' = 'Nimi';
+$labels'qrcode' = 'QR-koodi';
+$labels'showqrcode' = 'Näytä QR-koodi';
+$labels'yubikeyid' = 'YubiKey-tunnisteesi';
+$labels'yubikeyidexplainyubikey' = 'Paina YubiKeytasi kerran ja kirjoita luotu koodi';
+$labels'addfactor' = 'Lisää tunnistautumistekijä';
+$labels'testfactor' = 'Testaa tätä tekijää';
+$labels'verifycode' = 'Vahvista koodi';
+$labels'loginexpired' = 'Kirjautumispyyntö vanheni! Yritä uudelleen.';
+$labels'authremoveconfirm' = 'Haluatko varmasti poistaa tämän tunnistautumistekijän tililtäsi?';
+$labels'verifycodemissing' = 'Kirjoita vahvistuskoodi laitteeltasi';
+$labels'factorsavesuccess' = 'Tunnistautumistekijä tallennettu onnistuneesti';
+$labels'factorremovesuccess' = 'Tunnistautumistekijä poistettu onnistuneesti';
+$labels'enterhighsecurity' = 'Vahvista';

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/fr_FR.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/he_IL.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/hr_HR.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/hu_HU.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/it_IT.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/ja_JP.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/ko_KR.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/lv.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/nl_NL.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/pl.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/pl_PL.inc Added

@@ -0,0 +1,32 @@
+<?php
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+$labels'factor' = 'Czynnik';
+$labels'secret' = 'Tajny klucz ';
+$labels'created' = 'Utworzono';
+$labels'remove' = 'Usuń';
+$labels'continue' = 'Kontynuuj';
+$labels'settingslist' = 'Uwierzytelnianie wieloetapowe';
+$labels'settingstitle' = 'Czynniki uwierzytelniania';
+$labels'totp' = 'Aplikacja mobilna (TOTP)';
+$labels'hotp' = 'Aplikacja mobilna (HOTP)';
+$labels'yubikey' = 'Yubikey';
+$labels'or' = 'lub';
+$labels'yes' = 'tak';
+$labels'no' = 'nie';
+$labels'label' = 'Nazwa';
+$labels'qrcode' = 'Kod QR';
+$labels'showqrcode' = 'Pokaż kod QR';
+$labels'qrcodeexplaintotp' = 'Pobierz aplikację uwierzytelniającą na swój telefon. <strong>FreeOTP</strong> i <strong>Google Authenticator</strong> są przetestowane, ale dowolna aplikacja TOTP powinna również działać.<br/><br/>
+Uruchom aplikację na swoim telefonie i zarejestruj tą usługę. Gdy aplikacja o to poprosi, zeskanuj kod QR.';
+$labels'qrcodeexplainhotp' = 'Pobierz aplikację uwierzytelniającą na swój telefon. <strong>Google Authenticator</strong> jest znana z poprawnej pracy, ale dowolna aplikacja HOTP powinna również działać.<br/><br/>
+Uruchom aplikację na swoim telefonie i zarejestruj tą usługę. Gdy aplikacja o to poprosi, zeskanuj kod QR.';
+$labels'yubikeyid' = 'Twój identyfikator Yubikey';
+$labels'yubikeyidexplainyubikey' = 'Naciśnij swojego Yubikeya i wprowadź wygenerowany kod';
+$labels'addfactor' = 'Dodaj czynnik uwierzytelniający';
+$labels'enterhighsecurity' = 'Potwierdź';

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/pt_BR.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/pt_PT.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/ru_RU.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/sk_SK.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/sl_SI.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/sv.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/sv_SE.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/th_TH.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/uk_UA.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/vi_VN.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/zh_CN.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/zh_TW.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/elastic Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/elastic/templates Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/elastic/templates/config.html Added

@@ -0,0 +1,25 @@
+<roundcube:include file="includes/layout.html" />
+<roundcube:include file="includes/menu.html" />
+<roundcube:include file="includes/settings-menu.html" />
+
+<h1 class="voice"><roundcube:label name="kolab_2fa.settingstitle" /></h1>
+
+<div id="layout-content" class="selected no-navbar" role="main">
+	<h2 id="aria-label-toolbar" class="voice"><roundcube:label name="arialabeltoolbar" /></h2>
+	<div class="header" role="toolbar" aria-labelledby="aria-label-toolbar">
+		<a class="button icon back-list-button" href="#back"><span class="inner"><roundcube:label name="back" /></span></a>
+		<span class="header-title"><roundcube:label name="kolab_2fa.settingstitle" /></span>
+		<div class="toolbar menu"></div>
+	</div>
+	<div class="scroller frame-content">
+		<p class="addfactor">
+			<roundcube:object name="plugin.factoradder" class="form-control" />
+		</p>
+		<roundcube:object name="plugin.settingslist" class="authentication-factors" />
+	</div>
+</div>
+
+<roundcube:object name="plugin.settingsform" class="propform" />
+<roundcube:object name="plugin.highsecuritydialog" class="kolab2fa-highsecuritydialog hidden" />
+
+<roundcube:include file="includes/footer.html" />

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/larry Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/larry/kolab2fa.css Added

@@ -0,0 +1,93 @@
+
+.propform .formbuttons {
+	margin-top: 1em;
+}
+
+.propform .explain {
+	max-width: 40em;
+	margin-top: 0.4em;
+	margin-bottom: 0.8em;
+}
+
+.propform .kolab2fa-showqr {
+	font-weight: bold;
+}
+
+.propform tr.hidden {
+	display: none;
+}
+
+table.propform thead th {
+	text-align: left;
+	padding: 6px 10px;
+}
+
+table.propform td.title {
+	vertical-align: top;
+	padding-top: 0.8em;
+}
+
+table.propform td.title > label {
+	line-height: 1.8em;
+}
+
+.propform img.qrcode {
+	min-width: 260px;
+	min-height: 260px;
+}
+
+table.authentication-factors {
+	width: 99%;
+	max-width: 60em;
+	border: 0;
+}
+
+table.authentication-factors td.name {
+	width: 60%;
+	font-weight: bold;
+}
+
+table.authentication-factors td.name:before {
+	content: "\2714";
+	display: inline-block;
+	margin-right: 1em;
+/*
+	width: 1.5em;
+	line-height: 1.5em;
+	text-align: center;
+	color: #c7e3ef;
+	background: #004458;
+	border-radius: 50%;
+*/
+}
+
+table.authentication-factors td.created {
+	width: 12em;
+	white-space: nowrap;
+}
+
+table.authentication-factors td.actions {
+	width: 8em;
+	white-space: nowrap;
+	text-align: right;
+}
+
+table.authentication-factors td.actions a.button {
+	padding: 2px 8px;
+	cursor: default;
+}
+
+.kolab2fa-highsecuritydialog {
+	display: none;
+}
+
+.ui-dialog-content .propform > label {
+	display: inline-block;
+	padding-top: 0.3em;
+	min-width: 12em;
+	font-weight: bold;
+}
+
+.ui-dialog-content .propform .verifycode {
+	width: 20em;
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/larry/templates Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/larry/templates/config.html Added

@@ -0,0 +1,34 @@
+<roundcube:object name="doctype" value="html5" />
+<html>
+<head>
+<title><roundcube:object name="pagetitle" /></title>
+<roundcube:include file="/includes/links.html" />
+</head>
+<body class="noscroll">
+
+<roundcube:include file="/includes/header.html" />
+
+<div id="mainscreen" class="offset">
+
+<roundcube:include file="/includes/settingstabs.html" />
+
+<div id="pluginbody" class="uibox contentbox scroller">
+    <h1 class="boxtitle"><roundcube:object name="steptitle" /></h1>
+    <div class="boxcontent propform">
+        <p class="addfactor">
+            <roundcube:object name="plugin.factoradder" />
+        </p>
+        <roundcube:object name="plugin.settingslist" class="propform authentication-factors" />
+    </div>
+</div>
+
+</div>
+
+<roundcube:object name="plugin.settingsform" class="propform" />
+
+<roundcube:object name="plugin.highsecuritydialog" class="kolab2fa-highsecuritydialog" />
+
+<roundcube:include file="/includes/footer.html" />
+
+</body>
+</html>

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/tests Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/tests/LocalizationTest.php Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_activesync/kolab_activesync.php -> roundcubemail-1.5.tar.gz/plugins/kolab_activesync/kolab_activesync.php Changed

roundcubemail-1.5.3.tar.gz/plugins/kolab_addressbook/drivers/kolab/kolab_contacts.php -> roundcubemail-1.5.tar.gz/plugins/kolab_addressbook/drivers/kolab/kolab_contacts.php Changed

@@ -778,14 +778,17 @@
                 }
                 else {
                     // remove from distribution lists
-                    foreach ((array) $this->groupmembers$id as $gid) {
-                        if (!$is_mailto || $gid == $this->gid) {
-                            $this->remove_from_group($gid, $id);
+                    if (!empty($this->groupmembers$id)) {
+                        foreach ((array) $this->groupmembers$id as $gid) {
+                            if (!$is_mailto || $gid == $this->gid) {
+                                $this->remove_from_group($gid, $id);
+                            }
                         }
+
+                        // clear internal cache
+                        unset($this->groupmembers$id);
                     }
 
-                    // clear internal cache
-                    unset($this->groupmembers$id);
                     $count++;
                 }
             }
@@ -1398,7 +1401,7 @@
                 'birthday' => '',
                 'anniversary' => '',
                 'freebusyurl' => '',
-                'photo' => $contact'photo'
+                'photo' => $contact'photo' ?? null
             );
     }
 }

roundcubemail-1.5.3.tar.gz/plugins/kolab_addressbook/kolab_addressbook.php -> roundcubemail-1.5.tar.gz/plugins/kolab_addressbook/kolab_addressbook.php Changed

roundcubemail-1.5.3.tar.gz/plugins/kolab_delegation/kolab_delegation.php -> roundcubemail-1.5.tar.gz/plugins/kolab_delegation/kolab_delegation.php Changed

@@ -473,7 +473,7 @@
             $delegate = $engine->delegate_get($id);
         }
 
-        if ($delegate) {
+        if (!empty($delegate)) {
             $input = new html_hiddenfield(array('name' => $field_id, 'id' => $field_id, 'size' => 40));
             $input = rcube::Q($delegate'name') . $input->show($id);
 
@@ -511,7 +511,7 @@
             $delegate = $engine->delegate_get($id);
         }
 
-        $folder_data   = $engine->list_folders($delegate'uid');
+        $folder_data   = $engine->list_folders(!empty($delegate) ? $delegate'uid' : null);
         $use_fieldsets = rcube_utils::get_boolean($attrib'use-fieldsets');
         $rights        = array();
         $folder_groups = array();
@@ -521,6 +521,8 @@
             $rights$folder_name = $folder'rights';
         }
 
+        $html = '';
+
         // build block for every folder type
         foreach ($folder_groups as $type => $group) {
             if (empty($group)) {
@@ -550,8 +552,8 @@
     private function delegate_folders_block($a_folders, $attrib, $rights)
     {
         $path      = 'plugins/kolab_delegation/' . $this->skin_path . '/';
-        $read_ico  = $attrib'readicon' ? html::img(array('src' =>  $path . $attrib'readicon', 'title' => $this->gettext('read'))) : '';
-        $write_ico = $attrib'writeicon' ? html::img(array('src' => $path . $attrib'writeicon', 'title' => $this->gettext('write'))) : '';
+        $read_ico  = !empty($attrib'readicon') ? html::img(array('src' =>  $path . $attrib'readicon', 'title' => $this->gettext('read'))) : '';
+        $write_ico = !empty($attrib'writeicon') ? html::img(array('src' => $path . $attrib'writeicon', 'title' => $this->gettext('write'))) : '';
 
         $table = new html_table(array('cellspacing' => 0, 'class' => 'table-striped'));
         $table->add_header(array('class' => 'read checkbox-cell', 'title' => $this->gettext('read'), 'tabindex' => 0), $read_ico);

roundcubemail-1.5.3.tar.gz/plugins/kolab_delegation/kolab_delegation_engine.php -> roundcubemail-1.5.tar.gz/plugins/kolab_delegation/kolab_delegation_engine.php Changed

@@ -38,6 +38,7 @@
     private $ldap_dn;
     private $cache = array();
     private $folder_types = array('mail', 'event', 'task');
+    private $supported;
 
     const ACL_READ  = 1;
     const ACL_WRITE = 2;
@@ -378,7 +379,7 @@
         // Definition of read and write ACL
         $right_types = $this->right_types();
 
-        $delegate_lc = strtolower($delegate);
+        $delegate_lc = strtolower((string) $delegate);
 
         foreach ($folders as $folder) {
             // get only folders in personal namespace
@@ -387,8 +388,8 @@
             }
 
             $rights = null;
-            $type   = $metadata$folder ?: 'mail';
-            list($class, $subclass) = explode('.', $type);
+            $type   = !empty($metadata$folder) ? $metadata$folder : 'mail';
+            list($class, $subclass) = strpos($type, '.') ? explode('.', $type) : $type, '';
 
             if (!in_array($class, $this->folder_types)) {
                 continue;
@@ -398,7 +399,7 @@
             if ($delegate) {
                 // @TODO: cache ACL
                 $imap_acl = $storage->get_acl($folder);
-                if (!empty($imap_acl) && (($acl = $imap_acl$delegate) || ($acl = $imap_acl$delegate_lc))) {
+                if (!empty($imap_acl) && (($acl = ($imap_acl$delegate ?? null)) || ($acl = ($imap_acl$delegate_lc ?? null)))) {
                     if ($this->acl_compare($acl, $right_typesself::ACL_WRITE)) {
                         $rights = self::ACL_WRITE;
                     }

roundcubemail-1.5.3.tar.gz/plugins/kolab_folders/kolab_folders.php -> roundcubemail-1.5.tar.gz/plugins/kolab_folders/kolab_folders.php Changed

@@ -219,7 +219,7 @@
             return $args;
         }
 
-        if ($args'options''is_root') {
+        if (!empty($args'options''is_root')) {
             return $args;
         }
 
@@ -231,13 +231,15 @@
         }
 
         // Get type of the folder or the parent
+        $subtype = '';
         if (strlen($mbox)) {
             list($ctype, $subtype) = $this->get_folder_type($mbox);
-            if (strlen($args'parent_name') && $subtype == 'default')
+            if (strlen($args'parent_name') && $subtype == 'default') {
                 $subtype = ''; // there can be only one
+            }
         }
 
-        if (!$ctype) {
+        if (empty($ctype)) {
             $ctype = 'mail';
         }
 
@@ -297,13 +299,13 @@
         $args'form''props''fieldsets''settings''content''folderctype' = array(
             'label' => $this->gettext('folderctype'),
             'value' => html::div('input-group',
-                $type_select->show(isset($new_ctype) ? $new_ctype : $ctype)
-                . $sub_select->show(isset($new_subtype) ? $new_subtype : $subtype)
+                $type_select->show($new_ctype ?? $ctype)
+                . $sub_select->show($new_subtype ?? $subtype)
             ),
         );
 
         $this->rc->output->set_env('kolab_folder_subtypes', $sub_types);
-        $this->rc->output->set_env('kolab_folder_subtype', isset($new_subtype) ? $new_subtype : $subtype);
+        $this->rc->output->set_env('kolab_folder_subtype', $new_subtype ?? $subtype);
 
         $this->add_expire_input($args'form', $args'name', $ctype);
 
@@ -530,7 +532,7 @@
     /**
      * Checks if IMAP server supports any of METADATA, ANNOTATEMORE, ANNOTATEMORE2
      *
-     * @return boolean
+     * @return bool
      */
     function metadata_support()
     {
@@ -550,7 +552,13 @@
      */
     function get_folder_type($folder)
     {
-        return explode('.', (string)kolab_storage::folder_type($folder));
+        $type = explode('.', (string)kolab_storage::folder_type($folder));
+
+        if (!isset($type1)) {
+            $type1 = null;
+        }
+
+        return $type;
     }
 
     /**
@@ -559,7 +567,7 @@
      * @param string $folder Folder name
      * @param string $type   Content type
      *
-     * @return boolean True on success
+     * @return bool True on success
      */
     function set_folder_type($folder, $type = 'mail')
     {

roundcubemail-1.5.3.tar.gz/plugins/kolab_notes/kolab_notes.php -> roundcubemail-1.5.tar.gz/plugins/kolab_notes/kolab_notes.php Changed

@@ -484,10 +484,9 @@
                 // post-filter search results
                 if (strlen($search)) {
                     $matches = 0;
-                    $contents = mb_strtolower(
-                        $record'title' .
-                        ($this->is_html($record) ? strip_tags($record'description') : $record'description')
-                    );
+                    $desc = $this->is_html($record) ? strip_tags($record'description') : ($record'description' ?? '');
+                    $contents = mb_strtolower($record'title' . $desc);
+
                     foreach ($words as $word) {
                         if (mb_strpos($contents, $word) !== false) {
                             $matches++;
@@ -615,7 +614,7 @@
         $action = rcube_utils::get_input_value('_do', rcube_utils::INPUT_POST);
         $note   = rcube_utils::get_input_value('_data', rcube_utils::INPUT_POST, true);
 
-        $success = $silent = false;
+        $success = $silent = $refresh = false;
         switch ($action) {
             case 'new':
             case 'edit':
@@ -1266,7 +1265,9 @@
     private function is_html($note)
     {
         // check for opening and closing <html> or <body> tags
-        return (preg_match('/<(html|body)(\s+a-z|>)/', $note'description', $m) && strpos($note'description', '</'.$m1.'>') > 0);
+        return !empty($note'description')
+            && preg_match('/<(html|body)(\s+a-z|>)/', $note'description', $m)
+            && strpos($note'description', '</' . $m1 . '>') > 0;
     }
 
     /**

roundcubemail-1.5.3.tar.gz/plugins/kolab_notes/kolab_notes_ui.php -> roundcubemail-1.5.tar.gz/plugins/kolab_notes/kolab_notes_ui.php Changed

roundcubemail-1.5.tar.gz/plugins/kolab_sso Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/LICENSE Added

@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<http://www.gnu.org/licenses/>.

roundcubemail-1.5.tar.gz/plugins/kolab_sso/README Added

@@ -0,0 +1,80 @@
+Single Sign On Authentication for Kolab
+---------------------------------------
+
+This plugin adds possibility to authenticate users via external authentication
+services. Currently it supports various authentication methods based on
+OAuth2 and OpenID Connect (and requires JWT token use).
+
+Because Kolab backends do not support token authentication it is required
+to use master user (sasl proxy) authentication where possible and service
+user credentials in other places. See IMPLEMENTATION NOTES below for details.
+
+Plugin requires libkolab plugin and HTTP/Request2 library.
+Plugin contains BSD-licensed https://github.com/firebase/php-jwt (v5.0.0) library.
+
+Supported algorithms:
+- HS256, HS385, HS512 (PHP hash extension required)
+- RS256, RS384, RS512 (PHP openssl extension required).
+
+
+INSTALLATION
+------------
+
+Enable plugin in Roundcube's main configuration file. Make sure it is first
+on the list of plugins, especially before any authentication plugin, e.g. kolab_auth.
+
+Default return-URL for Auth Provider is https://host.roundcube?_task=login&_action=sso,
+but not all providers support query params. To workaround this limitation you have to
+define an alias URI or redirect. For example:
+
+RewriteEngine On
+RewriteCond %{REQUEST_URI}  ^/roundcubemail
+RewriteRule "^sso" "/roundcubemail/?_task=login&_action=sso" L,QSA
+
+For the above "alias" plugin configuration should include 'response_uri' = '/sso'
+and on the provider side configured URI will be https://host/roundcubemail/sso.
+
+
+IMPLEMENTATION NOTES
+--------------------
+
+Specification: https://openid.net/specs/openid-connect-core-1_0.html
+
+Limitations:
+- OpenIDC Discovery and Dynamic Client Registration is not supported,
+- Authentication with Authorization Code Flow is the only one supported,
+- required grant types: authorization_code, refresh_token (for token refresh),
+- required claims: id_token,
+- required scopes: email, openid, offline_access (for token refresh),
+- endpoints used: token, authorization,
+- supported signature algorithms: HS256, HS385, HS512, RS256, RS384, RS512.
+- supported token endpoint auth methods: client_secret_basic, client_secret_post.
+
+IMAP Because Kolab backend does not support token authentication it is required
+to use master user (sasl proxy) authentication, i.e. you have to put
+master user credentials in plugin's config.
+
+SMTP For the same reason and also because the same master user does not work in Postfix,
+you have to specify SMTP connection parameters/user+password.
+
+LDAP Global addressbook (read-only) requires LDAP user/password. 'user_specific' option does
+not work, neither the proxy authentication.
+
+Freebusy Authentication into kolab-freebusy service is not yet implemented. A solution for
+now is to add Roundcube host(s) into trustednetworks.allow option in kolab-freebusy service config.
+
+Chwala Authentication to Chwala will work if it uses the same (session) database as Roundcube.
+Additionally set $config'fileapi_plugins' = array('kolab_sso', 'kolab_auth', 'kolab_folders');
+Authenticating to Seafile/WebDAV storage is not supported (until it's custom user-defined
+storage).
+
+
+TODO
+----
+
+- kolab_delegation (LDAP auth for write operation)
+- Chwala+Seafile
+- Chwala+WebDAV
+- Freebusy auth
+- Mattermost auth
+- Extended token validation

roundcubemail-1.5.tar.gz/plugins/kolab_sso/composer.json Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/config.inc.php Added

@@ -0,0 +1,60 @@
+<?php
+
+// Enable debugging
+$config'kolab_sso_debug' = true;
+
+// IMAP (master) user
+$config'kolab_sso_imap_user' = 'cyrus-admin';
+
+// IMAP (master) password
+$config'kolab_sso_imap_pass' = 'password';
+
+// SMTP server host
+// To override the SMTP port or connection method, provide a full URL like 'tls://somehost:587'
+$config'kolab_sso_smtp_server' = null;
+
+// SMTP username
+$config'kolab_sso_smtp_user' = '';
+
+// SMTP password
+$config'kolab_sso_smtp_pass' = '';
+
+// LDAP user DN
+$config'kolab_sso_ldap_user' = 'uid=kolab-service,ou=Special Users,dc=example,dc=org';
+
+// LDAP password
+$config'kolab_sso_ldap_pass' = 'password';
+
+// Require SSO logon by removing possibility to logon with user/password
+$config'kolab_sso_disable_login' = false;
+
+// SSO providers/configuration
+$config'kolab_sso_options' = array();
+/* Example:
+$config'kolab_sso_options' = array(
+    'keycloak' => array(
+        // User-friendly name (will be displayed in the button label)
+        'name'   => 'OpenIDC Test',
+        // Driver name
+        'driver' => 'openidc',
+        // Provider API URI
+        'uri' => 'https://kolab.eu.auth0.com',
+        // Client ID/Secret for the API
+        'client_id' => '20w6DXX69isNBaufCwyK24wkBHqPT2ht',
+        'client_secret' => 'd78McGW4UWfFyZprGd8BCKooll',
+        // Token URI, if different than <uri>/token
+        'token_uri' => 'https://kolab.eu.auth0.com/oauth/token',
+        // Authorize URI, if different than <uri>/authorize
+        'auth_uri' => 'https://kolab.eu.auth0.com/authorize',
+        // Response URI, by default we use https://domain.tld/path?_task=login&_action=sso
+        // Define it if the Provider does not allow above
+        // to use https://domain.tld/path/<response_uri> instead
+        'response_uri' => '/sso',
+        // Public key (or certificate) for token validation when using RS256/RS385/RS512 method
+        'pubkey' => '-----BEGIN CERTIFICATE-----
+            ...
+            -----END CERTIFICATE-----
+        ',
+    ),
+);
+*/

roundcubemail-1.5.tar.gz/plugins/kolab_sso/config.inc.php.dist Added

@@ -0,0 +1,60 @@
+<?php
+
+// Enable debugging
+$config'kolab_sso_debug' = true;
+
+// IMAP (master) user
+$config'kolab_sso_imap_user' = 'cyrus-admin';
+
+// IMAP (master) password
+$config'kolab_sso_imap_pass' = 'password';
+
+// SMTP server host
+// To override the SMTP port or connection method, provide a full URL like 'tls://somehost:587'
+$config'kolab_sso_smtp_server' = null;
+
+// SMTP username
+$config'kolab_sso_smtp_user' = '';
+
+// SMTP password
+$config'kolab_sso_smtp_pass' = '';
+
+// LDAP user DN
+$config'kolab_sso_ldap_user' = 'uid=kolab-service,ou=Special Users,dc=example,dc=org';
+
+// LDAP password
+$config'kolab_sso_ldap_pass' = 'password';
+
+// Require SSO logon by removing possibility to logon with user/password
+$config'kolab_sso_disable_login' = false;
+
+// SSO providers/configuration
+$config'kolab_sso_options' = array();
+/* Example:
+$config'kolab_sso_options' = array(
+    'keycloak' => array(
+        // User-friendly name (will be displayed in the button label)
+        'name'   => 'OpenIDC Test',
+        // Driver name
+        'driver' => 'openidc',
+        // Provider API URI
+        'uri' => 'https://kolab.eu.auth0.com',
+        // Client ID/Secret for the API
+        'client_id' => '20w6DXX69isNBaufCwyK24wkBHqPT2ht',
+        'client_secret' => 'd78McGW4UWfFyZprGd8BCKooll',
+        // Token URI, if different than <uri>/token
+        'token_uri' => 'https://kolab.eu.auth0.com/oauth/token',
+        // Authorize URI, if different than <uri>/authorize
+        'auth_uri' => 'https://kolab.eu.auth0.com/authorize',
+        // Response URI, by default we use https://domain.tld/path?_task=login&_action=sso
+        // Define it if the Provider does not allow above
+        // to use https://domain.tld/path/<response_uri> instead
+        'response_uri' => '/sso',
+        // Public key (or certificate) for token validation when using RS256/RS385/RS512 method
+        'pubkey' => '-----BEGIN CERTIFICATE-----
+            ...
+            -----END CERTIFICATE-----
+        ',
+    ),
+);
+*/

roundcubemail-1.5.tar.gz/plugins/kolab_sso/drivers Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/drivers/oauth2.php Added

@@ -0,0 +1,436 @@
+<?php
+
+/**
+ * kolab_sso driver implementing OAuth2 Authorization (RFC6749)
+ * with use of JWT tokens.
+ *
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *
+ * Copyright (C) 2018-2019, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+class kolab_sso_oauth2
+{
+    protected $plugin;
+    protected $id       = 'oauth2';
+    protected $config   = array();
+    protected $params   = array();
+    protected $defaults = array(
+        'scope'          => 'email',
+        'token_type'     => 'access_token',
+        'user_field'     => 'email',
+        'validate_items' => array('aud'),
+    );
+
+
+    /**
+     * Object constructor
+     *
+     * @param rcube_plugin $plugin kolab_sso plugin object
+     * @param array        $config Driver configuration
+     */
+    public function __construct($plugin, $config)
+    {
+        $this->plugin = $plugin;
+        $this->config = $config;
+
+        $this->plugin->require_plugin('libkolab');
+    }
+
+    /**
+     * Authentication request (redirect to SSO service)
+     */
+    public function authorize()
+    {
+        $params = array(
+            'response_type' => 'code',
+            'scope'         => $this->get_param('scope'),
+            'client_id'     => $this->get_param('client_id'),
+            'state'         => $this->plugin->rc->get_request_token(),
+            'redirect_uri'  => $this->redirect_uri(),
+        );
+
+        // Add extra request parameters (don't overwrite params set above)
+        if (!empty($this->config'extra_params')) {
+            $params = array_merge((array) $this->config'extra_params', $params);
+        }
+
+        $url = $this->config'auth_uri' ?: (unslashify($this->config'uri') . '/authorize');
+        $url .= '?' . http_build_query($params);
+
+        $this->plugin->debug("{$this->id}authorize Redirecting to $url");
+
+        header("Location: $url");
+        die;
+    }
+
+    /**
+     * Authorization response validation
+     */
+    public function response()
+    {
+        $this->plugin->debug("{$this->id}authorize Response: " . $_SERVER'REQUEST_URI');
+
+        $this->error = $this->error_message(
+            rcube_utils::get_input_value('error', rcube_utils::INPUT_GET),
+            rcube_utils::get_input_value('error_description', rcube_utils::INPUT_GET),
+            rcube_utils::get_input_value('error_uri', rcube_utils::INPUT_GET)
+        );
+
+        if ($this->error) {
+            return;
+        }
+
+        $state = rcube_utils::get_input_value('state', rcube_utils::INPUT_GET);
+        $code  = rcube_utils::get_input_value('code', rcube_utils::INPUT_GET);
+
+        if (!$state) {
+            $this->plugin->debug("{$this->id}response State missing");
+            $this->error = $this->plugin->gettext('errorinvalidresponse');
+            return;
+        }
+
+        if ($state != $this->plugin->rc->get_request_token()) {
+            $this->plugin->debug("{$this->id}response Invalid response state");
+            $this->error = $this->plugin->gettext('errorinvalidresponse');
+            return;
+        }
+
+        if (!$code) {
+            $this->plugin->debug("{$this->id}response Code missing");
+            $this->error = $this->plugin->gettext('errorinvalidresponse');
+            return;
+        }
+
+        return $this->request_token($code);
+    }
+
+    /**
+     * Error message for the response handler
+     */
+    public function response_error()
+    {
+        if ($this->error) {
+            return $this->plugin->rc->gettext('loginfailed') . ' ' . $this->error;
+        }
+    }
+
+    /**
+     * Existing session validation
+     */
+    public function validate_session($session)
+    {
+        $this->plugin->debug("{$this->id}validate Session: " . json_encode($session));
+
+        // Sanity checks
+        if (empty($session) || empty($session'code') || empty($session'validto') || empty($session'email')) {
+            $this->plugin->debug("{$this->id}validate Session invalid");
+            return;
+        }
+
+        // Check expiration time
+        $now     = new DateTime('now', new DateTimezone('UTC'));
+        $validto = new DateTime($session'validto', new DateTimezone('UTC'));
+
+        // Don't refresh often than TTL/2
+        $validto->sub(new DateInterval(sprintf('PT%dS', $session'ttl'/2)));
+        if ($now < $validto) {
+            $this->plugin->debug("{$this->id}validate Token valid, skipping refresh");
+            return $session;
+        }
+
+        // No refresh_token, not possible to refresh
+        if (empty($session'refresh_token')) {
+            $this->plugin->debug("{$this->id}validate Session cannot be refreshed");
+            return;
+        }
+
+        // Renew tokens
+        $info = $this->request_token($session'code', $session'refresh_token');
+
+        if (!empty($info)) {
+            // Make sure the email didn't change
+            if (!empty($info'email') && $info'email' != $session'email') {
+                $this->plugin->debug("{$this->id}validate Email address change");
+                return;
+            }
+
+            $session = array_merge($session, $info);
+
+            $this->plugin->debug("{$this->id}validate Session valid: " . json_encode($session));
+            return $session;
+        }
+    }
+
+    /**
+     * Authentication Token request (or token refresh)
+     */
+    protected function request_token($code, $refresh_token = null)
+    {
+        $mode   = $refresh_token ? 'token-refresh' : 'token';
+        $url    = $this->config'token_uri' ?: ($this->config'uri' . '/token');
+        $params = array(
+            'client_id'     => $this->get_param('client_id'),
+            'client_secret' => $this->get_param('client_secret'),
+            'grant_type'    => $refresh_token ? 'refresh_token' : 'authorization_code',
+        );
+
+        if ($refresh_token) {
+            $params'refresh_token' = $refresh_token;
+            $params'scope'         = $this->get_param('scope');
+        }
+        else {
+            $params'code'         = $code;
+            $params'redirect_uri' = $this->redirect_uri();
+        }
+
+        // Add extra request parameters (don't overwrite params set above)
+        if (!empty($this->config'extra_params')) {
+            $params = array_merge((array) $this->config'extra_params', $params);
+        }
+
+        $post = http_build_query($params);
+
+        $this->plugin->debug("{$this->id}$mode Requesting POST $url?$post");
+
+        try {
+            // TODO: JWT-based methods of client authentication
+            // https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.9
+
+            $request = $this->get_request($url, 'POST');
+            $request->setAuth($params'client_id', $params'client_secret');
+            $request->setBody($post);
+
+            $response = $request->send();
+            $status   = $response->getStatus();
+            $response = $response->getBody();
+
+            $this->plugin->debug("{$this->id}$mode Response: $response");
+
+            $response = @json_decode($response, true);
+
+            if ($status != 200 || !is_array($response) || !empty($response'error')) {
+                $err = $this->error_text(is_array($response) ? $response'error' : null);
+                throw new Exception("OpenIDC request failed with error: $err");
+            }
+        }
+        catch (Exception $e) {
+            $this->error = $this->plugin->gettext('errorunknown');
+            rcube::raise_error(array(
+                'line' => __LINE__, 'file' => __FILE__, 'message' => $e->getMessage()),
+                true, false);
+            return;
+        }
+
+        // Example response: {
+        //   "access_token":"ACCESS_TOKEN",
+        //   "token_type":"bearer",
+        //   "expires_in":2592000,
+        //   "refresh_token":"REFRESH_TOKEN",
+        //   "scope":"read",
+        //   "uid":100101,
+        //   "info":{"name":"Mark E. Mark","email":"mark@example.com"}
+        // }
+
+        if (empty($response'access_token') || empty($response'token_type')
+            || strtolower($response'token_type') != 'bearer'
+        ) {
+            $this->error = $this->plugin->gettext('errorinvalidresponse');
+            $this->plugin->debug("{$this->id}$mode Error: Invalid or unsupported response");
+            return;
+        }
+
+        $ttl     = $response'expires_in' ?: 600;
+        $validto = new DateTime(sprintf('+%d seconds', $ttl), new DateTimezone('UTC'));
+        $token   = $response$this->get_param('token_type');
+
+        $result = array(
+            'code'          => $code,
+            'access_token'  => $response'access_token',
+            // 'token_type'    => $response'token_type',
+            'validto'       => $validto->format(DateTime::ISO8601),
+            'ttl'           => $ttl,
+        );
+
+        if (!empty($response'refresh_token')) {
+            $result'refresh_token' = $response'refresh_token';
+        }
+
+        if (!empty($token)) {
+            try {
+                $key = $params'client_secret';
+
+                if (!empty($this->config'pubkey')) {
+                    $pubkey = trim(preg_replace('/\r?\n\s\t+/', "\n", $this->config'pubkey'));
+
+                    if (strpos($pubkey, '-----') !== 0) {
+                        $pubkey = "-----BEGIN PUBLIC KEY-----\n" . trim(chunk_split($pubkey, 64, "\n")) . "\n-----END PUBLIC KEY-----";
+                    }
+
+                    if ($keyid = openssl_pkey_get_public($pubkey)) {
+                        $key = $keyid;
+                    }
+                    else {
+                        throw new Exception("Failed to extract public key. " . openssl_error_string());
+                    }
+                }
+
+                $jwt = new Firebase\JWT\JWT;
+                $jwt::$leeway = 60;
+
+                $payload = $jwt->decode($token, $key, array_keys(Firebase\JWT\JWT::$supported_algs));
+
+                $result'email' = $this->validate_token_payload($payload);
+            }
+            catch (Exception $e) {
+                $this->error = $this->plugin->gettext('errorinvalidtoken');
+                rcube::raise_error(array(
+                    'line' => __LINE__, 'file' => __FILE__, 'message' => $e->getMessage()),
+                    true, false);
+                return;
+            }
+        }
+
+        return $result;
+    }
+
+    /**
+     * Validates JWT token payload and returns user/email
+     */
+    protected function validate_token_payload($payload)
+    {
+        $items = $this->get_param('validate_items');
+        $email = $this->config'debug_email' ?: $payload->{$this->get_param('user_field')};
+
+        if (empty($email)) {
+            throw new Exception("No email address in JWT token");
+        }
+
+        foreach ((array) $items as $item_name) {
+            // More extended token validation
+            // https://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation
+            switch (strtolower($item_name)) {
+            case 'aud':
+                if (!in_array($this->get_param('client_id'), (array) $payload->aud)) {
+                    throw new Exception("Token audience does not match");
+                }
+                break;
+            }
+        }
+
+        return $email;
+    }
+
+    /**
+     * The URL to use when redirecting the user from SSO back to Roundcube
+     */
+    protected function redirect_uri()
+    {
+        // response_uri is useful when the Provider does not allow
+        // URIs with parameters. In such case set response_uri = '/sso'
+        // and define a redirect in http server, example for Apache:
+        // RewriteRule "^sso" "/roundcubemail/?_task=login&_action=sso" L,QSA
+
+        $redirect_params = empty($this->config'response_uri') ? array('_action' => 'sso') : array();
+
+        $url = $this->plugin->rc->url($redirect_params, false, true);
+
+        if (!empty($this->config'response_uri')) {
+            $url = unslashify(preg_replace('/\?.*$/', '', $url)) . '/' . ltrim($this->config'response_uri', '/');
+        }
+
+        return $url;
+    }
+
+    /**
+     * Get HTTP/Request2 object
+     */
+    protected function get_request($url, $type)
+    {
+        $config = array_intersect_key($this->config, array_flip(array(
+                'ssl_verify_peer',
+                'ssl_verify_host',
+                'ssl_cafile',
+                'ssl_capath',
+                'ssl_local_cert',
+                'ssl_passphrase',
+                'follow_redirects',
+        )));
+
+        return libkolab::http_request($url, $type, $config);
+    }
+
+    /**
+     * Returns (localized) user-friendly error message
+     */
+    protected function error_message($error, $description, $uri)
+    {
+        if (empty($error)) {
+            return;
+        }
+
+        $msg = $this->error_text($error);
+
+        rcube::raise_error(array(
+            'message' => "SSO $msg." . ($description ? " $description" : '') . ($uri ? " ($uri)" : '')
+            ), true, false);
+
+        $label = 'error' . str_replace('_', '', $error);
+        if (!$this->plugin->rc->text_exists($label, 'kolab_sso')) {
+            $label = 'errorunknown';
+        }
+
+        return $this->plugin->gettext($label);
+    }
+
+    /**
+     * Returns error text for specified OpenIDC error code
+     */
+    protected function error_text($error)
+    {
+        switch ($error) {
+        case 'invalid_request':
+            return "Request malformed";
+        case 'unauthorized_client':
+            return "The client is not authorized";
+        case 'invalid_client':
+            return "Client authentication failed";
+        case 'access_denied':
+            return "Request denied";
+        case 'unsupported_response_type':
+            return "Unsupported response type";
+        case 'invalid_grant':
+            return "Invalid authorization grant";
+        case 'unsupported_grant_type':
+            return "Unsupported authorization grant";
+        case 'invalid_scope':
+            return "Invalid scope";
+        case 'server_error':
+            return "Server error";
+        case 'temporarily_unavailable':
+            return "Service temporarily unavailable";
+        }
+
+        return "Unknown error";
+    }
+
+    /**
+     * Returns (hardcoded/configured/default) value of a configuration param
+     */
+    protected function get_param($name)
+    {
+        return $this->params$name ?: ($this->config$name ?: $this->defaults$name);
+    }
+}

roundcubemail-1.5.tar.gz/plugins/kolab_sso/drivers/openidc.php Added

@@ -0,0 +1,67 @@
+<?php
+
+/**
+ * kolab_sso driver implementing OpenIDC Authorization Code Flow
+ * https://openid.net/specs/openid-connect-core-1_0.html#CodeFlowSteps
+ *
+ * TODO: Discovery: https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationRequest
+ *
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *
+ * Copyright (C) 2018, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+require_once __DIR__ . '/oauth2.php';
+
+class kolab_sso_openidc extends kolab_sso_oauth2
+{
+    protected $id     = 'openidc';
+    protected $params = array(
+        'scope'      => 'openid email offline_access',
+        'token_type' => 'id_token',
+    );
+
+    /**
+     * Returns error text for specified OpenIDC error code
+     */
+    protected function error_text($error)
+    {
+        // OpenIDC-specific codes
+        switch ($error) {
+        case 'interaction_required':
+            return "End-User interaction required";
+        case 'login_required':
+            return "End-User authentication required";
+        case 'account_selection_required':
+            return "End-User account selection required";
+        case 'consent_required':
+            return "End-User consent required";
+        case 'invalid_request_uri':
+            return "Invalid request_uri";
+        case 'invalid_request_object':
+            return "Invalid Request Object";
+        case 'request_not_supported':
+            return "Request not supported";
+        case 'request_uri_not_supported':
+            return "request_uri param not supported";
+        case 'registration_not_supported':
+            return "Registration not supported";
+        }
+
+        // Fallback to OAuth2-specific codes
+        return parent::error_text($error);
+    }
+}

roundcubemail-1.5.tar.gz/plugins/kolab_sso/drivers/seas.php Added

@@ -0,0 +1,38 @@
+<?php
+
+/**
+ * kolab_sso driver implementing Abraxas SEAS Portal OAuth2/JWT flow
+ *
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *         Beat Rubischon <beat.rubischon@adfinis-sygroup.ch>
+ *
+ * Copyright (C) 2018, Kolab Systems AG <contact@kolabsys.com>
+ * Copyright (C) 2019, Adfinis SyGroup AG
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+require_once __DIR__ . '/oauth2.php';
+
+
+class kolab_sso_seas extends kolab_sso_oauth2
+{
+    protected $id       = 'seas';
+    protected $defaults = array(
+        'scope'          => 'USER',
+        'token_type'     => 'access_token',
+        'user_field'     => 'user_name',
+        'validate_items' => array(),
+    );
+}

roundcubemail-1.5.tar.gz/plugins/kolab_sso/kolab_sso.php Added

@@ -0,0 +1,406 @@
+<?php
+
+/**
+ * Single Sign On Authentication for Kolab
+ *
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *
+ * Copyright (C) 2018, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+class kolab_sso extends rcube_plugin
+{
+    public $rc;
+
+    private $data;
+    private $old_data;
+    private $driver;
+    private $logon_error;
+    private $debug = false;
+
+
+    /**
+     * Plugin initialization
+     */
+    public function init()
+    {
+        // Roundcube or Chwala
+        if (defined('RCMAIL_VERSION') || defined('FILE_API_START')) {
+            $this->rc = rcube::get_instance();
+
+            $this->add_hook('startup', array($this, 'startup'));
+            $this->add_hook('authenticate', array($this, 'authenticate'));
+
+            $this->rc->add_shutdown_function(array($this, 'shutdown'));
+        }
+    }
+
+    /**
+     * Startup hook handler
+     */
+    public function startup($args)
+    {
+        // On login or logout (or when the session expired)...
+        if ($args'task' == 'login' || $args'task' == 'logout') {
+            $mode = $args'action' == 'sso' ? $_SESSION'sso_mode' : rcube_utils::get_input_value('_sso', rcube_utils::INPUT_GP);
+
+            // Authorization
+            if ($mode) {
+                $driver = $this->get_driver($mode);
+
+                // This is where we handle redirections from the SSO provider
+                if ($args'action' == 'sso') {
+                    $this->data = $driver->response();
+
+                    if (!empty($this->data)) {
+                        $this->data'timezone' = $_SESSION'sso_timezone';
+                        $this->data'url'      = $_SESSION'sso_url';
+                        $this->data'mode'     = $mode;
+                    }
+                    else {
+                        $this->logon_error = $driver->response_error();
+                    }
+                }
+                // This is where we handle clicking one of "Login by SSO" buttons
+                else if ($_SESSION'temp' && $this->rc->check_request()) {
+                    // Remember some logon params for use on SSO response above
+                    $_SESSION'sso_timezone' = rcube_utils::get_input_value('_timezone', rcube_utils::INPUT_POST);
+                    $_SESSION'sso_url'      = rcube_utils::get_input_value('_url', rcube_utils::INPUT_POST);
+                    $_SESSION'sso_mode'     = $mode;
+
+                    $driver->authorize();
+                }
+
+                $args'action' = 'login';
+                $args'task'   = 'login';
+            }
+        }
+        // On valid session...
+        else if (isset($_SESSION'user_id')
+            && ($data = $_SESSION'sso_data')
+            && ($data = json_decode($this->rc->decrypt($data), true))
+            && ($mode = $data'mode')
+        ) {
+            $driver = $this->get_driver($mode);
+
+            $this->old_data = $data;
+
+            // Session validation, token refresh, etc.
+            if ($this->data = $driver->validate_session($data)) {
+                // register storage connection hooks
+                $this->authenticate(array(), true);
+            }
+            else {
+                // Destroy the session
+                $this->rc->kill_session();
+                // TODO: error message beter explaining the reason
+                // $this->rc->output->show_message('sessionferror', 'error');
+            }
+        }
+
+        // Register login form modifications
+        $this->add_hook('template_object_loginform', array($this, 'login_form'));
+
+        return $args;
+    }
+
+    /**
+     * Authenticate hook handler
+     */
+    public function authenticate($args, $internal = false)
+    {
+        // Chwala
+        if (defined('FILE_API_START') && !$internal && empty($args'pass') && strpos($args'user', 'RC:') === 0) {
+            // extract session ID and username from the token
+            list(, $sess_id, $user) = explode(':', $args'user');
+
+            // unset user, set invalid state
+            $args'valid' = false;
+            $args'user'  = null;
+
+            $session = rcube_session::factory($this->rc->config);
+
+            if ($data = $session->read($sess_id)) {
+                // get SSO data from the existing session
+                $old_session = $_SESSION;
+                session_decode($data);
+                $session_user = $_SESSION'username';
+                $data         = $_SESSION'sso_data';
+                $_SESSION     = $old_session;
+
+                // TODO: allow only configured REMOTE_ADDR?
+                if ($session_user == $user && $data && ($data = json_decode($this->rc->decrypt($data), true)) && ($mode = $data'mode')) {
+                    $driver = $this->get_driver($mode);
+
+                    // Session validation, token refresh, etc.
+                    if ($this->data = $driver->validate_session($data)) {
+                        $args'user'  = $user;
+                        $args'pass'  = 'fake-sso-password';
+                        $args'valid' = true;
+                        $this->authenticate(array(), true);
+                    }
+                }
+            }
+        }
+        // Roundcube
+        else if (!empty($this->data) && ($email = $this->data'email')) {
+            if (!$internal) {
+                $args'user'        = $email;
+                $args'pass'        = 'fake-sso-password';
+                $args'valid'       = true;
+                $args'cookiecheck' = false;
+
+                $_POST'_timezone' = $this->data'timezone';
+                $_POST'_url'      = $this->data'url';
+            }
+
+            $this->add_hook('storage_connect', array($this, 'storage_connect'));
+            $this->add_hook('managesieve_connect', array($this, 'storage_connect'));
+            $this->add_hook('smtp_connect', array($this, 'smtp_connect'));
+            $this->add_hook('ldap_connected', array($this, 'ldap_connected'));
+            $this->add_hook('chwala_authenticate', array($this, 'chwala_authenticate'));
+        }
+        else if ($this->logon_error) {
+            $args'valid' = false;
+            $args'error' = $this->logon_error;
+        }
+
+        return $args;
+    }
+
+    /**
+     * Shutdown handler
+     */
+    public function shutdown()
+    {
+        // Between startup and authenticate the session is destroyed.
+        // So, we save the data later than that.
+        if (!empty($this->data) && !empty($_SESSION'user_id')
+            // update session only when data changed
+            && (empty($this->old_data) || $this->old_data != $this->data)
+        ) {
+            $_SESSION'sso_data' = $this->rc->encrypt(json_encode($this->data));
+        }
+    }
+
+    /**
+     * Storage_connect/managesieve_connect hook handler
+     */
+    public function storage_connect($args)
+    {
+        $user = $this->rc->config->get('kolab_sso_imap_user');
+        $pass = $this->rc->config->get('kolab_sso_imap_pass');
+
+        if ($user && $pass) {
+            $args'auth_cid'  = $user;
+            $args'auth_pw'   = $pass;
+            $args'auth_type' = 'PLAIN';
+        }
+
+        return $args;
+    }
+
+    /**
+     * Smtp_connect hook handler
+     */
+    public function smtp_connect($args)
+    {
+        foreach (array('smtp_server', 'smtp_user', 'smtp_pass') as $prop) {
+            $args$prop = $this->rc->config->get("kolab_sso_$prop", $args$prop);
+        }
+
+        return $args;
+    }
+
+    /**
+     * ldap_connected hook handler
+     */
+    public function ldap_connected($args)
+    {
+        $user = $this->rc->config->get('kolab_sso_ldap_user');
+        $pass = $this->rc->config->get('kolab_sso_ldap_pass');
+
+        if ($user && $pass && $args'user_specific') {
+            $args'bind_dn'       = $user;
+            $args'bind_pass'     = $pass;
+            $args'search_filter' = null;
+        }
+
+        return $args;
+    }
+
+    /**
+     * Chwala_authenticate hook handler
+     */
+    public function chwala_authenticate($args)
+    {
+        // Instead of normal basic auth with  user/pass we'll use
+        // Authorization: Bearer <roundcube session id>
+        $bearer = 'RC:' . session_id() . ':' . $_SESSION'username';
+
+        $args'request'->setAuth(null);
+        $args'request'->setHeader('Authorization', 'Bearer ' . base64_encode($bearer));
+
+        return $args;
+    }
+
+    /**
+     * Login form object
+     */
+    public function login_form($args)
+    {
+        $this->load_config();
+
+        $options       = (array) $this->rc->config->get('kolab_sso_options');
+        $disable_login = $this->rc->config->get('kolab_sso_disable_login');
+
+        if (empty($options)) {
+            return $args;
+        }
+
+        $doc = new DOMDocumentHelper('1.0');
+        $doc->loadHTML($args'content');
+
+        $body = $doc->getElementsByTagName('body')->item(0);
+
+        if ($disable_login) {
+            // Remove login form inputs table
+            $table = $doc->getElementsByTagName('table')->item(0);
+            $table->parentNode->removeChild($table);
+
+            // Remove original Submit button
+            $submit = $doc->getElementsByTagName('button')->item(0);
+            $submit->parentNode->removeChild($submit);
+        }
+
+        if (!$this->driver) {
+            $this->add_texts('localization/');
+        }
+
+        // Add SSO form elements
+        $form = $doc->createNode('p', null, array('id' => 'sso-form', 'class' => 'formbuttons'), $body);
+
+        foreach ($options as $idx => $option) {
+            $label = array('name' => 'loginby', 'vars' => array('provider' => $option'name' ?: $this->gettext('sso')));
+            $doc->createNode('button', $this->gettext($label), array(
+                    'type'    => 'button',
+                    'value'   => $idx,
+                    'class'   => 'button sso w-100 mb-1',
+                    'onclick' => 'kolab_sso_submit(this)',
+                ), $form);
+        }
+
+        $doc->createNode('input', null, array('name' => '_sso', 'type' => 'hidden'), $form);
+
+        // Save the form content back and append script
+        $args'content' = $doc->saveHTML($body)
+            . "<script>"
+            . "function kolab_sso_submit(button) {"
+                . "\$('name=_sso').val(button.value);"
+                . "\$('inputtype=text,inputtype=password').attr('required', false);"
+                . "rcmail.gui_objects.loginform.submit();"
+            . "}"
+            . "</script>";
+
+        return $args;
+    }
+
+    /**
+     * Debug function for drivers
+     */
+    public function debug($line)
+    {
+        if ($this->debug) {
+            rcube::write_log('sso', $line);
+        }
+    }
+
+    /**
+     * Initialize SSO driver object
+     */
+    private function get_driver($name)
+    {
+        if ($this->driver) {
+            return $this->driver;
+        }
+
+        $this->load_config();
+        $this->add_texts('localization/');
+
+        $options = (array) $this->rc->config->get('kolab_sso_options');
+        $options = (array) $options$name;
+        $driver  = $options'driver' ?: 'openidc';
+        $class   = "kolab_sso_$driver";
+
+        if (empty($options) || !file_exists($this->home . "/drivers/$driver.php")) {
+            rcube::raise_error(array(
+                    'line' => __LINE__, 'file' => __FILE__,
+                    'message' => "Unable to find SSO driver"
+                ), true, true);
+        }
+
+        // Add /lib to include_path
+        $include_path = $this->home . '/lib' . PATH_SEPARATOR;
+        $include_path .= ini_get('include_path');
+        set_include_path($include_path);
+
+        require_once $this->home . "/drivers/$driver.php";
+
+        $this->debug  = $this->rc->config->get('kolab_sso_debug');
+        $this->driver = new $class($this, $options);
+
+        return $this->driver;
+    }
+}
+
+/**
+ * DOMDocument wrapper with some shortcut method
+ */
+class DOMDocumentHelper extends DOMDocument
+{
+    public function loadHTML($html, $options = 0)
+    {
+        return parent::loadHTML('<html><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"></head><body>' . $html);
+    }
+
+    public function saveHTML($node = null)
+    {
+        return preg_replace('|</?body>|', '', parent::saveHTML($node));
+    }
+
+    public function createNode($name, $value = null, $args = array(), $parent = null, $prepend = false)
+    {
+        $node = parent::createElement($name);
+
+        if ($value) {
+            $node->appendChild(new DOMText(rcube::Q($value)));
+        }
+
+        foreach ($args as $attr_name => $attr_value) {
+            $node->setAttribute($attr_name, $attr_value);
+        }
+
+        if ($parent) {
+            if ($prepend && $parent->firstChild) {
+                $parent->insertBefore($node, $parent->firstChild);
+            }
+            else {
+                $parent->appendChild($node);
+            }
+        }
+
+        return $node;
+    }
+}

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase/JWT Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase/JWT/BeforeValidException.php Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase/JWT/ExpiredException.php Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase/JWT/JWT.php Added

@@ -0,0 +1,379 @@
+<?php
+
+namespace Firebase\JWT;
+use \DomainException;
+use \InvalidArgumentException;
+use \UnexpectedValueException;
+use \DateTime;
+
+/**
+ * JSON Web Token implementation, based on this spec:
+ * https://tools.ietf.org/html/rfc7519
+ *
+ * PHP version 5
+ *
+ * @category Authentication
+ * @package  Authentication_JWT
+ * @author   Neuman Vong <neuman@twilio.com>
+ * @author   Anant Narayanan <anant@php.net>
+ * @license  http://opensource.org/licenses/BSD-3-Clause 3-clause BSD
+ * @link     https://github.com/firebase/php-jwt
+ */
+class JWT
+{
+
+    /**
+     * When checking nbf, iat or expiration times,
+     * we want to provide some extra leeway time to
+     * account for clock skew.
+     */
+    public static $leeway = 0;
+
+    /**
+     * Allow the current timestamp to be specified.
+     * Useful for fixing a value within unit testing.
+     *
+     * Will default to PHP time() value if null.
+     */
+    public static $timestamp = null;
+
+    public static $supported_algs = array(
+        'HS256' => array('hash_hmac', 'SHA256'),
+        'HS512' => array('hash_hmac', 'SHA512'),
+        'HS384' => array('hash_hmac', 'SHA384'),
+        'RS256' => array('openssl', 'SHA256'),
+        'RS384' => array('openssl', 'SHA384'),
+        'RS512' => array('openssl', 'SHA512'),
+    );
+
+    /**
+     * Decodes a JWT string into a PHP object.
+     *
+     * @param string        $jwt            The JWT
+     * @param string|array  $key            The key, or map of keys.
+     *                                      If the algorithm used is asymmetric, this is the public key
+     * @param array         $allowed_algs   List of supported verification algorithms
+     *                                      Supported algorithms are 'HS256', 'HS384', 'HS512' and 'RS256'
+     *
+     * @return object The JWT's payload as a PHP object
+     *
+     * @throws UnexpectedValueException     Provided JWT was invalid
+     * @throws SignatureInvalidException    Provided JWT was invalid because the signature verification failed
+     * @throws BeforeValidException         Provided JWT is trying to be used before it's eligible as defined by 'nbf'
+     * @throws BeforeValidException         Provided JWT is trying to be used before it's been created as defined by 'iat'
+     * @throws ExpiredException             Provided JWT has since expired, as defined by the 'exp' claim
+     *
+     * @uses jsonDecode
+     * @uses urlsafeB64Decode
+     */
+    public static function decode($jwt, $key, array $allowed_algs = array())
+    {
+        $timestamp = is_null(static::$timestamp) ? time() : static::$timestamp;
+
+        if (empty($key)) {
+            throw new InvalidArgumentException('Key may not be empty');
+        }
+        $tks = explode('.', $jwt);
+        if (count($tks) != 3) {
+            throw new UnexpectedValueException('Wrong number of segments');
+        }
+        list($headb64, $bodyb64, $cryptob64) = $tks;
+        if (null === ($header = static::jsonDecode(static::urlsafeB64Decode($headb64)))) {
+            throw new UnexpectedValueException('Invalid header encoding');
+        }
+        if (null === $payload = static::jsonDecode(static::urlsafeB64Decode($bodyb64))) {
+            throw new UnexpectedValueException('Invalid claims encoding');
+        }
+        if (false === ($sig = static::urlsafeB64Decode($cryptob64))) {
+            throw new UnexpectedValueException('Invalid signature encoding');
+        }
+        if (empty($header->alg)) {
+            throw new UnexpectedValueException('Empty algorithm');
+        }
+        if (empty(static::$supported_algs$header->alg)) {
+            throw new UnexpectedValueException('Algorithm not supported');
+        }
+        if (!in_array($header->alg, $allowed_algs)) {
+            throw new UnexpectedValueException('Algorithm not allowed');
+        }
+        if (is_array($key) || $key instanceof \ArrayAccess) {
+            if (isset($header->kid)) {
+                if (!isset($key$header->kid)) {
+                    throw new UnexpectedValueException('"kid" invalid, unable to lookup correct key');
+                }
+                $key = $key$header->kid;
+            } else {
+                throw new UnexpectedValueException('"kid" empty, unable to lookup correct key');
+            }
+        }
+
+        // Check the signature
+        if (!static::verify("$headb64.$bodyb64", $sig, $key, $header->alg)) {
+            throw new SignatureInvalidException('Signature verification failed');
+        }
+
+        // Check if the nbf if it is defined. This is the time that the
+        // token can actually be used. If it's not yet that time, abort.
+        if (isset($payload->nbf) && $payload->nbf > ($timestamp + static::$leeway)) {
+            throw new BeforeValidException(
+                'Cannot handle token prior to ' . date(DateTime::ISO8601, $payload->nbf)
+            );
+        }
+
+        // Check that this token has been created before 'now'. This prevents
+        // using tokens that have been created for later use (and haven't
+        // correctly used the nbf claim).
+        if (isset($payload->iat) && $payload->iat > ($timestamp + static::$leeway)) {
+            throw new BeforeValidException(
+                'Cannot handle token prior to ' . date(DateTime::ISO8601, $payload->iat)
+            );
+        }
+
+        // Check if this token has expired.
+        if (isset($payload->exp) && ($timestamp - static::$leeway) >= $payload->exp) {
+            throw new ExpiredException('Expired token');
+        }
+
+        return $payload;
+    }
+
+    /**
+     * Converts and signs a PHP object or array into a JWT string.
+     *
+     * @param object|array  $payload    PHP object or array
+     * @param string        $key        The secret key.
+     *                                  If the algorithm used is asymmetric, this is the private key
+     * @param string        $alg        The signing algorithm.
+     *                                  Supported algorithms are 'HS256', 'HS384', 'HS512' and 'RS256'
+     * @param mixed         $keyId
+     * @param array         $head       An array with header elements to attach
+     *
+     * @return string A signed JWT
+     *
+     * @uses jsonEncode
+     * @uses urlsafeB64Encode
+     */
+    public static function encode($payload, $key, $alg = 'HS256', $keyId = null, $head = null)
+    {
+        $header = array('typ' => 'JWT', 'alg' => $alg);
+        if ($keyId !== null) {
+            $header'kid' = $keyId;
+        }
+        if ( isset($head) && is_array($head) ) {
+            $header = array_merge($head, $header);
+        }
+        $segments = array();
+        $segments = static::urlsafeB64Encode(static::jsonEncode($header));
+        $segments = static::urlsafeB64Encode(static::jsonEncode($payload));
+        $signing_input = implode('.', $segments);
+
+        $signature = static::sign($signing_input, $key, $alg);
+        $segments = static::urlsafeB64Encode($signature);
+
+        return implode('.', $segments);
+    }
+
+    /**
+     * Sign a string with a given key and algorithm.
+     *
+     * @param string            $msg    The message to sign
+     * @param string|resource   $key    The secret key
+     * @param string            $alg    The signing algorithm.
+     *                                  Supported algorithms are 'HS256', 'HS384', 'HS512' and 'RS256'
+     *
+     * @return string An encrypted message
+     *
+     * @throws DomainException Unsupported algorithm was specified
+     */
+    public static function sign($msg, $key, $alg = 'HS256')
+    {
+        if (empty(static::$supported_algs$alg)) {
+            throw new DomainException('Algorithm not supported');
+        }
+        list($function, $algorithm) = static::$supported_algs$alg;
+        switch($function) {
+            case 'hash_hmac':
+                return hash_hmac($algorithm, $msg, $key, true);
+            case 'openssl':
+                $signature = '';
+                $success = openssl_sign($msg, $signature, $key, $algorithm);
+                if (!$success) {
+                    throw new DomainException("OpenSSL unable to sign data");
+                } else {
+                    return $signature;
+                }
+        }
+    }
+
+    /**
+     * Verify a signature with the message, key and method. Not all methods
+     * are symmetric, so we must have a separate verify and sign method.
+     *
+     * @param string            $msg        The original message (header and body)
+     * @param string            $signature  The original signature
+     * @param string|resource   $key        For HS*, a string key works. for RS*, must be a resource of an openssl public key
+     * @param string            $alg        The algorithm
+     *
+     * @return bool
+     *
+     * @throws DomainException Invalid Algorithm or OpenSSL failure
+     */
+    private static function verify($msg, $signature, $key, $alg)
+    {
+        if (empty(static::$supported_algs$alg)) {
+            throw new DomainException('Algorithm not supported');
+        }
+
+        list($function, $algorithm) = static::$supported_algs$alg;
+        switch($function) {
+            case 'openssl':
+                $success = openssl_verify($msg, $signature, $key, $algorithm);
+                if ($success === 1) {
+                    return true;
+                } elseif ($success === 0) {
+                    return false;
+                }
+                // returns 1 on success, 0 on failure, -1 on error.
+                throw new DomainException(
+                    'OpenSSL error: ' . openssl_error_string()
+                );
+            case 'hash_hmac':
+            default:
+                $hash = hash_hmac($algorithm, $msg, $key, true);
+                if (function_exists('hash_equals')) {
+                    return hash_equals($signature, $hash);
+                }
+                $len = min(static::safeStrlen($signature), static::safeStrlen($hash));
+
+                $status = 0;
+                for ($i = 0; $i < $len; $i++) {
+                    $status |= (ord($signature$i) ^ ord($hash$i));
+                }
+                $status |= (static::safeStrlen($signature) ^ static::safeStrlen($hash));
+
+                return ($status === 0);
+        }
+    }
+
+    /**
+     * Decode a JSON string into a PHP object.
+     *
+     * @param string $input JSON string
+     *
+     * @return object Object representation of JSON string
+     *
+     * @throws DomainException Provided string was invalid JSON
+     */
+    public static function jsonDecode($input)
+    {
+        if (version_compare(PHP_VERSION, '5.4.0', '>=') && !(defined('JSON_C_VERSION') && PHP_INT_SIZE > 4)) {
+            /** In PHP >=5.4.0, json_decode() accepts an options parameter, that allows you
+             * to specify that large ints (like Steam Transaction IDs) should be treated as
+             * strings, rather than the PHP default behaviour of converting them to floats.
+             */
+            $obj = json_decode($input, false, 512, JSON_BIGINT_AS_STRING);
+        } else {
+            /** Not all servers will support that, however, so for older versions we must
+             * manually detect large ints in the JSON string and quote them (thus converting
+             *them to strings) before decoding, hence the preg_replace() call.
+             */
+            $max_int_length = strlen((string) PHP_INT_MAX) - 1;
+            $json_without_bigints = preg_replace('/:\s*(-?\d{'.$max_int_length.',})/', ': "$1"', $input);
+            $obj = json_decode($json_without_bigints);
+        }
+
+        if (function_exists('json_last_error') && $errno = json_last_error()) {
+            static::handleJsonError($errno);
+        } elseif ($obj === null && $input !== 'null') {
+            throw new DomainException('Null result with non-null input');
+        }
+        return $obj;
+    }
+
+    /**
+     * Encode a PHP object into a JSON string.
+     *
+     * @param object|array $input A PHP object or array
+     *
+     * @return string JSON representation of the PHP object or array
+     *
+     * @throws DomainException Provided object could not be encoded to valid JSON
+     */
+    public static function jsonEncode($input)
+    {
+        $json = json_encode($input);
+        if (function_exists('json_last_error') && $errno = json_last_error()) {
+            static::handleJsonError($errno);
+        } elseif ($json === 'null' && $input !== null) {
+            throw new DomainException('Null result with non-null input');
+        }
+        return $json;
+    }
+
+    /**
+     * Decode a string with URL-safe Base64.
+     *
+     * @param string $input A Base64 encoded string
+     *
+     * @return string A decoded string
+     */
+    public static function urlsafeB64Decode($input)
+    {
+        $remainder = strlen($input) % 4;
+        if ($remainder) {
+            $padlen = 4 - $remainder;
+            $input .= str_repeat('=', $padlen);
+        }
+        return base64_decode(strtr($input, '-_', '+/'));
+    }
+
+    /**
+     * Encode a string with URL-safe Base64.
+     *
+     * @param string $input The string you want encoded
+     *
+     * @return string The base64 encode of what you passed in
+     */
+    public static function urlsafeB64Encode($input)
+    {
+        return str_replace('=', '', strtr(base64_encode($input), '+/', '-_'));
+    }
+
+    /**
+     * Helper method to create a JSON error.
+     *
+     * @param int $errno An error number from json_last_error()
+     *
+     * @return void
+     */
+    private static function handleJsonError($errno)
+    {
+        $messages = array(
+            JSON_ERROR_DEPTH => 'Maximum stack depth exceeded',
+            JSON_ERROR_STATE_MISMATCH => 'Invalid or malformed JSON',
+            JSON_ERROR_CTRL_CHAR => 'Unexpected control character found',
+            JSON_ERROR_SYNTAX => 'Syntax error, malformed JSON',
+            JSON_ERROR_UTF8 => 'Malformed UTF-8 characters' //PHP >= 5.3.3
+        );
+        throw new DomainException(
+            isset($messages$errno)
+            ? $messages$errno
+            : 'Unknown JSON error: ' . $errno
+        );
+    }
+
+    /**
+     * Get the number of bytes in cryptographic strings.
+     *
+     * @param string
+     *
+     * @return int
+     */
+    private static function safeStrlen($str)
+    {
+        if (function_exists('mb_strlen')) {
+            return mb_strlen($str, '8bit');
+        }
+        return strlen($str);
+    }
+}

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase/JWT/SignatureInvalidException.php Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization/de.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization/en_US.inc Added

@@ -0,0 +1,34 @@
+<?php
+
+/**
+ * Localizations for the Kolab SSO plugin
+ *
+ * Copyright (C) 2018, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_sso/
+ */
+
+$labels'loginby' = 'Login by $provider';
+$labels'sso' = 'Single Sign On';
+$labels'errorunknown' = 'Unknown SSO error.';
+$labels'errorinvalidresponse' = 'Invalid SSO response.';
+$labels'errortokenfailed' = 'Failed to get SSO token.';
+$labels'errorinvalidtoken' = 'Invalid SSO token.';
+$labels'errorinvalidrequest' = 'Malformed SSO request.';
+$labels'errorunauthorizedclient' = 'Unauthorized SSO client.';
+$labels'errorinvalidclient' = 'SSO client authentication failed.';
+$labels'erroraccessdienied' = 'SSO request denied.';
+$labels'errorunsupportedresponsetype' = 'Unsupported SSO response type.';
+$labels'errorinvalidgrant' = 'Invalid authorization grant.';
+$labels'errorinvalidscope' = 'Invalid SSO scope.';
+$labels'errorservererror' = 'SSO server error.';
+$labels'errortemporarilyunavailable' = 'SSO service temporarily unavailable.';
+$labels'errorinteractionrequired' = 'User interaction required.';
+$labels'errorloginrequired' = 'User authentication required.';
+$labels'erroraccountselectionrequired' = 'User account selection required.';
+$labels'errorconsentrequired' = 'User consent required.';
+$labels'errorinvalidrequesturi' = 'Invalid request_uri.';
+$labels'errorinvalidrequestobject' = 'Invalid request object';
+$labels'errorrequestnotsupported' = 'Request not supported.';
+$labels'errorrequesturinotsupported' = 'Request_uri parameter not supported.';
+$labels'errorregistrationnotsupported' = 'Registration not supported';

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization/fi_FI.inc Added

@@ -0,0 +1,23 @@
+<?php
+/**
+ * Localizations for the Kolab SSO plugin
+ *
+ * Copyright (C) 2018, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_sso/
+ */
+$labels'loginby' = 'Kirjautumisen mahdollistaa $provider';
+$labels'sso' = 'Kertakirjautuminen';
+$labels'errorunknown' = 'Tuntematon kertakirjautumisvirhe.';
+$labels'errorinvalidresponse' = 'Virheellinen kertakirjautumisen vastaus.';
+$labels'errorinvalidrequest' = 'Väärinmuodostettu kertakirjautumispyyntö.';
+$labels'erroraccessdienied' = 'Kertakirjautumispyyntö kiellettiin.';
+$labels'errorservererror' = 'Kertakirjautumispalvelimen virhe.';
+$labels'errortemporarilyunavailable' = 'Kertakirjautumispalvelu ei ole juuri nyt käytettävissä.';
+$labels'errorinteractionrequired' = 'Käyttäjän vuorovaikutusta vaaditaan.';
+$labels'errorloginrequired' = 'Käyttäjätunnistautuminen vaaditaan.';
+$labels'erroraccountselectionrequired' = 'Käyttäjätilin valinta vaaditaan.';
+$labels'errorconsentrequired' = 'Käyttäjän hyväksyntä vaaditaan.';
+$labels'errorrequestnotsupported' = 'Pyyntö ei tuettu.';
+$labels'errorrequesturinotsupported' = 'Request_uri-parametri ei tuettu.';
+$labels'errorregistrationnotsupported' = 'Rekisteröinti ei tuettu';

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization/pl_PL.inc Added

@@ -0,0 +1,32 @@
+<?php
+/**
+ * Localizations for the Kolab SSO plugin
+ *
+ * Copyright (C) 2018, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_sso/
+ */
+$labels'loginby' = 'Zaloguj przez $provider';
+$labels'sso' = 'Jednokrotne Logowanie';
+$labels'errorunknown' = 'Nieznany błąd SSO.';
+$labels'errorinvalidresponse' = 'Błędna odpowiedź SSO.';
+$labels'errortokenfailed' = 'Nie udało się pobrać tokenu SSO.';
+$labels'errorinvalidtoken' = 'Błędny token SSO.';
+$labels'errorinvalidrequest' = 'Nieprawidłowe żądanie SSO.';
+$labels'errorunauthorizedclient' = 'Nieupoważniony klient SSO.';
+$labels'errorinvalidclient' = 'Błąd uwierzytelniania SSO.';
+$labels'erroraccessdienied' = 'Odrzucone żądanie SSO.';
+$labels'errorunsupportedresponsetype' = 'Nieobsługiwany typ odpowiedzi SSO.';
+$labels'errorinvalidgrant' = 'Nieprawidłowy grant autoryzacji.';
+$labels'errorinvalidscope' = 'Błędny zakres SSO.';
+$labels'errorservererror' = 'Błąd serwera SSO.';
+$labels'errortemporarilyunavailable' = 'Usługa jednokrotnego logowania tymczasowo niedostępna.';
+$labels'errorinteractionrequired' = 'Wymagana interakcja użytkownika.';
+$labels'errorloginrequired' = 'Wymagane uwierzytelnienie użytkownika.';
+$labels'erroraccountselectionrequired' = 'Wymagany wybór konta użytkownika.';
+$labels'errorconsentrequired' = 'Wymagana zgoda użytkownika.';
+$labels'errorinvalidrequesturi' = 'Błędny request_uri.';
+$labels'errorinvalidrequestobject' = 'Błędny obiekt żądania.';
+$labels'errorrequestnotsupported' = 'Żądanie nie obsługiwane.';
+$labels'errorrequesturinotsupported' = 'Parametr request_uri nie obsługiwany.';
+$labels'errorregistrationnotsupported' = 'Rejestracja nie obsługiwana.';

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization/ru_RU.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/tests Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/tests/LocalizationTest.php Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_tags/lib/kolab_tags_engine.php -> roundcubemail-1.5.tar.gz/plugins/kolab_tags/lib/kolab_tags_engine.php Changed

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_format_configuration.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_format_configuration.php Changed

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_format_distributionlist.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_format_distributionlist.php Changed

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_format_event.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_format_event.php Changed

@@ -83,7 +83,8 @@
             $vexceptions = new vectorevent;
             foreach ($object'exceptions' as $i => $exception) {
                 $exevent = new kolab_format_event;
-                $exevent->set($compacted = $this->compact_exception($exception, $object));  // only save differing values
+                $compacted = $this->compact_exception($exception, $object);
+                $exevent->set($compacted);  // only save differing values
 
                 // get value for recurrence-id
                 $recurrence_id = null;
@@ -175,7 +176,7 @@
         }
 
         // organizer is part of the attendees list in Roundcube
-        if ($object'organizer') {
+        if (!empty($object'organizer')) {
             $object'organizer''role' = 'ORGANIZER';
             array_unshift($object'attendees', $object'organizer');
         }
@@ -183,9 +184,9 @@
         // status defines different event properties...
         $status = $this->obj->status();
         if ($status == kolabformat::StatusTentative)
-          $object'free_busy' = 'tentative';
+            $object'free_busy' = 'tentative';
         else if ($status == kolabformat::StatusCancelled)
-          $object'cancelled' = true;
+            $object'cancelled' = true;
 
         // this is an exception object
         if ($this->obj->recurrenceID()->isValid()) {
@@ -239,13 +240,13 @@
         $recurrence_id_format = libkolab::recurrence_id_format($object);
         $instance_id = $recurrence_id instanceof DateTimeInterface ? $recurrence_id->format($recurrence_id_format) : strval($recurrence_id);
 
-        if ($object'recurrence_date' instanceof DateTimeInterface) {
+        if (!empty($object'recurrence_date') && $object'recurrence_date' instanceof DateTimeInterface) {
             if ($object'recurrence_date'->format($recurrence_id_format) == $instance_id) {
                 $result = $object;
             }
         }
 
-        if (!$result && is_array($object'exceptions')) {
+        if (!$result && !empty($object'exceptions') && is_array($object'exceptions')) {
             foreach ($object'exceptions' as $exception) {
                 if ($exception'_instance' == $instance_id) {
                     $result = $exception;

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_format_xcal.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_format_xcal.php Changed

@@ -423,14 +423,14 @@
 
         if (!empty($object'recurrence''FREQ')) {
             $freq     = $object'recurrence''FREQ';
-            $bysetpos = explode(',', $object'recurrence''BYSETPOS');
+            $bysetpos = isset($object'recurrence''BYSETPOS') ? explode(',', $object'recurrence''BYSETPOS') : ;
 
             $rr->setFrequency($this->rrule_type_map$freq);
 
             if ($object'recurrence''INTERVAL')
                 $rr->setInterval(intval($object'recurrence''INTERVAL'));
 
-            if ($object'recurrence''BYDAY') {
+            if (!empty($object'recurrence''BYDAY')) {
                 $byday = new vectordaypos;
                 foreach (explode(',', $object'recurrence''BYDAY') as $day) {
                     $occurrence = 0;
@@ -455,31 +455,37 @@
                 $rr->setByday($byday);
             }
 
-            if ($object'recurrence''BYMONTHDAY') {
+            if (!empty($object'recurrence''BYMONTHDAY')) {
                 $bymday = new vectori;
-                foreach (explode(',', $object'recurrence''BYMONTHDAY') as $day)
+                foreach (explode(',', $object'recurrence''BYMONTHDAY') as $day) {
                     $bymday->push(intval($day));
+                }
                 $rr->setBymonthday($bymday);
             }
 
-            if ($object'recurrence''BYMONTH') {
+            if (!empty($object'recurrence''BYMONTH')) {
                 $bymonth = new vectori;
                 foreach (explode(',', $object'recurrence''BYMONTH') as $month)
                     $bymonth->push(intval($month));
                 $rr->setBymonth($bymonth);
             }
 
-            if ($object'recurrence''COUNT')
+            if (!empty($object'recurrence''COUNT')) {
                 $rr->setCount(intval($object'recurrence''COUNT'));
-            else if ($object'recurrence''UNTIL')
+            }
+            else if (!empty($object'recurrence''UNTIL')) {
                 $rr->setEnd(self::get_datetime($object'recurrence''UNTIL', null, true, $start_tz));
+            }
 
             if ($rr->isValid()) {
                 // add exception dates (only if recurrence rule is valid)
-                $exdates = new vectordatetime;
-                foreach ((array)$object'recurrence''EXDATE' as $exdate)
-                    $exdates->push(self::get_datetime($exdate, null, true, $start_tz));
-                $this->obj->setExceptionDates($exdates);
+                if (!empty($object'recurrence''EXDATE')) {
+                    $exdates = new vectordatetime;
+                    foreach ((array)$object'recurrence''EXDATE' as $exdate) {
+                        $exdates->push(self::get_datetime($exdate, null, true, $start_tz));
+                    }
+                    $this->obj->setExceptionDates($exdates);
+                }
             }
             else {
                 rcube::raise_error(array(
@@ -495,8 +501,9 @@
         // save recurrence dates (aka RDATE)
         if (!empty($object'recurrence''RDATE')) {
             $rdates = new vectordatetime;
-            foreach ((array)$object'recurrence''RDATE' as $rdate)
+            foreach ((array)$object'recurrence''RDATE' as $rdate) {
                 $rdates->push(self::get_datetime($rdate, null, true, $start_tz));
+            }
             $this->obj->setRecurrenceDates($rdates);
         }

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_storage.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_storage.php Changed

@@ -169,7 +169,7 @@
      * Get a list of storage folders for the given data type
      *
      * @param string Data type to list folders for (contact,distribution-list,event,task,note)
-     * @param boolean Enable to return subscribed folders only (null to use configured subscription mode)
+     * @param bool   Enable to return subscribed folders only (null to use configured subscription mode)
      *
      * @return array List of Kolab_Folder objects (folder names in UTF7-IMAP)
      */
@@ -334,8 +334,9 @@
     /**
      * Creates folder ID from folder name
      *
-     * @param string  $folder Folder name (UTF7-IMAP)
-     * @param boolean $enc    Use lossless encoding
+     * @param string $folder Folder name (UTF7-IMAP)
+     * @param bool   $enc    Use lossless encoding
+     *
      * @return string Folder ID string
      */
     public static function folder_id($folder, $enc = null)
@@ -850,7 +851,7 @@
      * @param string  Optional root folder
      * @param string  Optional name pattern
      * @param string  Data type to list folders for (contact,event,task,journal,file,note,mail,configuration)
-     * @param boolean Enable to return subscribed folders only (null to use configured subscription mode)
+     * @param bool    Enable to return subscribed folders only (null to use configured subscription mode)
      * @param array   Will be filled with folder-types data
      *
      * @return array List of folders
@@ -1216,18 +1217,20 @@
      * @param string $folder Folder name
      * @param string $type   Content type
      *
-     * @return boolean True on success
+     * @return bool True on success
      */
-    public static function set_folder_type($folder, $type='mail')
+    public static function set_folder_type($folder, $type = 'mail')
     {
         self::setup();
 
-        list($ctype, $subtype) = explode('.', $type);
+        list($ctype, $subtype) = strpos($type, '.') !== false ? explode('.', $type) : array($type, null);
 
         $success = self::$imap->set_metadata($folder, array(self::CTYPE_KEY => $ctype, self::CTYPE_KEY_PRIVATE => $subtype ? $type : null));
 
-        if (!$success)  // fallback: only set private annotation
+        if (!$success) {
+            // fallback: only set private annotation
             $success |= self::$imap->set_metadata($folder, array(self::CTYPE_KEY_PRIVATE => $type));
+        }
 
         return $success;
     }
@@ -1236,9 +1239,9 @@
      * Check subscription status of this folder
      *
      * @param string $folder Folder name
-     * @param boolean $temp  Include temporary/session subscriptions
+     * @param bool   $temp  Include temporary/session subscriptions
      *
-     * @return boolean True if subscribed, false if not
+     * @return bool True if subscribed, false if not
      */
     public static function folder_is_subscribed($folder, $temp = false)
     {
@@ -1257,9 +1260,9 @@
      * Change subscription status of this folder
      *
      * @param string $folder Folder name
-     * @param boolean $temp  Only subscribe temporarily for the current session
+     * @param bool   $temp   Only subscribe temporarily for the current session
      *
-     * @return True on success, false on error
+     * @return bool True on success, false on error
      */
     public static function folder_subscribe($folder, $temp = false)
     {
@@ -1270,7 +1273,7 @@
             if (self::folder_is_subscribed($folder)) {
                 return true;
             }
-            else if (!is_array($_SESSION'kolab_subscribed_folders') || !in_array($folder, $_SESSION'kolab_subscribed_folders')) {
+            else if (empty($_SESSION'kolab_subscribed_folders') || !in_array($folder, $_SESSION'kolab_subscribed_folders')) {
                 $_SESSION'kolab_subscribed_folders' = $folder;
                 return true;
             }
@@ -1287,9 +1290,9 @@
      * Change subscription status of this folder
      *
      * @param string $folder Folder name
-     * @param boolean $temp  Only remove temporary subscription
+     * @param bool   $temp   Only remove temporary subscription
      *
-     * @return True on success, false on error
+     * @return bool True on success, false on error
      */
     public static function folder_unsubscribe($folder, $temp = false)
     {
@@ -1297,7 +1300,7 @@
 
         // temporary/session subscription
         if ($temp) {
-            if (is_array($_SESSION'kolab_subscribed_folders') && ($i = array_search($folder, $_SESSION'kolab_subscribed_folders')) !== false) {
+            if (!empty($_SESSION'kolab_subscribed_folders') && ($i = array_search($folder, $_SESSION'kolab_subscribed_folders')) !== false) {
                 unset($_SESSION'kolab_subscribed_folders'$i);
             }
             return true;
@@ -1315,7 +1318,7 @@
      *
      * @param string $folder Folder name
      *
-     * @return boolean True if active, false if not
+     * @return bool True if active, false if not
      */
     public static function folder_is_active($folder)
     {
@@ -1329,7 +1332,7 @@
      *
      * @param string $folder Folder name
      *
-     * @return True on success, false on error
+     * @return bool True on success, false on error
      */
     public static function folder_activate($folder)
     {
@@ -1343,7 +1346,7 @@
      *
      * @param string $folder Folder name
      *
-     * @return True on success, false on error
+     * @return bool True on success, false on error
      */
     public static function folder_deactivate($folder)
     {
@@ -1591,8 +1594,8 @@
     /**
      * Get a list of (virtual) top-level folders from the other users namespace
      *
-     * @param string  Data type to list folders for (contact,event,task,journal,file,note,mail,configuration)
-     * @param boolean Enable to return subscribed folders only (null to use configured subscription mode)
+     * @param string Data type to list folders for (contact,event,task,journal,file,note,mail,configuration)
+     * @param bool   Enable to return subscribed folders only (null to use configured subscription mode)
      *
      * @return array List of kolab_storage_folder_user objects
      */
@@ -1605,7 +1608,7 @@
             $other_ns = rtrim(self::namespace_root('other'), $delimiter);
             $path_len = count(explode($delimiter, $other_ns));
 
-            foreach ((array)self::list_folders($other_ns . $delimiter, '*', '', $subscribed) as $foldername) {
+            foreach ((array) self::list_folders($other_ns . $delimiter, '*', '', $subscribed) as $foldername) {
                 if ($foldername == 'INBOX')  // skip INBOX which is added by default
                     continue;
 
@@ -1619,16 +1622,16 @@
                 // truncate folder path to top-level folders of the 'other' namespace
                 $foldername = join($delimiter, array_slice($path, 0, $path_len + 1));
 
-                if (!$folders$foldername) {
+                if (empty($folders$foldername)) {
                     $folders$foldername = new kolab_storage_folder_user($foldername, $other_ns);
                 }
             }
 
             // for every (subscribed) user folder, list all (unsubscribed) subfolders
             foreach ($folders as $userfolder) {
-                foreach ((array)self::list_folders($userfolder->name . $delimiter, '*', $type, false, $folderdata) as $foldername) {
-                    if (!$folders$foldername) {
-                        $folders$foldername = new kolab_storage_folder($foldername, $type, $folderdata$foldername);
+                foreach ((array) self::list_folders($userfolder->name . $delimiter, '*', $type, false, $folderdata) as $foldername) {
+                    if (empty($folders$foldername)) {
+                        $folders$foldername = new kolab_storage_folder($foldername, $type, $folderdata$foldername ?? null);
                         $userfolder->children = $folders$foldername;
                     }
                 }

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_storage_folder.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_storage_folder.php Changed

@@ -129,7 +129,7 @@
         $ns     = $this->get_namespace();
         $nsdata = $this->imap->get_namespace($ns);
 
-        if (is_array($nsdata0) && strlen($nsdata00) && strpos($this->name, $nsdata00) === 0) {
+        if (!empty($nsdata00) && strpos($this->name, $nsdata00) === 0) {
             $subpath = substr($this->name, strlen($nsdata00));
             if ($ns == 'other') {
                 list($user, $suffix) = explode($nsdata01, $subpath, 2);
@@ -609,7 +609,7 @@
 
         // copy attachments from old message
         $copyfrom = $object'_copyfrom' ?? ($object'_msguid' ?? null);
-        if (!empty($copyfrom) && ($old = $this->cache->get($copyfrom, $type, $object'_mailbox'))) {
+        if (!empty($copyfrom) && ($old = $this->cache->get($copyfrom, $type, $object'_mailbox')) && !empty($old'_attachments')) {
             foreach ((array)$old'_attachments' as $key => $att) {
                 if (!isset($object'_attachments'$key)) {
                     $object'_attachments'$key = $old'_attachments'$key;
@@ -1003,7 +1003,7 @@
         foreach ((array)($object'_attachments' ?? ) as $key => $att) {
             if (empty($att'content') && !empty($att'id')) {
                 // @TODO: use IMAP CATENATE to skip attachment fetch+push operation
-                $msguid = $object'_copyfrom' ?: ($object'_msguid' ?: $object'uid');
+                $msguid = !empty($object'_copyfrom') ? $object'_copyfrom' : (!empty($object'_msguid') ? $object'_msguid' : $object'uid');
                 if ($is_file) {
                     $att'path' = tempnam($temp_dir, 'rcmAttmnt');
                     if (($fp = fopen($att'path', 'w')) && $this->get_attachment($msguid, $att'id', $object'_mailbox', false, $fp, true)) {

roundcubemail-1.5.tar.gz/plugins/logon_page Added

roundcubemail-1.5.tar.gz/plugins/logon_page/LICENSE Added

@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<http://www.gnu.org/licenses/>.

roundcubemail-1.5.tar.gz/plugins/logon_page/composer.json Added

roundcubemail-1.5.tar.gz/plugins/logon_page/logon_page.html Added

roundcubemail-1.5.tar.gz/plugins/logon_page/logon_page.php Added

@@ -0,0 +1,76 @@
+<?php
+
+/**
+ * Logon screen additions.
+ *
+ * Allows to display additional information (HTML code block) on logon page.
+ *
+ * Configuration: put your content in logon_page.html file. It will be parsed by
+ * Roundcube templates engine, so you can use all template features (tags).
+ *
+ * @version @package_version@
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *
+ * Copyright (C) 2012-2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class logon_page extends rcube_plugin
+{
+    public $task    = 'login';
+    public $noajax  = true;
+    public $noframe = true;
+
+    /**
+     * Plugin initialization
+     */
+    public function init()
+    {
+        $this->add_hook('template_object_loginform', array($this, 'logon_page_content'));
+    }
+
+    /**
+     * Login form object container handler. The content will be
+     * added to the BODY tag, not the container element itself.
+     */
+    public function logon_page_content($args)
+    {
+        $file = $this->home . '/logon_page.html';
+
+        if (file_exists($file)) {
+            $html = file_get_contents($file);
+            $html = trim(str_replace('', '', $html));
+        }
+
+        if ($html) {
+            $rcmail = rcube::get_instance();
+
+            // Parse content with templates engine, so we can use e.g. localization
+            $html = $rcmail->output->just_parse($html);
+
+            // Wrap the additional content inside <div>,
+            // so it can be styled by skins
+            $html = '<div id="logon_page">' . $html . '</div>';
+
+            // In Elastic we have to move the element to more apropriate place
+            $html .= "<script>\$('#login-footer').append(\$('#logon_page'));</script>";
+
+            // Add the content at the end of the BODY
+            $rcmail->output->add_footer($html);
+        }
+
+        return $args;
+    }
+}

roundcubemail-1.5.tar.gz/plugins/nextcloud_link Added

roundcubemail-1.5.tar.gz/plugins/nextcloud_link/LICENSE Added

@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<http://www.gnu.org/licenses/>.

roundcubemail-1.5.tar.gz/plugins/nextcloud_link/composer.json Added

roundcubemail-1.5.tar.gz/plugins/nextcloud_link/config.inc.php Added

@@ -0,0 +1,24 @@
+<?php
+/*
+ +-------------------------------------------------------------------------+
+ | Configuration for the Nextcloud Link plugin                             |
+ |                                                                         |
+ | Copyright (C) 2022, Apheleia IT AG                                      |
+ |                                                                         |
+ | This program is free software: you can redistribute it and/or modify    |
+ | it under the terms of the GNU Affero General Public License as          |
+ | published by the Free Software Foundation, either version 3 of the      |
+ | License, or (at your option) any later version.                         |
+ |                                                                         |
+ | This program is distributed in the hope that it will be useful,         |
+ | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+ | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the            |
+ | GNU Affero General Public License for more details.                     |
+ |                                                                         |
+ | You should have received a copy of the GNU Affero General Public License|
+ | along with this program. If not, see <http://www.gnu.org/licenses/>.    |
+ +-------------------------------------------------------------------------+
+*/
+
+// The Nextcloud UI location, e.g. 'https://nextcloud.domain.tld/apps/files'
+$config'nextcloud_link_url' = null;

roundcubemail-1.5.tar.gz/plugins/nextcloud_link/config.inc.php.dist Added

@@ -0,0 +1,24 @@
+<?php
+/*
+ +-------------------------------------------------------------------------+
+ | Configuration for the Nextcloud Link plugin                             |
+ |                                                                         |
+ | Copyright (C) 2022, Apheleia IT AG                                      |
+ |                                                                         |
+ | This program is free software: you can redistribute it and/or modify    |
+ | it under the terms of the GNU Affero General Public License as          |
+ | published by the Free Software Foundation, either version 3 of the      |
+ | License, or (at your option) any later version.                         |
+ |                                                                         |
+ | This program is distributed in the hope that it will be useful,         |
+ | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+ | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the            |
+ | GNU Affero General Public License for more details.                     |
+ |                                                                         |
+ | You should have received a copy of the GNU Affero General Public License|
+ | along with this program. If not, see <http://www.gnu.org/licenses/>.    |
+ +-------------------------------------------------------------------------+
+*/
+
+// The Nextcloud UI location, e.g. 'https://nextcloud.domain.tld/apps/files'
+$config'nextcloud_link_url' = null;

roundcubemail-1.5.tar.gz/plugins/nextcloud_link/nextcloud_link.php Added

@@ -0,0 +1,61 @@
+<?php
+
+/**
+ * A plugin that adds a task menu icon linking to the Nextcloud files
+ *
+ * @author Aleksander Machniak <machniak@apheleia-it.ch>
+ *
+ * Copyright (C) 2022, Apheleia IT AG <contact@apheleia-it.ch>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class nextcloud_link extends rcube_plugin
+{
+    public $task = '?(?!login|logout).*';
+
+
+    /**
+     * Plugin initialization.
+     */
+    function init()
+    {
+        $this->rc = rcube::get_instance();
+
+        if ($this->rc->output->type !== 'html' || !empty($this->rc->output->env'framed')) {
+            return;
+        }
+
+        $this->load_config();
+
+        $url = $this->rc->config->get('nextcloud_link_url');
+
+        if (empty($url)) {
+            return;
+        }
+
+        $this->add_button(
+            'command'    => 'nextcloud',
+            'class'      => 'button-nextcloud',
+            'classsel'   => 'button-nextcloud button-selected',
+            'innerclass' => 'button-inner',
+            'label'      => '',
+            'type'       => 'link'
+        , 'taskbar');
+
+        $this->rc->output->add_footer("
+<style>#taskmenu a.button-nextcloud:before { content: \"\\f0c2\"; }</style>
+<script>\$('#taskmenu a.button-nextcloud').on('click', function () { window.open('$url', '_blank'); });</script>");
+    }
+}

roundcubemail-1.5.3.tar.gz/plugins/tasklist/drivers/kolab/tasklist_kolab_driver.php -> roundcubemail-1.5.tar.gz/plugins/tasklist/drivers/kolab/tasklist_kolab_driver.php Changed

@@ -335,15 +335,15 @@
         $this->_read_lists();
 
         // create list and folder instance if necesary
-        if (!$this->lists$id) {
+        if (empty($this->lists$id)) {
             $folder = kolab_storage::get_folder(kolab_storage::id_decode($id));
-            if ($folder->type) {
+            if ($folder && $folder->type) {
                 $this->folders$id = $folder;
                 $this->lists$id = $this->folder_props($folder, $this->rc->config->get('kolab_tasklists', array()));
             }
         }
 
-        return $this->folders$id;
+        return $this->folders$id ?? null;
     }
 
 
@@ -455,8 +455,8 @@
                 $ret |= $folder->activate(intval($prop'active'));
 
             // apply to child folders, too
-            if ($prop'recursive') {
-                foreach ((array)kolab_storage::list_folders($folder->name, '*', 'task') as $subfolder) {
+            if (!empty($prop'recursive')) {
+                foreach ((array) kolab_storage::list_folders($folder->name, '*', 'task') as $subfolder) {
                     if (isset($prop'permanent'))
                         ($prop'permanent' ? kolab_storage::folder_subscribe($subfolder) : kolab_storage::folder_unsubscribe($subfolder));
                     if (isset($prop'active'))
@@ -640,13 +640,13 @@
 
         // query Kolab storage
         $query = array();
-        if ($filter'mask' & tasklist::FILTER_MASK_COMPLETE)
+        if (!empty($filter'mask') && $filter'mask' & tasklist::FILTER_MASK_COMPLETE)
             $query = array('tags','~','x-complete');
         else if (empty($filter'since'))
             $query = array('tags','!~','x-complete');
 
         // full text search (only works with cache enabled)
-        if ($filter'search') {
+        if (!empty($filter'search')) {
             $search = mb_strtolower($filter'search');
             foreach (rcube_utils::normalize_string($search, true) as $word) {
                 $query = array('words', '~', $word);

roundcubemail-1.5.3.tar.gz/program/include/rcmail.php -> roundcubemail-1.5.tar.gz/program/include/rcmail.php Changed

@@ -300,26 +300,27 @@
      *                          - rcube_addressbook::TYPE_CONTACT (or 'sql') for the SQL addressbook
      *                          - rcube_addressbook::TYPE_DEFAULT for the default addressbook
      * @param bool   $writeable True if the address book needs to be writeable
+     * @param bool   $fallback  Fallback to the first existing source, if the configured default wasn't found
      *
      * @return rcube_contacts|null Address book object
      */
-    public function get_address_book($id, $writeable = false)
+    public function get_address_book($id, $writeable = false, $fallback = true)
     {
         $contacts    = null;
         $ldap_config = (array) $this->config->get('ldap_public');
         $default     = false;
 
+        $id = (string) $id;
+
         // 'sql' is the alias for '0' used by autocomplete
         if ($id == 'sql') {
-            $id = rcube_addressbook::TYPE_CONTACT;
+            $id = (string) rcube_addressbook::TYPE_CONTACT;
         }
-        else if ($id == rcube_addressbook::TYPE_DEFAULT || $id == -1) { // -1 for BC
+        else if ($id === strval(rcube_addressbook::TYPE_DEFAULT) || $id === '-1') { // -1 for BC
             $id = $this->config->get('default_addressbook');
             $default = true;
         }
 
-        $id = (string) $id;
-
         // use existing instance
         if (isset($this->address_books$id) && ($this->address_books$id instanceof rcube_addressbook)) {
             $contacts = $this->address_books$id;
@@ -352,12 +353,13 @@
 
         // Get first addressbook from the list if configured default doesn't exist
         // This can happen when user deleted the addressbook (e.g. Kolab folder)
-        if (!$contacts && (!$id || $default)) {
+        if ($fallback && !$contacts && (!$id || $default)) {
             $source = $this->get_address_sources($writeable, !$default);
             $source = reset($source);
 
             if (!empty($source)) {
-                $contacts = $this->get_address_book($source'id');
+                // Note: No fallback here to prevent from an infinite loop
+                $contacts = $this->get_address_book($source'id', false, false);
                 if ($contacts) {
                     $id = $source'id';
                 }
@@ -1530,7 +1532,7 @@
      * Convert the given date to a human readable form
      * This uses the date formatting properties from config
      *
-     * @param mixed  $date    Date representation (string, timestamp or DateTime object)
+     * @param mixed  $date    Date representation (string, timestamp or DateTimeInterface)
      * @param string $format  Date format to use
      * @param bool   $convert Enables date conversion according to user timezone
      *

roundcubemail-1.5.3.tar.gz/program/js/app.js -> roundcubemail-1.5.tar.gz/program/js/app.js Changed

@@ -1363,11 +1363,8 @@
           this.list_mailbox(this.env.mailbox, 1);
         }
         else if (s && this.task == 'addressbook') {
-          if (this.env.source == '') {
-            for (n in this.env.address_sources) break;
-            this.env.source = n;
-            this.env.group = '';
-          }
+          this.env.source = this.env.last_source || '';
+          this.env.group = this.env.last_group || '';
           this.list_contacts(this.env.source, this.env.group, 1);
         }
         break;
@@ -4267,7 +4264,7 @@
     var container = $(this.gui_objects.editform).find('.identity-encryption').first();
     var identity_email = $(this.gui_objects.editform).find('.ff_email').val().trim();
 
-    if (!container.length || !identity_email || !this.mailvelope_keyring.createKeyGenContainer)
+    if (!container.length || !identity_email || !this.mailvelope_keyring.createKeyGenContainer)
       return;
 
     var key_fingerprint;
@@ -6359,8 +6356,8 @@
     else if (!this.env.search_request)
       folder = group ? 'G'+src+group : src;
 
-    this.env.source = src;
-    this.env.group = group;
+    this.env.source = this.env.last_source = src;
+    this.env.group = this.env.last_group = group;
 
     // truncate groups listing stack
     $.each(this.env.address_group_stack, function(i, v) {

roundcubemail-1.5.3.tar.gz/program/lib/Roundcube/rcube_db.php -> roundcubemail-1.5.tar.gz/program/lib/Roundcube/rcube_db.php Changed

roundcubemail-1.5.3.tar.gz/program/lib/Roundcube/rcube_vcard.php -> roundcubemail-1.5.tar.gz/program/lib/Roundcube/rcube_vcard.php Changed

@@ -839,17 +839,22 @@
     {
         $vcard = '';
 
-        foreach ((array)$data as $type => $entries) {
-            // valid N has 5 properties
-            while ($type == "N" && is_array($entries0) && count($entries0) < 5) {
-                $entries0 = "";
-            }
+        // Make sure FN is not empty (required by RFC2426)
+        if (empty($data'FN')) {
+            $data'FN' = !empty($data'EMAIL'00) ? $data'EMAIL'00 : '';
+        }
 
-            // make sure FN is not empty (required by RFC2426)
-            if ($type == "FN" && empty($entries) && !empty($data'EMAIL'00)) {
-                $entries0 = $data'EMAIL'00;
-            }
+        // Make sure N is not empty (required by RFC2426)
+        if (empty($data'N')) {
+            $data'N' = '', '', '', '', '';
+        }
+
+        // Valid N has 5 properties
+        while (isset($data'N'0) && is_array($data'N'0) && count($data'N'0) < 5) {
+            $data'N'0 = '';
+        }
 
+        foreach ((array)$data as $type => $entries) {
             foreach ((array)$entries as $entry) {
                 $attr = '';
                 if (is_array($entry)) {
@@ -884,8 +889,8 @@
                     $value = $entry;
                 }
 
-                // skip empty entries
-                if (self::is_empty($value)) {
+                // Skip empty entries that aren't required by vCard v3 format
+                if (!in_array($type, 'N', 'FN') && self::is_empty($value)) {
                     continue;
                 }

roundcubemail-1.5.3.tar.gz/skins/kolab/styles/_styles.less -> roundcubemail-1.5.tar.gz/skins/kolab/styles/_styles.less Changed

roundcubemail-1.5.3.tar.gz/skins/kolab/styles/styles.css -> roundcubemail-1.5.tar.gz/skins/kolab/styles/styles.css Changed

@@ -1 +1 @@
-p.image-attachment .attachment-links a:before,.quota-widget:before,.table-widget table.options-table td:not(:first-child) span:before,table.table th.checkbox-cell:before,a.button.icon:before,button.btn:before,.floating-action-buttons a.button:before,.ui-dialog .ui-dialog-titlebar-close:before,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before,.ui-datepicker .ui-datepicker-prev:before,.ui-datepicker .ui-datepicker-next:before,.pgpkeyimport div.key label.keyid+a:before,.pgpkeyimport li.uid:before,.menu a:before,.popover .menu li aaria-haspopup:after,.searchbar form:before,.searchbar a:before,.ui.alert>i.icon:before,.listing td.action a:before,.listing.iconized li a:before,.listing.iconized li>i:before,.listing.iconized tr td:before,.listing.iconized.selectable li a:before,ul.treelist li div.treetoggle:before,.folderlist li a:before,.messagelist tr.thread td.threads div:before,.messagelist td.subject span.msgicon.status:before,.messagelist td.subject span.msgicon.status.replied.forwarded:after,.messagelist span.attachment span,.messagelist span.flagged:before,.messagelist tr.flaggedroot:not(:hover) span.unflagged:before,.messagelist tr:hover span.unflagged:before,.contactlist td.contact:before,.contactlist td.contactgroup:before,.contactlist li a:before,.attachmentslist li:before,.attachmentslist li a.cancelupload:before,.attachmentslist li a.delete:before,.keylist li:before,#identities-table td.mail:before,#responses-table td.name:before,#filterslist td.name:before,#filtersetslist td.name:before,.propform td.rowbuttons a:before,fieldset.advanced>legend:after,.input-group .icon:before,.multi-input a.icon.reset:before,.tagedit-list li.tagedit-listelement-old a:before,div.tox .tox-dialog__header .tox-button:before,div.tox .tox-dialog__footer .tox-button:before,.html-editor .editor-toolbar .mce-i-html:before,.googie_list li .googie_list_revert:before,.googie_list li .googie_add_to_dict:before,body.status-flagged #message-header>.subject:before,#message-header>.subject a.extwin:before,#message-header .header-links a:before,.message-part blockquote span.blockquote-link:after,.message-htmlpart blockquote span.blockquote-link:after{font-size:1.25em;display:block;float:left;margin:0 .25rem 0 0;width:1.18em;height:1em;font-family:'Icons';font-style:normal;font-weight:900;text-decoration:inherit;text-align:center;speak:none;font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased}@font-face{font-family:'Icons';font-style:normal;font-weight:900;src:url("../fonts/fa-solid-900.woff2") format('woff2'),url("../fonts/fa-solid-900.woff") format('woff')}@font-face{font-family:'Icons';font-style:normal;font-weight:400;src:url("../fonts/fa-regular-400.woff2") format('woff2'),url("../fonts/fa-regular-400.woff") format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:local('Roboto'),local('Roboto-Regular'),url('../fonts/roboto-v19-regular.woff2') format('woff2'),url('../fonts/roboto-v19-regular.woff') format('woff')}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:local('Roboto Italic'),local('Roboto-Italic'),url('../fonts/roboto-v19-italic.woff2') format('woff2'),url('../fonts/roboto-v19-italic.woff') format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:local('Roboto Bold'),local('Roboto-Bold'),url('../fonts/roboto-v19-regular-700.woff2') format('woff2'),url('../fonts/roboto-v19-regular-700.woff') format('woff')}@font-face{font-family:'Roboto';font-style:italic;font-weight:700;src:local('Roboto Bold Italic'),local('Roboto-BoldItalic'),url('../fonts/roboto-v19-italic-700.woff2') format('woff2'),url('../fonts/roboto-v19-italic-700.woff') format('woff')}body,button,input,optgroup,select,textarea,.popover{font-family:Roboto,sans-serif}button,input,select,textarea{line-height:initial}input{vertical-align:middle}a{color:#f4c200}a:hover{color:#c19900}a.disabled{pointer-events:none}a.disabled:not(.btn){opacity:.5}html{height:100%;font-size:14px}body{min-width:240px;height:100%;color:#4f4f4f;overflow:hidden}html.iframe body{overflow:auto}#layout{overflow:hidden;display:flex;height:100%;width:100%}#layout>div>.scroller{flex:1;position:relative}#layout>div>.header,#layout>div>.footer{font-size:1rem;font-weight:bold;line-height:58px;height:58px;min-height:58px;padding:0 .25em;margin:0;position:relative;overflow:hidden;white-space:nowrap;display:flex;justify-content:center}#layout>div>.header{border-bottom:1px solid #d4dbde;color:#4f4f4f;background-color:#f1eeea}#layout>div>.header .header-title{overflow:hidden;text-overflow:ellipsis;flex:1;text-align:center;margin:0 -20rem}#layout>div>.header a.button{color:#7b7b77}#layout>div>.header a.toolbar-list-button,#layout>div>.header a.toolbar-menu-button{order:99}#layout>div>.footer{border-top:1px solid #d4dbde;background-color:#fff}#layout>div>.footer.small{height:35px;min-height:35px;line-height:35px}#layout>div>.footer:empty{display:none}#layout-sidebar{position:relative;display:flex;flex-direction:column;flex:2;max-width:30%;min-width:220px;border-right:1px solid #d4dbde;background-color:#fff}#layout-sidebar.sidebar-right{order:2;border-right:0;border-left:1px solid #d4dbde;flex:3}#layout-list{position:relative;display:flex;flex-direction:column;flex:3;max-width:30%;min-width:300px;border-right:1px solid #d4dbde;background-color:#fff}#layout-content{display:flex;flex:6;flex-direction:column;background-color:#fff}html.iframe #layout-content{height:100%}#layout-content>.formcontent,#layout-content>.content{height:100%;width:100%;overflow:auto;flex:1}#layout-content .iframe-wrapper{width:100%;flex:1}#layout-content .iframe-wrapper iframe{width:100%;height:100%;border:0}#layout-content.only>.scroller{overflow:auto}#layout-menu.popover{left:0 !important}#layout-menu .popover-header{height:58px;line-height:58px;border:0;border-radius:0;text-align:center}#layout-menu .popover-header img{max-height:58px;max-width:78px;padding:.25rem}@media screen and (min-width:481px) and (max-width:1024px){#layout-menu .popover-header img{max-width:35.1px}}@media screen and (min-width:481px){#layout-menu .popover-header{padding:0 !important;background-color:#3a444e !important}#layout-menu .popover-header a{display:none !important}}html.layout-phone #layout-menu .popover-header{display:flex !important;align-items:center;justify-content:center;padding:0 .5rem}html.layout-phone #layout-menu .popover-header img{max-width:222px}html.layout-phone #layout-menu .popover-header a{width:auto;flex:1}html.layout-phone #layout-menu .popover-header a:before{height:58px;float:right}html.layout-phone #layout-menu .popover-header a .inner{display:none}.column-resizer{cursor:col-resize;z-index:1;position:absolute;top:0;right:-3px;width:6px;height:100%}.column-resizer.inverted{right:auto;left:-3px}.column-resizer.active{width:10000px;right:-5000px}.column-resizer.active.inverted{right:auto;left:-5000px}@media screen and (max-width:1200px){#layout-sidebar,#layout-list{min-width:260px;flex:3}#layout-list>.header>a.button{padding:0 .25rem;margin:0 .25rem}}@media screen and (max-width:1024px){.column-resizer{display:none}#layout-sidebar,#layout-list{width:auto !important;flex:3 !important}}@media screen and (max-width:768px){#layout-sidebar,#layout-list{max-width:none;border:0 !important}#layout>div>.header{background-color:#f1eeea}#layout>div>.header a.button{margin:0 .3rem !important;padding:0 !important}#layout>div>.header a.button:before{font-size:1.75rem;height:58px;margin:0}#layout>div>.header a.button.filter:before{font-size:1.6rem}#layout>div>.header a.button .inner{display:none}#layout>div>.footer{background-color:#f1eeea}a.toolbar-list-button{display:none}}@media screen and (max-width:320px){#layout-sidebar,#layout-list{min-width:240px}}@media screen and (min-width:481px){a.task-menu-button{display:none}#layout-menu{background-color:#3a444e;width:42px}}@media screen and (min-width:769px){.floating-action-buttons,#layout-content>.header>.header-title,#layout>div>.header>.buttons,a.toolbar-menu-button{display:none}}@media screen and (min-width:1025px){#layout-menu{width:78px}}@media screen and (min-width:1201px){#layout-list>.header>.header-title:not(.all-sizes),a.toolbar-list-button,a.back-list-button,a.back-sidebar-button{display:none}}html.layout-phone .hidden-phone{display:none !important}html.layout-phone .hidden-small,html.layout-small .hidden-small{display:none !important}html.layout-small .hidden-lbs{display:none !important}html.layout-large .hidden-lbs,html.layout-normal .hidden-lbs,html.layout-large .hidden-big,html.layout-normal .hidden-big{display:none !important}html.layout-large .hidden-large{display:none !important}.rcmaddcontact,.hidden,.voice{display:none !important}font.bold{font-weight:bold}#rcmdraglayer{min-width:260px;width:260px;background-color:#3a444e;color:#fff;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem;z-index:250;opacity:.92;padding:.5rem;white-space:nowrap}#rcmdraglayer div{line-height:1.6em;overflow:hidden;text-overflow:ellipsis}.frame-content{padding:1rem}.frame-content h2{font-weight:bold;font-size:1.5em}.frame-content h3{font-weight:bold;font-size:1.25em}.listbox .scroller{width:100%;overflow-x:hidden;overflow-y:auto}.listbox .navlist{height:0;flex:initial !important}.listbox .navlist .listing tr:last-child td,.listbox .navlist .listing li:last-child{border-bottom:0}.popup .listbox{height:100%;display:flex;flex-direction:column}.popup .listbox .scroller{flex:1}.popup .listbox .footer{border-top:1px solid #d4dbde;background-color:#fbfbfb}.contact-header{display:flex;margin-bottom:1rem}.contact-header .contact-photo{min-width:112px}.contact-header .contact-head{margin-left:1rem;margin-top:0 !important}.contact-header .contact-head legend{display:none}p.image-attachment{position:relative;border:1px solid #ddd;border-radius:.3rem;background-color:rgba(244,194,0,0.05);float:left;margin:.5rem;min-width:47%;min-height:250px;overflow:hidden;display:flex;justify-content:center}@media screen and (max-width:480px){p.image-attachment{float:none;margin:.5rem 0 .5rem 0}}p.image-attachment .image-link{align-self:center;text-align:center;margin:1.6rem .5rem}p.image-attachment span{color:#7b7b77;padding:0 .5rem;font-size:90%;white-space:nowrap;position:absolute;line-height:1.5rem}p.image-attachment .image-filename{overflow:hidden;text-overflow:ellipsis;left:0;top:0;right:0;padding-right:4rem}p.image-attachment .image-filesize{right:0;top:0}p.image-attachment .attachment-links{position:absolute;bottom:0;left:0;width:100%;text-align:center}p.image-attachment .attachment-links a{text-decoration:none;display:inline-block;padding:0 .5rem;line-height:1.5rem}p.image-attachment .attachment-links a:before{display:inline-block}p.image-attachment .attachment-links a.open:before{content:"\f360"}p.image-attachment .attachment-links a.download:before{content:"\f019"}fieldset.image-attachment{margin-top:.5rem}fieldset.image-attachment legend{color:#7b7b77;font-size:.9rem;border-top:1px solid #f9f9f8;margin:0}fieldset.image-attachment img{max-width:100%}#folder-selector{overflow-y:auto}.noselect{user-select:none;-moz-user-select:none;-khtml-user-select:none;-ms-user-select:none;-webkit-user-select:none}.iframe-loader{width:100%;position:absolute;top:0;bottom:0;background-color:rgba(255,255,255,0.95);display:flex;align-items:center;justify-content:center;z-index:3}.iframe-loader .spinner-border{width:7rem;height:7rem;color:#f8f7f4;border:1rem solid;border-color:currentColor #7b7b77 currentColor currentColor}.footer.toolbar+.iframe-loader{top:58px;bottom:58px}.ios-scroll{padding:0;-webkit-overflow-scrolling:touch !important;overflow:scroll !important}.ios-scroll.iframe-wrapper{margin-top:1px}.webkit-scroller::-webkit-scrollbar{-webkit-appearance:none}.webkit-scroller::-webkit-scrollbar:vertical{width:.5rem}.webkit-scroller::-webkit-scrollbar:horizontal{height:.5rem}.webkit-scroller::-webkit-scrollbar-thumb{background-color:rgba(0,0,0,0.3);border-radius:.25rem;border:2px solid #fff}.quota-widget{width:100%;max-width:15em;padding:.5rem 1rem;display:flex;align-items:center;color:#7b7b77}.quota-widget:before{content:"\f0a0";line-height:1}.quota-widget .count{font-size:80%;order:2}.quota-widget .bar{flex:1;height:.5rem;margin:0 1rem;background-color:#fff;border:1px solid #d4dbde;border-radius:.25rem;overflow:hidden}.quota-widget .value{display:block;background-color:#f4c200;height:1rem;opacity:.75}.quota-widget .value.warning{background-color:#ff5552}.image-tools{position:absolute;top:5rem;left:0;height:58px;overflow:hidden;transform:translateX(-87%);transition:transform .3s ease-in-out;background-color:rgba(244,194,0,0.4);border-radius:0 .3rem .3rem 0}.image-tools .menu{float:left}.image-tools a.button.icon.tools{padding:0 .25rem;display:inline-block;height:58px}.image-tools a.button.icon.tools span.inner{display:none}.image-tools a.button.icon.tools:before{line-height:58px;margin:0}.image-tools.open{transform:translateX(0)}.image-tools.open a.button.icon.tools:before{content:"\f053"}.image-tools a{color:#fff !important}.image-tools a:focus,.image-tools a:hover{background-color:rgba(244,194,0,0.5) !important;outline:0}.quota-info{width:100%;display:table !important}.quota-info td,.quota-info th{text-align:center;white-space:nowrap}.quota-info th{border-top:0}.quota-info .root{line-height:1;font-style:italic;color:#7b7b77;background-color:#f8f7f4}.quota-info th:first-child,.quota-info .name{text-align:left}.nav-tabs{flex-wrap:nowrap}.nav-tabs .nav-item{white-space:nowrap;overflow:hidden}.nav-tabs .nav-link{overflow:hidden;text-overflow:ellipsis}.props-table td.title{width:7em}.table-widget{display:flex;flex-direction:column;margin-bottom:.5rem;border:1px solid #d4dbde}.table-widget>.content{overflow-x:auto;flex-grow:1;height:18.5em}.table-widget>.content table th{border-top:0}.table-widget>.footer{height:3.5rem;border-top:1px solid #d4dbde;text-align:left}.table-widget>.footer a{padding:.2rem .45rem !important;height:calc(3.5rem - 1px) !important}.table-widget table{margin:0;max-height:18.5em}.table-widget table.options-table td,.table-widget table.options-table th{text-align:center;vertical-align:middle}.table-widget table.options-table td:first-child,.table-widget table.options-table th:first-child{overflow:hidden;text-overflow:ellipsis;text-align:left}.table-widget table.options-table tr:last-child td{border-bottom:1px solid #d4dbde}.table-widget table.options-table tr.selected td{background-color:#fdf6d9;color:#4f4f4f;outline:0}.table-widget table.options-table td:not(:first-child) span{display:inline-block;line-height:1.25}.table-widget table.options-table td.enabled span:before{content:"\f00c"}.table-widget table.options-table td.partial span:before{opacity:.3;content:"\f00c"}table.compact-table{margin:0;width:100%}table.compact-table *:not(.invalid-feedback){font-size:inherit}table.compact-table td{padding:.25rem;border:0}table.compact-table td:first-child{padding-left:0}table.compact-table td:last-child{padding-right:0}table.table .checkbox-cell{width:3rem;white-space:nowrap;overflow:hidden;text-align:center;padding:.5rem}html.touch table.table .checkbox-cell{padding:.5rem .3rem}table.table th.checkbox-cell{padding:.75rem 0;max-width:1rem}table.table th.checkbox-cell:before{cursor:pointer;margin:0 1rem;line-height:1}table.table th.checkbox-cell.subscription:before{content:"\f143"}table.table th.checkbox-cell.alarm:before{content:"\f0f3";font-weight:400}table.table th.checkbox-cell.read:before{content:"\f06e"}table.table th.checkbox-cell.write:before{content:"\f303"}table.table .buttons-cell{width:1%;white-space:nowrap;text-align:center}table.table .buttons-cell a.button:before{line-height:1;float:none;display:inline-block}@media screen and (min-width:480px){table.table .buttons-cell a.button .inner{display:inline}}table.table label{margin:0;display:inline}fieldset.tab-pane table.table thead th{border:0}table.table tr.deleted td{color:rgba(79,79,79,0.5) !important}.table thead th{border-width:1px;white-space:nowrap}.button.disabled{opacity:.5}a.button{text-decoration:none !important}a.button.icon.sidebar-menu:before,button.btn.sidebar-menu:before,a.button.icon.toolbar-menu-button:before,button.btn.toolbar-menu-button:before,a.button.icon.toolbar-list-button:before,button.btn.toolbar-list-button:before{content:"\f142";width:1em}a.button.icon.task-menu-button:before,button.btn.task-menu-button:before{content:"\f0c9"}a.button.icon.back-sidebar-button:before,button.btn.back-sidebar-button:before,a.button.icon.back-content-button:before,button.btn.back-content-button:before,a.button.icon.back-list-button:before,button.btn.back-list-button:before{content:"\f053"}a.button.icon.refresh:before,button.btn.refresh:before{content:"\f021"}a.button.icon.generate:before,button.btn.generate:before,a.button.icon.yes:before,button.btn.yes:before,a.button.icon.submit:before,button.btn.submit:before,a.button.icon.continue:before,button.btn.continue:before,a.button.icon.save:before,button.btn.save:before{content:"\f00c"}a.button.icon.create:before,button.btn.create:before{content:"\f0fe"}a.button.icon.edit:before,button.btn.edit:before{content:"\f303"}a.button.icon.qrcode:before,button.btn.qrcode:before{content:"\f029"}a.button.icon.search:before,button.btn.search:before{content:"\f002"}a.button.icon.filter:before,button.btn.filter:before{content:"\f0b0";font-size:1.2em}a.button.icon.import:before,button.btn.import:before{content:"\f093"}a.button.icon.export:before,button.btn.export:before{content:"\f019"}a.button.icon.discard:before,button.btn.discard:before,a.button.icon.delete:before,button.btn.delete:before{content:"\f2ed";font-weight:400}a.button.icon.next:before,button.btn.next:before{content:"\f061"}a.button.icon.restore:before,button.btn.restore:before{content:"\f0e2"}a.button.icon.send:before,button.btn.send:before,a.button.icon.bounce:before,button.btn.bounce:before{content:"\f1d8"}a.button.icon.attach:before,button.btn.attach:before{content:"\f0c6"}a.button.icon.attach.vcard:before,button.btn.attach.vcard:before{content:"\f007"}a.button.icon.no:before,button.btn.no:before,a.button.icon.close:before,button.btn.close:before,a.button.icon.cancel:before,button.btn.cancel:before{content:"\f00d"}a.button.icon.back:before,button.btn.back:before{content:"\f053"}a.button.icon.remove:before,button.btn.remove:before{content:"\f00d"}a.button.icon.unlock:before,button.btn.unlock:before{content:"\f09c"}a.button.icon.help:before,button.btn.help:before{content:"\f1cd";font-weight:400}a.button.icon.folders:before,button.btn.folders:before{content:"\f07c"}a.button.icon.options:before,button.btn.options:before{content:"\f1de"}a.button.icon.tools:before,button.btn.tools:before,a.button.icon.settings:before,button.btn.settings:before{content:"\f013"}a.button.icon.properties:before,button.btn.properties:before{content:"\f05a"}a.button.icon.selection:before,button.btn.selection:before{content:"\f14a";font-weight:400}a.button.icon.insert.recipient:before,button.btn.insert.recipient:before{content:"\f234"}a.button.icon.encrypt:before,button.btn.encrypt:before{content:"\f023"}a.button.icon.sign:before,button.btn.sign:before{content:"\f5b7"}a.button.icon.sso:before,button.btn.sso:before{content:"\f2f6"}a.button.icon.extwin:before,button.btn.extwin:before{content:"\f360"}a.btn:before,button.btn:before{display:inline !important;float:none !important;vertical-align:middle;margin-right:.4rem !important}a.btn.oauth.google:before,button.btn.oauth.google:before,a.btn.oauth.outlook:before,button.btn.oauth.outlook:before{content:" ";display:inline-block !important;height:1.5rem;width:1.5rem;margin-right:.8rem !important;background-size:100% auto}a.btn.oauth.google:before,button.btn.oauth.google:before{background:url('../images/google-icon.svg') top left no-repeat}a.btn.oauth.outlook:before,button.btn.oauth.outlook:before{background:url('../images/microsoft-icon.svg') top left no-repeat}a.button.icon.dropdown:before{content:"\f0d7";font-size:1em}a.button.icon>span.inner{display:none}html.touch .btn:focus{box-shadow:none !important}.floating-action-buttons{position:absolute;right:0;bottom:0}.footer:not(:empty)+.floating-action-buttons{bottom:35px}.floating-action-buttons a.button{display:block;float:left;width:4rem;height:4rem;border-radius:50%;background:#f4c200;color:white;opacity:.95;box-shadow:0 0 5px 5px #ffeda7;margin:0 1rem 1rem 0}.floating-action-buttons a.button:before{content:"\f067";width:4rem;height:4rem;line-height:4rem}.floating-action-buttons a.button.compose:before{content:"\f304"}.floating-action-buttons a.button .inner{display:none}.btn:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.3)}.btn-link{color:#f4c200}.btn-secondary{color:#fff;background:#8b9fa7;border-color:#8b9fa7}.btn-secondary:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}.btn-secondary:hover{background:#7c939c;border-color:#778e98}.btn-secondary.disabled,.btn-secondary:disabled{background:#8b9fa7;border-color:#8b9fa7}.btn-secondary:not(:disabled):not(.disabled):active,.btn-secondary:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}.btn-secondary:not(:disabled):not(.disabled):active:focus,.btn-secondary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}.btn-primary{color:#fff;background:#f4c200;border-color:#f4c200}.btn-primary:focus{background:#dbae00;border-color:#d0a600;box-shadow:0 0 0 .2rem rgba(244,194,0,0.5)}.btn-primary:hover{background:#dbae00;border-color:#d0a600}.btn-primary.disabled,.btn-primary:disabled{background:#f4c200;border-color:#f4c200}.btn-primary:not(:disabled):not(.disabled):active,.btn-primary:not(:disabled):not(.disabled).active{background:#c19900;border-color:#b79100}.btn-primary:not(:disabled):not(.disabled):active:focus,.btn-primary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.53)}.btn-danger{color:#fff;background:#ff5552;border-color:#ff5552}.btn-danger:focus{background:#ff3c38;border-color:#ff322e;box-shadow:0 0 0 .2rem rgba(255,85,82,0.5)}.btn-danger:hover{background:#ff3c38;border-color:#ff322e}.btn-danger.disabled,.btn-danger:disabled{background:#ff5552;border-color:#ff5552}.btn-danger:not(:disabled):not(.disabled):active,.btn-danger:not(:disabled):not(.disabled).active{background:#ff231f;border-color:#ff1915}.btn-danger:not(:disabled):not(.disabled):active:focus,.btn-danger:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(255,85,82,0.53)}.ui-widget-overlay{background-color:rgba(79,79,79,0.5);opacity:1 !important}.ui-widget-overlay.datepicker{z-index:119}.ui-widget{border:1px solid #d4dbde;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem}.ui-menu{overflow-y:auto;overflow-x:hidden;max-height:400px;border-radius:.3rem;z-index:240;position:absolute}.ui-menu .ui-state-active{border:0 !important;background-color:#f4c200 !important}.ui-menu .ui-menu-item{white-space:nowrap;cursor:default}.ui-menu .ui-menu-item-wrapper{margin:0 !important}.ui-dialog{border-radius:0;box-shadow:none}.ui-dialog.no-titlebar .ui-dialog-titlebar{display:none}.ui-dialog .ui-dialog-titlebar{height:58px;border-bottom:1px solid #ddd}.ui-dialog .ui-dialog-titlebar button:before{margin:0}.ui-dialog .ui-dialog-title{line-height:58px;font-size:1.25rem;padding:0 3rem 0 1rem;color:#4f4f4f}.ui-dialog .ui-dialog-titlebar-close{border:0;color:#4f4f4f;background:transparent;right:0;top:0;position:absolute;padding:.25rem .5rem;margin:15px .5rem}.ui-dialog .ui-dialog-titlebar-close:before{content:"\f00d";line-height:1.5rem;margin:0 !important}.ui-dialog .ui-dialog-content>.popupmenu{display:block !important}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset{display:flex;justify-content:flex-end}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button{overflow:hidden;text-overflow:ellipsis;min-width:5rem;margin:9px 4px}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:last-child,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:last-child{margin-right:0}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{padding-right:0;padding-left:0;text-decoration:none;color:#4f4f4f}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:focus{background-color:rgba(244,194,0,0.5)}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options{order:-1;padding:.375rem .25rem;margin-right:.3rem}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before{content:"\f013";width:100%;height:1.25em}.ui-dialog iframe,.ui-dialog .ui-dialog-content.iframe{padding:0;width:100% !important;height:100%;border:0;overflow:hidden}.ui-dialog,.ui-dialog-content{box-sizing:initial}.ui-widget-content .ui-icon.ui-resizable-se{background:url("data:image/svg+xml;charset=utf-8,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%2016%2016%22%3E%0A%20%20%3Cpath%20fill%3D%22%23888%22%20d%3D%22M6.7%2016L16%206.7V5.3L5.3%2016zM9.7%2016L16%209.7V8.3L8.3%2016zM12.7%2016l3.3-3.3v-1.4L11.3%2016zM15.7%2016l.3-.3v-1.4L14.3%2016z%22%2F%3E%0A%3C%2Fsvg%3E%0A")}@media screen and (max-width:480px){.ui-dialog{width:100% !important;height:100% !important;display:flex;flex-direction:column;border:0;top:0 !important}.ui-dialog .ui-resizable-handle,.ui-dialog .ui-dialog-titlebar-close{display:none !important}.ui-dialog .ui-dialog-titlebar{height:58px;text-align:center;background-color:#f1eeea}.ui-dialog .ui-dialog-title{line-height:58px;font-size:1rem;padding:0 1rem}.ui-dialog .ui-dialog-content{flex:1}.ui-dialog .ui-dialog-content:not(.iframe){padding:1rem}.ui-dialog .ui-dialog-buttonpane{padding:0 !important;text-align:center !important;border-top:1px solid #ddd;height:58px !important;background-color:#f1eeea}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset{justify-content:space-around}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button{margin:0 !important;padding:.45rem;border:0 !important;height:58px;box-shadow:none;font-size:90%;line-height:1.5}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:before{display:block !important;float:none;width:auto;height:1.75rem;line-height:1.75;margin:0 !important}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:active{box-shadow:none}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-primary,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-secondary{color:#7b7b77;background:transparent}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-danger{color:#ff5552;background:transparent}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.disabled,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:disabled{opacity:.5}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.cancel{order:100}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{color:#7b7b77;margin:0;padding:.45rem;font-size:90%}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before{display:block !important;height:1.75rem;line-height:1.75;margin:0}}.ui-slider{box-shadow:none}.ui-slider .ui-slider-range{border-radius:.3rem;background:#ffe88e}.ui-slider .ui-slider-handle{border-radius:.3rem}.ui-slider .ui-slider-handle.ui-state-active{background:#f4c200;border-color:#5b4800}.ui-datepicker{margin:calc(50vh - 10em) calc(50vw - 10em) !important;top:0 !important;left:0 !important;box-shadow:none;user-select:none}.ui-datepicker:not(.ui-datepicker-inline){z-index:120 !important}.ui-datepicker .ui-datepicker-header,.ui-datepicker .ui-datepicker-title{line-height:4rem;height:4rem;padding:0}.ui-datepicker .ui-datepicker-header{border-bottom:1px solid #ddd}.ui-datepicker .ui-datepicker-header a{height:4rem}.ui-datepicker .ui-datepicker-header select{display:inline-block}.ui-datepicker .ui-icon{background-image:none !important;background-position:none !important}.ui-datepicker .ui-datepicker-prev,.ui-datepicker .ui-datepicker-next{cursor:pointer;width:auto;color:#4f4f4f;text-decoration:none}.ui-datepicker .ui-datepicker-prev:before,.ui-datepicker .ui-datepicker-next:before{content:"\f053";margin:0 .25em;height:auto;width:1em}.ui-datepicker .ui-datepicker-prev:before{content:"\f053"}.ui-datepicker .ui-datepicker-next:before{content:"\f054"}.ui-datepicker td a{padding:0;line-height:1.8em;border-radius:.3rem}.ui-datepicker .ui-state-default,.ui-datepicker.ui-widget-content .ui-state-default{border:0;background:transparent;color:#4f4f4f}.ui-datepicker .ui-datepicker-days-cell-over a,.ui-datepicker .ui-datepicker-days-cell-over a.ui-state-default,.ui-datepicker .ui-state-highlight,.ui-datepicker.ui-widget-content .ui-state-highlight{background:#ffe88e;color:#f4c200}.ui-datepicker a.ui-state-active{background:#f4c200 !important;color:#fff !important;font-weight:bold}.ui-datepicker html.touch td a{font-size:1.2em;line-height:2.2em}.input-group>.form-control.hasDatepicker{position:initial}.minicolors-panel{border:1px solid #d4dbde;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem;height:152px;padding:1px}.input-group .minicolors-input{width:100%;min-width:130px;border-left:0;border-right:0}@media screen and (max-width:320px){.ui-widget-content{border-radius:0}.ui-menu{border-radius:.3rem;left:15px !important;right:15px;width:auto}.ui-dialog .ui-dialog-content:not(.iframe){padding:.65rem}}.popupmenu{display:none;padding:0;min-width:180px;height:100%}.popupmenu li>a{width:100%}.popupmenu.propform{overflow:hidden;padding:.25rem}.popupmenu.simplelist{min-width:80px}.popup.justified{display:flex;justify-content:space-around}.popover-body{padding:0;overflow-x:hidden}.popover-body>.popupmenu{display:block !important}.popover{box-shadow:3px 3px 5px #f8f7f4;border-color:#d4dbde;padding:0;z-index:1300}.popover .popover-header{display:none}@media screen and (min-width:769px){.popover .listing li:first-child{border-radius:.25rem .25rem 0 0}.popover .listing li:last-child{border-bottom-right-radius:.25rem;border-bottom-left-radius:.25rem}.popover .listing ul.rounded-0>li{border-radius:0}}html.layout-small .popover:not(.select-menu),html.layout-phone .popover:not(.select-menu){margin:0 !important;padding:0;right:0;left:initial !important;bottom:0;top:0;width:272px;transform:none !important;border-radius:0;border:0;display:flex;flex-direction:column;box-shadow:none}html.layout-small .popover:not(.select-menu) div.arrow,html.layout-phone .popover:not(.select-menu) div.arrow{display:none}html.layout-small .popover:not(.select-menu) .listing li:last-child,html.layout-phone .popover:not(.select-menu) .listing li:last-child{border-bottom:1px solid #f8f7f4}html.layout-small .popover-overlay,html.layout-phone .popover-overlay{z-index:1299;background-color:rgba(79,79,79,0.5);position:absolute;top:0;bottom:0;width:100%}html.layout-small .popover-header,html.layout-phone .popover-header{display:block;border-radius:0;border:0;padding:0 .5em;height:58px;min-height:58px;line-height:58px;font-size:16px;color:#fff;background-color:#3a444e}html.layout-small .popover-header:before,html.layout-phone .popover-header:before{display:none}html.layout-small .popover-header a,html.layout-phone .popover-header a{display:inline-block;width:100%}html.layout-small .popover-body>*,html.layout-phone .popover-body>*{max-height:100% !important}html.touch .popover .listing li a{line-height:47px;font-size:16px;padding:0 .5em}html.touch .popover .listing li a:before{float:left}.select-menu{max-width:initial;margin:0;height:auto;z-index:1301}.select-menu .popover-header{border-radius:.25rem .25rem 0 0 !important}.select-menu .listing li a{padding-left:.25rem;outline:0}.select-menu .listing li:last-child{border-bottom-right-radius:.25rem;border-bottom-left-radius:.25rem}.select-menu.inline .listing li{padding-right:.5rem}.select-menu.inline .listing li:first-child{border-top-left-radius:.25rem;border-top-right-radius:.25rem}.pgpkeyimport div.key{position:relative;padding:.5rem 0}.pgpkeyimport div.key.revoked,.pgpkeyimport div.key.disabled{color:#7b7b77}.pgpkeyimport div.key label{display:inline-block;margin-right:.5em;margin-bottom:0}.pgpkeyimport div.key label:after{content:":"}.pgpkeyimport div.key label.keyid{display:none}.pgpkeyimport div.key label+a,.pgpkeyimport div.key label+span{line-height:2.6rem;margin-right:1em;white-space:nowrap;text-decoration:none}.pgpkeyimport div.key label.keyid+a{font-weight:bold}.pgpkeyimport div.key label.keyid+a:before{content:"\f084"}.pgpkeyimport ul.uids{margin:0;padding:0}.pgpkeyimport li.uid{border:0;padding:.25rem 0 0 1.5em;line-height:1.5rem !important;list-style-type:none}.pgpkeyimport li.uid:before{content:"\f007";opacity:.25;font-size:1em;line-height:1.25}.pgpkeyimport button.importkey{position:absolute;top:.5rem;right:0}.pgpkeyimport button:disabled{display:none}.menu{margin:0;text-align:center;white-space:nowrap}.menu a{overflow:hidden;text-overflow:ellipsis;text-decoration:none}.menu a:before{content:"\00a0"}.menu a:hover,.menu a:focus{outline:0}.menu a:not(.disabled):focus,.menu a:not(.disabled):hover{background-color:#f7f5f2}.menu.toolbar li{display:inline-block;height:58px}.menu.toolbar a{color:#7b7b77;display:block;float:left;border:0 !important;height:58px;min-width:3.2rem;max-width:6rem;width:auto;padding:.45rem;line-height:1.5;cursor:pointer;font-size:1rem;text-align:center}.menu.toolbar a:before{height:1.75rem !important;float:none !important;width:auto !important;margin:0 !important}.menu.toolbar a.selected{color:#41b849}.menu.toolbar>.spacer{width:1em}.menu.toolbar .dropbutton:not(.disabled):hover{background-color:#f7f5f2}.menu.toolbar .dropbutton a.dropdown{padding:0 .3rem}.menu.toolbar .dropbutton a.dropdown:before{line-height:58px}.menu.toolbar .dropbutton a.dropdown:hover{background-color:#ece8e3}.menu span.inner{font-size:90%;font-weight:normal}.menu .dropbutton{display:inline-block}.menu .dropbutton a.dropdown{font-size:75%;min-width:0}html.ie11 .menu .dropbutton a.dropdown:before{font-size:80%}.menu .dropbutton a.dropdown span.inner{display:none}.menu .dropbutton a:first-child{padding-right:0}.menu.pagenav{display:flex;justify-content:space-between;align-items:center;padding:0 !important;font-size:100%}.menu.pagenav a{flex-grow:1;display:inline-block;min-width:2rem !important;height:35px;color:#7b7b77}.menu.pagenav a:before{margin:0;display:inline;float:none;line-height:35px}.menu.pagenav .pagenav-text{overflow:hidden;text-overflow:ellipsis;color:#7b7b77;flex-grow:4;font-size:80%}.menu.pagenav input{width:3rem;max-width:5rem;font-size:90%;text-align:center;max-height:1.6rem;margin:0 .2rem}html.layout-phone .menu.pagenav input{display:none}.menu.pagenav span.inner{display:none}.menu.pagenav.pagenav-list{cursor:pointer;background-color:#fbfbfb;border-bottom:1px solid #f8f7f4}.menu.pagenav.pagenav-list a{flex-grow:unset}.menu.pagenav.pagenav-list .pagenav-text{text-align:left;font-size:100%}.menu.pagenav.pagenav-list+.navlist{background-color:#fbfbfb}.menu.pagenav.pagenav-list.expanded+.navlist{border-bottom:1px solid #d4dbde}.menu.content-frame-navigation.hide-nav-buttons a.next,.menu.content-frame-navigation.hide-nav-buttons a.prev{display:none}.menu .listselectors{max-width:100%;display:flex;justify-content:space-around}.menu .buttons{display:block}.menu .buttons button{display:block;float:left;cursor:pointer;color:#7b7b77;background-color:transparent;border:0;padding:0;height:58px;line-height:58px;width:2.5em}.menu .buttons button:before{font-size:1.75rem}.popover .menu li{display:block;height:auto;text-align:left}.popover .menu li.spacer{display:none}.popover .menu li:last-child{border:0}.popover .menu li.separator{line-height:1.5rem !important;font-size:.75rem !important;padding:0 .5rem;color:#7b7b77;background-color:#f8f7f4}.popover .menu li.separator label{margin:0}.popover .menu li a{height:unset;max-width:100%;width:100%;line-height:35px;display:block;padding:0 .5rem;text-align:left}.popover .menu li a:before{line-height:inherit;height:inherit !important;margin-right:.5rem !important;float:left !important;width:1.18em !important;min-width:1.18em}.popover .menu li a:not(.disabled):hover{color:#fff;background-color:#f4c200}.popover .menu li aaria-haspopup{display:flex}.popover .menu li aaria-haspopup:after{color:#7b7b77;font-size:.9em;margin:0 0 0 .2em;min-width:1.18em;content:"\f054"}html.layout-small .popover .menu li aaria-haspopup:after{margin:0 .2em}.popover .menu li aaria-haspopup.dropdown:after{color:#4f4f4f;margin:0 .6em !important}.popover .menu li aaria-haspopup:hover:after{color:#fff}.popover .menu li aaria-haspopup>span{overflow:hidden;text-overflow:ellipsis;flex:1}.popover .menu li span.inner{font-size:100%}.popover .menu .dropbutton{display:flex}.popover .menu .dropbutton a:first-child{overflow:hidden;text-overflow:ellipsis;flex:1}.popover .menu .dropbutton:not(.disabled):hover{background-color:#f6f6f6}.popover .menu .dropbutton a.dropdown{width:3.5rem;padding:0 .5em;background-color:#f6f6f6}.popover .menu .dropbutton a.dropdown:hover{background-color:#f4c200}.popover .menu .dropbutton a.dropdown:before,.popover .menu .dropbutton a.dropdown span.inner{display:none}.popover .menu.no-icon a:before{display:none}@media screen and (min-width:769px){.content-frame-navigation{display:none !important}.header a.button.icon:not(.disabled):focus,.header a.button.icon:not(.disabled):hover{background-color:#f7f5f2;outline:0}.header a.button.icon:before{margin:0}}@media screen and (max-width:768px){.menu.footer{justify-content:space-around !important}.menu.footer>*{flex-grow:1}.menu.footer .buttons{display:flex;justify-content:space-evenly}.menu.footer .listselectors>*{flex-grow:1}.menu.listing a{color:#4f4f4f}}a.toolbar-button{cursor:pointer}@media screen and (min-width:1201px){a.toolbar-button{line-height:1.5;padding:.45rem}a.toolbar-button:before{float:none !important;height:1.75rem !important;line-height:1.5;width:auto !important}a.toolbar-button span.inner{display:inline !important;font-weight:normal;font-size:90%}}.menu a.mail:before{content:"\f0e0"}.menu a.contacts:before{content:"\f0c0"}.menu a.options:before{content:"\f1de"}.menu a.settings:before{content:"\f013"}.menu a.theme.light:before{content:"\f185"}.menu a.theme.dark:before{content:"\f186"}.menu a.help:before{content:"\f1cd"}.menu a.logout:before{content:"\f011"}.menu a.about:before{content:"\f128"}.menu a.refresh:before{content:"\f021"}.menu a.compose:before{content:"\f044"}.menu a.calendar:before{content:"\f073"}.menu a.tasklist:before{content:"\f0ae"}.menu a.files:before{content:"\f07b"}.menu a.notes:before{content:"\f249"}.menu a.chat:before{content:"\f086"}.menu a.actions:before{content:"\f013"}.menu a.addressbook:before{content:"\f007"}.menu a.archive:before{content:"\f187"}.menu a.assigngroup:before{content:"\f234"}.menu a.attach:before,.menu a.vcard:before{content:"\f0c6"}.menu a.next:before{content:"\f061"}.menu a.prev:before,.menu a.back:before{content:"\f060"}.menu a.check:before{content:"\00a0"}.menu a.check.selected:before{content:"\f00c"}.menu a.closewin:before{content:"\f410"}.menu a.collapse:before{content:"\f107"}.menu a.copy:before{content:"\f0c5"}.menu a.create:before{content:"\f0fe"}.menu a.delete:before{content:"\f2ed"}.menu a.download:before,.menu a.download.eml:before,.menu a.download.maildir:before,.menu a.download.mbox:before{content:"\f019"}.menu a.dropdown:before{content:"\f0d7"}.menu a.edit:before{content:"\f303"}.menu a.encrypt:before,.menu a.enigma:before{content:"\f023"}.menu a.encrypt.sign:before{content:"\f023"}.menu a.expand:before{content:"\f105"}.menu a.expand.all:before{content:"\f103"}.menu a.expand.none:before{content:"\f102"}.menu a.export:before,.menu a.export.all:before,.menu a.export.selection:before{content:"\f019"}.menu a.expunge:before{content:"\f78c"}.menu a.extwin:before{content:"\f360"}.menu a.filterlink:before{content:"\f0b0"}.menu a.firstpage:before{content:"\f100"}.menu a.nextpage:before{content:"\f105"}.menu a.prevpage:before{content:"\f104"}.menu a.lastpage:before{content:"\f101"}.menu a.flag:before,.menu a.select.flagged:before{content:"\f024";font-weight:900}.menu a.unflag:before{content:"\f024";font-weight:400}.menu a.folders:before{content:"\f07b"}.menu a.forward:before,.menu a.forward.attachment:before,.menu a.forward.bounce:before,.menu a.forward.inline:before{content:"\f064"}.menu a.import:before,.menu a.upload:before{content:"\f093"}.menu a.insertresponse:before{content:"\f075"}.menu a.junk:before{content:"\f7e4"}.menu a.notjunk:before{content:"\f01c"}.menu a.markmessage:before{content:"\f02b"}.menu a.more:before{content:"\f141"}.menu a.move:before{content:"\f07c"}.menu a.print:before{content:"\f02f"}.menu a.properties:before{content:"\f15b"}.menu a.purge:before{content:"\f12d"}.menu a.qrcode:before{content:"\f029"}.menu a.read:before{content:"\f2b6";font-weight:400}.menu a.unread:before,.menu a.expand.unread:before,.menu a.select.unread:before{content:"\f0e0";font-weight:900}.menu a.recipient:before{content:"\f0e0";font-weight:400}.menu a.refresh:before{content:"\f021"}.menu a.remove:before{content:"\f12d"}.menu a.removegroup:before{content:"\f235"}.menu a.rename:before{content:"\f303"}.menu a.reply:before{content:"\f3e5"}.menu a.reply-all:before,.menu a.reply.all:before,.menu a.reply.list:before{content:"\f122"}.menu a.responses:before{content:"\f075"}.menu a.rotate:before{content:"\f2f9"}.menu a.save:before{content:"\f0c7";font-weight:400}.menu a.search:before{content:"\f002"}.menu a.search.delete:before{content:"\f2ed"}.menu a.select:before{content:"\f245"}.menu a.select.all:before{content:"\f069"}.menu a.select.invert:before{content:"\f14a"}.menu a.select.none:before{content:"\f00d";font-weight:900}.menu a.select.page:before{content:"\f0c9";font-weight:900}.menu a.selection:before{content:"\f14a" !important;font-weight:400 !important}.menu a.send:before{content:"\f1d8"}.menu a.showurl:before{content:"\f0c1"}.menu a.signature:before{content:"\f5b7"}.menu a.source:before{content:"\f1c9"}.menu a.spellcheck:before{content:"\f891"}.menu a.status:before{content:"\f0eb";font-weight:400}.menu a.submit:before{content:"\f00c"}.menu a.info:before{content:"\f05a"}.menu a.threads:before{content:"\f086"}.menu a.zoomin:before{content:"\f00e"}.menu a.zoomout:before{content:"\f010"}.searchbar{height:36px;min-height:36px;line-height:36px;background-color:#fbfbfb;border-bottom:1px solid #f8f7f4;display:flex;align-items:center;overflow:hidden;position:relative}.searchbar form{flex:1;display:flex}.searchbar form:before{content:"\f002";height:36px;color:#7b7b77;margin:0 0 0 .75rem}.searchbar input{width:100%;border:0;background:transparent;padding:.5rem;line-height:normal;outline:0}.searchbar input::-ms-clear{display:none}.searchbar a{color:#7b7b77}.searchbar a:before{width:2rem;height:36px;margin:0}.searchbar a.options:before{content:"\f107"}.searchbar a.reset:before{content:"\f00d";font-size:1rem}.searchbar a.unread:before{content:"\f0e0";font-weight:900}.searchbar a.reset,.searchbar a.search{display:none}.searchbar a.selected{color:#41b849}.searchbar span.inner{display:none}.searchbar.active a.reset{display:inline}.searchbar.open a.options:before{content:"\f106"}.searchoptions button.search{width:100%}.searchoptions ul.proplist+div{margin-top:1rem}.searchoptions .input-group:not(:last-child){margin-bottom:.5rem}.searchoptions .input-group .input-group-prepend{width:30%}.searchoptions .input-group label{width:100%}.searchoptions .formbuttons{display:block !important}#taskmenu a{display:block;float:none}@media screen and (max-width:480px){#taskmenu{z-index:30001;overflow-x:hidden}#taskmenu a{max-width:unset;padding:0 .5em;margin-top:1px;text-align:left;line-height:47px;height:47px;border-bottom:1px solid #f8f7f4 !important;color:#4f4f4f;font-size:1.2rem}#taskmenu a:before{float:left !important;width:1.2em !important;margin-right:.5rem !important}#taskmenu span.inner{font-size:100%}}@media screen and (min-width:481px){#taskmenu a{color:#71777d;padding:.45rem 0;min-width:unset}#taskmenu a.selected{color:#e1e2e3;background:#505e6b}#taskmenu a.selected:hover{color:#fff;background:#505e6b}#taskmenu a:hover{color:#e1e2e3;background:#505e6b}#taskmenu .special-buttons{position:absolute;bottom:0;left:0;background-color:#3a444e}#taskmenu .action-buttons a{color:#f4c200;background:transparent}#taskmenu .action-buttons a:hover{color:#f4c200;background:#505e6b}#taskmenu a.logout{color:#ff5552 !important}#taskmenu a.logout:hover{color:#ff5552 !important}}@media screen and (min-width:481px) and (max-width:1024px){#taskmenu a{width:42px;height:42px;font-size:1.2rem;padding:0}#taskmenu a:before{line-height:42px}#taskmenu span.inner{display:none}}@media screen and (min-width:1025px){#taskmenu a{width:78px;font-size:1rem}#taskmenu a:before{float:none}#taskmenu a:focus{background-color:#505e6b}#taskmenu span.inner{padding:0 .1em}}.ui.alert{margin:0;margin-bottom:.2rem;opacity:.95;width:100%;padding:.75em;color:#4f4f4f;border:1px solid transparent;background-color:rgba(244,194,0,0.05);display:flex;align-items:center}@media screen and (max-width:480px){.ui.alert{border:0}}.ui.alert span{margin:auto 0}.ui.alert>i.icon{line-height:1;color:#4d5f66;margin:auto 0}.ui.alert>i.icon:before{content:"\f05a";margin-right:.6rem}.ui.alert .btn{margin-left:.5rem}.ui.alert.loading{color:#848484}.ui.alert.loading>i.icon:before{content:"\f1ce";-webkit-animation:spinner-border 1.5s infinite linear;animation:spinner-border 1.5s infinite linear;width:1em}.ui.alert.alert-success>i.icon:before{content:"\f058";color:#41b849}.ui.alert.alert-warning>i.icon:before{content:"\f071";color:#ffd452}.ui.alert.alert-danger>i.icon:before{content:"\f06a";color:#ff5552}.ui.alert.vcardattachment>i.icon:before{content:"\f2bb"}.ui.alert.enigmaattachment>i.icon:before{content:"\f084"}.ui.alert.signed>i.icon:before,.ui.alert.encrypted>i.icon:before{content:"\f023"}.ui.alert.chat>i.icon:before{content:"\f075"}.ui.alert .boxbuttons{white-space:nowrap}.ui.alert .boxbuttons .btn{overflow:hidden;text-overflow:ellipsis;max-width:220px}@media screen and (max-width:480px){.ui.alert .boxbuttons{display:flex;flex-direction:column}.ui.alert .boxbuttons .btn{max-width:160px}.ui.alert .boxbuttons .btn:not(:first-child){margin-top:.25rem}}.ui.alert.aligned-buttons{display:flex}.ui.alert.aligned-buttons span{flex:1}.ui.alert a:not(.btn){color:#f4c200;font-weight:normal}.ui.alert h3{font-weight:bold;font-size:1.2rem}.ui.alert p{margin:1rem 0}.ui.alert.boxerror,.ui.alert.boxconfirmation,.ui.alert.boxinformation,.ui.alert.boxwarning{padding:.5em;border-radius:0}.ui.alert.boxerror i.icon,.ui.alert.boxconfirmation i.icon,.ui.alert.boxinformation i.icon,.ui.alert.boxwarning i.icon{font-size:1.5em !important}.ui.alert.boxerror{background-color:rgba(255,85,82,0.2)}.ui.alert.boxinformation{background-color:rgba(244,194,0,0.2)}.ui.alert.boxconfirmation{background-color:rgba(65,184,73,0.2)}.ui.alert.boxwarning{background-color:rgba(255,212,82,0.2)}.ui.alert+table{margin-top:1em}#messagestack{position:absolute;bottom:.5em;right:.7em;z-index:105;width:320px;height:auto;max-height:85%}@media screen and (max-width:480px){#messagestack{left:0;right:0;bottom:0;width:auto}}#messagestack div{background-color:#4f4f4f;color:#fff}@media screen and (max-width:480px){#messagestack div{margin:0;border-radius:0;min-height:4.2rem}}#messagestack div.voice{position:absolute;top:-1000px}#messagestack div i.icon{font-size:1.5em !important}#messagestack div>i.icon:before{color:#fff}#messagestack div:last-child{margin-bottom:0}#messagestack .loading{background-color:#848484}#messagestack .alert-info.information{background-color:#f4c200}#messagestack .alert-success{background-color:#41b849}#messagestack .alert-warning{background-color:#ffd452;color:#4f4f4f}#messagestack .alert-warning>i.icon:before{color:#4f4f4f}#messagestack .alert-danger{background-color:#ff5552}#messagestack a{color:inherit !important;text-decoration:underline;cursor:pointer}.listing tbody td,.listing li{border-bottom:1px solid #f8f7f4;cursor:default;font-weight:normal;line-height:35px}.listing tbody td,.listing li a{padding:0 .5rem;white-space:nowrap;vertical-align:middle;color:#4f4f4f}.listing tbody td{overflow:hidden;text-overflow:ellipsis;outline:none}.listing tbody td a{color:#4f4f4f}.listing li a{display:block;text-decoration:none;cursor:default;width:100%}.listing li.selected,.listing tr.selected td{color:#4f4f4f;background-color:#fdf6d9}.listing td.selection{padding:0 0 0 .5em;width:2em;text-align:center}.listing td.selection>input{vertical-align:middle}.listing:not(.withselection) td.selection{display:none}.listing td.name{overflow:hidden;text-overflow:ellipsis}.listing td.action{padding:0 .5em;width:2em;text-align:center}.listing td.action:empty{width:0}.listing td.action a{display:block;overflow:hidden;text-decoration:none}.listing td.action a:before{margin:0;font-size:1rem}.listing td.action a.pushgroup:before{content:"\f054"}.listing li.droptarget>a,.listing tr.droptarget>td{background-color:#ffffcc}.listing li.disabled,.listing tr.disabled td{color:rgba(79,79,79,0.5)}.listing li>a.virtual,.listing li.virtual>a{opacity:.4}.listing span.secondary{color:#7b7b77}html:not(.touch) .listing li>a,html:not(.touch) .listing tbody tr>td:first-child,html:not(.touch) .listing:not(.withselection) tbody tr>td.selection+td{border-left:2px solid transparent}html:not(.touch) .listing li>a:focus,html:not(.touch) .listing.focus tbody tr.focused>td:first-child,html:not(.touch) .listing.focus:not(.withselection) tbody tr.focused>td.selection+td{border-left:2px solid #ffdd5b;outline:0}table.listing{width:100%;table-layout:fixed;border-spacing:0;border-collapse:unset}ul.listing{margin:0;padding:0}ul.listing>ul{padding:0}ul.listing li{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;position:relative;list-style:none}ul.listing li ul{border-top:1px solid #f8f7f4;padding-left:1.5em}ul.listing li ul li:last-child{border-bottom:none}ul.listing li .custom-switch{position:absolute;padding:0;top:0;right:0;height:35px;vertical-align:middle}ul.listing li .custom-switch .custom-control-label:before,ul.listing li .custom-switch .custom-control-label:after{margin-top:.4rem}html.touch ul.listing li .custom-switch .custom-control-label:before,html.touch ul.listing li .custom-switch .custom-control-label:after{margin-top:.75rem}html.touch ul.listing li .custom-switch{height:47px}ul.listing.simplelist li{padding:0 .5rem}.listing-info{position:absolute;top:50%;left:50%;transform:translate(-50%, -50%);width:80%;text-align:center;font-weight:bold;color:#7b7b77}html.touch .listing:not(.toolbar) li,html.touch .listing tbody td{line-height:47px;font-size:1.2rem}html.touch li inputtype=checkbox{height:47px}html.touch td.selection{padding:0;width:3em}@media screen and (max-width:1200px){.listing.selection-large-only li.selected{color:#4f4f4f;background-color:transparent}}.listing.iconized li a:before{height:2em;margin-right:.5rem}.listing.iconized li.preferences>a:before{content:"\f1de"}.listing.iconized li.folders>a:before{content:"\f07b"}.listing.iconized li.responses>a:before{content:"\f075"}.listing.iconized li.identities>a:before{content:"\f2c2"}.listing.iconized li.password>a:before{content:"\f023"}.listing.iconized li.addressbook a:before{content:"\f2b9";font-weight:400}.listing.iconized li.contactgroup a:before{content:"\f0c0";font-weight:900}.listing.iconized li.contactsearch a:before{content:"\f002"}.listing.iconized li.filter>a:before{content:"\f0b0"}.listing.iconized li.vacation>a:before{content:"\f017";font-weight:400}.listing.iconized li.forward>a:before{content:"\f14d"}.listing.iconized li.enigma.keys>a:before{content:"\f084"}.listing.iconized li.info>a:before,.listing.iconized li.userinfo>a:before{content:"\f05a"}.listing.iconized li.twofactorauth>a:before{content:"\f2f6"}.listing.iconized li a.help:before{content:"\f1cd"}.listing.iconized li a.about:before{content:"\f059";font-weight:400}.listing.iconized li a.license:before{content:"\f3ed"}.listing.iconized li>i:before{content:"\f007";margin-left:.5rem}.listing.iconized li.group>i:before{content:"\f0c0"}html.ie11 .listing.iconized li a:before{font-size:1.25rem}.listing.iconized tr td:before{margin-right:.5rem}.listing.iconized tr.contact.person td.name:before{content:"\f007"}.listing.iconized tr.contact.group td.name:before{content:"\f0c0"}.listing.iconized tr.general>td.section:before{content:"\f108"}.listing.iconized tr.mailbox>td.section:before{content:"\f0e0";font-weight:400}.listing.iconized tr.mailview>td.section:before{content:"\f01c"}.listing.iconized tr.compose>td.section:before{content:"\f1d8"}.listing.iconized tr.addressbook>td.section:before{content:"\f0c0"}.listing.iconized tr.folders>td.section:before{content:"\f07b";font-weight:400}.listing.iconized tr.server>td.section:before{content:"\f233"}.listing.iconized tr.encryption>td.section:before{content:"\f023"}.listing.iconized tr.calendar>td.section:before{content:"\f133"}.listing.iconized tr.chat>td.section:before{content:"\f086"}.listing.iconized.selectable li a:before{content:""}.listing.iconized.selectable li a.selected:before{content:"\f00c"}.popupmenu .listing li>a{border-left:0}.popupmenu .listing li>a:not(.disabled):hover{color:#fff;background-color:#f4c200}.popupmenu .listing li.selected{color:#fff;background-color:#f4c200}.popupmenu .listing td{overflow:hidden;text-overflow:ellipsis}ul.treelist li div.treetoggle{position:absolute;top:0;left:0;width:1.5em;cursor:pointer;background-color:transparent}ul.treelist li div.treetoggle:before{content:"\f105";margin-left:.25em;font-size:1em}ul.treelist li div.treetoggle.expanded:before{content:"\f107"}ul.treelist li>a{overflow:hidden;text-overflow:ellipsis;padding-left:1.5em}ul.treelist li.selected{color:inherit;background-color:transparent}ul.treelist li.selected>div>a,ul.treelist li.selected>a{color:#4f4f4f;background-color:#fdf6d9}ul.treelist li ul{padding:0}ul.treelist li ul li{padding-left:0}ul.treelist li ul li a{padding-left:3em}ul.treelist li ul li div.treetoggle{left:1.5em}ul.treelist li ul li li a{padding-left:4.5em}ul.treelist li ul li li div.treetoggle{left:3em}ul.treelist li ul li li li a{padding-left:6em}ul.treelist li ul li li li div.treetoggle{left:4.5em}ul.treelist li ul li li li li a{padding-left:7.5em}ul.treelist li ul li li li li div.treetoggle{left:6em}ul.treelist li ul li li li li li a{padding-left:9em}ul.treelist li ul li li li li li div.treetoggle{left:7.5em}ul.treelist.notree div.treetoggle{display:none}ul.treelist.notree li>a{padding-left:.5em}.folderlist li.mailbox.unread>a{padding-right:2.8em;font-weight:bold}.folderlist li.mailbox .unreadcount{position:absolute;top:0;right:0;min-width:2em;line-height:1.4rem;margin:7.7px;padding:0 .3em;border-radius:.4em;background:#f4c200;color:#fff;text-align:center;font-weight:bold}html.touch .folderlist li.mailbox .unreadcount{line-height:2rem;margin:9.5px}.folderlist li.mailbox.recent>a{color:#8e7100}.folderlist li.mailbox.recent>a>.unreadcount{background:#f4c200;color:#fff}.folderlist li.mailbox.root{display:none !important}.folderlist li a:before{content:"\f07b";font-weight:400;margin-right:.5rem}.folderlist li.inbox>a:before{content:"\f01c";font-weight:900}.folderlist li.trash a:before{content:"\f2ed";font-weight:900}.folderlist li.trash.empty>a:before{content:"\f2ed";font-weight:400}.folderlist li.drafts a:before{content:"\f303";font-weight:900}.folderlist li.sent a:before{content:"\f1d8";font-weight:900}.folderlist li.junk a:before{content:"\f7e4";font-weight:900}.folderlist li.archive>a:before{content:"\f187";font-weight:900}.folderlist li.ns-shared>a:before{content:"\f1e0";font-weight:900}.folderlist li.ns-other>a:before{content:"\f500";font-weight:900}.folderlist.menu a:before{margin-left:.5em}.messagelist>thead,.messagelist .branch,table.fixedcopy{display:none}.messagelist td{border-left:0;width:2em;vertical-align:top;font-size:1rem !important}.messagelist td.subject{width:100%;padding-right:0;display:flex;flex-wrap:wrap}.messagelist td.subject a{text-decoration:none;cursor:default}.messagelist td.subject span{line-height:2em}.messagelist td.subject span.size,.messagelist td.subject span.date{font-size:90%;color:#7b7b77}.messagelist td.subject span.fromto{overflow:hidden;text-overflow:ellipsis;flex:1;font-size:90%;color:#7b7b77;padding-left:1.5em;padding-right:.5rem}.messagelist td.subject span.subject{overflow:hidden;text-overflow:ellipsis;width:100%;user-select:none}.messagelist td.threads{padding:0 0 0 .25rem;width:1.5em}.messagelist td.flags{width:2.5em}.messagelist td.flags>span{height:1.7em;line-height:1.7em;display:block}.messagelist td.flags>span.flag{cursor:pointer}.messagelist tr.flagged td,.messagelist tr.flagged td.subject span.subject a,.messagelist tr.flagged td.subject span.date,.messagelist tr.flagged td.subject span.fromto{color:#ff5552}.messagelist tr.deleted td,.messagelist tr.deleted td.subject span.subject a,.messagelist tr.deleted td.subject span.date,.messagelist tr.deleted td.subject span.fromto{color:rgba(79,79,79,0.5)}.messagelist tr.unread td.subject span.subject{font-weight:bold}.messagelist tr.unroot td.subject a{text-decoration:underline}.messagelist tr.thread td.threads div:before{content:"\f105";cursor:pointer;width:1em}.messagelist tr.thread.expanded td.threads div:before{content:"\f107"}.messagelist td.subject span.msgicon.status:before{content:"\f111";cursor:pointer;font-size:.4rem;width:1.1rem;height:2rem}.messagelist td.subject span.msgicon.status.unread:before{content:"\f111";color:#ffd452;font-size:.5rem}.messagelist td.subject span.msgicon.status.unreadchildren:before{content:"\f111";font-weight:400;font-size:.5rem}.messagelist td.subject span.msgicon.status.replied:before{content:"\f3e5";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.forwarded:before{content:"\f064";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.replied.forwarded:before{content:"\f3e5";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.replied.forwarded:after{content:"\f064";font-weight:900;font-size:1rem;opacity:.5;margin:0 -0.1em 0 -1.25em}.messagelist tr.deleted td.subject span.msgicon.status:before{content:"\f05e" !important;font-weight:900 !important;font-size:1rem}.messagelist tr.deleted td.subject span.msgicon.status:after{display:none !important}.messagelist span.attachment span{color:rgba(123,123,119,0.75)}.messagelist span.attachment span:before{margin:0;content:"\f0c6"}.messagelist span.attachment span.report:before{content:"\f15c";font-weight:400}.messagelist span.attachment span.encrypted:before{content:"\f023"}.messagelist span.attachment span.vcard:before{content:"\f007";font-weight:400}.messagelist span.flagged:before{content:"\f024"}.messagelist tr.flaggedroot:not(:hover) span.unflagged:before{content:"\f024";color:rgba(123,123,119,0.75)}.messagelist tr:hover span.unflagged:before{content:"\f024";font-weight:400}.messagelist span.size{display:none}.messagelist tr:hover span.date{display:none}.messagelist tr:hover span.size{display:inline}.messagelist.sort-size span.date{display:none}.messagelist.sort-size span.size{display:inline}.messagelist.sort-size tr:hover span.date{display:inline}.messagelist.sort-size tr:hover span.size{display:none}html.layout-phone .messagelist tr,html.touch .messagelist tr{position:relative;display:flex}html.layout-phone .messagelist td.selection,html.touch .messagelist td.selection,html.layout-phone .messagelist td.threads,html.touch .messagelist td.threads{line-height:3.8em}html.layout-phone .messagelist td.flags,html.touch .messagelist td.flags{position:absolute;top:.25rem;right:0;bottom:0;background-color:transparent}html.layout-phone .messagelist td.flags .flag,html.touch .messagelist td.flags .flag{visibility:hidden}html.layout-phone .messagelist td.subject,html.touch .messagelist td.subject{padding-right:.5em}html.layout-phone .messagelist td.subject .subject,html.touch .messagelist td.subject .subject{padding-right:1.5rem}.contactlist .contact.readonly td{font-style:italic}.contactlist td.contact:before{content:"\f007"}.contactlist td.contactgroup:before{content:"\f0c0"}.contactlist span.email{display:inline;color:#7b7b77;font-style:italic;margin-left:.5em}.contactlist li a:before{margin-right:.5rem}.contactlist li a.addressbook::before{content:"\f2b9";font-weight:400}.contactlist li a.contactgroup::before{content:"\f0c0";font-weight:900}.attachmentslist{padding:0;margin:0;background-color:#fcfcfc;border:1px solid #f4f4f4}.attachmentslist:empty{padding:0;border:0}.attachmentslist li{list-style:none;display:inline-flex;white-space:nowrap;line-height:2rem;padding:0 .25em;max-width:100%}.attachmentslist li:before{content:"\f15b";font-weight:400;height:2rem;margin:0}.attachmentslist li.txt:before,.attachmentslist li.text:before{content:"\f15c";font-weight:400}.attachmentslist li.pdf:before{content:"\f1c1";font-weight:400}.attachmentslist li.odt:before,.attachmentslist li.doc:before,.attachmentslist li.docx:before,.attachmentslist li.msword:before{content:"\f1c2";font-weight:400}.attachmentslist li.ods:before,.attachmentslist li.xls:before,.attachmentslist li.xlsx:before,.attachmentslist li.msexcel:before{content:"\f1c3";font-weight:400}.attachmentslist li.rar:before,.attachmentslist li.zip:before,.attachmentslist li.gz:before{content:"\f1c6";font-weight:400}.attachmentslist li.image:before,.attachmentslist li.jpg:before,.attachmentslist li.jpeg:before,.attachmentslist li.png:before{content:"\f1c5";font-weight:400}.attachmentslist li.mp3:before,.attachmentslist li.audio:before{content:"\f1c7";font-weight:400}.attachmentslist li.m4p:before,.attachmentslist li.video:before{content:"\f1c8";font-weight:400}.attachmentslist li.vcard:before{content:"\f2bb";font-weight:400}.attachmentslist li.html:before{content:"\f1c9";font-weight:400}.attachmentslist li.odp:before,.attachmentslist li.otp:before,.attachmentslist li.ppt:before,.attachmentslist li.pptx:before,.attachmentslist li.ppsx:before,.attachmentslist li.vnd.mspowerpoint:before{content:"\f1c4";font-weight:400}.attachmentslist li a{text-decoration:none;line-height:2rem;height:2rem}.attachmentslist li a.cancelupload:before,.attachmentslist li a.delete:before{content:"\f2ed";line-height:2rem;height:2rem;margin:0}.attachmentslist li a.dropdown:before{margin:0}.attachmentslist li.uploading:before{-webkit-animation:spinner-border 1.5s infinite linear;animation:spinner-border 1.5s infinite linear;content:"\f1ce";font-weight:900}.attachmentslist li a.filename{display:flex;overflow:hidden;padding:0 .2em}.attachmentslist li .attachment-name{overflow:hidden;text-overflow:ellipsis;color:#4f4f4f}.attachmentslist li .attachment-size{color:#7b7b77;padding-left:.25em}.keylist{padding:0;list-style:none}.keylist li{line-height:2}.keylist li:before{content:"\f084";line-height:1.5}#identities-table td.mail:before{content:"\f2c2"}#responses-table td.name:before{content:"\f075"}#filterslist td.name:before{content:"\f0b0"}#filtersetslist td.name:before{content:"\f15c"}#subscription-table li.mailbox a{padding-right:2.5rem}#uploadform{display:none}form.smart-upload,input.smart-upload{visibility:hidden;width:1px;height:1px;opacity:0}.propform:not(.popupmenu){width:100%}.propform .form-check td:not(.title)>label{display:block;margin:0;line-height:2rem}.propform .form-check td:not(.title)>label label{margin-right:.5rem}.propform td.datetime{display:flex}.propform td.datetime input:first-child{margin-right:.5rem}.propform td.datetime input:last-child{width:75%}.propform td.rowbuttons{width:1%;white-space:nowrap;vertical-align:top}.propform td.rowbuttons span{display:none}.propform td.rowbuttons a{padding:0;line-height:2.3rem;height:2.3rem;font-size:1rem}.propform td.rowbuttons a:before{content:"\f067";vertical-align:unset}@media screen and (min-width:577px){.propform td.rowbuttons a:before{margin:0 !important}}.propform td.rowbuttons a.delete:before{content:"\f2ed"}.propform td.rowbuttons a.advanced:before{content:"\f013"}.propform td.rowbuttons a:not(:last-child){margin-right:.25rem}.propform td.rowactions{width:1%;vertical-align:top}.propform td.rowactions .form-control{width:auto}.propform td.rowtargets{vertical-align:top}.propform td.rowtargets .composite input,.propform td.rowtargets .composite textarea,.propform td.rowtargets .composite select,.propform td.rowtargets .composite .multi-input,.propform td.rowtargets .composite .input-group{margin-bottom:.5rem}.propform td.rowtargets .composite .input-group input,.propform td.rowtargets .composite .input-group textarea,.propform td.rowtargets .composite .input-group select,.propform td.rowtargets .composite .input-group .multi-input{margin-bottom:0}.propform td.rowtargets .composite br{display:block}.propform td.rowtargets .input-group{margin-bottom:.25rem}.propform td.rowtargets .input-group *:first-child.input-group-prepend{text-align:left;min-width:7.5em}.propform td.rowtargets .input-group *:first-child.input-group-prepend>*{width:100%}.propform td.rowtargets>.advanced{margin-top:.25rem}.propform td.title{padding-top:0;padding-bottom:0}.propform td>.flexbox{display:flex}.propform td>.flexbox>.multi-input{width:100%;margin-left:.25rem}.propform.grouped.readonly legend{margin:0}.propform.grouped.readonly .row.input-group{margin-bottom:0 !important}.propform.grouped.readonly label{min-width:7rem;background-color:transparent;border:0;border-radius:0}.propform.grouped .row.input-group{margin-bottom:.5rem;flex-wrap:nowrap}.propform.grouped .row.input-group>*:first-child{overflow:hidden;text-overflow:ellipsis;min-width:8rem}.propform.grouped .row.input-group>*:first-child:not(select){padding:0}@media screen and (max-width:480px){.propform.grouped .row.input-group>*:first-child{min-width:6rem;width:6rem;flex-grow:unset}}.propform.grouped .row.input-group>*:first-child label{width:100%}.propform.grouped .row.input-group>*:nth-child(2){flex-grow:30}.propform.grouped .row.input-group:last-child{margin-bottom:1rem}.propform.grouped .row.input-group select{text-align:left}.propform.grouped .row.input-group.composite select{height:auto}.propform.grouped .row.input-group .content{padding:0;display:flex;flex-wrap:wrap;border-radius:0;border-left-color:transparent}.propform.grouped .row.input-group .content input{border-radius:0;border-color:transparent}.propform.grouped .row.input-group .content .ff_street{width:100%}.propform.grouped .row.input-group .content .ff_locality{width:75%}.propform.grouped .row.input-group .content .ff_zipcode{width:25%}.propform.grouped .row.input-group .content .ff_country,.propform.grouped .row.input-group .content .ff_region{width:50%}.propform.grouped .form-control-plaintext{flex-grow:1;border:0}.propform .addfield{margin:0}.propform .addfield select{width:8rem;margin-top:.5rem}.propform .form-text{font-size:90%;color:#7b7b77}.propform.row.form-group{margin-left:0;margin-right:0}.propform.row.form-group label,.propform.row.form-group div{padding-left:0;padding-right:0}.propform select+select,.propform select+.input-group{padding-top:.5rem}.propform.text-only{margin-bottom:.25rem}.propform.text-only tr{margin:0}.propform.text-only label{padding-bottom:0 !important}@media screen and (max-width:576px){.propform.text-only tr{display:table-row}.propform.text-only td{width:auto}.propform.text-only td:first-child{width:33%}.propform.text-only :not(tr).form-group.row .col-form-label{width:33%}.propform.text-only :not(tr).form-group.row>:last-child{width:67%}}@media screen and (max-width:576px){.propform table.compact-table .rowactions>select,.propform table.compact-table .flexbox>select{width:100%}.propform table.compact-table tr{display:flex;flex-direction:column}.propform table.compact-table tr td{width:100%;padding:.25rem 0 0 0}.propform table.compact-table tr td.rowbuttons{text-align:right;padding-top:0}.propform table.compact-table tr td.rowbuttons a{margin-left:.5rem}.propform table.compact-table tr td.rowbuttons a>span{display:inline}}.propform fieldset:not(.tab-pane):nth-of-type(n+2),.formcontent fieldset:not(.tab-pane):nth-of-type(n+2){margin-top:1em}.propform legend,.formcontent legend{font-weight:bold;font-size:1.2em}.propform label,.formcontent label{-webkit-hyphens:auto;-ms-hyphens:auto;hyphens:auto;overflow:hidden;margin-bottom:0}fieldset.advanced>legend{width:auto;cursor:pointer}fieldset.advanced>legend:after{float:right;margin:0 0 0 .25rem;line-height:inherit;font-size:inherit;content:"\f106"}fieldset.advanced>legend.closed:after{content:"\f107"}@media screen and (max-width:576px){.formcontent .text-only .form-group:not(tr){margin-bottom:.25rem}.formcontent .text-only .form-group:not(tr) .col-form-label{width:33%}.formcontent .text-only .form-group:not(tr) .col-form-label+span{width:67%}html.iframe .formcontent>.propform{padding:.25rem}}html.ms .propform .row:not(.form-check)>td{display:flex;flex-wrap:wrap}@media screen and (min-width:576px){html.ms .propform .row.form-check>td{display:flex}}.formcontainer{display:flex;flex-direction:column;justify-content:flex-start;overflow-y:hidden !important}.formcontainer .formcontent{overflow-x:hidden;overflow-y:auto}.formcontainer .formbuttons{padding:.5rem 1rem}.formcontainer .formbuttons button{margin-right:.5rem}html.iframe.ipad .formcontainer .formbuttons,html.iframe.webkit.tablet .formcontainer .formbuttons{min-height:4rem}html.layout-small .formcontainer,html.layout-phone .formcontainer{display:initial;overflow-y:auto !important}html.layout-small .formcontainer .formcontent,html.layout-phone .formcontainer .formcontent{overflow:initial !important}html.layout-small .formcontainer .formbuttons,html.layout-phone .formcontainer .formbuttons{display:none}.formcontent:not(.popupmenu){padding:1rem}.formcontent .row{margin-right:0;margin-left:0}.formcontent .row .col,.formcontent .row .col-2,.formcontent .row .col-4,.formcontent .row .col-6,.formcontent .row .col-8,.formcontent .row .col-10,.formcontent .row .col-12,.formcontent .row .col-sm,.formcontent .row .col-sm-2,.formcontent .row .col-sm-4,.formcontent .row .col-sm-6,.formcontent .row .col-sm-8,.formcontent .row .col-sm-10,.formcontent .row .col-sm-12{padding:0}.formcontent .row .form-control-plaintext,.formcontent .row label.col-form-label{padding:5px 5px 5px 0}.formcontent .row .form-control-plaintext{padding-bottom:0;border:0}@media screen and (max-width:576px){.formcontent .row.form-group>td label{padding-bottom:0}}.formcontent .row.form-check{padding:0;display:flex;flex-wrap:nowrap}@media screen and (max-width:576px){.formcontent .row.form-check .col-6{max-width:100%;flex:auto}.formcontent .row.form-check>*:last-child{width:1%;min-width:2.6rem}.formcontent .row.form-check.with-link>*:last-child{min-width:8rem}}.formcontent .row.form-check .form-check-input{margin:.5rem 0}.formcontent .row.form-check .custom-switch+a{line-height:2;vertical-align:bottom}.formcontent .row.form-check td>label{padding-bottom:0}.formcontent .nav-tabs{margin-bottom:1rem}.formcontent .nav-tabs:empty{display:none}.formcontent .hint{font-style:italic;color:#7b7b77}.formcontent.raweditor{height:100%}.formcontent.raweditor form{height:100%}.formcontent.raweditor textarea{font-family:monospace;height:100%}.formcontent.raweditor .CodeMirror{border:1px solid #ced4da;border-radius:.3rem;height:100%;color:#4f4f4f}.formcontent.raweditor .CodeMirror-focused{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.formcontent.raweditor .CodeMirror-linebackground.line-error{background-color:#ff5552;opacity:.4}.formcontent.raweditor .errorGutter{width:.8em}@media screen and (max-width:320px){.formcontent .col-form-label{flex:auto;max-width:100%}.formcontent .col-6,.formcontent .col-8,.formcontent .col-10{flex:auto;max-width:100%}}.input-group .icon{text-decoration:none;padding:5px .5rem}.input-group .icon.input-group-text{min-width:2.4rem}.input-group .icon:before{margin:0 !important;line-height:1;font-size:1.1rem}.input-group .icon.user:before{content:"\f007"}.input-group .icon.pass:before{content:"\f023"}.input-group .icon.host:before{content:"\f015"}.input-group .icon.language:before{content:"\f0ac"}.input-group .icon.cancel:before{content:"\f00d"}.input-group .icon.delete:before{content:"\f2ed"}.input-group .icon.edit:before{content:"\f303"}.input-group .icon.add:before{content:"\f067"}.input-group .icon.add.recipient:before{content:"\f0c0"}.input-group .icon.search:before{content:"\f002"}.input-group .icon.filter:before{content:"\f0b0"}.input-group .icon.key:before{content:"\f084"}.input-group .icon .inner{display:none}.input-group a:focus{background-color:rgba(244,194,0,0.25);outline:0}.proplist{margin-bottom:0;padding:0}.proplist li{list-style-type:none;line-height:2rem;margin-bottom:.25rem;display:flex;align-items:center}.proplist li:last-child{margin-bottom:0}.proplist li inputtype=radio{margin-right:.5em}.proplist li inputtype=radio:disabled+label{opacity:.5}.proplist li label:not(.input-group-text){margin:0;line-height:2rem}.proplist li select{width:auto;display:inline}.checklist>div{line-height:2rem;display:block}.checklist .custom-control-label:before,.checklist .custom-control-label:after{margin:calc(2px * -1) 0 0 0}.checklist>div+br{display:none}.popup form.propform{padding:.25rem;overflow-x:hidden}.popupmenu.form.nolist{padding:0 .5rem}.popupmenu.form ul{list-style-type:none;padding:0;margin:0}.popupmenu.form li:not(.separator){padding:0 1rem}.popupmenu.form li:not(.separator) label{margin:0;line-height:35px}.popupmenu.form li:not(.separator) label input{margin-right:.5rem}.popupmenu.form input{vertical-align:middle}.popupmenu.form select{margin:.5rem 0}.popupmenu.form .buttons{text-align:center;padding:.5rem}.multi-input>.content{max-height:11.65em;overflow:hidden;overflow-y:auto;border-radius:.25rem;border:1px solid #ced4da}.multi-input>.content.focused{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.multi-input a.icon.reset:before{content:"\f2ed"}.multi-input input.form-control{padding-left:.75rem;height:auto}.multi-input input,.multi-input input:focus,.multi-input .input-group-text{border-radius:0;border:0;border-bottom:1px solid #ced4da;box-shadow:none}.multi-input .input-group-text{border-left:1px solid #ced4da}.multi-input .input-group-append{margin-left:0}.multi-input .input-group{margin:0 !important;flex-wrap:nowrap}.multi-input .input-group:last-child *{border-bottom:0}.multi-input+.btn{margin-top:.5rem}.multi-input.is-invalid>.content{border:1px solid #ff5552}.multi-input.is-invalid>.content.focused{border-color:#ff5552;box-shadow:0 0 0 .2rem rgba(255,85,82,0.25)}.multi-input.is-invalid>.invalid-feedback{display:inline-block;line-height:1.5}.file-upload{padding:1rem 1rem 12rem;margin:0 1rem .25rem 1rem;border-radius:.5rem;border:.2rem dashed #d4dbde}fieldset .file-upload{margin:0}.file-upload .upload-form{text-align:center;padding-bottom:1em}.file-upload .upload-form a.btn,.file-upload .upload-form button{margin-bottom:.25rem}.file-upload .hint{margin-bottom:.5rem;color:#7b7b77;text-align:center}.file-upload .attachmentslist{border:0;background:transparent}.file-upload .attachmentslist li{position:relative;display:flex;padding-right:1.5em;margin:.15em 0}.file-upload .attachmentslist li a.filename{flex:1}.file-upload .attachmentslist li a.delete,.file-upload .attachmentslist li a.cancelupload{position:absolute;right:.25em;width:auto}.file-upload .attachmentslist li a.dropdown{margin-right:.5em}.file-upload .attachmentslist li .inner{display:none}.file-upload.droptarget{padding-bottom:.5rem !important}.file-upload.droptarget:after{content:url("data:image/svg+xml;charset=utf-8,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%20960%20560%22%3E%0A%3Cpath%20fill%3D%22%23d4dbde%22%20d%3D%22M690%20245c0%209.2-3.5%2017.9-10.1%2024.9l-175%20175c-6.6%206.6-15.3%2010.1-24.9%2010.1-9.2%200-18.4-3.5-24.9-10.1l-175-175c-6.6-7-10.1-15.8-10.1-24.9%200-4.4.9-9.2%202.6-13.6C277.9%20218.3%20291%20210%20305%20210h87.5V35c0-19.2%2015.8-35%2035-35h105c19.2%200%2035%2015.8%2035%2035v175H655c14%200%2027.1%208.3%2032.4%2021.4%201.7%204.4%202.6%209.2%202.6%2013.6zm0%20245H270V350h-70v140c0%2038.5%2031.5%2070%2070%2070h420c38.5%200%2070-31.5%2070-70V350h-70v140z%22%2F%3E%0A%3C%2Fsvg%3E%0A");width:10rem;margin:5rem auto 0 auto;display:block}.file-upload.droptarget.active{border-color:#cec3b5}.file-upload.droptarget.hover{border-color:#cec3b5;background-color:#f7f5f2}.recipient-input{display:flex;flex-wrap:wrap;padding:0 .75rem 4px .75rem;list-style-type:none;cursor:text;height:auto}.recipient-input.focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.recipient-input .recipient{display:flex;position:relative;max-width:calc(50% - 3px);border:1px solid #ced4da;background-color:#f8f7f4;border-radius:.25em;padding:0 .25em;margin-top:4px;margin-right:.2em;white-space:nowrap;cursor:default}@media screen and (max-width:450px){.recipient-input .recipient{width:100%;max-width:100%}}.recipient-input .name{overflow:hidden;text-overflow:ellipsis;flex-grow:1;line-height:1.1;padding:3px;vertical-align:middle}.recipient-input .email{text-indent:-5000rem;display:inline-block;width:0}.recipient-input .quotes{position:absolute;width:0;opacity:0}.recipient-input a.button.icon{font-size:.75em;cursor:pointer;padding:0;color:#4f4f4f}.recipient-input a.button.icon:before{display:inline-block;width:1em;line-height:1.6}.recipient-input li{max-width:100%}.recipient-input li:not(.recipient){user-select:text}.recipient-input li.input{flex:1;min-width:100px}.recipient-input input{width:100%;background:transparent !important;border:0 !important;margin-top:4px;outline:0;line-height:1.5}.recipient-input input::-ms-clear{display:none}.tagedit-list{display:flex;flex-wrap:wrap;padding:0 .75rem 4px .75rem;margin:0;list-style-type:none;min-height:2.3rem}.tagedit-list+.placeholder{display:none}.tagedit-listtabindex="-1"{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.tagedit-list li.tagedit-listelement-new{margin-top:4px}.tagedit-list li.tagedit-listelement-new input{width:15px;background:transparent !important;border:0;outline:0;margin:0;padding:0;line-height:1.5}.tagedit-list li.tagedit-listelement-new input.tagedit-input-disabled{visibility:hidden}.tagedit-list li.tagedit-listelement-old{max-width:50%;border:1px solid #ced4da;background-color:#f8f7f4;border-radius:.25em;margin-top:4px;margin-right:.2em;white-space:nowrap}.tagedit-list li.tagedit-listelement-old a{font-size:.8em;cursor:pointer;display:inline-block;width:1.1em;overflow:hidden;vertical-align:middle;margin-right:.2rem}.tagedit-list li.tagedit-listelement-old a:before{content:"\f00d";width:1em;line-height:1.2}.tagedit-list li.tagedit-listelement-old span{overflow:hidden;text-overflow:ellipsis;flex-grow:1;display:inline-block;line-height:1.4;padding:0 .25rem;vertical-align:middle}.skinselection{white-space:nowrap;display:table-row}.skinselection>span{display:table-cell;vertical-align:middle;padding:.1em .5em;white-space:normal}.skinselection>span:last-child{padding-right:0}.skinselection .skinitem input{width:auto}.skinselection .skinname{font-weight:bold}.skinselection .skinlicense,.skinselection .skinlicense a{font-style:italic;text-decoration:none}.skinselection .skinlicense a:hover{text-decoration:underline}.skinselection .skinlicense,.skinselection .skinauthor{font-size:90%}.skinselection .skinthumbnail{width:64px;height:64px;border:1px solid #ced4da;background:#fff;border-radius:4px}.input-percent-slider{display:flex;align-items:center}.input-percent-slider input{max-width:4em}.input-percent-slider span.label{line-height:2.4;padding:0 .5rem 0 .25rem}.input-percent-slider div.ui-slider{flex:1;margin:0 .5em}.image-upload{position:relative;overflow:hidden;cursor:pointer;background-color:#f4f4f4}.image-upload a.button{display:none;position:absolute;left:0;top:0;background-color:rgba(255,255,255,0.85);border-radius:5px;width:2.5em;padding:.5em;margin:.5em;line-height:1}.image-upload.changed a.button{display:inline}.input-group-combo select:first-of-type.alone{border-radius:.25rem !important}.input-group-combo select:first-of-type:not(.alone){flex:unset;width:auto}.input-group-combo .input-group{padding:0 !important;flex:2}.input-group-combo select+select,.input-group-combo .input-group :first-child{border-top-left-radius:0;border-bottom-left-radius:0}@-moz-document url-prefix(){select:-moz-focusring{color:transparent !important;text-shadow:0 0 0 #4f4f4f !important}}.form-control{color:#4f4f4f}.form-control:focus{color:#4f4f4f;border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.form-control.is-invalid{border-color:#ff5552;box-shadow:none}.form-control.is-invalid:focus{border-color:#ff5552;box-shadow:0 0 0 .2rem rgba(255,85,82,0.25)}.form-control::placeholder{color:#bbb}.form-control::-ms-input-placeholder,.form-control::-webkit-input-placeholder{color:#bbb}.invalid-feedback{color:#ff5552;font-size:90%}.form-group{margin-bottom:.5rem}.input-group-append.input-group-prepend{display:inline}.input-group-text{color:#4f4f4f;background-color:#f8f7f4}.input-group-text input:focus{z-index:1;border-color:#f4c200 !important}.custom-switch{padding-left:0;display:inline-block}.custom-switch .custom-control-input{left:0;opacity:0 !important}.custom-switch .custom-control-input:focus~.custom-control-label:before{box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.custom-switch .custom-control-input:focus:not(:checked)~.custom-control-label::before{border-color:#f4c200}.custom-switch .custom-control-input:checked~.custom-control-label::before{border-color:#f4c200;background-color:#f4c200}.custom-switch .custom-control-input:checked:disabled~.custom-control-label::before{border-color:#ffd842;background-color:#ffd842}.custom-switch .custom-control-label{padding-left:2.5rem;min-height:2rem;line-height:2;display:inline-block}html.touch .custom-switch .custom-control-label{padding-left:3rem}.custom-switch .custom-control-label:before,.custom-switch .custom-control-label:after{border-radius:.6rem;margin:2px 0}html.touch .custom-switch .custom-control-label:before,html.touch .custom-switch .custom-control-label:after{border-radius:.8rem;margin:0}.custom-switch .custom-control-label:before{left:2px;top:4px;width:26px;height:16px}html.touch .custom-switch .custom-control-label:before{top:2px;width:35px;height:22px}.custom-switch .custom-control-label:after{left:4px;top:6px;width:12px;height:12px}html.touch .custom-switch .custom-control-label:after{top:4px;height:18px;width:18px}.custom-switch .custom-control-input:checked~.custom-control-label::after{transform:translateX(10px)}html.touch .custom-switch .custom-control-input:checked~.custom-control-label::after{transform:translateX(13px)}.custom-switch .custom-control-input:not(:disabled)~.custom-control-label:after,.custom-switch .custom-control-input:not(:disabled)~.custom-control-label:before{cursor:pointer}.custom-file{display:block}.custom-file .custom-file-label{white-space:nowrap;overflow:hidden;text-overflow:ellipsis;padding-right:100px}.custom-file+.hint{margin-top:3px}.custom-file-input:focus~.custom-file-label{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}div.tox{font-size:1rem}div.tox,div.tox :not(.svg){font-family:Roboto,sans-serif}div.tox.tox-tinymce{border-radius:.25rem;border:1px solid #ced4da}div.tox.focused{border-color:#f4c200 !important;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25) !important}div.tox .tox-toolbar-overlord{z-index:1}div.tox .tox-toolbar-overlord>div{background:url("data:image/svg+xml;charset=utf8,%3Csvg height='33px' viewBox='0 0 40 33px' width='40' xmlns='http://www.w3.org/2000/svg'%3E%3Crect x='0' y='32px' width='100' height='1' fill='%23cccccc'/%3E%3C/svg%3E");background-color:#f8f7f4}div.tox .tox-toolbar__primary{border-top:0}div.tox .tox-toolbar{background-color:#f8f7f4}div.tox .tox-edit-area{border:0}div.tox .tox-dialog{border-radius:0;border-color:#d4dbde;box-shadow:none;align-self:unset !important}div.tox .tox-dialog .tox-form__group{margin-top:0;margin-bottom:.75rem}div.tox .tox-dialog .tox-dialog__body-nav-item--active{color:#f4c200;border-color:transparent}div.tox .tox-dialog .tox-dialog__body-nav-item--active:hover{color:#c19900}div.tox .tox-dialog__body-content{overflow:unset}div.tox .tox-dialog__content-js{overflow:auto}div.tox .tox-dialog-wrap__backdrop{background-color:rgba(79,79,79,0.5)}div.tox .tox-dialog__header{height:57px;border-bottom:1px solid #ddd;justify-content:flex-end;padding:0}div.tox .tox-dialog__header .tox-button{color:#4f4f4f;right:0;height:57.3px;width:2.25em;margin-right:.4rem}div.tox .tox-dialog__header .tox-button:hover{background:transparent;border-color:transparent}div.tox .tox-dialog__header .tox-button .tox-icon{display:none}div.tox .tox-dialog__header .tox-button:before{content:"\f00d";line-height:1.5rem;margin:0 !important}div.tox .tox-dialog__footer{height:57px !important;border:0;margin:0;padding:0 1rem}@media screen and (max-width:480px){div.tox .tox-dialog__footer{border-top:1px solid #ddd}}div.tox .tox-dialog__footer>div{white-space:nowrap;max-height:57px}div.tox .tox-dialog__footer>div button:first-child{margin:0}div.tox .tox-dialog__footer .tox-button{color:#fff;background:#f4c200;border-color:#f4c200;font-weight:normal;padding:.5rem .75rem}div.tox .tox-dialog__footer .tox-button:focus{background:#dbae00;border-color:#d0a600;box-shadow:0 0 0 .2rem rgba(244,194,0,0.5)}div.tox .tox-dialog__footer .tox-button:hover{background:#dbae00;border-color:#d0a600}div.tox .tox-dialog__footer .tox-button.disabled,div.tox .tox-dialog__footer .tox-button:disabled{background:#f4c200;border-color:#f4c200}div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled):active,div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled).active{background:#c19900;border-color:#b79100}div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled):active:focus,div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.53)}div.tox .tox-dialog__footer .tox-button:before{width:1em;content:"\f00c";line-height:1}div.tox .tox-dialog__footer .tox-button:focus:not(:disabled){background:#f4c200;border-color:#f4c200}div.tox .tox-dialog__footer .tox-button.tox-button--secondary{background:#8b9fa7;border-color:#8b9fa7;color:#fff}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:hover{background:#7c939c;border-color:#778e98}div.tox .tox-dialog__footer .tox-button.tox-button--secondary.disabled,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:disabled{background:#8b9fa7;border-color:#8b9fa7}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled):active,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled):active:focus,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:before{content:"\f00d"}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:focus:not(:disabled){background:#8b9fa7;border-color:#8b9fa7}div.tox .tox-search-dialog .tox-form__group:not(:first-child){flex:initial !important}div.tox .tox-search-dialog .tox-dialog__footer-start button{padding:.25rem}div.tox .tox-search-dialog .tox-dialog__footer-end button:before{content:"\f303" !important}div.tox .tox-search-dialog .tox-dialog__footer-end button:nth-of-type(1):before{content:"\f002" !important}div.tox .tox-dialog__title{line-height:calc(58px - 1px);font-size:1.25rem;font-weight:bold;padding:0 0 0 1rem;width:100%;color:#4f4f4f}div.tox .tox-tbtn{height:28px}div.tox .tox-tbtn:not(.tox-tbtn--select,.tox-split-button__chevron){width:32px}div.tox .tox-button{line-height:1.5}div.tox .tox-label{color:#4f4f4f;padding-bottom:.25rem}div.tox .tox-color-input>input,div.tox .tox-listboxfield .tox-listbox--select,div.tox .tox-textarea,div.tox .tox-textfield{font-family:Roboto,sans-serif !important;font-size:14px;line-height:1.5;color:#4f4f4f;border-radius:.25rem;min-height:0;padding:.375rem .75rem}div.tox .tox-color-input>input:focus,div.tox .tox-listboxfield .tox-listbox--select:focus,div.tox .tox-textarea:focus,div.tox .tox-textfield:focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}div.tox .tox-listbox__select-label{margin:0}div.tox .tox-color-input span{top:5px}div.tox .custom-switch{position:relative;font-size:1rem;margin-top:.15rem}div.tox .custom-switch .tox-checkbox__icons{display:none}div.tox .custom-switch .tox-checkbox__label{margin:0}div.tox .image-selector{font-size:1rem}div.tox .image-selector button{color:#fff;background:#8b9fa7;border-color:#8b9fa7;padding:.5rem .75rem;line-height:1.5}div.tox .image-selector button:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}div.tox .image-selector button:hover{background:#7c939c;border-color:#778e98}div.tox .image-selector button.disabled,div.tox .image-selector button:disabled{background:#8b9fa7;border-color:#8b9fa7}div.tox .image-selector button:not(:disabled):not(.disabled):active,div.tox .image-selector button:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}div.tox .image-selector button:not(:disabled):not(.disabled):active:focus,div.tox .image-selector button:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}div.tox .tox-form__controls-h-stack div:not(:last-child){flex:1}div.tox .tox-collection__item-label{white-space:nowrap}@media screen and (max-width:480px){div.tox .tox-dialog{margin:0 !important;width:100% !important;height:100%;left:0 !important;top:0 !important;border-width:0 !important}div.tox .tox-dialog__header{background-color:#f1eeea}div.tox .tox-dialog__header .tox-button{display:none}div.tox .tox-dialog__title{font-size:1rem;text-align:center;padding:0 1rem}div.tox .tox-dialog__footer{background-color:#f1eeea}div.tox .tox-dialog__footer .tox-button{color:#4f4f4f !important;background:transparent !important;padding:.45rem;margin:0 !important;border:0;font-size:90%}div.tox .tox-dialog__footer .tox-button:before{display:block;float:none;width:100%;margin:0;line-height:1.75;height:1.75rem}div.tox .tox-dialog__footer .tox-button:active,div.tox .tox-dialog__footer .tox-button:focus,div.tox .tox-dialog__footer .tox-button:hover{background:transparent;border:0;box-shadow:none;color:#4f4f4f}div.tox .tox-dialog__footer>div{justify-content:space-evenly;display:flex;width:100%}div.tox .tox-dialog__footer>div:empty{display:none}}.image-selector{padding:1rem .5rem 10rem .5rem !important}.image-selector.droptarget{border:.2rem dashed #d4dbde}.image-selector.droptarget:after{margin-top:2rem}.image-selector form{position:absolute;top:0}.image-selector .attachmentslist{margin:0;overflow-x:hidden;overflow-y:auto;height:19.1em;padding:0 !important}.image-selector .attachmentslist li{padding:.25rem;cursor:pointer}.image-selector .attachmentslist li:before{display:none}.image-selector .attachmentslist li:hover,.image-selector .attachmentslist li:focus{background:#fdf6d9}.image-selector .attachmentslist li span.name{flex:1;margin:auto;padding-left:1rem;overflow:hidden;text-overflow:ellipsis}.image-selector .attachmentslist li span.img{height:80px;width:80px;display:flex;border:1px solid #f8f7f4;background:white;border-radius:.75rem;overflow:hidden}.image-selector .attachmentslist li img{margin:auto}html.layout-phone .image-selector .attachmentslist{height:auto}.html-editor{position:relative;margin-bottom:.2rem}.html-editor .editor-toolbar{position:absolute;left:1px;top:1px;right:1px;border-radius:.25rem .25rem 0 0;border-bottom:1px solid #ced4da;background-color:#f8f7f4}.html-editor .editor-toolbar .mce-i-html{display:block;margin:2px 2px 2px 4px;width:34px;height:28px;border-radius:.25rem;color:#222f3e}.html-editor .editor-toolbar .mce-i-html:focus,.html-editor .editor-toolbar .mce-i-html:hover{text-decoration:none;border-color:#e2e4e7;background-color:#dee0e2}.html-editor .editor-toolbar .mce-i-html:before{content:"\f03e";margin:0;width:34px;line-height:28px}.html-editor.mailvelope .editor-toolbar,.html-editor .tox-tinymce+.editor-toolbar{display:none}.html-editor>.googie_edit_layer,.html-editor>textarea{font-family:monospace;font-size:13px;width:100% !important;padding-top:40px;resize:none}.html-editor>iframe{border-radius:.3rem;border:1px solid #ced4da;min-height:30em}.googie_window{width:16rem;height:auto}.googie_edit_layer{font-family:monospace;padding:.5rem .75rem;border:1px solid #ced4da;border-radius:.3rem;line-height:1.5}.googie_link{color:#ff5552;text-decoration:underline;cursor:pointer}.googie_list li{min-width:8rem;width:auto}.googie_list li.googie_list_onhover{color:#fff;background-color:#f4c200}.googie_list li .googie_list_revert:before{content:"\f0e2"}.googie_list li .googie_add_to_dict:before{content:"\f0fe"}.googie_list input{display:inline-block;margin:.25rem .5rem}.task-login #layout-content{text-align:center;width:100%;display:block}.task-login #logo{display:inline-block;position:relative;top:16vh;max-height:100px}#login-form{margin:0 auto;top:20vh;width:95%;max-width:320px;position:relative}#login-form table,#login-form tbody{display:block}#login-form .row{margin-right:0;margin-left:0}#login-form .oauthlogin{margin-top:1em;padding-top:1em}#login-form .formbuttons+.oauthlogin{border-top:1px solid #ccc}#rcmloginsubmit:before{display:none !important}#login-footer{flex:1;color:#7b7b77}#login-footer>div{margin-top:1rem;padding:1rem;background:#f8f7f4;border-radius:.3rem}#login-addon{position:absolute;bottom:0;max-height:30%;margin:1rem !important;width:auto !important;overflow:auto}@media screen and (min-width:769px){#login-addon{max-width:768px;margin:auto !important;bottom:1rem;left:0;right:0}}body.task-error-login #layout #layout-menu,body.task-error-login #layout #layout-content>.header{display:none}#contactpic{width:112px;height:135px;border-radius:.5rem;overflow:hidden;display:table-cell;vertical-align:middle;text-align:center;background-color:#f4f4f4}#contactpic img{max-width:112px;max-height:135px}#contacthead .names{margin-bottom:.5rem}#contacthead .names span.namefield{font-size:1.5rem;font-weight:bold;line-height:1.2}#contacthead.readonly .source.row{color:#7b7b77;font-size:90%;margin-bottom:.25rem}#message-header{margin-bottom:1rem}#message-header>.subject{font-size:1.5rem;font-weight:bold}body.status-flagged #message-header>.subject:before{display:inline;float:none;content:"\f024";font-size:1em;color:#ff5552}#message-header>.subject a.extwin{text-decoration:none}#message-header>.subject a.extwin:before{float:none;display:inline-block;font-size:75%;line-height:1.5;margin:0;content:"\f360"}#message-header>.subject span.inner{display:none}#message-header>.header{display:flex}#message-header>.header img.contactphoto{margin:0 1rem 0 0;border-radius:50%;width:4rem;height:4rem;object-fit:cover;background:#f4f4f4}#message-header .header-content{min-height:4rem;flex:1}#message-header .header-content.details-view .header-summary{display:none}#message-header .header-content.details-view .header-headers{display:initial}#message-header .header-summary{margin-top:.25rem}#message-header .header-summary>span{display:inline-block}#message-header .header-headers{display:none}#message-header .header-headers .header-title{white-space:nowrap;color:#7b7b77;font-weight:bold;padding-right:1rem;vertical-align:top}#message-header .header-links{margin-top:.25rem}#message-header .header-links a{font-size:90%;margin-right:.5rem;text-decoration:none;white-space:nowrap;display:inline-block}#message-header .header-links a:before{height:1.5rem;line-height:1.3}#message-header .header-links a.headers-details:before{content:"\f0e0"}#message-header .header-links a.headers-summary:before{content:"\f0e0";font-weight:400}#message-header .header-links a.headers-all:before{content:"\f05a"}#message-header .header-links a.html:before{content:"\f03e"}#message-header .header-links a.plain:before{content:"\f039"}#message-header .header-links a.zipdownload:before{content:"\f019"}.message-partheaders{padding:.25rem .5rem;margin:.5rem 0 -0.5rem 0;border-top:1px solid #f4f4f4;background-color:#fcfcfc}.message-partheaders table.headers-table{font-size:90%;color:#7b7b77}.message-partheaders table.headers-table .header-title{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:8em;font-weight:bold;padding-right:1rem;vertical-align:top}.message-partheaders table.headers-table .subject{font-weight:bold}.message-partheaders table.headers-table+.message-part,.message-partheaders table.headers-table+.message-htmlpart{border-top:0;margin:0}#message-content .attachmentslist:not(:empty){margin-bottom:1rem}#messagebody.mailvelope iframe{min-height:75vh}.message-part,.message-htmlpart{padding-top:.5rem;position:relative}.message-part:not(:first-child),.message-htmlpart:not(:first-child){border-top:1px solid #f4f4f4;margin-top:.5rem}.message-part:last-child,.message-htmlpart:last-child{margin-bottom:.5rem}.message-part div.rcmBody,.message-htmlpart div.rcmBody{margin:0 auto !important}.message-part blockquote,.message-htmlpart blockquote{overflow:hidden;text-overflow:ellipsis;color:#5b4800;border-left:2px solid #5b4800;border-right:2px solid #5b4800;background-color:rgba(248,247,244,0.5);margin:2px 0;padding:0 .4em}.message-part blockquote blockquote,.message-htmlpart blockquote blockquote{color:#205a24;border-left:2px solid #205a24;border-right:2px solid #205a24}.message-part blockquote blockquote blockquote,.message-htmlpart blockquote blockquote blockquote{color:#eb0400;border-left:2px solid #eb0400;border-right:2px solid #eb0400}.message-part blockquote span.blockquote-link,.message-htmlpart blockquote span.blockquote-link{top:0;cursor:pointer;right:.5rem;min-width:4rem;padding:.2rem .25rem .2rem .5rem;font-size:90%;text-align:center;color:#7b7b77;background:#f8f7f4;border:1px solid #d4dbde;border-radius:.3rem;line-height:1;font-family:Roboto,sans-serif}.message-part blockquote span.blockquote-link:after,.message-htmlpart blockquote span.blockquote-link:after{content:"\f107";display:inline-block;float:none;margin:0;font-size:90%}.message-part blockquote span.blockquote-link.collapsed:after,.message-htmlpart blockquote span.blockquote-link.collapsed:after{content:"\f106"}.message-part blockquote.blockquote-header,.message-htmlpart blockquote.blockquote-header{text-overflow:ellipsis !important;padding-right:5rem !important}.message-part span.sig{color:#7b7b77}.message-part div.pre{font-family:monospace;font-size:13px}#compose-attachments{margin:1rem 1rem 0 1rem}#composestatusbar{opacity:.3;right:2.5rem}@media screen and (min-width:769px){#composestatusbar{display:none}}#composestatusbar a.button{display:inline-block}#composestatusbar a.button:before{line-height:58px;font-size:1.25rem !important}.settings-default-icon tr>td.section::before,.settings-default-icon li>a:before{content:"\f013"}html.dark-mode{scrollbar-color:#5b4800 #4d6066;scrollbar-width:thin}html.dark-mode textarea,html.dark-mode select,html.dark-mode .popover-body,html.dark-mode .popupmenu,html.dark-mode .ui-dialog-content,html.dark-mode .frame-content,html.dark-mode .formcontent,html.dark-mode .table-responsive,html.dark-mode .table-responsive-sm,html.dark-mode .scroller{scrollbar-width:thin}html.dark-mode:not(.touch) ::-webkit-scrollbar{width:6px}html.dark-mode:not(.touch) ::-webkit-scrollbar-track{background-color:#4d6066}html.dark-mode:not(.touch) ::-webkit-scrollbar-thumb{background-color:#5b4800}html.dark-mode body{color:#c5d1d3;background-color:#21292c}html.dark-mode #logo{opacity:.8}html.dark-mode #layout-list,html.dark-mode #layout-content,html.dark-mode #layout-sidebar,html.dark-mode #layout>div>.header,html.dark-mode #layout>div>.footer,html.dark-mode .popup .listbox .footer,html.dark-mode .menu.pagenav.pagenav-list,html.dark-mode .menu.pagenav.pagenav-list+.navlist,html.dark-mode .menu.pagenav.pagenav-list.expanded+.navlist{background-color:transparent;border-color:#4d6066}html.dark-mode #layout>div>.footer{font-weight:normal}html.dark-mode #layout>div>.header,html.dark-mode #layout>div>.footer{color:unset}html.dark-mode #layout>div>.header a.button,html.dark-mode #layout>div>.footer a.button{color:#c5d1d3}html.dark-mode #layout-menu{background:unset;border-right:1px solid #4d6066}html.dark-mode #layout-menu .popover-header,html.dark-mode #layout-menu .special-buttons{background:transparent !important}@media screen and (max-width:480px){html.dark-mode #layout-menu{border-left:0}html.dark-mode #layout-menu .popover-header{border-bottom:1px solid #4d6066}}html.dark-mode #layout-menu .special-buttons a:not(:focus){background:#21292c}html.dark-mode.layout-phone #layout-menu{background:#161b1d}html.dark-mode .searchbar{background-color:transparent;border-color:#4d6066}html.dark-mode .searchbar form:before,html.dark-mode .searchbar a,html.dark-mode .searchbar input{color:unset}html.dark-mode .searchbar a.selected{color:#41b849}html.dark-mode #messagestack div{color:#c5d1d3}html.dark-mode #messagestack div i.icon:before{color:#c5d1d3}html.dark-mode .ui.alert.boxinformation,html.dark-mode #messagestack .alert-info{background-color:#927400}html.dark-mode .ui.alert.boxerror,html.dark-mode #messagestack .alert-danger{background-color:#993331}html.dark-mode .ui.alert.boxwarning,html.dark-mode #messagestack .alert-warning{background-color:#997f31}html.dark-mode .ui.alert.boxconfirmation,html.dark-mode #messagestack .alert-success{background-color:#276e2c}html.dark-mode #messagestack .loading{background-color:#374449}html.dark-mode .ui.alert.boxinformation,html.dark-mode .ui.alert.boxerror,html.dark-mode .ui.alert.boxwarning,html.dark-mode .ui.alert.boxconfirmation{color:#c5d1d3}html.dark-mode .ui.alert.boxinformation i.icon:before,html.dark-mode .ui.alert.boxerror i.icon:before,html.dark-mode .ui.alert.boxwarning i.icon:before,html.dark-mode .ui.alert.boxconfirmation i.icon:before{color:#c5d1d3}html.dark-mode .ui.alert a:not(.btn){color:#c5d1d3;text-decoration:underline}html.dark-mode .iframe-loader{background-color:rgba(33,41,44,0.9)}html.dark-mode .iframe-loader .spinner-border{color:#7d989c;border-color:currentColor #425457 currentColor currentColor}html.dark-mode #taskmenu a,html.dark-mode .menu.toolbar a{color:#c5d1d3}html.dark-mode #taskmenu a.selected,html.dark-mode .menu.toolbar a.selected{background-color:#374549}html.dark-mode pre,html.dark-mode .popover .menu li aaria-haspopup::after,html.dark-mode .menu.pagenav .pagenav-text,html.dark-mode .menu.pagenav a{color:unset}html.dark-mode #taskmenu .action-buttons a{color:#f4c200}@media screen and (max-width:480px){html.dark-mode #taskmenu a{border-color:#2c373a !important}html.dark-mode #taskmenu a.selected{background:transparent}}@media screen and (min-width:481px) and (max-width:1024px){html.dark-mode #taskmenu a{width:41px}}@media screen and (min-width:1025px){html.dark-mode #taskmenu a{width:77px}}html.dark-mode.layout-small .popover,html.dark-mode.layout-phone .popover{border-left:1px solid #4d6066}html.dark-mode.layout-small .popover .menu .dropbutton a.dropdown,html.dark-mode.layout-phone .popover .menu .dropbutton a.dropdown{background:transparent}html.dark-mode.layout-small .popover:not(.select-menu) .listing li:last-child,html.dark-mode.layout-phone .popover:not(.select-menu) .listing li:last-child{border-color:#2c373a}html.dark-mode.layout-small .popover-header,html.dark-mode.layout-phone .popover-header{background:#161b1d;border-bottom:1px solid #4d6066;color:unset}html.dark-mode.layout-small .popover-overlay,html.dark-mode.layout-phone .popover-overlay{background:rgba(0,0,0,0.7)}html.dark-mode #taskmenu a:hover,html.dark-mode .popupmenu .listing li>a:not(.disabled):hover,html.dark-mode .header a.button.icon:not(.disabled):focus,html.dark-mode .header a.button.icon:not(.disabled):hover,html.dark-mode .menu.toolbar .dropbutton:not(.disabled):hover,html.dark-mode .menu a:not(.disabled):focus,html.dark-mode .menu a:not(.disabled):hover{background-color:#374549}html.dark-mode .menu.toolbar a.selected{color:#41b849;background:transparent}html.dark-mode .menu.toolbar .dropbutton a.dropdown:hover{background-color:#425358}html.dark-mode .listing tbody td,html.dark-mode .listing tbody td a,html.dark-mode .listing li a{color:#c5d1d3}html.dark-mode .listing li ul,html.dark-mode .listing tbody td,html.dark-mode .listing li{border-color:#2c373a}html.dark-mode .listing li.selected,html.dark-mode .listing li.selected>a,html.dark-mode .listing li.selected>div>a,html.dark-mode .listing tr.selected td{color:#f4c200;background-color:#374549}html.dark-mode .listing li.selected ul{background-color:#21292c}html.dark-mode .listing li.selected ul div.treetoggle{color:#c5d1d3}html.dark-mode .listing li.disabled,html.dark-mode .listing tr.disabled td{color:#637e82}html.dark-mode .listing li.droptarget>a,html.dark-mode .listing tr.droptarget>td{background-color:#4d4d00}html.dark-mode .messagelist{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.size,html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.date,html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.fromto{color:#8ba3a7}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.msgicon.status{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.msgicon.status.unread::before{color:#b88a00}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) span.flag{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted).selected td.subject a,html.dark-mode .messagelist tr:not(.flagged):not(.deleted).selected td.subject span.msgicon.status{color:#f4c200}html.dark-mode .messagelist tr.flagged:not(.deleted) td,html.dark-mode .messagelist tr.flagged:not(.deleted) span.attachment span{color:#ff5552}html.dark-mode .messagelist tr.deleted td span.flag,html.dark-mode .messagelist tr.deleted td span.attachment span,html.dark-mode .messagelist tr.deleted td.subject span.msgicon.status,html.dark-mode .messagelist tr.deleted td.subject span.msgicon.status.unread:before,html.dark-mode .messagelist tr.deleted td.subject span.subject a,html.dark-mode .messagelist tr.deleted td.subject span.date,html.dark-mode .messagelist tr.deleted td.subject span.fromto{color:#637e82}html.dark-mode .messagelist span.attachment span{color:#8ba3a7}html.dark-mode .folderlist li.mailbox .unreadcount{background-color:#4d6066;color:#e2e8e9;font-weight:normal}html.dark-mode .attachmentslist{background-color:#374549;border:0}html.dark-mode .attachmentslist a{color:#c5d1d3}html.dark-mode .attachmentslist li .attachment-name{color:#c5d1d3}html.dark-mode .attachmentslist li .attachment-size{color:#8ba3a7}html.dark-mode .btn{color:#c5d1d3}html.dark-mode .btn:focus,html.dark-mode .btn:hover{color:#e2e8e9}html.dark-mode .btn:disabled{opacity:.5 !important}html.dark-mode .btn-primary{background-color:#5b4800;color:#e2e8e9}html.dark-mode .btn-primary:hover:not(:disabled){background-color:#755d00}html.dark-mode .btn-secondary{background-color:#4d6066;color:#e2e8e9}html.dark-mode .btn-secondary:hover:not(:disabled){background-color:#586e75}html.dark-mode .btn-danger{background-color:#993331;color:#e2e8e9}html.dark-mode .btn-danger:hover:not(:disabled){background-color:#ac3937}html.dark-mode .floating-action-buttons a.button{box-shadow:none;background:#5b4800}html.dark-mode .custom-file-label,html.dark-mode .form-control{background-color:#21292c;color:#c5d1d3}html.dark-mode .custom-file-label:not(.is-invalid),html.dark-mode .form-control:not(.is-invalid){border-color:#7c949c}html.dark-mode .custom-file-label:focus,html.dark-mode .form-control:focus{background-color:#2c373b}html.dark-mode .custom-file-label:focus:not(.is-invalid),html.dark-mode .form-control:focus:not(.is-invalid){color:#e2e7e9 !important;border-color:#f4c200}html.dark-mode .custom-file-label::after{color:#c5d1d3;background-color:#374549}html.dark-mode .custom-select{background:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23c5d1d3' viewBox='0 0 4 5'%3e%3cpath d='M2 0L0 2h4zm0 5L0 3h4z'/%3e%3c/svg%3e") no-repeat right .75rem center / 8px 10px}html.dark-mode .custom-switch .custom-control-label::before{background-color:#4d6066}html.dark-mode .custom-switch .custom-control-label::after{background-color:#c5d1d3}html.dark-mode .custom-switch .custom-control-input:disabled~.custom-control-label{opacity:.4}html.dark-mode .custom-switch .custom-control-input:checked~.custom-control-label::before{background-color:#5b4800}html.dark-mode .custom-switch .custom-control-input:checked~.custom-control-label::after{background-color:#c5d1d3}html.dark-mode input:disabled,html.dark-mode select:disabled{opacity:.5}html.dark-mode .multi-input:not(.is-invalid)>.content{border-color:#7c949c}html.dark-mode .multi-input:not(.is-invalid)>.content.focused{border-color:#f4c200}html.dark-mode .input-group-text{color:#c5d1d3;background-color:#374549;border-color:#7c949c}html.dark-mode .input-group a:focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25);z-index:1}html.dark-mode .form-control-plaintext{color:unset}html.dark-mode .recipient-input.focus{color:#e2e7e9;background-color:#2c373b;border-color:#f4c200}html.dark-mode .recipient-input a.button.icon,html.dark-mode .recipient-input input{color:#c5d1d3}html.dark-mode .recipient-input .recipient{background-color:#374549;border-color:#7c949c}html.dark-mode .file-upload{border-color:#4d6066}html.dark-mode .file-upload:after{mix-blend-mode:soft-light}html.dark-mode .file-upload.droptarget.active{border-color:#c5d1d3}html.dark-mode .file-upload.droptarget.hover{border-color:#c5d1d3;background-color:#374549}html.dark-mode .file-upload .attachmentslist{background:transparent}html.dark-mode .image-upload{background-color:#374549}html.dark-mode .image-upload a.button{background-color:rgba(33,41,44,0.25)}html.dark-mode .formcontent.raweditor .CodeMirror{color:#c5d1d3;background-color:#21292c;border-color:#7c949c}html.dark-mode .formcontent.raweditor .CodeMirror-focused{background-color:#2c373b;border-color:#f4c200}html.dark-mode .CodeMirror-selected,html.dark-mode .CodeMirror-line::selection,html.dark-mode .CodeMirror-line>span::selection,html.dark-mode .CodeMirror-line>span>span::selection{background:#374549}html.dark-mode .CodeMirror-gutters{background-color:#212a2c;border:0}html.dark-mode .CodeMirror-activeline-background{background:#374549}html.dark-mode .skinselection .skinthumbnail{border-color:#7c949c;background:transparent}html.dark-mode .html-editor .editor-toolbar{background-color:#374549;border-color:#7c949c}html.dark-mode .html-editor .editor-toolbar .mce-i-html{color:unset}html.dark-mode .html-editor .editor-toolbar .mce-i-html:hover,html.dark-mode .html-editor .editor-toolbar .mce-i-html:focus{background-color:#586e75;border-color:transparent}html.dark-mode .tox.tox-tinymce{border-color:#7c949c}html.dark-mode .tox .tox-toolbar{background-color:#374549;border-color:#7c949c}html.dark-mode .tox .tox-toolbar-overlord>div{background:url("data:image/svg+xml,%3Csvg height='33px' viewBox='0 0 40 33px' width='40' xmlns='http://www.w3.org/2000/svg'%3E%3Crect x='0' y='32px' width='100' height='1' fill='%237c949c'/%3E%3C/svg%3E") #374549}html.dark-mode .tox .tox-pop.tox-pop--top:before,html.dark-mode .tox .tox-pop.tox-pop--top:after{border-bottom-color:#8b9fa7}html.dark-mode .tox .tox-pop__dialog{box-shadow:none;border-color:#8b9fa7}html.dark-mode .tox .tox-tbtn,html.dark-mode .tox .tox-split-button,html.dark-mode .tox .tox-swatches__picker-btn{color:#c5d1d3}html.dark-mode .tox .tox-tbtn svg,html.dark-mode .tox .tox-split-button svg,html.dark-mode .tox .tox-swatches__picker-btn svg{fill:#c5d1d3 !important}html.dark-mode .tox .tox-tbtn:hover,html.dark-mode .tox .tox-split-button:hover,html.dark-mode .tox .tox-swatches__picker-btn:hover,html.dark-mode .tox .tox-tbtn:focus,html.dark-mode .tox .tox-split-button:focus,html.dark-mode .tox .tox-swatches__picker-btn:focus{color:#c5d1d3;background:#586e75;box-shadow:none}html.dark-mode .tox .tox-tbtn--enabled{background:#586e75}html.dark-mode .tox .tox-button--naked:focus:not(:disabled),html.dark-mode .tox .tox-button--naked.tox-button--icon:hover:not(:disabled){color:#d4ddde;background-color:#586e75;border-color:transparent}html.dark-mode .tox .tox-button--naked:disabled{background:transparent;border:transparent}html.dark-mode .tox .tox-dialog__header .tox-button--naked:hover{background:transparent !important}html.dark-mode .tox .tox-selectfield select{background:transparent;color:#c5d1d3}html.dark-mode .tox .tox-selectfield svg{fill:#c5d1d3}html.dark-mode .tox .tox-color-input span::before{background-color:#c5d1d3}html.dark-mode .tox .tox-toolbar__group:not(:last-of-type){border-color:#7c949c}html.dark-mode .tox .tox-dialog,html.dark-mode .tox .tox-dialog__header,html.dark-mode .tox .tox-dialog__body,html.dark-mode .tox .tox-dialog__footer,html.dark-mode .tox .tox-dialog__title{color:#c5d1d3;border-color:#4d6066;background-color:#21292c}html.dark-mode .tox .tox-textfield,html.dark-mode .tox .tox-color-input>input,html.dark-mode .tox .tox-label,html.dark-mode .tox .tox-dialog__body-nav-item,html.dark-mode .tox .tox-button--naked,html.dark-mode .tox .tox-dialog__header .tox-button,html.dark-mode .tox .tox-insert-table-picker__label{color:#c5d1d3}html.dark-mode .tox .tox-dialog__footer .tox-button{background-color:#5b4800;color:#e2e8e9}html.dark-mode .tox .tox-dialog__footer .tox-button:disabled{opacity:.5}@media screen and (max-width:480px){html.dark-mode .tox .tox-dialog__footer .tox-button{color:#c5d1d3 !important}}html.dark-mode .tox .tox-dialog__footer .tox-button:focus:not(:disabled){background-color:#5b4800}html.dark-mode .tox .tox-dialog__footer .tox-button:hover:not(:disabled){background-color:#755d00}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary{background-color:#4d6066;color:#e2e8e9}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary:focus:not(:disabled){background-color:#4d6066}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary:hover:not(:disabled){background-color:#586e75}html.dark-mode .tox .tox-dialog__body-nav-item--active{color:#f4c200}html.dark-mode .tox .tox-dialog-wrap__backdrop{background-color:rgba(0,0,0,0.7)}html.dark-mode .tox .tox-menu{scrollbar-width:thin;background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .tox .tox-dialog__body-nav,html.dark-mode .tox .tox-collection__group{scrollbar-width:thin}html.dark-mode .tox .tox-collection__item-caret svg{fill:#c5d1d3}html.dark-mode .tox .tox-collection__item{color:#c5d1d3}html.dark-mode .tox .tox-collection__item:not(:last-child){border-bottom:1px solid #2c373a}html.dark-mode .tox .tox-collection--grid .tox-collection__item{border:0}html.dark-mode .tox .tox-collection__item--active,html.dark-mode .tox .tox-collection__item--active:not(.tox-collection__item--state-disabled){color:#c5d1d3;background-color:#374549}html.dark-mode .tox .tox-collection__item--enabled{color:#f4c200;background-color:#374549}html.dark-mode .message-part,html.dark-mode .message-htmlpart{border-color:#4d6066}html.dark-mode .message-part blockquote,html.dark-mode .message-htmlpart blockquote{background-color:#21292c;border-color:#ffd328;color:#ffd328}html.dark-mode .message-part blockquote span.blockquote-link,html.dark-mode .message-htmlpart blockquote span.blockquote-link{color:currentColor;background:#21292c;border-color:currentColor}html.dark-mode .message-part blockquote blockquote,html.dark-mode .message-htmlpart blockquote blockquote{color:#64c86b;border-color:#64c86b}html.dark-mode .message-part blockquote blockquote blockquote,html.dark-mode .message-htmlpart blockquote blockquote blockquote{color:#ff8785;border-color:#ff8785}html.dark-mode .message-part span.sig{color:#8ba3a7}html.dark-mode .message-htmlpart{background-color:white;color:#4f4f4f;padding:0;margin-top:.5rem}html.dark-mode #message-header .header-headers .header-title{color:#c5d1d3;font-weight:normal}html.dark-mode .message-partheaders{background-color:#374549;border:0}html.dark-mode .message-partheaders table.headers-table{color:#c5d1d3}html.dark-mode .message-partheaders table.headers-table *{font-weight:normal}html.dark-mode p.image-attachment{border-color:#4d6066;background-color:#374549}html.dark-mode p.image-attachment span{color:#8ba3a7}html.dark-mode fieldset.image-attachment legend{color:#8ba3a7;border-color:#4d6066}html.dark-mode #messagepartframe{background:#fff}html.dark-mode .ui-widget{border-color:#4d6066}html.dark-mode .ui-widget-overlay{background-color:rgba(0,0,0,0.7)}html.dark-mode .ui-widget-header,html.dark-mode .ui-widget-content{background-color:#21292c}html.dark-mode .ui-dialog .ui-dialog-titlebar{border-color:#4d6066}html.dark-mode .ui-dialog .ui-dialog-title,html.dark-mode .ui-dialog .ui-dialog-titlebar-close{color:#c5d1d3;background:transparent}html.dark-mode .ui-dialog .ui-dialog-buttonpane{border-color:#4d6066}html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{color:#c5d1d3}html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:focus{background:transparent}@media screen and (max-width:480px){html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-primary:not(.btn-danger),html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-secondary{color:#c5d1d3}}html.dark-mode .ui-datepicker .ui-datepicker-header{border-color:#4d6066}html.dark-mode .ui-datepicker th{color:#8ba3a7;font-size:80%;font-weight:normal}html.dark-mode .ui-datepicker .ui-datepicker-prev,html.dark-mode .ui-datepicker .ui-datepicker-next,html.dark-mode .ui-datepicker .ui-state-default,html.dark-mode .ui-datepicker.ui-widget-content .ui-state-default{color:#c5d1d3}html.dark-mode .ui-datepicker .ui-state-highlight,html.dark-mode .ui-datepicker.ui-widget-content .ui-state-highlight{color:#f4c200;background-color:#374549}html.dark-mode .ui-datepicker .ui-datepicker-days-cell-over a{background-color:#4d6066}html.dark-mode .ui-menu{scrollbar-width:thin;background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .ui-menu .ui-menu-item{border-bottom:1px solid #2c373a}html.dark-mode .ui-menu .ui-state-active{background-color:#374549 !important}html.dark-mode .minicolors-panel{box-shadow:none;border-color:#4d6066;background:#161b1d}html.dark-mode ::placeholder,html.dark-mode ::-webkit-input-placeholder,html.dark-mode .listing-info,html.dark-mode .listing span.secondary,html.dark-mode .file-upload .hint,html.dark-mode .contactlist span.email,html.dark-mode #login-footer,html.dark-mode #contacthead.readonly .source.row,html.dark-mode .formcontent .hint{font-weight:normal;color:#8ba3a7}html.dark-mode .popover{background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .popover .menu li.separator{background-color:transparent;color:#8ba3a7}html.dark-mode .popover .menu ul+li.separator{border-top:1px solid #2c373a}html.dark-mode .popover-body{color:#c5d1d3}html.dark-mode .bs-popover-autox-placement^="right">.arrow::after,html.dark-mode .bs-popover-right>.arrow::after{border-right-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="left">.arrow::after,html.dark-mode .bs-popover-left>.arrow::after{border-left-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="top">.arrow::after,html.dark-mode .bs-popover-top>.arrow::after{border-top-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="bottom">.arrow::after,html.dark-mode .bs-popover-bottom>.arrow::after{border-bottom-color:#8b9fa7}html.dark-mode .nav-tabs{border-color:#4d6066}html.dark-mode .nav-tabs .nav-link{color:#c5d1d3;border-color:transparent;border-bottom-color:#4d6066}html.dark-mode .nav-tabs .nav-link:hover{background:#21292c;border-color:#4d6066;color:#c5d1d3}html.dark-mode .nav-tabs .nav-link.active{background:#21292c;border-color:#4d6066;border-bottom-color:transparent;color:#fff}html.dark-mode .table{color:#c5d1d3}html.dark-mode .table td,html.dark-mode .table th,html.dark-mode .table thead th{border-color:#4d6066}html.dark-mode .table-widget{border-color:#4d6066}html.dark-mode .table-widget>.footer{border-color:#4d6066}html.dark-mode .table-widget table.options-table tr:last-child td{border-color:#4d6066}html.dark-mode .table-widget table.options-table tr.selected td{background-color:#374549;color:#c5d1d3}html.dark-mode #rcmdraglayer{background-color:#161b1d;border:1px solid #8b9fa7;box-shadow:none;color:#c5d1d3}html.dark-mode .quota-widget{color:unset}html.dark-mode .quota-widget .bar{border-color:#4d6066;background-color:#4d6066}html.dark-mode .quota-info .root{color:#8ba3a7;background-color:transparent}html.dark-mode img.contactphoto,html.dark-mode #contactpic{background-color:#374549 !important}html.dark-mode .pgpkeyimport div.key.revoked,html.dark-mode .pgpkeyimport div.key.disabled{color:#637e82}html.dark-mode .pgpkeyimport li.uid::before{opacity:1}#taskmenu span.inner{text-transform:uppercase}@media screen and (min-width:1025px) and (min-height:640px){#taskmenu span.inner{font-size:65%;font-weight:bold}#taskmenu a:before{line-height:1.2;font-size:180%;height:1.9rem !important}}@media screen and (min-width:769px){#taskmenu a.logout:not(:hover){color:#71777d !important}}#taskmenu .action-buttons{display:none}#layout-menu .popover-header{background-color:#3a444e !important}#layout-menu .popover-header img{width:100%}html.layout-phone #layout-menu .popover-header img{width:unset;max-height:58px}.watermark{background-image:url(../images/watermark.svg) !important;background-size:60% !important;background-blend-mode:unset !important}.watermark:before{background:rgba(255,255,255,0.75) !important}body.task-mail .menu a.compose{display:block !important}#message-header .short-header img.contactphoto{order:2;margin:0 0 0 1rem}.content-frame-navigation{height:35px !important;line-height:35px !important;min-height:35px !important}.content-frame-navigation a{max-width:8em;padding:0;line-height:35px}.content-frame-navigation a:before{display:none !important;height:35px !important;line-height:35px !important}.content-frame-navigation a.prev,.content-frame-navigation a.next{padding:0}.content-frame-navigation a.prev:before,.content-frame-navigation a.next:before{display:block !important;line-height:1.8}.content-frame-navigation a.prev span.inner,.content-frame-navigation a.next span.inner{display:none}.content-frame-navigation a span.inner{color:#f4c200;font-weight:bold}
\ No newline at end of file
+p.image-attachment .attachment-links a:before,.quota-widget:before,.table-widget table.options-table td:not(:first-child) span:before,table.table th.checkbox-cell:before,a.button.icon:before,button.btn:before,.floating-action-buttons a.button:before,.ui-dialog .ui-dialog-titlebar-close:before,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before,.ui-datepicker .ui-datepicker-prev:before,.ui-datepicker .ui-datepicker-next:before,.pgpkeyimport div.key label.keyid+a:before,.pgpkeyimport li.uid:before,.menu a:before,.popover .menu li aaria-haspopup:after,.searchbar form:before,.searchbar a:before,.ui.alert>i.icon:before,.listing td.action a:before,.listing.iconized li a:before,.listing.iconized li>i:before,.listing.iconized tr td:before,.listing.iconized.selectable li a:before,ul.treelist li div.treetoggle:before,.folderlist li a:before,.messagelist tr.thread td.threads div:before,.messagelist td.subject span.msgicon.status:before,.messagelist td.subject span.msgicon.status.replied.forwarded:after,.messagelist span.attachment span,.messagelist span.flagged:before,.messagelist tr.flaggedroot:not(:hover) span.unflagged:before,.messagelist tr:hover span.unflagged:before,.contactlist td.contact:before,.contactlist td.contactgroup:before,.contactlist li a:before,.attachmentslist li:before,.attachmentslist li a.cancelupload:before,.attachmentslist li a.delete:before,.keylist li:before,#identities-table td.mail:before,#responses-table td.name:before,#filterslist td.name:before,#filtersetslist td.name:before,.propform td.rowbuttons a:before,fieldset.advanced>legend:after,.input-group .icon:before,.multi-input a.icon.reset:before,.tagedit-list li.tagedit-listelement-old a:before,div.tox .tox-dialog__header .tox-button:before,div.tox .tox-dialog__footer .tox-button:before,.html-editor .editor-toolbar .mce-i-html:before,.googie_list li .googie_list_revert:before,.googie_list li .googie_add_to_dict:before,body.status-flagged #message-header>.subject:before,#message-header>.subject a.extwin:before,#message-header .header-links a:before,.message-part blockquote span.blockquote-link:after,.message-htmlpart blockquote span.blockquote-link:after{font-size:1.25em;display:block;float:left;margin:0 .25rem 0 0;width:1.18em;height:1em;font-family:'Icons';font-style:normal;font-weight:900;text-decoration:inherit;text-align:center;speak:none;font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased}@font-face{font-family:'Icons';font-style:normal;font-weight:900;src:url("../fonts/fa-solid-900.woff2") format('woff2'),url("../fonts/fa-solid-900.woff") format('woff')}@font-face{font-family:'Icons';font-style:normal;font-weight:400;src:url("../fonts/fa-regular-400.woff2") format('woff2'),url("../fonts/fa-regular-400.woff") format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:local('Roboto'),local('Roboto-Regular'),url('../fonts/roboto-v19-regular.woff2') format('woff2'),url('../fonts/roboto-v19-regular.woff') format('woff')}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:local('Roboto Italic'),local('Roboto-Italic'),url('../fonts/roboto-v19-italic.woff2') format('woff2'),url('../fonts/roboto-v19-italic.woff') format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:local('Roboto Bold'),local('Roboto-Bold'),url('../fonts/roboto-v19-regular-700.woff2') format('woff2'),url('../fonts/roboto-v19-regular-700.woff') format('woff')}@font-face{font-family:'Roboto';font-style:italic;font-weight:700;src:local('Roboto Bold Italic'),local('Roboto-BoldItalic'),url('../fonts/roboto-v19-italic-700.woff2') format('woff2'),url('../fonts/roboto-v19-italic-700.woff') format('woff')}body,button,input,optgroup,select,textarea,.popover{font-family:Roboto,sans-serif}button,input,select,textarea{line-height:initial}input{vertical-align:middle}a{color:#f4c200}a:hover{color:#c19900}a.disabled{pointer-events:none}a.disabled:not(.btn){opacity:.5}html{height:100%;font-size:14px}body{min-width:240px;height:100%;color:#4f4f4f;overflow:hidden}html.iframe body{overflow:auto}#layout{overflow:hidden;display:flex;height:100%;width:100%}#layout>div>.scroller{flex:1;position:relative}#layout>div>.header,#layout>div>.footer{font-size:1rem;font-weight:bold;line-height:58px;height:58px;min-height:58px;padding:0 .25em;margin:0;position:relative;overflow:hidden;white-space:nowrap;display:flex;justify-content:center}#layout>div>.header{border-bottom:1px solid #d4dbde;color:#4f4f4f;background-color:#f1eeea}#layout>div>.header .header-title{overflow:hidden;text-overflow:ellipsis;flex:1;text-align:center;margin:0 -20rem}#layout>div>.header a.button{color:#7b7b77}#layout>div>.header a.toolbar-list-button,#layout>div>.header a.toolbar-menu-button{order:99}#layout>div>.footer{border-top:1px solid #d4dbde;background-color:#fff}#layout>div>.footer.small{height:35px;min-height:35px;line-height:35px}#layout>div>.footer:empty{display:none}#layout-sidebar{position:relative;display:flex;flex-direction:column;flex:2;max-width:30%;min-width:220px;border-right:1px solid #d4dbde;background-color:#fff}#layout-sidebar.sidebar-right{order:2;border-right:0;border-left:1px solid #d4dbde;flex:3}#layout-list{position:relative;display:flex;flex-direction:column;flex:3;max-width:30%;min-width:300px;border-right:1px solid #d4dbde;background-color:#fff}#layout-content{display:flex;flex:6;flex-direction:column;background-color:#fff}html.iframe #layout-content{height:100%}#layout-content>.formcontent,#layout-content>.content{height:100%;width:100%;overflow:auto;flex:1}#layout-content .iframe-wrapper{width:100%;flex:1}#layout-content .iframe-wrapper iframe{width:100%;height:100%;border:0}#layout-content.only>.scroller{overflow:auto}#layout-menu.popover{left:0 !important}#layout-menu .popover-header{height:58px;line-height:58px;border:0;border-radius:0;text-align:center}#layout-menu .popover-header img{max-height:58px;max-width:78px;padding:.25rem}@media screen and (min-width:481px) and (max-width:1024px){#layout-menu .popover-header img{max-width:35.1px}}@media screen and (min-width:481px){#layout-menu .popover-header{padding:0 !important;background-color:#3a444e !important}#layout-menu .popover-header a{display:none !important}}html.layout-phone #layout-menu .popover-header{display:flex !important;align-items:center;justify-content:center;padding:0 .5rem}html.layout-phone #layout-menu .popover-header img{max-width:222px}html.layout-phone #layout-menu .popover-header a{width:auto;flex:1}html.layout-phone #layout-menu .popover-header a:before{height:58px;float:right}html.layout-phone #layout-menu .popover-header a .inner{display:none}.column-resizer{cursor:col-resize;z-index:1;position:absolute;top:0;right:-3px;width:6px;height:100%}.column-resizer.inverted{right:auto;left:-3px}.column-resizer.active{width:10000px;right:-5000px}.column-resizer.active.inverted{right:auto;left:-5000px}@media screen and (max-width:1200px){#layout-sidebar,#layout-list{min-width:260px;flex:3}#layout-list>.header>a.button{padding:0 .25rem;margin:0 .25rem}}@media screen and (max-width:1024px){.column-resizer{display:none}#layout-sidebar,#layout-list{width:auto !important;flex:3 !important}}@media screen and (max-width:768px){#layout-sidebar,#layout-list{max-width:none;border:0 !important}#layout>div>.header{background-color:#f1eeea}#layout>div>.header a.button{margin:0 .3rem !important;padding:0 !important}#layout>div>.header a.button:before{font-size:1.75rem;height:58px;margin:0}#layout>div>.header a.button.filter:before{font-size:1.6rem}#layout>div>.header a.button .inner{display:none}#layout>div>.footer{background-color:#f1eeea}a.toolbar-list-button{display:none}}@media screen and (max-width:320px){#layout-sidebar,#layout-list{min-width:240px}}@media screen and (min-width:481px){a.task-menu-button{display:none}#layout-menu{background-color:#3a444e;width:42px}}@media screen and (min-width:769px){.floating-action-buttons,#layout-content>.header>.header-title,#layout>div>.header>.buttons,a.toolbar-menu-button{display:none}}@media screen and (min-width:1025px){#layout-menu{width:78px}}@media screen and (min-width:1201px){#layout-list>.header>.header-title:not(.all-sizes),a.toolbar-list-button,a.back-list-button,a.back-sidebar-button{display:none}}html.layout-phone .hidden-phone{display:none !important}html.layout-phone .hidden-small,html.layout-small .hidden-small{display:none !important}html.layout-small .hidden-lbs{display:none !important}html.layout-large .hidden-lbs,html.layout-normal .hidden-lbs,html.layout-large .hidden-big,html.layout-normal .hidden-big{display:none !important}html.layout-large .hidden-large{display:none !important}.rcmaddcontact,.hidden,.voice{display:none !important}font.bold{font-weight:bold}#rcmdraglayer{min-width:260px;width:260px;background-color:#3a444e;color:#fff;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem;z-index:250;opacity:.92;padding:.5rem;white-space:nowrap}#rcmdraglayer div{line-height:1.6em;overflow:hidden;text-overflow:ellipsis}.frame-content{padding:1rem}.frame-content h2{font-weight:bold;font-size:1.5em}.frame-content h3{font-weight:bold;font-size:1.25em}.listbox .scroller{width:100%;overflow-x:hidden;overflow-y:auto}.listbox .navlist{height:0;flex:initial !important}.listbox .navlist .listing tr:last-child td,.listbox .navlist .listing li:last-child{border-bottom:0}.popup .listbox{height:100%;display:flex;flex-direction:column}.popup .listbox .scroller{flex:1}.popup .listbox .footer{border-top:1px solid #d4dbde;background-color:#fbfbfb}.contact-header{display:flex;margin-bottom:1rem}.contact-header .contact-photo{min-width:112px}.contact-header .contact-head{margin-left:1rem;margin-top:0 !important}.contact-header .contact-head legend{display:none}p.image-attachment{position:relative;border:1px solid #ddd;border-radius:.3rem;background-color:rgba(244,194,0,0.05);float:left;margin:.5rem;min-width:47%;min-height:250px;overflow:hidden;display:flex;justify-content:center}@media screen and (max-width:480px){p.image-attachment{float:none;margin:.5rem 0 .5rem 0}}p.image-attachment .image-link{align-self:center;text-align:center;margin:1.6rem .5rem}p.image-attachment span{color:#7b7b77;padding:0 .5rem;font-size:90%;white-space:nowrap;position:absolute;line-height:1.5rem}p.image-attachment .image-filename{overflow:hidden;text-overflow:ellipsis;left:0;top:0;right:0;padding-right:4rem}p.image-attachment .image-filesize{right:0;top:0}p.image-attachment .attachment-links{position:absolute;bottom:0;left:0;width:100%;text-align:center}p.image-attachment .attachment-links a{text-decoration:none;display:inline-block;padding:0 .5rem;line-height:1.5rem}p.image-attachment .attachment-links a:before{display:inline-block}p.image-attachment .attachment-links a.open:before{content:"\f360"}p.image-attachment .attachment-links a.download:before{content:"\f019"}fieldset.image-attachment{margin-top:.5rem}fieldset.image-attachment legend{color:#7b7b77;font-size:.9rem;border-top:1px solid #f9f9f8;margin:0}fieldset.image-attachment img{max-width:100%}#folder-selector{overflow-y:auto}.noselect{user-select:none;-moz-user-select:none;-khtml-user-select:none;-ms-user-select:none;-webkit-user-select:none}.iframe-loader{width:100%;position:absolute;top:0;bottom:0;background-color:rgba(255,255,255,0.95);display:flex;align-items:center;justify-content:center;z-index:3}.iframe-loader .spinner-border{width:7rem;height:7rem;color:#f8f7f4;border:1rem solid;border-color:currentColor #7b7b77 currentColor currentColor}.footer.toolbar+.iframe-loader{top:58px;bottom:58px}.ios-scroll{padding:0;-webkit-overflow-scrolling:touch !important;overflow:scroll !important}.ios-scroll.iframe-wrapper{margin-top:1px}.webkit-scroller::-webkit-scrollbar{-webkit-appearance:none}.webkit-scroller::-webkit-scrollbar:vertical{width:.5rem}.webkit-scroller::-webkit-scrollbar:horizontal{height:.5rem}.webkit-scroller::-webkit-scrollbar-thumb{background-color:rgba(0,0,0,0.3);border-radius:.25rem;border:2px solid #fff}.quota-widget{width:100%;max-width:15em;padding:.5rem 1rem;display:flex;align-items:center;color:#7b7b77}.quota-widget:before{content:"\f0a0";line-height:1}.quota-widget .count{font-size:80%;order:2}.quota-widget .bar{flex:1;height:.5rem;margin:0 1rem;background-color:#fff;border:1px solid #d4dbde;border-radius:.25rem;overflow:hidden}.quota-widget .value{display:block;background-color:#f4c200;height:1rem;opacity:.75}.quota-widget .value.warning{background-color:#ff5552}.image-tools{position:absolute;top:5rem;left:0;height:58px;overflow:hidden;transform:translateX(-87%);transition:transform .3s ease-in-out;background-color:rgba(244,194,0,0.4);border-radius:0 .3rem .3rem 0}.image-tools .menu{float:left}.image-tools a.button.icon.tools{padding:0 .25rem;display:inline-block;height:58px}.image-tools a.button.icon.tools span.inner{display:none}.image-tools a.button.icon.tools:before{line-height:58px;margin:0}.image-tools.open{transform:translateX(0)}.image-tools.open a.button.icon.tools:before{content:"\f053"}.image-tools a{color:#fff !important}.image-tools a:focus,.image-tools a:hover{background-color:rgba(244,194,0,0.5) !important;outline:0}.quota-info{width:100%;display:table !important}.quota-info td,.quota-info th{text-align:center;white-space:nowrap}.quota-info th{border-top:0}.quota-info .root{line-height:1;font-style:italic;color:#7b7b77;background-color:#f8f7f4}.quota-info th:first-child,.quota-info .name{text-align:left}.nav-tabs{flex-wrap:nowrap}.nav-tabs .nav-item{white-space:nowrap;overflow:hidden}.nav-tabs .nav-link{overflow:hidden;text-overflow:ellipsis}.props-table td.title{width:7em}.table-widget{display:flex;flex-direction:column;margin-bottom:.5rem;border:1px solid #d4dbde}.table-widget>.content{overflow-x:auto;flex-grow:1;height:18.5em}.table-widget>.content table th{border-top:0}.table-widget>.footer{height:3.5rem;border-top:1px solid #d4dbde;text-align:left}.table-widget>.footer a{padding:.2rem .45rem !important;height:calc(3.5rem - 1px) !important}.table-widget table{margin:0;max-height:18.5em}.table-widget table.options-table td,.table-widget table.options-table th{text-align:center;vertical-align:middle}.table-widget table.options-table td:first-child,.table-widget table.options-table th:first-child{overflow:hidden;text-overflow:ellipsis;text-align:left}.table-widget table.options-table tr:last-child td{border-bottom:1px solid #d4dbde}.table-widget table.options-table tr.selected td{background-color:#fdf6d9;color:#4f4f4f;outline:0}.table-widget table.options-table td:not(:first-child) span{display:inline-block;line-height:1.25}.table-widget table.options-table td.enabled span:before{content:"\f00c"}.table-widget table.options-table td.partial span:before{opacity:.3;content:"\f00c"}table.compact-table{margin:0;width:100%}table.compact-table *:not(.invalid-feedback){font-size:inherit}table.compact-table td{padding:.25rem;border:0}table.compact-table td:first-child{padding-left:0}table.compact-table td:last-child{padding-right:0}table.table .checkbox-cell{width:3rem;white-space:nowrap;overflow:hidden;text-align:center;padding:.5rem}html.touch table.table .checkbox-cell{padding:.5rem .3rem}table.table th.checkbox-cell{padding:.75rem 0;max-width:1rem}table.table th.checkbox-cell:before{cursor:pointer;margin:0 1rem;line-height:1}table.table th.checkbox-cell.subscription:before{content:"\f143"}table.table th.checkbox-cell.alarm:before{content:"\f0f3";font-weight:400}table.table th.checkbox-cell.read:before{content:"\f06e"}table.table th.checkbox-cell.write:before{content:"\f303"}table.table .buttons-cell{width:1%;white-space:nowrap;text-align:center}table.table .buttons-cell a.button:before{line-height:1;float:none;display:inline-block}@media screen and (min-width:480px){table.table .buttons-cell a.button .inner{display:inline}}table.table label{margin:0;display:inline}fieldset.tab-pane table.table thead th{border:0}table.table tr.deleted td{color:rgba(79,79,79,0.5) !important}.table thead th{border-width:1px;white-space:nowrap}.button.disabled{opacity:.5}a.button{text-decoration:none !important}a.button.icon.sidebar-menu:before,button.btn.sidebar-menu:before,a.button.icon.toolbar-menu-button:before,button.btn.toolbar-menu-button:before,a.button.icon.toolbar-list-button:before,button.btn.toolbar-list-button:before{content:"\f142";width:1em}a.button.icon.task-menu-button:before,button.btn.task-menu-button:before{content:"\f0c9"}a.button.icon.back-sidebar-button:before,button.btn.back-sidebar-button:before,a.button.icon.back-content-button:before,button.btn.back-content-button:before,a.button.icon.back-list-button:before,button.btn.back-list-button:before{content:"\f053"}a.button.icon.refresh:before,button.btn.refresh:before{content:"\f021"}a.button.icon.generate:before,button.btn.generate:before,a.button.icon.yes:before,button.btn.yes:before,a.button.icon.submit:before,button.btn.submit:before,a.button.icon.continue:before,button.btn.continue:before,a.button.icon.save:before,button.btn.save:before{content:"\f00c"}a.button.icon.create:before,button.btn.create:before{content:"\f0fe"}a.button.icon.edit:before,button.btn.edit:before{content:"\f303"}a.button.icon.qrcode:before,button.btn.qrcode:before{content:"\f029"}a.button.icon.search:before,button.btn.search:before{content:"\f002"}a.button.icon.filter:before,button.btn.filter:before{content:"\f0b0";font-size:1.2em}a.button.icon.import:before,button.btn.import:before{content:"\f093"}a.button.icon.export:before,button.btn.export:before{content:"\f019"}a.button.icon.discard:before,button.btn.discard:before,a.button.icon.delete:before,button.btn.delete:before{content:"\f2ed";font-weight:400}a.button.icon.next:before,button.btn.next:before{content:"\f061"}a.button.icon.restore:before,button.btn.restore:before{content:"\f0e2"}a.button.icon.send:before,button.btn.send:before,a.button.icon.bounce:before,button.btn.bounce:before{content:"\f1d8"}a.button.icon.attach:before,button.btn.attach:before{content:"\f0c6"}a.button.icon.attach.vcard:before,button.btn.attach.vcard:before{content:"\f007"}a.button.icon.no:before,button.btn.no:before,a.button.icon.close:before,button.btn.close:before,a.button.icon.cancel:before,button.btn.cancel:before{content:"\f00d"}a.button.icon.back:before,button.btn.back:before{content:"\f053"}a.button.icon.remove:before,button.btn.remove:before{content:"\f00d"}a.button.icon.unlock:before,button.btn.unlock:before{content:"\f09c"}a.button.icon.help:before,button.btn.help:before{content:"\f1cd";font-weight:400}a.button.icon.folders:before,button.btn.folders:before{content:"\f07c"}a.button.icon.options:before,button.btn.options:before{content:"\f1de"}a.button.icon.tools:before,button.btn.tools:before,a.button.icon.settings:before,button.btn.settings:before{content:"\f013"}a.button.icon.properties:before,button.btn.properties:before{content:"\f05a"}a.button.icon.selection:before,button.btn.selection:before{content:"\f14a";font-weight:400}a.button.icon.insert.recipient:before,button.btn.insert.recipient:before{content:"\f234"}a.button.icon.encrypt:before,button.btn.encrypt:before{content:"\f023"}a.button.icon.sign:before,button.btn.sign:before{content:"\f5b7"}a.button.icon.sso:before,button.btn.sso:before{content:"\f2f6"}a.button.icon.extwin:before,button.btn.extwin:before{content:"\f360"}a.btn:before,button.btn:before{display:inline !important;float:none !important;vertical-align:middle;margin-right:.4rem !important}a.btn.oauth.google:before,button.btn.oauth.google:before,a.btn.oauth.outlook:before,button.btn.oauth.outlook:before{content:" ";display:inline-block !important;height:1.5rem;width:1.5rem;margin-right:.8rem !important;background-size:100% auto}a.btn.oauth.google:before,button.btn.oauth.google:before{background:url('../images/google-icon.svg') top left no-repeat}a.btn.oauth.outlook:before,button.btn.oauth.outlook:before{background:url('../images/microsoft-icon.svg') top left no-repeat}a.button.icon.dropdown:before{content:"\f0d7";font-size:1em}a.button.icon>span.inner{display:none}html.touch .btn:focus{box-shadow:none !important}.floating-action-buttons{position:absolute;right:0;bottom:0}.footer:not(:empty)+.floating-action-buttons{bottom:35px}.floating-action-buttons a.button{display:block;float:left;width:4rem;height:4rem;border-radius:50%;background:#f4c200;color:white;opacity:.95;box-shadow:0 0 5px 5px #ffeda7;margin:0 1rem 1rem 0}.floating-action-buttons a.button:before{content:"\f067";width:4rem;height:4rem;line-height:4rem}.floating-action-buttons a.button.compose:before{content:"\f304"}.floating-action-buttons a.button .inner{display:none}.btn:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.3)}.btn-link{color:#f4c200}.btn-secondary{color:#fff;background:#8b9fa7;border-color:#8b9fa7}.btn-secondary:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}.btn-secondary:hover{background:#7c939c;border-color:#778e98}.btn-secondary.disabled,.btn-secondary:disabled{background:#8b9fa7;border-color:#8b9fa7}.btn-secondary:not(:disabled):not(.disabled):active,.btn-secondary:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}.btn-secondary:not(:disabled):not(.disabled):active:focus,.btn-secondary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}.btn-primary{color:#fff;background:#f4c200;border-color:#f4c200}.btn-primary:focus{background:#dbae00;border-color:#d0a600;box-shadow:0 0 0 .2rem rgba(244,194,0,0.5)}.btn-primary:hover{background:#dbae00;border-color:#d0a600}.btn-primary.disabled,.btn-primary:disabled{background:#f4c200;border-color:#f4c200}.btn-primary:not(:disabled):not(.disabled):active,.btn-primary:not(:disabled):not(.disabled).active{background:#c19900;border-color:#b79100}.btn-primary:not(:disabled):not(.disabled):active:focus,.btn-primary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.53)}.btn-danger{color:#fff;background:#ff5552;border-color:#ff5552}.btn-danger:focus{background:#ff3c38;border-color:#ff322e;box-shadow:0 0 0 .2rem rgba(255,85,82,0.5)}.btn-danger:hover{background:#ff3c38;border-color:#ff322e}.btn-danger.disabled,.btn-danger:disabled{background:#ff5552;border-color:#ff5552}.btn-danger:not(:disabled):not(.disabled):active,.btn-danger:not(:disabled):not(.disabled).active{background:#ff231f;border-color:#ff1915}.btn-danger:not(:disabled):not(.disabled):active:focus,.btn-danger:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(255,85,82,0.53)}.ui-widget-overlay{background-color:rgba(79,79,79,0.5);opacity:1 !important}.ui-widget-overlay.datepicker{z-index:119}.ui-widget{border:1px solid #d4dbde;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem}.ui-menu{overflow-y:auto;overflow-x:hidden;max-height:400px;border-radius:.3rem;z-index:240;position:absolute}.ui-menu .ui-state-active{border:0 !important;background-color:#f4c200 !important}.ui-menu .ui-menu-item{white-space:nowrap;cursor:default}.ui-menu .ui-menu-item-wrapper{margin:0 !important}.ui-dialog{border-radius:0;box-shadow:none}.ui-dialog.no-titlebar .ui-dialog-titlebar{display:none}.ui-dialog .ui-dialog-titlebar{height:58px;border-bottom:1px solid #ddd}.ui-dialog .ui-dialog-titlebar button:before{margin:0}.ui-dialog .ui-dialog-title{line-height:58px;font-size:1.25rem;padding:0 3rem 0 1rem;color:#4f4f4f}.ui-dialog .ui-dialog-titlebar-close{border:0;color:#4f4f4f;background:transparent;right:0;top:0;position:absolute;padding:.25rem .5rem;margin:15px .5rem}.ui-dialog .ui-dialog-titlebar-close:before{content:"\f00d";line-height:1.5rem;margin:0 !important}.ui-dialog .ui-dialog-content>.popupmenu{display:block !important}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset{display:flex;justify-content:flex-end}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button{overflow:hidden;text-overflow:ellipsis;min-width:5rem;margin:9px 4px}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:last-child,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:last-child{margin-right:0}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{padding-right:0;padding-left:0;text-decoration:none;color:#4f4f4f}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:focus{background-color:rgba(244,194,0,0.5)}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options{order:-1;padding:.375rem .25rem;margin-right:.3rem}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before{content:"\f013";width:100%;height:1.25em}.ui-dialog iframe,.ui-dialog .ui-dialog-content.iframe{padding:0;width:100% !important;height:100%;border:0;overflow:hidden}.ui-dialog,.ui-dialog-content{box-sizing:initial}.ui-widget-content .ui-icon.ui-resizable-se{background:url("data:image/svg+xml;charset=utf-8,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%2016%2016%22%3E%0A%20%20%3Cpath%20fill%3D%22%23888%22%20d%3D%22M6.7%2016L16%206.7V5.3L5.3%2016zM9.7%2016L16%209.7V8.3L8.3%2016zM12.7%2016l3.3-3.3v-1.4L11.3%2016zM15.7%2016l.3-.3v-1.4L14.3%2016z%22%2F%3E%0A%3C%2Fsvg%3E%0A")}@media screen and (max-width:480px){.ui-dialog{width:100% !important;height:100% !important;display:flex;flex-direction:column;border:0;top:0 !important}.ui-dialog .ui-resizable-handle,.ui-dialog .ui-dialog-titlebar-close{display:none !important}.ui-dialog .ui-dialog-titlebar{height:58px;text-align:center;background-color:#f1eeea}.ui-dialog .ui-dialog-title{line-height:58px;font-size:1rem;padding:0 1rem}.ui-dialog .ui-dialog-content{flex:1}.ui-dialog .ui-dialog-content:not(.iframe){padding:1rem}.ui-dialog .ui-dialog-buttonpane{padding:0 !important;text-align:center !important;border-top:1px solid #ddd;height:58px !important;background-color:#f1eeea}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset{justify-content:space-around}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button{margin:0 !important;padding:.45rem;border:0 !important;height:58px;box-shadow:none;font-size:90%;line-height:1.5}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:before{display:block !important;float:none;width:auto;height:1.75rem;line-height:1.75;margin:0 !important}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:active{box-shadow:none}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-primary,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-secondary{color:#7b7b77;background:transparent}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-danger{color:#ff5552;background:transparent}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.disabled,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:disabled{opacity:.5}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.cancel{order:100}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{color:#7b7b77;margin:0;padding:.45rem;font-size:90%}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before{display:block !important;height:1.75rem;line-height:1.75;margin:0}}.ui-slider{box-shadow:none}.ui-slider .ui-slider-range{border-radius:.3rem;background:#ffe88e}.ui-slider .ui-slider-handle{border-radius:.3rem}.ui-slider .ui-slider-handle.ui-state-active{background:#f4c200;border-color:#5b4800}.ui-datepicker{margin:calc(50vh - 10em) calc(50vw - 10em) !important;top:0 !important;left:0 !important;box-shadow:none;user-select:none}.ui-datepicker:not(.ui-datepicker-inline){z-index:120 !important}.ui-datepicker .ui-datepicker-header,.ui-datepicker .ui-datepicker-title{line-height:4rem;height:4rem;padding:0}.ui-datepicker .ui-datepicker-header{border-bottom:1px solid #ddd}.ui-datepicker .ui-datepicker-header a{height:4rem}.ui-datepicker .ui-datepicker-header select{display:inline-block}.ui-datepicker .ui-icon{background-image:none !important;background-position:none !important}.ui-datepicker .ui-datepicker-prev,.ui-datepicker .ui-datepicker-next{cursor:pointer;width:auto;color:#4f4f4f;text-decoration:none}.ui-datepicker .ui-datepicker-prev:before,.ui-datepicker .ui-datepicker-next:before{content:"\f053";margin:0 .25em;height:auto;width:1em}.ui-datepicker .ui-datepicker-prev:before{content:"\f053"}.ui-datepicker .ui-datepicker-next:before{content:"\f054"}.ui-datepicker td a{padding:0;line-height:1.8em;border-radius:.3rem}.ui-datepicker .ui-state-default,.ui-datepicker.ui-widget-content .ui-state-default{border:0;background:transparent;color:#4f4f4f}.ui-datepicker .ui-datepicker-days-cell-over a,.ui-datepicker .ui-datepicker-days-cell-over a.ui-state-default,.ui-datepicker .ui-state-highlight,.ui-datepicker.ui-widget-content .ui-state-highlight{background:#ffe88e;color:#f4c200}.ui-datepicker a.ui-state-active{background:#f4c200 !important;color:#fff !important;font-weight:bold}.ui-datepicker html.touch td a{font-size:1.2em;line-height:2.2em}.input-group>.form-control.hasDatepicker{position:initial}.minicolors-panel{border:1px solid #d4dbde;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem;height:152px;padding:1px}.input-group .minicolors-input{width:100%;min-width:130px;border-left:0;border-right:0}@media screen and (max-width:320px){.ui-widget-content{border-radius:0}.ui-menu{border-radius:.3rem;left:15px !important;right:15px;width:auto}.ui-dialog .ui-dialog-content:not(.iframe){padding:.65rem}}.popupmenu{display:none;padding:0;min-width:180px;height:100%}.popupmenu li>a{width:100%}.popupmenu.propform{overflow:hidden;padding:.25rem}.popupmenu.simplelist{min-width:80px}.popup.justified{display:flex;justify-content:space-around}.popover-body{padding:0;overflow-x:hidden}.popover-body>.popupmenu{display:block !important}.popover{box-shadow:3px 3px 5px #f8f7f4;border-color:#d4dbde;padding:0;z-index:1300}.popover .popover-header{display:none}@media screen and (min-width:769px){.popover .listing li:first-child{border-radius:.25rem .25rem 0 0}.popover .listing li:last-child{border-bottom-right-radius:.25rem;border-bottom-left-radius:.25rem}.popover .listing ul.rounded-0>li{border-radius:0}}html.layout-small .popover:not(.select-menu),html.layout-phone .popover:not(.select-menu){margin:0 !important;padding:0;right:0;left:initial !important;bottom:0;top:0;width:272px;transform:none !important;border-radius:0;border:0;display:flex;flex-direction:column;box-shadow:none}html.layout-small .popover:not(.select-menu) div.arrow,html.layout-phone .popover:not(.select-menu) div.arrow{display:none}html.layout-small .popover:not(.select-menu) .listing li:last-child,html.layout-phone .popover:not(.select-menu) .listing li:last-child{border-bottom:1px solid #f8f7f4}html.layout-small .popover-overlay,html.layout-phone .popover-overlay{z-index:1299;background-color:rgba(79,79,79,0.5);position:absolute;top:0;bottom:0;width:100%}html.layout-small .popover-header,html.layout-phone .popover-header{display:block;border-radius:0;border:0;padding:0 .5em;height:58px;min-height:58px;line-height:58px;font-size:16px;color:#fff;background-color:#3a444e}html.layout-small .popover-header:before,html.layout-phone .popover-header:before{display:none}html.layout-small .popover-header a,html.layout-phone .popover-header a{display:inline-block;width:100%}html.layout-small .popover-body>*,html.layout-phone .popover-body>*{max-height:100% !important}html.touch .popover .listing li a{line-height:47px;font-size:16px;padding:0 .5em}html.touch .popover .listing li a:before{float:left}.select-menu{max-width:initial;margin:0;height:auto;z-index:1301}.select-menu .popover-header{border-radius:.25rem .25rem 0 0 !important}.select-menu .listing li a{padding-left:.25rem;outline:0}.select-menu .listing li:last-child{border-bottom-right-radius:.25rem;border-bottom-left-radius:.25rem}.select-menu.inline .listing li{padding-right:.5rem}.select-menu.inline .listing li:first-child{border-top-left-radius:.25rem;border-top-right-radius:.25rem}.pgpkeyimport div.key{position:relative;padding:.5rem 0}.pgpkeyimport div.key.revoked,.pgpkeyimport div.key.disabled{color:#7b7b77}.pgpkeyimport div.key label{display:inline-block;margin-right:.5em;margin-bottom:0}.pgpkeyimport div.key label:after{content:":"}.pgpkeyimport div.key label.keyid{display:none}.pgpkeyimport div.key label+a,.pgpkeyimport div.key label+span{line-height:2.6rem;margin-right:1em;white-space:nowrap;text-decoration:none}.pgpkeyimport div.key label.keyid+a{font-weight:bold}.pgpkeyimport div.key label.keyid+a:before{content:"\f084"}.pgpkeyimport ul.uids{margin:0;padding:0}.pgpkeyimport li.uid{border:0;padding:.25rem 0 0 1.5em;line-height:1.5rem !important;list-style-type:none}.pgpkeyimport li.uid:before{content:"\f007";opacity:.25;font-size:1em;line-height:1.25}.pgpkeyimport button.importkey{position:absolute;top:.5rem;right:0}.pgpkeyimport button:disabled{display:none}.menu{margin:0;text-align:center;white-space:nowrap}.menu a{overflow:hidden;text-overflow:ellipsis;text-decoration:none}.menu a:before{content:"\00a0"}.menu a:hover,.menu a:focus{outline:0}.menu a:not(.disabled):focus,.menu a:not(.disabled):hover{background-color:#f7f5f2}.menu.toolbar li{display:inline-block;height:58px}.menu.toolbar a{color:#7b7b77;display:block;float:left;border:0 !important;height:58px;min-width:3.2rem;max-width:6rem;width:auto;padding:.45rem;line-height:1.5;cursor:pointer;font-size:1rem;text-align:center}.menu.toolbar a:before{height:1.75rem !important;float:none !important;width:auto !important;margin:0 !important}.menu.toolbar a.selected{color:#41b849}.menu.toolbar>.spacer{width:1em}.menu.toolbar .dropbutton:not(.disabled):hover{background-color:#f7f5f2}.menu.toolbar .dropbutton a.dropdown{padding:0 .3rem}.menu.toolbar .dropbutton a.dropdown:before{line-height:58px}.menu.toolbar .dropbutton a.dropdown:hover{background-color:#ece8e3}.menu span.inner{font-size:90%;font-weight:normal}.menu .dropbutton{display:inline-block}.menu .dropbutton a.dropdown{font-size:75%;min-width:0}html.ie11 .menu .dropbutton a.dropdown:before{font-size:80%}.menu .dropbutton a.dropdown span.inner{display:none}.menu .dropbutton a:first-child{padding-right:0}.menu.pagenav{display:flex;justify-content:space-between;align-items:center;padding:0 !important;font-size:100%}.menu.pagenav a{flex-grow:1;display:inline-block;min-width:2rem !important;height:35px;color:#7b7b77}.menu.pagenav a:before{margin:0;display:inline;float:none;line-height:35px}.menu.pagenav .pagenav-text{overflow:hidden;text-overflow:ellipsis;color:#7b7b77;flex-grow:4;font-size:80%}.menu.pagenav input{width:3rem;max-width:5rem;font-size:90%;text-align:center;max-height:1.6rem;margin:0 .2rem}html.layout-phone .menu.pagenav input{display:none}.menu.pagenav span.inner{display:none}.menu.pagenav.pagenav-list{cursor:pointer;background-color:#fbfbfb;border-bottom:1px solid #f8f7f4}.menu.pagenav.pagenav-list a{flex-grow:unset}.menu.pagenav.pagenav-list .pagenav-text{text-align:left;font-size:100%}.menu.pagenav.pagenav-list+.navlist{background-color:#fbfbfb}.menu.pagenav.pagenav-list.expanded+.navlist{border-bottom:1px solid #d4dbde}.menu.content-frame-navigation.hide-nav-buttons a.next,.menu.content-frame-navigation.hide-nav-buttons a.prev{display:none}.menu .listselectors{max-width:100%;display:flex;justify-content:space-around}.menu .buttons{display:block}.menu .buttons button{display:block;float:left;cursor:pointer;color:#7b7b77;background-color:transparent;border:0;padding:0;height:58px;line-height:58px;width:2.5em}.menu .buttons button:before{font-size:1.75rem}.popover .menu li{display:block;height:auto;text-align:left}.popover .menu li.spacer{display:none}.popover .menu li:last-child{border:0}.popover .menu li.separator{line-height:1.5rem !important;font-size:.75rem !important;padding:0 .5rem;color:#7b7b77;background-color:#f8f7f4}.popover .menu li.separator label{margin:0}.popover .menu li a{height:unset;max-width:100%;width:100%;line-height:35px;display:block;padding:0 .5rem;text-align:left}.popover .menu li a:before{line-height:inherit;height:inherit !important;margin-right:.5rem !important;float:left !important;width:1.18em !important;min-width:1.18em}.popover .menu li a:not(.disabled):hover{color:#fff;background-color:#f4c200}.popover .menu li aaria-haspopup{display:flex}.popover .menu li aaria-haspopup:after{color:#7b7b77;font-size:.9em;margin:0 0 0 .2em;min-width:1.18em;content:"\f054"}html.layout-small .popover .menu li aaria-haspopup:after{margin:0 .2em}.popover .menu li aaria-haspopup.dropdown:after{color:#4f4f4f;margin:0 .6em !important}.popover .menu li aaria-haspopup:hover:after{color:#fff}.popover .menu li aaria-haspopup>span{overflow:hidden;text-overflow:ellipsis;flex:1}.popover .menu li span.inner{font-size:100%}.popover .menu .dropbutton{display:flex}.popover .menu .dropbutton a:first-child{overflow:hidden;text-overflow:ellipsis;flex:1}.popover .menu .dropbutton:not(.disabled):hover{background-color:#f6f6f6}.popover .menu .dropbutton a.dropdown{width:3.5rem;padding:0 .5em;background-color:#f6f6f6}.popover .menu .dropbutton a.dropdown:hover{background-color:#f4c200}.popover .menu .dropbutton a.dropdown:before,.popover .menu .dropbutton a.dropdown span.inner{display:none}.popover .menu.no-icon a:before{display:none}@media screen and (min-width:769px){.content-frame-navigation{display:none !important}.header a.button.icon:not(.disabled):focus,.header a.button.icon:not(.disabled):hover{background-color:#f7f5f2;outline:0}.header a.button.icon:before{margin:0}}@media screen and (max-width:768px){.menu.footer{justify-content:space-around !important}.menu.footer>*{flex-grow:1}.menu.footer .buttons{display:flex;justify-content:space-evenly}.menu.footer .listselectors>*{flex-grow:1}.menu.listing a{color:#4f4f4f}}a.toolbar-button{cursor:pointer}@media screen and (min-width:1201px){a.toolbar-button{line-height:1.5;padding:.45rem}a.toolbar-button:before{float:none !important;height:1.75rem !important;line-height:1.5;width:auto !important}a.toolbar-button span.inner{display:inline !important;font-weight:normal;font-size:90%}}.menu a.mail:before{content:"\f0e0"}.menu a.contacts:before{content:"\f0c0"}.menu a.options:before{content:"\f1de"}.menu a.settings:before{content:"\f013"}.menu a.theme.light:before{content:"\f185"}.menu a.theme.dark:before{content:"\f186"}.menu a.help:before{content:"\f1cd"}.menu a.logout:before{content:"\f011"}.menu a.about:before{content:"\f128"}.menu a.refresh:before{content:"\f021"}.menu a.compose:before{content:"\f044"}.menu a.calendar:before{content:"\f073"}.menu a.tasklist:before{content:"\f0ae"}.menu a.files:before{content:"\f07b"}.menu a.notes:before{content:"\f249"}.menu a.chat:before{content:"\f086"}.menu a.actions:before{content:"\f013"}.menu a.addressbook:before{content:"\f007"}.menu a.archive:before{content:"\f187"}.menu a.assigngroup:before{content:"\f234"}.menu a.attach:before,.menu a.vcard:before{content:"\f0c6"}.menu a.next:before{content:"\f061"}.menu a.prev:before,.menu a.back:before{content:"\f060"}.menu a.check:before{content:"\00a0"}.menu a.check.selected:before{content:"\f00c"}.menu a.closewin:before{content:"\f410"}.menu a.collapse:before{content:"\f107"}.menu a.copy:before{content:"\f0c5"}.menu a.create:before{content:"\f0fe"}.menu a.delete:before{content:"\f2ed"}.menu a.download:before,.menu a.download.eml:before,.menu a.download.maildir:before,.menu a.download.mbox:before{content:"\f019"}.menu a.dropdown:before{content:"\f0d7"}.menu a.edit:before{content:"\f303"}.menu a.encrypt:before,.menu a.enigma:before{content:"\f023"}.menu a.encrypt.sign:before{content:"\f023"}.menu a.expand:before{content:"\f105"}.menu a.expand.all:before{content:"\f103"}.menu a.expand.none:before{content:"\f102"}.menu a.export:before,.menu a.export.all:before,.menu a.export.selection:before{content:"\f019"}.menu a.expunge:before{content:"\f78c"}.menu a.extwin:before{content:"\f360"}.menu a.filterlink:before{content:"\f0b0"}.menu a.firstpage:before{content:"\f100"}.menu a.nextpage:before{content:"\f105"}.menu a.prevpage:before{content:"\f104"}.menu a.lastpage:before{content:"\f101"}.menu a.flag:before,.menu a.select.flagged:before{content:"\f024";font-weight:900}.menu a.unflag:before{content:"\f024";font-weight:400}.menu a.folders:before{content:"\f07b"}.menu a.forward:before,.menu a.forward.attachment:before,.menu a.forward.bounce:before,.menu a.forward.inline:before{content:"\f064"}.menu a.import:before,.menu a.upload:before{content:"\f093"}.menu a.insertresponse:before{content:"\f075"}.menu a.junk:before{content:"\f7e4"}.menu a.notjunk:before{content:"\f01c"}.menu a.markmessage:before{content:"\f02b"}.menu a.more:before{content:"\f141"}.menu a.move:before{content:"\f07c"}.menu a.print:before{content:"\f02f"}.menu a.properties:before{content:"\f15b"}.menu a.purge:before{content:"\f12d"}.menu a.qrcode:before{content:"\f029"}.menu a.read:before{content:"\f2b6";font-weight:400}.menu a.unread:before,.menu a.expand.unread:before,.menu a.select.unread:before{content:"\f0e0";font-weight:900}.menu a.recipient:before{content:"\f0e0";font-weight:400}.menu a.refresh:before{content:"\f021"}.menu a.remove:before{content:"\f12d"}.menu a.removegroup:before{content:"\f235"}.menu a.rename:before{content:"\f303"}.menu a.reply:before{content:"\f3e5"}.menu a.reply-all:before,.menu a.reply.all:before,.menu a.reply.list:before{content:"\f122"}.menu a.responses:before{content:"\f075"}.menu a.rotate:before{content:"\f2f9"}.menu a.save:before{content:"\f0c7";font-weight:400}.menu a.search:before{content:"\f002"}.menu a.search.delete:before{content:"\f2ed"}.menu a.select:before{content:"\f245"}.menu a.select.all:before{content:"\f069"}.menu a.select.invert:before{content:"\f14a"}.menu a.select.none:before{content:"\f00d";font-weight:900}.menu a.select.page:before{content:"\f0c9";font-weight:900}.menu a.selection:before{content:"\f14a" !important;font-weight:400 !important}.menu a.send:before{content:"\f1d8"}.menu a.showurl:before{content:"\f0c1"}.menu a.signature:before{content:"\f5b7"}.menu a.source:before{content:"\f1c9"}.menu a.spellcheck:before{content:"\f891"}.menu a.status:before{content:"\f0eb";font-weight:400}.menu a.submit:before{content:"\f00c"}.menu a.info:before{content:"\f05a"}.menu a.threads:before{content:"\f086"}.menu a.zoomin:before{content:"\f00e"}.menu a.zoomout:before{content:"\f010"}.searchbar{height:36px;min-height:36px;line-height:36px;background-color:#fbfbfb;border-bottom:1px solid #f8f7f4;display:flex;align-items:center;overflow:hidden;position:relative}.searchbar form{flex:1;display:flex}.searchbar form:before{content:"\f002";height:36px;color:#7b7b77;margin:0 0 0 .75rem}.searchbar input{width:100%;border:0;background:transparent;padding:.5rem;line-height:normal;outline:0}.searchbar input::-ms-clear{display:none}.searchbar a{color:#7b7b77}.searchbar a:before{width:2rem;height:36px;margin:0}.searchbar a.options:before{content:"\f107"}.searchbar a.reset:before{content:"\f00d";font-size:1rem}.searchbar a.unread:before{content:"\f0e0";font-weight:900}.searchbar a.reset,.searchbar a.search{display:none}.searchbar a.selected{color:#41b849}.searchbar span.inner{display:none}.searchbar.active a.reset{display:inline}.searchbar.open a.options:before{content:"\f106"}.searchoptions button.search{width:100%}.searchoptions ul.proplist+div{margin-top:1rem}.searchoptions .input-group:not(:last-child){margin-bottom:.5rem}.searchoptions .input-group .input-group-prepend{width:30%}.searchoptions .input-group label{width:100%}.searchoptions .formbuttons{display:block !important}#taskmenu a{display:block;float:none}@media screen and (max-width:480px){#taskmenu{z-index:30001;overflow-x:hidden}#taskmenu a{max-width:unset;padding:0 .5em;margin-top:1px;text-align:left;line-height:47px;height:47px;border-bottom:1px solid #f8f7f4 !important;color:#4f4f4f;font-size:1.2rem}#taskmenu a:before{float:left !important;width:1.2em !important;margin-right:.5rem !important}#taskmenu span.inner{font-size:100%}}@media screen and (min-width:481px){#taskmenu a{color:#71777d;padding:.45rem 0;min-width:unset}#taskmenu a.selected{color:#e1e2e3;background:#505e6b}#taskmenu a.selected:hover{color:#fff;background:#505e6b}#taskmenu a:hover{color:#e1e2e3;background:#505e6b}#taskmenu .special-buttons{position:absolute;bottom:0;left:0;background-color:#3a444e}#taskmenu .action-buttons a{color:#f4c200;background:transparent}#taskmenu .action-buttons a:hover{color:#f4c200;background:#505e6b}#taskmenu a.logout{color:#ff5552 !important}#taskmenu a.logout:hover{color:#ff5552 !important}}@media screen and (min-width:481px) and (max-width:1024px){#taskmenu a{width:42px;height:42px;font-size:1.2rem;padding:0}#taskmenu a:before{line-height:42px}#taskmenu span.inner{display:none}}@media screen and (min-width:1025px){#taskmenu a{width:78px;font-size:1rem}#taskmenu a:before{float:none}#taskmenu a:focus{background-color:#505e6b}#taskmenu span.inner{padding:0 .1em}}.ui.alert{margin:0;margin-bottom:.2rem;opacity:.95;width:100%;padding:.75em;color:#4f4f4f;border:1px solid transparent;background-color:rgba(244,194,0,0.05);display:flex;align-items:center}@media screen and (max-width:480px){.ui.alert{border:0}}.ui.alert span{margin:auto 0}.ui.alert>i.icon{line-height:1;color:#4d5f66;margin:auto 0}.ui.alert>i.icon:before{content:"\f05a";margin-right:.6rem}.ui.alert .btn{margin-left:.5rem}.ui.alert.loading{color:#848484}.ui.alert.loading>i.icon:before{content:"\f1ce";-webkit-animation:spinner-border 1.5s infinite linear;animation:spinner-border 1.5s infinite linear;width:1em}.ui.alert.alert-success>i.icon:before{content:"\f058";color:#41b849}.ui.alert.alert-warning>i.icon:before{content:"\f071";color:#ffd452}.ui.alert.alert-danger>i.icon:before{content:"\f06a";color:#ff5552}.ui.alert.vcardattachment>i.icon:before{content:"\f2bb"}.ui.alert.enigmaattachment>i.icon:before{content:"\f084"}.ui.alert.signed>i.icon:before,.ui.alert.encrypted>i.icon:before{content:"\f023"}.ui.alert.chat>i.icon:before{content:"\f075"}.ui.alert .boxbuttons{white-space:nowrap}.ui.alert .boxbuttons .btn{overflow:hidden;text-overflow:ellipsis;max-width:220px}@media screen and (max-width:480px){.ui.alert .boxbuttons{display:flex;flex-direction:column}.ui.alert .boxbuttons .btn{max-width:160px}.ui.alert .boxbuttons .btn:not(:first-child){margin-top:.25rem}}.ui.alert.aligned-buttons{display:flex}.ui.alert.aligned-buttons span{flex:1}.ui.alert a:not(.btn){color:#f4c200;font-weight:normal}.ui.alert h3{font-weight:bold;font-size:1.2rem}.ui.alert p{margin:1rem 0}.ui.alert.boxerror,.ui.alert.boxconfirmation,.ui.alert.boxinformation,.ui.alert.boxwarning{padding:.5em;border-radius:0}.ui.alert.boxerror i.icon,.ui.alert.boxconfirmation i.icon,.ui.alert.boxinformation i.icon,.ui.alert.boxwarning i.icon{font-size:1.5em !important}.ui.alert.boxerror{background-color:rgba(255,85,82,0.2)}.ui.alert.boxinformation{background-color:rgba(244,194,0,0.2)}.ui.alert.boxconfirmation{background-color:rgba(65,184,73,0.2)}.ui.alert.boxwarning{background-color:rgba(255,212,82,0.2)}.ui.alert+table{margin-top:1em}#messagestack{position:absolute;bottom:.5em;right:.7em;z-index:105;width:320px;height:auto;max-height:85%}@media screen and (max-width:480px){#messagestack{left:0;right:0;bottom:0;width:auto}}#messagestack div{background-color:#4f4f4f;color:#fff}@media screen and (max-width:480px){#messagestack div{margin:0;border-radius:0;min-height:4.2rem}}#messagestack div.voice{position:absolute;top:-1000px}#messagestack div i.icon{font-size:1.5em !important}#messagestack div>i.icon:before{color:#fff}#messagestack div:last-child{margin-bottom:0}#messagestack .loading{background-color:#848484}#messagestack .alert-info.information{background-color:#f4c200}#messagestack .alert-success{background-color:#41b849}#messagestack .alert-warning{background-color:#ffd452;color:#4f4f4f}#messagestack .alert-warning>i.icon:before{color:#4f4f4f}#messagestack .alert-danger{background-color:#ff5552}#messagestack a{color:inherit !important;text-decoration:underline;cursor:pointer}.listing tbody td,.listing li{border-bottom:1px solid #f8f7f4;cursor:default;font-weight:normal;line-height:35px}.listing tbody td,.listing li a{padding:0 .5rem;white-space:nowrap;vertical-align:middle;color:#4f4f4f}.listing tbody td{overflow:hidden;text-overflow:ellipsis;outline:none}.listing tbody td a{color:#4f4f4f}.listing li a{display:block;text-decoration:none;cursor:default;width:100%}.listing li.selected,.listing tr.selected td{color:#4f4f4f;background-color:#fdf6d9}.listing td.selection{padding:0 0 0 .5em;width:2em;text-align:center}.listing td.selection>input{vertical-align:middle}.listing:not(.withselection) td.selection{display:none}.listing td.name{overflow:hidden;text-overflow:ellipsis}.listing td.action{padding:0 .5em;width:2em;text-align:center}.listing td.action:empty{width:0}.listing td.action a{display:block;overflow:hidden;text-decoration:none}.listing td.action a:before{margin:0;font-size:1rem}.listing td.action a.pushgroup:before{content:"\f054"}.listing li.droptarget>a,.listing tr.droptarget>td{background-color:#ffffcc}.listing li.disabled,.listing tr.disabled td{color:rgba(79,79,79,0.5)}.listing li>a.virtual,.listing li.virtual>a{opacity:.4}.listing span.secondary{color:#7b7b77}html:not(.touch) .listing li>a,html:not(.touch) .listing tbody tr>td:first-child,html:not(.touch) .listing:not(.withselection) tbody tr>td.selection+td{border-left:2px solid transparent}html:not(.touch) .listing li>a:focus,html:not(.touch) .listing.focus tbody tr.focused>td:first-child,html:not(.touch) .listing.focus:not(.withselection) tbody tr.focused>td.selection+td{border-left:2px solid #ffdd5b;outline:0}table.listing{width:100%;table-layout:fixed;border-spacing:0;border-collapse:unset}ul.listing{margin:0;padding:0}ul.listing>ul{padding:0}ul.listing li{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;position:relative;list-style:none}ul.listing li ul{border-top:1px solid #f8f7f4;padding-left:1.5em}ul.listing li ul li:last-child{border-bottom:none}ul.listing li .custom-switch{position:absolute;padding:0;top:0;right:0;height:35px;vertical-align:middle}ul.listing li .custom-switch .custom-control-label:before,ul.listing li .custom-switch .custom-control-label:after{margin-top:.4rem}html.touch ul.listing li .custom-switch .custom-control-label:before,html.touch ul.listing li .custom-switch .custom-control-label:after{margin-top:.75rem}html.touch ul.listing li .custom-switch{height:47px}ul.listing.simplelist li{padding:0 .5rem}.listing-info{position:absolute;top:50%;left:50%;transform:translate(-50%, -50%);width:80%;text-align:center;font-weight:bold;color:#7b7b77}html.touch .listing:not(.toolbar) li,html.touch .listing tbody td{line-height:47px;font-size:1.2rem}html.touch li inputtype=checkbox{height:47px}html.touch td.selection{padding:0;width:3em}@media screen and (max-width:1200px){.listing.selection-large-only li.selected{color:#4f4f4f;background-color:transparent}}.listing.iconized li a:before{height:2em;margin-right:.5rem}.listing.iconized li.preferences>a:before{content:"\f1de"}.listing.iconized li.folders>a:before{content:"\f07b"}.listing.iconized li.responses>a:before{content:"\f075"}.listing.iconized li.identities>a:before{content:"\f2c2"}.listing.iconized li.password>a:before{content:"\f023"}.listing.iconized li.addressbook a:before{content:"\f2b9";font-weight:400}.listing.iconized li.contactgroup a:before{content:"\f0c0";font-weight:900}.listing.iconized li.contactsearch a:before{content:"\f002"}.listing.iconized li.filter>a:before{content:"\f0b0"}.listing.iconized li.vacation>a:before{content:"\f017";font-weight:400}.listing.iconized li.forward>a:before{content:"\f14d"}.listing.iconized li.enigma.keys>a:before{content:"\f084"}.listing.iconized li.info>a:before,.listing.iconized li.userinfo>a:before{content:"\f05a"}.listing.iconized li.twofactorauth>a:before{content:"\f2f6"}.listing.iconized li a.help:before{content:"\f1cd"}.listing.iconized li a.about:before{content:"\f059";font-weight:400}.listing.iconized li a.license:before{content:"\f3ed"}.listing.iconized li>i:before{content:"\f007";margin-left:.5rem}.listing.iconized li.group>i:before{content:"\f0c0"}html.ie11 .listing.iconized li a:before{font-size:1.25rem}.listing.iconized tr td:before{margin-right:.5rem}.listing.iconized tr.contact.person td.name:before{content:"\f007"}.listing.iconized tr.contact.group td.name:before{content:"\f0c0"}.listing.iconized tr.general>td.section:before{content:"\f108"}.listing.iconized tr.mailbox>td.section:before{content:"\f0e0";font-weight:400}.listing.iconized tr.mailview>td.section:before{content:"\f01c"}.listing.iconized tr.compose>td.section:before{content:"\f1d8"}.listing.iconized tr.addressbook>td.section:before{content:"\f0c0"}.listing.iconized tr.folders>td.section:before{content:"\f07b";font-weight:400}.listing.iconized tr.server>td.section:before{content:"\f233"}.listing.iconized tr.encryption>td.section:before{content:"\f023"}.listing.iconized tr.calendar>td.section:before{content:"\f133"}.listing.iconized tr.chat>td.section:before{content:"\f086"}.listing.iconized.selectable li a:before{content:""}.listing.iconized.selectable li a.selected:before{content:"\f00c"}.popupmenu .listing li>a{border-left:0}.popupmenu .listing li>a:not(.disabled):hover{color:#fff;background-color:#f4c200}.popupmenu .listing li.selected{color:#fff;background-color:#f4c200}.popupmenu .listing td{overflow:hidden;text-overflow:ellipsis}ul.treelist li div.treetoggle{position:absolute;top:0;left:0;width:1.5em;cursor:pointer;background-color:transparent}ul.treelist li div.treetoggle:before{content:"\f105";margin-left:.25em;font-size:1em}ul.treelist li div.treetoggle.expanded:before{content:"\f107"}ul.treelist li>a{overflow:hidden;text-overflow:ellipsis;padding-left:1.5em}ul.treelist li.selected{color:inherit;background-color:transparent}ul.treelist li.selected>div>a,ul.treelist li.selected>a{color:#4f4f4f;background-color:#fdf6d9}ul.treelist li ul{padding:0}ul.treelist li ul li{padding-left:0}ul.treelist li ul li a{padding-left:3em}ul.treelist li ul li div.treetoggle{left:1.5em}ul.treelist li ul li li a{padding-left:4.5em}ul.treelist li ul li li div.treetoggle{left:3em}ul.treelist li ul li li li a{padding-left:6em}ul.treelist li ul li li li div.treetoggle{left:4.5em}ul.treelist li ul li li li li a{padding-left:7.5em}ul.treelist li ul li li li li div.treetoggle{left:6em}ul.treelist li ul li li li li li a{padding-left:9em}ul.treelist li ul li li li li li div.treetoggle{left:7.5em}ul.treelist.notree div.treetoggle{display:none}ul.treelist.notree li>a{padding-left:.5em}.folderlist li.mailbox.unread>a{padding-right:2.8em;font-weight:bold}.folderlist li.mailbox .unreadcount{position:absolute;top:0;right:0;min-width:2em;line-height:1.4rem;margin:7.7px;padding:0 .3em;border-radius:.4em;background:#f4c200;color:#fff;text-align:center;font-weight:bold}html.touch .folderlist li.mailbox .unreadcount{line-height:2rem;margin:9.5px}.folderlist li.mailbox.recent>a{color:#8e7100}.folderlist li.mailbox.recent>a>.unreadcount{background:#f4c200;color:#fff}.folderlist li.mailbox.root{display:none !important}.folderlist li a:before{content:"\f07b";font-weight:400;margin-right:.5rem}.folderlist li.inbox>a:before{content:"\f01c";font-weight:900}.folderlist li.trash a:before{content:"\f2ed";font-weight:900}.folderlist li.trash.empty>a:before{content:"\f2ed";font-weight:400}.folderlist li.drafts a:before{content:"\f303";font-weight:900}.folderlist li.sent a:before{content:"\f1d8";font-weight:900}.folderlist li.junk a:before{content:"\f7e4";font-weight:900}.folderlist li.archive>a:before{content:"\f187";font-weight:900}.folderlist li.ns-shared>a:before{content:"\f1e0";font-weight:900}.folderlist li.ns-other>a:before{content:"\f500";font-weight:900}.folderlist.menu a:before{margin-left:.5em}.messagelist>thead,.messagelist .branch,table.fixedcopy{display:none}.messagelist td{border-left:0;width:2em;vertical-align:top;font-size:1rem !important}.messagelist td.subject{width:100%;padding-right:0;display:flex;flex-wrap:wrap}.messagelist td.subject a{text-decoration:none;cursor:default}.messagelist td.subject span{line-height:2em}.messagelist td.subject span.size,.messagelist td.subject span.date{font-size:90%;color:#7b7b77}.messagelist td.subject span.fromto{overflow:hidden;text-overflow:ellipsis;flex:1;font-size:90%;color:#7b7b77;padding-left:1.5em;padding-right:.5rem}.messagelist td.subject span.subject{overflow:hidden;text-overflow:ellipsis;width:100%;user-select:none}.messagelist td.threads{padding:0 0 0 .25rem;width:1.5em}.messagelist td.flags{width:2.5em}.messagelist td.flags>span{height:1.7em;line-height:1.7em;display:block}.messagelist td.flags>span.flag{cursor:pointer}.messagelist tr.flagged td,.messagelist tr.flagged td.subject span.subject a,.messagelist tr.flagged td.subject span.date,.messagelist tr.flagged td.subject span.fromto{color:#ff5552}.messagelist tr.deleted td,.messagelist tr.deleted td.subject span.subject a,.messagelist tr.deleted td.subject span.date,.messagelist tr.deleted td.subject span.fromto{color:rgba(79,79,79,0.5)}.messagelist tr.unread td.subject span.subject{font-weight:bold}.messagelist tr.unroot td.subject a{text-decoration:underline}.messagelist tr.thread td.threads div:before{content:"\f105";cursor:pointer;width:1em}.messagelist tr.thread.expanded td.threads div:before{content:"\f107"}.messagelist td.subject span.msgicon.status:before{content:"\f111";cursor:pointer;font-size:.4rem;width:1.1rem;height:2rem}.messagelist td.subject span.msgicon.status.unread:before{content:"\f111";color:#ffd452;font-size:.5rem}.messagelist td.subject span.msgicon.status.unreadchildren:before{content:"\f111";font-weight:400;font-size:.5rem}.messagelist td.subject span.msgicon.status.replied:before{content:"\f3e5";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.forwarded:before{content:"\f064";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.replied.forwarded:before{content:"\f3e5";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.replied.forwarded:after{content:"\f064";font-weight:900;font-size:1rem;opacity:.5;margin:0 -0.1em 0 -1.25em}.messagelist tr.deleted td.subject span.msgicon.status:before{content:"\f05e" !important;font-weight:900 !important;font-size:1rem}.messagelist tr.deleted td.subject span.msgicon.status:after{display:none !important}.messagelist span.attachment span{color:rgba(123,123,119,0.75)}.messagelist span.attachment span:before{margin:0;content:"\f0c6"}.messagelist span.attachment span.report:before{content:"\f15c";font-weight:400}.messagelist span.attachment span.encrypted:before{content:"\f023"}.messagelist span.attachment span.vcard:before{content:"\f007";font-weight:400}.messagelist span.flagged:before{content:"\f024"}.messagelist tr.flaggedroot:not(:hover) span.unflagged:before{content:"\f024";color:rgba(123,123,119,0.75)}.messagelist tr:hover span.unflagged:before{content:"\f024";font-weight:400}.messagelist span.size{display:none}.messagelist tr:hover span.date{display:none}.messagelist tr:hover span.size{display:inline}.messagelist.sort-size span.date{display:none}.messagelist.sort-size span.size{display:inline}.messagelist.sort-size tr:hover span.date{display:inline}.messagelist.sort-size tr:hover span.size{display:none}html.layout-phone .messagelist tr,html.touch .messagelist tr{position:relative;display:flex}html.layout-phone .messagelist td.selection,html.touch .messagelist td.selection,html.layout-phone .messagelist td.threads,html.touch .messagelist td.threads{line-height:3.8em}html.layout-phone .messagelist td.flags,html.touch .messagelist td.flags{position:absolute;top:.25rem;right:0;bottom:0;background-color:transparent}html.layout-phone .messagelist td.flags .flag,html.touch .messagelist td.flags .flag{visibility:hidden}html.layout-phone .messagelist td.subject,html.touch .messagelist td.subject{padding-right:.5em}html.layout-phone .messagelist td.subject .subject,html.touch .messagelist td.subject .subject{padding-right:1.5rem}.contactlist .contact.readonly td{font-style:italic}.contactlist td.contact:before{content:"\f007"}.contactlist td.contactgroup:before{content:"\f0c0"}.contactlist span.email{display:inline;color:#7b7b77;font-style:italic;margin-left:.5em}.contactlist li a:before{margin-right:.5rem}.contactlist li a.addressbook::before{content:"\f2b9";font-weight:400}.contactlist li a.contactgroup::before{content:"\f0c0";font-weight:900}.attachmentslist{padding:0;margin:0;background-color:#fcfcfc;border:1px solid #f4f4f4}.attachmentslist:empty{padding:0;border:0}.attachmentslist li{list-style:none;display:inline-flex;white-space:nowrap;line-height:2rem;padding:0 .25em;max-width:100%}.attachmentslist li:before{content:"\f15b";font-weight:400;height:2rem;margin:0}.attachmentslist li.txt:before,.attachmentslist li.text:before{content:"\f15c";font-weight:400}.attachmentslist li.pdf:before{content:"\f1c1";font-weight:400}.attachmentslist li.odt:before,.attachmentslist li.doc:before,.attachmentslist li.docx:before,.attachmentslist li.msword:before{content:"\f1c2";font-weight:400}.attachmentslist li.ods:before,.attachmentslist li.xls:before,.attachmentslist li.xlsx:before,.attachmentslist li.msexcel:before{content:"\f1c3";font-weight:400}.attachmentslist li.rar:before,.attachmentslist li.zip:before,.attachmentslist li.gz:before{content:"\f1c6";font-weight:400}.attachmentslist li.image:before,.attachmentslist li.jpg:before,.attachmentslist li.jpeg:before,.attachmentslist li.png:before{content:"\f1c5";font-weight:400}.attachmentslist li.mp3:before,.attachmentslist li.audio:before{content:"\f1c7";font-weight:400}.attachmentslist li.m4p:before,.attachmentslist li.video:before{content:"\f1c8";font-weight:400}.attachmentslist li.vcard:before{content:"\f2bb";font-weight:400}.attachmentslist li.html:before{content:"\f1c9";font-weight:400}.attachmentslist li.odp:before,.attachmentslist li.otp:before,.attachmentslist li.ppt:before,.attachmentslist li.pptx:before,.attachmentslist li.ppsx:before,.attachmentslist li.vnd.mspowerpoint:before{content:"\f1c4";font-weight:400}.attachmentslist li a{text-decoration:none;line-height:2rem;height:2rem}.attachmentslist li a.cancelupload:before,.attachmentslist li a.delete:before{content:"\f2ed";line-height:2rem;height:2rem;margin:0}.attachmentslist li a.dropdown:before{margin:0}.attachmentslist li.uploading:before{-webkit-animation:spinner-border 1.5s infinite linear;animation:spinner-border 1.5s infinite linear;content:"\f1ce";font-weight:900}.attachmentslist li a.filename{display:flex;overflow:hidden;padding:0 .2em}.attachmentslist li .attachment-name{overflow:hidden;text-overflow:ellipsis;color:#4f4f4f}.attachmentslist li .attachment-size{color:#7b7b77;padding-left:.25em}.keylist{padding:0;list-style:none}.keylist li{line-height:2}.keylist li:before{content:"\f084";line-height:1.5}#identities-table td.mail:before{content:"\f2c2"}#responses-table td.name:before{content:"\f075"}#filterslist td.name:before{content:"\f0b0"}#filtersetslist td.name:before{content:"\f15c"}#subscription-table li.mailbox a{padding-right:2.5rem}#uploadform{display:none}form.smart-upload,input.smart-upload{visibility:hidden;width:1px;height:1px;opacity:0}.propform:not(.popupmenu){width:100%}.propform .form-check td:not(.title)>label{display:block;margin:0;line-height:2rem}.propform .form-check td:not(.title)>label label{margin-right:.5rem}.propform td.datetime{display:flex}.propform td.datetime input:first-child{margin-right:.5rem}.propform td.datetime input:last-child{width:75%}.propform td.rowbuttons{width:1%;white-space:nowrap;vertical-align:top}.propform td.rowbuttons span{display:none}.propform td.rowbuttons a{padding:0;line-height:2.3rem;height:2.3rem;font-size:1rem}.propform td.rowbuttons a:before{content:"\f067";vertical-align:unset}@media screen and (min-width:577px){.propform td.rowbuttons a:before{margin:0 !important}}.propform td.rowbuttons a.delete:before{content:"\f2ed"}.propform td.rowbuttons a.advanced:before{content:"\f013"}.propform td.rowbuttons a:not(:last-child){margin-right:.25rem}.propform td.rowactions{width:1%;vertical-align:top}.propform td.rowactions .form-control{width:auto}.propform td.rowtargets{vertical-align:top}.propform td.rowtargets .composite input,.propform td.rowtargets .composite textarea,.propform td.rowtargets .composite select,.propform td.rowtargets .composite .multi-input,.propform td.rowtargets .composite .input-group{margin-bottom:.5rem}.propform td.rowtargets .composite .input-group input,.propform td.rowtargets .composite .input-group textarea,.propform td.rowtargets .composite .input-group select,.propform td.rowtargets .composite .input-group .multi-input{margin-bottom:0}.propform td.rowtargets .composite br{display:block}.propform td.rowtargets .input-group{margin-bottom:.25rem}.propform td.rowtargets .input-group *:first-child.input-group-prepend{text-align:left;min-width:7.5em}.propform td.rowtargets .input-group *:first-child.input-group-prepend>*{width:100%}.propform td.rowtargets>.advanced{margin-top:.25rem}.propform td.title{padding-top:0;padding-bottom:0}.propform td>.flexbox{display:flex}.propform td>.flexbox>.multi-input{width:100%;margin-left:.25rem}.propform.grouped.readonly legend{margin:0}.propform.grouped.readonly .row.input-group{margin-bottom:0 !important}.propform.grouped.readonly label{min-width:7rem;background-color:transparent;border:0;border-radius:0}.propform.grouped .row.input-group{margin-bottom:.5rem;flex-wrap:nowrap}.propform.grouped .row.input-group>*:first-child{overflow:hidden;text-overflow:ellipsis;min-width:8rem}.propform.grouped .row.input-group>*:first-child:not(select){padding:0}@media screen and (max-width:480px){.propform.grouped .row.input-group>*:first-child{min-width:6rem;width:6rem;flex-grow:unset}}.propform.grouped .row.input-group>*:first-child label{width:100%}.propform.grouped .row.input-group>*:nth-child(2){flex-grow:30}.propform.grouped .row.input-group:last-child{margin-bottom:1rem}.propform.grouped .row.input-group select{text-align:left}.propform.grouped .row.input-group.composite select{height:auto}.propform.grouped .row.input-group .content{padding:0;display:flex;flex-wrap:wrap;border-radius:0;border-left-color:transparent}.propform.grouped .row.input-group .content input{border-radius:0;border-color:transparent}.propform.grouped .row.input-group .content .ff_street{width:100%}.propform.grouped .row.input-group .content .ff_locality{width:75%}.propform.grouped .row.input-group .content .ff_zipcode{width:25%}.propform.grouped .row.input-group .content .ff_country,.propform.grouped .row.input-group .content .ff_region{width:50%}.propform.grouped .form-control-plaintext{flex-grow:1;border:0}.propform .addfield{margin:0}.propform .addfield select{width:8rem;margin-top:.5rem}.propform .form-text{font-size:90%;color:#7b7b77}.propform.row.form-group{margin-left:0;margin-right:0}.propform.row.form-group label,.propform.row.form-group div{padding-left:0;padding-right:0}.propform select+select,.propform select+.input-group{padding-top:.5rem}.propform.text-only{margin-bottom:.25rem}.propform.text-only tr{margin:0}.propform.text-only label{padding-bottom:0 !important}@media screen and (max-width:576px){.propform.text-only tr{display:table-row}.propform.text-only td{width:auto}.propform.text-only td:first-child{width:33%}.propform.text-only :not(tr).form-group.row .col-form-label{width:33%}.propform.text-only :not(tr).form-group.row>:last-child{width:67%}}@media screen and (max-width:576px){.propform table.compact-table .rowactions>select,.propform table.compact-table .flexbox>select{width:100%}.propform table.compact-table tr{display:flex;flex-direction:column}.propform table.compact-table tr td{width:100%;padding:.25rem 0 0 0}.propform table.compact-table tr td.rowbuttons{text-align:right;padding-top:0}.propform table.compact-table tr td.rowbuttons a{margin-left:.5rem}.propform table.compact-table tr td.rowbuttons a>span{display:inline}}.propform fieldset:not(.tab-pane):nth-of-type(n+2),.formcontent fieldset:not(.tab-pane):nth-of-type(n+2){margin-top:1em}.propform legend,.formcontent legend{font-weight:bold;font-size:1.2em}.propform label,.formcontent label{-webkit-hyphens:auto;-ms-hyphens:auto;hyphens:auto;overflow:hidden;margin-bottom:0}fieldset.advanced>legend{width:auto;cursor:pointer}fieldset.advanced>legend:after{float:right;margin:0 0 0 .25rem;line-height:inherit;font-size:inherit;content:"\f106"}fieldset.advanced>legend.closed:after{content:"\f107"}@media screen and (max-width:576px){.formcontent .text-only .form-group:not(tr){margin-bottom:.25rem}.formcontent .text-only .form-group:not(tr) .col-form-label{width:33%}.formcontent .text-only .form-group:not(tr) .col-form-label+span{width:67%}html.iframe .formcontent>.propform{padding:.25rem}}html.ms .propform .row:not(.form-check)>td{display:flex;flex-wrap:wrap}@media screen and (min-width:576px){html.ms .propform .row.form-check>td{display:flex}}.formcontainer{display:flex;flex-direction:column;justify-content:flex-start;overflow-y:hidden !important}.formcontainer .formcontent{overflow-x:hidden;overflow-y:auto}.formcontainer .formbuttons{padding:.5rem 1rem}.formcontainer .formbuttons button{margin-right:.5rem}html.iframe.ipad .formcontainer .formbuttons,html.iframe.webkit.tablet .formcontainer .formbuttons{min-height:4rem}html.layout-small .formcontainer,html.layout-phone .formcontainer{display:initial;overflow-y:auto !important}html.layout-small .formcontainer .formcontent,html.layout-phone .formcontainer .formcontent{overflow:initial !important}html.layout-small .formcontainer .formbuttons,html.layout-phone .formcontainer .formbuttons{display:none}.formcontent:not(.popupmenu){padding:1rem}.formcontent .row{margin-right:0;margin-left:0}.formcontent .row .col,.formcontent .row .col-2,.formcontent .row .col-4,.formcontent .row .col-6,.formcontent .row .col-8,.formcontent .row .col-10,.formcontent .row .col-12,.formcontent .row .col-sm,.formcontent .row .col-sm-2,.formcontent .row .col-sm-4,.formcontent .row .col-sm-6,.formcontent .row .col-sm-8,.formcontent .row .col-sm-10,.formcontent .row .col-sm-12{padding:0}.formcontent .row .form-control-plaintext,.formcontent .row label.col-form-label{padding:5px 5px 5px 0}.formcontent .row .form-control-plaintext{padding-bottom:0;border:0}@media screen and (max-width:576px){.formcontent .row.form-group>td label{padding-bottom:0}}.formcontent .row.form-check{padding:0;display:flex;flex-wrap:nowrap}@media screen and (max-width:576px){.formcontent .row.form-check .col-6{max-width:100%;flex:auto}.formcontent .row.form-check>*:last-child{width:1%;min-width:2.6rem}.formcontent .row.form-check.with-link>*:last-child{min-width:8rem}}.formcontent .row.form-check .form-check-input{margin:.5rem 0}.formcontent .row.form-check .custom-switch+a{line-height:2;vertical-align:bottom}.formcontent .row.form-check td>label{padding-bottom:0}.formcontent .nav-tabs{margin-bottom:1rem}.formcontent .nav-tabs:empty{display:none}.formcontent .hint{font-style:italic;color:#7b7b77}.formcontent.raweditor{height:100%}.formcontent.raweditor form{height:100%}.formcontent.raweditor textarea{font-family:monospace;height:100%}.formcontent.raweditor .CodeMirror{border:1px solid #ced4da;border-radius:.3rem;height:100%;color:#4f4f4f}.formcontent.raweditor .CodeMirror-focused{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.formcontent.raweditor .CodeMirror-linebackground.line-error{background-color:#ff5552;opacity:.4}.formcontent.raweditor .errorGutter{width:.8em}@media screen and (max-width:320px){.formcontent .col-form-label{flex:auto;max-width:100%}.formcontent .col-6,.formcontent .col-8,.formcontent .col-10{flex:auto;max-width:100%}}.input-group .icon{text-decoration:none;padding:5px .5rem}.input-group .icon.input-group-text{min-width:2.4rem}.input-group .icon:before{margin:0 !important;line-height:1;font-size:1.1rem}.input-group .icon.user:before{content:"\f007"}.input-group .icon.pass:before{content:"\f023"}.input-group .icon.host:before{content:"\f015"}.input-group .icon.language:before{content:"\f0ac"}.input-group .icon.cancel:before{content:"\f00d"}.input-group .icon.delete:before{content:"\f2ed"}.input-group .icon.edit:before{content:"\f303"}.input-group .icon.add:before{content:"\f067"}.input-group .icon.add.recipient:before{content:"\f0c0"}.input-group .icon.search:before{content:"\f002"}.input-group .icon.filter:before{content:"\f0b0"}.input-group .icon.key:before{content:"\f084"}.input-group .icon .inner{display:none}.input-group a:focus{background-color:rgba(244,194,0,0.25);outline:0}.proplist{margin-bottom:0;padding:0}.proplist li{list-style-type:none;line-height:2rem;margin-bottom:.25rem;display:flex;align-items:center}.proplist li:last-child{margin-bottom:0}.proplist li inputtype=radio{margin-right:.5em}.proplist li inputtype=radio:disabled+label{opacity:.5}.proplist li label:not(.input-group-text){margin:0;line-height:2rem}.proplist li select{width:auto;display:inline}.checklist>div{line-height:2rem;display:block}.checklist .custom-control-label:before,.checklist .custom-control-label:after{margin:calc(2px * -1) 0 0 0}.checklist>div+br{display:none}.popup form.propform{padding:.25rem;overflow-x:hidden}.popupmenu.form.nolist{padding:0 .5rem}.popupmenu.form ul{list-style-type:none;padding:0;margin:0}.popupmenu.form li:not(.separator){padding:0 1rem}.popupmenu.form li:not(.separator) label{margin:0;line-height:35px}.popupmenu.form li:not(.separator) label input{margin-right:.5rem}.popupmenu.form input{vertical-align:middle}.popupmenu.form select{margin:.5rem 0}.popupmenu.form .buttons{text-align:center;padding:.5rem}.multi-input>.content{max-height:11.65em;overflow:hidden;overflow-y:auto;border-radius:.25rem;border:1px solid #ced4da}.multi-input>.content.focused{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.multi-input a.icon.reset:before{content:"\f2ed"}.multi-input input.form-control{padding-left:.75rem;height:auto}.multi-input input,.multi-input input:focus,.multi-input .input-group-text{border-radius:0;border:0;border-bottom:1px solid #ced4da;box-shadow:none}.multi-input .input-group-text{border-left:1px solid #ced4da}.multi-input .input-group-append{margin-left:0}.multi-input .input-group{margin:0 !important;flex-wrap:nowrap}.multi-input .input-group:last-child *{border-bottom:0}.multi-input+.btn{margin-top:.5rem}.multi-input.is-invalid>.content{border:1px solid #ff5552}.multi-input.is-invalid>.content.focused{border-color:#ff5552;box-shadow:0 0 0 .2rem rgba(255,85,82,0.25)}.multi-input.is-invalid>.invalid-feedback{display:inline-block;line-height:1.5}.file-upload{padding:1rem 1rem 12rem;margin:0 1rem .25rem 1rem;border-radius:.5rem;border:.2rem dashed #d4dbde}fieldset .file-upload{margin:0}.file-upload .upload-form{text-align:center;padding-bottom:1em}.file-upload .upload-form a.btn,.file-upload .upload-form button{margin-bottom:.25rem}.file-upload .hint{margin-bottom:.5rem;color:#7b7b77;text-align:center}.file-upload .attachmentslist{border:0;background:transparent}.file-upload .attachmentslist li{position:relative;display:flex;padding-right:1.5em;margin:.15em 0}.file-upload .attachmentslist li a.filename{flex:1}.file-upload .attachmentslist li a.delete,.file-upload .attachmentslist li a.cancelupload{position:absolute;right:.25em;width:auto}.file-upload .attachmentslist li a.dropdown{margin-right:.5em}.file-upload .attachmentslist li .inner{display:none}.file-upload.droptarget{padding-bottom:.5rem !important}.file-upload.droptarget:after{content:url("data:image/svg+xml;charset=utf-8,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%20960%20560%22%3E%0A%3Cpath%20fill%3D%22%23d4dbde%22%20d%3D%22M690%20245c0%209.2-3.5%2017.9-10.1%2024.9l-175%20175c-6.6%206.6-15.3%2010.1-24.9%2010.1-9.2%200-18.4-3.5-24.9-10.1l-175-175c-6.6-7-10.1-15.8-10.1-24.9%200-4.4.9-9.2%202.6-13.6C277.9%20218.3%20291%20210%20305%20210h87.5V35c0-19.2%2015.8-35%2035-35h105c19.2%200%2035%2015.8%2035%2035v175H655c14%200%2027.1%208.3%2032.4%2021.4%201.7%204.4%202.6%209.2%202.6%2013.6zm0%20245H270V350h-70v140c0%2038.5%2031.5%2070%2070%2070h420c38.5%200%2070-31.5%2070-70V350h-70v140z%22%2F%3E%0A%3C%2Fsvg%3E%0A");width:10rem;margin:5rem auto 0 auto;display:block}.file-upload.droptarget.active{border-color:#cec3b5}.file-upload.droptarget.hover{border-color:#cec3b5;background-color:#f7f5f2}.recipient-input{display:flex;flex-wrap:wrap;padding:0 .75rem 4px .75rem;list-style-type:none;cursor:text;height:auto}.recipient-input.focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.recipient-input .recipient{display:flex;position:relative;max-width:calc(50% - 3px);border:1px solid #ced4da;background-color:#f8f7f4;border-radius:.25em;padding:0 .25em;margin-top:4px;margin-right:.2em;white-space:nowrap;cursor:default}@media screen and (max-width:450px){.recipient-input .recipient{width:100%;max-width:100%}}.recipient-input .name{overflow:hidden;text-overflow:ellipsis;flex-grow:1;line-height:1.1;padding:3px;vertical-align:middle}.recipient-input .email{text-indent:-5000rem;display:inline-block;width:0}.recipient-input .quotes{position:absolute;width:0;opacity:0}.recipient-input a.button.icon{font-size:.75em;cursor:pointer;padding:0;color:#4f4f4f}.recipient-input a.button.icon:before{display:inline-block;width:1em;line-height:1.6}.recipient-input li{max-width:100%}.recipient-input li:not(.recipient){user-select:text}.recipient-input li.input{flex:1;min-width:100px}.recipient-input input{width:100%;background:transparent !important;border:0 !important;margin-top:4px;outline:0;line-height:1.5}.recipient-input input::-ms-clear{display:none}.tagedit-list{display:flex;flex-wrap:wrap;padding:0 .75rem 4px .75rem;margin:0;list-style-type:none;min-height:2.3rem}.tagedit-list+.placeholder{display:none}.tagedit-listtabindex="-1"{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.tagedit-list li.tagedit-listelement-new{margin-top:4px}.tagedit-list li.tagedit-listelement-new input{width:15px;background:transparent !important;border:0;outline:0;margin:0;padding:0;line-height:1.5}.tagedit-list li.tagedit-listelement-new input.tagedit-input-disabled{visibility:hidden}.tagedit-list li.tagedit-listelement-old{max-width:50%;border:1px solid #ced4da;background-color:#f8f7f4;border-radius:.25em;margin-top:4px;margin-right:.2em;white-space:nowrap}.tagedit-list li.tagedit-listelement-old a{font-size:.8em;cursor:pointer;display:inline-block;width:1.1em;overflow:hidden;vertical-align:middle;margin-right:.2rem}.tagedit-list li.tagedit-listelement-old a:before{content:"\f00d";width:1em;line-height:1.2}.tagedit-list li.tagedit-listelement-old span{overflow:hidden;text-overflow:ellipsis;flex-grow:1;display:inline-block;line-height:1.4;padding:0 .25rem;vertical-align:middle}.skinselection{white-space:nowrap;display:table-row}.skinselection>span{display:table-cell;vertical-align:middle;padding:.1em .5em;white-space:normal}.skinselection>span:last-child{padding-right:0}.skinselection .skinitem input{width:auto}.skinselection .skinname{font-weight:bold}.skinselection .skinlicense,.skinselection .skinlicense a{font-style:italic;text-decoration:none}.skinselection .skinlicense a:hover{text-decoration:underline}.skinselection .skinlicense,.skinselection .skinauthor{font-size:90%}.skinselection .skinthumbnail{width:64px;height:64px;border:1px solid #ced4da;background:#fff;border-radius:4px}.input-percent-slider{display:flex;align-items:center}.input-percent-slider input{max-width:4em}.input-percent-slider span.label{line-height:2.4;padding:0 .5rem 0 .25rem}.input-percent-slider div.ui-slider{flex:1;margin:0 .5em}.image-upload{position:relative;overflow:hidden;cursor:pointer;background-color:#f4f4f4}.image-upload a.button{display:none;position:absolute;left:0;top:0;background-color:rgba(255,255,255,0.85);border-radius:5px;width:2.5em;padding:.5em;margin:.5em;line-height:1}.image-upload.changed a.button{display:inline}.input-group-combo select:first-of-type.alone{border-radius:.25rem !important}.input-group-combo select:first-of-type:not(.alone){flex:unset;width:auto}.input-group-combo .input-group{padding:0 !important;flex:2}.input-group-combo select+select,.input-group-combo .input-group :first-child{border-top-left-radius:0;border-bottom-left-radius:0}@-moz-document url-prefix(){select:-moz-focusring{color:transparent !important;text-shadow:0 0 0 #4f4f4f !important}}.form-control{color:#4f4f4f}.form-control:focus{color:#4f4f4f;border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.form-control.is-invalid{border-color:#ff5552;box-shadow:none}.form-control.is-invalid:focus{border-color:#ff5552;box-shadow:0 0 0 .2rem rgba(255,85,82,0.25)}.form-control::placeholder{color:#bbb}.form-control::-ms-input-placeholder,.form-control::-webkit-input-placeholder{color:#bbb}.invalid-feedback{color:#ff5552;font-size:90%}.form-group{margin-bottom:.5rem}.input-group-append.input-group-prepend{display:inline}.input-group-text{color:#4f4f4f;background-color:#f8f7f4}.input-group-text input:focus{z-index:1;border-color:#f4c200 !important}.custom-switch{padding-left:0;display:inline-block}.custom-switch .custom-control-input{left:0;opacity:0 !important}.custom-switch .custom-control-input:focus~.custom-control-label:before{box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.custom-switch .custom-control-input:focus:not(:checked)~.custom-control-label::before{border-color:#f4c200}.custom-switch .custom-control-input:checked~.custom-control-label::before{border-color:#f4c200;background-color:#f4c200}.custom-switch .custom-control-input:checked:disabled~.custom-control-label::before{border-color:#ffd842;background-color:#ffd842}.custom-switch .custom-control-label{padding-left:2.5rem;min-height:2rem;line-height:2;display:inline-block}html.touch .custom-switch .custom-control-label{padding-left:3rem}.custom-switch .custom-control-label:before,.custom-switch .custom-control-label:after{border-radius:.6rem;margin:2px 0}html.touch .custom-switch .custom-control-label:before,html.touch .custom-switch .custom-control-label:after{border-radius:.8rem;margin:0}.custom-switch .custom-control-label:before{left:2px;top:4px;width:26px;height:16px}html.touch .custom-switch .custom-control-label:before{top:2px;width:35px;height:22px}.custom-switch .custom-control-label:after{left:4px;top:6px;width:12px;height:12px}html.touch .custom-switch .custom-control-label:after{top:4px;height:18px;width:18px}.custom-switch .custom-control-input:checked~.custom-control-label::after{transform:translateX(10px)}html.touch .custom-switch .custom-control-input:checked~.custom-control-label::after{transform:translateX(13px)}.custom-switch .custom-control-input:not(:disabled)~.custom-control-label:after,.custom-switch .custom-control-input:not(:disabled)~.custom-control-label:before{cursor:pointer}.custom-file{display:block}.custom-file .custom-file-label{white-space:nowrap;overflow:hidden;text-overflow:ellipsis;padding-right:100px}.custom-file+.hint{margin-top:3px}.custom-file-input:focus~.custom-file-label{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}div.tox{font-size:1rem}div.tox,div.tox :not(.svg){font-family:Roboto,sans-serif}div.tox.tox-tinymce{border-radius:.25rem;border:1px solid #ced4da}div.tox.focused{border-color:#f4c200 !important;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25) !important}div.tox .tox-toolbar-overlord{z-index:1}div.tox .tox-toolbar-overlord>div{background:url("data:image/svg+xml;charset=utf8,%3Csvg height='33px' viewBox='0 0 40 33px' width='40' xmlns='http://www.w3.org/2000/svg'%3E%3Crect x='0' y='32px' width='100' height='1' fill='%23cccccc'/%3E%3C/svg%3E");background-color:#f8f7f4}div.tox .tox-toolbar__primary{border-top:0}div.tox .tox-toolbar{background-color:#f8f7f4}div.tox .tox-edit-area{border:0}div.tox .tox-dialog{border-radius:0;border-color:#d4dbde;box-shadow:none;align-self:unset !important}div.tox .tox-dialog .tox-form__group{margin-top:0;margin-bottom:.75rem}div.tox .tox-dialog .tox-dialog__body-nav-item--active{color:#f4c200;border-color:transparent}div.tox .tox-dialog .tox-dialog__body-nav-item--active:hover{color:#c19900}div.tox .tox-dialog__body-content{overflow:unset}div.tox .tox-dialog__content-js{overflow:auto}div.tox .tox-dialog-wrap__backdrop{background-color:rgba(79,79,79,0.5)}div.tox .tox-dialog__header{height:57px;border-bottom:1px solid #ddd;justify-content:flex-end;padding:0}div.tox .tox-dialog__header .tox-button{color:#4f4f4f;right:0;height:57.3px;width:2.25em;margin-right:.4rem}div.tox .tox-dialog__header .tox-button:hover{background:transparent;border-color:transparent}div.tox .tox-dialog__header .tox-button .tox-icon{display:none}div.tox .tox-dialog__header .tox-button:before{content:"\f00d";line-height:1.5rem;margin:0 !important}div.tox .tox-dialog__footer{height:57px !important;border:0;margin:0;padding:0 1rem}@media screen and (max-width:480px){div.tox .tox-dialog__footer{border-top:1px solid #ddd}}div.tox .tox-dialog__footer>div{white-space:nowrap;max-height:57px}div.tox .tox-dialog__footer>div button:first-child{margin:0}div.tox .tox-dialog__footer .tox-button{color:#fff;background:#f4c200;border-color:#f4c200;font-weight:normal;padding:.5rem .75rem}div.tox .tox-dialog__footer .tox-button:focus{background:#dbae00;border-color:#d0a600;box-shadow:0 0 0 .2rem rgba(244,194,0,0.5)}div.tox .tox-dialog__footer .tox-button:hover{background:#dbae00;border-color:#d0a600}div.tox .tox-dialog__footer .tox-button.disabled,div.tox .tox-dialog__footer .tox-button:disabled{background:#f4c200;border-color:#f4c200}div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled):active,div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled).active{background:#c19900;border-color:#b79100}div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled):active:focus,div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.53)}div.tox .tox-dialog__footer .tox-button:before{width:1em;content:"\f00c";line-height:1}div.tox .tox-dialog__footer .tox-button:focus:not(:disabled){background:#f4c200;border-color:#f4c200}div.tox .tox-dialog__footer .tox-button.tox-button--secondary{background:#8b9fa7;border-color:#8b9fa7;color:#fff}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:hover{background:#7c939c;border-color:#778e98}div.tox .tox-dialog__footer .tox-button.tox-button--secondary.disabled,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:disabled{background:#8b9fa7;border-color:#8b9fa7}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled):active,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled):active:focus,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:before{content:"\f00d"}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:focus:not(:disabled){background:#8b9fa7;border-color:#8b9fa7}div.tox .tox-search-dialog .tox-form__group:not(:first-child){flex:initial !important}div.tox .tox-search-dialog .tox-dialog__footer-start button{padding:.25rem}div.tox .tox-search-dialog .tox-dialog__footer-end button:before{content:"\f303" !important}div.tox .tox-search-dialog .tox-dialog__footer-end button:nth-of-type(1):before{content:"\f002" !important}div.tox .tox-dialog__title{line-height:calc(58px - 1px);font-size:1.25rem;font-weight:bold;padding:0 0 0 1rem;width:100%;color:#4f4f4f}div.tox .tox-tbtn{height:28px}div.tox .tox-tbtn:not(.tox-tbtn--select,.tox-split-button__chevron){width:32px}div.tox .tox-button{line-height:1.5}div.tox .tox-label{color:#4f4f4f;padding-bottom:.25rem}div.tox .tox-color-input>input,div.tox .tox-listboxfield .tox-listbox--select,div.tox .tox-textarea,div.tox .tox-textfield{font-family:Roboto,sans-serif !important;font-size:14px;line-height:1.5;color:#4f4f4f;border-radius:.25rem;min-height:0;padding:.375rem .75rem}div.tox .tox-color-input>input:focus,div.tox .tox-listboxfield .tox-listbox--select:focus,div.tox .tox-textarea:focus,div.tox .tox-textfield:focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}div.tox .tox-listbox__select-label{margin:0}div.tox .tox-color-input span{top:5px}div.tox .custom-switch{position:relative;font-size:1rem;margin-top:.15rem}div.tox .custom-switch .tox-checkbox__icons{display:none}div.tox .custom-switch .tox-checkbox__label{margin:0}div.tox .image-selector{font-size:1rem}div.tox .image-selector button{color:#fff;background:#8b9fa7;border-color:#8b9fa7;padding:.5rem .75rem;line-height:1.5}div.tox .image-selector button:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}div.tox .image-selector button:hover{background:#7c939c;border-color:#778e98}div.tox .image-selector button.disabled,div.tox .image-selector button:disabled{background:#8b9fa7;border-color:#8b9fa7}div.tox .image-selector button:not(:disabled):not(.disabled):active,div.tox .image-selector button:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}div.tox .image-selector button:not(:disabled):not(.disabled):active:focus,div.tox .image-selector button:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}div.tox .tox-form__controls-h-stack div:not(:last-child){flex:1}div.tox .tox-collection__item-label{white-space:nowrap}@media screen and (max-width:480px){div.tox .tox-dialog{margin:0 !important;width:100% !important;height:100%;left:0 !important;top:0 !important;border-width:0 !important}div.tox .tox-dialog__header{background-color:#f1eeea}div.tox .tox-dialog__header .tox-button{display:none}div.tox .tox-dialog__title{font-size:1rem;text-align:center;padding:0 1rem}div.tox .tox-dialog__footer{background-color:#f1eeea}div.tox .tox-dialog__footer .tox-button{color:#4f4f4f !important;background:transparent !important;padding:.45rem;margin:0 !important;border:0;font-size:90%}div.tox .tox-dialog__footer .tox-button:before{display:block;float:none;width:100%;margin:0;line-height:1.75;height:1.75rem}div.tox .tox-dialog__footer .tox-button:active,div.tox .tox-dialog__footer .tox-button:focus,div.tox .tox-dialog__footer .tox-button:hover{background:transparent;border:0;box-shadow:none;color:#4f4f4f}div.tox .tox-dialog__footer>div{justify-content:space-evenly;display:flex;width:100%}div.tox .tox-dialog__footer>div:empty{display:none}}.image-selector{padding:1rem .5rem 10rem .5rem !important}.image-selector.droptarget{border:.2rem dashed #d4dbde}.image-selector.droptarget:after{margin-top:2rem}.image-selector form{position:absolute;top:0}.image-selector .attachmentslist{margin:0;overflow-x:hidden;overflow-y:auto;height:19.1em;padding:0 !important}.image-selector .attachmentslist li{padding:.25rem;cursor:pointer}.image-selector .attachmentslist li:before{display:none}.image-selector .attachmentslist li:hover,.image-selector .attachmentslist li:focus{background:#fdf6d9}.image-selector .attachmentslist li span.name{flex:1;margin:auto;padding-left:1rem;overflow:hidden;text-overflow:ellipsis}.image-selector .attachmentslist li span.img{height:80px;width:80px;display:flex;border:1px solid #f8f7f4;background:white;border-radius:.75rem;overflow:hidden}.image-selector .attachmentslist li img{margin:auto}html.layout-phone .image-selector .attachmentslist{height:auto}.html-editor{position:relative;margin-bottom:.2rem}.html-editor .editor-toolbar{position:absolute;left:1px;top:1px;right:1px;border-radius:.25rem .25rem 0 0;border-bottom:1px solid #ced4da;background-color:#f8f7f4}.html-editor .editor-toolbar .mce-i-html{display:block;margin:2px 2px 2px 4px;width:34px;height:28px;border-radius:.25rem;color:#222f3e}.html-editor .editor-toolbar .mce-i-html:focus,.html-editor .editor-toolbar .mce-i-html:hover{text-decoration:none;border-color:#e2e4e7;background-color:#dee0e2}.html-editor .editor-toolbar .mce-i-html:before{content:"\f03e";margin:0;width:34px;line-height:28px}.html-editor.mailvelope .editor-toolbar,.html-editor .tox-tinymce+.editor-toolbar{display:none}.html-editor>.googie_edit_layer,.html-editor>textarea{font-family:monospace;font-size:13px;width:100% !important;padding-top:40px;resize:none}.html-editor>iframe{border-radius:.3rem;border:1px solid #ced4da;min-height:30em}.googie_window{width:16rem;height:auto}.googie_edit_layer{font-family:monospace;padding:.5rem .75rem;border:1px solid #ced4da;border-radius:.3rem;line-height:1.5}.googie_link{color:#ff5552;text-decoration:underline;cursor:pointer}.googie_list li{min-width:8rem;width:auto}.googie_list li.googie_list_onhover{color:#fff;background-color:#f4c200}.googie_list li .googie_list_revert:before{content:"\f0e2"}.googie_list li .googie_add_to_dict:before{content:"\f0fe"}.googie_list input{display:inline-block;margin:.25rem .5rem}.task-login #layout-content{text-align:center;width:100%;display:block}.task-login #logo{display:inline-block;position:relative;top:16vh;max-height:100px}#login-form{margin:0 auto;top:20vh;width:95%;max-width:320px;position:relative}#login-form table,#login-form tbody{display:block}#login-form .row{margin-right:0;margin-left:0}#login-form .oauthlogin{margin-top:1em;padding-top:1em}#login-form .formbuttons+.oauthlogin{border-top:1px solid #ccc}#rcmloginsubmit:before{display:none !important}#login-footer{flex:1;color:#7b7b77}#login-footer>div{margin-top:1rem;padding:1rem;background:#f8f7f4;border-radius:.3rem}#login-addon{position:absolute;bottom:0;max-height:30%;margin:1rem !important;width:auto !important;overflow:auto}@media screen and (min-width:769px){#login-addon{max-width:768px;margin:auto !important;bottom:1rem;left:0;right:0}}body.task-error-login #layout #layout-menu,body.task-error-login #layout #layout-content>.header{display:none}#contactpic{width:112px;height:135px;border-radius:.5rem;overflow:hidden;display:table-cell;vertical-align:middle;text-align:center;background-color:#f4f4f4}#contactpic img{max-width:112px;max-height:135px}#contacthead .names{margin-bottom:.5rem}#contacthead .names span.namefield{font-size:1.5rem;font-weight:bold;line-height:1.2}#contacthead.readonly .source.row{color:#7b7b77;font-size:90%;margin-bottom:.25rem}#message-header{margin-bottom:1rem}#message-header>.subject{font-size:1.5rem;font-weight:bold}body.status-flagged #message-header>.subject:before{display:inline;float:none;content:"\f024";font-size:1em;color:#ff5552}#message-header>.subject a.extwin{text-decoration:none}#message-header>.subject a.extwin:before{float:none;display:inline-block;font-size:75%;line-height:1.5;margin:0;content:"\f360"}#message-header>.subject span.inner{display:none}#message-header>.header{display:flex}#message-header>.header img.contactphoto{margin:0 1rem 0 0;border-radius:50%;width:4rem;height:4rem;object-fit:cover;background:#f4f4f4}#message-header .header-content{min-height:4rem;flex:1}#message-header .header-content.details-view .header-summary{display:none}#message-header .header-content.details-view .header-headers{display:initial}#message-header .header-summary{margin-top:.25rem}#message-header .header-summary>span{display:inline-block}#message-header .header-headers{display:none}#message-header .header-headers .header-title{white-space:nowrap;color:#7b7b77;font-weight:bold;padding-right:1rem;vertical-align:top}#message-header .header-links{margin-top:.25rem}#message-header .header-links a{font-size:90%;margin-right:.5rem;text-decoration:none;white-space:nowrap;display:inline-block}#message-header .header-links a:before{height:1.5rem;line-height:1.3}#message-header .header-links a.headers-details:before{content:"\f0e0"}#message-header .header-links a.headers-summary:before{content:"\f0e0";font-weight:400}#message-header .header-links a.headers-all:before{content:"\f05a"}#message-header .header-links a.html:before{content:"\f03e"}#message-header .header-links a.plain:before{content:"\f039"}#message-header .header-links a.zipdownload:before{content:"\f019"}.message-partheaders{padding:.25rem .5rem;margin:.5rem 0 -0.5rem 0;border-top:1px solid #f4f4f4;background-color:#fcfcfc}.message-partheaders table.headers-table{font-size:90%;color:#7b7b77}.message-partheaders table.headers-table .header-title{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:8em;font-weight:bold;padding-right:1rem;vertical-align:top}.message-partheaders table.headers-table .subject{font-weight:bold}.message-partheaders table.headers-table+.message-part,.message-partheaders table.headers-table+.message-htmlpart{border-top:0;margin:0}#message-content .attachmentslist:not(:empty){margin-bottom:1rem}#messagebody.mailvelope iframe{min-height:75vh}.message-part,.message-htmlpart{padding-top:.5rem;position:relative}.message-part:not(:first-child),.message-htmlpart:not(:first-child){border-top:1px solid #f4f4f4;margin-top:.5rem}.message-part:last-child,.message-htmlpart:last-child{margin-bottom:.5rem}.message-part div.rcmBody,.message-htmlpart div.rcmBody{margin:0 auto !important}.message-part blockquote,.message-htmlpart blockquote{overflow:hidden;text-overflow:ellipsis;color:#5b4800;border-left:2px solid #5b4800;border-right:2px solid #5b4800;background-color:rgba(248,247,244,0.5);margin:2px 0;padding:0 .4em}.message-part blockquote blockquote,.message-htmlpart blockquote blockquote{color:#205a24;border-left:2px solid #205a24;border-right:2px solid #205a24}.message-part blockquote blockquote blockquote,.message-htmlpart blockquote blockquote blockquote{color:#eb0400;border-left:2px solid #eb0400;border-right:2px solid #eb0400}.message-part blockquote span.blockquote-link,.message-htmlpart blockquote span.blockquote-link{top:0;cursor:pointer;right:.5rem;min-width:4rem;padding:.2rem .25rem .2rem .5rem;font-size:90%;text-align:center;color:#7b7b77;background:#f8f7f4;border:1px solid #d4dbde;border-radius:.3rem;line-height:1;font-family:Roboto,sans-serif}.message-part blockquote span.blockquote-link:after,.message-htmlpart blockquote span.blockquote-link:after{content:"\f107";display:inline-block;float:none;margin:0;font-size:90%}.message-part blockquote span.blockquote-link.collapsed:after,.message-htmlpart blockquote span.blockquote-link.collapsed:after{content:"\f106"}.message-part blockquote.blockquote-header,.message-htmlpart blockquote.blockquote-header{text-overflow:ellipsis !important;padding-right:5rem !important}.message-part span.sig{color:#7b7b77}.message-part div.pre{font-family:monospace;font-size:13px}#compose-attachments{margin:1rem 1rem 0 1rem}#composestatusbar{opacity:.3;right:2.5rem}@media screen and (min-width:769px){#composestatusbar{display:none}}#composestatusbar a.button{display:inline-block}#composestatusbar a.button:before{line-height:58px;font-size:1.25rem !important}.settings-default-icon tr>td.section::before,.settings-default-icon li>a:before{content:"\f013"}html.dark-mode{scrollbar-color:#5b4800 #4d6066;scrollbar-width:thin}html.dark-mode textarea,html.dark-mode select,html.dark-mode .popover-body,html.dark-mode .popupmenu,html.dark-mode .ui-dialog-content,html.dark-mode .frame-content,html.dark-mode .formcontent,html.dark-mode .table-responsive,html.dark-mode .table-responsive-sm,html.dark-mode .scroller{scrollbar-width:thin}html.dark-mode:not(.touch) ::-webkit-scrollbar{width:6px}html.dark-mode:not(.touch) ::-webkit-scrollbar-track{background-color:#4d6066}html.dark-mode:not(.touch) ::-webkit-scrollbar-thumb{background-color:#5b4800}html.dark-mode body{color:#c5d1d3;background-color:#21292c}html.dark-mode #logo{opacity:.8}html.dark-mode #layout-list,html.dark-mode #layout-content,html.dark-mode #layout-sidebar,html.dark-mode #layout>div>.header,html.dark-mode #layout>div>.footer,html.dark-mode .popup .listbox .footer,html.dark-mode .menu.pagenav.pagenav-list,html.dark-mode .menu.pagenav.pagenav-list+.navlist,html.dark-mode .menu.pagenav.pagenav-list.expanded+.navlist{background-color:transparent;border-color:#4d6066}html.dark-mode #layout>div>.footer{font-weight:normal}html.dark-mode #layout>div>.header,html.dark-mode #layout>div>.footer{color:unset}html.dark-mode #layout>div>.header a.button,html.dark-mode #layout>div>.footer a.button{color:#c5d1d3}html.dark-mode #layout-menu{background:unset;border-right:1px solid #4d6066}html.dark-mode #layout-menu .popover-header,html.dark-mode #layout-menu .special-buttons{background:transparent !important}@media screen and (max-width:480px){html.dark-mode #layout-menu{border-left:0}html.dark-mode #layout-menu .popover-header{border-bottom:1px solid #4d6066}}html.dark-mode #layout-menu .special-buttons a:not(:focus){background:#21292c}html.dark-mode.layout-phone #layout-menu{background:#161b1d}html.dark-mode .searchbar{background-color:transparent;border-color:#4d6066}html.dark-mode .searchbar form:before,html.dark-mode .searchbar a,html.dark-mode .searchbar input{color:unset}html.dark-mode .searchbar a.selected{color:#41b849}html.dark-mode #messagestack div{color:#c5d1d3}html.dark-mode #messagestack div i.icon:before{color:#c5d1d3}html.dark-mode .ui.alert.boxinformation,html.dark-mode #messagestack .alert-info{background-color:#927400}html.dark-mode .ui.alert.boxerror,html.dark-mode #messagestack .alert-danger{background-color:#993331}html.dark-mode .ui.alert.boxwarning,html.dark-mode #messagestack .alert-warning{background-color:#997f31}html.dark-mode .ui.alert.boxconfirmation,html.dark-mode #messagestack .alert-success{background-color:#276e2c}html.dark-mode #messagestack .loading{background-color:#374449}html.dark-mode .ui.alert.boxinformation,html.dark-mode .ui.alert.boxerror,html.dark-mode .ui.alert.boxwarning,html.dark-mode .ui.alert.boxconfirmation{color:#c5d1d3}html.dark-mode .ui.alert.boxinformation i.icon:before,html.dark-mode .ui.alert.boxerror i.icon:before,html.dark-mode .ui.alert.boxwarning i.icon:before,html.dark-mode .ui.alert.boxconfirmation i.icon:before{color:#c5d1d3}html.dark-mode .ui.alert a:not(.btn){color:#c5d1d3;text-decoration:underline}html.dark-mode .iframe-loader{background-color:rgba(33,41,44,0.9)}html.dark-mode .iframe-loader .spinner-border{color:#7d989c;border-color:currentColor #425457 currentColor currentColor}html.dark-mode #taskmenu a,html.dark-mode .menu.toolbar a{color:#c5d1d3}html.dark-mode #taskmenu a.selected,html.dark-mode .menu.toolbar a.selected{background-color:#374549}html.dark-mode pre,html.dark-mode .popover .menu li aaria-haspopup::after,html.dark-mode .menu.pagenav .pagenav-text,html.dark-mode .menu.pagenav a{color:unset}html.dark-mode #taskmenu .action-buttons a{color:#f4c200}@media screen and (max-width:480px){html.dark-mode #taskmenu a{border-color:#2c373a !important}html.dark-mode #taskmenu a.selected{background:transparent}}@media screen and (min-width:481px) and (max-width:1024px){html.dark-mode #taskmenu a{width:41px}}@media screen and (min-width:1025px){html.dark-mode #taskmenu a{width:77px}}html.dark-mode.layout-small .popover,html.dark-mode.layout-phone .popover{border-left:1px solid #4d6066}html.dark-mode.layout-small .popover .menu .dropbutton a.dropdown,html.dark-mode.layout-phone .popover .menu .dropbutton a.dropdown{background:transparent}html.dark-mode.layout-small .popover:not(.select-menu) .listing li:last-child,html.dark-mode.layout-phone .popover:not(.select-menu) .listing li:last-child{border-color:#2c373a}html.dark-mode.layout-small .popover-header,html.dark-mode.layout-phone .popover-header{background:#161b1d;border-bottom:1px solid #4d6066;color:unset}html.dark-mode.layout-small .popover-overlay,html.dark-mode.layout-phone .popover-overlay{background:rgba(0,0,0,0.7)}html.dark-mode #taskmenu a:hover,html.dark-mode .popupmenu .listing li>a:not(.disabled):hover,html.dark-mode .header a.button.icon:not(.disabled):focus,html.dark-mode .header a.button.icon:not(.disabled):hover,html.dark-mode .menu.toolbar .dropbutton:not(.disabled):hover,html.dark-mode .menu a:not(.disabled):focus,html.dark-mode .menu a:not(.disabled):hover{background-color:#374549}html.dark-mode .menu.toolbar a.selected{color:#41b849;background:transparent}html.dark-mode .menu.toolbar .dropbutton a.dropdown:hover{background-color:#425358}html.dark-mode .listing tbody td,html.dark-mode .listing tbody td a,html.dark-mode .listing li a{color:#c5d1d3}html.dark-mode .listing li ul,html.dark-mode .listing tbody td,html.dark-mode .listing li{border-color:#2c373a}html.dark-mode .listing li.selected,html.dark-mode .listing li.selected>a,html.dark-mode .listing li.selected>div>a,html.dark-mode .listing tr.selected td{color:#f4c200;background-color:#374549}html.dark-mode .listing li.selected ul{background-color:#21292c}html.dark-mode .listing li.selected ul div.treetoggle{color:#c5d1d3}html.dark-mode .listing li.disabled,html.dark-mode .listing tr.disabled td{color:#637e82}html.dark-mode .listing li.droptarget>a,html.dark-mode .listing tr.droptarget>td{background-color:#4d4d00}html.dark-mode .messagelist{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.size,html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.date,html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.fromto{color:#8ba3a7}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.msgicon.status{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.msgicon.status.unread::before{color:#b88a00}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) span.flag{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted).selected td.subject a,html.dark-mode .messagelist tr:not(.flagged):not(.deleted).selected td.subject span.msgicon.status{color:#f4c200}html.dark-mode .messagelist tr.flagged:not(.deleted) td,html.dark-mode .messagelist tr.flagged:not(.deleted) span.attachment span{color:#ff5552}html.dark-mode .messagelist tr.deleted td span.flag,html.dark-mode .messagelist tr.deleted td span.attachment span,html.dark-mode .messagelist tr.deleted td.subject span.msgicon.status,html.dark-mode .messagelist tr.deleted td.subject span.msgicon.status.unread:before,html.dark-mode .messagelist tr.deleted td.subject span.subject a,html.dark-mode .messagelist tr.deleted td.subject span.date,html.dark-mode .messagelist tr.deleted td.subject span.fromto{color:#637e82}html.dark-mode .messagelist span.attachment span{color:#8ba3a7}html.dark-mode .folderlist li.mailbox .unreadcount{background-color:#4d6066;color:#e2e8e9;font-weight:normal}html.dark-mode .attachmentslist{background-color:#374549;border:0}html.dark-mode .attachmentslist a{color:#c5d1d3}html.dark-mode .attachmentslist li .attachment-name{color:#c5d1d3}html.dark-mode .attachmentslist li .attachment-size{color:#8ba3a7}html.dark-mode .btn{color:#c5d1d3}html.dark-mode .btn:focus,html.dark-mode .btn:hover{color:#e2e8e9}html.dark-mode .btn:disabled{opacity:.5 !important}html.dark-mode .btn-primary{background-color:#5b4800;color:#e2e8e9}html.dark-mode .btn-primary:hover:not(:disabled){background-color:#755d00}html.dark-mode .btn-secondary{background-color:#4d6066;color:#e2e8e9}html.dark-mode .btn-secondary:hover:not(:disabled){background-color:#586e75}html.dark-mode .btn-danger{background-color:#993331;color:#e2e8e9}html.dark-mode .btn-danger:hover:not(:disabled){background-color:#ac3937}html.dark-mode .floating-action-buttons a.button{box-shadow:none;background:#5b4800}html.dark-mode .custom-file-label,html.dark-mode .form-control{background-color:#21292c;color:#c5d1d3}html.dark-mode .custom-file-label:not(.is-invalid),html.dark-mode .form-control:not(.is-invalid){border-color:#7c949c}html.dark-mode .custom-file-label:focus,html.dark-mode .form-control:focus{background-color:#2c373b}html.dark-mode .custom-file-label:focus:not(.is-invalid),html.dark-mode .form-control:focus:not(.is-invalid){color:#e2e7e9 !important;border-color:#f4c200}html.dark-mode .custom-file-label::after{color:#c5d1d3;background-color:#374549}html.dark-mode .custom-select{background:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23c5d1d3' viewBox='0 0 4 5'%3e%3cpath d='M2 0L0 2h4zm0 5L0 3h4z'/%3e%3c/svg%3e") no-repeat right .75rem center / 8px 10px}html.dark-mode .custom-switch .custom-control-label::before{background-color:#4d6066}html.dark-mode .custom-switch .custom-control-label::after{background-color:#c5d1d3}html.dark-mode .custom-switch .custom-control-input:disabled~.custom-control-label{opacity:.4}html.dark-mode .custom-switch .custom-control-input:checked~.custom-control-label::before{background-color:#5b4800}html.dark-mode .custom-switch .custom-control-input:checked~.custom-control-label::after{background-color:#c5d1d3}html.dark-mode input:disabled,html.dark-mode select:disabled{opacity:.5}html.dark-mode .multi-input:not(.is-invalid)>.content{border-color:#7c949c}html.dark-mode .multi-input:not(.is-invalid)>.content.focused{border-color:#f4c200}html.dark-mode .input-group-text{color:#c5d1d3;background-color:#374549;border-color:#7c949c}html.dark-mode .input-group a:focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25);z-index:1}html.dark-mode .form-control-plaintext{color:unset}html.dark-mode .recipient-input.focus{color:#e2e7e9;background-color:#2c373b;border-color:#f4c200}html.dark-mode .recipient-input a.button.icon,html.dark-mode .recipient-input input{color:#c5d1d3}html.dark-mode .recipient-input .recipient{background-color:#374549;border-color:#7c949c}html.dark-mode .file-upload{border-color:#4d6066}html.dark-mode .file-upload:after{mix-blend-mode:soft-light}html.dark-mode .file-upload.droptarget.active{border-color:#c5d1d3}html.dark-mode .file-upload.droptarget.hover{border-color:#c5d1d3;background-color:#374549}html.dark-mode .file-upload .attachmentslist{background:transparent}html.dark-mode .image-upload{background-color:#374549}html.dark-mode .image-upload a.button{background-color:rgba(33,41,44,0.25)}html.dark-mode .formcontent.raweditor .CodeMirror{color:#c5d1d3;background-color:#21292c;border-color:#7c949c}html.dark-mode .formcontent.raweditor .CodeMirror-focused{background-color:#2c373b;border-color:#f4c200}html.dark-mode .CodeMirror-selected,html.dark-mode .CodeMirror-line::selection,html.dark-mode .CodeMirror-line>span::selection,html.dark-mode .CodeMirror-line>span>span::selection{background:#374549}html.dark-mode .CodeMirror-gutters{background-color:#212a2c;border:0}html.dark-mode .CodeMirror-activeline-background{background:#374549}html.dark-mode .skinselection .skinthumbnail{border-color:#7c949c;background:transparent}html.dark-mode .html-editor .editor-toolbar{background-color:#374549;border-color:#7c949c}html.dark-mode .html-editor .editor-toolbar .mce-i-html{color:unset}html.dark-mode .html-editor .editor-toolbar .mce-i-html:hover,html.dark-mode .html-editor .editor-toolbar .mce-i-html:focus{background-color:#586e75;border-color:transparent}html.dark-mode .tox.tox-tinymce{border-color:#7c949c}html.dark-mode .tox .tox-toolbar{background-color:#374549;border-color:#7c949c}html.dark-mode .tox .tox-toolbar-overlord>div{background:url("data:image/svg+xml,%3Csvg height='33px' viewBox='0 0 40 33px' width='40' xmlns='http://www.w3.org/2000/svg'%3E%3Crect x='0' y='32px' width='100' height='1' fill='%237c949c'/%3E%3C/svg%3E") #374549}html.dark-mode .tox .tox-pop.tox-pop--top:before,html.dark-mode .tox .tox-pop.tox-pop--top:after{border-bottom-color:#8b9fa7}html.dark-mode .tox .tox-pop__dialog{box-shadow:none;border-color:#8b9fa7}html.dark-mode .tox .tox-tbtn,html.dark-mode .tox .tox-split-button,html.dark-mode .tox .tox-swatches__picker-btn{color:#c5d1d3}html.dark-mode .tox .tox-tbtn svg,html.dark-mode .tox .tox-split-button svg,html.dark-mode .tox .tox-swatches__picker-btn svg{fill:#c5d1d3 !important}html.dark-mode .tox .tox-tbtn:hover,html.dark-mode .tox .tox-split-button:hover,html.dark-mode .tox .tox-swatches__picker-btn:hover,html.dark-mode .tox .tox-tbtn:focus,html.dark-mode .tox .tox-split-button:focus,html.dark-mode .tox .tox-swatches__picker-btn:focus{color:#c5d1d3;background:#586e75;box-shadow:none}html.dark-mode .tox .tox-tbtn--enabled{background:#586e75}html.dark-mode .tox .tox-button--naked:focus:not(:disabled),html.dark-mode .tox .tox-button--naked.tox-button--icon:hover:not(:disabled){color:#d4ddde;background-color:#586e75;border-color:transparent}html.dark-mode .tox .tox-button--naked:disabled{background:transparent;border:transparent}html.dark-mode .tox .tox-dialog__header .tox-button--naked:hover{background:transparent !important}html.dark-mode .tox .tox-selectfield select{background:transparent;color:#c5d1d3}html.dark-mode .tox .tox-selectfield svg{fill:#c5d1d3}html.dark-mode .tox .tox-color-input span::before{background-color:#c5d1d3}html.dark-mode .tox .tox-toolbar__group:not(:last-of-type){border-color:#7c949c}html.dark-mode .tox .tox-dialog,html.dark-mode .tox .tox-dialog__header,html.dark-mode .tox .tox-dialog__body,html.dark-mode .tox .tox-dialog__footer,html.dark-mode .tox .tox-dialog__title{color:#c5d1d3;border-color:#4d6066;background-color:#21292c}html.dark-mode .tox .tox-textfield,html.dark-mode .tox .tox-color-input>input,html.dark-mode .tox .tox-label,html.dark-mode .tox .tox-dialog__body-nav-item,html.dark-mode .tox .tox-button--naked,html.dark-mode .tox .tox-dialog__header .tox-button,html.dark-mode .tox .tox-insert-table-picker__label{color:#c5d1d3}html.dark-mode .tox .tox-dialog__footer .tox-button{background-color:#5b4800;color:#e2e8e9}html.dark-mode .tox .tox-dialog__footer .tox-button:disabled{opacity:.5}@media screen and (max-width:480px){html.dark-mode .tox .tox-dialog__footer .tox-button{color:#c5d1d3 !important}}html.dark-mode .tox .tox-dialog__footer .tox-button:focus:not(:disabled){background-color:#5b4800}html.dark-mode .tox .tox-dialog__footer .tox-button:hover:not(:disabled){background-color:#755d00}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary{background-color:#4d6066;color:#e2e8e9}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary:focus:not(:disabled){background-color:#4d6066}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary:hover:not(:disabled){background-color:#586e75}html.dark-mode .tox .tox-dialog__body-nav-item--active{color:#f4c200}html.dark-mode .tox .tox-dialog-wrap__backdrop{background-color:rgba(0,0,0,0.7)}html.dark-mode .tox .tox-menu{scrollbar-width:thin;background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .tox .tox-dialog__body-nav,html.dark-mode .tox .tox-collection__group{scrollbar-width:thin}html.dark-mode .tox .tox-collection__item-caret svg{fill:#c5d1d3}html.dark-mode .tox .tox-collection__item{color:#c5d1d3}html.dark-mode .tox .tox-collection__item:not(:last-child){border-bottom:1px solid #2c373a}html.dark-mode .tox .tox-collection--grid .tox-collection__item{border:0}html.dark-mode .tox .tox-collection__item--active,html.dark-mode .tox .tox-collection__item--active:not(.tox-collection__item--state-disabled){color:#c5d1d3;background-color:#374549}html.dark-mode .tox .tox-collection__item--enabled{color:#f4c200;background-color:#374549}html.dark-mode .message-part,html.dark-mode .message-htmlpart{border-color:#4d6066}html.dark-mode .message-part blockquote,html.dark-mode .message-htmlpart blockquote{background-color:#21292c;border-color:#ffd328;color:#ffd328}html.dark-mode .message-part blockquote span.blockquote-link,html.dark-mode .message-htmlpart blockquote span.blockquote-link{color:currentColor;background:#21292c;border-color:currentColor}html.dark-mode .message-part blockquote blockquote,html.dark-mode .message-htmlpart blockquote blockquote{color:#64c86b;border-color:#64c86b}html.dark-mode .message-part blockquote blockquote blockquote,html.dark-mode .message-htmlpart blockquote blockquote blockquote{color:#ff8785;border-color:#ff8785}html.dark-mode .message-part span.sig{color:#8ba3a7}html.dark-mode .message-htmlpart{background-color:white;color:#4f4f4f;padding:0;margin-top:.5rem}html.dark-mode #message-header .header-headers .header-title{color:#c5d1d3;font-weight:normal}html.dark-mode .message-partheaders{background-color:#374549;border:0}html.dark-mode .message-partheaders table.headers-table{color:#c5d1d3}html.dark-mode .message-partheaders table.headers-table *{font-weight:normal}html.dark-mode p.image-attachment{border-color:#4d6066;background-color:#374549}html.dark-mode p.image-attachment span{color:#8ba3a7}html.dark-mode fieldset.image-attachment legend{color:#8ba3a7;border-color:#4d6066}html.dark-mode #messagepartframe{background:#fff}html.dark-mode .ui-widget{border-color:#4d6066}html.dark-mode .ui-widget-overlay{background-color:rgba(0,0,0,0.7)}html.dark-mode .ui-widget-header,html.dark-mode .ui-widget-content{background-color:#21292c}html.dark-mode .ui-dialog .ui-dialog-titlebar{border-color:#4d6066}html.dark-mode .ui-dialog .ui-dialog-title,html.dark-mode .ui-dialog .ui-dialog-titlebar-close{color:#c5d1d3;background:transparent}html.dark-mode .ui-dialog .ui-dialog-buttonpane{border-color:#4d6066}html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{color:#c5d1d3}html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:focus{background:transparent}@media screen and (max-width:480px){html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-primary:not(.btn-danger),html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-secondary{color:#c5d1d3}}html.dark-mode .ui-datepicker .ui-datepicker-header{border-color:#4d6066}html.dark-mode .ui-datepicker th{color:#8ba3a7;font-size:80%;font-weight:normal}html.dark-mode .ui-datepicker .ui-datepicker-prev,html.dark-mode .ui-datepicker .ui-datepicker-next,html.dark-mode .ui-datepicker .ui-state-default,html.dark-mode .ui-datepicker.ui-widget-content .ui-state-default{color:#c5d1d3}html.dark-mode .ui-datepicker .ui-state-highlight,html.dark-mode .ui-datepicker.ui-widget-content .ui-state-highlight{color:#f4c200;background-color:#374549}html.dark-mode .ui-datepicker .ui-datepicker-days-cell-over a{background-color:#4d6066}html.dark-mode .ui-menu{scrollbar-width:thin;background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .ui-menu .ui-menu-item{border-bottom:1px solid #2c373a}html.dark-mode .ui-menu .ui-state-active{background-color:#374549 !important}html.dark-mode .minicolors-panel{box-shadow:none;border-color:#4d6066;background:#161b1d}html.dark-mode ::placeholder,html.dark-mode ::-webkit-input-placeholder,html.dark-mode .listing-info,html.dark-mode .listing span.secondary,html.dark-mode .file-upload .hint,html.dark-mode .contactlist span.email,html.dark-mode #login-footer,html.dark-mode #contacthead.readonly .source.row,html.dark-mode .formcontent .hint{font-weight:normal;color:#8ba3a7}html.dark-mode .popover{background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .popover .menu li.separator{background-color:transparent;color:#8ba3a7}html.dark-mode .popover .menu ul+li.separator{border-top:1px solid #2c373a}html.dark-mode .popover-body{color:#c5d1d3}html.dark-mode .bs-popover-autox-placement^="right">.arrow::after,html.dark-mode .bs-popover-right>.arrow::after{border-right-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="left">.arrow::after,html.dark-mode .bs-popover-left>.arrow::after{border-left-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="top">.arrow::after,html.dark-mode .bs-popover-top>.arrow::after{border-top-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="bottom">.arrow::after,html.dark-mode .bs-popover-bottom>.arrow::after{border-bottom-color:#8b9fa7}html.dark-mode .nav-tabs{border-color:#4d6066}html.dark-mode .nav-tabs .nav-link{color:#c5d1d3;border-color:transparent;border-bottom-color:#4d6066}html.dark-mode .nav-tabs .nav-link:hover{background:#21292c;border-color:#4d6066;color:#c5d1d3}html.dark-mode .nav-tabs .nav-link.active{background:#21292c;border-color:#4d6066;border-bottom-color:transparent;color:#fff}html.dark-mode .table{color:#c5d1d3}html.dark-mode .table td,html.dark-mode .table th,html.dark-mode .table thead th{border-color:#4d6066}html.dark-mode .table-widget{border-color:#4d6066}html.dark-mode .table-widget>.footer{border-color:#4d6066}html.dark-mode .table-widget table.options-table tr:last-child td{border-color:#4d6066}html.dark-mode .table-widget table.options-table tr.selected td{background-color:#374549;color:#c5d1d3}html.dark-mode #rcmdraglayer{background-color:#161b1d;border:1px solid #8b9fa7;box-shadow:none;color:#c5d1d3}html.dark-mode .quota-widget{color:unset}html.dark-mode .quota-widget .bar{border-color:#4d6066;background-color:#4d6066}html.dark-mode .quota-info .root{color:#8ba3a7;background-color:transparent}html.dark-mode img.contactphoto,html.dark-mode #contactpic{background-color:#374549 !important}html.dark-mode .pgpkeyimport div.key.revoked,html.dark-mode .pgpkeyimport div.key.disabled{color:#637e82}html.dark-mode .pgpkeyimport li.uid::before{opacity:1}#taskmenu span.inner{text-transform:uppercase}@media screen and (min-width:1025px) and (min-height:640px){#taskmenu span.inner{font-size:65%;font-weight:bold}#taskmenu a:before{line-height:1.2;font-size:180%;height:1.9rem !important}}@media screen and (min-width:769px){#taskmenu a.logout:not(:hover){color:#71777d !important}}#taskmenu .action-buttons{display:none}#layout-menu .popover-header{background-color:#3a444e !important}#layout-menu .popover-header img{width:100%}html.layout-phone #layout-menu .popover-header img{width:unset;max-height:58px}.watermark{background-image:url(../images/watermark.svg) !important;background-size:60% !important;background-blend-mode:unset !important}html:not(.dark-mode) .watermark:before{background:rgba(255,255,255,0.75) !important}html.dark-mode .watermark{background-blend-mode:soft-light !important}body.task-mail .menu a.compose{display:block !important}#message-header .short-header img.contactphoto{order:2;margin:0 0 0 1rem}.content-frame-navigation{height:35px !important;line-height:35px !important;min-height:35px !important}.content-frame-navigation a{max-width:8em;padding:0;line-height:35px}.content-frame-navigation a:before{display:none !important;height:35px !important;line-height:35px !important}.content-frame-navigation a.prev,.content-frame-navigation a.next{padding:0}.content-frame-navigation a.prev:before,.content-frame-navigation a.next:before{display:block !important;line-height:1.8}.content-frame-navigation a.prev span.inner,.content-frame-navigation a.next span.inner{display:none}.content-frame-navigation a span.inner{color:#f4c200;font-weight:bold}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/skins/kolab/watermark.html -> roundcubemail-1.5.tar.gz/skins/kolab/watermark.html Changed

roundcubemail-1.5.3.tar.gz/temp/js_cache/tinymce-langs-5.8.2.zip -> roundcubemail-1.5.tar.gz/temp/js_cache/tinymce-langs-5.8.2.zip Changed

roundcubemail-1.5.3.tar.gz/tests/Framework/VCard.php -> roundcubemail-1.5.tar.gz/tests/Framework/VCard.php Changed

roundcubemail-1.5.3.tar.gz/tests/src/Csv2vcard/email.vcf -> roundcubemail-1.5.tar.gz/tests/src/Csv2vcard/email.vcf Changed

roundcubemail-1.5.3.tar.gz/tests/src/Csv2vcard/outlook.vcf -> roundcubemail-1.5.tar.gz/tests/src/Csv2vcard/outlook.vcf Changed

roundcubemail-1.5.3.tar.gz/vendor/autoload.php -> roundcubemail-1.5.tar.gz/vendor/autoload.php Changed

roundcubemail-1.5.tar.gz/vendor/christian-riesen Added

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32 Added

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32/LICENSE Added

@@ -0,0 +1,19 @@
+Copyright (c) 2013-2014 Christian Riesen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished
+to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32/README.md Added

@@ -0,0 +1,64 @@
+base32
+======
+
+Base32 Encoder/Decoder for PHP according to RFC 4648(https://tools.ietf.org/html/rfc4648).
+
+!CI(https://github.com/ChristianRiesen/base32/workflows/CI/badge.svg)
+
+!Latest Stable Version(https://poser.pugx.org/christian-riesen/base32/v/stable.png)(https://packagist.org/packages/christian-riesen/base32) !Total Downloads(https://poser.pugx.org/christian-riesen/base32/downloads.png)(https://packagist.org/packages/christian-riesen/base32) !Latest Unstable Version(https://poser.pugx.org/christian-riesen/base32/v/unstable.png)(https://packagist.org/packages/christian-riesen/base32) !License(https://poser.pugx.org/christian-riesen/base32/license.png)(https://packagist.org/packages/christian-riesen/base32)
+
+
+Installation
+-----
+
+Use composer:
+
+```bash
+composer require christian-riesen/base32
+```
+
+Usage
+-----
+
+```php
+<?php
+
+// Include class or user autoloader
+use Base32\Base32;
+
+$string = 'fooba';
+
+// $encoded contains now 'MZXW6YTB'
+$encoded = Base32::encode($string);
+
+// $decoded is again 'fooba'
+$decoded = Base32::decode($encoded);
+```
+
+You can also use the extended hex alphabet by using the `Base32Hex` class instead.
+
+About
+=====
+
+Initially created to work with the one time password project(https://github.com/ChristianRiesen/otp), yet it can stand alone just as well as Jordi Boggiano(http://seld.be/) kindly pointed out. It's the only Base32 implementation that passes the test vectors and contains unit tests as well.
+
+Goal
+----
+Have a RFC compliant Base32 encoder and decoder. The implementation could be improved, but for now, it does the job and has unit tests. Ideally, the class can be enhanced while the unit tests keep passing.
+
+Requirements
+------------
+
+Works on PHP 7.2 and later, including PHP 8.0.
+
+Tests run on PHPUnit 9.5, with PHP 7.3 and later. For PHP 7.2, tests use an older PHPUnit version.
+
+Author
+------
+
+Christian Riesen <chris.riesen@gmail.com> http://christianriesen.com
+
+Acknowledgements
+----------------
+
+Base32 is mostly based on the work of https://github.com/NTICompass/PHP-Base32

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32/src Added

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32/src/Base32.php Added

@@ -0,0 +1,168 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Base32;
+
+/**
+ * Base32 encoder and decoder.
+ *
+ * RFC 4648 compliant
+ *
+ * @see     http://www.ietf.org/rfc/rfc4648.txt
+ * Some groundwork based on this class
+ * https://github.com/NTICompass/PHP-Base32
+ *
+ * @author  Christian Riesen <chris.riesen@gmail.com>
+ * @author  Sam Williams <sam@badcow.co>
+ *
+ * @see     http://christianriesen.com
+ *
+ * @license MIT License see LICENSE file
+ */
+class Base32
+{
+    /**
+     * Alphabet for encoding and decoding base32.
+     *
+     * @var string
+     */
+    protected const ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567=';
+
+    protected const BASE32HEX_PATTERN = '/^A-Z2-7/';
+
+    /**
+     * Maps the Base32 character to its corresponding bit value.
+     */
+    protected const MAPPING = 
+        '=' => 0b00000,
+        'A' => 0b00000,
+        'B' => 0b00001,
+        'C' => 0b00010,
+        'D' => 0b00011,
+        'E' => 0b00100,
+        'F' => 0b00101,
+        'G' => 0b00110,
+        'H' => 0b00111,
+        'I' => 0b01000,
+        'J' => 0b01001,
+        'K' => 0b01010,
+        'L' => 0b01011,
+        'M' => 0b01100,
+        'N' => 0b01101,
+        'O' => 0b01110,
+        'P' => 0b01111,
+        'Q' => 0b10000,
+        'R' => 0b10001,
+        'S' => 0b10010,
+        'T' => 0b10011,
+        'U' => 0b10100,
+        'V' => 0b10101,
+        'W' => 0b10110,
+        'X' => 0b10111,
+        'Y' => 0b11000,
+        'Z' => 0b11001,
+        '2' => 0b11010,
+        '3' => 0b11011,
+        '4' => 0b11100,
+        '5' => 0b11101,
+        '6' => 0b11110,
+        '7' => 0b11111,
+    ;
+
+    /**
+     * Encodes into base32.
+     *
+     * @param string $string Clear text string
+     *
+     * @return string Base32 encoded string
+     */
+    public static function encode(string $string): string
+    {
+        // Empty string results in empty string
+        if ('' === $string) {
+            return '';
+        }
+
+        $encoded = '';
+
+        //Set the initial values
+        $n = $bitLen = $val = 0;
+        $len = \strlen($string);
+
+        //Pad the end of the string - this ensures that there are enough zeros
+        $string .= \str_repeat(\chr(0), 4);
+
+        //Explode string into integers
+        $chars = (array) \unpack('C*', $string, 0);
+
+        while ($n < $len || 0 !== $bitLen) {
+            //If the bit length has fallen below 5, shift left 8 and add the next character.
+            if ($bitLen < 5) {
+                $val = $val << 8;
+                $bitLen += 8;
+                $n++;
+                $val += $chars$n;
+            }
+            $shift = $bitLen - 5;
+            $encoded .= ($n - (int)($bitLen > 8) > $len && 0 == $val) ? '=' : static::ALPHABET$val >> $shift;
+            $val = $val & ((1 << $shift) - 1);
+            $bitLen -= 5;
+        }
+
+        return $encoded;
+    }
+
+    /**
+     * Decodes base32.
+     *
+     * @param string $base32String Base32 encoded string
+     *
+     * @return string Clear text string
+     */
+    public static function decode(string $base32String): string
+    {
+        // Only work in upper cases
+        $base32String = \strtoupper($base32String);
+
+        // Remove anything that is not base32 alphabet
+        $base32String = \preg_replace(static::BASE32HEX_PATTERN, '', $base32String);
+
+        // Empty string results in empty string
+        if ('' === $base32String || null === $base32String) {
+            return '';
+        }
+
+        $decoded = '';
+
+        //Set the initial values
+        $len = \strlen($base32String);
+        $n = 0;
+        $bitLen = 5;
+        $val = static::MAPPING$base32String0;
+
+        while ($n < $len) {
+            //If the bit length has fallen below 8, shift left 5 and add the next pentet.
+            if ($bitLen < 8) {
+                $val = $val << 5;
+                $bitLen += 5;
+                $n++;
+                $pentet = $base32String$n ?? '=';
+
+                //If the new pentet is padding, make this the last iteration.
+                if ('=' === $pentet) {
+                    $n = $len;
+                }
+                $val += static::MAPPING$pentet;
+                continue;
+            }
+            $shift = $bitLen - 8;
+
+            $decoded .= \chr($val >> $shift);
+            $val = $val & ((1 << $shift) - 1);
+            $bitLen -= 8;
+        }
+
+        return $decoded;
+    }
+}

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32/src/Base32Hex.php Added

@@ -0,0 +1,68 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Base32;
+
+/**
+ * Base32Hex encoder and decoder.
+ *
+ * RFC 4648 compliant
+ * @see     http://www.ietf.org/rfc/rfc4648.txt
+ *
+ * @author  Sam Williams <sam@badcow.co>
+ *
+ * @see     http://christianriesen.com
+ *
+ * @license MIT License see LICENSE file
+ */
+class Base32Hex extends Base32
+{
+    /**
+     * Alphabet for encoding and decoding base32 extended hex.
+     *
+     * @var string
+     */
+    protected const ALPHABET = '0123456789ABCDEFGHIJKLMNOPQRSTUV=';
+
+    protected const BASE32HEX_PATTERN = '/^0-9A-V/';
+
+    /**
+     * Maps the Base32 character to its corresponding bit value.
+     */
+    protected const MAPPING = 
+        '=' => 0b00000,
+        '0' => 0b00000,
+        '1' => 0b00001,
+        '2' => 0b00010,
+        '3' => 0b00011,
+        '4' => 0b00100,
+        '5' => 0b00101,
+        '6' => 0b00110,
+        '7' => 0b00111,
+        '8' => 0b01000,
+        '9' => 0b01001,
+        'A' => 0b01010,
+        'B' => 0b01011,
+        'C' => 0b01100,
+        'D' => 0b01101,
+        'E' => 0b01110,
+        'F' => 0b01111,
+        'G' => 0b10000,
+        'H' => 0b10001,
+        'I' => 0b10010,
+        'J' => 0b10011,
+        'K' => 0b10100,
+        'L' => 0b10101,
+        'M' => 0b10110,
+        'N' => 0b10111,
+        'O' => 0b11000,
+        'P' => 0b11001,
+        'Q' => 0b11010,
+        'R' => 0b11011,
+        'S' => 0b11100,
+        'T' => 0b11101,
+        'U' => 0b11110,
+        'V' => 0b11111,
+    ;
+}

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_namespaces.php -> roundcubemail-1.5.tar.gz/vendor/composer/autoload_namespaces.php Changed

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_psr4.php -> roundcubemail-1.5.tar.gz/vendor/composer/autoload_psr4.php Changed

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_real.php -> roundcubemail-1.5.tar.gz/vendor/composer/autoload_real.php Changed

@@ -2,7 +2,7 @@
 
 // autoload_real.php @generated by Composer
 
-class ComposerAutoloaderInit454e4d64ed1e6e11bb59e667f281caeb
+class ComposerAutoloaderInit9fd62ebd5bd49d4418181d3ab689ae3b
 {
     private static $loader;
 
@@ -24,9 +24,9 @@
 
         require __DIR__ . '/platform_check.php';
 
-        spl_autoload_register(array('ComposerAutoloaderInit454e4d64ed1e6e11bb59e667f281caeb', 'loadClassLoader'), true, true);
+        spl_autoload_register(array('ComposerAutoloaderInit9fd62ebd5bd49d4418181d3ab689ae3b', 'loadClassLoader'), true, true);
         self::$loader = $loader = new \Composer\Autoload\ClassLoader(\dirname(\dirname(__FILE__)));
-        spl_autoload_unregister(array('ComposerAutoloaderInit454e4d64ed1e6e11bb59e667f281caeb', 'loadClassLoader'));
+        spl_autoload_unregister(array('ComposerAutoloaderInit9fd62ebd5bd49d4418181d3ab689ae3b', 'loadClassLoader'));
 
         $includePaths = require __DIR__ . '/include_paths.php';
         $includePaths = get_include_path();
@@ -36,7 +36,7 @@
         if ($useStaticLoader) {
             require __DIR__ . '/autoload_static.php';
 
-            call_user_func(\Composer\Autoload\ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::getInitializer($loader));
+            call_user_func(\Composer\Autoload\ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::getInitializer($loader));
         } else {
             $map = require __DIR__ . '/autoload_namespaces.php';
             foreach ($map as $namespace => $path) {
@@ -57,19 +57,19 @@
         $loader->register(true);
 
         if ($useStaticLoader) {
-            $includeFiles = Composer\Autoload\ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$files;
+            $includeFiles = Composer\Autoload\ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$files;
         } else {
             $includeFiles = require __DIR__ . '/autoload_files.php';
         }
         foreach ($includeFiles as $fileIdentifier => $file) {
-            composerRequire454e4d64ed1e6e11bb59e667f281caeb($fileIdentifier, $file);
+            composerRequire9fd62ebd5bd49d4418181d3ab689ae3b($fileIdentifier, $file);
         }
 
         return $loader;
     }
 }
 
-function composerRequire454e4d64ed1e6e11bb59e667f281caeb($fileIdentifier, $file)
+function composerRequire9fd62ebd5bd49d4418181d3ab689ae3b($fileIdentifier, $file)
 {
     if (empty($GLOBALS'__composer_autoload_files'$fileIdentifier)) {
         require $file;

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_static.php -> roundcubemail-1.5.tar.gz/vendor/composer/autoload_static.php Changed

@@ -4,7 +4,7 @@
 
 namespace Composer\Autoload;
 
-class ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb
+class ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b
 {
     public static $files = array (
         '320cde22f66dd4f5d3fd621d3e88b98f' => __DIR__ . '/..' . '/symfony/polyfill-ctype/bootstrap.php',
@@ -63,6 +63,10 @@
             'Psr\\Http\\Message\\' => 17,
             'Prophecy\\' => 9,
         ),
+        'O' => 
+        array (
+            'OTPHP\\' => 6,
+        ),
         'M' => 
         array (
             'Masterminds\\' => 12,
@@ -82,6 +86,10 @@
             'Doctrine\\Instantiator\\' => 22,
             'DeepCopy\\' => 9,
         ),
+        'B' => 
+        array (
+            'Base32\\' => 7,
+        ),
     );
 
     public static $prefixDirsPsr4 = array (
@@ -167,6 +175,10 @@
         array (
             0 => __DIR__ . '/..' . '/phpspec/prophecy/src/Prophecy',
         ),
+        'OTPHP\\' => 
+        array (
+            0 => __DIR__ . '/..' . '/spomky-labs/otphp/lib',
+        ),
         'Masterminds\\' => 
         array (
             0 => __DIR__ . '/..' . '/masterminds/html5/src',
@@ -195,6 +207,10 @@
         array (
             0 => __DIR__ . '/..' . '/myclabs/deep-copy/src/DeepCopy',
         ),
+        'Base32\\' => 
+        array (
+            0 => __DIR__ . '/..' . '/christian-riesen/base32/src',
+        ),
     );
 
     public static $prefixesPsr0 = array (
@@ -257,6 +273,13 @@
                 0 => __DIR__ . '/..' . '/zf1/zend-cache/library',
             ),
         ),
+        'Y' => 
+        array (
+            'Yubikey' => 
+            array (
+                0 => __DIR__ . '/..' . '/enygma/yubikey/src',
+            ),
+        ),
         'R' => 
         array (
             'Roundcube\\Composer' => 
@@ -1006,11 +1029,11 @@
     public static function getInitializer(ClassLoader $loader)
     {
         return \Closure::bind(function () use ($loader) {
-            $loader->prefixLengthsPsr4 = ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$prefixLengthsPsr4;
-            $loader->prefixDirsPsr4 = ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$prefixDirsPsr4;
-            $loader->prefixesPsr0 = ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$prefixesPsr0;
-            $loader->fallbackDirsPsr0 = ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$fallbackDirsPsr0;
-            $loader->classMap = ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$classMap;
+            $loader->prefixLengthsPsr4 = ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$prefixLengthsPsr4;
+            $loader->prefixDirsPsr4 = ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$prefixDirsPsr4;
+            $loader->prefixesPsr0 = ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$prefixesPsr0;
+            $loader->fallbackDirsPsr0 = ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$fallbackDirsPsr0;
+            $loader->classMap = ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$classMap;
 
         }, null, ClassLoader::class);
     }

roundcubemail-1.5.3.tar.gz/vendor/composer/installed.json -> roundcubemail-1.5.tar.gz/vendor/composer/installed.json Changed

@@ -64,6 +64,68 @@
             "install-path": "../caxy/php-htmldiff"
         },
         {
+            "name": "christian-riesen/base32",
+            "version": "1.6.0",
+            "version_normalized": "1.6.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ChristianRiesen/base32.git",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ChristianRiesen/base32/zipball/2e82dab3baa008e24a505649b0d583c31d31e894",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "require-dev": {
+                "friendsofphp/php-cs-fixer": "^2.17",
+                "phpstan/phpstan": "^0.12",
+                "phpunit/phpunit": "^8.5.13 || ^9.5"
+            },
+            "time": "2021-02-26T10:19:33+00:00",
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.x-dev"
+                }
+            },
+            "installation-source": "dist",
+            "autoload": {
+                "psr-4": {
+                    "Base32\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Christian Riesen",
+                    "email": "chris.riesen@gmail.com",
+                    "homepage": "http://christianriesen.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Base32 encoder/decoder according to RFC 4648",
+            "homepage": "https://github.com/ChristianRiesen/base32",
+            "keywords": 
+                "base32",
+                "decode",
+                "encode",
+                "rfc4648"
+            ,
+            "support": {
+                "issues": "https://github.com/ChristianRiesen/base32/issues",
+                "source": "https://github.com/ChristianRiesen/base32/tree/1.6.0"
+            },
+            "install-path": "../christian-riesen/base32"
+        },
+        {
             "name": "doctrine/instantiator",
             "version": "1.5.0",
             "version_normalized": "1.5.0.0",
@@ -194,6 +256,62 @@
             "install-path": "../endroid/qr-code"
         },
         {
+            "name": "enygma/yubikey",
+            "version": "3.3",
+            "version_normalized": "3.3.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/enygma/yubikey.git",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/enygma/yubikey/zipball/2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.1"
+            },
+            "require-dev": {
+                "codeclimate/php-test-reporter": "dev-master",
+                "phpunit/phpunit": "4.3.2"
+            },
+            "time": "2018-03-08T20:38:39+00:00",
+            "type": "library",
+            "installation-source": "dist",
+            "autoload": {
+                "psr-0": {
+                    "Yubikey": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Chris Cornutt",
+                    "email": "ccornutt@phpdeveloper.org",
+                    "homepage": "http://www.phpdeveloper.org/"
+                }
+            ,
+            "description": "PHP library to interface with the Yubikey REST API",
+            "homepage": "https://github.com/enygma/yubikey.git",
+            "keywords": 
+                "api",
+                "rest",
+                "twofactor",
+                "yubico",
+                "yubikey"
+            ,
+            "support": {
+                "issues": "https://github.com/enygma/yubikey/issues",
+                "source": "https://github.com/enygma/yubikey/tree/master"
+            },
+            "install-path": "../enygma/yubikey"
+        },
+        {
             "name": "ezyang/htmlpurifier",
             "version": "v4.16.0",
             "version_normalized": "4.16.0.0",
@@ -622,7 +740,7 @@
             "version_normalized": "3.5.11.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/calendar",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/calendar",
                 "reference": "bcca59cdaa6cf7b2109eac32685bb750425c305e"
             },
             "require": {
@@ -663,12 +781,53 @@
             "install-path": "../../plugins/calendar"
         },
         {
+            "name": "kolab/kolab_2fa",
+            "version": "3.5.11",
+            "version_normalized": "3.5.11.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+                "reference": "ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e"
+            },
+            "require": {
+                "endroid/qr-code": "~1.6.5",
+                "enygma/yubikey": "~3.2",
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3",
+                "spomky-labs/otphp": "~5.0.0"
+            },
+            "type": "roundcube-plugin",
+            "installation-source": "dist",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Thomas Bruederli",
+                    "email": "bruederli@kolabsys.com",
+                    "role": "Lead"
+                },
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Kolab 2-Factor Authentication",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            },
+            "install-path": "../../plugins/kolab_2fa"
+        },
+        {
             "name": "kolab/kolab_activesync",
             "version": "3.5.6",
             "version_normalized": "3.5.6.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
                 "reference": "7e8c46290074fe6c1ab72bc9f6b90aa271ee16ef"
             },
             "require": {
@@ -707,7 +866,7 @@
             "version_normalized": "3.5.10.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_addressbook",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_addressbook",
                 "reference": "45572ac8d5cc1b6ead5a59aa4a065d338c3fcb66"
             },
             "require": {
@@ -746,7 +905,7 @@
             "version_normalized": "3.5.8.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_auth",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_auth",
                 "reference": "ab0ed459f74a03f8eab6822652e084f0430a4f07"
             },
             "require": {
@@ -785,7 +944,7 @@
             "version_normalized": "3.5.4.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_chat",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_chat",
                 "reference": "b2f85fcb8324b9961dd02fb3e3acd92be33b558e"
             },
             "require": {
@@ -819,7 +978,7 @@
             "version_normalized": "3.4.0.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_config",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_config",
                 "reference": "b31a76c1700679249fc222c46582ecbd1215f117"
             },
             "require": {
@@ -853,7 +1012,7 @@
             "version_normalized": "3.5.11.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_delegation",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_delegation",
                 "reference": "9fd01ca88c10959bea6742b9855979da8f79834f"
             },
             "require": {
@@ -888,7 +1047,7 @@
             "version_normalized": "3.5.2.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_files",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_files",
                 "reference": "0439d3783b59d6e52f23e86046881fd0ca8c0bd5"
             },
             "require": {
@@ -922,7 +1081,7 @@
             "version_normalized": "3.5.2.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_folders",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_folders",
                 "reference": "c70560fcfe40bf1582ea79debf3ae2aebbe94688"
             },
             "require": {
@@ -956,7 +1115,7 @@
             "version_normalized": "3.5.5.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_notes",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_notes",
                 "reference": "07297b8ea8b3827d0ba46801760854b0db560576"
             },
             "require": {
@@ -990,12 +1149,47 @@
             "install-path": "../../plugins/kolab_notes"
         },
         {
+            "name": "kolab/kolab_sso",
+            "version": "3.5.4",
+            "version_normalized": "3.5.4.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_sso",
+                "reference": "a15ea62c786c8ffa4bb6fe27cbb7d4de7f193917"
+            },
+            "require": {
+                "kolab/libkolab": ">=3.4.0",
+                "pear/http_request2": "~2.5.0",
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "installation-source": "dist",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Lead"
+                }
+            ,
+            "description": "Single Sign On for Kolab",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            },
+            "install-path": "../../plugins/kolab_sso"
+        },
+        {
             "name": "kolab/kolab_tags",
             "version": "3.5.2",
             "version_normalized": "3.5.2.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_tags",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_tags",
                 "reference": "62ffa5279d9f351941be6b23b0d0478aeff91bfd"
             },
             "require": {
@@ -1029,7 +1223,7 @@
             "version_normalized": "3.5.11.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/libcalendaring",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/libcalendaring",
                 "reference": "cd512d567ce2af09863960878d72f79e1f7ffd74"
             },
             "require": {
@@ -1068,7 +1262,7 @@
             "version_normalized": "3.5.11.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/libkolab",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/libkolab",
                 "reference": "30bad7150f1999a5a2a0d33c9bcd490514a4a307"
             },
             "require": {
@@ -1104,6 +1298,39 @@
             "install-path": "../../plugins/libkolab"
         },
         {
+            "name": "kolab/logon_page",
+            "version": "3.4.2",
+            "version_normalized": "3.4.2.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/logon_page",
+                "reference": "262a87c48721ba04a581eb5c1f8dcfd44a565993"
+            },
+            "require": {
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "installation-source": "dist",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Lead"
+                }
+            ,
+            "description": "Logon screen additions",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            },
+            "install-path": "../../plugins/logon_page"
+        },
+        {
             "name": "kolab/net_ldap3",
             "version": "v1.1.4",
             "version_normalized": "1.1.4.0",
@@ -1161,12 +1388,50 @@
             "install-path": "../kolab/net_ldap3"
         },
         {
+            "name": "kolab/nextcloud_link",
+            "version": "1.0",
+            "version_normalized": "1.0.0.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/nextcloud_link",
+                "reference": "f00215f711dc4d376fb667d0d97c238c0b9e791f"
+            },
+            "require": {
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3"
+            },
+            "type": "roundcube-plugin",
+            "extra": {
+                "roundcube": {
+                    "min-version": "1.4.0"
+                }
+            },
+            "installation-source": "dist",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@apheleia-it.ch",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Adds a link to Nextcloud in the task menu",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            },
+            "install-path": "../../plugins/nextcloud_link"
+        },
+        {
             "name": "kolab/odfviewer",
             "version": "3.4.0",
             "version_normalized": "3.4.0.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/odfviewer",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/odfviewer",
                 "reference": "43f3c0cf314cb818f9bc96d6bd378793e22a4ed4"
             },
             "require": {
@@ -1199,7 +1464,7 @@
             "version_normalized": "3.4.0.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/pdfviewer",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/pdfviewer",
                 "reference": "3437085223a60d929fbf076c232008e4377407c1"
             },
             "require": {
@@ -1232,7 +1497,7 @@
             "version_normalized": "3.5.10.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/tasklist",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/tasklist",
                 "reference": "f0f524d2443404c86efaa43fdb72fbe1a9f0acc6"
             },
             "require": {
@@ -2564,17 +2829,17 @@
         },
         {
             "name": "phpstan/phpstan",
-            "version": "1.10.15",
-            "version_normalized": "1.10.15.0",
+            "version": "1.10.18",
+            "version_normalized": "1.10.18.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/phpstan/phpstan.git",
-                "reference": "762c4dac4da6f8756eebb80e528c3a47855da9bd"
+                "reference": "52b6416c579663eebdd2f1d97df21971daf3b43f"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/762c4dac4da6f8756eebb80e528c3a47855da9bd",
-                "reference": "762c4dac4da6f8756eebb80e528c3a47855da9bd",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/52b6416c579663eebdd2f1d97df21971daf3b43f",
+                "reference": "52b6416c579663eebdd2f1d97df21971daf3b43f",
                 "shasum": ""
             },
             "require": {
@@ -2583,7 +2848,7 @@
             "conflict": {
                 "phpstan/phpstan-shim": "*"
             },
-            "time": "2023-05-09T15:28:01+00:00",
+            "time": "2023-06-07T22:00:43+00:00",
             "bin": 
                 "phpstan",
                 "phpstan.phar"
@@ -4458,6 +4723,70 @@
             "install-path": "../smarty/smarty"
         },
         {
+            "name": "spomky-labs/otphp",
+            "version": "v5.0.1",
+            "version_normalized": "5.0.1.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/Spomky-Labs/otphp.git",
+                "reference": "ada44930d9d85be1480123eca418c8c24e9a1f96"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/Spomky-Labs/otphp/zipball/ada44930d9d85be1480123eca418c8c24e9a1f96",
+                "reference": "ada44930d9d85be1480123eca418c8c24e9a1f96",
+                "shasum": ""
+            },
+            "require": {
+                "christian-riesen/base32": "~1.1",
+                "php": ">=5.3.2"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "~4.0"
+            },
+            "time": "2015-06-26T11:44:37+00:00",
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.0.x-dev"
+                }
+            },
+            "installation-source": "dist",
+            "autoload": {
+                "psr-4": {
+                    "OTPHP\\": "lib/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Florent Morselli",
+                    "homepage": "https://github.com/Spomky"
+                },
+                {
+                    "name": "All contributors",
+                    "homepage": "https://github.com/Spomky-Labs/otphp/contributors"
+                }
+            ,
+            "description": "PHP OTP Library compatible with Google Authenticator",
+            "homepage": "https://github.com/Spomky-Labs/otphp",
+            "keywords": 
+                "RFC 4226",
+                "RFC 6238",
+                "hotp",
+                "otp",
+                "totp"
+            ,
+            "support": {
+                "issues": "https://github.com/Spomky-Labs/otphp/issues",
+                "source": "https://github.com/Spomky-Labs/otphp/tree/v5.0.1"
+            },
+            "install-path": "../spomky-labs/otphp"
+        },
+        {
             "name": "squizlabs/php_codesniffer",
             "version": "3.7.2",
             "version_normalized": "3.7.2.0",

roundcubemail-1.5.3.tar.gz/vendor/composer/installed.php -> roundcubemail-1.5.tar.gz/vendor/composer/installed.php Changed

@@ -5,7 +5,7 @@
         'type' => 'library',
         'install_path' => __DIR__ . '/../../',
         'aliases' => array(),
-        'reference' => '0e7dda399d920cb31cf583b64231a5dd1e56d148',
+        'reference' => '8907e7e75d00020a45463439621f3d7f418704f5',
         'name' => 'roundcube/roundcubemail',
         'dev' => true,
     ),
@@ -19,6 +19,15 @@
             'reference' => '4bad5c6a4ecc76954d37764e6a29273b6b7bf1f8',
             'dev_requirement' => false,
         ),
+        'christian-riesen/base32' => array(
+            'pretty_version' => '1.6.0',
+            'version' => '1.6.0.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../christian-riesen/base32',
+            'aliases' => array(),
+            'reference' => '2e82dab3baa008e24a505649b0d583c31d31e894',
+            'dev_requirement' => false,
+        ),
         'doctrine/instantiator' => array(
             'pretty_version' => '1.5.0',
             'version' => '1.5.0.0',
@@ -37,6 +46,15 @@
             'reference' => 'cef5d5b7b904d7bb0708eb744c35316364b65fa0',
             'dev_requirement' => false,
         ),
+        'enygma/yubikey' => array(
+            'pretty_version' => '3.3',
+            'version' => '3.3.0.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../enygma/yubikey',
+            'aliases' => array(),
+            'reference' => '2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6',
+            'dev_requirement' => false,
+        ),
         'ezyang/htmlpurifier' => array(
             'pretty_version' => 'v4.16.0',
             'version' => '4.16.0.0',
@@ -91,6 +109,15 @@
             'reference' => 'bcca59cdaa6cf7b2109eac32685bb750425c305e',
             'dev_requirement' => false,
         ),
+        'kolab/kolab_2fa' => array(
+            'pretty_version' => '3.5.11',
+            'version' => '3.5.11.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/kolab_2fa',
+            'aliases' => array(),
+            'reference' => 'ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e',
+            'dev_requirement' => false,
+        ),
         'kolab/kolab_activesync' => array(
             'pretty_version' => '3.5.6',
             'version' => '3.5.6.0',
@@ -172,6 +199,15 @@
             'reference' => '07297b8ea8b3827d0ba46801760854b0db560576',
             'dev_requirement' => false,
         ),
+        'kolab/kolab_sso' => array(
+            'pretty_version' => '3.5.4',
+            'version' => '3.5.4.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/kolab_sso',
+            'aliases' => array(),
+            'reference' => 'a15ea62c786c8ffa4bb6fe27cbb7d4de7f193917',
+            'dev_requirement' => false,
+        ),
         'kolab/kolab_tags' => array(
             'pretty_version' => '3.5.2',
             'version' => '3.5.2.0',
@@ -199,6 +235,15 @@
             'reference' => '30bad7150f1999a5a2a0d33c9bcd490514a4a307',
             'dev_requirement' => false,
         ),
+        'kolab/logon_page' => array(
+            'pretty_version' => '3.4.2',
+            'version' => '3.4.2.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/logon_page',
+            'aliases' => array(),
+            'reference' => '262a87c48721ba04a581eb5c1f8dcfd44a565993',
+            'dev_requirement' => false,
+        ),
         'kolab/net_ldap3' => array(
             'pretty_version' => 'v1.1.4',
             'version' => '1.1.4.0',
@@ -208,6 +253,15 @@
             'reference' => 'ec4f0d6918aa4b5364e99e1132e0a5a9b3ab23ab',
             'dev_requirement' => false,
         ),
+        'kolab/nextcloud_link' => array(
+            'pretty_version' => '1.0',
+            'version' => '1.0.0.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/nextcloud_link',
+            'aliases' => array(),
+            'reference' => 'f00215f711dc4d376fb667d0d97c238c0b9e791f',
+            'dev_requirement' => false,
+        ),
         'kolab/odfviewer' => array(
             'pretty_version' => '3.4.0',
             'version' => '3.4.0.0',
@@ -425,12 +479,12 @@
             'dev_requirement' => true,
         ),
         'phpstan/phpstan' => array(
-            'pretty_version' => '1.10.15',
-            'version' => '1.10.15.0',
+            'pretty_version' => '1.10.18',
+            'version' => '1.10.18.0',
             'type' => 'library',
             'install_path' => __DIR__ . '/../phpstan/phpstan',
             'aliases' => array(),
-            'reference' => '762c4dac4da6f8756eebb80e528c3a47855da9bd',
+            'reference' => '52b6416c579663eebdd2f1d97df21971daf3b43f',
             'dev_requirement' => true,
         ),
         'phpunit/php-code-coverage' => array(
@@ -544,7 +598,7 @@
             'type' => 'library',
             'install_path' => __DIR__ . '/../../',
             'aliases' => array(),
-            'reference' => '0e7dda399d920cb31cf583b64231a5dd1e56d148',
+            'reference' => '8907e7e75d00020a45463439621f3d7f418704f5',
             'dev_requirement' => false,
         ),
         'roundcube/rtf-html-php' => array(
@@ -715,6 +769,15 @@
             'reference' => '2fc443806cdcaee4441be4d0bb09f8fa56a17f2c',
             'dev_requirement' => false,
         ),
+        'spomky-labs/otphp' => array(
+            'pretty_version' => 'v5.0.1',
+            'version' => '5.0.1.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../spomky-labs/otphp',
+            'aliases' => array(),
+            'reference' => 'ada44930d9d85be1480123eca418c8c24e9a1f96',
+            'dev_requirement' => false,
+        ),
         'squizlabs/php_codesniffer' => array(
             'pretty_version' => '3.7.2',
             'version' => '3.7.2.0',

roundcubemail-1.5.tar.gz/vendor/enygma Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/.travis.yml Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/LICENSE.md Added

@@ -0,0 +1,7 @@
+Copyright 2017 Chris Cornutt <ccornutt@phpdeveloper.org>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/README.md Added

@@ -0,0 +1,106 @@
+Yubikey PHP Library
+=======================
+
+!Travis-CI Build Status(https://secure.travis-ci.org/enygma/yubikey.png?branch=master)(http://travis-ci.org/enygma/yubikey)
+!Codacy Badge(https://www.codacy.com/project/badge/6b73c56a21734a6d93dae6019f733c5e)(https://www.codacy.com)
+!Code Climate(https://codeclimate.com/github/enygma/yubikey/badges/gpa.svg)(https://codeclimate.com/github/enygma/yubikey)
+!Total Downloads(https://img.shields.io/packagist/dt/enygma/yubikey.svg?style=flat-square)(https://packagist.org/packages/enygma/yubikey)
+
+This library lets you easily interface with the Yubico REST API for validating
+the codes created by the Yubikey.
+
+### Requirements:
+
+- An API as requested from the Yubico site
+- A client ID requested from Yubico
+- A Yubikey to test out the implementation
+
+### Installation
+
+Use the followng command to install the library via Composer:
+
+```
+composer require enygma/yubikey
+```
+
+### Usage:
+
+Look at the `test.php` example script to see how to use it. This can be executed like:
+
+`php test.php generated key`
+
+Example code:
+
+```php
+<?php
+$apiKey = 'dGVzdGluZzEyMzQ1Njc4OTA=';
+$clientId = '12345';
+
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey);
+
+echo ($response->success() === true) ? 'success!' : 'you failed. aw.';
+?>
+```
+
+### HTTP vs HTTPS
+
+By default the library will try to use a `HTTPS` request to the host given. If you need to disable this for some reason
+(like no SSL support), you can use the `setUseSecure` method and set it to false:
+
+```php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$v->setUseSecure(false);
+```
+
+### Overriding hosts
+
+The library comes with a set of hostnames for the Yubico external API servers (api.yubico.com through api5.yubico.com). If
+you ever have a need to override these, you can use `setHosts`:
+
+```php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$v->setHosts(array(
+    'api.myhost1.com',
+    'api1.myhost.com'
+));
+```
+Remember, this will *overwrite* the current hosts in the class, so be sure you don't still need those. If you just want to add
+another host, look at the `addHost` method.
+
+### Multi-Server Requests:
+
+Additonally, the library also supports simultaneous connections to multiple servers. By default it will only make
+the request to the first server in the `hosts` list. You can enable the multi-server checking with a second parameter on
+the `check()` method:
+
+```php
+<?php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey, true);
+
+echo ($response->success() === true) ? 'success!' : 'you failed. aw.';
+?>
+````
+
+This will make multiple requests and return the pass/fail status of the aggregate responses from each. So, if you have all but one
+server pass, the overall response will be a fail. If all return `OK` though, you're in the clear.
+
+### "First in" result
+
+Additionally, you can also switch on and off this aggregation of the results and go with only the "first in" response. You do this
+with a flag on the `success` checking method:
+
+```php
+<?php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey, true);
+
+echo ($response->success(true) === true) ? 'success!' : 'you failed. aw.';
+?>
+````
+
+**NOTE:** This will still work without multi-server checking. The "first in" will just always be the single response.
+
+
+@author Chris Cornutt <ccornutt@phpdeveloper.org>

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/composer.json Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/Client.php Added

@@ -0,0 +1,65 @@
+<?php
+namespace Yubikey;
+
+class Client
+{
+    /**
+     * Send the request(s) via curl
+     *
+     * @param  array|\Yukikey\RequestCollection $requests Set of \Yubikey\Request objects
+     * @return \Yubikey\ResponseCollection instance
+     */
+    public function send($requests)
+    {
+        if (get_class($requests) !== 'Yubikey\\RequestCollection') {
+            $requests = new \Yubikey\RequestCollection($requests);
+        }
+
+        $responses = $this->request($requests);
+        return $responses;
+    }
+
+    /**
+     * Make the request given the Request set and content
+     *
+     * @param \Yubikey\RequestCollection $requests Request collection
+     * @return \Yubikey\ResponseCollection instance
+     */
+    public function request(\Yubikey\RequestCollection $requests)
+    {
+        $responses = new \Yubikey\ResponseCollection();
+        $startTime = microtime(true);
+        $multi = curl_multi_init();
+        $curls = array();
+
+        foreach ($requests as $index => $request) {
+            $curls$index = curl_init();
+            curl_setopt_array($curls$index, array(
+                CURLOPT_URL => $request->getUrl(),
+                CURLOPT_HEADER => 0,
+                CURLOPT_RETURNTRANSFER => 1
+            ));
+            curl_multi_add_handle($multi, $curls$index);
+        }
+
+        do {
+            while ((curl_multi_exec($multi, $active)) == CURLM_CALL_MULTI_PERFORM);
+            while ($info = curl_multi_info_read($multi)) {
+                if ($info'result' == CURLE_OK) {
+                    $return = curl_multi_getcontent($info'handle');
+                    $cinfo = curl_getinfo($info'handle');
+                    $url = parse_url($cinfo'url');
+
+                    $response = new \Yubikey\Response(array(
+                        'host' => $url'host',
+                        'mt' => (microtime(true)-$startTime)
+                    ));
+                    $response->parse($return);
+                    $responses->add($response);
+                }
+            }
+        } while ($active);
+
+        return $responses;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/Request.php Added

@@ -0,0 +1,73 @@
+<?php
+
+namespace Yubikey;
+
+class Request
+{
+    /**
+     * Request HTTP type (verb)
+     * @var string
+     */
+    private $type = 'GET';
+
+    /**
+     * Request URL location
+     * @var string
+     */
+    private $url;
+
+    /**
+     * Init the object and set the URL if given
+     *
+     * @param string $url URL to request
+     */
+    public function __construct($url = null)
+    {
+        if ($url !== null) {
+            $this->setUrl($url);
+        }
+    }
+
+    /**
+     * Get the type of request
+     *
+     * @return string HTTP verb type
+     */
+    public function getType()
+    {
+        return $this->type;
+    }
+
+    /**
+     * Set the type of the request
+     *
+     * @param string $type HTTP verb type
+     */
+    public function setType($type)
+    {
+        $this->type = $type;
+    }
+
+    /**
+     * Get the current request URL location
+     *
+     * @return string URL location
+     */
+    public function getUrl()
+    {
+        return $this->url;
+    }
+
+    /**
+     * Set the URL location for the request
+     *
+     * @param string $url URL location
+     */
+    public function setUrl($url)
+    {
+        if (filter_var($url, FILTER_VALIDATE_URL) !== $url) {
+            throw new \Exception('Invalid URL: '.$url);
+        }
+        $this->url = $url;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/RequestCollection.php Added

@@ -0,0 +1,143 @@
+<?php
+
+namespace Yubikey;
+
+class RequestCollection implements \Countable, \Iterator, \ArrayAccess
+{
+    /**
+     * Set of \Yubikey\Request objects
+     * @var array
+     */
+    private $requests = array();
+
+    /**
+     * Current array position
+     * @var integer
+     */
+    private $position = 0;
+
+    /**
+     * Init the collection and set requests data if given
+     *
+     * @param array $requests Set of \Yubikey\Requests objects
+     */
+    public function __construct(array $requests = array())
+    {
+        if (!empty($requests)) {
+            foreach ($requests as $request) {
+                $this->add($request);
+            }
+        }
+    }
+
+    /**
+     * Add the given request to the set
+     *
+     * @param \Yubikey\Request $request Request object
+     */
+    public function add(\Yubikey\Request $request)
+    {
+        $this->requests = $request;
+    }
+
+    /**
+     * For Countable
+     *
+     * @return integer Count of current Requests
+     */
+    public function count()
+    {
+        return count($this->requests);
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return Current Request object
+     */
+    public function current()
+    {
+        return $this->requests$this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Current position in set
+     */
+    public function key()
+    {
+        return $this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Next positiion in set
+     */
+    public function next()
+    {
+        return ++$this->position;
+    }
+
+    /**
+     * For Iterator, rewind set location to beginning
+     */
+    public function rewind()
+    {
+        $this->position = 0;
+    }
+
+    /**
+     * For Iterator, check to see if set item is valid
+     *
+     * @return boolean Valid/invalid result
+     */
+    public function valid()
+    {
+        return isset($this->requests$this->position);
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset identifier
+     * @return boolean Found/not found result
+     */
+    public function offsetExists($offset)
+    {
+        return (isset($this->requests$offset));
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to locate
+     * @return \Yubikey\Request object if found
+     */
+    public function offsetGet($offset)
+    {
+        return $this->requests$offset;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to use in data set
+     * @param mixed $data Data to assign
+     */
+    public function offsetSet($offset, $data)
+    {
+        $this->requests$offset = $data;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to remove
+     */
+    public function offsetUnset($offset)
+    {
+        unset($this->requests$offset);
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/Response.php Added

@@ -0,0 +1,286 @@
+<?php
+
+namespace Yubikey;
+
+class Response
+{
+    /**
+     * Returned value of the hash given in the request
+     * @var string
+     */
+    private $h = null;
+
+    /**
+     * Timestamp in UTC of request
+     * @var string
+     */
+    private $t = null;
+
+    /**
+     * OTP given in request
+     * @var string
+     */
+    private $otp = null;
+
+    /**
+     * Nonce given in the request
+     * @var string
+     */
+    private $nonce = null;
+
+    /**
+     * Percent of validation servers that replied with "success" (0% - 100%)
+     * @var integer
+     */
+    private $sl = null;
+
+    /**
+     * Status of the response (see constants below)
+     * @var string
+     */
+    private $status = null;
+
+    /**
+     * OTP given by the user (used for verification)
+     * @var string
+     */
+    private $inputOtp = null;
+
+    /**
+     * Nonce used in the request (used for verification)
+     * @var string
+     */
+    private $inputNonce = null;
+
+    /**
+     * Timestamp returned from the response
+     * @var string
+     */
+    private $timestamp = null;
+
+    /**
+     * Session counter
+     * @var integer
+     */
+    private $sessioncounter = null;
+
+    /**
+     * Session use #
+     * @var integer
+     */
+    private $sessionuse = null;
+
+    /**
+     * Hostname request was made to
+     * @var string
+     */
+    private $host;
+
+    /**
+     * Microtime difference taken to get response
+     * @var integer
+     */
+    private $mt;
+
+    /**
+     * Define constants for the return status from API
+     */
+    const SUCCESS = 'OK';
+    const REPLAY_OTP = 'REPLAYED_OTP';
+    const REPLAY_REQUEST = 'REPLAYED_REQUEST';
+    const MISSING_PARAMETER = 'MISSING_PARAMETER';
+    const NO_CLIENT = 'NO_SUCH_CLIENT';
+    const BAD_OTP = 'BAD_OTP';
+    const BAD_SIGNATURE = 'BAD_SIGNATURE';
+    const OP_NOT_ALLOWED = 'OPERATION_NOT_ALLOWED';
+    const BACKEND_ERROR = 'BACKEND_ERROR';
+    const NOT_ENOUGH_ANSWERS = 'NOT_ENOUGH_ANSWERS';
+
+    /**
+     * Init the object and set the data into the response
+     *
+     * @param array $data Data from the Yubi API response
+     */
+    public function __construct($data = null)
+    {
+        if ($data !== null) {
+            $this->load($data);
+        }
+    }
+
+    /**
+     * Load the data into the object
+     *
+     * @param array $data Data from the object
+     * @return boolean True when loading is done
+     */
+    public function load($data)
+    {
+        foreach ($data as $index => $value) {
+            if (property_exists($this, $index)) {
+                $this->$index = trim($value);
+            }
+        }
+        return true;
+    }
+
+    /**
+     * Parse the return data from the request and
+     *     load it into the object properties
+     *
+     * @param string $data API return data
+     */
+    public function parse($data)
+    {
+        $result = array();
+        $parts = explode("\n", $data);
+
+        foreach($parts as $index => $part) {
+            $kv = explode("=", $part);
+            if (!empty($kv1)) {
+                $result$kv0 = $kv1;
+            }
+        }
+
+        $this->load($result);
+    }
+
+    /**
+     * Get the time value for the response
+     *
+     * @return string Date/time string
+     */
+    public function getTime()
+    {
+        return $this->t;
+    }
+
+    /**
+     * Return the time to execute (microtime)
+     *
+     * @return integer Time result
+     */
+    public function getMt()
+    {
+        return $this->mt;
+    }
+
+    /**
+     * Set the OTP used in the request
+     * @param string $otp OTP string (from key)
+     */
+    public function setInputOtp($otp)
+    {
+        $this->inputOtp = $otp;
+        return $this;
+    }
+
+    /**
+     * Get the OTP used in the request
+     * @return string OTP string
+     */
+    public function getInputOtp()
+    {
+        return $this->inputOtp;
+    }
+
+    /**
+     * Set the nonce used in the request
+     * @param string $nonce Nonce from request
+     */
+    public function setInputNonce($nonce)
+    {
+        $this->inputNonce = $nonce;
+        return $this;
+    }
+
+    /**
+     * Get the nonce used in the request
+     * @return string Nonce from request
+     */
+    public function getInputNonce()
+    {
+        return $this->inputNonce;
+    }
+
+    /**
+     * Set response hostname
+     * @param string $host Hostname
+     */
+    public function setHost($host)
+    {
+        $this->host = $host;
+        return $this;
+    }
+
+    /**
+     * Get the current hostname
+     * @return string
+     */
+    public function getHost()
+    {
+        return $this->host;
+    }
+
+    /**
+     * Get the hash from the response
+     *
+     * @param boolean $encode "Encode" the data (replace + with %2B)
+     * @return string Hash value
+     */
+    public function getHash($encode = false)
+    {
+        $hash = $this->h;
+        if (substr($hash, -1) !== '=') {
+            $hash .= '=';
+        }
+        if ($encode === true) {
+            $hash = str_replace('+', '%2B', $hash);
+        }
+        return $hash;
+    }
+
+    /**
+     * Get the properties of the response
+     *
+     * @return array Response property list
+     */
+    public function getProperties()
+    {
+        return array(
+            't', 'otp', 'nonce', 'sl', 'status',
+            'timestamp', 'sessioncounter', 'sessionuse'
+        );
+    }
+
+    /**
+     * Magic method to get access to the private properties
+     * @param string $name Property name
+     * @return string|null If found, returns teh value. If not, null
+     */
+    public function __get($name)
+    {
+        return (property_exists($this, $name)) ? $this->$name : null;
+    }
+
+    /**
+     * Check the success of the response
+     *     Validates: status, OTP and nonce
+     * @return boolean Success/fail of request
+     */
+    public function success()
+    {
+        $inputOtp = $this->getInputOtp();
+        $inputNonce = $this->getInputNonce();
+
+        if ($inputNonce === null || $inputOtp === null) {
+            return false;
+        }
+
+        return (
+            $inputOtp == $this->otp
+            && $inputNonce === $this->nonce
+            && $this->status === Response::SUCCESS
+        ) ? true : false;
+    }
+}

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/ResponseCollection.php Added

@@ -0,0 +1,172 @@
+<?php
+
+namespace Yubikey;
+
+class ResponseCollection implements \Countable, \Iterator, \ArrayAccess
+{
+    /**
+     * Set of \Yubikey\Response objects
+     * @var array
+     */
+    private $responses = array();
+
+    /**
+     * Position in the data set (for Iterator)
+     * @var integer
+     */
+    private $position = 0;
+
+    /**
+     * Init the object and set the Response objects if provided
+     *
+     * @param array $responses Response object set
+     */
+    public function __construct(array $responses = array())
+    {
+        if (!empty($responses)) {
+            foreach ($responses as $response) {
+                $this->add($response);
+            }
+        }
+    }
+
+    /**
+     * Determine, based on the Response status (success)
+     *     if the overall operation was successful
+     *
+     * @return boolean Success/fail status
+     */
+    public function success($first = false)
+    {
+        $success = false;
+        if ($first === true) {
+            // Sort them by timestamp, pop the first one and return pass/fail
+            usort($this->responses, function(\Yubikey\Response $r1, \Yubikey\Response $r2) {
+                return $r1->getMt() > $r2->getMt();
+            });
+            $response = $this->responses0;
+            return $response->success();
+        } else {
+            foreach ($this->responses as $response) {
+                if ($response->success() === false
+                    && $response->status !== Response::REPLAY_REQUEST) {
+                    return false;
+                } elseif ($response->success()) {
+                    $success = true;
+                }
+            }
+        }
+        return $success;
+    }
+
+    /**
+     * Add a new Response object to the set
+     *
+     * @param \Yubikey\Response $response Response object
+     */
+    public function add(\Yubikey\Response $response)
+    {
+        $this->responses = $response;
+    }
+
+        /**
+     * For Countable
+     *
+     * @return integer Count of current Requests
+     */
+    public function count()
+    {
+        return count($this->responses);
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return Current Request object
+     */
+    public function current()
+    {
+        return $this->responses$this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Current position in set
+     */
+    public function key()
+    {
+        return $this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Next positiion in set
+     */
+    public function next()
+    {
+        return ++$this->position;
+    }
+
+    /**
+     * For Iterator, rewind set location to beginning
+     */
+    public function rewind()
+    {
+        $this->position = 0;
+    }
+
+    /**
+     * For Iterator, check to see if set item is valid
+     *
+     * @return boolean Valid/invalid result
+     */
+    public function valid()
+    {
+        return isset($this->responses$this->position);
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset identifier
+     * @return boolean Found/not found result
+     */
+    public function offsetExists($offset)
+    {
+        return (isset($this->responses$offset));
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to locate
+     * @return \Yubikey\Request object if found
+     */
+    public function offsetGet($offset)
+    {
+        return $this->responses$offset;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to use in data set
+     * @param mixed $data Data to assign
+     */
+    public function offsetSet($offset, $data)
+    {
+        $this->responses$offset = $data;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to remove
+     */
+    public function offsetUnset($offset)
+    {
+        unset($this->responses$offset);
+    }
+}

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/Validate.php Added

@@ -0,0 +1,412 @@
+<?php
+
+namespace Yubikey;
+
+class Validate
+{
+    /**
+     * Yubico API hosts
+     * @var array
+     */
+    private $hosts = array(
+        'api.yubico.com',
+        'api2.yubico.com',
+        'api3.yubico.com',
+        'api4.yubico.com',
+        'api5.yubico.com'
+    );
+
+    /**
+     * Selected hosted for request
+     * @var string
+     */
+    private $host = null;
+
+    /**
+     * API given for request
+     * @var string
+     */
+    private $apiKey = null;
+
+    /**
+     * Use a secure/insecure connection (HTTPS vs HTTP)
+     * @var boolean
+     */
+    private $useSecure = true;
+
+    /**
+     * OTP provided by user
+     * @var string
+     */
+    private $otp = null;
+
+    /**
+     * Yubikey ID, to identify a connected user
+     * @var string
+     */
+    private $yubikeyid = null;
+
+    /**
+     * Init the object and set the API key, Client ID and optionally hosts
+     *
+     * @param string $apiKey API Key
+     * @param string $clientId Client ID
+     * @param array $hosts Set of hostnames (overwrites current)
+     * @throws \DomainException If curl is not enabled
+     */
+    public function __construct($apiKey, $clientId, array $hosts = array())
+    {
+        if ($this->checkCurlSupport() === false) {
+            throw new \DomainException('cURL support is required and is not enabled!');
+        }
+
+        $this->setApiKey($apiKey);
+        $this->setClientId($clientId);
+
+        if (!empty($hosts)) {
+            $this->setHosts($hosts);
+        }
+    }
+
+    /**
+     * Check for enabled curl support (requirement)
+     *
+     * @return boolean Enabled/not found flag
+     */
+    public function checkCurlSupport()
+    {
+        return (function_exists('curl_init'));
+    }
+
+    /**
+     * Get the currently set API key
+     *
+     * @return string API key
+     */
+    public function getApiKey($decoded = false)
+    {
+        return ($decoded === false) ? $this->apiKey : base64_decode($this->apiKey);
+    }
+
+    /**
+     * Set the API key
+     *
+     * @param string $apiKey API request key
+     */
+    public function setApiKey($apiKey)
+    {
+        $key = base64_decode($apiKey, true);
+        if ($key === false) {
+            throw new \InvalidArgumentException('Invalid API key');
+        }
+
+        $this->apiKey = $key;
+        return $this;
+    }
+
+    /**
+     * Set the OTP for the request
+     *
+     * @param string $otp One-time password
+     */
+    public function setOtp($otp)
+    {
+        $this->otp = $otp;
+        return $this;
+    }
+
+    /**
+     * Get the currently set OTP
+     *
+     * @return string One-time password
+     */
+    public function getOtp()
+    {
+        return $this->otp;
+    }
+
+    /**
+     * Get the current Client ID
+     *
+     * @return integer Client ID
+     */
+    public function getClientId()
+    {
+        return $this->clientId;
+    }
+
+    /**
+     * Set the current Client ID
+     *
+     * @param integer $clientId Client ID
+     */
+    public function setClientId($clientId)
+    {
+        $this->clientId = $clientId;
+        return $this;
+    }
+
+    /**
+     * Get the "use secure" setting
+     *
+     * @return boolean Use flag
+     */
+    public function getUseSecure()
+    {
+        return $this->useSecure;
+    }
+
+    /**
+     * Set the "use secure" setting
+     *
+     * @param boolean $use Use/don't use secure
+     * @throws \InvalidArgumentException when value is not boolean
+     */
+    public function setUseSecure($use)
+    {
+        if (!is_bool($use)) {
+            throw new \InvalidArgumentException('"Use secure" value must be boolean');
+        }
+        $this->useSecure = $use;
+        return $this;
+    }
+
+    /**
+     * Get the host for the request
+     *     If one is not set, it returns a random one from the host set
+     *
+     * @return string Hostname string
+     */
+    public function getHost()
+    {
+        if ($this->host === null) {
+            // pick a "random" host
+            $host = $this->hostsmt_rand(0,count($this->hosts)-1);
+            $this->setHost($host);
+            return $host;
+        } else {
+            return $this->host;
+        }
+    }
+
+    /**
+     * Get the current hosts list
+     *
+     * @return array Hosts list
+     */
+    public function getHosts()
+    {
+        return $this->hosts;
+    }
+
+    /**
+     * Set the API host for the request
+     *
+     * @param string $host Hostname
+     */
+    public function setHost($host)
+    {
+        $this->host = $host;
+        return $this;
+    }
+
+    /**
+     * Add a new host to the list
+     *
+     * @param string $host Hostname to add
+     */
+    public function addHost($host)
+    {
+        $this->hosts = $host;
+        return $this;
+    }
+
+    /**
+     * Set the hosts to request results from
+     *
+     * @param array $hosts Set of hostnames
+     */
+    public function setHosts(array $hosts)
+    {
+        $this->hosts = $hosts;
+    }
+
+    /**
+     * Geenrate the signature for the request values
+     *
+     * @param array $data Data for request
+     * @throws \InvalidArgumentException when API key is invalid
+     * @return Hashed request signature (string)
+     */
+    public function generateSignature($data, $key = null)
+    {
+        if ($key === null) {
+            $key = $this->getApiKey();
+            if ($key === null || empty($key)) {
+                throw new \InvalidArgumentException('Invalid API key!');
+            }
+        }
+
+        $query = http_build_query($data);
+        $query = utf8_encode(str_replace('%3A', ':', $query));
+
+        $hash = preg_replace(
+            '/\+/', '%2B',
+            // base64_encode(hash_hmac('sha1', http_build_query($data), $key, true))
+            base64_encode(hash_hmac('sha1', $query, $key, true))
+        );
+        return $hash;
+    }
+
+    /**
+     * Check the One-time Password with API request
+     *
+     * @param string $otp One-time password
+     * @param integer $clientId Client ID for API
+     * @throws \InvalidArgumentException when OTP length is invalid
+     * @return \Yubikey\Response object
+     */
+    public function check($otp, $multi = false)
+    {
+        $otp = trim($otp);
+        if (strlen($otp) < 32 || strlen($otp) > 48) {
+            throw new \InvalidArgumentException('Invalid OTP length');
+        }
+
+        $this->setOtp($otp);
+        $this->setYubikeyId();
+
+        $clientId = $this->getClientId();
+        if ($clientId === null) {
+            throw new \InvalidArgumentException('Client ID cannot be null');
+        }
+
+        $nonce = $this->generateNonce();
+        $params = array(
+            'id' => $clientId,
+            'otp' => $otp,
+            'nonce' => $nonce,
+            'timestamp' => '1'
+        );
+        ksort($params);
+
+        $url = '/wsapi/2.0/verify?'.http_build_query($params).'&h='.$this->generateSignature($params);
+        $hosts = ($multi === false) ? array(array_shift($this->hosts)) : $this->hosts;
+
+        return $this->request($url, $hosts, $otp, $nonce);
+    }
+
+    /**
+     * Generate a good nonce for the request
+     *
+     * @return string Generated hash
+     */
+    public function generateNonce()
+    {
+        if (function_exists('openssl_random_pseudo_bytes') === true) {
+            $hash = md5(openssl_random_pseudo_bytes(32));
+        } else {
+            $hash = md5(uniqid(mt_rand()));
+        }
+        return $hash;
+    }
+
+    /**
+     * Make the request(s) to the Yubi server(s)
+     *
+     * @param string $url URL for request
+     * @param array $hosts Set of hosts to request
+     * @param string $otp One-time password string
+     * @param string $nonce Generated nonce
+     * @return array Set of responses
+     */
+    public function request($url, array $hosts, $otp, $nonce)
+    {
+        $client = new \Yubikey\Client();
+        $pool = new \Yubikey\RequestCollection();
+
+        // Make the requests for the host(s)
+        $prefix = ($this->getUseSecure() === true) ? 'https' : 'http';
+        foreach ($hosts as $host) {
+            $link = $prefix.'://'.$host.$url;
+            $pool->add(new \Yubikey\Request($link));
+        }
+        $responses = $client->send($pool);
+        $responseCount = count($responses);
+
+        for ($i = 0; $i < $responseCount; $i++) {
+            $responses$i->setInputOtp($otp)->setInputNonce($nonce);
+
+            if ($this->validateResponseSignature($responses$i) === false) {
+                unset($responses$i);
+            }
+        }
+
+        return $responses;
+    }
+
+    /**
+     * Validate the signature on the response
+     *
+     * @param  \Yubikey\Response $response Response instance
+     * @return boolean Pass/fail status of signature validation
+     */
+    public function validateResponseSignature(\Yubikey\Response $response)
+    {
+        $params = array();
+        foreach ($response->getProperties() as $property) {
+            $value = $response->$property;
+            if ($value !== null) {
+                $params$property = $value;
+            }
+        }
+        ksort($params);
+
+        $signature = $this->generateSignature($params);
+        return $this->hash_equals($signature, $response->getHash(true));
+    }
+
+    /**
+     * Polyfill PHP 5.6.0's hash_equals() feature
+     */
+    public function hash_equals($a, $b)
+    {
+        if (\function_exists('hash_equals')) {
+            return \hash_equals($a, $b);
+        }
+        if (\strlen($a) !== \strlen($b)) {
+            return false;
+        }
+        $res = 0;
+        $len = \strlen($a);
+        for ($i = 0; $i < $len; ++$i) {
+            $res |= \ord($a$i) ^ \ord($b$i);
+        }
+        return $res === 0;
+    }
+
+    /**
+     * Extract the yubikey ID from the OTP
+     */
+    public function setYubikeyId()
+    {
+        $this->yubikeyid = substr($this->getOtp(), 0, -32);
+        return $this;
+    }
+
+    /**
+     * Get the yubikey ID from the OTP
+     *
+     * @param string Optional OTP to extract the ID from
+     *
+     * @return string Yubikey ID string
+     */
+    public function getYubikeyId($otp = '')
+    {
+      if (!empty($otp)) {
+        return substr($otp, 0, -32);
+      }
+
+      return $this->yubikeyid;
+    }
+}

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/test.php Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/tests Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/tests/ValidateTest.php Added

@@ -0,0 +1,179 @@
+<?php
+
+class ValidateTest extends \PHPUnit_Framework_TestCase
+{
+    private $validate = null;
+
+    private $apiKey = 'dGVzdGluZzEyMzQ1Njc4OTA=';
+
+    private $clientId = 12345;
+
+    public function setUp()
+    {
+        $this->validate = new \Yubikey\Validate($this->apiKey, $this->clientId);
+    }
+
+    /**
+     * Test the getter and setter for the API key
+     * @covers \Yubikey\Validate::setApiKey
+     * @covers \Yubikey\Validate::getApiKey
+     */
+    public function testGetSetApiKey()
+    {
+        $preKey = 'testing1234567890';
+        $key = base64_encode($preKey);
+
+        $this->validate->setApiKey($key);
+        $this->assertEquals($this->validate->getApiKey(), $preKey);
+    }
+
+    /**
+     * Test the setting of a non-base64 encoded API key
+     * @covers \Yubikey\Validate::setApiKey
+     * @expectedException \InvalidArgumentException
+     */
+    public function testSetInvalidApiKey()
+    {
+        $key = 'testing1234^%$#^#';
+        $this->validate->setApiKey($key);
+    }
+
+    /**
+     * Test the getter and setter for the One-time password
+     * @covers \Yubikey\Validate::setOtp
+     * @covers \Yubikey\Validate::getOtp
+     */
+    public function testGetSetOtp()
+    {
+        $otp = base64_encode('testing1234567890');
+
+        $this->validate->setOtp($otp);
+        $this->assertEquals($this->validate->getOtp(), $otp);
+    }
+
+    /**
+     * Test that the getter/setter for the Client ID works correctly
+     * @covers \Yubikey\Validate::getClientId
+     * @covers \Yubikey\Validate::setClientId
+     */
+    public function testGetSetClientId()
+    {
+        $clientId = 12345;
+
+        $this->validate->setClientId($clientId);
+        $this->assertEquals($clientId, $this->validate->getClientId());
+    }
+
+    /**
+     * Test thta the getter/setter for the "use secure" setting works correctly
+     * @covers \Yubikey\Validate::setUseSecure
+     * @covers \Yubikey\Validate::getUseSecure
+     */
+    public function testGetSetUseSecure()
+    {
+        $useSecure = true;
+
+        $this->validate->setUseSecure($useSecure);
+        $this->assertEquals($useSecure, $this->validate->getUseSecure());
+    }
+
+    /**
+     * Test that an exception is thrown when the "use secure" valus
+     *     is not boolean
+     *
+     * @expectedException \InvalidArgumentException
+     * @covers \Yubikey\Validate::setUseSecure
+     */
+    public function testSetUseSecureInvalid()
+    {
+        $useSecure = 'invalid';
+        $this->validate->setUseSecure($useSecure);
+    }
+
+    /**
+     * Test that the getter/setter for the host works correctly
+     * @covers \Yubikey\Validate::setHost
+     * @covers \Yubikey\Validate::getHost
+     */
+    public function testGetSetHost()
+    {
+        $host = 'test.foo.com';
+
+        $this->validate->setHost($host);
+        $this->assertEquals($this->validate->getHost(), $host);
+    }
+
+    /**
+     * Test that a valid random host is selected if none was previously set
+     * @covers \Yubikey\Validate::getHost
+     */
+    public function testGetRandomHost()
+    {
+        $host1 = $this->validate->getHost();
+        $this->assertNotEquals($host1, null);
+    }
+
+    /**
+     * Test that the signature generation is valid
+     * @covers \Yubikey\Validate::generateSignature
+     */
+    public function testSignatureGenerate()
+    {
+        $data = array('foo' => 'bar');
+        $key = $this->validate->getApiKey();
+        $hash = preg_replace(
+            '/\+/', '%2B',
+            base64_encode(hash_hmac('sha1', http_build_query($data), $key, true))
+        );
+
+        $signature = $this->validate->generateSignature($data);
+        $this->assertEquals($hash, $signature);
+    }
+
+    /**
+     * Test that an exception is thrown when the API is invalid (null or empty)
+     * @covers \Yubikey\Validate::generateSignature
+     * @expectedException \InvalidArgumentException
+     */
+    public function testSignatureGenerateNoApiKey()
+    {
+        $key = null;
+        $data = array('foo' => 'bar');
+        $validate = new \Yubikey\Validate($key, $this->clientId);
+        $hash = preg_replace(
+            '/\+/', '%2B',
+            base64_encode(hash_hmac('sha1', http_build_query($data), $key, true))
+        );
+
+        $signature = $validate->generateSignature($data);
+    }
+
+    /**
+     * Add a new Host to the list
+     * @covers \Yubikey\Validate::addHost
+     */
+    public function testAddNewHost()
+    {
+        $this->validate->addHost('test.com');
+        $this->assertTrue(
+            in_array('test.com', $this->validate->getHosts())
+        );
+    }
+
+    /**
+     * Set the new Hosts list (override)
+     * @covers \Yubikey\Validate::setHosts
+     * @covers \Yubikey\Validate::getHosts
+     */
+    public function testSetHosts()
+    {
+        $hosts = array('foo.com');
+        $this->validate->setHosts($hosts);
+
+        $this->assertEquals(
+            $this->validate->getHosts(),
+            $hosts
+        );
+    }
+}
+

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/tests/bootstrap.php Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/tests/phpunit.xml Added

roundcubemail-1.5.3.tar.gz/vendor/phpstan/phpstan/phpstan.phar -> roundcubemail-1.5.tar.gz/vendor/phpstan/phpstan/phpstan.phar Changed

roundcubemail-1.5.3.tar.gz/vendor/phpstan/phpstan/phpstan.phar.asc -> roundcubemail-1.5.tar.gz/vendor/phpstan/phpstan/phpstan.phar.asc Changed

@@ -1,16 +1,16 @@
 -----BEGIN PGP SIGNATURE-----
 
-iQIzBAABCgAdFiEEynwsejDI6OEnSoR2UcZzBf/C5cAFAmRaZmcACgkQUcZzBf/C
-5cAn/Q//fbWiR/qaSvlHpk73KH7iDfoHwNvRrHSQODZdMa4PGiEbL+SXsKnRxFDo
-kEJZwgU5qi3WMflt7Ml3dYDlQDgoDerdaiySYFoBcv1NXDWKoF7+Egy1AHxpfNq+
-FMCkZNR2ulSaYUCofM4GkTNap4yVkPCy289ZU6yUmRnJxF+hh/CFfdVPAPbwh/a6
-UqV3R2ENJZSbtA1pzSTBpUPQGQ9qcsqngKyNyxk1hEd9opdMg2eSFvO1e1ZZm/Tk
-Kgh5wCbsbSJuRPGO4vbiybTeO/qXPDlHV6oA5SHnjJ4H24phCsHdyJHHvLQmrUeR
-BKHgnH1y/b5J9cgr9OgEQJK9TMHHd6dii9//Qp+0rUZIDZ4Ym2lDSA/Vn/D9GoV3
-zo4QYzW3TvE3QMdnLcX/ZtaLliPdDYIaYUXOiyaYwLFGVxSWZWOC5IN0G0bLJb39
-Ca/z839nkWdMqg68q/oHC2Nk/v/KZnKg1RlRjYhj53T6nr0JDEiaYMyETSOIFsVX
-AcCQnLLwMndUAibJAyORDnTk+ipg0SecFoPvvhea1BtlTfhSDIlrT4OPKZ5nExzd
-nR/zGbIH8lCvsBc+hq+Kgodtfs5nauwEOwlVUwet26xL1YKOd0jxz+Zp6tgk0wba
-cMf5L9fm85j83DQYr7Ukaaj81kmMujRWDo/dRojKhUlJUrNnjXA=
-=jTtX
+iQIzBAABCgAdFiEEynwsejDI6OEnSoR2UcZzBf/C5cAFAmSA/fQACgkQUcZzBf/C
+5cCwLA/+K91IrL7ggTr2A/gptErLu05s1wUZ0meZfNi+457tcWsspaI67gSiqxIH
+cypjMFL7gvwedB9dxJct+e0HmhYbkyjQJgqadOYHiqiG0LVdxRnd6X2ZIoargOUw
+V4J4+3Avdfp00kUMUoLh1cczSlriT8rrUA7wFahfIalgT2vw7ZxbjusbAgI7cA5Z
+P6T933/Q+mSUd2HN1iZ/kyNxtGhyqb3ZiuW+Cs0lnz2ojhvg79lsmDrEF1LRyRg7
+Nsn1paL4Uivo8lTheLOVtjLS1G/4Rk3ZJjyuJDnuyI3BMwpD1cLizW+6bs9ydHCx
+pbSticFoEbaSqnKeXOrqS9ci8QnC8zHVYdYi+yBI76Cf9LvORd90TC+sApxm6vC/
+66jOuHxrkX85enRgS1e7pxSJjDl6XdW+hdAAgp0BAI48Ec++X4EE5IY5+N465c4K
+TJ/xjco+e4TSG7RMCaq+USuSXF1vM+ZDKU+TtmkH8oH8gwAYLvd2Kpki0DCMrt3q
+rxrKkbzFt6q8rNhUPTHNxQkMhpkzd1yTDEpQVs1XjVxwpYDgH2NdcaSblid71t8v
+jZCtcgl4AwnONCR4zVckGcz6c98dpX39T/Ru560GUdJeXE3YL4Y3HXTyvDUsCXZB
++ovYyPKsxYXJu2XcT26Am8nXPLen2bZ3O4DECRlB4C7RVvWd55g=
+=1LOo
 -----END PGP SIGNATURE-----

roundcubemail-1.5.tar.gz/vendor/spomky-labs Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/.scrutinizer.yml Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/.travis.yml Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/LICENCE Added

@@ -0,0 +1,20 @@
+The MIT License (MIT)
+
+Copyright (c) 2014 Florent Morselli
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/README.md Added

@@ -0,0 +1,61 @@
+# TOTP / HOTP library in PHP #
+
+!Scrutinizer Quality Score(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/badges/quality-score.png?s=a184d180414b30764d19b421a12d6cf7e9e5e7c2)(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/)
+!Code Coverage(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/badges/coverage.png?s=d1bd1b26b56e581d6a4d1deb87eaadc51a05f31d)(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/)
+
+!Build Status(https://travis-ci.org/Spomky-Labs/otphp.svg?branch=master)(https://travis-ci.org/Spomky-Labs/otphp)
+!HHVM Status(http://hhvm.h4cc.de/badge/Spomky-Labs/otphp.png)(http://hhvm.h4cc.de/package/Spomky-Labs/otphp)
+!PHP 7 ready(http://php7ready.timesplinter.ch/Spomky-Labs/otphp/badge.svg)(https://travis-ci.org/Spomky-Labs/otphp)
+
+!SensioLabsInsight(https://insight.sensiolabs.com/projects/49e5925d-0dd8-4b89-a215-5eb33b4d96d9/big.png)(https://insight.sensiolabs.com/projects/49e5925d-0dd8-4b89-a215-5eb33b4d96d9)
+
+!Latest Stable Version(https://poser.pugx.org/spomky-labs/otphp/v/stable.png)(https://packagist.org/packages/spomky-labs/otphp) !Total Downloads(https://poser.pugx.org/spomky-labs/otphp/downloads.png)(https://packagist.org/packages/spomky-labs/otphp) !Latest Unstable Version(https://poser.pugx.org/spomky-labs/otphp/v/unstable.png)(https://packagist.org/packages/spomky-labs/otphp) !License(https://poser.pugx.org/spomky-labs/otphp/license.png)(https://packagist.org/packages/spomky-labs/otphp)
+
+A php library for generating one time passwords according to  RFC 4226 (http://tools.ietf.org/html/rfc4226) (HOTP Algorithm) and the  RFC 6238 (http://tools.ietf.org/html/rfc6238) (TOTP Algorithm)
+
+This library is compatible with Google Authenticator apps available for Android and iPhone. It is also compatible with other applications such as FreeOTP(https://play.google.com/store/apps/details?id=org.fedorahosted.freeotp) for example.
+
+This is a fork of https://github.com/lelag/otphp with the following changes:
+
+* Continuous unit and functional tests using Travis-CI
+* 100% test coverage
+* Code Quality improvement
+* Better namespace usage
+* Issuer support
+* Window support
+* Completely abstract objects
+
+## The Release Process
+
+The release process is described here(doc/Release.md).
+
+## Prerequisites
+
+This library needs at least `PHP 5.3`.
+It has been successfully tested using `PHP 5.3` to `PHP 5.6`, `PHP 7` and `HHVM`
+
+## Installation
+
+The preferred way to install this library is to rely on Composer:
+
+```sh
+composer require "spomky-labs/otphp" "~5.0.0"
+```
+
+## Extend the library
+
+This library only contains the logic. You must extend all classes to define setters and getters.
+
+Look at Extend classes(doc/Extend.md) for more information and examples.
+
+## How to use
+
+Your classes are ready to use? Have a look at How to use(doc/Use.md) to generate your first OTP.
+
+## Contributing
+
+Requests for new features, bug fixed and all other ideas to make this library useful are welcome. Please follow these best practices(doc/Contributing.md).
+
+## Licence
+
+This software is release under MIT licence(LICENSE).

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/composer.json Added

@@ -0,0 +1,38 @@
+{
+    "name": "spomky-labs/otphp",
+    "type": "library",
+    "description": "PHP OTP Library compatible with Google Authenticator",
+    "license": "MIT",
+    "keywords": "otp", "hotp", "totp", "RFC 4226", "RFC 6238",
+    "homepage": "https://github.com/Spomky-Labs/otphp",
+    "authors": 
+        {
+            "name": "Florent Morselli",
+            "homepage": "https://github.com/Spomky"
+        },
+        {
+            "name": "All contributors",
+            "homepage": "https://github.com/Spomky-Labs/otphp/contributors"
+        }
+    ,
+    "require": {
+        "php": ">=5.3.2",
+        "christian-riesen/base32": "~1.1"
+    },
+    "require-dev": {
+        "phpunit/phpunit": "~4.0"
+    },
+    "suggest": {
+    },
+    "autoload": {
+        "psr-4": { "OTPHP\\": "lib/" }
+    },
+    "autoload-dev": {
+        "psr-4": { "MyProject\\": "examples/" }
+    },
+    "extra": {
+        "branch-alias": {
+            "dev-master": "5.0.x-dev"
+        }
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/doc Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/doc/Contributing.md Added

@@ -0,0 +1,26 @@
+Contributing
+=============================
+
+First of all, **thank you** for contributing.
+
+Bugs or feature requests can be posted online on the GitHub issues section of the project.
+
+Few rules to ease code reviews and merges:
+
+- You MUST follow the PSR-1(http://www.php-fig.org/psr/psr-1/), PSR-2(http://www.php-fig.org/psr/psr-2/) and PSR-4(http://www.php-fig.org/psr/psr-4/).
+- You MUST run the test suite.
+- You MUST write (or update) unit tests when bugs are fixed or features are added.
+- You SHOULD write documentation.
+
+We use Git-Flow(http://jeffkreeftmeijer.com/2010/why-arent-you-using-git-flow/) to automate our git branching workflow.
+
+To contribute use Pull Requests(https://help.github.com/articles/using-pull-requests), please, write commit messages that make sense, and rebase your branch before submitting your PR.
+
+May be asked to squash your commits too. This is used to "clean" your Pull Request before merging it, avoiding commits such as fix tests, fix 2, fix 3, etc.
+
+Run test suite
+------------
+
+* install composer: `curl -s http://getcomposer.org/installer | php`
+* install dependencies: `php composer.phar install`
+* run tests: `vendor/bin/phpunit`

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/doc/Extend.md Added

@@ -0,0 +1,331 @@
+# Extending all classes
+
+## Description of classes
+
+This library has three abstract classes:
+
+* OTP: the base of all OTP classes
+* TOTP: Time Based OTP
+* HOTP: Counter Based OTP
+
+## OTP Class
+
+The all classes must implement the following methods:
+
+* ```public functon getLabel();```
+* ```public functon getIssuer();```
+* ```public functon isIssuerIncludedAsParameter();```
+* ```public functon getDigits();```
+* ```public functon getDigest();```
+
+If you wand to extend
+
+* TOTP Class, you must also implement ```public functon getInterval();```.
+* HOTP Class, you must also implement ```public functon getCounter();``` and ```protected functon updateCounter($counter);```.
+
+## Implementation
+
+### TOTP Class
+
+The following class is a possible implementation of the TOTP Class:
+
+```php
+<?php
+
+namespace MyProject;
+
+use OTPHP\TOTP as BaseTOTP;
+
+class TOTP extends BaseTOTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+    protected $interval = 30;
+
+    public function setSecret($secret)
+    {
+        //You must check that the secret is a valid Base32 string
+        $this->secret = $secret;
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception("Label must not contain a semi-colon.");
+        }
+        $this->label = $label;
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception("Issuer must not contain a semi-colon.");
+        }
+        $this->issuer = $issuer;
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if( !is_numeric($digits) || $digits < 1 ) {
+            throw new \Exception("Digits must be at least 1.");
+        }
+        $this->digits = $digits;
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if( !in_array($digest, array('md5', 'sha1', 'sha256', 'sha512')) ) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    public function setInterval($interval)
+    {
+        if( !is_integer($interval) || $interval < 1 ) {
+            throw new \Exception("Interval must be at least 1.");
+        }
+        $this->interval = $interval;
+        return $this;
+    }
+
+    public function getInterval()
+    {
+        return $this->interval;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}
+```
+
+This this class, you can easily create a TOTP object:
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setSecret('JDDK4U6G3BJLEZ7Y');
+```
+
+Your object is ready to use.
+You can also change all options:
+
+```php
+$totp->setLabel('foo@bar.baz')
+     ->setIssuer('My Project')
+     ->setDigits(4)
+     ->setDigest('sha512')
+     ->setInterval(60);
+```
+
+
+### HOTP Class
+
+The following class is a possible implementation of the HOTP Class:
+
+```php
+<?php
+
+namespace MyProject;
+
+use OTPHP\HOTP as BaseHOTP;
+
+class HOTP extends BaseHOTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+    protected $counter = 0;
+
+    public function setSecret($secret)
+    {
+        //You must check that the secret is a valid Base32 string
+        $this->secret = $secret;
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception("Label must not contain a semi-colon.");
+        }
+        $this->label = $label;
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception("Issuer must not contain a semi-colon.");
+        }
+        $this->issuer = $issuer;
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if( !is_numeric($digits) || $digits < 1 ) {
+            throw new \Exception("Digits must be at least 1.");
+        }
+        $this->digits = $digits;
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if( !in_array($digest, array('md5', 'sha1', 'sha256', 'sha512')) ) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    public function setCounter($counter)
+    {
+        if( !is_integer($counter) || $counter < 0 ) {
+            throw new \Exception("Counter must be at least 0.");
+        }
+        $this->counter = $counter;
+        return $this;
+    }
+
+    public function getCounter()
+    {
+        return $this->counter;
+    }
+
+    public function updateCounter($counter)
+    {
+        $this->counter = $counter;
+        return $this;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}
+```
+
+This this class, you can easily create a HOTP object:
+
+```php
+<?php
+use MyProject\HOTP;
+
+$hotp = new HOTP;
+$hotp->setSecret('JDDK4U6G3BJLEZ7Y');
+```
+
+Your object is ready to use.
+You can also change all options:
+
+```php
+$hotp->setLabel('foo@bar.baz')
+     ->setIssuer('My Project')
+     ->setDigits(4)
+     ->setDigest('sha512')
+     ->setCounter(100);
+```

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/doc/Release.md Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/doc/Use.md Added

@@ -0,0 +1,131 @@
+# How to Use
+
+## Common methods
+
+TOTP and HOTP objects have the following common methods:
+
+* ```public function at($input);```: generate an OTP at the specified counter
+* ```public function verify($otp, $input, $window);```: verify if the OTP is valid for the specified input (timestamp, counter...)
+* ```public function getProvisioningUri()```: return a provisioning URI to ease integration in applications
+
+Example:
+
+```php
+$my_otp_object->at(1000); //e.g. will return 123456
+$my_otp_object->verify(123456, 1000); //Will return true
+$my_otp_object->verify(123456, 1001); //Will return false
+```
+
+## Counter Based OTP (HOTP)
+
+### The window parameter
+
+The `windows` parameter will try all OTP within a window of counters.
+
+By default, this value is `null`. It means that the OTP will be tested at the exact counter.
+
+If the parameter is an integer, the OTP from `counter` to `counter+window` will be tested.
+For example, if the `counter`is `1000` and the window `10`, the OTP tested are within `1000` and `1010`.
+
+```php
+$my_otp_object->verify(123456, 999); //Will return false
+$my_otp_object->verify(123456, 999, 10); //Will return true (1000 is tested)
+```
+
+If the verification succeed, the counter will be updated.
+
+## Time Based OTP (TOTP)
+
+This OTP object has a specific method:
+
+* ```public function now()```: return an OTP at the current timestamp
+
+Example:
+
+```php
+$my_otp_object->now(); //e.g. will return 123456
+$my_otp_object->verify(123456); //Will return true.
+```
+    
+After the interval defined by the object:
+
+```php
+$my_otp_object->verify(123456); //Will return false
+```
+
+### The window parameter
+
+The `windows` parameter will try all OTP within a window of timestamps.
+
+By default, this value is `null`. It means that the OTP will be tested at the exact timestamp.
+If the parameter is an integer, the OTP before and after the timestamp will be tested.
+
+The window of timestamps goes from `- $window * interval + timestamp` to `+ $window * interval + timestamp`. For example, if the `window`is `5`, the interval `30` and the timestamp `600`, the OTP tested are within `450` and `750`.
+
+### Google Authenticator Compatible
+
+The library works with the Google Authenticator iPhone and Android app, and also
+includes the ability to generate provisioning URI's for use with the QR Code scanner
+built into the app.
+
+Google only supports SHA-1 digest algorithm, 30 second interval and 6 digits OTP. Other values for these parameters are ignored by the Google Authenticator application.
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(6)
+     ->setDigest('sha1')
+     ->setInterval(30)
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+$totp->getProvisioningUri(); // => 'otpauth://totp/alice%40google.com?secret=JBSWY3DPEHPK3PXP'
+```
+
+### Working examples
+
+#### Compatible with Google Authenticator
+
+Scan the following barcode with your phone, using Google Authenticator
+
+!QR Code for OTP(http://chart.apis.google.com/chart?cht=qr&chs=250x250&chl=otpauth%3A%2F%2Ftotp%2FMy%2520Big%2520Compagny%3Aalice%2540google.com%3Fsecret%3DJBSWY3DPEHPK3PXP%26issuer%3DMy%2520Big%2520Compagny)
+
+Now run the following and compare the output
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(6)
+     ->setDigest('sha1')
+     ->setInterval(30);
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+echo "Current OTP: ". $totp->now();
+```
+
+#### Not Compatible with Google Authenticator
+
+The following barcode will not work with Google Authenticator because digest algoritm is not SHA-1, there are 8 digits and counter is not 30 seconds.
+
+!QR Code for OTP(http://chart.apis.google.com/chart?cht=qr&chs=250x250&chl=otpauth%3A%2F%2Ftotp%2FMy%2520Big%2520Compagny%3Aalice%2540google.com%3Falgorithm%3Dsha512%26digits%3D8%26period%3D10%26secret%3DJBSWY3DPEHPK3PXP%26issuer%3DMy%2520Big%2520Compagny)
+
+Now run the following and compare the output
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(8)
+     ->setDigest('sha512')
+     ->setInterval(10)
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+echo "Current OTP: ". $totp->now();
+```

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/examples Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/examples/HOTP.php Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/examples/OTP.php Added

@@ -0,0 +1,109 @@
+<?php
+
+namespace MyProject;
+
+trait OTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+
+    public function setSecret($secret)
+    {
+        $this->secret = $secret;
+
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception('Label must not contain a semi-colon.');
+        }
+        $this->label = $label;
+
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception('Issuer must not contain a semi-colon.');
+        }
+        $this->issuer = $issuer;
+
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if (!is_numeric($digits) || $digits < 1) {
+            throw new \Exception('Digits must be at least 1.');
+        }
+        $this->digits = $digits;
+
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if (!in_array($digest, array('md5', 'sha1', 'sha256', 'sha512'))) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/examples/TOTP.php Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/examples/examples.php Added

@@ -0,0 +1,45 @@
+<?php
+
+require_once implode(DIRECTORY_SEPARATOR, array(__DIR__, '..', 'vendor', 'autoload.php'));
+
+use MyProject\TOTP;
+use MyProject\HOTP;
+use Base32\Base32;
+
+$secret = trim(Base32::encode(uniqid('', true)), '=');
+
+$totp = new TOTP();
+
+$totp->setSecret($secret)
+     ->setDigest('sha256')
+     ->setDigits(8)
+     ->setLabel('alice@localhost')
+     ->setIssuer('MyProject')
+     ->setInterval(60)
+     ->setIssuerIncludedAsParameter(true);
+
+$hotp = new HOTP();
+
+$hotp->setSecret($secret)
+    ->setDigest('sha512')
+    ->setDigits(5)
+    ->setLabel('alice@localhost')
+    ->setIssuer('MyProject')
+    ->setCounter(1000)
+    ->setIssuerIncludedAsParameter(true);
+
+printf(str_repeat('=', 50)."\r\n");
+printf("Time Based On-time password\r\n");
+printf(str_repeat('=', 50)."\r\n");
+printf("Secret is %s\r\n", $secret);
+printf("TOTP provisioning URI is %s\r\n", $totp->getProvisioningUri());
+printf("Current code is %s\r\n", $totp->now());
+
+printf(str_repeat("\r\n", 3));
+
+printf(str_repeat('=', 50)."\r\n");
+printf("Counter Based On-time password\r\n");
+printf(str_repeat('=', 50)."\r\n");
+printf("Secret is %s\r\n", $secret);
+printf("TOTP provisioning URI is %s\r\n", $hotp->getProvisioningUri());
+printf("Current code is %s\r\n", $hotp->at(1010));

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/HOTP.php Added

@@ -0,0 +1,44 @@
+<?php
+
+namespace OTPHP;
+
+abstract class HOTP extends OTP implements HOTPInterface
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function getProvisioningUri($google_compatible = true)
+    {
+        return $this->generateURI('hotp', array('counter' => $this->getCounter()), $google_compatible);
+    }
+
+    /**
+     * @param int $counter The new initial counter (a positive integer)
+     */
+    abstract protected function updateCounter($counter);
+
+    /**
+     * {@inheritdoc}
+     */
+    public function verify($otp, $counter, $window = null)
+    {
+        if ($counter < $this->getCounter()) {
+            return false;
+        }
+
+        if (!is_integer($window)) {
+            $window = 0;
+        }
+        $window = abs($window);
+
+        for ($i = $counter; $i <= $counter + $window; ++$i) {
+            if ($otp === $this->at($i)) {
+                $this->updateCounter($i + 1);
+
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/HOTPInterface.php Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/OTP.php Added

@@ -0,0 +1,146 @@
+<?php
+
+namespace OTPHP;
+
+use Base32\Base32;
+
+abstract class OTP implements OTPInterface
+{
+    /**
+     * @param int $input
+     *
+     * @return string The OTP at the specified input
+     */
+    protected function generateOTP($input)
+    {
+        $hash = hash_hmac($this->getDigest(), $this->intToByteString($input), $this->getDecodedSecret());
+        $hmac = array();
+        foreach (str_split($hash, 2) as $hex) {
+            $hmac = hexdec($hex);
+        }
+        $offset = $hmaccount($hmac) - 1 & 0xF;
+        $code = ($hmac$offset + 0 & 0x7F) << 24 |
+            ($hmac$offset + 1 & 0xFF) << 16 |
+            ($hmac$offset + 2 & 0xFF) << 8 |
+            ($hmac$offset + 3 & 0xFF);
+
+        $otp = $code % pow(10, $this->getDigits());
+
+        return str_pad((string) $otp, $this->getDigits(), '0', STR_PAD_LEFT);
+    }
+
+    /**
+     * @return bool Return true is it must be included as parameter, else false
+     */
+    protected function issuerAsParameter()
+    {
+        if (!is_null($this->getIssuer()) && $this->isIssuerIncludedAsParameter() === true) {
+            return true;
+        }
+
+        return false;
+    }
+
+    /**
+     * @throws \InvalidArgumentException
+     *
+     * @return array
+     */
+    private function getParameters()
+    {
+        $options = array(
+            'algorithm' => $this->getDigest(),
+            'digits' => $this->getDigits(),
+            'secret' => $this->getSecret(),
+        );
+        if ($this->issuerAsParameter()) {
+            $options'issuer' = $this->getIssuer();
+        }
+
+        return $options;
+    }
+
+    /**
+     * @param array $options
+     * @param bool  $google_compatible
+     */
+    protected function filterOptions(array &$options, $google_compatible)
+    {
+        if (true === $google_compatible) {
+            foreach (array('algorithm' => 'sha1', 'period' => 30, 'digits' => 6) as $key => $default) {
+                if (isset($options$key) && $default === $options$key) {
+                    unset($options$key);
+                }
+            }
+        }
+
+        ksort($options);
+    }
+
+    /**
+     * @param       $type
+     * @param array $options
+     * @param       $google_compatible
+     *
+     * @return string
+     *
+     * @throws \InvalidArgumentException
+     */
+    protected function generateURI($type, array $options = array(), $google_compatible)
+    {
+        if (is_null($this->getLabel())) {
+            throw new \InvalidArgumentException('No label defined.');
+        }
+        $options = array_merge($options, $this->getParameters());
+        $this->filterOptions($options, $google_compatible);
+
+        $params = str_replace(
+            array('+', '%7E'),
+            array('%20', '~'),
+            http_build_query($options)
+        );
+
+        return sprintf(
+            'otpauth://%s/%s?%s',
+            $type,
+            rawurlencode((!is_null($this->getIssuer()) ? $this->getIssuer().':' : '').$this->getLabel()),
+            $params
+        );
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function at($input)
+    {
+        return $this->generateOTP($input);
+    }
+
+    /**
+     * @return string
+     *
+     * @throws \InvalidArgumentException
+     */
+    private function getDecodedSecret()
+    {
+        $secret = Base32::decode($this->getSecret());
+
+        return $secret;
+    }
+
+    /**
+     * @param int $int
+     *
+     * @return string
+     */
+    private function intToByteString($int)
+    {
+        $result = array();
+        while (0 !== $int) {
+            $result = chr($int & 0xFF);
+            $int >>= 8;
+        }
+
+        return str_pad(implode(array_reverse($result)), 8, "\000", STR_PAD_LEFT);
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/OTPInterface.php Added

@@ -0,0 +1,61 @@
+<?php
+
+namespace OTPHP;
+
+interface OTPInterface
+{
+    /**
+     * @param int $input
+     *
+     * @return string Return the OTP at the specified input
+     */
+    public function at($input);
+
+    /**
+     * Verify that the OTP is valid with the specified input.
+     *
+     * @param string   $otp
+     * @param int      $input
+     * @param int|null $window
+     *
+     * @return bool
+     */
+    public function verify($otp, $input, $window = null);
+
+    /**
+     * @return string The secret of the OTP
+     */
+    public function getSecret();
+
+    /**
+     * @return string The label of the OTP
+     */
+    public function getLabel();
+
+    /**
+     * @return string The issuer
+     */
+    public function getIssuer();
+
+    /**
+     * @return bool If true, the issuer will be added as a parameter in the provisioning URI
+     */
+    public function isIssuerIncludedAsParameter();
+
+    /**
+     * @return int Number of digits in the OTP
+     */
+    public function getDigits();
+
+    /**
+     * @return string Digest algorithm used to calculate the OTP. Possible values are 'md5', 'sha1', 'sha256' and 'sha512'
+     */
+    public function getDigest();
+
+    /**
+     * @param bool $google_compatible If true (default), will produce provisioning URI compatible with Google Authenticator. Only applicable if algorithm="sha1", period=30 and digits=6.
+     *
+     * @return string Get the provisioning URI
+     */
+    public function getProvisioningUri($google_compatible = true);
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/TOTP.php Added

@@ -0,0 +1,68 @@
+<?php
+
+namespace OTPHP;
+
+abstract class TOTP extends OTP implements TOTPInterface
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function at($timestamp)
+    {
+        return $this->generateOTP($this->timecode($timestamp));
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function now()
+    {
+        return $this->at(time());
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function verify($otp, $timestamp = null, $window = null)
+    {
+        if (is_null($timestamp)) {
+            $timestamp = time();
+        }
+
+        if (!is_integer($window)) {
+            return $otp === $this->at($timestamp);
+        }
+        $window = abs($window);
+
+        for ($i = -$window; $i <= $window; ++$i) {
+            if ($otp === $this->at($i * $this->getInterval() + $timestamp)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getProvisioningUri($google_compatible = true)
+    {
+        $params = array();
+        if (true !== $google_compatible || 30 !== $this->getInterval()) {
+            $params = array('period' => $this->getInterval());
+        }
+
+        return $this->generateURI('totp', $params, $google_compatible);
+    }
+
+    /**
+     * @param int $timestamp
+     *
+     * @return int
+     */
+    private function timecode($timestamp)
+    {
+        return (int) ((((int) $timestamp * 1000) / ($this->getInterval() * 1000)));
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/TOTPInterface.php Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/phpunit.xml.dist Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/tests Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/tests/HOTPTest.php Added

@@ -0,0 +1,144 @@
+<?php
+
+class HOTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGetProvisioningUri()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->expects($this->any())
+            ->method('getCounter')
+            ->will($this->returnValue(1000));
+
+        $otp->expects($this->never())
+            ->method('updateCounter');
+
+        $this->assertEquals('otpauth://hotp/My%20Project%3Aalice%40foo.bar?counter=1000&digits=8&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    public function testVerifyCounterInvalid()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->expects($this->any())
+            ->method('getCounter')
+            ->will($this->returnValue(1000));
+
+        $otp->expects($this->never())
+            ->method('updateCounter');
+
+        $this->assertFalse($otp->verify(0, 100));
+    }
+
+    public function testVerifyCounterChanged()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->method('getCounter')
+            ->will($this->onConsecutiveCalls(1000, 1100, 1100));
+
+        $otp->expects($this->once())
+            ->method('updateCounter')
+            ->with(1101);
+
+        $this->assertTrue($otp->verify('98449994', 1100));
+        $this->assertFalse($otp->verify('11111111', 1099));
+    }
+
+    public function testVerifyValidInWindow()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $this->assertTrue($otp->verify('59647237', 1000, 50));
+        $this->assertFalse($otp->verify('51642065', 1000, 50));
+        $this->assertTrue($otp->verify('51642065', 1000, 100));
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/tests/OTPTest.php Added

@@ -0,0 +1,92 @@
+<?php
+
+class OTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGenerateOtpAt()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->setMethods(array('verify', 'getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getProvisioningUri'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(6));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $this->assertEquals('855783', $otp->at(0));
+        $this->assertEquals('549607', $otp->at(500));
+        $this->assertEquals('654666', $otp->at(1500));
+    }
+
+    /**
+     * @expectedException Exception
+     */
+    public function testGenerateUriWithoutLabel()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->getMock();
+
+        $method = self::getMethod('generateURI');
+
+        $method->invokeArgs($otp, array('test', array(), true));
+    }
+
+    public function testGenerateUriWithValidLabel()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->setMethods(array('verify', 'getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getProvisioningUri'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $method = self::getMethod('generateURI');
+
+        $this->assertEquals('otpauth://test/alice%40foo.bar?secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+        $this->assertEquals('otpauth://test/alice%40foo.bar?option1=baz&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array('option1' => 'baz'), true)));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $this->assertEquals('otpauth://test/My%20Project%3Aalice%40foo.bar?digits=8&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+
+        $otp->expects($this->any())
+            ->method('isIssuerIncludedAsParameter')
+            ->will($this->returnValue(true));
+
+        $this->assertEquals('otpauth://test/My%20Project%3Aalice%40foo.bar?digits=8&issuer=My%20Project&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+    }
+
+    /**
+     * @param string $name
+     */
+    protected static function getMethod($name)
+    {
+        $class = new \ReflectionClass('OTPHP\OTP');
+        $method = $class->getMethod($name);
+        $method->setAccessible(true);
+
+        return $method;
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/tests/TOTPTest.php Added

@@ -0,0 +1,151 @@
+<?php
+
+use Base32\Base32;
+
+class TOTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGetProvisioningUri()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    public function testGenerateOtpAt()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('855783', $otp->at(0));
+        $this->assertEquals('762124', $otp->at(319690800));
+        $this->assertEquals('139664', $otp->at(1301012137));
+    }
+
+    public function testGenerateOtpNow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals($otp->now(), $otp->at(time()));
+    }
+
+    public function testVerifyOtpNow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $totp = $otp->at(time());
+        $this->assertTrue($otp->verify($totp));
+    }
+
+    public function testVerifyOtp()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertTrue($otp->verify('855783', 0));
+        $this->assertTrue($otp->verify('762124', 319690800));
+        $this->assertTrue($otp->verify('139664', 1301012137));
+
+        $this->assertFalse($otp->verify('139664', 1301012107));
+        $this->assertFalse($otp->verify('139664', 1301012167));
+        $this->assertFalse($otp->verify('139664', 1301012197));
+    }
+
+    public function testNotCompatibleWithGoogleAuthenticator()
+    {
+        $otp = $this->creatTOTP(9, 'sha512', 10);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?algorithm=sha512&digits=9&period=10&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    /**
+     * @dataProvider testVectorsData
+     */
+    public function testVectors($totp, $timestamp, $expected_value)
+    {
+        $this->assertEquals($expected_value, $totp->at($timestamp));
+        $this->assertTrue($totp->verify($expected_value, $timestamp));
+    }
+
+    /**
+     * @see https://tools.ietf.org/html/rfc6238#appendix-B
+     * @see http://www.rfc-editor.org/errata_search.php?rfc=6238
+     */
+    public function testVectorsData()
+    {
+        $totp_sha1 = $this->creatTOTP(8, 'sha1',   30, Base32::encode('12345678901234567890'));
+        $totp_sha256 = $this->creatTOTP(8, 'sha256', 30, Base32::encode('12345678901234567890123456789012'));
+        $totp_sha512 = $this->creatTOTP(8, 'sha512', 30, Base32::encode('1234567890123456789012345678901234567890123456789012345678901234'));
+
+        return array(
+            array($totp_sha1,   59, '94287082'),
+            array($totp_sha256, 59, '46119246'),
+            array($totp_sha512, 59, '90693936'),
+            array($totp_sha1,   1111111109, '07081804'),
+            array($totp_sha256, 1111111109, '68084774'),
+            array($totp_sha512, 1111111109, '25091201'),
+            array($totp_sha1,   1111111111, '14050471'),
+            array($totp_sha256, 1111111111, '67062674'),
+            array($totp_sha512, 1111111111, '99943326'),
+            array($totp_sha1,   1234567890, '89005924'),
+            array($totp_sha256, 1234567890, '91819424'),
+            array($totp_sha512, 1234567890, '93441116'),
+            array($totp_sha1,   2000000000, '69279037'),
+            array($totp_sha256, 2000000000, '90698825'),
+            array($totp_sha512, 2000000000, '38618901'),
+            array($totp_sha1,   20000000000, '65353130'),
+            array($totp_sha256, 20000000000, '77737706'),
+            array($totp_sha512, 20000000000, '47863826'),
+        );
+    }
+
+    public function testWithoutGoogleAuthenticatorCompatibility()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?algorithm=sha1&digits=6&period=30&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri(false));
+    }
+
+    public function testVerifyOtpInWindow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertFalse($otp->verify('054409', 319690800, 10)); // -11 intervals
+        $this->assertTrue($otp->verify('808167', 319690800, 10)); // -10 intervals
+        $this->assertTrue($otp->verify('364393', 319690800, 10)); // -9 intervals
+        $this->assertTrue($otp->verify('762124', 319690800, 10)); // 0 intervals
+        $this->assertTrue($otp->verify('988451', 319690800, 10)); // +9 intervals
+        $this->assertTrue($otp->verify('789387', 319690800, 10)); // +10 intervals
+        $this->assertFalse($otp->verify('465009', 319690800, 10)); // +11 intervals
+    }
+
+    private function creatTOTP($digits, $digest, $interval, $secret = 'JDDK4U6G3BJLEZ7Y', $label = 'alice@foo.bar', $issuer = 'My Project')
+    {
+        $otp = $this->getMockBuilder('OTPHP\TOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getInterval'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue($label));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue($secret));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue($issuer));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue($digest));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue($digits));
+
+        $otp->expects($this->any())
+            ->method('getInterval')
+            ->will($this->returnValue($interval));
+
+        return $otp;
+    }
+}

roundcubemail.dsc Changed

Changes of Revision 27