Kolab Groupware OBS

roundcubemail.spec Changed

@@ -48,15 +48,16 @@
 %global logdir /var/log/roundcubemail
 %global tmpdir /var/lib/roundcubemail
 
-%global rc_version 1.5.3
+%global rc_version 1.5
 %global plugin_version 3.5.11
 %global skin_version 0.5.0
 #%%global rc_rel_suffix rc2.12
 %global dot_rel_suffix %{?rc_rel_suffix:.%{rc_rel_suffix}}
 %global dash_rel_suffix %{?rc_rel_suffix:-%{rc_rel_suffix}}
+%global basedir %{name}-%{rc_version}%{?dash_rel_suffix}
 
 Name:           roundcubemail
-Version:        %{rc_version}
+Version:        %{rc_version}.4
 
 Release:        4%{?dot_rel_suffix}%{?dist}
 
@@ -66,7 +67,7 @@
 License:        GPLv2
 URL:            http://www.roundcube.net
 
-Source0:        roundcubemail-%{version}%{?dash_rel_suffix}.tar.gz
+Source0:        roundcubemail-%{rc_version}.tar.gz
 
 Source20:       roundcubemail.conf
 Source21:       roundcubemail.logrotate
@@ -283,9 +284,9 @@
 Roundcube Webmail for Kolab
 
 %prep
-%setup -q -c "%{name}-%{version}%{?dash_rel_suffix}"
+%setup -q -c "%{basedir}"
 
-pushd %{name}-%{version}%{?dash_rel_suffix}
+pushd %{basedir}
 
 cp -vf "%{SOURCE200}" SQL/mysql/
 rm -rvf SQL/mysql/2016081200.sql
@@ -351,9 +352,9 @@
 rm -rf plugins/password/helpers/chpass-wrapper.py
 popd
 
-cp -a %{name}-%{version}%{?dash_rel_suffix}/{CHANGELOG.md,LICENSE,README.md} .
+cp -a %{basedir}/{CHANGELOG.md,LICENSE,README.md} .
 
-rm -rf %{name}-%{version}%{?dash_rel_suffix}/plugins/jqueryui/themes/redmond
+rm -rf %{basedir}/plugins/jqueryui/themes/redmond
 
 
 %build
@@ -372,7 +373,7 @@
     %{buildroot}%{tmpdir}/plugins \
     %{buildroot}%{tmpdir}/plugins/enigma
 
-pushd %{name}-%{version}%{?dash_rel_suffix}
+pushd %{basedir}
 
 %if 0%{?plesk} < 1
 %{__install} -pm 644 %SOURCE20 %{buildroot}%{_ap_sysconfdir}/conf.d
@@ -421,8 +422,8 @@
 
 %{__mkdir_p} ${asset_path}
 
-orig_dir="%{name}-%{version}%{?dash_rel_suffix}"
-asset_dir="%{name}-%{version}%{?dash_rel_suffix}$(echo ${asset_path} | %{__sed} -e 's|%{buildroot}%{datadir}||g')"
+orig_dir="%{basedir}"
+asset_dir="%{basedir}$(echo ${asset_path} | %{__sed} -e 's|%{buildroot}%{datadir}||g')"
 
 # Remove the skins and installer directories from ${orig_dir}
 #TODO?
@@ -492,7 +493,7 @@
 
 
 %check
-pushd %{name}-%{version}%{?dash_rel_suffix}/tests
+pushd %{basedir}/tests
 phpunit --debug || :
 popd
 
@@ -566,42 +567,29 @@
 # Process all sql updates (requires the php-mysqlnd package for the pdo driver for the system php)
 ${php} %{_datadir}/roundcubemail/bin/updatedb.sh \
     --dir %{_datadir}/doc/roundcubemail-%{version}/SQL/ \
-    --package roundcube || : \
-    >/dev/null 2>&1
+    --package roundcube || :
 %else
 php="/usr/bin/php"
 ${php} %{_datadir}/roundcubemail/bin/updatedb.sh \
     --dir %{_datadir}/doc/roundcubemail/SQL/ \
-    --package roundcube || : \
-    >/dev/null 2>&1
+    --package roundcube || :
 %endif
 
+${php} %{_datadir}/roundcubemail/bin/updatedb.sh \
+    --dir %{_datadir}/roundcubemail/plugins/libkolab/SQL/ \
+    --package libkolab || :
 
-for plugin in $(find /usr/share/roundcubemail/plugins -mindepth 1 -maxdepth 1 -type d | sort); do
-    if  ! -z "$(find ${plugin} -type d -name SQL)" ; then
-        for dir in $(find /usr/share/roundcubemail/plugins/$(basename ${plugin})/ -type d -name SQL); do
-            # Skip plugins with multiple drivers and no kolab driver
-            if  ! -z "$(echo $dir | grep driver)" ; then
-                if  -z "$(echo $dir | grep kolab)" ; then
-                    continue
-                fi
-            fi
-
-            ${php} %{_datadir}/roundcubemail/bin/updatedb.sh \
-                --dir $dir \
-                --package $(basename ${plugin}) \
-                >/dev/null 2>&1 || :
-        done
-    fi
-done
+${php} %{_datadir}/roundcubemail/bin/updatedb.sh \
+    --dir %{_datadir}/roundcubemail/plugins/calendar/drivers/kolab/SQL/ \
+    --package calendar-kolab || :
 
 exit 0
 
 %files
 %defattr(-,root,root,-)
-%doc %{name}-%{version}%{?dash_rel_suffix}/LICENSE
-%doc %{name}-%{version}%{?dash_rel_suffix}/UPGRADING
-%doc %{name}-%{version}%{?dash_rel_suffix}/SQL
+%doc %{basedir}/LICENSE
+%doc %{basedir}/UPGRADING
+%doc %{basedir}/SQL
 
 %{_datadir}/%{name}/
 %{_sharedstatedir}/%{name}/

buildroundcubemailtarball.sh Changed

@@ -3,8 +3,8 @@
 set -e
 set -x
 
-VERSION=1.5.3
-GIT_REF=dev/kolab-1.5
+VERSION=1.5
+GIT_REF=dev/kolab-$VERSION
 PLUGINS_GIT_REF=master
 NAME=roundcubemail-$VERSION
 source buildroundcubemailtarball.config
@@ -139,6 +139,34 @@
             }
         },
         {
+            "type": "path",
+            "url": "$PWD/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "$PWD/roundcubemail-plugins-kolab-latest/plugins/logon_page",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "$PWD/roundcubemail-plugins-kolab-latest/plugins/nextcloud_link",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "$PWD/roundcubemail-plugins-kolab-latest/plugins/kolab_sso",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
             "type": "composer",
             "url": "https://plugins.roundcube.net"
         }
@@ -172,6 +200,10 @@
         "kolab/odfviewer": "~3.4.0",
         "kolab/pdfviewer": "~3.4.0",
         "kolab/tasklist": "~3.5.10",
+        "kolab/kolab_2fa": "~3.5.11",
+        "kolab/kolab_sso": "~3.5.4",
+        "kolab/logon_page": "~3.4.2",
+        "kolab/nextcloud_link": "~1.0",
         "johndoh/contextmenu": "~3.2.1",
         "zf1/zend-json": "~1.12.11",
         "zf1/zend-log": "~1.12.11",

debian.changelog Changed

roundcubemail-1.5.3.tar.gz/CHANGELOG.md -> roundcubemail-1.5.tar.gz/CHANGELOG.md Changed

roundcubemail-1.5.3.tar.gz/bin/updatedb.sh -> roundcubemail-1.5.tar.gz/bin/updatedb.sh Changed

roundcubemail-1.5.3.tar.gz/composer.json -> roundcubemail-1.5.tar.gz/composer.json Changed

@@ -10,112 +10,140 @@
     "repositories": 
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_addressbook",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_addressbook",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_auth",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_auth",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_config",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_config",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_delegation",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_delegation",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_files",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_files",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_folders",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_folders",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_notes",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_notes",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_tags",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_tags",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_chat",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_chat",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/odfviewer",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/odfviewer",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/pdfviewer",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/pdfviewer",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/tasklist",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/tasklist",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/calendar",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/calendar",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/libcalendaring",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/libcalendaring",
             "options": {
                 "symlink": false
             }
         },
         {
             "type": "path",
-            "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/libkolab",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/libkolab",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/logon_page",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/nextcloud_link",
+            "options": {
+                "symlink": false
+            }
+        },
+        {
+            "type": "path",
+            "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_sso",
             "options": {
                 "symlink": false
             }
@@ -154,6 +182,10 @@
         "kolab/odfviewer": "~3.4.0",
         "kolab/pdfviewer": "~3.4.0",
         "kolab/tasklist": "~3.5.10",
+        "kolab/kolab_2fa": "~3.5.11",
+        "kolab/kolab_sso": "~3.5.4",
+        "kolab/logon_page": "~3.4.2",
+        "kolab/nextcloud_link": "~1.0",
         "johndoh/contextmenu": "~3.2.1",
         "zf1/zend-json": "~1.12.11",
         "zf1/zend-log": "~1.12.11",

roundcubemail-1.5.3.tar.gz/composer.lock -> roundcubemail-1.5.tar.gz/composer.lock Changed

@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ,
-    "content-hash": "13f0998cd1e11000c55bf173b95c57b7",
+    "content-hash": "40398d947556f0b4fed19d61bfd005b6",
     "packages": 
         {
             "name": "caxy/php-htmldiff",
@@ -67,6 +67,65 @@
             "time": "2019-02-20T18:52:14+00:00"
         },
         {
+            "name": "christian-riesen/base32",
+            "version": "1.6.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ChristianRiesen/base32.git",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ChristianRiesen/base32/zipball/2e82dab3baa008e24a505649b0d583c31d31e894",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "require-dev": {
+                "friendsofphp/php-cs-fixer": "^2.17",
+                "phpstan/phpstan": "^0.12",
+                "phpunit/phpunit": "^8.5.13 || ^9.5"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Base32\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Christian Riesen",
+                    "email": "chris.riesen@gmail.com",
+                    "homepage": "http://christianriesen.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Base32 encoder/decoder according to RFC 4648",
+            "homepage": "https://github.com/ChristianRiesen/base32",
+            "keywords": 
+                "base32",
+                "decode",
+                "encode",
+                "rfc4648"
+            ,
+            "support": {
+                "issues": "https://github.com/ChristianRiesen/base32/issues",
+                "source": "https://github.com/ChristianRiesen/base32/tree/1.6.0"
+            },
+            "time": "2021-02-26T10:19:33+00:00"
+        },
+        {
             "name": "endroid/qr-code",
             "version": "1.6.6",
             "source": {
@@ -121,6 +180,59 @@
             "time": "2016-05-29T07:37:18+00:00"
         },
         {
+            "name": "enygma/yubikey",
+            "version": "3.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/enygma/yubikey.git",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/enygma/yubikey/zipball/2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.1"
+            },
+            "require-dev": {
+                "codeclimate/php-test-reporter": "dev-master",
+                "phpunit/phpunit": "4.3.2"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-0": {
+                    "Yubikey": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Chris Cornutt",
+                    "email": "ccornutt@phpdeveloper.org",
+                    "homepage": "http://www.phpdeveloper.org/"
+                }
+            ,
+            "description": "PHP library to interface with the Yubikey REST API",
+            "homepage": "https://github.com/enygma/yubikey.git",
+            "keywords": 
+                "api",
+                "rest",
+                "twofactor",
+                "yubico",
+                "yubikey"
+            ,
+            "support": {
+                "issues": "https://github.com/enygma/yubikey/issues",
+                "source": "https://github.com/enygma/yubikey/tree/master"
+            },
+            "time": "2018-03-08T20:38:39+00:00"
+        },
+        {
             "name": "ezyang/htmlpurifier",
             "version": "v4.16.0",
             "source": {
@@ -533,7 +645,7 @@
             "version": "3.5.11",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/calendar",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/calendar",
                 "reference": "bcca59cdaa6cf7b2109eac32685bb750425c305e"
             },
             "require": {
@@ -572,11 +684,49 @@
             }
         },
         {
+            "name": "kolab/kolab_2fa",
+            "version": "3.5.11",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+                "reference": "ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e"
+            },
+            "require": {
+                "endroid/qr-code": "~1.6.5",
+                "enygma/yubikey": "~3.2",
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3",
+                "spomky-labs/otphp": "~5.0.0"
+            },
+            "type": "roundcube-plugin",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Thomas Bruederli",
+                    "email": "bruederli@kolabsys.com",
+                    "role": "Lead"
+                },
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Kolab 2-Factor Authentication",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            }
+        },
+        {
             "name": "kolab/kolab_activesync",
             "version": "3.5.6",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
                 "reference": "7e8c46290074fe6c1ab72bc9f6b90aa271ee16ef"
             },
             "require": {
@@ -612,7 +762,7 @@
             "version": "3.5.10",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_addressbook",

roundcubemail-1.5.3.tar.gz/node_modules/.package-lock.json -> roundcubemail-1.5.tar.gz/node_modules/.package-lock.json Changed

roundcubemail-1.5.3.tar.gz/package-lock.json -> roundcubemail-1.5.tar.gz/package-lock.json Changed

roundcubemail-1.5.3.tar.gz/plugins/acl/acl.php -> roundcubemail-1.5.tar.gz/plugins/acl/acl.php Changed

roundcubemail-1.5.3.tar.gz/plugins/calendar/drivers/kolab/kolab_calendar.php -> roundcubemail-1.5.tar.gz/plugins/calendar/drivers/kolab/kolab_calendar.php Changed

roundcubemail-1.5.3.tar.gz/plugins/calendar/localization/en_US.inc -> roundcubemail-1.5.tar.gz/plugins/calendar/localization/en_US.inc Changed

@@ -208,6 +208,10 @@
 $labels'itipmailbodydelegated' = "\$sender has delegated the participation in the following event:\n\n*\$title*\n\nWhen: \$date";
 $labels'itipmailbodydelegatedto' = "\$sender has delegated the participation in the following event to you:\n\n*\$title*\n\nWhen: \$date";
 
+$labels'itipmailbodyresourceaccepted' = "\$sender has accepted the following resource booking:\n\n*\$title*\n\nWhen: \$date\n\nInvitees: \$attendees";
+$labels'itipmailbodyresourcetentative' = "\$sender has tentatively accepted the following resource booking:\n\n*\$title*\n\nWhen: \$date\n\nInvitees: \$attendees";
+$labels'itipmailbodyresourcedeclined' = "\$sender has declined the the following resource booking:\n\n*\$title*\n\nWhen: \$date\n\nInvitees: \$attendees";
+
 $labels'itipdeclineevent' = 'Do you want to decline your invitation to this event?';
 $labels'declinedeleteconfirm' = 'Do you also want to delete this declined event from your calendar?';
 $labels'itipcomment' = 'Invitation/notification comment';
@@ -318,4 +322,9 @@
 $labels'arialabelresourceselection' = 'Available resources';
 $labels'arialabeleventform' = 'Event editing form';
 
+// Nextcloud Talk integration
+$labels'createtalkroom' = 'Create Talk room';
+$labels'talkroomcreating' = 'Creating a Talk room for the event...';
+$labels'talkroomcreateerror' = 'Failed to create a Talk room.';
+$labels'talkroomname' = 'Room for an event';
 ?>

roundcubemail-1.5.tar.gz/plugins/kolab_2fa Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/README.md Added

@@ -0,0 +1,113 @@
+Kolab Multi-Factor Authentication Plugin
+========================================
+
+The plugin is designed to be a generic container for different 2nd factor 
+authentication mechanisms paired with different ways to store the related 
+data for Roundcube user accounts. Both drivers and storage backends are derived 
+from abstract classes which define the common interface and are configurable.
+
+Drivers
+-------
+
+Multiple methods for 2nd factor authentication can be enabled for the users 
+to select from. The basic implementation covers TOTP, HOTP and Yubikey methods.
+
+TOTP (RFC 6238) and HOTP (RFC 4226) can be used in conjunction with freely available 
+mobile phone apps like FreeOTP (TOTP only!) or Google Authenticator. To provision 
+the app with your account settings, a QR code is displayed which can be scanned 
+with the mobile phone camera.
+
+The Yubikey driver uses the Yubico Validation Service either by using the public 
+YubiCloud API or another locally hosted verification server. The host(s) to use 
+for validation are configurable.
+
+
+Storage Backends
+----------------
+
+Some authentication methods require to store secret data per user account on the 
+server. For this, one of different storage backends can be selected:
+
+**Roundcube**
+
+The simplest way is to store authentication secrets and configuration in the 
+user preferences of Roundcube itself.
+
+**LDAP**
+
+For an external storage option, the LDAP module can be used. This keeps the 
+authentication data separated from the Roundcube user database. See //LDAP Storage// 
+below for more information. The LDAP connection parameters are defined through the 
+`kolab_2fa_storage_config` config option.
+
+
+Installation
+------------
+
+After placing the plugin contents into Roundcube's plugins directory, the 3rd party 
+libraries need to be installed using Composer:
+
+```
+$ composer require "endroid/qrcode" "~1.5.0" --no-update
+$ composer require "spomky-labs/otphp" "~5.0.0" --no-update
+$ composer require "enygma/yubikey" "~3.2"
+```
+
+See the `composer.json` file for the actual module names and versions.
+
+
+Configuration
+-------------
+
+Copy the sample `config.inc.php.dist` file into `config.inc.php` and adjust the 
+settings according to your desired setup. All options are described with inline 
+comments directly in the sample file.
+
+When using the LDAP storage together with a Kolab installation, you may want to save 
+an additional LDAP lookup for authentication factors on every login, the LDAP driver 
+can assign roles to the user record when registering authentication factors
+(see `user_roles` storage config option). With the following additions to the 
+`kolab_auth` plugin config, these roles can be used to determine whether the user 
+has multi-factor authentication enabled:
+
+```
+// Disable lokkups by default:
+$config'kolab_2fa_check' = false;
+
+// Enable 2nd factor lookup on a role-by-role basis
+$config'kolab_auth_role_settings' = array(
+    'cn=totp-user,dc=example,dc=org' => array(
+        'kolab_2fa_check' => array(
+            'mode' => 'override',
+            'value' => true,
+        ),
+    ),
+);
+```
+
+LDAP Storage
+------------
+
+Define an `organizationalunit` with DN `ou=Tokens,dc=example,dc=org` to store 
+all authentication tokens.
+
+For token records, the https://git.fedorahosted.org/cgit/freeipa.git/tree/install/share/70ipaotp.ldif | FreeIPA OTP schema 
+can be used. Please install this schema in your Kolab LDAP directory.
+
+This is an example record for a TOTP token registered to user doe@example.org:
+
+```
+dn: ipatokenUniqueID=totp:c4a1ced768a0da55df662e73,ou=Tokens,dc=example,dc=org
+objectClass: top
+objectClass: ipaToken
+objectClass: ipatokenTOTP
+objectClass: ldapSubEntry
+cn: Mobile App (TOTP)
+ipatokenUniqueID: totp:c4a1ced768a0da55df662e73
+ipatokenOwner: uid=doe,ou=People,dc=example,dc=org
+ipatokenNotBefore: 201506110211Z
+ipatokenOTPkey: 4T5CI7SOKWYQ5JTM
+ipatokenDisabled: TRUE
+```
+
+

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/composer.json Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/config.inc.php Added

@@ -0,0 +1,125 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin configuration
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+// available methods/providers. Supported methods are: 'totp','hotp','yubikey'
+$config'kolab_2fa_drivers' = array('totp');
+
+// backend for storing 2-factor-auth related per-user settings
+// available backends are: 'roundcube', 'ldap', 'sql'
+$config'kolab_2fa_storage' = 'roundcube';
+
+// additional config options for the above storage backend
+// here an example for the LDAP backend:
+$config'kolab_2fa_storage_config' = array(
+    'debug'     => false,
+    'hosts'     => array('localhost'),
+    'port'      => 389,
+    'bind_dn'   => 'uid=kolab-auth-service,ou=Special Users,dc=example,dc=org',
+    'bind_pass' => 'Welcome2KolabSystems',
+    'base_dn'   => 'ou=Tokens,dc=example,dc=org',
+    // filter used to list stored factors for a user
+    'filter'    => '(&(objectClass=ipaToken)(objectclass=ldapSubEntry)(ipatokenOwner=%fu))',
+    'scope'     => 'sub',
+    // translates driver properties to LDAP attributes
+    'fieldmap'  => array(
+        'label'    => 'cn',
+        'id'       => 'ipatokenUniqueID',
+        'active'   => 'ipatokenDisabled',
+        'created'  => 'ipatokenNotBefore',
+        'userdn'   => 'ipatokenOwner',
+        'secret'   => 'ipatokenOTPkey',
+        // HOTP attributes
+        'counter'  => 'ipatokenHOTPcounter',
+        'digest'   => 'ipatokenOTPalgorithm',
+        'digits'   => 'ipatokenOTPdigits',
+    ),
+    // LDAP object classes derived from factor IDs (prefix)
+    // will be translated into the %c placeholder
+    'classmap' => array(
+        'totp:' => 'ipatokenTOTP',
+        'hotp:' => 'ipatokenHOTP',
+        '*'     => 'ipaToken',
+    ),
+    // translates property values into LDAP attribute values and vice versa
+    'valuemap' => array(
+        'active' => array(
+            false   => 'TRUE',
+            true    => 'FALSE',
+        ),
+    ),
+    // specify non-string data types for properties for implicit conversion
+    'attrtypes' => array(
+        'created' => 'datetime',
+        'counter' => 'integer',
+        'digits'  => 'integer',
+    ),
+    // apply these default values to factor records if not specified by the drivers
+    'defaults' => array(
+        'active' => false,
+        // these are required for ipatokenHOTP records and should match the kolab_2fa_hotp parameters
+        'digest' => 'sha1',
+        'digits' => 6,
+    ),
+    // use this LDAP attribute to compose DN values for factor entries
+    'rdn'       => 'ipatokenUniqueID',
+    // assign these object classes to new factor entries
+    'objectclass' => array(
+        'top',
+        'ipaToken',
+        '%c',
+        'ldapSubEntry',
+    ),
+    // add these roles to the user's LDAP record if key prefix-matches a factor entry
+    'user_roles' => array(
+        'totp:' => 'cn=totp-user,dc=example,dc=org',
+        'hotp:' => 'cn=hotp-user,dc=example,dc=org',
+    ),
+);
+
+// force a lookup for active authentication factors for this user.
+// to be set by another plugin (e.g. kolab_auth based on LDAP roles)
+// $config'kolab_2fa_check' = true;
+
+// timeout for 2nd factor auth submission (in seconds)
+$config'kolab_2fa_timeout' = 120;
+
+// configuration parameters for TOTP (uncomment to adjust)
+$config'kolab_2fa_totp' = array(
+    // 'digits'   => 6,
+    // 'interval' => 30,
+    // 'digest'   => 'sha1',
+    // 'issuer'   => 'Roundcube',
+);
+
+// configuration parameters for HOTP (uncomment to adjust)
+$config'kolab_2fa_hotp' = array(
+    // 'digits' => 6,
+    // 'window' => 4,
+    // 'digest' => 'sha1',
+);
+
+// configuration parameters for Yubikey (uncomment to adjust)
+$config'kolab_2fa_yubikey' = array(
+    'clientid' => '123456',
+    'apikey' => '<your-server-api-key>',
+    // 'hosts'  => array('api.myhost1.com','api2.myhost.com'),
+    'use_https' => true,  // connect via https if set to true
+);
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/config.inc.php.dist Added

@@ -0,0 +1,125 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin configuration
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+// available methods/providers. Supported methods are: 'totp','hotp','yubikey'
+$config'kolab_2fa_drivers' = array('totp');
+
+// backend for storing 2-factor-auth related per-user settings
+// available backends are: 'roundcube', 'ldap', 'sql'
+$config'kolab_2fa_storage' = 'roundcube';
+
+// additional config options for the above storage backend
+// here an example for the LDAP backend:
+$config'kolab_2fa_storage_config' = array(
+    'debug'     => false,
+    'hosts'     => array('localhost'),
+    'port'      => 389,
+    'bind_dn'   => 'uid=kolab-auth-service,ou=Special Users,dc=example,dc=org',
+    'bind_pass' => 'Welcome2KolabSystems',
+    'base_dn'   => 'ou=Tokens,dc=example,dc=org',
+    // filter used to list stored factors for a user
+    'filter'    => '(&(objectClass=ipaToken)(objectclass=ldapSubEntry)(ipatokenOwner=%fu))',
+    'scope'     => 'sub',
+    // translates driver properties to LDAP attributes
+    'fieldmap'  => array(
+        'label'    => 'cn',
+        'id'       => 'ipatokenUniqueID',
+        'active'   => 'ipatokenDisabled',
+        'created'  => 'ipatokenNotBefore',
+        'userdn'   => 'ipatokenOwner',
+        'secret'   => 'ipatokenOTPkey',
+        // HOTP attributes
+        'counter'  => 'ipatokenHOTPcounter',
+        'digest'   => 'ipatokenOTPalgorithm',
+        'digits'   => 'ipatokenOTPdigits',
+    ),
+    // LDAP object classes derived from factor IDs (prefix)
+    // will be translated into the %c placeholder
+    'classmap' => array(
+        'totp:' => 'ipatokenTOTP',
+        'hotp:' => 'ipatokenHOTP',
+        '*'     => 'ipaToken',
+    ),
+    // translates property values into LDAP attribute values and vice versa
+    'valuemap' => array(
+        'active' => array(
+            false   => 'TRUE',
+            true    => 'FALSE',
+        ),
+    ),
+    // specify non-string data types for properties for implicit conversion
+    'attrtypes' => array(
+        'created' => 'datetime',
+        'counter' => 'integer',
+        'digits'  => 'integer',
+    ),
+    // apply these default values to factor records if not specified by the drivers
+    'defaults' => array(
+        'active' => false,
+        // these are required for ipatokenHOTP records and should match the kolab_2fa_hotp parameters
+        'digest' => 'sha1',
+        'digits' => 6,
+    ),
+    // use this LDAP attribute to compose DN values for factor entries
+    'rdn'       => 'ipatokenUniqueID',
+    // assign these object classes to new factor entries
+    'objectclass' => array(
+        'top',
+        'ipaToken',
+        '%c',
+        'ldapSubEntry',
+    ),
+    // add these roles to the user's LDAP record if key prefix-matches a factor entry
+    'user_roles' => array(
+        'totp:' => 'cn=totp-user,dc=example,dc=org',
+        'hotp:' => 'cn=hotp-user,dc=example,dc=org',
+    ),
+);
+
+// force a lookup for active authentication factors for this user.
+// to be set by another plugin (e.g. kolab_auth based on LDAP roles)
+// $config'kolab_2fa_check' = true;
+
+// timeout for 2nd factor auth submission (in seconds)
+$config'kolab_2fa_timeout' = 120;
+
+// configuration parameters for TOTP (uncomment to adjust)
+$config'kolab_2fa_totp' = array(
+    // 'digits'   => 6,
+    // 'interval' => 30,
+    // 'digest'   => 'sha1',
+    // 'issuer'   => 'Roundcube',
+);
+
+// configuration parameters for HOTP (uncomment to adjust)
+$config'kolab_2fa_hotp' = array(
+    // 'digits' => 6,
+    // 'window' => 4,
+    // 'digest' => 'sha1',
+);
+
+// configuration parameters for Yubikey (uncomment to adjust)
+$config'kolab_2fa_yubikey' = array(
+    'clientid' => '123456',
+    'apikey' => '<your-server-api-key>',
+    // 'hosts'  => array('api.myhost1.com','api2.myhost.com'),
+    'use_https' => true,  // connect via https if set to true
+);
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/kolab2fa.js Added

@@ -0,0 +1,367 @@
+/**
+ * Kolab 2-Factor-Authentication plugin client functions
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * @licstart  The following is the entire license notice for the
+ * JavaScript code in this page.
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ * @licend  The above is the entire license notice
+ * for the JavaScript code in this page.
+ */
+
+window.rcmail && rcmail.addEventListener('init', function(evt) {
+    var highsec_call_stack = ;
+    var highsec_dialog;
+    var factor_dialog;
+
+    if (!rcmail.env.kolab_2fa_factors) {
+        rcmail.env.kolab_2fa_factors = {};
+    }
+
+    /**
+     * Equivalend of PHP time()
+     */
+    function time() {
+        return Math.round(new Date().getTime() / 1000);
+    }
+
+    /**
+     * Render the settings UI
+     */
+    function render() {
+        var table = $('#kolab2fa-factors tbody');
+        table.html('');
+
+        var rows = 0;
+        $.each(rcmail.env.kolab_2fa_factors, function(id, props) {
+            if (props.active) {
+                var tr = $('<tr>').addClass(props.method).appendTo(table),
+                    button = $('<a class="button icon delete">').attr({href: '#', rel: id})
+                        .append($('<span class="inner">').text(rcmail.get_label('remove','kolab_2fa')));
+
+                $('<td>').addClass('name').text(props.label || props.name).appendTo(tr);
+                $('<td>').addClass('created').text(props.created || '??').appendTo(tr);
+                $('<td>').addClass('actions buttons-cell').append(button).appendTo(tr);
+                rows++;
+            }
+        });
+
+        table.parent()(rows > 0 ? 'show' : 'hide')();
+    }
+
+    /**
+     * Open dialog to add the given authentication factor
+     */
+    function add_factor(method) {
+        var lock, form = $('#kolab2fa-prop-' + method),
+            props = rcmail.env.kolab_2fa_factorsmethod;
+
+        if (form.length) {
+            form.get(0).reset();
+            form.find('img.qrcode').attr('src', 'data:image/gif;base64,R0lGODlhDwAPAIAAAMDAwAAAACH5BAEAAAAALAAAAAAPAA8AQAINhI+py+0Po5y02otnAQA7');
+            form.off('submit');
+
+            factor_dialog = rcmail.show_popup_dialog(
+                form.show(),
+                rcmail.get_label('addfactor', 'kolab_2fa'),
+                
+                    {
+                        text: rcmail.gettext('save', 'kolab_2fa'),
+                        'class': 'mainaction save',
+                        click: function(e) {
+                            save_data(method);
+                        }
+                    },
+                    {
+                        text: rcmail.gettext('cancel'),
+                        'class': 'cancel',
+                        click: function() {
+                            factor_dialog.dialog('close');
+                        }
+                    }
+                ,
+                {
+                    open: function(event, ui) {
+                        $(event.target).find('inputname="_verify_code"').keypress(function(e) {
+                            if (e.which == 13) {
+                                $(e.target).closest('.ui-dialog').find('button.mainaction').click();
+                            }
+                        });
+                    },
+                    close: function(event, ui) {
+                        form.hide().appendTo(document.body);
+                        factor_dialog = null;
+                    }
+                }
+            )
+            .data('method', method)
+            .data('timestamp', time());
+
+            form.on('submit', function(e) {
+                save_data(method);
+                return false;
+            });
+
+            // load generated data
+            lock = rcmail.set_busy(true, 'loading');
+            rcmail.http_post('plugin.kolab-2fa-data', { _method: method }, lock);
+        }
+    }
+
+    /**
+     * Remove the given factor from the account
+     */
+    function remove_factor(id) {
+        var lock = rcmail.set_busy(true, 'saving');
+        rcmail.http_post('plugin.kolab-2fa-save', { _method: id, _data: 'false' }, lock);
+    }
+
+    /**
+     * Submit factor settings form
+     */
+    function save_data(method) {
+        var lock, data, form = $('#kolab2fa-prop-' + method),
+            verify = form.find('inputname="_verify_code"');
+
+        if (verify.length && !verify.val().length) {
+            alert(rcmail.get_label('verifycodemissing','kolab_2fa'));
+            verify.select();
+            return false;
+        }
+
+        data = form_data(form);
+        lock = rcmail.set_busy(true, 'saving');
+        rcmail.http_post('plugin.kolab-2fa-save', {
+            _method: data.id || method,
+            _data: JSON.stringify(data),
+            _verify_code: verify.val(),
+            _timestamp: factor_dialog ? factor_dialog.data('timestamp') : null
+        }, lock);
+    }
+
+    /**
+     * Collect all factor properties from the form
+     */
+    function form_data(form)
+    {
+        var data = {};
+        form.find('input, select').each(function(i, elem) {
+            if (elem.name.indexOf('_prop') === 0) {
+                k = elem.name.match(/\(a-z0-9_.-+)\$/i) ? RegExp.$1 : null;
+                if (k) {
+                    datak = elem.tagName == 'SELECT' ? $('option:selected', elem).val() : $(elem).val();
+                }
+            }
+        });
+
+        return data;
+    }
+
+    /**
+     * Execute the given function after the user authorized the session with a 2nd factor
+     */
+    function require_high_security(func, exclude)
+    {
+        // request 2nd factor auth
+        if (rcmail.env.session_secured !== true && rcmail.env.session_secured < time() - 180) {
+            var method, name;
+
+            // find an active factor
+            $.each(rcmail.env.kolab_2fa_factors, function(id, prop) {
+                if (prop.active && !method || method == exclude) {
+                    method = id;
+                    name = prop.label || prop.name;
+                    if (!exclude || id !== exclude) {
+                        return true;
+                    }
+                }
+            });
+
+            // we have a registered factor, use it
+            if (method) {
+                highsec_call_stack.push(func);
+

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/kolab_2fa.php Added

@@ -0,0 +1,795 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication plugin
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class kolab_2fa extends rcube_plugin
+{
+    public $task = '(login|settings)';
+
+    protected $login_verified = null;
+    protected $login_factors = array();
+    protected $drivers = array();
+    protected $storage;
+
+    /**
+     * Plugin init
+     */
+    public function init()
+    {
+        $this->load_config();
+        $this->add_hook('startup', array($this, 'startup'));
+    }
+
+    /**
+     * Startup hook
+     */
+    public function startup($args)
+    {
+        $rcmail = rcmail::get_instance();
+
+        // register library namespace to autoloader
+        $loader = include(INSTALL_PATH . 'vendor/autoload.php');
+        $loader->set('Kolab2FA', array($this->home . '/lib'));
+
+        if ($args'task' === 'login' && $this->api->output) {
+            $this->add_texts('localization/', false);
+            $this->add_hook('authenticate', array($this, 'authenticate'));
+
+            // process 2nd factor auth step after regular login
+            if ($args'action' === 'plugin.kolab-2fa-login' /* || !empty($_SESSION'kolab_2fa_factors') */) {
+                return $this->login_verify($args);
+            }
+        }
+        else if ($args'task' === 'settings') {
+            $this->add_texts('localization/', !$this->api->output->ajax_call);
+            $this->add_hook('settings_actions', array($this, 'settings_actions'));
+            $this->register_action('plugin.kolab-2fa', array($this, 'settings_view'));
+            $this->register_action('plugin.kolab-2fa-data', array($this, 'settings_data'));
+            $this->register_action('plugin.kolab-2fa-save', array($this, 'settings_save'));
+            $this->register_action('plugin.kolab-2fa-verify', array($this, 'settings_verify'));
+        }
+
+        return $args;
+    }
+
+    /**
+     * Handler for 'authenticate' plugin hook.
+     *
+     * ATTENTION: needs to be called *after* kolab_auth::authenticate()
+     */
+    public function authenticate($args)
+    {
+        // nothing to be done for me
+        if ($args'abort' || $this->login_verified !== null) {
+            return $args;
+        }
+
+        $rcmail = rcmail::get_instance();
+
+        // parse $host URL
+        $a_host = parse_url($args'host');
+        $hostname = $_SESSION'hostname' = $a_host'host' ?: $args'host';
+        $username = !empty($_SESSION'kolab_auth_admin') ? $_SESSION'kolab_auth_admin' : $args'user';
+
+        // Convert username to lowercase. Copied from rcmail::login()
+        $login_lc = $rcmail->config->get('login_lc', 2);
+        if ($login_lc) {
+            if ($login_lc == 2 || $login_lc === true) {
+                $username = mb_strtolower($username);
+            }
+            else if (strpos($username, '@')) {
+                // lowercase domain name
+                list($local, $domain) = explode('@', $username);
+                $username = $local . '@' . mb_strtolower($domain);
+            }
+        }
+
+        // 2a. let plugins provide the list of active authentication factors
+        $lookup = $rcmail->plugins->exec_hook('kolab_2fa_lookup', array(
+            'user'    => $username,
+            'host'    => $hostname,
+            'factors' => null,
+            'check'   => $rcmail->config->get('kolab_2fa_check', true),
+        ));
+
+        if (isset($lookup'factors')) {
+            $factors = (array)$lookup'factors';
+        }
+        // 2b. check storage if this user has 2FA enabled
+        else if ($lookup'check' !== false && ($storage = $this->get_storage($username))) {
+            $factors = (array)$storage->enumerate();
+        }
+
+        if (count($factors) > 0) {
+            $args'abort' = true;
+            $factors = array_unique($factors);
+
+            // 3. flag session for 2nd factor verification
+            $_SESSION'kolab_2fa_time'    = time();
+            $_SESSION'kolab_2fa_nonce'   = bin2hex(openssl_random_pseudo_bytes(32));
+            $_SESSION'kolab_2fa_factors' = $factors;
+
+            $_SESSION'username' = $args'user';
+            $_SESSION'host'     = $args'host';
+            $_SESSION'password' = $rcmail->encrypt($args'pass');
+
+            // 4. render to 2nd auth step
+            $this->login_step($factors);
+        }
+
+        return $args;
+    }
+
+    /**
+     * Handler for the additional login step requesting the 2FA verification code
+     */
+    public function login_step($factors)
+    {
+        // replace handler for login form
+        $this->login_factors = array_values($factors);
+        $this->api->output->add_handler('loginform', array($this, 'auth_form'));
+
+        // focus the code input field on load
+        $this->api->output->add_script('$("input.kolab2facode").first().select();', 'docready');
+
+        $this->api->output->send('login');
+    }
+
+    /**
+     * Process the 2nd factor code verification form submission
+     */
+    public function login_verify($args)
+    {
+        $this->login_verified = false;
+
+        $rcmail = rcmail::get_instance();
+
+        $time     = $_SESSION'kolab_2fa_time';
+        $nonce    = $_SESSION'kolab_2fa_nonce';
+        $factors  = (array)$_SESSION'kolab_2fa_factors';
+        $expired  = $time < time() - $rcmail->config->get('kolab_2fa_timeout', 120);
+        $username = !empty($_SESSION'kolab_auth_admin') ? $_SESSION'kolab_auth_admin' : $_SESSION'username';
+
+        if (!empty($factors) && !empty($nonce) && !$expired) {
+            // TODO: check signature
+
+            // try to verify each configured factor
+            foreach ($factors as $factor) {
+                list($method) = explode(':', $factor, 2);
+
+                // verify the submitted code
+                $code = rcube_utils::get_input_value("_${nonce}_${method}", rcube_utils::INPUT_POST);
+                $this->login_verified = $this->verify_factor_auth($factor, $code, $username);
+
+                // accept first successful method
+                if ($this->login_verified) {
+                    break;
+                }
+            }
+        }
+
+        if ($this->login_verified) {
+            // restore POST data from session
+            $_POST'_user' = $_SESSION'username';
+            $_POST'_host' = $_SESSION'host';
+            $_POST'_pass' = $rcmail->decrypt($_SESSION'password');
+
+            if ($_SESSION'kolab_auth_admin') {
+                $_POST'_user'    = $_SESSION'kolab_auth_admin';
+                $_POST'_loginas' = $_SESSION'username';
+            }

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Base.php Added

@@ -0,0 +1,344 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Driver base class
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+abstract class Base
+{
+    public $method;
+    public $id;
+    public $storage;
+
+    protected $config          = array();
+    protected $props           = array();
+    protected $user_props      = array();
+    protected $pending_changes = false;
+    protected $temporary       = false;
+    protected $allowed_props   = array('username');
+
+    public $user_settings = array(
+        'active' => array(
+            'type'     => 'boolean',
+            'editable' => false,
+            'hidden'   => false,
+            'default'  => false,
+        ),
+        'label' => array(
+            'type'      => 'text',
+            'editable'  => true,
+            'label'     => 'label',
+            'generator' => 'default_label',
+        ),
+        'created' => array(
+            'type'      => 'datetime',
+            'editable'  => false,
+            'hidden'    => false,
+            'label'     => 'created',
+            'generator' => 'time',
+        ),
+    );
+
+    /**
+     * Static factory method
+     */
+    public static function factory($id, $config)
+    {
+        list($method) = explode(':', $id);
+
+        $classmap = array(
+            'totp'    => '\\Kolab2FA\\Driver\\TOTP',
+            'hotp'    => '\\Kolab2FA\\Driver\\HOTP',
+            'yubikey' => '\\Kolab2FA\\Driver\\Yubikey',
+        );
+
+        $cls = $classmapstrtolower($method);
+        if ($cls && class_exists($cls)) {
+            return new $cls($config, $id);
+        }
+
+        throw new Exception("Unknown 2FA driver '$method'");
+    }
+
+    /**
+     * Default constructor
+     */
+    public function __construct($config = null, $id = null)
+    {
+        $this->init($config);
+
+        if (!empty($id) && $id != $this->method) {
+            $this->id = $id;
+        }
+        else { // generate random ID
+            $this->id = $this->method . ':' . bin2hex(openssl_random_pseudo_bytes(12));
+            $this->temporary = true;
+        }
+    }
+
+    /**
+     * Initialize the driver with the given config options
+     */
+    public function init($config)
+    {
+        if (is_array($config)) {
+            $this->config = array_merge($this->config, $config);
+        }
+
+        if ($config'storage') {
+            $this->storage = \Kolab2FA\Storage\Base::factory($config'storage', $config'storage_config');
+        }
+    }
+
+    /**
+     * Verify the submitted authentication code
+     *
+     * @param string $code The 2nd authentication factor to verify
+     * @param int    $timestamp  Timestamp of authentication process (window start)
+     * @return boolean True if valid, false otherwise
+     */
+    abstract function verify($code, $timestamp = null);
+
+    /**
+     * Getter for user-visible properties
+     */
+    public function props($force = false)
+    {
+        $data = array();
+
+        foreach ($this->user_settings as $key => $p) {
+            if ($p'private') {
+                continue;
+            }
+
+            $data$key = array(
+                'type'     => $p'type',
+                'editable' => $p'editable',
+                'hidden'   => $p'hidden',
+                'label'    => $p'label',
+                'value'    => $this->get($key, $force),
+            );
+
+            // format value into text
+            switch ($p'type') {
+                case 'boolean':
+                    $data$key'value' = (bool)$data$key'value';
+                    $data$key'text' = $data$key'value' ? 'yes' : 'no';
+                    break;
+
+                case 'datetime':
+                    if (is_numeric($data$key'value')) {
+                        $data$key'text' = date('c', $data$key'value');
+                        break;
+                    }
+
+                default:
+                    $data$key'text' = $data$key'value';
+            }
+        }
+
+        return $data;
+    }
+
+    /**
+     * Implement this method if the driver can be prpvisioned via QR code
+     */
+    /* abstract function get_provisioning_uri(); */
+
+    /**
+     * Generate a random secret string
+     */
+    public function generate_secret($length = 16)
+    {
+        // Base32 characters
+        $chars = array(
+            'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', //  7
+            'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P', // 15
+            'Q', 'R', 'S', 'T', 'U', 'V', 'W', 'X', // 23
+            'Y', 'Z', '2', '3', '4', '5', '6', '7', // 31
+        );
+
+        $secret = '';
+        for ($i = 0; $i < $length; $i++) {
+            $secret .= $charsarray_rand($chars);
+        }
+        return $secret;
+    }
+
+    /**
+     * Generate the default label based on the method
+     */
+    public function default_label()
+    {
+        if (class_exists('\\rcmail', false)) {
+            return \rcmail::get_instance()->gettext($this->method, 'kolab_2fa');
+        }
+
+        return strtoupper($this->method);
+    }
+
+    /**

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Exception.php Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/HOTP.php Added

@@ -0,0 +1,128 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication HOTP driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class HOTP extends Base
+{
+    public $method = 'hotp';
+
+    protected $config = array(
+        'digits'   => 6,
+        'window'   => 4,
+        'digest'   => 'sha1',
+    );
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'secret' => array(
+                'type'      => 'text',
+                'private'   => true,
+                'label'     => 'secret',
+                'generator' => 'generate_secret',
+            ),
+            'counter' => array(
+                'type'      => 'integer',
+                'editable'  => false,
+                'hidden'    => true,
+                'generator' => 'random_counter',
+            ),
+        );
+
+        // copy config options
+        $this->backend = new \Kolab2FA\OTP\HOTP();
+        $this->backend
+            ->setDigits($this->config'digits')
+            ->setDigest($this->config'digest')
+            ->setIssuer($this->config'issuer')
+            ->setIssuerIncludedAsParameter(true);
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $secret  = $this->get('secret');
+        $counter = $this->get('counter');
+
+        if (!strlen($secret)) {
+            // LOG: "no secret set for user $this->username"
+            // rcube::console("VERIFY HOTP: no secret set for user $this->username");
+            return false;
+        }
+
+        try {
+            $this->backend->setLabel($this->username)->setSecret($secret)->setCounter(intval($this->get('counter')));
+            $pass = $this->backend->verify($code, $counter, $this->config'window');
+
+            // store incremented counter value
+            $this->set('counter', $this->backend->getCounter());
+            $this->commit();
+        }
+        catch (\Exception $e) {
+            // LOG: exception
+            // rcube::console("VERIFY HOTP: $this->id, " . strval($e));
+            $pass = false;
+        }
+
+        // rcube::console('VERIFY HOTP', $this->username, $secret, $counter, $code, $pass);
+        return $pass;
+    }
+
+    /**
+     *
+     */
+    public function get_provisioning_uri()
+    {
+        if (!$this->secret) {
+            // generate new secret and store it
+            $this->set('secret', $this->get('secret', true));
+            $this->set('counter', $this->get('counter', true));
+            $this->set('created', $this->get('created', true));
+            $this->commit();
+        }
+
+        // TODO: deny call if already active?
+
+        $this->backend->setLabel($this->username)->setSecret($this->secret)->setCounter(intval($this->get('counter')));
+        return $this->backend->getProvisioningUri();
+    }
+
+    /**
+     * Generate a random counter value
+     */
+    public function random_counter()
+    {
+        return mt_rand(1, 999);
+    }
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/TOTP.php Added

@@ -0,0 +1,120 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication TOTP driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class TOTP extends Base
+{
+    public $method = 'totp';
+
+    protected $config = array(
+        'digits'   => 6,
+        'interval' => 30,
+        'digest'   => 'sha1',
+    );
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'secret' => array(
+                'type'      => 'text',
+                'private'   => true,
+                'label'     => 'secret',
+                'generator' => 'generate_secret',
+            ),
+        );
+
+        // copy config options
+        $this->backend = new \Kolab2FA\OTP\TOTP();
+        $this->backend
+            ->setDigits($this->config'digits')
+            ->setInterval($this->config'interval')
+            ->setDigest($this->config'digest')
+            ->setIssuer($this->config'issuer')
+            ->setIssuerIncludedAsParameter(true);
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $secret = $this->get('secret');
+
+        if (!strlen($secret)) {
+            // LOG: "no secret set for user $this->username"
+            // rcube::console("VERIFY TOTP: no secret set for user $this->username");
+            return false;
+        }
+
+        $this->backend->setLabel($this->username)->setSecret($secret);
+
+        // PHP gets a string, but we're comparing integers.
+        $code = (int)$code;
+
+        // Pass a window to indicate the maximum timeslip between client (mobile
+        // device) and server.
+        $pass = $this->backend->verify($code, $timestamp, 150);
+
+        // try all codes from $timestamp till now
+        if (!$pass && $timestamp) {
+            $now = time();
+            while (!$pass && $timestamp < $now) {
+                $pass = $code === $this->backend->at($timestamp);
+                $timestamp += $this->config'interval';
+            }
+        }
+
+        // rcube::console('VERIFY TOTP', $this->username, $secret, $code, $timestamp, $pass);
+        return $pass;
+    }
+
+    /**
+     *
+     */
+    public function get_provisioning_uri()
+    {
+        // rcube::console('PROV', $this->secret);
+        if (!$this->secret) {
+            // generate new secret and store it
+            $this->set('secret', $this->get('secret', true));
+            $this->set('created', $this->get('created', true));
+            // rcube::console('PROV2', $this->secret);
+            $this->commit();
+        }
+
+        // TODO: deny call if already active?
+
+        $this->backend->setLabel($this->username)->setSecret($this->secret);
+        return $this->backend->getProvisioningUri();
+    }
+
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Driver/Yubikey.php Added

@@ -0,0 +1,126 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Yubikey driver implementation
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Driver;
+
+class Yubikey extends Base
+{
+    public $method = 'yubikey';
+
+    protected $backend;
+
+    /**
+     *
+     */
+    public function init($config)
+    {
+        parent::init($config);
+
+        $this->user_settings += array(
+            'yubikeyid' => array(
+                'type'     => 'text',
+                'editable' => true,
+                'label'    => 'secret',
+            ),
+        );
+
+        // initialize validator
+        $this->backend = new \Yubikey\Validate($this->config'apikey', $this->config'clientid');
+
+        // set configured validation hosts
+        if (!empty($this->config'hosts')) {
+            $this->backend->setHosts((array)$this->config'hosts');
+        }
+
+        if (isset($this->config'use_https')) {
+            $this->backend->setUseSecure((bool)$this->config'use_https');
+        }
+    }
+
+    /**
+     *
+     */
+    public function verify($code, $timestamp = null)
+    {
+        // get my secret from the user storage
+        $keyid = $this->get('yubikeyid');
+        $pass  = false;
+
+        if (!strlen($keyid)) {
+            // LOG: "no key registered for user $this->username"
+            return false;
+        }
+
+        // check key prefix with associated Yubikey ID
+        if (strpos($code, $keyid) === 0) {
+            try {
+                $response = $this->backend->check($code);
+                $pass     = $response->success() === true;
+            }
+            catch (\Exception $e) {
+                // TODO: log exception
+            }
+        }
+
+        // rcube::console('VERIFY Yubikey', $this->username, $keyid, $code, $pass);
+        return $pass;
+    }
+
+    /**
+     * @override
+     */
+    public function set($key, $value, $persistent = true)
+    {
+        if ($key == 'yubikeyid' && strlen($value) > 12) {
+            // verify the submitted code
+            try {
+                $response = $this->backend->check($value);
+                if ($response->success() !== true) {
+                    // TODO: report error
+                    return false;
+                }
+            }
+            catch (\Exception $e) {
+                return false;
+            }
+
+            // truncate the submitted yubikey code to 12 characters
+            $value = substr($value, 0, 12);
+        }
+
+        return parent::set($key, $value, $persistent);
+    }
+
+    /**
+     * @override
+     */
+    protected function set_user_prop($key, $value)
+    {
+        // set created timestamp
+        if ($key !== 'created' && !isset($this->created)) {
+            parent::set_user_prop('created', $this->get('created', true));
+        }
+
+        return parent::set_user_prop($key, $value);
+    }
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/Logger.php Added

@@ -0,0 +1,42 @@
+<?php
+
+/**
+ * Logging interface for the Kolab 2-Factor-Authentication components
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+interface Logger
+{
+    /**
+     * Setter for the log name
+     */
+    public function set_name($name);
+
+    /**
+     * Setter for the minimum log level
+     */
+    public function set_level($level);
+
+    /**
+     * Do log the given message at the given level
+     */
+    public function log($level, $message);
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/RcubeLogger.php Added

@@ -0,0 +1,80 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Logging class to log messages
+ * through the Roundcube logging facilities.
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+use \rcube;
+
+class RcubeLogger implements Logger
+{
+    protected $name = null;
+    protected $level = LOG_DEBUG;
+
+    public function __construct($name = null)
+    {
+        if ($name !== null) {
+            $this->set_name($name);
+        }
+    }
+
+    public function set_name($name)
+    {
+        $this->name = $name;
+    }
+
+    public function set_level($name)
+    {
+        $this->level = $level;
+    }
+
+    public function log($level, $message)
+    {
+        if (!is_string($message)) {
+            $message = var_export($message, true);
+        }
+
+        switch ($level) {
+        case LOG_DEBUG:
+        case LOG_INFO:
+        case LOG_NOTICE:
+            if ($level >= $this->level) {
+                rcube::write_log($this->name ?: 'console', $message);
+            }
+            break;
+
+        case LOG_EMERGE:
+        case LOG_ALERT:
+        case LOG_CRIT:
+        case LOG_ERR:
+        case LOG_WARNING:
+            rcube::raise_error(array(
+                'code' => 600,
+                'type' => 'php',
+                'message' => $message,
+            ), true, false);
+            break;
+        }
+    }
+}
+

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Log/Syslog.php Added

@@ -0,0 +1,54 @@
+<?php
+
+/**
+ * Kolab 2-Factor-Authentication Logging class to log messages
+ * through the Roundcube logging facilities.
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Log;
+
+use \rcube;
+
+class Syslog implements Logger
+{
+    protected $name = 'Kolab2FA';
+    protected $level = LOG_INFO;
+
+    public function set_name($name)
+    {
+        $this->name = $name;
+    }
+
+    public function set_level($name)
+    {
+        $this->level = $level;
+    }
+
+    public function log($level, $message)
+    {
+        if ($level >= $this->level) {
+            if (!is_string($message)) {
+                $message = var_export($message, true);
+            }
+
+            syslog($level, '' . $this->name . ' ' . $message);
+        }
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/HOTP.php Added

@@ -0,0 +1,58 @@
+<?php
+
+/**
+ * Kolab HOTP implementation based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+namespace Kolab2FA\OTP;
+
+use OTPHP\HOTP as Base;
+
+class HOTP extends Base
+{
+    use OTP;
+    protected $counter = 0;
+
+    public function setCounter($counter)
+    {
+        if (!is_integer($counter) || $counter < 0) {
+            throw new \Exception('Counter must be at least 0.');
+        }
+        $this->counter = $counter;
+
+        return $this;
+    }
+
+    public function getCounter()
+    {
+        return $this->counter;
+    }
+
+    public function updateCounter($counter)
+    {
+        $this->counter = $counter;
+
+        return $this;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/OTP.php Added

@@ -0,0 +1,133 @@
+<?php
+
+/**
+ * Kolab OTP trait based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\OTP;
+
+trait OTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+
+    public function setSecret($secret)
+    {
+        $this->secret = $secret;
+
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception('Label must not contain a semi-colon.');
+        }
+        $this->label = $label;
+
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception('Issuer must not contain a semi-colon.');
+        }
+        $this->issuer = $issuer;
+
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if (!is_numeric($digits) || $digits < 1) {
+            throw new \Exception('Digits must be at least 1.');
+        }
+        $this->digits = $digits;
+
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if (!in_array($digest, array('md5', 'sha1', 'sha256', 'sha512'))) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/OTP/TOTP.php Added

@@ -0,0 +1,50 @@
+<?php
+
+/**
+ * Kolab TOTP implementation based on Spomky-Labs/otphp
+ *
+ * This basically follows the exmaple implementation from
+ * https://github.com/Spomky-Labs/otphp/tree/master/examples
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\OTP;
+
+use OTPHP\TOTP as Base;
+
+class TOTP extends Base
+{
+    use OTP;
+    protected $interval = 30;
+
+    public function setInterval($interval)
+    {
+        if (!is_integer($interval) || $interval < 1) {
+            throw new \Exception('Interval must be at least 1.');
+        }
+        $this->interval = $interval;
+
+        return $this;
+    }
+
+    public function getInterval()
+    {
+        return $this->interval;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/Base.php Added

@@ -0,0 +1,127 @@
+<?php
+
+/**
+ * Abstract storage backend class for the Kolab 2-Factor-Authentication plugin
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \Kolab2FA\Log;
+
+
+abstract class Base
+{
+    public $username = null;
+    protected $config = array();
+    protected $logger;
+
+    /**
+     *
+     */
+    public static function factory($backend, $config)
+    {
+        $classmap = array(
+            'ldap' => '\\Kolab2FA\\Storage\\LDAP',
+            'roundcube' => '\\Kolab2FA\\Storage\\RcubeUser',
+            'rcubeuser' => '\\Kolab2FA\\Storage\\RcubeUser',
+        );
+
+        $cls = $classmapstrtolower($backend);
+        if ($cls && class_exists($cls)) {
+            return new $cls($config);
+        }
+
+        throw new Exception("Unknown storage backend '$backend'");
+    }
+
+    /**
+     * Default constructor
+     */
+    public function __construct($config = null)
+    {
+        if (is_array($config)) {
+            $this->init($config);
+        }
+    }
+
+    /**
+     * Initialize the driver with the given config options
+     */
+    public function init(array $config)
+    {
+        $this->config = array_merge($this->config, $config);
+
+        // use syslog logger by default
+        $this->set_logger(new Log\Syslog());
+    }
+
+    /**
+     * 
+     */
+    public function set_logger(Log\Logger $logger)
+    {
+        $this->logger = $logger;
+
+        if ($this->config'debug') {
+            $this->logger->set_level(LOG_DEBUG);
+        }
+        else if ($this->config'loglevel') {
+            $this->logger->set_level($this->config'loglevel');
+        }
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        $this->username = $username;
+    }
+
+    /**
+     * Send messager to the logging system
+     */
+    protected function log($level, $message)
+    {
+        if ($this->logger) {
+            $this->logger->log($level, $message);
+        }
+    }
+
+    /**
+     * List keys holding settings for 2-factor-authentication
+     */
+    abstract public function enumerate();
+
+    /**
+     * Read data for the given key
+     */
+    abstract public function read($key);
+
+    /**
+     * Save data for the given key
+     */
+    abstract public function write($key, $value);
+
+    /**
+     * Remove the data stored for the given key
+     */
+    abstract public function remove($key);
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/Exception.php Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/LDAP.php Added

@@ -0,0 +1,349 @@
+<?php
+
+/**
+ * Storage backend to store 2-Factor-Authentication settings in LDAP
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \Net_LDAP3;
+use \Kolab2FA\Log\Logger;
+
+class LDAP extends Base
+{
+    public $userdn;
+
+    private $cache = array();
+    private $ldapcache = array();
+    private $conn;
+    private $error;
+
+    public function init(array $config)
+    {
+        parent::init($config);
+
+        $this->conn = new Net_LDAP3($config);
+        $this->conn->config_set('log_hook', array($this, 'log'));
+
+        $this->conn->connect();
+
+        $bind_pass = $this->config'bind_pass';
+        $bind_user = $this->config'bind_user';
+        $bind_dn   = $this->config'bind_dn';
+
+        $this->ready = $this->conn->bind($bind_dn, $bind_pass);
+
+        if (!$this->ready) {
+            throw new Exception("LDAP storage not ready: " . $this->error);
+        }
+    }
+
+    /**
+     * List/set methods activated for this user
+     */
+    public function enumerate($active = true)
+    {
+        $filter  = $this->parse_vars($this->config'filter',  '*');
+        $base_dn = $this->parse_vars($this->config'base_dn', '*');
+        $scope   = $this->config'scope' ?: 'sub';
+        $ids     = array();
+
+        if ($this->ready && ($result = $this->conn->search($base_dn, $filter, $scope, array($this->config'fieldmap''id', $this->config'fieldmap''active')))) {
+            foreach ($result as $dn => $entry) {
+                $rec = $this->field_mapping($dn, Net_LDAP3::normalize_entry($entry, true));
+                if (!empty($rec'id') && ($active === null || $active == $rec'active')) {
+                    $ids = $rec'id';
+                }
+            }
+        }
+
+        // TODO: cache this in memory
+
+        return $ids;
+    }
+
+    /**
+     * Read data for the given key
+     */
+    public function read($key)
+    {
+        if (!isset($this->cache$key)) {
+            $this->cache$key = $this->get_ldap_record($this->username, $key);
+        }
+
+        return $this->cache$key;
+    }
+
+    /**
+     * Save data for the given key
+     */
+    public function write($key, $value)
+    {
+        $success = false;
+        $ldap_attrs = array();
+
+        if (is_array($value)) {
+            // add some default values
+            $value += (array)$this->config'defaults' + array('active' => false, 'username' => $this->username, 'userdn' => $this->userdn);
+
+            foreach ($value as $k => $val) {
+                if ($attr = $this->config'fieldmap'$k) {
+                    $ldap_attrs$attr = $this->value_mapping($k, $val, false);
+                }
+            }
+        }
+        else {
+            // invalid data structure
+            return false;
+        }
+
+        // update existing record
+        if ($rec = $this->get_ldap_record($this->username, $key)) {
+            $old_attrs = $rec'_raw';
+            $new_attrs = array_merge($old_attrs, $ldap_attrs);
+
+            $result = $this->conn->modify_entry($rec'_dn', $old_attrs, $new_attrs);
+            $success = !empty($result);
+        }
+        // insert new record
+        else if ($this->ready) {
+            $entry_dn = $this->get_entry_dn($this->username, $key);
+
+            // add object class attribute
+            $me = $this;
+            $ldap_attrs'objectclass' = array_map(function($cls) use ($me, $key) {
+                return $me->parse_vars($cls, $key);
+            }, (array)$this->config'objectclass');
+
+            $success = $this->conn->add_entry($entry_dn, $ldap_attrs);
+        }
+
+        if ($success) {
+            $this->cache$key = $value;
+            $this->ldapcache = array();
+
+            // cleanup: remove disabled/inactive/temporary entries
+            if ($value'active') {
+                foreach ($this->enumerate(false) as $id) {
+                    if ($id != $key) {
+                        $this->remove($id);
+                    }
+                }
+
+                // set user roles according to active factors
+                $this->set_user_roles();
+            }
+        }
+
+        return $success;
+    }
+
+    /**
+     * Remove the data stored for the given key
+     */
+    public function remove($key)
+    {
+        if ($this->ready) {
+            $entry_dn = $this->get_entry_dn($this->username, $key);
+            $success = $this->conn->delete_entry($entry_dn);
+
+            // set user roles according to active factors
+            if ($success) {
+                $this->set_user_roles();
+            }
+
+            return $success;
+        }
+
+        return false;
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        parent::set_username($username);
+
+        // reset cached values
+        $this->cache = array();
+        $this->ldapcache = array();
+    }
+
+    /**
+     *
+     */
+    protected function set_user_roles()
+    {
+        if (!$this->ready || !$this->userdn || empty($this->config'user_roles')) {
+            return false;
+        }
+
+        $auth_roles = array();

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/lib/Kolab2FA/Storage/RcubeUser.php Added

@@ -0,0 +1,195 @@
+<?php
+
+/**
+ * Storage backend to use the Roundcube user prefs to store 2-Factor-Authentication settings
+ *
+ * @author Thomas Bruederli <bruederli@kolabsys.com>
+ *
+ * Copyright (C) 2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+namespace Kolab2FA\Storage;
+
+use \rcmail;
+use \rcube_user;
+
+class RcubeUser extends Base
+{
+    // sefault config
+    protected $config = array(
+        'keymap' => array(),
+    );
+
+    private $cache = array();
+    private $user;
+
+    public function init(array $config)
+    {
+        parent::init($config);
+
+        $rcmail = rcmail::get_instance();
+        $this->config'hostname' = $rcmail->user->ID ? $rcmail->user->data'mail_host' : $_SESSION'hostname';
+    }
+
+    /**
+     * List/set methods activated for this user
+     */
+    public function enumerate()
+    {
+        if ($factors = $this->get_factors()) {
+            return array_keys(array_filter($factors, function($prop) {
+                return !empty($prop'active');
+            }));
+        }
+
+        return array();
+    }
+
+    /**
+     * Read data for the given key
+     */
+    public function read($key)
+    {
+        if (!isset($this->cache$key)) {
+            $factors = $this->get_factors();
+            $this->log(LOG_DEBUG, 'RcubeUser::read() ' . $key);
+            $this->cache$key = $factors$key;
+        }
+
+        return $this->cache$key;
+    }
+
+    /**
+     * Save data for the given key
+     */
+    public function write($key, $value)
+    {
+        $this->log(LOG_DEBUG, 'RcubeUser::write() ' . @json_encode($value));
+
+        if ($user = $this->get_user($this->username)) {
+            $this->cache$key = $value;
+
+            $factors = $this->get_factors();
+            $factors$key = $value;
+
+            $pkey = $this->key2property('blob');
+            $save_data = array($pkey => $factors);
+            $update_index = false;
+
+            // remove entry
+            if ($value === null) {
+                unset($factors$key);
+                $update_index = true;
+            }
+            // remove non-active entries
+            else if (!empty($value'active')) {
+                $factors = array_filter($factors, function($prop) {
+                    return !empty($prop'active');
+                });
+                $update_index = true;
+            }
+
+            // update the index of active factors
+            if ($update_index) {
+                $save_data$this->key2property('factors') = array_keys(
+                    array_filter($factors, function($prop) {
+                        return !empty($prop'active');
+                    })
+                );
+            }
+
+            $success = $user->save_prefs($save_data, true);
+
+            if (!$success) {
+                $this->log(LOG_WARNING, sprintf('Failed to save prefs for user %s', $this->username));
+            }
+
+            return $success;
+        }
+
+        return false;
+    }
+
+    /**
+     * Remove the data stored for the given key
+     */
+    public function remove($key)
+    {
+        return $this->write($key, null);
+    }
+
+    /**
+     * Set username to store data for
+     */
+    public function set_username($username)
+    {
+        parent::set_username($username);
+
+        // reset cached values
+        $this->cache = array();
+        $this->user = null;
+    }
+
+    /**
+     * Helper method to get a rcube_user instance for storing prefs
+     */
+    private function get_user($username)
+    {
+        // use global instance if we have a valid Roundcube session
+        $rcmail = rcmail::get_instance();
+        if ($rcmail->user->ID && $rcmail->user->get_username() == $username) {
+            return $rcmail->user;
+        }
+
+        if (!$this->user) {
+            $this->user = rcube_user::query($username, $this->config'hostname');
+        }
+
+        if (!$this->user) {
+            $this->log(LOG_WARNING, sprintf('No user record found for %s @ %s', $username, $this->config'hostname'));
+        }
+
+        return $this->user;
+    }
+
+    /**
+     *
+     */
+    private function get_factors()
+    {
+        if ($user = $this->get_user($this->username)) {
+            $prefs = $user->get_prefs();
+            return (array)$prefs$this->key2property('blob');
+        }
+
+        return null;
+    }
+
+    /**
+     *
+     */
+    private function key2property($key)
+    {
+        // map key to configured property name
+        if (is_array($this->config'keymap') && isset($this->config'keymap'$key)) {
+            return $this->config'keymap'$key;
+        }
+
+        // default
+        return 'kolab_2fa_' . $key;
+    }
+
+}

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/bg_BG.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/ca_ES.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/cs_CZ.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/da_DK.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/de.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/de_CH.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/de_DE.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/el.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/en_US.inc Added

@@ -0,0 +1,57 @@
+<?php
+
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+
+$labels'factor' = 'Factor';
+$labels'secret' = 'Secret Key';
+$labels'created' = 'Created';
+$labels'remove' = 'Remove';
+$labels'continue' = 'Continue';
+
+$labels'settingslist' = 'Multi-Factor Auth';
+$labels'settingstitle' = 'Authentication Factors';
+
+$labels'totp' = 'Mobile App (TOTP)';
+$labels'hotp' = 'Mobile App (HOTP)';
+$labels'yubikey' = 'Yubikey';
+
+$labels'or' = 'or';
+$labels'yes' = 'yes';
+$labels'no' = 'no';
+
+$labels'label' = 'Name';
+$labels'qrcode' = 'QR Code';
+$labels'showqrcode' = 'Show QR Code';
+$labels'qrcodeexplaintotp' = 'Download an authenticator app on your phone. Two apps which work well are <strong>FreeOTP</strong> and <strong>Google Authenticator</strong>, but any other TOTP app should also work.<br/><br/>
+Launch the app on your phone, and add a new entry for this service. When prompted, scan the QR code below to configure your mobile app.';
+$labels'qrcodeexplainhotp' = 'Download an authenticator app on your phone. One app known to work well is <strong>Google Authenticator</strong>, but any other HOTP app should also work.<br/><br/>
+Launch the app on your phone, and add a new entry for this service. When prompted, scan the QR code below to configure your mobile app.';
+
+$labels'yubikeyid' = 'Your YubiKey ID';
+$labels'yubikeyidexplainyubikey' = 'Press your YubiKey once and submit the generated code';
+
+$labels'addfactor' = 'Add Authentication Factor';
+$labels'testfactor' = 'Test this factor';
+$labels'verifycode' = 'Verify Code';
+$labels'verifycodeexplaintotp' = 'Once you have scanned the QR code, enter the 6-digit verification code generated by the authenticator app.';
+$labels'verifycodeexplainhotp' = 'Once you have scanned the QR code, enter the 6-digit verification code generated by the authenticator app.';
+
+$labels'loginexpired' = 'Login request expired! Please try again.';
+$labels'authremoveconfirm' = 'Do you really want to remove this authentication factor from your account?';
+$labels'verifycodemissing' = 'Please enter the verification code from your device';
+
+$labels'factorsavesuccess' = 'Successfully saved authentication factor';
+$labels'factorremovesuccess' = 'Successfully removed the authentication factor';
+$labels'factorsaveerror' = 'Failed to save authentication factor settings';
+$labels'codeverificationpassed' = 'Code verification for $method passed';
+$labels'codeverificationfailed' = 'Code verification for $method failed';
+
+$labels'highsecurityrequired' = 'Entering High Security - Verification required';
+$labels'highsecuritydialog' = 'High security mode helps protect your account from security threats, like session theft or someone messing with your stuff while you\'re away. To enter high security mode, confirm your credentials with the additional authentication factor:';
+$labels'enterhighsecurity' = 'Confirm';

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/es_AR.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/es_ES.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/et_EE.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/fi_FI.inc Added

@@ -0,0 +1,35 @@
+<?php
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+$labels'factor' = 'Tekijä';
+$labels'secret' = 'Salainen avain';
+$labels'created' = 'Luotu';
+$labels'remove' = 'Poista';
+$labels'continue' = 'Jatka';
+$labels'settingslist' = 'Monivaiheinen tunnistautuminen';
+$labels'settingstitle' = 'Tunnistautumistekijät';
+$labels'totp' = 'Mobiilisovellus (TOTP)';
+$labels'hotp' = 'Mobiilisovellus (HOTP)';
+$labels'yubikey' = 'Yubikey';
+$labels'or' = 'tai';
+$labels'yes' = 'kyllä';
+$labels'no' = 'ei';
+$labels'label' = 'Nimi';
+$labels'qrcode' = 'QR-koodi';
+$labels'showqrcode' = 'Näytä QR-koodi';
+$labels'yubikeyid' = 'YubiKey-tunnisteesi';
+$labels'yubikeyidexplainyubikey' = 'Paina YubiKeytasi kerran ja kirjoita luotu koodi';
+$labels'addfactor' = 'Lisää tunnistautumistekijä';
+$labels'testfactor' = 'Testaa tätä tekijää';
+$labels'verifycode' = 'Vahvista koodi';
+$labels'loginexpired' = 'Kirjautumispyyntö vanheni! Yritä uudelleen.';
+$labels'authremoveconfirm' = 'Haluatko varmasti poistaa tämän tunnistautumistekijän tililtäsi?';
+$labels'verifycodemissing' = 'Kirjoita vahvistuskoodi laitteeltasi';
+$labels'factorsavesuccess' = 'Tunnistautumistekijä tallennettu onnistuneesti';
+$labels'factorremovesuccess' = 'Tunnistautumistekijä poistettu onnistuneesti';
+$labels'enterhighsecurity' = 'Vahvista';

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/fr_FR.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/he_IL.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/hr_HR.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/hu_HU.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/it_IT.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/ja_JP.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/ko_KR.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/lv.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/nl_NL.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/pl.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/pl_PL.inc Added

@@ -0,0 +1,32 @@
+<?php
+/**
+ * Localizations for the Kolab 2-Factor-Auth plugin
+ *
+ * Copyright (C) 2015, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_2fa/
+ */
+$labels'factor' = 'Czynnik';
+$labels'secret' = 'Tajny klucz ';
+$labels'created' = 'Utworzono';
+$labels'remove' = 'Usuń';
+$labels'continue' = 'Kontynuuj';
+$labels'settingslist' = 'Uwierzytelnianie wieloetapowe';
+$labels'settingstitle' = 'Czynniki uwierzytelniania';
+$labels'totp' = 'Aplikacja mobilna (TOTP)';
+$labels'hotp' = 'Aplikacja mobilna (HOTP)';
+$labels'yubikey' = 'Yubikey';
+$labels'or' = 'lub';
+$labels'yes' = 'tak';
+$labels'no' = 'nie';
+$labels'label' = 'Nazwa';
+$labels'qrcode' = 'Kod QR';
+$labels'showqrcode' = 'Pokaż kod QR';
+$labels'qrcodeexplaintotp' = 'Pobierz aplikację uwierzytelniającą na swój telefon. <strong>FreeOTP</strong> i <strong>Google Authenticator</strong> są przetestowane, ale dowolna aplikacja TOTP powinna również działać.<br/><br/>
+Uruchom aplikację na swoim telefonie i zarejestruj tą usługę. Gdy aplikacja o to poprosi, zeskanuj kod QR.';
+$labels'qrcodeexplainhotp' = 'Pobierz aplikację uwierzytelniającą na swój telefon. <strong>Google Authenticator</strong> jest znana z poprawnej pracy, ale dowolna aplikacja HOTP powinna również działać.<br/><br/>
+Uruchom aplikację na swoim telefonie i zarejestruj tą usługę. Gdy aplikacja o to poprosi, zeskanuj kod QR.';
+$labels'yubikeyid' = 'Twój identyfikator Yubikey';
+$labels'yubikeyidexplainyubikey' = 'Naciśnij swojego Yubikeya i wprowadź wygenerowany kod';
+$labels'addfactor' = 'Dodaj czynnik uwierzytelniający';
+$labels'enterhighsecurity' = 'Potwierdź';

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/pt_BR.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/pt_PT.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/ru_RU.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/sk_SK.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/sl_SI.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/sv.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/sv_SE.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/th_TH.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/uk_UA.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/vi_VN.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/zh_CN.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/localization/zh_TW.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/elastic Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/elastic/templates Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/elastic/templates/config.html Added

@@ -0,0 +1,25 @@
+<roundcube:include file="includes/layout.html" />
+<roundcube:include file="includes/menu.html" />
+<roundcube:include file="includes/settings-menu.html" />
+
+<h1 class="voice"><roundcube:label name="kolab_2fa.settingstitle" /></h1>
+
+<div id="layout-content" class="selected no-navbar" role="main">
+	<h2 id="aria-label-toolbar" class="voice"><roundcube:label name="arialabeltoolbar" /></h2>
+	<div class="header" role="toolbar" aria-labelledby="aria-label-toolbar">
+		<a class="button icon back-list-button" href="#back"><span class="inner"><roundcube:label name="back" /></span></a>
+		<span class="header-title"><roundcube:label name="kolab_2fa.settingstitle" /></span>
+		<div class="toolbar menu"></div>
+	</div>
+	<div class="scroller frame-content">
+		<p class="addfactor">
+			<roundcube:object name="plugin.factoradder" class="form-control" />
+		</p>
+		<roundcube:object name="plugin.settingslist" class="authentication-factors" />
+	</div>
+</div>
+
+<roundcube:object name="plugin.settingsform" class="propform" />
+<roundcube:object name="plugin.highsecuritydialog" class="kolab2fa-highsecuritydialog hidden" />
+
+<roundcube:include file="includes/footer.html" />

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/larry Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/larry/kolab2fa.css Added

@@ -0,0 +1,93 @@
+
+.propform .formbuttons {
+	margin-top: 1em;
+}
+
+.propform .explain {
+	max-width: 40em;
+	margin-top: 0.4em;
+	margin-bottom: 0.8em;
+}
+
+.propform .kolab2fa-showqr {
+	font-weight: bold;
+}
+
+.propform tr.hidden {
+	display: none;
+}
+
+table.propform thead th {
+	text-align: left;
+	padding: 6px 10px;
+}
+
+table.propform td.title {
+	vertical-align: top;
+	padding-top: 0.8em;
+}
+
+table.propform td.title > label {
+	line-height: 1.8em;
+}
+
+.propform img.qrcode {
+	min-width: 260px;
+	min-height: 260px;
+}
+
+table.authentication-factors {
+	width: 99%;
+	max-width: 60em;
+	border: 0;
+}
+
+table.authentication-factors td.name {
+	width: 60%;
+	font-weight: bold;
+}
+
+table.authentication-factors td.name:before {
+	content: "\2714";
+	display: inline-block;
+	margin-right: 1em;
+/*
+	width: 1.5em;
+	line-height: 1.5em;
+	text-align: center;
+	color: #c7e3ef;
+	background: #004458;
+	border-radius: 50%;
+*/
+}
+
+table.authentication-factors td.created {
+	width: 12em;
+	white-space: nowrap;
+}
+
+table.authentication-factors td.actions {
+	width: 8em;
+	white-space: nowrap;
+	text-align: right;
+}
+
+table.authentication-factors td.actions a.button {
+	padding: 2px 8px;
+	cursor: default;
+}
+
+.kolab2fa-highsecuritydialog {
+	display: none;
+}
+
+.ui-dialog-content .propform > label {
+	display: inline-block;
+	padding-top: 0.3em;
+	min-width: 12em;
+	font-weight: bold;
+}
+
+.ui-dialog-content .propform .verifycode {
+	width: 20em;
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/larry/templates Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/skins/larry/templates/config.html Added

@@ -0,0 +1,34 @@
+<roundcube:object name="doctype" value="html5" />
+<html>
+<head>
+<title><roundcube:object name="pagetitle" /></title>
+<roundcube:include file="/includes/links.html" />
+</head>
+<body class="noscroll">
+
+<roundcube:include file="/includes/header.html" />
+
+<div id="mainscreen" class="offset">
+
+<roundcube:include file="/includes/settingstabs.html" />
+
+<div id="pluginbody" class="uibox contentbox scroller">
+    <h1 class="boxtitle"><roundcube:object name="steptitle" /></h1>
+    <div class="boxcontent propform">
+        <p class="addfactor">
+            <roundcube:object name="plugin.factoradder" />
+        </p>
+        <roundcube:object name="plugin.settingslist" class="propform authentication-factors" />
+    </div>
+</div>
+
+</div>
+
+<roundcube:object name="plugin.settingsform" class="propform" />
+
+<roundcube:object name="plugin.highsecuritydialog" class="kolab2fa-highsecuritydialog" />
+
+<roundcube:include file="/includes/footer.html" />
+
+</body>
+</html>

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/tests Added

roundcubemail-1.5.tar.gz/plugins/kolab_2fa/tests/LocalizationTest.php Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_activesync/kolab_activesync.php -> roundcubemail-1.5.tar.gz/plugins/kolab_activesync/kolab_activesync.php Changed

roundcubemail-1.5.3.tar.gz/plugins/kolab_addressbook/drivers/kolab/kolab_contacts.php -> roundcubemail-1.5.tar.gz/plugins/kolab_addressbook/drivers/kolab/kolab_contacts.php Changed

@@ -778,14 +778,17 @@
                 }
                 else {
                     // remove from distribution lists
-                    foreach ((array) $this->groupmembers$id as $gid) {
-                        if (!$is_mailto || $gid == $this->gid) {
-                            $this->remove_from_group($gid, $id);
+                    if (!empty($this->groupmembers$id)) {
+                        foreach ((array) $this->groupmembers$id as $gid) {
+                            if (!$is_mailto || $gid == $this->gid) {
+                                $this->remove_from_group($gid, $id);
+                            }
                         }
+
+                        // clear internal cache
+                        unset($this->groupmembers$id);
                     }
 
-                    // clear internal cache
-                    unset($this->groupmembers$id);
                     $count++;
                 }
             }
@@ -1398,7 +1401,7 @@
                 'birthday' => '',
                 'anniversary' => '',
                 'freebusyurl' => '',
-                'photo' => $contact'photo'
+                'photo' => $contact'photo' ?? null
             );
     }
 }

roundcubemail-1.5.3.tar.gz/plugins/kolab_addressbook/kolab_addressbook.php -> roundcubemail-1.5.tar.gz/plugins/kolab_addressbook/kolab_addressbook.php Changed

roundcubemail-1.5.3.tar.gz/plugins/kolab_delegation/kolab_delegation.php -> roundcubemail-1.5.tar.gz/plugins/kolab_delegation/kolab_delegation.php Changed

@@ -473,7 +473,7 @@
             $delegate = $engine->delegate_get($id);
         }
 
-        if ($delegate) {
+        if (!empty($delegate)) {
             $input = new html_hiddenfield(array('name' => $field_id, 'id' => $field_id, 'size' => 40));
             $input = rcube::Q($delegate'name') . $input->show($id);
 
@@ -511,7 +511,7 @@
             $delegate = $engine->delegate_get($id);
         }
 
-        $folder_data   = $engine->list_folders($delegate'uid');
+        $folder_data   = $engine->list_folders(!empty($delegate) ? $delegate'uid' : null);
         $use_fieldsets = rcube_utils::get_boolean($attrib'use-fieldsets');
         $rights        = array();
         $folder_groups = array();
@@ -521,6 +521,8 @@
             $rights$folder_name = $folder'rights';
         }
 
+        $html = '';
+
         // build block for every folder type
         foreach ($folder_groups as $type => $group) {
             if (empty($group)) {
@@ -550,8 +552,8 @@
     private function delegate_folders_block($a_folders, $attrib, $rights)
     {
         $path      = 'plugins/kolab_delegation/' . $this->skin_path . '/';
-        $read_ico  = $attrib'readicon' ? html::img(array('src' =>  $path . $attrib'readicon', 'title' => $this->gettext('read'))) : '';
-        $write_ico = $attrib'writeicon' ? html::img(array('src' => $path . $attrib'writeicon', 'title' => $this->gettext('write'))) : '';
+        $read_ico  = !empty($attrib'readicon') ? html::img(array('src' =>  $path . $attrib'readicon', 'title' => $this->gettext('read'))) : '';
+        $write_ico = !empty($attrib'writeicon') ? html::img(array('src' => $path . $attrib'writeicon', 'title' => $this->gettext('write'))) : '';
 
         $table = new html_table(array('cellspacing' => 0, 'class' => 'table-striped'));
         $table->add_header(array('class' => 'read checkbox-cell', 'title' => $this->gettext('read'), 'tabindex' => 0), $read_ico);

roundcubemail-1.5.3.tar.gz/plugins/kolab_delegation/kolab_delegation_engine.php -> roundcubemail-1.5.tar.gz/plugins/kolab_delegation/kolab_delegation_engine.php Changed

@@ -38,6 +38,7 @@
     private $ldap_dn;
     private $cache = array();
     private $folder_types = array('mail', 'event', 'task');
+    private $supported;
 
     const ACL_READ  = 1;
     const ACL_WRITE = 2;
@@ -378,7 +379,7 @@
         // Definition of read and write ACL
         $right_types = $this->right_types();
 
-        $delegate_lc = strtolower($delegate);
+        $delegate_lc = strtolower((string) $delegate);
 
         foreach ($folders as $folder) {
             // get only folders in personal namespace
@@ -387,8 +388,8 @@
             }
 
             $rights = null;
-            $type   = $metadata$folder ?: 'mail';
-            list($class, $subclass) = explode('.', $type);
+            $type   = !empty($metadata$folder) ? $metadata$folder : 'mail';
+            list($class, $subclass) = strpos($type, '.') ? explode('.', $type) : $type, '';
 
             if (!in_array($class, $this->folder_types)) {
                 continue;
@@ -398,7 +399,7 @@
             if ($delegate) {
                 // @TODO: cache ACL
                 $imap_acl = $storage->get_acl($folder);
-                if (!empty($imap_acl) && (($acl = $imap_acl$delegate) || ($acl = $imap_acl$delegate_lc))) {
+                if (!empty($imap_acl) && (($acl = ($imap_acl$delegate ?? null)) || ($acl = ($imap_acl$delegate_lc ?? null)))) {
                     if ($this->acl_compare($acl, $right_typesself::ACL_WRITE)) {
                         $rights = self::ACL_WRITE;
                     }

roundcubemail-1.5.3.tar.gz/plugins/kolab_folders/kolab_folders.php -> roundcubemail-1.5.tar.gz/plugins/kolab_folders/kolab_folders.php Changed

@@ -219,7 +219,7 @@
             return $args;
         }
 
-        if ($args'options''is_root') {
+        if (!empty($args'options''is_root')) {
             return $args;
         }
 
@@ -231,13 +231,15 @@
         }
 
         // Get type of the folder or the parent
+        $subtype = '';
         if (strlen($mbox)) {
             list($ctype, $subtype) = $this->get_folder_type($mbox);
-            if (strlen($args'parent_name') && $subtype == 'default')
+            if (strlen($args'parent_name') && $subtype == 'default') {
                 $subtype = ''; // there can be only one
+            }
         }
 
-        if (!$ctype) {
+        if (empty($ctype)) {
             $ctype = 'mail';
         }
 
@@ -297,13 +299,13 @@
         $args'form''props''fieldsets''settings''content''folderctype' = array(
             'label' => $this->gettext('folderctype'),
             'value' => html::div('input-group',
-                $type_select->show(isset($new_ctype) ? $new_ctype : $ctype)
-                . $sub_select->show(isset($new_subtype) ? $new_subtype : $subtype)
+                $type_select->show($new_ctype ?? $ctype)
+                . $sub_select->show($new_subtype ?? $subtype)
             ),
         );
 
         $this->rc->output->set_env('kolab_folder_subtypes', $sub_types);
-        $this->rc->output->set_env('kolab_folder_subtype', isset($new_subtype) ? $new_subtype : $subtype);
+        $this->rc->output->set_env('kolab_folder_subtype', $new_subtype ?? $subtype);
 
         $this->add_expire_input($args'form', $args'name', $ctype);
 
@@ -530,7 +532,7 @@
     /**
      * Checks if IMAP server supports any of METADATA, ANNOTATEMORE, ANNOTATEMORE2
      *
-     * @return boolean
+     * @return bool
      */
     function metadata_support()
     {
@@ -550,7 +552,13 @@
      */
     function get_folder_type($folder)
     {
-        return explode('.', (string)kolab_storage::folder_type($folder));
+        $type = explode('.', (string)kolab_storage::folder_type($folder));
+
+        if (!isset($type1)) {
+            $type1 = null;
+        }
+
+        return $type;
     }
 
     /**
@@ -559,7 +567,7 @@
      * @param string $folder Folder name
      * @param string $type   Content type
      *
-     * @return boolean True on success
+     * @return bool True on success
      */
     function set_folder_type($folder, $type = 'mail')
     {

roundcubemail-1.5.3.tar.gz/plugins/kolab_notes/kolab_notes.php -> roundcubemail-1.5.tar.gz/plugins/kolab_notes/kolab_notes.php Changed

@@ -484,10 +484,9 @@
                 // post-filter search results
                 if (strlen($search)) {
                     $matches = 0;
-                    $contents = mb_strtolower(
-                        $record'title' .
-                        ($this->is_html($record) ? strip_tags($record'description') : $record'description')
-                    );
+                    $desc = $this->is_html($record) ? strip_tags($record'description') : ($record'description' ?? '');
+                    $contents = mb_strtolower($record'title' . $desc);
+
                     foreach ($words as $word) {
                         if (mb_strpos($contents, $word) !== false) {
                             $matches++;
@@ -615,7 +614,7 @@
         $action = rcube_utils::get_input_value('_do', rcube_utils::INPUT_POST);
         $note   = rcube_utils::get_input_value('_data', rcube_utils::INPUT_POST, true);
 
-        $success = $silent = false;
+        $success = $silent = $refresh = false;
         switch ($action) {
             case 'new':
             case 'edit':
@@ -1266,7 +1265,9 @@
     private function is_html($note)
     {
         // check for opening and closing <html> or <body> tags
-        return (preg_match('/<(html|body)(\s+a-z|>)/', $note'description', $m) && strpos($note'description', '</'.$m1.'>') > 0);
+        return !empty($note'description')
+            && preg_match('/<(html|body)(\s+a-z|>)/', $note'description', $m)
+            && strpos($note'description', '</' . $m1 . '>') > 0;
     }
 
     /**

roundcubemail-1.5.3.tar.gz/plugins/kolab_notes/kolab_notes_ui.php -> roundcubemail-1.5.tar.gz/plugins/kolab_notes/kolab_notes_ui.php Changed

roundcubemail-1.5.tar.gz/plugins/kolab_sso Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/LICENSE Added

@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the

roundcubemail-1.5.tar.gz/plugins/kolab_sso/README Added

@@ -0,0 +1,80 @@
+Single Sign On Authentication for Kolab
+---------------------------------------
+
+This plugin adds possibility to authenticate users via external authentication
+services. Currently it supports various authentication methods based on
+OAuth2 and OpenID Connect (and requires JWT token use).
+
+Because Kolab backends do not support token authentication it is required
+to use master user (sasl proxy) authentication where possible and service
+user credentials in other places. See IMPLEMENTATION NOTES below for details.
+
+Plugin requires libkolab plugin and HTTP/Request2 library.
+Plugin contains BSD-licensed https://github.com/firebase/php-jwt (v5.0.0) library.
+
+Supported algorithms:
+- HS256, HS385, HS512 (PHP hash extension required)
+- RS256, RS384, RS512 (PHP openssl extension required).
+
+
+INSTALLATION
+------------
+
+Enable plugin in Roundcube's main configuration file. Make sure it is first
+on the list of plugins, especially before any authentication plugin, e.g. kolab_auth.
+
+Default return-URL for Auth Provider is https://host.roundcube?_task=login&_action=sso,
+but not all providers support query params. To workaround this limitation you have to
+define an alias URI or redirect. For example:
+
+RewriteEngine On
+RewriteCond %{REQUEST_URI}  ^/roundcubemail
+RewriteRule "^sso" "/roundcubemail/?_task=login&_action=sso" L,QSA
+
+For the above "alias" plugin configuration should include 'response_uri' = '/sso'
+and on the provider side configured URI will be https://host/roundcubemail/sso.
+
+
+IMPLEMENTATION NOTES
+--------------------
+
+Specification: https://openid.net/specs/openid-connect-core-1_0.html
+
+Limitations:
+- OpenIDC Discovery and Dynamic Client Registration is not supported,
+- Authentication with Authorization Code Flow is the only one supported,
+- required grant types: authorization_code, refresh_token (for token refresh),
+- required claims: id_token,
+- required scopes: email, openid, offline_access (for token refresh),
+- endpoints used: token, authorization,
+- supported signature algorithms: HS256, HS385, HS512, RS256, RS384, RS512.
+- supported token endpoint auth methods: client_secret_basic, client_secret_post.
+
+IMAP Because Kolab backend does not support token authentication it is required
+to use master user (sasl proxy) authentication, i.e. you have to put
+master user credentials in plugin's config.
+
+SMTP For the same reason and also because the same master user does not work in Postfix,
+you have to specify SMTP connection parameters/user+password.
+
+LDAP Global addressbook (read-only) requires LDAP user/password. 'user_specific' option does
+not work, neither the proxy authentication.
+
+Freebusy Authentication into kolab-freebusy service is not yet implemented. A solution for
+now is to add Roundcube host(s) into trustednetworks.allow option in kolab-freebusy service config.
+
+Chwala Authentication to Chwala will work if it uses the same (session) database as Roundcube.
+Additionally set $config'fileapi_plugins' = array('kolab_sso', 'kolab_auth', 'kolab_folders');
+Authenticating to Seafile/WebDAV storage is not supported (until it's custom user-defined
+storage).
+
+
+TODO
+----
+
+- kolab_delegation (LDAP auth for write operation)
+- Chwala+Seafile
+- Chwala+WebDAV
+- Freebusy auth
+- Mattermost auth
+- Extended token validation

roundcubemail-1.5.tar.gz/plugins/kolab_sso/composer.json Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/config.inc.php Added

@@ -0,0 +1,60 @@
+<?php
+
+// Enable debugging
+$config'kolab_sso_debug' = true;
+
+// IMAP (master) user
+$config'kolab_sso_imap_user' = 'cyrus-admin';
+
+// IMAP (master) password
+$config'kolab_sso_imap_pass' = 'password';
+
+// SMTP server host
+// To override the SMTP port or connection method, provide a full URL like 'tls://somehost:587'
+$config'kolab_sso_smtp_server' = null;
+
+// SMTP username
+$config'kolab_sso_smtp_user' = '';
+
+// SMTP password
+$config'kolab_sso_smtp_pass' = '';
+
+// LDAP user DN
+$config'kolab_sso_ldap_user' = 'uid=kolab-service,ou=Special Users,dc=example,dc=org';
+
+// LDAP password
+$config'kolab_sso_ldap_pass' = 'password';
+
+// Require SSO logon by removing possibility to logon with user/password
+$config'kolab_sso_disable_login' = false;
+
+// SSO providers/configuration
+$config'kolab_sso_options' = array();
+/* Example:
+$config'kolab_sso_options' = array(
+    'keycloak' => array(
+        // User-friendly name (will be displayed in the button label)
+        'name'   => 'OpenIDC Test',
+        // Driver name
+        'driver' => 'openidc',
+        // Provider API URI
+        'uri' => 'https://kolab.eu.auth0.com',
+        // Client ID/Secret for the API
+        'client_id' => '20w6DXX69isNBaufCwyK24wkBHqPT2ht',
+        'client_secret' => 'd78McGW4UWfFyZprGd8BCKooll',
+        // Token URI, if different than <uri>/token
+        'token_uri' => 'https://kolab.eu.auth0.com/oauth/token',
+        // Authorize URI, if different than <uri>/authorize
+        'auth_uri' => 'https://kolab.eu.auth0.com/authorize',
+        // Response URI, by default we use https://domain.tld/path?_task=login&_action=sso
+        // Define it if the Provider does not allow above
+        // to use https://domain.tld/path/<response_uri> instead
+        'response_uri' => '/sso',
+        // Public key (or certificate) for token validation when using RS256/RS385/RS512 method
+        'pubkey' => '-----BEGIN CERTIFICATE-----
+            ...
+            -----END CERTIFICATE-----
+        ',
+    ),
+);
+*/

roundcubemail-1.5.tar.gz/plugins/kolab_sso/config.inc.php.dist Added

@@ -0,0 +1,60 @@
+<?php
+
+// Enable debugging
+$config'kolab_sso_debug' = true;
+
+// IMAP (master) user
+$config'kolab_sso_imap_user' = 'cyrus-admin';
+
+// IMAP (master) password
+$config'kolab_sso_imap_pass' = 'password';
+
+// SMTP server host
+// To override the SMTP port or connection method, provide a full URL like 'tls://somehost:587'
+$config'kolab_sso_smtp_server' = null;
+
+// SMTP username
+$config'kolab_sso_smtp_user' = '';
+
+// SMTP password
+$config'kolab_sso_smtp_pass' = '';
+
+// LDAP user DN
+$config'kolab_sso_ldap_user' = 'uid=kolab-service,ou=Special Users,dc=example,dc=org';
+
+// LDAP password
+$config'kolab_sso_ldap_pass' = 'password';
+
+// Require SSO logon by removing possibility to logon with user/password
+$config'kolab_sso_disable_login' = false;
+
+// SSO providers/configuration
+$config'kolab_sso_options' = array();
+/* Example:
+$config'kolab_sso_options' = array(
+    'keycloak' => array(
+        // User-friendly name (will be displayed in the button label)
+        'name'   => 'OpenIDC Test',
+        // Driver name
+        'driver' => 'openidc',
+        // Provider API URI
+        'uri' => 'https://kolab.eu.auth0.com',
+        // Client ID/Secret for the API
+        'client_id' => '20w6DXX69isNBaufCwyK24wkBHqPT2ht',
+        'client_secret' => 'd78McGW4UWfFyZprGd8BCKooll',
+        // Token URI, if different than <uri>/token
+        'token_uri' => 'https://kolab.eu.auth0.com/oauth/token',
+        // Authorize URI, if different than <uri>/authorize
+        'auth_uri' => 'https://kolab.eu.auth0.com/authorize',
+        // Response URI, by default we use https://domain.tld/path?_task=login&_action=sso
+        // Define it if the Provider does not allow above
+        // to use https://domain.tld/path/<response_uri> instead
+        'response_uri' => '/sso',
+        // Public key (or certificate) for token validation when using RS256/RS385/RS512 method
+        'pubkey' => '-----BEGIN CERTIFICATE-----
+            ...
+            -----END CERTIFICATE-----
+        ',
+    ),
+);
+*/

roundcubemail-1.5.tar.gz/plugins/kolab_sso/drivers Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/drivers/oauth2.php Added

@@ -0,0 +1,436 @@
+<?php
+
+/**
+ * kolab_sso driver implementing OAuth2 Authorization (RFC6749)
+ * with use of JWT tokens.
+ *
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *
+ * Copyright (C) 2018-2019, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+class kolab_sso_oauth2
+{
+    protected $plugin;
+    protected $id       = 'oauth2';
+    protected $config   = array();
+    protected $params   = array();
+    protected $defaults = array(
+        'scope'          => 'email',
+        'token_type'     => 'access_token',
+        'user_field'     => 'email',
+        'validate_items' => array('aud'),
+    );
+
+
+    /**
+     * Object constructor
+     *
+     * @param rcube_plugin $plugin kolab_sso plugin object
+     * @param array        $config Driver configuration
+     */
+    public function __construct($plugin, $config)
+    {
+        $this->plugin = $plugin;
+        $this->config = $config;
+
+        $this->plugin->require_plugin('libkolab');
+    }
+
+    /**
+     * Authentication request (redirect to SSO service)
+     */
+    public function authorize()
+    {
+        $params = array(
+            'response_type' => 'code',
+            'scope'         => $this->get_param('scope'),
+            'client_id'     => $this->get_param('client_id'),
+            'state'         => $this->plugin->rc->get_request_token(),
+            'redirect_uri'  => $this->redirect_uri(),
+        );
+
+        // Add extra request parameters (don't overwrite params set above)
+        if (!empty($this->config'extra_params')) {
+            $params = array_merge((array) $this->config'extra_params', $params);
+        }
+
+        $url = $this->config'auth_uri' ?: (unslashify($this->config'uri') . '/authorize');
+        $url .= '?' . http_build_query($params);
+
+        $this->plugin->debug("{$this->id}authorize Redirecting to $url");
+
+        header("Location: $url");
+        die;
+    }
+
+    /**
+     * Authorization response validation
+     */
+    public function response()
+    {
+        $this->plugin->debug("{$this->id}authorize Response: " . $_SERVER'REQUEST_URI');
+
+        $this->error = $this->error_message(
+            rcube_utils::get_input_value('error', rcube_utils::INPUT_GET),
+            rcube_utils::get_input_value('error_description', rcube_utils::INPUT_GET),
+            rcube_utils::get_input_value('error_uri', rcube_utils::INPUT_GET)
+        );
+
+        if ($this->error) {
+            return;
+        }
+
+        $state = rcube_utils::get_input_value('state', rcube_utils::INPUT_GET);
+        $code  = rcube_utils::get_input_value('code', rcube_utils::INPUT_GET);
+
+        if (!$state) {
+            $this->plugin->debug("{$this->id}response State missing");
+            $this->error = $this->plugin->gettext('errorinvalidresponse');
+            return;
+        }
+
+        if ($state != $this->plugin->rc->get_request_token()) {
+            $this->plugin->debug("{$this->id}response Invalid response state");
+            $this->error = $this->plugin->gettext('errorinvalidresponse');
+            return;
+        }
+
+        if (!$code) {
+            $this->plugin->debug("{$this->id}response Code missing");
+            $this->error = $this->plugin->gettext('errorinvalidresponse');
+            return;
+        }
+
+        return $this->request_token($code);
+    }
+
+    /**
+     * Error message for the response handler
+     */
+    public function response_error()
+    {
+        if ($this->error) {
+            return $this->plugin->rc->gettext('loginfailed') . ' ' . $this->error;
+        }
+    }
+
+    /**
+     * Existing session validation
+     */
+    public function validate_session($session)
+    {
+        $this->plugin->debug("{$this->id}validate Session: " . json_encode($session));
+
+        // Sanity checks
+        if (empty($session) || empty($session'code') || empty($session'validto') || empty($session'email')) {
+            $this->plugin->debug("{$this->id}validate Session invalid");
+            return;
+        }
+
+        // Check expiration time
+        $now     = new DateTime('now', new DateTimezone('UTC'));
+        $validto = new DateTime($session'validto', new DateTimezone('UTC'));
+
+        // Don't refresh often than TTL/2
+        $validto->sub(new DateInterval(sprintf('PT%dS', $session'ttl'/2)));
+        if ($now < $validto) {
+            $this->plugin->debug("{$this->id}validate Token valid, skipping refresh");
+            return $session;
+        }
+
+        // No refresh_token, not possible to refresh
+        if (empty($session'refresh_token')) {
+            $this->plugin->debug("{$this->id}validate Session cannot be refreshed");
+            return;
+        }
+
+        // Renew tokens
+        $info = $this->request_token($session'code', $session'refresh_token');
+
+        if (!empty($info)) {
+            // Make sure the email didn't change
+            if (!empty($info'email') && $info'email' != $session'email') {
+                $this->plugin->debug("{$this->id}validate Email address change");
+                return;
+            }
+
+            $session = array_merge($session, $info);
+
+            $this->plugin->debug("{$this->id}validate Session valid: " . json_encode($session));
+            return $session;
+        }
+    }
+
+    /**
+     * Authentication Token request (or token refresh)
+     */
+    protected function request_token($code, $refresh_token = null)
+    {
+        $mode   = $refresh_token ? 'token-refresh' : 'token';
+        $url    = $this->config'token_uri' ?: ($this->config'uri' . '/token');
+        $params = array(
+            'client_id'     => $this->get_param('client_id'),
+            'client_secret' => $this->get_param('client_secret'),
+            'grant_type'    => $refresh_token ? 'refresh_token' : 'authorization_code',
+        );
+
+        if ($refresh_token) {
+            $params'refresh_token' = $refresh_token;
+            $params'scope'         = $this->get_param('scope');
+        }
+        else {
+            $params'code'         = $code;
+            $params'redirect_uri' = $this->redirect_uri();
+        }
+
+        // Add extra request parameters (don't overwrite params set above)

roundcubemail-1.5.tar.gz/plugins/kolab_sso/drivers/openidc.php Added

@@ -0,0 +1,67 @@
+<?php
+
+/**
+ * kolab_sso driver implementing OpenIDC Authorization Code Flow
+ * https://openid.net/specs/openid-connect-core-1_0.html#CodeFlowSteps
+ *
+ * TODO: Discovery: https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationRequest
+ *
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *
+ * Copyright (C) 2018, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+require_once __DIR__ . '/oauth2.php';
+
+class kolab_sso_openidc extends kolab_sso_oauth2
+{
+    protected $id     = 'openidc';
+    protected $params = array(
+        'scope'      => 'openid email offline_access',
+        'token_type' => 'id_token',
+    );
+
+    /**
+     * Returns error text for specified OpenIDC error code
+     */
+    protected function error_text($error)
+    {
+        // OpenIDC-specific codes
+        switch ($error) {
+        case 'interaction_required':
+            return "End-User interaction required";
+        case 'login_required':
+            return "End-User authentication required";
+        case 'account_selection_required':
+            return "End-User account selection required";
+        case 'consent_required':
+            return "End-User consent required";
+        case 'invalid_request_uri':
+            return "Invalid request_uri";
+        case 'invalid_request_object':
+            return "Invalid Request Object";
+        case 'request_not_supported':
+            return "Request not supported";
+        case 'request_uri_not_supported':
+            return "request_uri param not supported";
+        case 'registration_not_supported':
+            return "Registration not supported";
+        }
+
+        // Fallback to OAuth2-specific codes
+        return parent::error_text($error);
+    }
+}

roundcubemail-1.5.tar.gz/plugins/kolab_sso/drivers/seas.php Added

@@ -0,0 +1,38 @@
+<?php
+
+/**
+ * kolab_sso driver implementing Abraxas SEAS Portal OAuth2/JWT flow
+ *
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *         Beat Rubischon <beat.rubischon@adfinis-sygroup.ch>
+ *
+ * Copyright (C) 2018, Kolab Systems AG <contact@kolabsys.com>
+ * Copyright (C) 2019, Adfinis SyGroup AG
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+require_once __DIR__ . '/oauth2.php';
+
+
+class kolab_sso_seas extends kolab_sso_oauth2
+{
+    protected $id       = 'seas';
+    protected $defaults = array(
+        'scope'          => 'USER',
+        'token_type'     => 'access_token',
+        'user_field'     => 'user_name',
+        'validate_items' => array(),
+    );
+}

roundcubemail-1.5.tar.gz/plugins/kolab_sso/kolab_sso.php Added

@@ -0,0 +1,406 @@
+<?php
+
+/**
+ * Single Sign On Authentication for Kolab
+ *
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *
+ * Copyright (C) 2018, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+class kolab_sso extends rcube_plugin
+{
+    public $rc;
+
+    private $data;
+    private $old_data;
+    private $driver;
+    private $logon_error;
+    private $debug = false;
+
+
+    /**
+     * Plugin initialization
+     */
+    public function init()
+    {
+        // Roundcube or Chwala
+        if (defined('RCMAIL_VERSION') || defined('FILE_API_START')) {
+            $this->rc = rcube::get_instance();
+
+            $this->add_hook('startup', array($this, 'startup'));
+            $this->add_hook('authenticate', array($this, 'authenticate'));
+
+            $this->rc->add_shutdown_function(array($this, 'shutdown'));
+        }
+    }
+
+    /**
+     * Startup hook handler
+     */
+    public function startup($args)
+    {
+        // On login or logout (or when the session expired)...
+        if ($args'task' == 'login' || $args'task' == 'logout') {
+            $mode = $args'action' == 'sso' ? $_SESSION'sso_mode' : rcube_utils::get_input_value('_sso', rcube_utils::INPUT_GP);
+
+            // Authorization
+            if ($mode) {
+                $driver = $this->get_driver($mode);
+
+                // This is where we handle redirections from the SSO provider
+                if ($args'action' == 'sso') {
+                    $this->data = $driver->response();
+
+                    if (!empty($this->data)) {
+                        $this->data'timezone' = $_SESSION'sso_timezone';
+                        $this->data'url'      = $_SESSION'sso_url';
+                        $this->data'mode'     = $mode;
+                    }
+                    else {
+                        $this->logon_error = $driver->response_error();
+                    }
+                }
+                // This is where we handle clicking one of "Login by SSO" buttons
+                else if ($_SESSION'temp' && $this->rc->check_request()) {
+                    // Remember some logon params for use on SSO response above
+                    $_SESSION'sso_timezone' = rcube_utils::get_input_value('_timezone', rcube_utils::INPUT_POST);
+                    $_SESSION'sso_url'      = rcube_utils::get_input_value('_url', rcube_utils::INPUT_POST);
+                    $_SESSION'sso_mode'     = $mode;
+
+                    $driver->authorize();
+                }
+
+                $args'action' = 'login';
+                $args'task'   = 'login';
+            }
+        }
+        // On valid session...
+        else if (isset($_SESSION'user_id')
+            && ($data = $_SESSION'sso_data')
+            && ($data = json_decode($this->rc->decrypt($data), true))
+            && ($mode = $data'mode')
+        ) {
+            $driver = $this->get_driver($mode);
+
+            $this->old_data = $data;
+
+            // Session validation, token refresh, etc.
+            if ($this->data = $driver->validate_session($data)) {
+                // register storage connection hooks
+                $this->authenticate(array(), true);
+            }
+            else {
+                // Destroy the session
+                $this->rc->kill_session();
+                // TODO: error message beter explaining the reason
+                // $this->rc->output->show_message('sessionferror', 'error');
+            }
+        }
+
+        // Register login form modifications
+        $this->add_hook('template_object_loginform', array($this, 'login_form'));
+
+        return $args;
+    }
+
+    /**
+     * Authenticate hook handler
+     */
+    public function authenticate($args, $internal = false)
+    {
+        // Chwala
+        if (defined('FILE_API_START') && !$internal && empty($args'pass') && strpos($args'user', 'RC:') === 0) {
+            // extract session ID and username from the token
+            list(, $sess_id, $user) = explode(':', $args'user');
+
+            // unset user, set invalid state
+            $args'valid' = false;
+            $args'user'  = null;
+
+            $session = rcube_session::factory($this->rc->config);
+
+            if ($data = $session->read($sess_id)) {
+                // get SSO data from the existing session
+                $old_session = $_SESSION;
+                session_decode($data);
+                $session_user = $_SESSION'username';
+                $data         = $_SESSION'sso_data';
+                $_SESSION     = $old_session;
+
+                // TODO: allow only configured REMOTE_ADDR?
+                if ($session_user == $user && $data && ($data = json_decode($this->rc->decrypt($data), true)) && ($mode = $data'mode')) {
+                    $driver = $this->get_driver($mode);
+
+                    // Session validation, token refresh, etc.
+                    if ($this->data = $driver->validate_session($data)) {
+                        $args'user'  = $user;
+                        $args'pass'  = 'fake-sso-password';
+                        $args'valid' = true;
+                        $this->authenticate(array(), true);
+                    }
+                }
+            }
+        }
+        // Roundcube
+        else if (!empty($this->data) && ($email = $this->data'email')) {
+            if (!$internal) {
+                $args'user'        = $email;
+                $args'pass'        = 'fake-sso-password';
+                $args'valid'       = true;
+                $args'cookiecheck' = false;
+
+                $_POST'_timezone' = $this->data'timezone';
+                $_POST'_url'      = $this->data'url';
+            }
+
+            $this->add_hook('storage_connect', array($this, 'storage_connect'));
+            $this->add_hook('managesieve_connect', array($this, 'storage_connect'));
+            $this->add_hook('smtp_connect', array($this, 'smtp_connect'));
+            $this->add_hook('ldap_connected', array($this, 'ldap_connected'));
+            $this->add_hook('chwala_authenticate', array($this, 'chwala_authenticate'));
+        }
+        else if ($this->logon_error) {
+            $args'valid' = false;
+            $args'error' = $this->logon_error;
+        }
+
+        return $args;
+    }
+
+    /**
+     * Shutdown handler
+     */
+    public function shutdown()
+    {
+        // Between startup and authenticate the session is destroyed.
+        // So, we save the data later than that.
+        if (!empty($this->data) && !empty($_SESSION'user_id')
+            // update session only when data changed
+            && (empty($this->old_data) || $this->old_data != $this->data)
+        ) {
+            $_SESSION'sso_data' = $this->rc->encrypt(json_encode($this->data));
+        }
+    }
+
+    /**
+     * Storage_connect/managesieve_connect hook handler

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase/JWT Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase/JWT/BeforeValidException.php Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase/JWT/ExpiredException.php Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase/JWT/JWT.php Added

@@ -0,0 +1,379 @@
+<?php
+
+namespace Firebase\JWT;
+use \DomainException;
+use \InvalidArgumentException;
+use \UnexpectedValueException;
+use \DateTime;
+
+/**
+ * JSON Web Token implementation, based on this spec:
+ * https://tools.ietf.org/html/rfc7519
+ *
+ * PHP version 5
+ *
+ * @category Authentication
+ * @package  Authentication_JWT
+ * @author   Neuman Vong <neuman@twilio.com>
+ * @author   Anant Narayanan <anant@php.net>
+ * @license  http://opensource.org/licenses/BSD-3-Clause 3-clause BSD
+ * @link     https://github.com/firebase/php-jwt
+ */
+class JWT
+{
+
+    /**
+     * When checking nbf, iat or expiration times,
+     * we want to provide some extra leeway time to
+     * account for clock skew.
+     */
+    public static $leeway = 0;
+
+    /**
+     * Allow the current timestamp to be specified.
+     * Useful for fixing a value within unit testing.
+     *
+     * Will default to PHP time() value if null.
+     */
+    public static $timestamp = null;
+
+    public static $supported_algs = array(
+        'HS256' => array('hash_hmac', 'SHA256'),
+        'HS512' => array('hash_hmac', 'SHA512'),
+        'HS384' => array('hash_hmac', 'SHA384'),
+        'RS256' => array('openssl', 'SHA256'),
+        'RS384' => array('openssl', 'SHA384'),
+        'RS512' => array('openssl', 'SHA512'),
+    );
+
+    /**
+     * Decodes a JWT string into a PHP object.
+     *
+     * @param string        $jwt            The JWT
+     * @param string|array  $key            The key, or map of keys.
+     *                                      If the algorithm used is asymmetric, this is the public key
+     * @param array         $allowed_algs   List of supported verification algorithms
+     *                                      Supported algorithms are 'HS256', 'HS384', 'HS512' and 'RS256'
+     *
+     * @return object The JWT's payload as a PHP object
+     *
+     * @throws UnexpectedValueException     Provided JWT was invalid
+     * @throws SignatureInvalidException    Provided JWT was invalid because the signature verification failed
+     * @throws BeforeValidException         Provided JWT is trying to be used before it's eligible as defined by 'nbf'
+     * @throws BeforeValidException         Provided JWT is trying to be used before it's been created as defined by 'iat'
+     * @throws ExpiredException             Provided JWT has since expired, as defined by the 'exp' claim
+     *
+     * @uses jsonDecode
+     * @uses urlsafeB64Decode
+     */
+    public static function decode($jwt, $key, array $allowed_algs = array())
+    {
+        $timestamp = is_null(static::$timestamp) ? time() : static::$timestamp;
+
+        if (empty($key)) {
+            throw new InvalidArgumentException('Key may not be empty');
+        }
+        $tks = explode('.', $jwt);
+        if (count($tks) != 3) {
+            throw new UnexpectedValueException('Wrong number of segments');
+        }
+        list($headb64, $bodyb64, $cryptob64) = $tks;
+        if (null === ($header = static::jsonDecode(static::urlsafeB64Decode($headb64)))) {
+            throw new UnexpectedValueException('Invalid header encoding');
+        }
+        if (null === $payload = static::jsonDecode(static::urlsafeB64Decode($bodyb64))) {
+            throw new UnexpectedValueException('Invalid claims encoding');
+        }
+        if (false === ($sig = static::urlsafeB64Decode($cryptob64))) {
+            throw new UnexpectedValueException('Invalid signature encoding');
+        }
+        if (empty($header->alg)) {
+            throw new UnexpectedValueException('Empty algorithm');
+        }
+        if (empty(static::$supported_algs$header->alg)) {
+            throw new UnexpectedValueException('Algorithm not supported');
+        }
+        if (!in_array($header->alg, $allowed_algs)) {
+            throw new UnexpectedValueException('Algorithm not allowed');
+        }
+        if (is_array($key) || $key instanceof \ArrayAccess) {
+            if (isset($header->kid)) {
+                if (!isset($key$header->kid)) {
+                    throw new UnexpectedValueException('"kid" invalid, unable to lookup correct key');
+                }
+                $key = $key$header->kid;
+            } else {
+                throw new UnexpectedValueException('"kid" empty, unable to lookup correct key');
+            }
+        }
+
+        // Check the signature
+        if (!static::verify("$headb64.$bodyb64", $sig, $key, $header->alg)) {
+            throw new SignatureInvalidException('Signature verification failed');
+        }
+
+        // Check if the nbf if it is defined. This is the time that the
+        // token can actually be used. If it's not yet that time, abort.
+        if (isset($payload->nbf) && $payload->nbf > ($timestamp + static::$leeway)) {
+            throw new BeforeValidException(
+                'Cannot handle token prior to ' . date(DateTime::ISO8601, $payload->nbf)
+            );
+        }
+
+        // Check that this token has been created before 'now'. This prevents
+        // using tokens that have been created for later use (and haven't
+        // correctly used the nbf claim).
+        if (isset($payload->iat) && $payload->iat > ($timestamp + static::$leeway)) {
+            throw new BeforeValidException(
+                'Cannot handle token prior to ' . date(DateTime::ISO8601, $payload->iat)
+            );
+        }
+
+        // Check if this token has expired.
+        if (isset($payload->exp) && ($timestamp - static::$leeway) >= $payload->exp) {
+            throw new ExpiredException('Expired token');
+        }
+
+        return $payload;
+    }
+
+    /**
+     * Converts and signs a PHP object or array into a JWT string.
+     *
+     * @param object|array  $payload    PHP object or array
+     * @param string        $key        The secret key.
+     *                                  If the algorithm used is asymmetric, this is the private key
+     * @param string        $alg        The signing algorithm.
+     *                                  Supported algorithms are 'HS256', 'HS384', 'HS512' and 'RS256'
+     * @param mixed         $keyId
+     * @param array         $head       An array with header elements to attach
+     *
+     * @return string A signed JWT
+     *
+     * @uses jsonEncode
+     * @uses urlsafeB64Encode
+     */
+    public static function encode($payload, $key, $alg = 'HS256', $keyId = null, $head = null)
+    {
+        $header = array('typ' => 'JWT', 'alg' => $alg);
+        if ($keyId !== null) {
+            $header'kid' = $keyId;
+        }
+        if ( isset($head) && is_array($head) ) {
+            $header = array_merge($head, $header);
+        }
+        $segments = array();
+        $segments = static::urlsafeB64Encode(static::jsonEncode($header));
+        $segments = static::urlsafeB64Encode(static::jsonEncode($payload));
+        $signing_input = implode('.', $segments);
+
+        $signature = static::sign($signing_input, $key, $alg);
+        $segments = static::urlsafeB64Encode($signature);
+
+        return implode('.', $segments);
+    }
+
+    /**
+     * Sign a string with a given key and algorithm.
+     *
+     * @param string            $msg    The message to sign
+     * @param string|resource   $key    The secret key
+     * @param string            $alg    The signing algorithm.
+     *                                  Supported algorithms are 'HS256', 'HS384', 'HS512' and 'RS256'
+     *
+     * @return string An encrypted message
+     *
+     * @throws DomainException Unsupported algorithm was specified
+     */
+    public static function sign($msg, $key, $alg = 'HS256')
+    {
+        if (empty(static::$supported_algs$alg)) {
+            throw new DomainException('Algorithm not supported');
+        }
+        list($function, $algorithm) = static::$supported_algs$alg;
+        switch($function) {
+            case 'hash_hmac':
+                return hash_hmac($algorithm, $msg, $key, true);
+            case 'openssl':
+                $signature = '';
+                $success = openssl_sign($msg, $signature, $key, $algorithm);

roundcubemail-1.5.tar.gz/plugins/kolab_sso/lib/Firebase/JWT/SignatureInvalidException.php Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization/de.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization/en_US.inc Added

@@ -0,0 +1,34 @@
+<?php
+
+/**
+ * Localizations for the Kolab SSO plugin
+ *
+ * Copyright (C) 2018, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_sso/
+ */
+
+$labels'loginby' = 'Login by $provider';
+$labels'sso' = 'Single Sign On';
+$labels'errorunknown' = 'Unknown SSO error.';
+$labels'errorinvalidresponse' = 'Invalid SSO response.';
+$labels'errortokenfailed' = 'Failed to get SSO token.';
+$labels'errorinvalidtoken' = 'Invalid SSO token.';
+$labels'errorinvalidrequest' = 'Malformed SSO request.';
+$labels'errorunauthorizedclient' = 'Unauthorized SSO client.';
+$labels'errorinvalidclient' = 'SSO client authentication failed.';
+$labels'erroraccessdienied' = 'SSO request denied.';
+$labels'errorunsupportedresponsetype' = 'Unsupported SSO response type.';
+$labels'errorinvalidgrant' = 'Invalid authorization grant.';
+$labels'errorinvalidscope' = 'Invalid SSO scope.';
+$labels'errorservererror' = 'SSO server error.';
+$labels'errortemporarilyunavailable' = 'SSO service temporarily unavailable.';
+$labels'errorinteractionrequired' = 'User interaction required.';
+$labels'errorloginrequired' = 'User authentication required.';
+$labels'erroraccountselectionrequired' = 'User account selection required.';
+$labels'errorconsentrequired' = 'User consent required.';
+$labels'errorinvalidrequesturi' = 'Invalid request_uri.';
+$labels'errorinvalidrequestobject' = 'Invalid request object';
+$labels'errorrequestnotsupported' = 'Request not supported.';
+$labels'errorrequesturinotsupported' = 'Request_uri parameter not supported.';
+$labels'errorregistrationnotsupported' = 'Registration not supported';

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization/fi_FI.inc Added

@@ -0,0 +1,23 @@
+<?php
+/**
+ * Localizations for the Kolab SSO plugin
+ *
+ * Copyright (C) 2018, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_sso/
+ */
+$labels'loginby' = 'Kirjautumisen mahdollistaa $provider';
+$labels'sso' = 'Kertakirjautuminen';
+$labels'errorunknown' = 'Tuntematon kertakirjautumisvirhe.';
+$labels'errorinvalidresponse' = 'Virheellinen kertakirjautumisen vastaus.';
+$labels'errorinvalidrequest' = 'Väärinmuodostettu kertakirjautumispyyntö.';
+$labels'erroraccessdienied' = 'Kertakirjautumispyyntö kiellettiin.';
+$labels'errorservererror' = 'Kertakirjautumispalvelimen virhe.';
+$labels'errortemporarilyunavailable' = 'Kertakirjautumispalvelu ei ole juuri nyt käytettävissä.';
+$labels'errorinteractionrequired' = 'Käyttäjän vuorovaikutusta vaaditaan.';
+$labels'errorloginrequired' = 'Käyttäjätunnistautuminen vaaditaan.';
+$labels'erroraccountselectionrequired' = 'Käyttäjätilin valinta vaaditaan.';
+$labels'errorconsentrequired' = 'Käyttäjän hyväksyntä vaaditaan.';
+$labels'errorrequestnotsupported' = 'Pyyntö ei tuettu.';
+$labels'errorrequesturinotsupported' = 'Request_uri-parametri ei tuettu.';
+$labels'errorregistrationnotsupported' = 'Rekisteröinti ei tuettu';

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization/pl_PL.inc Added

@@ -0,0 +1,32 @@
+<?php
+/**
+ * Localizations for the Kolab SSO plugin
+ *
+ * Copyright (C) 2018, Kolab Systems AG
+ *
+ * For translation see https://www.transifex.com/projects/p/kolab/resource/kolab_sso/
+ */
+$labels'loginby' = 'Zaloguj przez $provider';
+$labels'sso' = 'Jednokrotne Logowanie';
+$labels'errorunknown' = 'Nieznany błąd SSO.';
+$labels'errorinvalidresponse' = 'Błędna odpowiedź SSO.';
+$labels'errortokenfailed' = 'Nie udało się pobrać tokenu SSO.';
+$labels'errorinvalidtoken' = 'Błędny token SSO.';
+$labels'errorinvalidrequest' = 'Nieprawidłowe żądanie SSO.';
+$labels'errorunauthorizedclient' = 'Nieupoważniony klient SSO.';
+$labels'errorinvalidclient' = 'Błąd uwierzytelniania SSO.';
+$labels'erroraccessdienied' = 'Odrzucone żądanie SSO.';
+$labels'errorunsupportedresponsetype' = 'Nieobsługiwany typ odpowiedzi SSO.';
+$labels'errorinvalidgrant' = 'Nieprawidłowy grant autoryzacji.';
+$labels'errorinvalidscope' = 'Błędny zakres SSO.';
+$labels'errorservererror' = 'Błąd serwera SSO.';
+$labels'errortemporarilyunavailable' = 'Usługa jednokrotnego logowania tymczasowo niedostępna.';
+$labels'errorinteractionrequired' = 'Wymagana interakcja użytkownika.';
+$labels'errorloginrequired' = 'Wymagane uwierzytelnienie użytkownika.';
+$labels'erroraccountselectionrequired' = 'Wymagany wybór konta użytkownika.';
+$labels'errorconsentrequired' = 'Wymagana zgoda użytkownika.';
+$labels'errorinvalidrequesturi' = 'Błędny request_uri.';
+$labels'errorinvalidrequestobject' = 'Błędny obiekt żądania.';
+$labels'errorrequestnotsupported' = 'Żądanie nie obsługiwane.';
+$labels'errorrequesturinotsupported' = 'Parametr request_uri nie obsługiwany.';
+$labels'errorregistrationnotsupported' = 'Rejestracja nie obsługiwana.';

roundcubemail-1.5.tar.gz/plugins/kolab_sso/localization/ru_RU.inc Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/tests Added

roundcubemail-1.5.tar.gz/plugins/kolab_sso/tests/LocalizationTest.php Added

roundcubemail-1.5.3.tar.gz/plugins/kolab_tags/lib/kolab_tags_engine.php -> roundcubemail-1.5.tar.gz/plugins/kolab_tags/lib/kolab_tags_engine.php Changed

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_format_configuration.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_format_configuration.php Changed

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_format_distributionlist.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_format_distributionlist.php Changed

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_format_event.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_format_event.php Changed

@@ -83,7 +83,8 @@
             $vexceptions = new vectorevent;
             foreach ($object'exceptions' as $i => $exception) {
                 $exevent = new kolab_format_event;
-                $exevent->set($compacted = $this->compact_exception($exception, $object));  // only save differing values
+                $compacted = $this->compact_exception($exception, $object);
+                $exevent->set($compacted);  // only save differing values
 
                 // get value for recurrence-id
                 $recurrence_id = null;
@@ -175,7 +176,7 @@
         }
 
         // organizer is part of the attendees list in Roundcube
-        if ($object'organizer') {
+        if (!empty($object'organizer')) {
             $object'organizer''role' = 'ORGANIZER';
             array_unshift($object'attendees', $object'organizer');
         }
@@ -183,9 +184,9 @@
         // status defines different event properties...
         $status = $this->obj->status();
         if ($status == kolabformat::StatusTentative)
-          $object'free_busy' = 'tentative';
+            $object'free_busy' = 'tentative';
         else if ($status == kolabformat::StatusCancelled)
-          $object'cancelled' = true;
+            $object'cancelled' = true;
 
         // this is an exception object
         if ($this->obj->recurrenceID()->isValid()) {
@@ -239,13 +240,13 @@
         $recurrence_id_format = libkolab::recurrence_id_format($object);
         $instance_id = $recurrence_id instanceof DateTimeInterface ? $recurrence_id->format($recurrence_id_format) : strval($recurrence_id);
 
-        if ($object'recurrence_date' instanceof DateTimeInterface) {
+        if (!empty($object'recurrence_date') && $object'recurrence_date' instanceof DateTimeInterface) {
             if ($object'recurrence_date'->format($recurrence_id_format) == $instance_id) {
                 $result = $object;
             }
         }
 
-        if (!$result && is_array($object'exceptions')) {
+        if (!$result && !empty($object'exceptions') && is_array($object'exceptions')) {
             foreach ($object'exceptions' as $exception) {
                 if ($exception'_instance' == $instance_id) {
                     $result = $exception;

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_format_xcal.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_format_xcal.php Changed

@@ -423,14 +423,14 @@
 
         if (!empty($object'recurrence''FREQ')) {
             $freq     = $object'recurrence''FREQ';
-            $bysetpos = explode(',', $object'recurrence''BYSETPOS');
+            $bysetpos = isset($object'recurrence''BYSETPOS') ? explode(',', $object'recurrence''BYSETPOS') : ;
 
             $rr->setFrequency($this->rrule_type_map$freq);
 
             if ($object'recurrence''INTERVAL')
                 $rr->setInterval(intval($object'recurrence''INTERVAL'));
 
-            if ($object'recurrence''BYDAY') {
+            if (!empty($object'recurrence''BYDAY')) {
                 $byday = new vectordaypos;
                 foreach (explode(',', $object'recurrence''BYDAY') as $day) {
                     $occurrence = 0;
@@ -455,31 +455,37 @@
                 $rr->setByday($byday);
             }
 
-            if ($object'recurrence''BYMONTHDAY') {
+            if (!empty($object'recurrence''BYMONTHDAY')) {
                 $bymday = new vectori;
-                foreach (explode(',', $object'recurrence''BYMONTHDAY') as $day)
+                foreach (explode(',', $object'recurrence''BYMONTHDAY') as $day) {
                     $bymday->push(intval($day));
+                }
                 $rr->setBymonthday($bymday);
             }
 
-            if ($object'recurrence''BYMONTH') {
+            if (!empty($object'recurrence''BYMONTH')) {
                 $bymonth = new vectori;
                 foreach (explode(',', $object'recurrence''BYMONTH') as $month)
                     $bymonth->push(intval($month));
                 $rr->setBymonth($bymonth);
             }
 
-            if ($object'recurrence''COUNT')
+            if (!empty($object'recurrence''COUNT')) {
                 $rr->setCount(intval($object'recurrence''COUNT'));
-            else if ($object'recurrence''UNTIL')
+            }
+            else if (!empty($object'recurrence''UNTIL')) {
                 $rr->setEnd(self::get_datetime($object'recurrence''UNTIL', null, true, $start_tz));
+            }
 
             if ($rr->isValid()) {
                 // add exception dates (only if recurrence rule is valid)
-                $exdates = new vectordatetime;
-                foreach ((array)$object'recurrence''EXDATE' as $exdate)
-                    $exdates->push(self::get_datetime($exdate, null, true, $start_tz));
-                $this->obj->setExceptionDates($exdates);
+                if (!empty($object'recurrence''EXDATE')) {
+                    $exdates = new vectordatetime;
+                    foreach ((array)$object'recurrence''EXDATE' as $exdate) {
+                        $exdates->push(self::get_datetime($exdate, null, true, $start_tz));
+                    }
+                    $this->obj->setExceptionDates($exdates);
+                }
             }
             else {
                 rcube::raise_error(array(
@@ -495,8 +501,9 @@
         // save recurrence dates (aka RDATE)
         if (!empty($object'recurrence''RDATE')) {
             $rdates = new vectordatetime;
-            foreach ((array)$object'recurrence''RDATE' as $rdate)
+            foreach ((array)$object'recurrence''RDATE' as $rdate) {
                 $rdates->push(self::get_datetime($rdate, null, true, $start_tz));
+            }
             $this->obj->setRecurrenceDates($rdates);
         }

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_storage.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_storage.php Changed

@@ -169,7 +169,7 @@
      * Get a list of storage folders for the given data type
      *
      * @param string Data type to list folders for (contact,distribution-list,event,task,note)
-     * @param boolean Enable to return subscribed folders only (null to use configured subscription mode)
+     * @param bool   Enable to return subscribed folders only (null to use configured subscription mode)
      *
      * @return array List of Kolab_Folder objects (folder names in UTF7-IMAP)
      */
@@ -334,8 +334,9 @@
     /**
      * Creates folder ID from folder name
      *
-     * @param string  $folder Folder name (UTF7-IMAP)
-     * @param boolean $enc    Use lossless encoding
+     * @param string $folder Folder name (UTF7-IMAP)
+     * @param bool   $enc    Use lossless encoding
+     *
      * @return string Folder ID string
      */
     public static function folder_id($folder, $enc = null)
@@ -850,7 +851,7 @@
      * @param string  Optional root folder
      * @param string  Optional name pattern
      * @param string  Data type to list folders for (contact,event,task,journal,file,note,mail,configuration)
-     * @param boolean Enable to return subscribed folders only (null to use configured subscription mode)
+     * @param bool    Enable to return subscribed folders only (null to use configured subscription mode)
      * @param array   Will be filled with folder-types data
      *
      * @return array List of folders
@@ -1216,18 +1217,20 @@
      * @param string $folder Folder name
      * @param string $type   Content type
      *
-     * @return boolean True on success
+     * @return bool True on success
      */
-    public static function set_folder_type($folder, $type='mail')
+    public static function set_folder_type($folder, $type = 'mail')
     {
         self::setup();
 
-        list($ctype, $subtype) = explode('.', $type);
+        list($ctype, $subtype) = strpos($type, '.') !== false ? explode('.', $type) : array($type, null);
 
         $success = self::$imap->set_metadata($folder, array(self::CTYPE_KEY => $ctype, self::CTYPE_KEY_PRIVATE => $subtype ? $type : null));
 
-        if (!$success)  // fallback: only set private annotation
+        if (!$success) {
+            // fallback: only set private annotation
             $success |= self::$imap->set_metadata($folder, array(self::CTYPE_KEY_PRIVATE => $type));
+        }
 
         return $success;
     }
@@ -1236,9 +1239,9 @@
      * Check subscription status of this folder
      *
      * @param string $folder Folder name
-     * @param boolean $temp  Include temporary/session subscriptions
+     * @param bool   $temp  Include temporary/session subscriptions
      *
-     * @return boolean True if subscribed, false if not
+     * @return bool True if subscribed, false if not
      */
     public static function folder_is_subscribed($folder, $temp = false)
     {
@@ -1257,9 +1260,9 @@
      * Change subscription status of this folder
      *
      * @param string $folder Folder name
-     * @param boolean $temp  Only subscribe temporarily for the current session
+     * @param bool   $temp   Only subscribe temporarily for the current session
      *
-     * @return True on success, false on error
+     * @return bool True on success, false on error
      */
     public static function folder_subscribe($folder, $temp = false)
     {
@@ -1270,7 +1273,7 @@
             if (self::folder_is_subscribed($folder)) {
                 return true;
             }
-            else if (!is_array($_SESSION'kolab_subscribed_folders') || !in_array($folder, $_SESSION'kolab_subscribed_folders')) {
+            else if (empty($_SESSION'kolab_subscribed_folders') || !in_array($folder, $_SESSION'kolab_subscribed_folders')) {
                 $_SESSION'kolab_subscribed_folders' = $folder;
                 return true;
             }
@@ -1287,9 +1290,9 @@
      * Change subscription status of this folder
      *
      * @param string $folder Folder name
-     * @param boolean $temp  Only remove temporary subscription
+     * @param bool   $temp   Only remove temporary subscription
      *
-     * @return True on success, false on error
+     * @return bool True on success, false on error
      */
     public static function folder_unsubscribe($folder, $temp = false)
     {
@@ -1297,7 +1300,7 @@
 
         // temporary/session subscription
         if ($temp) {
-            if (is_array($_SESSION'kolab_subscribed_folders') && ($i = array_search($folder, $_SESSION'kolab_subscribed_folders')) !== false) {
+            if (!empty($_SESSION'kolab_subscribed_folders') && ($i = array_search($folder, $_SESSION'kolab_subscribed_folders')) !== false) {
                 unset($_SESSION'kolab_subscribed_folders'$i);
             }
             return true;
@@ -1315,7 +1318,7 @@
      *
      * @param string $folder Folder name
      *
-     * @return boolean True if active, false if not
+     * @return bool True if active, false if not
      */
     public static function folder_is_active($folder)
     {
@@ -1329,7 +1332,7 @@
      *
      * @param string $folder Folder name
      *
-     * @return True on success, false on error
+     * @return bool True on success, false on error
      */
     public static function folder_activate($folder)
     {
@@ -1343,7 +1346,7 @@
      *
      * @param string $folder Folder name
      *
-     * @return True on success, false on error
+     * @return bool True on success, false on error
      */
     public static function folder_deactivate($folder)
     {
@@ -1591,8 +1594,8 @@
     /**
      * Get a list of (virtual) top-level folders from the other users namespace
      *
-     * @param string  Data type to list folders for (contact,event,task,journal,file,note,mail,configuration)
-     * @param boolean Enable to return subscribed folders only (null to use configured subscription mode)
+     * @param string Data type to list folders for (contact,event,task,journal,file,note,mail,configuration)
+     * @param bool   Enable to return subscribed folders only (null to use configured subscription mode)
      *
      * @return array List of kolab_storage_folder_user objects
      */
@@ -1605,7 +1608,7 @@
             $other_ns = rtrim(self::namespace_root('other'), $delimiter);
             $path_len = count(explode($delimiter, $other_ns));
 
-            foreach ((array)self::list_folders($other_ns . $delimiter, '*', '', $subscribed) as $foldername) {
+            foreach ((array) self::list_folders($other_ns . $delimiter, '*', '', $subscribed) as $foldername) {
                 if ($foldername == 'INBOX')  // skip INBOX which is added by default
                     continue;
 
@@ -1619,16 +1622,16 @@
                 // truncate folder path to top-level folders of the 'other' namespace
                 $foldername = join($delimiter, array_slice($path, 0, $path_len + 1));
 
-                if (!$folders$foldername) {
+                if (empty($folders$foldername)) {
                     $folders$foldername = new kolab_storage_folder_user($foldername, $other_ns);
                 }
             }
 
             // for every (subscribed) user folder, list all (unsubscribed) subfolders
             foreach ($folders as $userfolder) {
-                foreach ((array)self::list_folders($userfolder->name . $delimiter, '*', $type, false, $folderdata) as $foldername) {
-                    if (!$folders$foldername) {
-                        $folders$foldername = new kolab_storage_folder($foldername, $type, $folderdata$foldername);
+                foreach ((array) self::list_folders($userfolder->name . $delimiter, '*', $type, false, $folderdata) as $foldername) {
+                    if (empty($folders$foldername)) {
+                        $folders$foldername = new kolab_storage_folder($foldername, $type, $folderdata$foldername ?? null);
                         $userfolder->children = $folders$foldername;
                     }
                 }

roundcubemail-1.5.3.tar.gz/plugins/libkolab/lib/kolab_storage_folder.php -> roundcubemail-1.5.tar.gz/plugins/libkolab/lib/kolab_storage_folder.php Changed

@@ -129,7 +129,7 @@
         $ns     = $this->get_namespace();
         $nsdata = $this->imap->get_namespace($ns);
 
-        if (is_array($nsdata0) && strlen($nsdata00) && strpos($this->name, $nsdata00) === 0) {
+        if (!empty($nsdata00) && strpos($this->name, $nsdata00) === 0) {
             $subpath = substr($this->name, strlen($nsdata00));
             if ($ns == 'other') {
                 list($user, $suffix) = explode($nsdata01, $subpath, 2);
@@ -609,7 +609,7 @@
 
         // copy attachments from old message
         $copyfrom = $object'_copyfrom' ?? ($object'_msguid' ?? null);
-        if (!empty($copyfrom) && ($old = $this->cache->get($copyfrom, $type, $object'_mailbox'))) {
+        if (!empty($copyfrom) && ($old = $this->cache->get($copyfrom, $type, $object'_mailbox')) && !empty($old'_attachments')) {
             foreach ((array)$old'_attachments' as $key => $att) {
                 if (!isset($object'_attachments'$key)) {
                     $object'_attachments'$key = $old'_attachments'$key;
@@ -1003,7 +1003,7 @@
         foreach ((array)($object'_attachments' ?? ) as $key => $att) {
             if (empty($att'content') && !empty($att'id')) {
                 // @TODO: use IMAP CATENATE to skip attachment fetch+push operation
-                $msguid = $object'_copyfrom' ?: ($object'_msguid' ?: $object'uid');
+                $msguid = !empty($object'_copyfrom') ? $object'_copyfrom' : (!empty($object'_msguid') ? $object'_msguid' : $object'uid');
                 if ($is_file) {
                     $att'path' = tempnam($temp_dir, 'rcmAttmnt');
                     if (($fp = fopen($att'path', 'w')) && $this->get_attachment($msguid, $att'id', $object'_mailbox', false, $fp, true)) {

roundcubemail-1.5.tar.gz/plugins/logon_page Added

roundcubemail-1.5.tar.gz/plugins/logon_page/LICENSE Added

@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the

roundcubemail-1.5.tar.gz/plugins/logon_page/composer.json Added

roundcubemail-1.5.tar.gz/plugins/logon_page/logon_page.html Added

roundcubemail-1.5.tar.gz/plugins/logon_page/logon_page.php Added

@@ -0,0 +1,76 @@
+<?php
+
+/**
+ * Logon screen additions.
+ *
+ * Allows to display additional information (HTML code block) on logon page.
+ *
+ * Configuration: put your content in logon_page.html file. It will be parsed by
+ * Roundcube templates engine, so you can use all template features (tags).
+ *
+ * @version @package_version@
+ * @author Aleksander Machniak <machniak@kolabsys.com>
+ *
+ * Copyright (C) 2012-2015, Kolab Systems AG <contact@kolabsys.com>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class logon_page extends rcube_plugin
+{
+    public $task    = 'login';
+    public $noajax  = true;
+    public $noframe = true;
+
+    /**
+     * Plugin initialization
+     */
+    public function init()
+    {
+        $this->add_hook('template_object_loginform', array($this, 'logon_page_content'));
+    }
+
+    /**
+     * Login form object container handler. The content will be
+     * added to the BODY tag, not the container element itself.
+     */
+    public function logon_page_content($args)
+    {
+        $file = $this->home . '/logon_page.html';
+
+        if (file_exists($file)) {
+            $html = file_get_contents($file);
+            $html = trim(str_replace('', '', $html));
+        }
+
+        if ($html) {
+            $rcmail = rcube::get_instance();
+
+            // Parse content with templates engine, so we can use e.g. localization
+            $html = $rcmail->output->just_parse($html);
+
+            // Wrap the additional content inside <div>,
+            // so it can be styled by skins
+            $html = '<div id="logon_page">' . $html . '</div>';
+
+            // In Elastic we have to move the element to more apropriate place
+            $html .= "<script>\$('#login-footer').append(\$('#logon_page'));</script>";
+
+            // Add the content at the end of the BODY
+            $rcmail->output->add_footer($html);
+        }
+
+        return $args;
+    }
+}

roundcubemail-1.5.tar.gz/plugins/nextcloud_link Added

roundcubemail-1.5.tar.gz/plugins/nextcloud_link/LICENSE Added

@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the

roundcubemail-1.5.tar.gz/plugins/nextcloud_link/composer.json Added

roundcubemail-1.5.tar.gz/plugins/nextcloud_link/config.inc.php Added

@@ -0,0 +1,24 @@
+<?php
+/*
+ +-------------------------------------------------------------------------+
+ | Configuration for the Nextcloud Link plugin                             |
+ |                                                                         |
+ | Copyright (C) 2022, Apheleia IT AG                                      |
+ |                                                                         |
+ | This program is free software: you can redistribute it and/or modify    |
+ | it under the terms of the GNU Affero General Public License as          |
+ | published by the Free Software Foundation, either version 3 of the      |
+ | License, or (at your option) any later version.                         |
+ |                                                                         |
+ | This program is distributed in the hope that it will be useful,         |
+ | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+ | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the            |
+ | GNU Affero General Public License for more details.                     |
+ |                                                                         |
+ | You should have received a copy of the GNU Affero General Public License|
+ | along with this program. If not, see <http://www.gnu.org/licenses/>.    |
+ +-------------------------------------------------------------------------+
+*/
+
+// The Nextcloud UI location, e.g. 'https://nextcloud.domain.tld/apps/files'
+$config'nextcloud_link_url' = null;

roundcubemail-1.5.tar.gz/plugins/nextcloud_link/config.inc.php.dist Added

@@ -0,0 +1,24 @@
+<?php
+/*
+ +-------------------------------------------------------------------------+
+ | Configuration for the Nextcloud Link plugin                             |
+ |                                                                         |
+ | Copyright (C) 2022, Apheleia IT AG                                      |
+ |                                                                         |
+ | This program is free software: you can redistribute it and/or modify    |
+ | it under the terms of the GNU Affero General Public License as          |
+ | published by the Free Software Foundation, either version 3 of the      |
+ | License, or (at your option) any later version.                         |
+ |                                                                         |
+ | This program is distributed in the hope that it will be useful,         |
+ | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
+ | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the            |
+ | GNU Affero General Public License for more details.                     |
+ |                                                                         |
+ | You should have received a copy of the GNU Affero General Public License|
+ | along with this program. If not, see <http://www.gnu.org/licenses/>.    |
+ +-------------------------------------------------------------------------+
+*/
+
+// The Nextcloud UI location, e.g. 'https://nextcloud.domain.tld/apps/files'
+$config'nextcloud_link_url' = null;

roundcubemail-1.5.tar.gz/plugins/nextcloud_link/nextcloud_link.php Added

@@ -0,0 +1,61 @@
+<?php
+
+/**
+ * A plugin that adds a task menu icon linking to the Nextcloud files
+ *
+ * @author Aleksander Machniak <machniak@apheleia-it.ch>
+ *
+ * Copyright (C) 2022, Apheleia IT AG <contact@apheleia-it.ch>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+class nextcloud_link extends rcube_plugin
+{
+    public $task = '?(?!login|logout).*';
+
+
+    /**
+     * Plugin initialization.
+     */
+    function init()
+    {
+        $this->rc = rcube::get_instance();
+
+        if ($this->rc->output->type !== 'html' || !empty($this->rc->output->env'framed')) {
+            return;
+        }
+
+        $this->load_config();
+
+        $url = $this->rc->config->get('nextcloud_link_url');
+
+        if (empty($url)) {
+            return;
+        }
+
+        $this->add_button(
+            'command'    => 'nextcloud',
+            'class'      => 'button-nextcloud',
+            'classsel'   => 'button-nextcloud button-selected',
+            'innerclass' => 'button-inner',
+            'label'      => '',
+            'type'       => 'link'
+        , 'taskbar');
+
+        $this->rc->output->add_footer("
+<style>#taskmenu a.button-nextcloud:before { content: \"\\f0c2\"; }</style>
+<script>\$('#taskmenu a.button-nextcloud').on('click', function () { window.open('$url', '_blank'); });</script>");
+    }
+}

roundcubemail-1.5.3.tar.gz/plugins/tasklist/drivers/kolab/tasklist_kolab_driver.php -> roundcubemail-1.5.tar.gz/plugins/tasklist/drivers/kolab/tasklist_kolab_driver.php Changed

@@ -335,15 +335,15 @@
         $this->_read_lists();
 
         // create list and folder instance if necesary
-        if (!$this->lists$id) {
+        if (empty($this->lists$id)) {
             $folder = kolab_storage::get_folder(kolab_storage::id_decode($id));
-            if ($folder->type) {
+            if ($folder && $folder->type) {
                 $this->folders$id = $folder;
                 $this->lists$id = $this->folder_props($folder, $this->rc->config->get('kolab_tasklists', array()));
             }
         }
 
-        return $this->folders$id;
+        return $this->folders$id ?? null;
     }
 
 
@@ -455,8 +455,8 @@
                 $ret |= $folder->activate(intval($prop'active'));
 
             // apply to child folders, too
-            if ($prop'recursive') {
-                foreach ((array)kolab_storage::list_folders($folder->name, '*', 'task') as $subfolder) {
+            if (!empty($prop'recursive')) {
+                foreach ((array) kolab_storage::list_folders($folder->name, '*', 'task') as $subfolder) {
                     if (isset($prop'permanent'))
                         ($prop'permanent' ? kolab_storage::folder_subscribe($subfolder) : kolab_storage::folder_unsubscribe($subfolder));
                     if (isset($prop'active'))
@@ -640,13 +640,13 @@
 
         // query Kolab storage
         $query = array();
-        if ($filter'mask' & tasklist::FILTER_MASK_COMPLETE)
+        if (!empty($filter'mask') && $filter'mask' & tasklist::FILTER_MASK_COMPLETE)
             $query = array('tags','~','x-complete');
         else if (empty($filter'since'))
             $query = array('tags','!~','x-complete');
 
         // full text search (only works with cache enabled)
-        if ($filter'search') {
+        if (!empty($filter'search')) {
             $search = mb_strtolower($filter'search');
             foreach (rcube_utils::normalize_string($search, true) as $word) {
                 $query = array('words', '~', $word);

roundcubemail-1.5.3.tar.gz/program/include/rcmail.php -> roundcubemail-1.5.tar.gz/program/include/rcmail.php Changed

@@ -300,26 +300,27 @@
      *                          - rcube_addressbook::TYPE_CONTACT (or 'sql') for the SQL addressbook
      *                          - rcube_addressbook::TYPE_DEFAULT for the default addressbook
      * @param bool   $writeable True if the address book needs to be writeable
+     * @param bool   $fallback  Fallback to the first existing source, if the configured default wasn't found
      *
      * @return rcube_contacts|null Address book object
      */
-    public function get_address_book($id, $writeable = false)
+    public function get_address_book($id, $writeable = false, $fallback = true)
     {
         $contacts    = null;
         $ldap_config = (array) $this->config->get('ldap_public');
         $default     = false;
 
+        $id = (string) $id;
+
         // 'sql' is the alias for '0' used by autocomplete
         if ($id == 'sql') {
-            $id = rcube_addressbook::TYPE_CONTACT;
+            $id = (string) rcube_addressbook::TYPE_CONTACT;
         }
-        else if ($id == rcube_addressbook::TYPE_DEFAULT || $id == -1) { // -1 for BC
+        else if ($id === strval(rcube_addressbook::TYPE_DEFAULT) || $id === '-1') { // -1 for BC
             $id = $this->config->get('default_addressbook');
             $default = true;
         }
 
-        $id = (string) $id;
-
         // use existing instance
         if (isset($this->address_books$id) && ($this->address_books$id instanceof rcube_addressbook)) {
             $contacts = $this->address_books$id;
@@ -352,12 +353,13 @@
 
         // Get first addressbook from the list if configured default doesn't exist
         // This can happen when user deleted the addressbook (e.g. Kolab folder)
-        if (!$contacts && (!$id || $default)) {
+        if ($fallback && !$contacts && (!$id || $default)) {
             $source = $this->get_address_sources($writeable, !$default);
             $source = reset($source);
 
             if (!empty($source)) {
-                $contacts = $this->get_address_book($source'id');
+                // Note: No fallback here to prevent from an infinite loop
+                $contacts = $this->get_address_book($source'id', false, false);
                 if ($contacts) {
                     $id = $source'id';
                 }
@@ -1530,7 +1532,7 @@
      * Convert the given date to a human readable form
      * This uses the date formatting properties from config
      *
-     * @param mixed  $date    Date representation (string, timestamp or DateTime object)
+     * @param mixed  $date    Date representation (string, timestamp or DateTimeInterface)
      * @param string $format  Date format to use
      * @param bool   $convert Enables date conversion according to user timezone
      *

roundcubemail-1.5.3.tar.gz/program/js/app.js -> roundcubemail-1.5.tar.gz/program/js/app.js Changed

@@ -1363,11 +1363,8 @@
           this.list_mailbox(this.env.mailbox, 1);
         }
         else if (s && this.task == 'addressbook') {
-          if (this.env.source == '') {
-            for (n in this.env.address_sources) break;
-            this.env.source = n;
-            this.env.group = '';
-          }
+          this.env.source = this.env.last_source || '';
+          this.env.group = this.env.last_group || '';
           this.list_contacts(this.env.source, this.env.group, 1);
         }
         break;
@@ -4267,7 +4264,7 @@
     var container = $(this.gui_objects.editform).find('.identity-encryption').first();
     var identity_email = $(this.gui_objects.editform).find('.ff_email').val().trim();
 
-    if (!container.length || !identity_email || !this.mailvelope_keyring.createKeyGenContainer)
+    if (!container.length || !identity_email || !this.mailvelope_keyring.createKeyGenContainer)
       return;
 
     var key_fingerprint;
@@ -6359,8 +6356,8 @@
     else if (!this.env.search_request)
       folder = group ? 'G'+src+group : src;
 
-    this.env.source = src;
-    this.env.group = group;
+    this.env.source = this.env.last_source = src;
+    this.env.group = this.env.last_group = group;
 
     // truncate groups listing stack
     $.each(this.env.address_group_stack, function(i, v) {

roundcubemail-1.5.3.tar.gz/program/lib/Roundcube/rcube_db.php -> roundcubemail-1.5.tar.gz/program/lib/Roundcube/rcube_db.php Changed

roundcubemail-1.5.3.tar.gz/program/lib/Roundcube/rcube_vcard.php -> roundcubemail-1.5.tar.gz/program/lib/Roundcube/rcube_vcard.php Changed

@@ -839,17 +839,22 @@
     {
         $vcard = '';
 
-        foreach ((array)$data as $type => $entries) {
-            // valid N has 5 properties
-            while ($type == "N" && is_array($entries0) && count($entries0) < 5) {
-                $entries0 = "";
-            }
+        // Make sure FN is not empty (required by RFC2426)
+        if (empty($data'FN')) {
+            $data'FN' = !empty($data'EMAIL'00) ? $data'EMAIL'00 : '';
+        }
 
-            // make sure FN is not empty (required by RFC2426)
-            if ($type == "FN" && empty($entries) && !empty($data'EMAIL'00)) {
-                $entries0 = $data'EMAIL'00;
-            }
+        // Make sure N is not empty (required by RFC2426)
+        if (empty($data'N')) {
+            $data'N' = '', '', '', '', '';
+        }
+
+        // Valid N has 5 properties
+        while (isset($data'N'0) && is_array($data'N'0) && count($data'N'0) < 5) {
+            $data'N'0 = '';
+        }
 
+        foreach ((array)$data as $type => $entries) {
             foreach ((array)$entries as $entry) {
                 $attr = '';
                 if (is_array($entry)) {
@@ -884,8 +889,8 @@
                     $value = $entry;
                 }
 
-                // skip empty entries
-                if (self::is_empty($value)) {
+                // Skip empty entries that aren't required by vCard v3 format
+                if (!in_array($type, 'N', 'FN') && self::is_empty($value)) {
                     continue;
                 }

roundcubemail-1.5.3.tar.gz/skins/kolab/styles/_styles.less -> roundcubemail-1.5.tar.gz/skins/kolab/styles/_styles.less Changed

roundcubemail-1.5.3.tar.gz/skins/kolab/styles/styles.css -> roundcubemail-1.5.tar.gz/skins/kolab/styles/styles.css Changed

@@ -1 +1 @@
-p.image-attachment .attachment-links a:before,.quota-widget:before,.table-widget table.options-table td:not(:first-child) span:before,table.table th.checkbox-cell:before,a.button.icon:before,button.btn:before,.floating-action-buttons a.button:before,.ui-dialog .ui-dialog-titlebar-close:before,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before,.ui-datepicker .ui-datepicker-prev:before,.ui-datepicker .ui-datepicker-next:before,.pgpkeyimport div.key label.keyid+a:before,.pgpkeyimport li.uid:before,.menu a:before,.popover .menu li aaria-haspopup:after,.searchbar form:before,.searchbar a:before,.ui.alert>i.icon:before,.listing td.action a:before,.listing.iconized li a:before,.listing.iconized li>i:before,.listing.iconized tr td:before,.listing.iconized.selectable li a:before,ul.treelist li div.treetoggle:before,.folderlist li a:before,.messagelist tr.thread td.threads div:before,.messagelist td.subject span.msgicon.status:before,.messagelist td.subject span.msgicon.status.replied.forwarded:after,.messagelist span.attachment span,.messagelist span.flagged:before,.messagelist tr.flaggedroot:not(:hover) span.unflagged:before,.messagelist tr:hover span.unflagged:before,.contactlist td.contact:before,.contactlist td.contactgroup:before,.contactlist li a:before,.attachmentslist li:before,.attachmentslist li a.cancelupload:before,.attachmentslist li a.delete:before,.keylist li:before,#identities-table td.mail:before,#responses-table td.name:before,#filterslist td.name:before,#filtersetslist td.name:before,.propform td.rowbuttons a:before,fieldset.advanced>legend:after,.input-group .icon:before,.multi-input a.icon.reset:before,.tagedit-list li.tagedit-listelement-old a:before,div.tox .tox-dialog__header .tox-button:before,div.tox .tox-dialog__footer .tox-button:before,.html-editor .editor-toolbar .mce-i-html:before,.googie_list li .googie_list_revert:before,.googie_list li .googie_add_to_dict:before,body.status-flagged #message-header>.subject:before,#message-header>.subject a.extwin:before,#message-header .header-links a:before,.message-part blockquote span.blockquote-link:after,.message-htmlpart blockquote span.blockquote-link:after{font-size:1.25em;display:block;float:left;margin:0 .25rem 0 0;width:1.18em;height:1em;font-family:'Icons';font-style:normal;font-weight:900;text-decoration:inherit;text-align:center;speak:none;font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased}@font-face{font-family:'Icons';font-style:normal;font-weight:900;src:url("../fonts/fa-solid-900.woff2") format('woff2'),url("../fonts/fa-solid-900.woff") format('woff')}@font-face{font-family:'Icons';font-style:normal;font-weight:400;src:url("../fonts/fa-regular-400.woff2") format('woff2'),url("../fonts/fa-regular-400.woff") format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:local('Roboto'),local('Roboto-Regular'),url('../fonts/roboto-v19-regular.woff2') format('woff2'),url('../fonts/roboto-v19-regular.woff') format('woff')}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:local('Roboto Italic'),local('Roboto-Italic'),url('../fonts/roboto-v19-italic.woff2') format('woff2'),url('../fonts/roboto-v19-italic.woff') format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:local('Roboto Bold'),local('Roboto-Bold'),url('../fonts/roboto-v19-regular-700.woff2') format('woff2'),url('../fonts/roboto-v19-regular-700.woff') format('woff')}@font-face{font-family:'Roboto';font-style:italic;font-weight:700;src:local('Roboto Bold Italic'),local('Roboto-BoldItalic'),url('../fonts/roboto-v19-italic-700.woff2') format('woff2'),url('../fonts/roboto-v19-italic-700.woff') format('woff')}body,button,input,optgroup,select,textarea,.popover{font-family:Roboto,sans-serif}button,input,select,textarea{line-height:initial}input{vertical-align:middle}a{color:#f4c200}a:hover{color:#c19900}a.disabled{pointer-events:none}a.disabled:not(.btn){opacity:.5}html{height:100%;font-size:14px}body{min-width:240px;height:100%;color:#4f4f4f;overflow:hidden}html.iframe body{overflow:auto}#layout{overflow:hidden;display:flex;height:100%;width:100%}#layout>div>.scroller{flex:1;position:relative}#layout>div>.header,#layout>div>.footer{font-size:1rem;font-weight:bold;line-height:58px;height:58px;min-height:58px;padding:0 .25em;margin:0;position:relative;overflow:hidden;white-space:nowrap;display:flex;justify-content:center}#layout>div>.header{border-bottom:1px solid #d4dbde;color:#4f4f4f;background-color:#f1eeea}#layout>div>.header .header-title{overflow:hidden;text-overflow:ellipsis;flex:1;text-align:center;margin:0 -20rem}#layout>div>.header a.button{color:#7b7b77}#layout>div>.header a.toolbar-list-button,#layout>div>.header a.toolbar-menu-button{order:99}#layout>div>.footer{border-top:1px solid #d4dbde;background-color:#fff}#layout>div>.footer.small{height:35px;min-height:35px;line-height:35px}#layout>div>.footer:empty{display:none}#layout-sidebar{position:relative;display:flex;flex-direction:column;flex:2;max-width:30%;min-width:220px;border-right:1px solid #d4dbde;background-color:#fff}#layout-sidebar.sidebar-right{order:2;border-right:0;border-left:1px solid #d4dbde;flex:3}#layout-list{position:relative;display:flex;flex-direction:column;flex:3;max-width:30%;min-width:300px;border-right:1px solid #d4dbde;background-color:#fff}#layout-content{display:flex;flex:6;flex-direction:column;background-color:#fff}html.iframe #layout-content{height:100%}#layout-content>.formcontent,#layout-content>.content{height:100%;width:100%;overflow:auto;flex:1}#layout-content .iframe-wrapper{width:100%;flex:1}#layout-content .iframe-wrapper iframe{width:100%;height:100%;border:0}#layout-content.only>.scroller{overflow:auto}#layout-menu.popover{left:0 !important}#layout-menu .popover-header{height:58px;line-height:58px;border:0;border-radius:0;text-align:center}#layout-menu .popover-header img{max-height:58px;max-width:78px;padding:.25rem}@media screen and (min-width:481px) and (max-width:1024px){#layout-menu .popover-header img{max-width:35.1px}}@media screen and (min-width:481px){#layout-menu .popover-header{padding:0 !important;background-color:#3a444e !important}#layout-menu .popover-header a{display:none !important}}html.layout-phone #layout-menu .popover-header{display:flex !important;align-items:center;justify-content:center;padding:0 .5rem}html.layout-phone #layout-menu .popover-header img{max-width:222px}html.layout-phone #layout-menu .popover-header a{width:auto;flex:1}html.layout-phone #layout-menu .popover-header a:before{height:58px;float:right}html.layout-phone #layout-menu .popover-header a .inner{display:none}.column-resizer{cursor:col-resize;z-index:1;position:absolute;top:0;right:-3px;width:6px;height:100%}.column-resizer.inverted{right:auto;left:-3px}.column-resizer.active{width:10000px;right:-5000px}.column-resizer.active.inverted{right:auto;left:-5000px}@media screen and (max-width:1200px){#layout-sidebar,#layout-list{min-width:260px;flex:3}#layout-list>.header>a.button{padding:0 .25rem;margin:0 .25rem}}@media screen and (max-width:1024px){.column-resizer{display:none}#layout-sidebar,#layout-list{width:auto !important;flex:3 !important}}@media screen and (max-width:768px){#layout-sidebar,#layout-list{max-width:none;border:0 !important}#layout>div>.header{background-color:#f1eeea}#layout>div>.header a.button{margin:0 .3rem !important;padding:0 !important}#layout>div>.header a.button:before{font-size:1.75rem;height:58px;margin:0}#layout>div>.header a.button.filter:before{font-size:1.6rem}#layout>div>.header a.button .inner{display:none}#layout>div>.footer{background-color:#f1eeea}a.toolbar-list-button{display:none}}@media screen and (max-width:320px){#layout-sidebar,#layout-list{min-width:240px}}@media screen and (min-width:481px){a.task-menu-button{display:none}#layout-menu{background-color:#3a444e;width:42px}}@media screen and (min-width:769px){.floating-action-buttons,#layout-content>.header>.header-title,#layout>div>.header>.buttons,a.toolbar-menu-button{display:none}}@media screen and (min-width:1025px){#layout-menu{width:78px}}@media screen and (min-width:1201px){#layout-list>.header>.header-title:not(.all-sizes),a.toolbar-list-button,a.back-list-button,a.back-sidebar-button{display:none}}html.layout-phone .hidden-phone{display:none !important}html.layout-phone .hidden-small,html.layout-small .hidden-small{display:none !important}html.layout-small .hidden-lbs{display:none !important}html.layout-large .hidden-lbs,html.layout-normal .hidden-lbs,html.layout-large .hidden-big,html.layout-normal .hidden-big{display:none !important}html.layout-large .hidden-large{display:none !important}.rcmaddcontact,.hidden,.voice{display:none !important}font.bold{font-weight:bold}#rcmdraglayer{min-width:260px;width:260px;background-color:#3a444e;color:#fff;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem;z-index:250;opacity:.92;padding:.5rem;white-space:nowrap}#rcmdraglayer div{line-height:1.6em;overflow:hidden;text-overflow:ellipsis}.frame-content{padding:1rem}.frame-content h2{font-weight:bold;font-size:1.5em}.frame-content h3{font-weight:bold;font-size:1.25em}.listbox .scroller{width:100%;overflow-x:hidden;overflow-y:auto}.listbox .navlist{height:0;flex:initial !important}.listbox .navlist .listing tr:last-child td,.listbox .navlist .listing li:last-child{border-bottom:0}.popup .listbox{height:100%;display:flex;flex-direction:column}.popup .listbox .scroller{flex:1}.popup .listbox .footer{border-top:1px solid #d4dbde;background-color:#fbfbfb}.contact-header{display:flex;margin-bottom:1rem}.contact-header .contact-photo{min-width:112px}.contact-header .contact-head{margin-left:1rem;margin-top:0 !important}.contact-header .contact-head legend{display:none}p.image-attachment{position:relative;border:1px solid #ddd;border-radius:.3rem;background-color:rgba(244,194,0,0.05);float:left;margin:.5rem;min-width:47%;min-height:250px;overflow:hidden;display:flex;justify-content:center}@media screen and (max-width:480px){p.image-attachment{float:none;margin:.5rem 0 .5rem 0}}p.image-attachment .image-link{align-self:center;text-align:center;margin:1.6rem .5rem}p.image-attachment span{color:#7b7b77;padding:0 .5rem;font-size:90%;white-space:nowrap;position:absolute;line-height:1.5rem}p.image-attachment .image-filename{overflow:hidden;text-overflow:ellipsis;left:0;top:0;right:0;padding-right:4rem}p.image-attachment .image-filesize{right:0;top:0}p.image-attachment .attachment-links{position:absolute;bottom:0;left:0;width:100%;text-align:center}p.image-attachment .attachment-links a{text-decoration:none;display:inline-block;padding:0 .5rem;line-height:1.5rem}p.image-attachment .attachment-links a:before{display:inline-block}p.image-attachment .attachment-links a.open:before{content:"\f360"}p.image-attachment .attachment-links a.download:before{content:"\f019"}fieldset.image-attachment{margin-top:.5rem}fieldset.image-attachment legend{color:#7b7b77;font-size:.9rem;border-top:1px solid #f9f9f8;margin:0}fieldset.image-attachment img{max-width:100%}#folder-selector{overflow-y:auto}.noselect{user-select:none;-moz-user-select:none;-khtml-user-select:none;-ms-user-select:none;-webkit-user-select:none}.iframe-loader{width:100%;position:absolute;top:0;bottom:0;background-color:rgba(255,255,255,0.95);display:flex;align-items:center;justify-content:center;z-index:3}.iframe-loader .spinner-border{width:7rem;height:7rem;color:#f8f7f4;border:1rem solid;border-color:currentColor #7b7b77 currentColor currentColor}.footer.toolbar+.iframe-loader{top:58px;bottom:58px}.ios-scroll{padding:0;-webkit-overflow-scrolling:touch !important;overflow:scroll !important}.ios-scroll.iframe-wrapper{margin-top:1px}.webkit-scroller::-webkit-scrollbar{-webkit-appearance:none}.webkit-scroller::-webkit-scrollbar:vertical{width:.5rem}.webkit-scroller::-webkit-scrollbar:horizontal{height:.5rem}.webkit-scroller::-webkit-scrollbar-thumb{background-color:rgba(0,0,0,0.3);border-radius:.25rem;border:2px solid #fff}.quota-widget{width:100%;max-width:15em;padding:.5rem 1rem;display:flex;align-items:center;color:#7b7b77}.quota-widget:before{content:"\f0a0";line-height:1}.quota-widget .count{font-size:80%;order:2}.quota-widget .bar{flex:1;height:.5rem;margin:0 1rem;background-color:#fff;border:1px solid #d4dbde;border-radius:.25rem;overflow:hidden}.quota-widget .value{display:block;background-color:#f4c200;height:1rem;opacity:.75}.quota-widget .value.warning{background-color:#ff5552}.image-tools{position:absolute;top:5rem;left:0;height:58px;overflow:hidden;transform:translateX(-87%);transition:transform .3s ease-in-out;background-color:rgba(244,194,0,0.4);border-radius:0 .3rem .3rem 0}.image-tools .menu{float:left}.image-tools a.button.icon.tools{padding:0 .25rem;display:inline-block;height:58px}.image-tools a.button.icon.tools span.inner{display:none}.image-tools a.button.icon.tools:before{line-height:58px;margin:0}.image-tools.open{transform:translateX(0)}.image-tools.open a.button.icon.tools:before{content:"\f053"}.image-tools a{color:#fff !important}.image-tools a:focus,.image-tools a:hover{background-color:rgba(244,194,0,0.5) !important;outline:0}.quota-info{width:100%;display:table !important}.quota-info td,.quota-info th{text-align:center;white-space:nowrap}.quota-info th{border-top:0}.quota-info .root{line-height:1;font-style:italic;color:#7b7b77;background-color:#f8f7f4}.quota-info th:first-child,.quota-info .name{text-align:left}.nav-tabs{flex-wrap:nowrap}.nav-tabs .nav-item{white-space:nowrap;overflow:hidden}.nav-tabs .nav-link{overflow:hidden;text-overflow:ellipsis}.props-table td.title{width:7em}.table-widget{display:flex;flex-direction:column;margin-bottom:.5rem;border:1px solid #d4dbde}.table-widget>.content{overflow-x:auto;flex-grow:1;height:18.5em}.table-widget>.content table th{border-top:0}.table-widget>.footer{height:3.5rem;border-top:1px solid #d4dbde;text-align:left}.table-widget>.footer a{padding:.2rem .45rem !important;height:calc(3.5rem - 1px) !important}.table-widget table{margin:0;max-height:18.5em}.table-widget table.options-table td,.table-widget table.options-table th{text-align:center;vertical-align:middle}.table-widget table.options-table td:first-child,.table-widget table.options-table th:first-child{overflow:hidden;text-overflow:ellipsis;text-align:left}.table-widget table.options-table tr:last-child td{border-bottom:1px solid #d4dbde}.table-widget table.options-table tr.selected td{background-color:#fdf6d9;color:#4f4f4f;outline:0}.table-widget table.options-table td:not(:first-child) span{display:inline-block;line-height:1.25}.table-widget table.options-table td.enabled span:before{content:"\f00c"}.table-widget table.options-table td.partial span:before{opacity:.3;content:"\f00c"}table.compact-table{margin:0;width:100%}table.compact-table *:not(.invalid-feedback){font-size:inherit}table.compact-table td{padding:.25rem;border:0}table.compact-table td:first-child{padding-left:0}table.compact-table td:last-child{padding-right:0}table.table .checkbox-cell{width:3rem;white-space:nowrap;overflow:hidden;text-align:center;padding:.5rem}html.touch table.table .checkbox-cell{padding:.5rem .3rem}table.table th.checkbox-cell{padding:.75rem 0;max-width:1rem}table.table th.checkbox-cell:before{cursor:pointer;margin:0 1rem;line-height:1}table.table th.checkbox-cell.subscription:before{content:"\f143"}table.table th.checkbox-cell.alarm:before{content:"\f0f3";font-weight:400}table.table th.checkbox-cell.read:before{content:"\f06e"}table.table th.checkbox-cell.write:before{content:"\f303"}table.table .buttons-cell{width:1%;white-space:nowrap;text-align:center}table.table .buttons-cell a.button:before{line-height:1;float:none;display:inline-block}@media screen and (min-width:480px){table.table .buttons-cell a.button .inner{display:inline}}table.table label{margin:0;display:inline}fieldset.tab-pane table.table thead th{border:0}table.table tr.deleted td{color:rgba(79,79,79,0.5) !important}.table thead th{border-width:1px;white-space:nowrap}.button.disabled{opacity:.5}a.button{text-decoration:none !important}a.button.icon.sidebar-menu:before,button.btn.sidebar-menu:before,a.button.icon.toolbar-menu-button:before,button.btn.toolbar-menu-button:before,a.button.icon.toolbar-list-button:before,button.btn.toolbar-list-button:before{content:"\f142";width:1em}a.button.icon.task-menu-button:before,button.btn.task-menu-button:before{content:"\f0c9"}a.button.icon.back-sidebar-button:before,button.btn.back-sidebar-button:before,a.button.icon.back-content-button:before,button.btn.back-content-button:before,a.button.icon.back-list-button:before,button.btn.back-list-button:before{content:"\f053"}a.button.icon.refresh:before,button.btn.refresh:before{content:"\f021"}a.button.icon.generate:before,button.btn.generate:before,a.button.icon.yes:before,button.btn.yes:before,a.button.icon.submit:before,button.btn.submit:before,a.button.icon.continue:before,button.btn.continue:before,a.button.icon.save:before,button.btn.save:before{content:"\f00c"}a.button.icon.create:before,button.btn.create:before{content:"\f0fe"}a.button.icon.edit:before,button.btn.edit:before{content:"\f303"}a.button.icon.qrcode:before,button.btn.qrcode:before{content:"\f029"}a.button.icon.search:before,button.btn.search:before{content:"\f002"}a.button.icon.filter:before,button.btn.filter:before{content:"\f0b0";font-size:1.2em}a.button.icon.import:before,button.btn.import:before{content:"\f093"}a.button.icon.export:before,button.btn.export:before{content:"\f019"}a.button.icon.discard:before,button.btn.discard:before,a.button.icon.delete:before,button.btn.delete:before{content:"\f2ed";font-weight:400}a.button.icon.next:before,button.btn.next:before{content:"\f061"}a.button.icon.restore:before,button.btn.restore:before{content:"\f0e2"}a.button.icon.send:before,button.btn.send:before,a.button.icon.bounce:before,button.btn.bounce:before{content:"\f1d8"}a.button.icon.attach:before,button.btn.attach:before{content:"\f0c6"}a.button.icon.attach.vcard:before,button.btn.attach.vcard:before{content:"\f007"}a.button.icon.no:before,button.btn.no:before,a.button.icon.close:before,button.btn.close:before,a.button.icon.cancel:before,button.btn.cancel:before{content:"\f00d"}a.button.icon.back:before,button.btn.back:before{content:"\f053"}a.button.icon.remove:before,button.btn.remove:before{content:"\f00d"}a.button.icon.unlock:before,button.btn.unlock:before{content:"\f09c"}a.button.icon.help:before,button.btn.help:before{content:"\f1cd";font-weight:400}a.button.icon.folders:before,button.btn.folders:before{content:"\f07c"}a.button.icon.options:before,button.btn.options:before{content:"\f1de"}a.button.icon.tools:before,button.btn.tools:before,a.button.icon.settings:before,button.btn.settings:before{content:"\f013"}a.button.icon.properties:before,button.btn.properties:before{content:"\f05a"}a.button.icon.selection:before,button.btn.selection:before{content:"\f14a";font-weight:400}a.button.icon.insert.recipient:before,button.btn.insert.recipient:before{content:"\f234"}a.button.icon.encrypt:before,button.btn.encrypt:before{content:"\f023"}a.button.icon.sign:before,button.btn.sign:before{content:"\f5b7"}a.button.icon.sso:before,button.btn.sso:before{content:"\f2f6"}a.button.icon.extwin:before,button.btn.extwin:before{content:"\f360"}a.btn:before,button.btn:before{display:inline !important;float:none !important;vertical-align:middle;margin-right:.4rem !important}a.btn.oauth.google:before,button.btn.oauth.google:before,a.btn.oauth.outlook:before,button.btn.oauth.outlook:before{content:" ";display:inline-block !important;height:1.5rem;width:1.5rem;margin-right:.8rem !important;background-size:100% auto}a.btn.oauth.google:before,button.btn.oauth.google:before{background:url('../images/google-icon.svg') top left no-repeat}a.btn.oauth.outlook:before,button.btn.oauth.outlook:before{background:url('../images/microsoft-icon.svg') top left no-repeat}a.button.icon.dropdown:before{content:"\f0d7";font-size:1em}a.button.icon>span.inner{display:none}html.touch .btn:focus{box-shadow:none !important}.floating-action-buttons{position:absolute;right:0;bottom:0}.footer:not(:empty)+.floating-action-buttons{bottom:35px}.floating-action-buttons a.button{display:block;float:left;width:4rem;height:4rem;border-radius:50%;background:#f4c200;color:white;opacity:.95;box-shadow:0 0 5px 5px #ffeda7;margin:0 1rem 1rem 0}.floating-action-buttons a.button:before{content:"\f067";width:4rem;height:4rem;line-height:4rem}.floating-action-buttons a.button.compose:before{content:"\f304"}.floating-action-buttons a.button .inner{display:none}.btn:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.3)}.btn-link{color:#f4c200}.btn-secondary{color:#fff;background:#8b9fa7;border-color:#8b9fa7}.btn-secondary:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}.btn-secondary:hover{background:#7c939c;border-color:#778e98}.btn-secondary.disabled,.btn-secondary:disabled{background:#8b9fa7;border-color:#8b9fa7}.btn-secondary:not(:disabled):not(.disabled):active,.btn-secondary:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}.btn-secondary:not(:disabled):not(.disabled):active:focus,.btn-secondary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}.btn-primary{color:#fff;background:#f4c200;border-color:#f4c200}.btn-primary:focus{background:#dbae00;border-color:#d0a600;box-shadow:0 0 0 .2rem rgba(244,194,0,0.5)}.btn-primary:hover{background:#dbae00;border-color:#d0a600}.btn-primary.disabled,.btn-primary:disabled{background:#f4c200;border-color:#f4c200}.btn-primary:not(:disabled):not(.disabled):active,.btn-primary:not(:disabled):not(.disabled).active{background:#c19900;border-color:#b79100}.btn-primary:not(:disabled):not(.disabled):active:focus,.btn-primary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.53)}.btn-danger{color:#fff;background:#ff5552;border-color:#ff5552}.btn-danger:focus{background:#ff3c38;border-color:#ff322e;box-shadow:0 0 0 .2rem rgba(255,85,82,0.5)}.btn-danger:hover{background:#ff3c38;border-color:#ff322e}.btn-danger.disabled,.btn-danger:disabled{background:#ff5552;border-color:#ff5552}.btn-danger:not(:disabled):not(.disabled):active,.btn-danger:not(:disabled):not(.disabled).active{background:#ff231f;border-color:#ff1915}.btn-danger:not(:disabled):not(.disabled):active:focus,.btn-danger:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(255,85,82,0.53)}.ui-widget-overlay{background-color:rgba(79,79,79,0.5);opacity:1 !important}.ui-widget-overlay.datepicker{z-index:119}.ui-widget{border:1px solid #d4dbde;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem}.ui-menu{overflow-y:auto;overflow-x:hidden;max-height:400px;border-radius:.3rem;z-index:240;position:absolute}.ui-menu .ui-state-active{border:0 !important;background-color:#f4c200 !important}.ui-menu .ui-menu-item{white-space:nowrap;cursor:default}.ui-menu .ui-menu-item-wrapper{margin:0 !important}.ui-dialog{border-radius:0;box-shadow:none}.ui-dialog.no-titlebar .ui-dialog-titlebar{display:none}.ui-dialog .ui-dialog-titlebar{height:58px;border-bottom:1px solid #ddd}.ui-dialog .ui-dialog-titlebar button:before{margin:0}.ui-dialog .ui-dialog-title{line-height:58px;font-size:1.25rem;padding:0 3rem 0 1rem;color:#4f4f4f}.ui-dialog .ui-dialog-titlebar-close{border:0;color:#4f4f4f;background:transparent;right:0;top:0;position:absolute;padding:.25rem .5rem;margin:15px .5rem}.ui-dialog .ui-dialog-titlebar-close:before{content:"\f00d";line-height:1.5rem;margin:0 !important}.ui-dialog .ui-dialog-content>.popupmenu{display:block !important}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset{display:flex;justify-content:flex-end}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button{overflow:hidden;text-overflow:ellipsis;min-width:5rem;margin:9px 4px}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:last-child,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:last-child{margin-right:0}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{padding-right:0;padding-left:0;text-decoration:none;color:#4f4f4f}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:focus{background-color:rgba(244,194,0,0.5)}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options{order:-1;padding:.375rem .25rem;margin-right:.3rem}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before{content:"\f013";width:100%;height:1.25em}.ui-dialog iframe,.ui-dialog .ui-dialog-content.iframe{padding:0;width:100% !important;height:100%;border:0;overflow:hidden}.ui-dialog,.ui-dialog-content{box-sizing:initial}.ui-widget-content .ui-icon.ui-resizable-se{background:url("data:image/svg+xml;charset=utf-8,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%2016%2016%22%3E%0A%20%20%3Cpath%20fill%3D%22%23888%22%20d%3D%22M6.7%2016L16%206.7V5.3L5.3%2016zM9.7%2016L16%209.7V8.3L8.3%2016zM12.7%2016l3.3-3.3v-1.4L11.3%2016zM15.7%2016l.3-.3v-1.4L14.3%2016z%22%2F%3E%0A%3C%2Fsvg%3E%0A")}@media screen and (max-width:480px){.ui-dialog{width:100% !important;height:100% !important;display:flex;flex-direction:column;border:0;top:0 !important}.ui-dialog .ui-resizable-handle,.ui-dialog .ui-dialog-titlebar-close{display:none !important}.ui-dialog .ui-dialog-titlebar{height:58px;text-align:center;background-color:#f1eeea}.ui-dialog .ui-dialog-title{line-height:58px;font-size:1rem;padding:0 1rem}.ui-dialog .ui-dialog-content{flex:1}.ui-dialog .ui-dialog-content:not(.iframe){padding:1rem}.ui-dialog .ui-dialog-buttonpane{padding:0 !important;text-align:center !important;border-top:1px solid #ddd;height:58px !important;background-color:#f1eeea}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset{justify-content:space-around}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button{margin:0 !important;padding:.45rem;border:0 !important;height:58px;box-shadow:none;font-size:90%;line-height:1.5}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:before{display:block !important;float:none;width:auto;height:1.75rem;line-height:1.75;margin:0 !important}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:active{box-shadow:none}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-primary,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-secondary{color:#7b7b77;background:transparent}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-danger{color:#ff5552;background:transparent}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.disabled,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:disabled{opacity:.5}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.cancel{order:100}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{color:#7b7b77;margin:0;padding:.45rem;font-size:90%}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before{display:block !important;height:1.75rem;line-height:1.75;margin:0}}.ui-slider{box-shadow:none}.ui-slider .ui-slider-range{border-radius:.3rem;background:#ffe88e}.ui-slider .ui-slider-handle{border-radius:.3rem}.ui-slider .ui-slider-handle.ui-state-active{background:#f4c200;border-color:#5b4800}.ui-datepicker{margin:calc(50vh - 10em) calc(50vw - 10em) !important;top:0 !important;left:0 !important;box-shadow:none;user-select:none}.ui-datepicker:not(.ui-datepicker-inline){z-index:120 !important}.ui-datepicker .ui-datepicker-header,.ui-datepicker .ui-datepicker-title{line-height:4rem;height:4rem;padding:0}.ui-datepicker .ui-datepicker-header{border-bottom:1px solid #ddd}.ui-datepicker .ui-datepicker-header a{height:4rem}.ui-datepicker .ui-datepicker-header select{display:inline-block}.ui-datepicker .ui-icon{background-image:none !important;background-position:none !important}.ui-datepicker .ui-datepicker-prev,.ui-datepicker .ui-datepicker-next{cursor:pointer;width:auto;color:#4f4f4f;text-decoration:none}.ui-datepicker .ui-datepicker-prev:before,.ui-datepicker .ui-datepicker-next:before{content:"\f053";margin:0 .25em;height:auto;width:1em}.ui-datepicker .ui-datepicker-prev:before{content:"\f053"}.ui-datepicker .ui-datepicker-next:before{content:"\f054"}.ui-datepicker td a{padding:0;line-height:1.8em;border-radius:.3rem}.ui-datepicker .ui-state-default,.ui-datepicker.ui-widget-content .ui-state-default{border:0;background:transparent;color:#4f4f4f}.ui-datepicker .ui-datepicker-days-cell-over a,.ui-datepicker .ui-datepicker-days-cell-over a.ui-state-default,.ui-datepicker .ui-state-highlight,.ui-datepicker.ui-widget-content .ui-state-highlight{background:#ffe88e;color:#f4c200}.ui-datepicker a.ui-state-active{background:#f4c200 !important;color:#fff !important;font-weight:bold}.ui-datepicker html.touch td a{font-size:1.2em;line-height:2.2em}.input-group>.form-control.hasDatepicker{position:initial}.minicolors-panel{border:1px solid #d4dbde;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem;height:152px;padding:1px}.input-group .minicolors-input{width:100%;min-width:130px;border-left:0;border-right:0}@media screen and (max-width:320px){.ui-widget-content{border-radius:0}.ui-menu{border-radius:.3rem;left:15px !important;right:15px;width:auto}.ui-dialog .ui-dialog-content:not(.iframe){padding:.65rem}}.popupmenu{display:none;padding:0;min-width:180px;height:100%}.popupmenu li>a{width:100%}.popupmenu.propform{overflow:hidden;padding:.25rem}.popupmenu.simplelist{min-width:80px}.popup.justified{display:flex;justify-content:space-around}.popover-body{padding:0;overflow-x:hidden}.popover-body>.popupmenu{display:block !important}.popover{box-shadow:3px 3px 5px #f8f7f4;border-color:#d4dbde;padding:0;z-index:1300}.popover .popover-header{display:none}@media screen and (min-width:769px){.popover .listing li:first-child{border-radius:.25rem .25rem 0 0}.popover .listing li:last-child{border-bottom-right-radius:.25rem;border-bottom-left-radius:.25rem}.popover .listing ul.rounded-0>li{border-radius:0}}html.layout-small .popover:not(.select-menu),html.layout-phone .popover:not(.select-menu){margin:0 !important;padding:0;right:0;left:initial !important;bottom:0;top:0;width:272px;transform:none !important;border-radius:0;border:0;display:flex;flex-direction:column;box-shadow:none}html.layout-small .popover:not(.select-menu) div.arrow,html.layout-phone .popover:not(.select-menu) div.arrow{display:none}html.layout-small .popover:not(.select-menu) .listing li:last-child,html.layout-phone .popover:not(.select-menu) .listing li:last-child{border-bottom:1px solid #f8f7f4}html.layout-small .popover-overlay,html.layout-phone .popover-overlay{z-index:1299;background-color:rgba(79,79,79,0.5);position:absolute;top:0;bottom:0;width:100%}html.layout-small .popover-header,html.layout-phone .popover-header{display:block;border-radius:0;border:0;padding:0 .5em;height:58px;min-height:58px;line-height:58px;font-size:16px;color:#fff;background-color:#3a444e}html.layout-small .popover-header:before,html.layout-phone .popover-header:before{display:none}html.layout-small .popover-header a,html.layout-phone .popover-header a{display:inline-block;width:100%}html.layout-small .popover-body>*,html.layout-phone .popover-body>*{max-height:100% !important}html.touch .popover .listing li a{line-height:47px;font-size:16px;padding:0 .5em}html.touch .popover .listing li a:before{float:left}.select-menu{max-width:initial;margin:0;height:auto;z-index:1301}.select-menu .popover-header{border-radius:.25rem .25rem 0 0 !important}.select-menu .listing li a{padding-left:.25rem;outline:0}.select-menu .listing li:last-child{border-bottom-right-radius:.25rem;border-bottom-left-radius:.25rem}.select-menu.inline .listing li{padding-right:.5rem}.select-menu.inline .listing li:first-child{border-top-left-radius:.25rem;border-top-right-radius:.25rem}.pgpkeyimport div.key{position:relative;padding:.5rem 0}.pgpkeyimport div.key.revoked,.pgpkeyimport div.key.disabled{color:#7b7b77}.pgpkeyimport div.key label{display:inline-block;margin-right:.5em;margin-bottom:0}.pgpkeyimport div.key label:after{content:":"}.pgpkeyimport div.key label.keyid{display:none}.pgpkeyimport div.key label+a,.pgpkeyimport div.key label+span{line-height:2.6rem;margin-right:1em;white-space:nowrap;text-decoration:none}.pgpkeyimport div.key label.keyid+a{font-weight:bold}.pgpkeyimport div.key label.keyid+a:before{content:"\f084"}.pgpkeyimport ul.uids{margin:0;padding:0}.pgpkeyimport li.uid{border:0;padding:.25rem 0 0 1.5em;line-height:1.5rem !important;list-style-type:none}.pgpkeyimport li.uid:before{content:"\f007";opacity:.25;font-size:1em;line-height:1.25}.pgpkeyimport button.importkey{position:absolute;top:.5rem;right:0}.pgpkeyimport button:disabled{display:none}.menu{margin:0;text-align:center;white-space:nowrap}.menu a{overflow:hidden;text-overflow:ellipsis;text-decoration:none}.menu a:before{content:"\00a0"}.menu a:hover,.menu a:focus{outline:0}.menu a:not(.disabled):focus,.menu a:not(.disabled):hover{background-color:#f7f5f2}.menu.toolbar li{display:inline-block;height:58px}.menu.toolbar a{color:#7b7b77;display:block;float:left;border:0 !important;height:58px;min-width:3.2rem;max-width:6rem;width:auto;padding:.45rem;line-height:1.5;cursor:pointer;font-size:1rem;text-align:center}.menu.toolbar a:before{height:1.75rem !important;float:none !important;width:auto !important;margin:0 !important}.menu.toolbar a.selected{color:#41b849}.menu.toolbar>.spacer{width:1em}.menu.toolbar .dropbutton:not(.disabled):hover{background-color:#f7f5f2}.menu.toolbar .dropbutton a.dropdown{padding:0 .3rem}.menu.toolbar .dropbutton a.dropdown:before{line-height:58px}.menu.toolbar .dropbutton a.dropdown:hover{background-color:#ece8e3}.menu span.inner{font-size:90%;font-weight:normal}.menu .dropbutton{display:inline-block}.menu .dropbutton a.dropdown{font-size:75%;min-width:0}html.ie11 .menu .dropbutton a.dropdown:before{font-size:80%}.menu .dropbutton a.dropdown span.inner{display:none}.menu .dropbutton a:first-child{padding-right:0}.menu.pagenav{display:flex;justify-content:space-between;align-items:center;padding:0 !important;font-size:100%}.menu.pagenav a{flex-grow:1;display:inline-block;min-width:2rem !important;height:35px;color:#7b7b77}.menu.pagenav a:before{margin:0;display:inline;float:none;line-height:35px}.menu.pagenav .pagenav-text{overflow:hidden;text-overflow:ellipsis;color:#7b7b77;flex-grow:4;font-size:80%}.menu.pagenav input{width:3rem;max-width:5rem;font-size:90%;text-align:center;max-height:1.6rem;margin:0 .2rem}html.layout-phone .menu.pagenav input{display:none}.menu.pagenav span.inner{display:none}.menu.pagenav.pagenav-list{cursor:pointer;background-color:#fbfbfb;border-bottom:1px solid #f8f7f4}.menu.pagenav.pagenav-list a{flex-grow:unset}.menu.pagenav.pagenav-list .pagenav-text{text-align:left;font-size:100%}.menu.pagenav.pagenav-list+.navlist{background-color:#fbfbfb}.menu.pagenav.pagenav-list.expanded+.navlist{border-bottom:1px solid #d4dbde}.menu.content-frame-navigation.hide-nav-buttons a.next,.menu.content-frame-navigation.hide-nav-buttons a.prev{display:none}.menu .listselectors{max-width:100%;display:flex;justify-content:space-around}.menu .buttons{display:block}.menu .buttons button{display:block;float:left;cursor:pointer;color:#7b7b77;background-color:transparent;border:0;padding:0;height:58px;line-height:58px;width:2.5em}.menu .buttons button:before{font-size:1.75rem}.popover .menu li{display:block;height:auto;text-align:left}.popover .menu li.spacer{display:none}.popover .menu li:last-child{border:0}.popover .menu li.separator{line-height:1.5rem !important;font-size:.75rem !important;padding:0 .5rem;color:#7b7b77;background-color:#f8f7f4}.popover .menu li.separator label{margin:0}.popover .menu li a{height:unset;max-width:100%;width:100%;line-height:35px;display:block;padding:0 .5rem;text-align:left}.popover .menu li a:before{line-height:inherit;height:inherit !important;margin-right:.5rem !important;float:left !important;width:1.18em !important;min-width:1.18em}.popover .menu li a:not(.disabled):hover{color:#fff;background-color:#f4c200}.popover .menu li aaria-haspopup{display:flex}.popover .menu li aaria-haspopup:after{color:#7b7b77;font-size:.9em;margin:0 0 0 .2em;min-width:1.18em;content:"\f054"}html.layout-small .popover .menu li aaria-haspopup:after{margin:0 .2em}.popover .menu li aaria-haspopup.dropdown:after{color:#4f4f4f;margin:0 .6em !important}.popover .menu li aaria-haspopup:hover:after{color:#fff}.popover .menu li aaria-haspopup>span{overflow:hidden;text-overflow:ellipsis;flex:1}.popover .menu li span.inner{font-size:100%}.popover .menu .dropbutton{display:flex}.popover .menu .dropbutton a:first-child{overflow:hidden;text-overflow:ellipsis;flex:1}.popover .menu .dropbutton:not(.disabled):hover{background-color:#f6f6f6}.popover .menu .dropbutton a.dropdown{width:3.5rem;padding:0 .5em;background-color:#f6f6f6}.popover .menu .dropbutton a.dropdown:hover{background-color:#f4c200}.popover .menu .dropbutton a.dropdown:before,.popover .menu .dropbutton a.dropdown span.inner{display:none}.popover .menu.no-icon a:before{display:none}@media screen and (min-width:769px){.content-frame-navigation{display:none !important}.header a.button.icon:not(.disabled):focus,.header a.button.icon:not(.disabled):hover{background-color:#f7f5f2;outline:0}.header a.button.icon:before{margin:0}}@media screen and (max-width:768px){.menu.footer{justify-content:space-around !important}.menu.footer>*{flex-grow:1}.menu.footer .buttons{display:flex;justify-content:space-evenly}.menu.footer .listselectors>*{flex-grow:1}.menu.listing a{color:#4f4f4f}}a.toolbar-button{cursor:pointer}@media screen and (min-width:1201px){a.toolbar-button{line-height:1.5;padding:.45rem}a.toolbar-button:before{float:none !important;height:1.75rem !important;line-height:1.5;width:auto !important}a.toolbar-button span.inner{display:inline !important;font-weight:normal;font-size:90%}}.menu a.mail:before{content:"\f0e0"}.menu a.contacts:before{content:"\f0c0"}.menu a.options:before{content:"\f1de"}.menu a.settings:before{content:"\f013"}.menu a.theme.light:before{content:"\f185"}.menu a.theme.dark:before{content:"\f186"}.menu a.help:before{content:"\f1cd"}.menu a.logout:before{content:"\f011"}.menu a.about:before{content:"\f128"}.menu a.refresh:before{content:"\f021"}.menu a.compose:before{content:"\f044"}.menu a.calendar:before{content:"\f073"}.menu a.tasklist:before{content:"\f0ae"}.menu a.files:before{content:"\f07b"}.menu a.notes:before{content:"\f249"}.menu a.chat:before{content:"\f086"}.menu a.actions:before{content:"\f013"}.menu a.addressbook:before{content:"\f007"}.menu a.archive:before{content:"\f187"}.menu a.assigngroup:before{content:"\f234"}.menu a.attach:before,.menu a.vcard:before{content:"\f0c6"}.menu a.next:before{content:"\f061"}.menu a.prev:before,.menu a.back:before{content:"\f060"}.menu a.check:before{content:"\00a0"}.menu a.check.selected:before{content:"\f00c"}.menu a.closewin:before{content:"\f410"}.menu a.collapse:before{content:"\f107"}.menu a.copy:before{content:"\f0c5"}.menu a.create:before{content:"\f0fe"}.menu a.delete:before{content:"\f2ed"}.menu a.download:before,.menu a.download.eml:before,.menu a.download.maildir:before,.menu a.download.mbox:before{content:"\f019"}.menu a.dropdown:before{content:"\f0d7"}.menu a.edit:before{content:"\f303"}.menu a.encrypt:before,.menu a.enigma:before{content:"\f023"}.menu a.encrypt.sign:before{content:"\f023"}.menu a.expand:before{content:"\f105"}.menu a.expand.all:before{content:"\f103"}.menu a.expand.none:before{content:"\f102"}.menu a.export:before,.menu a.export.all:before,.menu a.export.selection:before{content:"\f019"}.menu a.expunge:before{content:"\f78c"}.menu a.extwin:before{content:"\f360"}.menu a.filterlink:before{content:"\f0b0"}.menu a.firstpage:before{content:"\f100"}.menu a.nextpage:before{content:"\f105"}.menu a.prevpage:before{content:"\f104"}.menu a.lastpage:before{content:"\f101"}.menu a.flag:before,.menu a.select.flagged:before{content:"\f024";font-weight:900}.menu a.unflag:before{content:"\f024";font-weight:400}.menu a.folders:before{content:"\f07b"}.menu a.forward:before,.menu a.forward.attachment:before,.menu a.forward.bounce:before,.menu a.forward.inline:before{content:"\f064"}.menu a.import:before,.menu a.upload:before{content:"\f093"}.menu a.insertresponse:before{content:"\f075"}.menu a.junk:before{content:"\f7e4"}.menu a.notjunk:before{content:"\f01c"}.menu a.markmessage:before{content:"\f02b"}.menu a.more:before{content:"\f141"}.menu a.move:before{content:"\f07c"}.menu a.print:before{content:"\f02f"}.menu a.properties:before{content:"\f15b"}.menu a.purge:before{content:"\f12d"}.menu a.qrcode:before{content:"\f029"}.menu a.read:before{content:"\f2b6";font-weight:400}.menu a.unread:before,.menu a.expand.unread:before,.menu a.select.unread:before{content:"\f0e0";font-weight:900}.menu a.recipient:before{content:"\f0e0";font-weight:400}.menu a.refresh:before{content:"\f021"}.menu a.remove:before{content:"\f12d"}.menu a.removegroup:before{content:"\f235"}.menu a.rename:before{content:"\f303"}.menu a.reply:before{content:"\f3e5"}.menu a.reply-all:before,.menu a.reply.all:before,.menu a.reply.list:before{content:"\f122"}.menu a.responses:before{content:"\f075"}.menu a.rotate:before{content:"\f2f9"}.menu a.save:before{content:"\f0c7";font-weight:400}.menu a.search:before{content:"\f002"}.menu a.search.delete:before{content:"\f2ed"}.menu a.select:before{content:"\f245"}.menu a.select.all:before{content:"\f069"}.menu a.select.invert:before{content:"\f14a"}.menu a.select.none:before{content:"\f00d";font-weight:900}.menu a.select.page:before{content:"\f0c9";font-weight:900}.menu a.selection:before{content:"\f14a" !important;font-weight:400 !important}.menu a.send:before{content:"\f1d8"}.menu a.showurl:before{content:"\f0c1"}.menu a.signature:before{content:"\f5b7"}.menu a.source:before{content:"\f1c9"}.menu a.spellcheck:before{content:"\f891"}.menu a.status:before{content:"\f0eb";font-weight:400}.menu a.submit:before{content:"\f00c"}.menu a.info:before{content:"\f05a"}.menu a.threads:before{content:"\f086"}.menu a.zoomin:before{content:"\f00e"}.menu a.zoomout:before{content:"\f010"}.searchbar{height:36px;min-height:36px;line-height:36px;background-color:#fbfbfb;border-bottom:1px solid #f8f7f4;display:flex;align-items:center;overflow:hidden;position:relative}.searchbar form{flex:1;display:flex}.searchbar form:before{content:"\f002";height:36px;color:#7b7b77;margin:0 0 0 .75rem}.searchbar input{width:100%;border:0;background:transparent;padding:.5rem;line-height:normal;outline:0}.searchbar input::-ms-clear{display:none}.searchbar a{color:#7b7b77}.searchbar a:before{width:2rem;height:36px;margin:0}.searchbar a.options:before{content:"\f107"}.searchbar a.reset:before{content:"\f00d";font-size:1rem}.searchbar a.unread:before{content:"\f0e0";font-weight:900}.searchbar a.reset,.searchbar a.search{display:none}.searchbar a.selected{color:#41b849}.searchbar span.inner{display:none}.searchbar.active a.reset{display:inline}.searchbar.open a.options:before{content:"\f106"}.searchoptions button.search{width:100%}.searchoptions ul.proplist+div{margin-top:1rem}.searchoptions .input-group:not(:last-child){margin-bottom:.5rem}.searchoptions .input-group .input-group-prepend{width:30%}.searchoptions .input-group label{width:100%}.searchoptions .formbuttons{display:block !important}#taskmenu a{display:block;float:none}@media screen and (max-width:480px){#taskmenu{z-index:30001;overflow-x:hidden}#taskmenu a{max-width:unset;padding:0 .5em;margin-top:1px;text-align:left;line-height:47px;height:47px;border-bottom:1px solid #f8f7f4 !important;color:#4f4f4f;font-size:1.2rem}#taskmenu a:before{float:left !important;width:1.2em !important;margin-right:.5rem !important}#taskmenu span.inner{font-size:100%}}@media screen and (min-width:481px){#taskmenu a{color:#71777d;padding:.45rem 0;min-width:unset}#taskmenu a.selected{color:#e1e2e3;background:#505e6b}#taskmenu a.selected:hover{color:#fff;background:#505e6b}#taskmenu a:hover{color:#e1e2e3;background:#505e6b}#taskmenu .special-buttons{position:absolute;bottom:0;left:0;background-color:#3a444e}#taskmenu .action-buttons a{color:#f4c200;background:transparent}#taskmenu .action-buttons a:hover{color:#f4c200;background:#505e6b}#taskmenu a.logout{color:#ff5552 !important}#taskmenu a.logout:hover{color:#ff5552 !important}}@media screen and (min-width:481px) and (max-width:1024px){#taskmenu a{width:42px;height:42px;font-size:1.2rem;padding:0}#taskmenu a:before{line-height:42px}#taskmenu span.inner{display:none}}@media screen and (min-width:1025px){#taskmenu a{width:78px;font-size:1rem}#taskmenu a:before{float:none}#taskmenu a:focus{background-color:#505e6b}#taskmenu span.inner{padding:0 .1em}}.ui.alert{margin:0;margin-bottom:.2rem;opacity:.95;width:100%;padding:.75em;color:#4f4f4f;border:1px solid transparent;background-color:rgba(244,194,0,0.05);display:flex;align-items:center}@media screen and (max-width:480px){.ui.alert{border:0}}.ui.alert span{margin:auto 0}.ui.alert>i.icon{line-height:1;color:#4d5f66;margin:auto 0}.ui.alert>i.icon:before{content:"\f05a";margin-right:.6rem}.ui.alert .btn{margin-left:.5rem}.ui.alert.loading{color:#848484}.ui.alert.loading>i.icon:before{content:"\f1ce";-webkit-animation:spinner-border 1.5s infinite linear;animation:spinner-border 1.5s infinite linear;width:1em}.ui.alert.alert-success>i.icon:before{content:"\f058";color:#41b849}.ui.alert.alert-warning>i.icon:before{content:"\f071";color:#ffd452}.ui.alert.alert-danger>i.icon:before{content:"\f06a";color:#ff5552}.ui.alert.vcardattachment>i.icon:before{content:"\f2bb"}.ui.alert.enigmaattachment>i.icon:before{content:"\f084"}.ui.alert.signed>i.icon:before,.ui.alert.encrypted>i.icon:before{content:"\f023"}.ui.alert.chat>i.icon:before{content:"\f075"}.ui.alert .boxbuttons{white-space:nowrap}.ui.alert .boxbuttons .btn{overflow:hidden;text-overflow:ellipsis;max-width:220px}@media screen and (max-width:480px){.ui.alert .boxbuttons{display:flex;flex-direction:column}.ui.alert .boxbuttons .btn{max-width:160px}.ui.alert .boxbuttons .btn:not(:first-child){margin-top:.25rem}}.ui.alert.aligned-buttons{display:flex}.ui.alert.aligned-buttons span{flex:1}.ui.alert a:not(.btn){color:#f4c200;font-weight:normal}.ui.alert h3{font-weight:bold;font-size:1.2rem}.ui.alert p{margin:1rem 0}.ui.alert.boxerror,.ui.alert.boxconfirmation,.ui.alert.boxinformation,.ui.alert.boxwarning{padding:.5em;border-radius:0}.ui.alert.boxerror i.icon,.ui.alert.boxconfirmation i.icon,.ui.alert.boxinformation i.icon,.ui.alert.boxwarning i.icon{font-size:1.5em !important}.ui.alert.boxerror{background-color:rgba(255,85,82,0.2)}.ui.alert.boxinformation{background-color:rgba(244,194,0,0.2)}.ui.alert.boxconfirmation{background-color:rgba(65,184,73,0.2)}.ui.alert.boxwarning{background-color:rgba(255,212,82,0.2)}.ui.alert+table{margin-top:1em}#messagestack{position:absolute;bottom:.5em;right:.7em;z-index:105;width:320px;height:auto;max-height:85%}@media screen and (max-width:480px){#messagestack{left:0;right:0;bottom:0;width:auto}}#messagestack div{background-color:#4f4f4f;color:#fff}@media screen and (max-width:480px){#messagestack div{margin:0;border-radius:0;min-height:4.2rem}}#messagestack div.voice{position:absolute;top:-1000px}#messagestack div i.icon{font-size:1.5em !important}#messagestack div>i.icon:before{color:#fff}#messagestack div:last-child{margin-bottom:0}#messagestack .loading{background-color:#848484}#messagestack .alert-info.information{background-color:#f4c200}#messagestack .alert-success{background-color:#41b849}#messagestack .alert-warning{background-color:#ffd452;color:#4f4f4f}#messagestack .alert-warning>i.icon:before{color:#4f4f4f}#messagestack .alert-danger{background-color:#ff5552}#messagestack a{color:inherit !important;text-decoration:underline;cursor:pointer}.listing tbody td,.listing li{border-bottom:1px solid #f8f7f4;cursor:default;font-weight:normal;line-height:35px}.listing tbody td,.listing li a{padding:0 .5rem;white-space:nowrap;vertical-align:middle;color:#4f4f4f}.listing tbody td{overflow:hidden;text-overflow:ellipsis;outline:none}.listing tbody td a{color:#4f4f4f}.listing li a{display:block;text-decoration:none;cursor:default;width:100%}.listing li.selected,.listing tr.selected td{color:#4f4f4f;background-color:#fdf6d9}.listing td.selection{padding:0 0 0 .5em;width:2em;text-align:center}.listing td.selection>input{vertical-align:middle}.listing:not(.withselection) td.selection{display:none}.listing td.name{overflow:hidden;text-overflow:ellipsis}.listing td.action{padding:0 .5em;width:2em;text-align:center}.listing td.action:empty{width:0}.listing td.action a{display:block;overflow:hidden;text-decoration:none}.listing td.action a:before{margin:0;font-size:1rem}.listing td.action a.pushgroup:before{content:"\f054"}.listing li.droptarget>a,.listing tr.droptarget>td{background-color:#ffffcc}.listing li.disabled,.listing tr.disabled td{color:rgba(79,79,79,0.5)}.listing li>a.virtual,.listing li.virtual>a{opacity:.4}.listing span.secondary{color:#7b7b77}html:not(.touch) .listing li>a,html:not(.touch) .listing tbody tr>td:first-child,html:not(.touch) .listing:not(.withselection) tbody tr>td.selection+td{border-left:2px solid transparent}html:not(.touch) .listing li>a:focus,html:not(.touch) .listing.focus tbody tr.focused>td:first-child,html:not(.touch) .listing.focus:not(.withselection) tbody tr.focused>td.selection+td{border-left:2px solid #ffdd5b;outline:0}table.listing{width:100%;table-layout:fixed;border-spacing:0;border-collapse:unset}ul.listing{margin:0;padding:0}ul.listing>ul{padding:0}ul.listing li{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;position:relative;list-style:none}ul.listing li ul{border-top:1px solid #f8f7f4;padding-left:1.5em}ul.listing li ul li:last-child{border-bottom:none}ul.listing li .custom-switch{position:absolute;padding:0;top:0;right:0;height:35px;vertical-align:middle}ul.listing li .custom-switch .custom-control-label:before,ul.listing li .custom-switch .custom-control-label:after{margin-top:.4rem}html.touch ul.listing li .custom-switch .custom-control-label:before,html.touch ul.listing li .custom-switch .custom-control-label:after{margin-top:.75rem}html.touch ul.listing li .custom-switch{height:47px}ul.listing.simplelist li{padding:0 .5rem}.listing-info{position:absolute;top:50%;left:50%;transform:translate(-50%, -50%);width:80%;text-align:center;font-weight:bold;color:#7b7b77}html.touch .listing:not(.toolbar) li,html.touch .listing tbody td{line-height:47px;font-size:1.2rem}html.touch li inputtype=checkbox{height:47px}html.touch td.selection{padding:0;width:3em}@media screen and (max-width:1200px){.listing.selection-large-only li.selected{color:#4f4f4f;background-color:transparent}}.listing.iconized li a:before{height:2em;margin-right:.5rem}.listing.iconized li.preferences>a:before{content:"\f1de"}.listing.iconized li.folders>a:before{content:"\f07b"}.listing.iconized li.responses>a:before{content:"\f075"}.listing.iconized li.identities>a:before{content:"\f2c2"}.listing.iconized li.password>a:before{content:"\f023"}.listing.iconized li.addressbook a:before{content:"\f2b9";font-weight:400}.listing.iconized li.contactgroup a:before{content:"\f0c0";font-weight:900}.listing.iconized li.contactsearch a:before{content:"\f002"}.listing.iconized li.filter>a:before{content:"\f0b0"}.listing.iconized li.vacation>a:before{content:"\f017";font-weight:400}.listing.iconized li.forward>a:before{content:"\f14d"}.listing.iconized li.enigma.keys>a:before{content:"\f084"}.listing.iconized li.info>a:before,.listing.iconized li.userinfo>a:before{content:"\f05a"}.listing.iconized li.twofactorauth>a:before{content:"\f2f6"}.listing.iconized li a.help:before{content:"\f1cd"}.listing.iconized li a.about:before{content:"\f059";font-weight:400}.listing.iconized li a.license:before{content:"\f3ed"}.listing.iconized li>i:before{content:"\f007";margin-left:.5rem}.listing.iconized li.group>i:before{content:"\f0c0"}html.ie11 .listing.iconized li a:before{font-size:1.25rem}.listing.iconized tr td:before{margin-right:.5rem}.listing.iconized tr.contact.person td.name:before{content:"\f007"}.listing.iconized tr.contact.group td.name:before{content:"\f0c0"}.listing.iconized tr.general>td.section:before{content:"\f108"}.listing.iconized tr.mailbox>td.section:before{content:"\f0e0";font-weight:400}.listing.iconized tr.mailview>td.section:before{content:"\f01c"}.listing.iconized tr.compose>td.section:before{content:"\f1d8"}.listing.iconized tr.addressbook>td.section:before{content:"\f0c0"}.listing.iconized tr.folders>td.section:before{content:"\f07b";font-weight:400}.listing.iconized tr.server>td.section:before{content:"\f233"}.listing.iconized tr.encryption>td.section:before{content:"\f023"}.listing.iconized tr.calendar>td.section:before{content:"\f133"}.listing.iconized tr.chat>td.section:before{content:"\f086"}.listing.iconized.selectable li a:before{content:""}.listing.iconized.selectable li a.selected:before{content:"\f00c"}.popupmenu .listing li>a{border-left:0}.popupmenu .listing li>a:not(.disabled):hover{color:#fff;background-color:#f4c200}.popupmenu .listing li.selected{color:#fff;background-color:#f4c200}.popupmenu .listing td{overflow:hidden;text-overflow:ellipsis}ul.treelist li div.treetoggle{position:absolute;top:0;left:0;width:1.5em;cursor:pointer;background-color:transparent}ul.treelist li div.treetoggle:before{content:"\f105";margin-left:.25em;font-size:1em}ul.treelist li div.treetoggle.expanded:before{content:"\f107"}ul.treelist li>a{overflow:hidden;text-overflow:ellipsis;padding-left:1.5em}ul.treelist li.selected{color:inherit;background-color:transparent}ul.treelist li.selected>div>a,ul.treelist li.selected>a{color:#4f4f4f;background-color:#fdf6d9}ul.treelist li ul{padding:0}ul.treelist li ul li{padding-left:0}ul.treelist li ul li a{padding-left:3em}ul.treelist li ul li div.treetoggle{left:1.5em}ul.treelist li ul li li a{padding-left:4.5em}ul.treelist li ul li li div.treetoggle{left:3em}ul.treelist li ul li li li a{padding-left:6em}ul.treelist li ul li li li div.treetoggle{left:4.5em}ul.treelist li ul li li li li a{padding-left:7.5em}ul.treelist li ul li li li li div.treetoggle{left:6em}ul.treelist li ul li li li li li a{padding-left:9em}ul.treelist li ul li li li li li div.treetoggle{left:7.5em}ul.treelist.notree div.treetoggle{display:none}ul.treelist.notree li>a{padding-left:.5em}.folderlist li.mailbox.unread>a{padding-right:2.8em;font-weight:bold}.folderlist li.mailbox .unreadcount{position:absolute;top:0;right:0;min-width:2em;line-height:1.4rem;margin:7.7px;padding:0 .3em;border-radius:.4em;background:#f4c200;color:#fff;text-align:center;font-weight:bold}html.touch .folderlist li.mailbox .unreadcount{line-height:2rem;margin:9.5px}.folderlist li.mailbox.recent>a{color:#8e7100}.folderlist li.mailbox.recent>a>.unreadcount{background:#f4c200;color:#fff}.folderlist li.mailbox.root{display:none !important}.folderlist li a:before{content:"\f07b";font-weight:400;margin-right:.5rem}.folderlist li.inbox>a:before{content:"\f01c";font-weight:900}.folderlist li.trash a:before{content:"\f2ed";font-weight:900}.folderlist li.trash.empty>a:before{content:"\f2ed";font-weight:400}.folderlist li.drafts a:before{content:"\f303";font-weight:900}.folderlist li.sent a:before{content:"\f1d8";font-weight:900}.folderlist li.junk a:before{content:"\f7e4";font-weight:900}.folderlist li.archive>a:before{content:"\f187";font-weight:900}.folderlist li.ns-shared>a:before{content:"\f1e0";font-weight:900}.folderlist li.ns-other>a:before{content:"\f500";font-weight:900}.folderlist.menu a:before{margin-left:.5em}.messagelist>thead,.messagelist .branch,table.fixedcopy{display:none}.messagelist td{border-left:0;width:2em;vertical-align:top;font-size:1rem !important}.messagelist td.subject{width:100%;padding-right:0;display:flex;flex-wrap:wrap}.messagelist td.subject a{text-decoration:none;cursor:default}.messagelist td.subject span{line-height:2em}.messagelist td.subject span.size,.messagelist td.subject span.date{font-size:90%;color:#7b7b77}.messagelist td.subject span.fromto{overflow:hidden;text-overflow:ellipsis;flex:1;font-size:90%;color:#7b7b77;padding-left:1.5em;padding-right:.5rem}.messagelist td.subject span.subject{overflow:hidden;text-overflow:ellipsis;width:100%;user-select:none}.messagelist td.threads{padding:0 0 0 .25rem;width:1.5em}.messagelist td.flags{width:2.5em}.messagelist td.flags>span{height:1.7em;line-height:1.7em;display:block}.messagelist td.flags>span.flag{cursor:pointer}.messagelist tr.flagged td,.messagelist tr.flagged td.subject span.subject a,.messagelist tr.flagged td.subject span.date,.messagelist tr.flagged td.subject span.fromto{color:#ff5552}.messagelist tr.deleted td,.messagelist tr.deleted td.subject span.subject a,.messagelist tr.deleted td.subject span.date,.messagelist tr.deleted td.subject span.fromto{color:rgba(79,79,79,0.5)}.messagelist tr.unread td.subject span.subject{font-weight:bold}.messagelist tr.unroot td.subject a{text-decoration:underline}.messagelist tr.thread td.threads div:before{content:"\f105";cursor:pointer;width:1em}.messagelist tr.thread.expanded td.threads div:before{content:"\f107"}.messagelist td.subject span.msgicon.status:before{content:"\f111";cursor:pointer;font-size:.4rem;width:1.1rem;height:2rem}.messagelist td.subject span.msgicon.status.unread:before{content:"\f111";color:#ffd452;font-size:.5rem}.messagelist td.subject span.msgicon.status.unreadchildren:before{content:"\f111";font-weight:400;font-size:.5rem}.messagelist td.subject span.msgicon.status.replied:before{content:"\f3e5";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.forwarded:before{content:"\f064";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.replied.forwarded:before{content:"\f3e5";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.replied.forwarded:after{content:"\f064";font-weight:900;font-size:1rem;opacity:.5;margin:0 -0.1em 0 -1.25em}.messagelist tr.deleted td.subject span.msgicon.status:before{content:"\f05e" !important;font-weight:900 !important;font-size:1rem}.messagelist tr.deleted td.subject span.msgicon.status:after{display:none !important}.messagelist span.attachment span{color:rgba(123,123,119,0.75)}.messagelist span.attachment span:before{margin:0;content:"\f0c6"}.messagelist span.attachment span.report:before{content:"\f15c";font-weight:400}.messagelist span.attachment span.encrypted:before{content:"\f023"}.messagelist span.attachment span.vcard:before{content:"\f007";font-weight:400}.messagelist span.flagged:before{content:"\f024"}.messagelist tr.flaggedroot:not(:hover) span.unflagged:before{content:"\f024";color:rgba(123,123,119,0.75)}.messagelist tr:hover span.unflagged:before{content:"\f024";font-weight:400}.messagelist span.size{display:none}.messagelist tr:hover span.date{display:none}.messagelist tr:hover span.size{display:inline}.messagelist.sort-size span.date{display:none}.messagelist.sort-size span.size{display:inline}.messagelist.sort-size tr:hover span.date{display:inline}.messagelist.sort-size tr:hover span.size{display:none}html.layout-phone .messagelist tr,html.touch .messagelist tr{position:relative;display:flex}html.layout-phone .messagelist td.selection,html.touch .messagelist td.selection,html.layout-phone .messagelist td.threads,html.touch .messagelist td.threads{line-height:3.8em}html.layout-phone .messagelist td.flags,html.touch .messagelist td.flags{position:absolute;top:.25rem;right:0;bottom:0;background-color:transparent}html.layout-phone .messagelist td.flags .flag,html.touch .messagelist td.flags .flag{visibility:hidden}html.layout-phone .messagelist td.subject,html.touch .messagelist td.subject{padding-right:.5em}html.layout-phone .messagelist td.subject .subject,html.touch .messagelist td.subject .subject{padding-right:1.5rem}.contactlist .contact.readonly td{font-style:italic}.contactlist td.contact:before{content:"\f007"}.contactlist td.contactgroup:before{content:"\f0c0"}.contactlist span.email{display:inline;color:#7b7b77;font-style:italic;margin-left:.5em}.contactlist li a:before{margin-right:.5rem}.contactlist li a.addressbook::before{content:"\f2b9";font-weight:400}.contactlist li a.contactgroup::before{content:"\f0c0";font-weight:900}.attachmentslist{padding:0;margin:0;background-color:#fcfcfc;border:1px solid #f4f4f4}.attachmentslist:empty{padding:0;border:0}.attachmentslist li{list-style:none;display:inline-flex;white-space:nowrap;line-height:2rem;padding:0 .25em;max-width:100%}.attachmentslist li:before{content:"\f15b";font-weight:400;height:2rem;margin:0}.attachmentslist li.txt:before,.attachmentslist li.text:before{content:"\f15c";font-weight:400}.attachmentslist li.pdf:before{content:"\f1c1";font-weight:400}.attachmentslist li.odt:before,.attachmentslist li.doc:before,.attachmentslist li.docx:before,.attachmentslist li.msword:before{content:"\f1c2";font-weight:400}.attachmentslist li.ods:before,.attachmentslist li.xls:before,.attachmentslist li.xlsx:before,.attachmentslist li.msexcel:before{content:"\f1c3";font-weight:400}.attachmentslist li.rar:before,.attachmentslist li.zip:before,.attachmentslist li.gz:before{content:"\f1c6";font-weight:400}.attachmentslist li.image:before,.attachmentslist li.jpg:before,.attachmentslist li.jpeg:before,.attachmentslist li.png:before{content:"\f1c5";font-weight:400}.attachmentslist li.mp3:before,.attachmentslist li.audio:before{content:"\f1c7";font-weight:400}.attachmentslist li.m4p:before,.attachmentslist li.video:before{content:"\f1c8";font-weight:400}.attachmentslist li.vcard:before{content:"\f2bb";font-weight:400}.attachmentslist li.html:before{content:"\f1c9";font-weight:400}.attachmentslist li.odp:before,.attachmentslist li.otp:before,.attachmentslist li.ppt:before,.attachmentslist li.pptx:before,.attachmentslist li.ppsx:before,.attachmentslist li.vnd.mspowerpoint:before{content:"\f1c4";font-weight:400}.attachmentslist li a{text-decoration:none;line-height:2rem;height:2rem}.attachmentslist li a.cancelupload:before,.attachmentslist li a.delete:before{content:"\f2ed";line-height:2rem;height:2rem;margin:0}.attachmentslist li a.dropdown:before{margin:0}.attachmentslist li.uploading:before{-webkit-animation:spinner-border 1.5s infinite linear;animation:spinner-border 1.5s infinite linear;content:"\f1ce";font-weight:900}.attachmentslist li a.filename{display:flex;overflow:hidden;padding:0 .2em}.attachmentslist li .attachment-name{overflow:hidden;text-overflow:ellipsis;color:#4f4f4f}.attachmentslist li .attachment-size{color:#7b7b77;padding-left:.25em}.keylist{padding:0;list-style:none}.keylist li{line-height:2}.keylist li:before{content:"\f084";line-height:1.5}#identities-table td.mail:before{content:"\f2c2"}#responses-table td.name:before{content:"\f075"}#filterslist td.name:before{content:"\f0b0"}#filtersetslist td.name:before{content:"\f15c"}#subscription-table li.mailbox a{padding-right:2.5rem}#uploadform{display:none}form.smart-upload,input.smart-upload{visibility:hidden;width:1px;height:1px;opacity:0}.propform:not(.popupmenu){width:100%}.propform .form-check td:not(.title)>label{display:block;margin:0;line-height:2rem}.propform .form-check td:not(.title)>label label{margin-right:.5rem}.propform td.datetime{display:flex}.propform td.datetime input:first-child{margin-right:.5rem}.propform td.datetime input:last-child{width:75%}.propform td.rowbuttons{width:1%;white-space:nowrap;vertical-align:top}.propform td.rowbuttons span{display:none}.propform td.rowbuttons a{padding:0;line-height:2.3rem;height:2.3rem;font-size:1rem}.propform td.rowbuttons a:before{content:"\f067";vertical-align:unset}@media screen and (min-width:577px){.propform td.rowbuttons a:before{margin:0 !important}}.propform td.rowbuttons a.delete:before{content:"\f2ed"}.propform td.rowbuttons a.advanced:before{content:"\f013"}.propform td.rowbuttons a:not(:last-child){margin-right:.25rem}.propform td.rowactions{width:1%;vertical-align:top}.propform td.rowactions .form-control{width:auto}.propform td.rowtargets{vertical-align:top}.propform td.rowtargets .composite input,.propform td.rowtargets .composite textarea,.propform td.rowtargets .composite select,.propform td.rowtargets .composite .multi-input,.propform td.rowtargets .composite .input-group{margin-bottom:.5rem}.propform td.rowtargets .composite .input-group input,.propform td.rowtargets .composite .input-group textarea,.propform td.rowtargets .composite .input-group select,.propform td.rowtargets .composite .input-group .multi-input{margin-bottom:0}.propform td.rowtargets .composite br{display:block}.propform td.rowtargets .input-group{margin-bottom:.25rem}.propform td.rowtargets .input-group *:first-child.input-group-prepend{text-align:left;min-width:7.5em}.propform td.rowtargets .input-group *:first-child.input-group-prepend>*{width:100%}.propform td.rowtargets>.advanced{margin-top:.25rem}.propform td.title{padding-top:0;padding-bottom:0}.propform td>.flexbox{display:flex}.propform td>.flexbox>.multi-input{width:100%;margin-left:.25rem}.propform.grouped.readonly legend{margin:0}.propform.grouped.readonly .row.input-group{margin-bottom:0 !important}.propform.grouped.readonly label{min-width:7rem;background-color:transparent;border:0;border-radius:0}.propform.grouped .row.input-group{margin-bottom:.5rem;flex-wrap:nowrap}.propform.grouped .row.input-group>*:first-child{overflow:hidden;text-overflow:ellipsis;min-width:8rem}.propform.grouped .row.input-group>*:first-child:not(select){padding:0}@media screen and (max-width:480px){.propform.grouped .row.input-group>*:first-child{min-width:6rem;width:6rem;flex-grow:unset}}.propform.grouped .row.input-group>*:first-child label{width:100%}.propform.grouped .row.input-group>*:nth-child(2){flex-grow:30}.propform.grouped .row.input-group:last-child{margin-bottom:1rem}.propform.grouped .row.input-group select{text-align:left}.propform.grouped .row.input-group.composite select{height:auto}.propform.grouped .row.input-group .content{padding:0;display:flex;flex-wrap:wrap;border-radius:0;border-left-color:transparent}.propform.grouped .row.input-group .content input{border-radius:0;border-color:transparent}.propform.grouped .row.input-group .content .ff_street{width:100%}.propform.grouped .row.input-group .content .ff_locality{width:75%}.propform.grouped .row.input-group .content .ff_zipcode{width:25%}.propform.grouped .row.input-group .content .ff_country,.propform.grouped .row.input-group .content .ff_region{width:50%}.propform.grouped .form-control-plaintext{flex-grow:1;border:0}.propform .addfield{margin:0}.propform .addfield select{width:8rem;margin-top:.5rem}.propform .form-text{font-size:90%;color:#7b7b77}.propform.row.form-group{margin-left:0;margin-right:0}.propform.row.form-group label,.propform.row.form-group div{padding-left:0;padding-right:0}.propform select+select,.propform select+.input-group{padding-top:.5rem}.propform.text-only{margin-bottom:.25rem}.propform.text-only tr{margin:0}.propform.text-only label{padding-bottom:0 !important}@media screen and (max-width:576px){.propform.text-only tr{display:table-row}.propform.text-only td{width:auto}.propform.text-only td:first-child{width:33%}.propform.text-only :not(tr).form-group.row .col-form-label{width:33%}.propform.text-only :not(tr).form-group.row>:last-child{width:67%}}@media screen and (max-width:576px){.propform table.compact-table .rowactions>select,.propform table.compact-table .flexbox>select{width:100%}.propform table.compact-table tr{display:flex;flex-direction:column}.propform table.compact-table tr td{width:100%;padding:.25rem 0 0 0}.propform table.compact-table tr td.rowbuttons{text-align:right;padding-top:0}.propform table.compact-table tr td.rowbuttons a{margin-left:.5rem}.propform table.compact-table tr td.rowbuttons a>span{display:inline}}.propform fieldset:not(.tab-pane):nth-of-type(n+2),.formcontent fieldset:not(.tab-pane):nth-of-type(n+2){margin-top:1em}.propform legend,.formcontent legend{font-weight:bold;font-size:1.2em}.propform label,.formcontent label{-webkit-hyphens:auto;-ms-hyphens:auto;hyphens:auto;overflow:hidden;margin-bottom:0}fieldset.advanced>legend{width:auto;cursor:pointer}fieldset.advanced>legend:after{float:right;margin:0 0 0 .25rem;line-height:inherit;font-size:inherit;content:"\f106"}fieldset.advanced>legend.closed:after{content:"\f107"}@media screen and (max-width:576px){.formcontent .text-only .form-group:not(tr){margin-bottom:.25rem}.formcontent .text-only .form-group:not(tr) .col-form-label{width:33%}.formcontent .text-only .form-group:not(tr) .col-form-label+span{width:67%}html.iframe .formcontent>.propform{padding:.25rem}}html.ms .propform .row:not(.form-check)>td{display:flex;flex-wrap:wrap}@media screen and (min-width:576px){html.ms .propform .row.form-check>td{display:flex}}.formcontainer{display:flex;flex-direction:column;justify-content:flex-start;overflow-y:hidden !important}.formcontainer .formcontent{overflow-x:hidden;overflow-y:auto}.formcontainer .formbuttons{padding:.5rem 1rem}.formcontainer .formbuttons button{margin-right:.5rem}html.iframe.ipad .formcontainer .formbuttons,html.iframe.webkit.tablet .formcontainer .formbuttons{min-height:4rem}html.layout-small .formcontainer,html.layout-phone .formcontainer{display:initial;overflow-y:auto !important}html.layout-small .formcontainer .formcontent,html.layout-phone .formcontainer .formcontent{overflow:initial !important}html.layout-small .formcontainer .formbuttons,html.layout-phone .formcontainer .formbuttons{display:none}.formcontent:not(.popupmenu){padding:1rem}.formcontent .row{margin-right:0;margin-left:0}.formcontent .row .col,.formcontent .row .col-2,.formcontent .row .col-4,.formcontent .row .col-6,.formcontent .row .col-8,.formcontent .row .col-10,.formcontent .row .col-12,.formcontent .row .col-sm,.formcontent .row .col-sm-2,.formcontent .row .col-sm-4,.formcontent .row .col-sm-6,.formcontent .row .col-sm-8,.formcontent .row .col-sm-10,.formcontent .row .col-sm-12{padding:0}.formcontent .row .form-control-plaintext,.formcontent .row label.col-form-label{padding:5px 5px 5px 0}.formcontent .row .form-control-plaintext{padding-bottom:0;border:0}@media screen and (max-width:576px){.formcontent .row.form-group>td label{padding-bottom:0}}.formcontent .row.form-check{padding:0;display:flex;flex-wrap:nowrap}@media screen and (max-width:576px){.formcontent .row.form-check .col-6{max-width:100%;flex:auto}.formcontent .row.form-check>*:last-child{width:1%;min-width:2.6rem}.formcontent .row.form-check.with-link>*:last-child{min-width:8rem}}.formcontent .row.form-check .form-check-input{margin:.5rem 0}.formcontent .row.form-check .custom-switch+a{line-height:2;vertical-align:bottom}.formcontent .row.form-check td>label{padding-bottom:0}.formcontent .nav-tabs{margin-bottom:1rem}.formcontent .nav-tabs:empty{display:none}.formcontent .hint{font-style:italic;color:#7b7b77}.formcontent.raweditor{height:100%}.formcontent.raweditor form{height:100%}.formcontent.raweditor textarea{font-family:monospace;height:100%}.formcontent.raweditor .CodeMirror{border:1px solid #ced4da;border-radius:.3rem;height:100%;color:#4f4f4f}.formcontent.raweditor .CodeMirror-focused{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.formcontent.raweditor .CodeMirror-linebackground.line-error{background-color:#ff5552;opacity:.4}.formcontent.raweditor .errorGutter{width:.8em}@media screen and (max-width:320px){.formcontent .col-form-label{flex:auto;max-width:100%}.formcontent .col-6,.formcontent .col-8,.formcontent .col-10{flex:auto;max-width:100%}}.input-group .icon{text-decoration:none;padding:5px .5rem}.input-group .icon.input-group-text{min-width:2.4rem}.input-group .icon:before{margin:0 !important;line-height:1;font-size:1.1rem}.input-group .icon.user:before{content:"\f007"}.input-group .icon.pass:before{content:"\f023"}.input-group .icon.host:before{content:"\f015"}.input-group .icon.language:before{content:"\f0ac"}.input-group .icon.cancel:before{content:"\f00d"}.input-group .icon.delete:before{content:"\f2ed"}.input-group .icon.edit:before{content:"\f303"}.input-group .icon.add:before{content:"\f067"}.input-group .icon.add.recipient:before{content:"\f0c0"}.input-group .icon.search:before{content:"\f002"}.input-group .icon.filter:before{content:"\f0b0"}.input-group .icon.key:before{content:"\f084"}.input-group .icon .inner{display:none}.input-group a:focus{background-color:rgba(244,194,0,0.25);outline:0}.proplist{margin-bottom:0;padding:0}.proplist li{list-style-type:none;line-height:2rem;margin-bottom:.25rem;display:flex;align-items:center}.proplist li:last-child{margin-bottom:0}.proplist li inputtype=radio{margin-right:.5em}.proplist li inputtype=radio:disabled+label{opacity:.5}.proplist li label:not(.input-group-text){margin:0;line-height:2rem}.proplist li select{width:auto;display:inline}.checklist>div{line-height:2rem;display:block}.checklist .custom-control-label:before,.checklist .custom-control-label:after{margin:calc(2px * -1) 0 0 0}.checklist>div+br{display:none}.popup form.propform{padding:.25rem;overflow-x:hidden}.popupmenu.form.nolist{padding:0 .5rem}.popupmenu.form ul{list-style-type:none;padding:0;margin:0}.popupmenu.form li:not(.separator){padding:0 1rem}.popupmenu.form li:not(.separator) label{margin:0;line-height:35px}.popupmenu.form li:not(.separator) label input{margin-right:.5rem}.popupmenu.form input{vertical-align:middle}.popupmenu.form select{margin:.5rem 0}.popupmenu.form .buttons{text-align:center;padding:.5rem}.multi-input>.content{max-height:11.65em;overflow:hidden;overflow-y:auto;border-radius:.25rem;border:1px solid #ced4da}.multi-input>.content.focused{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.multi-input a.icon.reset:before{content:"\f2ed"}.multi-input input.form-control{padding-left:.75rem;height:auto}.multi-input input,.multi-input input:focus,.multi-input .input-group-text{border-radius:0;border:0;border-bottom:1px solid #ced4da;box-shadow:none}.multi-input .input-group-text{border-left:1px solid #ced4da}.multi-input .input-group-append{margin-left:0}.multi-input .input-group{margin:0 !important;flex-wrap:nowrap}.multi-input .input-group:last-child *{border-bottom:0}.multi-input+.btn{margin-top:.5rem}.multi-input.is-invalid>.content{border:1px solid #ff5552}.multi-input.is-invalid>.content.focused{border-color:#ff5552;box-shadow:0 0 0 .2rem rgba(255,85,82,0.25)}.multi-input.is-invalid>.invalid-feedback{display:inline-block;line-height:1.5}.file-upload{padding:1rem 1rem 12rem;margin:0 1rem .25rem 1rem;border-radius:.5rem;border:.2rem dashed #d4dbde}fieldset .file-upload{margin:0}.file-upload .upload-form{text-align:center;padding-bottom:1em}.file-upload .upload-form a.btn,.file-upload .upload-form button{margin-bottom:.25rem}.file-upload .hint{margin-bottom:.5rem;color:#7b7b77;text-align:center}.file-upload .attachmentslist{border:0;background:transparent}.file-upload .attachmentslist li{position:relative;display:flex;padding-right:1.5em;margin:.15em 0}.file-upload .attachmentslist li a.filename{flex:1}.file-upload .attachmentslist li a.delete,.file-upload .attachmentslist li a.cancelupload{position:absolute;right:.25em;width:auto}.file-upload .attachmentslist li a.dropdown{margin-right:.5em}.file-upload .attachmentslist li .inner{display:none}.file-upload.droptarget{padding-bottom:.5rem !important}.file-upload.droptarget:after{content:url("data:image/svg+xml;charset=utf-8,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%20960%20560%22%3E%0A%3Cpath%20fill%3D%22%23d4dbde%22%20d%3D%22M690%20245c0%209.2-3.5%2017.9-10.1%2024.9l-175%20175c-6.6%206.6-15.3%2010.1-24.9%2010.1-9.2%200-18.4-3.5-24.9-10.1l-175-175c-6.6-7-10.1-15.8-10.1-24.9%200-4.4.9-9.2%202.6-13.6C277.9%20218.3%20291%20210%20305%20210h87.5V35c0-19.2%2015.8-35%2035-35h105c19.2%200%2035%2015.8%2035%2035v175H655c14%200%2027.1%208.3%2032.4%2021.4%201.7%204.4%202.6%209.2%202.6%2013.6zm0%20245H270V350h-70v140c0%2038.5%2031.5%2070%2070%2070h420c38.5%200%2070-31.5%2070-70V350h-70v140z%22%2F%3E%0A%3C%2Fsvg%3E%0A");width:10rem;margin:5rem auto 0 auto;display:block}.file-upload.droptarget.active{border-color:#cec3b5}.file-upload.droptarget.hover{border-color:#cec3b5;background-color:#f7f5f2}.recipient-input{display:flex;flex-wrap:wrap;padding:0 .75rem 4px .75rem;list-style-type:none;cursor:text;height:auto}.recipient-input.focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.recipient-input .recipient{display:flex;position:relative;max-width:calc(50% - 3px);border:1px solid #ced4da;background-color:#f8f7f4;border-radius:.25em;padding:0 .25em;margin-top:4px;margin-right:.2em;white-space:nowrap;cursor:default}@media screen and (max-width:450px){.recipient-input .recipient{width:100%;max-width:100%}}.recipient-input .name{overflow:hidden;text-overflow:ellipsis;flex-grow:1;line-height:1.1;padding:3px;vertical-align:middle}.recipient-input .email{text-indent:-5000rem;display:inline-block;width:0}.recipient-input .quotes{position:absolute;width:0;opacity:0}.recipient-input a.button.icon{font-size:.75em;cursor:pointer;padding:0;color:#4f4f4f}.recipient-input a.button.icon:before{display:inline-block;width:1em;line-height:1.6}.recipient-input li{max-width:100%}.recipient-input li:not(.recipient){user-select:text}.recipient-input li.input{flex:1;min-width:100px}.recipient-input input{width:100%;background:transparent !important;border:0 !important;margin-top:4px;outline:0;line-height:1.5}.recipient-input input::-ms-clear{display:none}.tagedit-list{display:flex;flex-wrap:wrap;padding:0 .75rem 4px .75rem;margin:0;list-style-type:none;min-height:2.3rem}.tagedit-list+.placeholder{display:none}.tagedit-listtabindex="-1"{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.tagedit-list li.tagedit-listelement-new{margin-top:4px}.tagedit-list li.tagedit-listelement-new input{width:15px;background:transparent !important;border:0;outline:0;margin:0;padding:0;line-height:1.5}.tagedit-list li.tagedit-listelement-new input.tagedit-input-disabled{visibility:hidden}.tagedit-list li.tagedit-listelement-old{max-width:50%;border:1px solid #ced4da;background-color:#f8f7f4;border-radius:.25em;margin-top:4px;margin-right:.2em;white-space:nowrap}.tagedit-list li.tagedit-listelement-old a{font-size:.8em;cursor:pointer;display:inline-block;width:1.1em;overflow:hidden;vertical-align:middle;margin-right:.2rem}.tagedit-list li.tagedit-listelement-old a:before{content:"\f00d";width:1em;line-height:1.2}.tagedit-list li.tagedit-listelement-old span{overflow:hidden;text-overflow:ellipsis;flex-grow:1;display:inline-block;line-height:1.4;padding:0 .25rem;vertical-align:middle}.skinselection{white-space:nowrap;display:table-row}.skinselection>span{display:table-cell;vertical-align:middle;padding:.1em .5em;white-space:normal}.skinselection>span:last-child{padding-right:0}.skinselection .skinitem input{width:auto}.skinselection .skinname{font-weight:bold}.skinselection .skinlicense,.skinselection .skinlicense a{font-style:italic;text-decoration:none}.skinselection .skinlicense a:hover{text-decoration:underline}.skinselection .skinlicense,.skinselection .skinauthor{font-size:90%}.skinselection .skinthumbnail{width:64px;height:64px;border:1px solid #ced4da;background:#fff;border-radius:4px}.input-percent-slider{display:flex;align-items:center}.input-percent-slider input{max-width:4em}.input-percent-slider span.label{line-height:2.4;padding:0 .5rem 0 .25rem}.input-percent-slider div.ui-slider{flex:1;margin:0 .5em}.image-upload{position:relative;overflow:hidden;cursor:pointer;background-color:#f4f4f4}.image-upload a.button{display:none;position:absolute;left:0;top:0;background-color:rgba(255,255,255,0.85);border-radius:5px;width:2.5em;padding:.5em;margin:.5em;line-height:1}.image-upload.changed a.button{display:inline}.input-group-combo select:first-of-type.alone{border-radius:.25rem !important}.input-group-combo select:first-of-type:not(.alone){flex:unset;width:auto}.input-group-combo .input-group{padding:0 !important;flex:2}.input-group-combo select+select,.input-group-combo .input-group :first-child{border-top-left-radius:0;border-bottom-left-radius:0}@-moz-document url-prefix(){select:-moz-focusring{color:transparent !important;text-shadow:0 0 0 #4f4f4f !important}}.form-control{color:#4f4f4f}.form-control:focus{color:#4f4f4f;border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.form-control.is-invalid{border-color:#ff5552;box-shadow:none}.form-control.is-invalid:focus{border-color:#ff5552;box-shadow:0 0 0 .2rem rgba(255,85,82,0.25)}.form-control::placeholder{color:#bbb}.form-control::-ms-input-placeholder,.form-control::-webkit-input-placeholder{color:#bbb}.invalid-feedback{color:#ff5552;font-size:90%}.form-group{margin-bottom:.5rem}.input-group-append.input-group-prepend{display:inline}.input-group-text{color:#4f4f4f;background-color:#f8f7f4}.input-group-text input:focus{z-index:1;border-color:#f4c200 !important}.custom-switch{padding-left:0;display:inline-block}.custom-switch .custom-control-input{left:0;opacity:0 !important}.custom-switch .custom-control-input:focus~.custom-control-label:before{box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.custom-switch .custom-control-input:focus:not(:checked)~.custom-control-label::before{border-color:#f4c200}.custom-switch .custom-control-input:checked~.custom-control-label::before{border-color:#f4c200;background-color:#f4c200}.custom-switch .custom-control-input:checked:disabled~.custom-control-label::before{border-color:#ffd842;background-color:#ffd842}.custom-switch .custom-control-label{padding-left:2.5rem;min-height:2rem;line-height:2;display:inline-block}html.touch .custom-switch .custom-control-label{padding-left:3rem}.custom-switch .custom-control-label:before,.custom-switch .custom-control-label:after{border-radius:.6rem;margin:2px 0}html.touch .custom-switch .custom-control-label:before,html.touch .custom-switch .custom-control-label:after{border-radius:.8rem;margin:0}.custom-switch .custom-control-label:before{left:2px;top:4px;width:26px;height:16px}html.touch .custom-switch .custom-control-label:before{top:2px;width:35px;height:22px}.custom-switch .custom-control-label:after{left:4px;top:6px;width:12px;height:12px}html.touch .custom-switch .custom-control-label:after{top:4px;height:18px;width:18px}.custom-switch .custom-control-input:checked~.custom-control-label::after{transform:translateX(10px)}html.touch .custom-switch .custom-control-input:checked~.custom-control-label::after{transform:translateX(13px)}.custom-switch .custom-control-input:not(:disabled)~.custom-control-label:after,.custom-switch .custom-control-input:not(:disabled)~.custom-control-label:before{cursor:pointer}.custom-file{display:block}.custom-file .custom-file-label{white-space:nowrap;overflow:hidden;text-overflow:ellipsis;padding-right:100px}.custom-file+.hint{margin-top:3px}.custom-file-input:focus~.custom-file-label{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}div.tox{font-size:1rem}div.tox,div.tox :not(.svg){font-family:Roboto,sans-serif}div.tox.tox-tinymce{border-radius:.25rem;border:1px solid #ced4da}div.tox.focused{border-color:#f4c200 !important;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25) !important}div.tox .tox-toolbar-overlord{z-index:1}div.tox .tox-toolbar-overlord>div{background:url("data:image/svg+xml;charset=utf8,%3Csvg height='33px' viewBox='0 0 40 33px' width='40' xmlns='http://www.w3.org/2000/svg'%3E%3Crect x='0' y='32px' width='100' height='1' fill='%23cccccc'/%3E%3C/svg%3E");background-color:#f8f7f4}div.tox .tox-toolbar__primary{border-top:0}div.tox .tox-toolbar{background-color:#f8f7f4}div.tox .tox-edit-area{border:0}div.tox .tox-dialog{border-radius:0;border-color:#d4dbde;box-shadow:none;align-self:unset !important}div.tox .tox-dialog .tox-form__group{margin-top:0;margin-bottom:.75rem}div.tox .tox-dialog .tox-dialog__body-nav-item--active{color:#f4c200;border-color:transparent}div.tox .tox-dialog .tox-dialog__body-nav-item--active:hover{color:#c19900}div.tox .tox-dialog__body-content{overflow:unset}div.tox .tox-dialog__content-js{overflow:auto}div.tox .tox-dialog-wrap__backdrop{background-color:rgba(79,79,79,0.5)}div.tox .tox-dialog__header{height:57px;border-bottom:1px solid #ddd;justify-content:flex-end;padding:0}div.tox .tox-dialog__header .tox-button{color:#4f4f4f;right:0;height:57.3px;width:2.25em;margin-right:.4rem}div.tox .tox-dialog__header .tox-button:hover{background:transparent;border-color:transparent}div.tox .tox-dialog__header .tox-button .tox-icon{display:none}div.tox .tox-dialog__header .tox-button:before{content:"\f00d";line-height:1.5rem;margin:0 !important}div.tox .tox-dialog__footer{height:57px !important;border:0;margin:0;padding:0 1rem}@media screen and (max-width:480px){div.tox .tox-dialog__footer{border-top:1px solid #ddd}}div.tox .tox-dialog__footer>div{white-space:nowrap;max-height:57px}div.tox .tox-dialog__footer>div button:first-child{margin:0}div.tox .tox-dialog__footer .tox-button{color:#fff;background:#f4c200;border-color:#f4c200;font-weight:normal;padding:.5rem .75rem}div.tox .tox-dialog__footer .tox-button:focus{background:#dbae00;border-color:#d0a600;box-shadow:0 0 0 .2rem rgba(244,194,0,0.5)}div.tox .tox-dialog__footer .tox-button:hover{background:#dbae00;border-color:#d0a600}div.tox .tox-dialog__footer .tox-button.disabled,div.tox .tox-dialog__footer .tox-button:disabled{background:#f4c200;border-color:#f4c200}div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled):active,div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled).active{background:#c19900;border-color:#b79100}div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled):active:focus,div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.53)}div.tox .tox-dialog__footer .tox-button:before{width:1em;content:"\f00c";line-height:1}div.tox .tox-dialog__footer .tox-button:focus:not(:disabled){background:#f4c200;border-color:#f4c200}div.tox .tox-dialog__footer .tox-button.tox-button--secondary{background:#8b9fa7;border-color:#8b9fa7;color:#fff}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:hover{background:#7c939c;border-color:#778e98}div.tox .tox-dialog__footer .tox-button.tox-button--secondary.disabled,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:disabled{background:#8b9fa7;border-color:#8b9fa7}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled):active,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled):active:focus,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:before{content:"\f00d"}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:focus:not(:disabled){background:#8b9fa7;border-color:#8b9fa7}div.tox .tox-search-dialog .tox-form__group:not(:first-child){flex:initial !important}div.tox .tox-search-dialog .tox-dialog__footer-start button{padding:.25rem}div.tox .tox-search-dialog .tox-dialog__footer-end button:before{content:"\f303" !important}div.tox .tox-search-dialog .tox-dialog__footer-end button:nth-of-type(1):before{content:"\f002" !important}div.tox .tox-dialog__title{line-height:calc(58px - 1px);font-size:1.25rem;font-weight:bold;padding:0 0 0 1rem;width:100%;color:#4f4f4f}div.tox .tox-tbtn{height:28px}div.tox .tox-tbtn:not(.tox-tbtn--select,.tox-split-button__chevron){width:32px}div.tox .tox-button{line-height:1.5}div.tox .tox-label{color:#4f4f4f;padding-bottom:.25rem}div.tox .tox-color-input>input,div.tox .tox-listboxfield .tox-listbox--select,div.tox .tox-textarea,div.tox .tox-textfield{font-family:Roboto,sans-serif !important;font-size:14px;line-height:1.5;color:#4f4f4f;border-radius:.25rem;min-height:0;padding:.375rem .75rem}div.tox .tox-color-input>input:focus,div.tox .tox-listboxfield .tox-listbox--select:focus,div.tox .tox-textarea:focus,div.tox .tox-textfield:focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}div.tox .tox-listbox__select-label{margin:0}div.tox .tox-color-input span{top:5px}div.tox .custom-switch{position:relative;font-size:1rem;margin-top:.15rem}div.tox .custom-switch .tox-checkbox__icons{display:none}div.tox .custom-switch .tox-checkbox__label{margin:0}div.tox .image-selector{font-size:1rem}div.tox .image-selector button{color:#fff;background:#8b9fa7;border-color:#8b9fa7;padding:.5rem .75rem;line-height:1.5}div.tox .image-selector button:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}div.tox .image-selector button:hover{background:#7c939c;border-color:#778e98}div.tox .image-selector button.disabled,div.tox .image-selector button:disabled{background:#8b9fa7;border-color:#8b9fa7}div.tox .image-selector button:not(:disabled):not(.disabled):active,div.tox .image-selector button:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}div.tox .image-selector button:not(:disabled):not(.disabled):active:focus,div.tox .image-selector button:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}div.tox .tox-form__controls-h-stack div:not(:last-child){flex:1}div.tox .tox-collection__item-label{white-space:nowrap}@media screen and (max-width:480px){div.tox .tox-dialog{margin:0 !important;width:100% !important;height:100%;left:0 !important;top:0 !important;border-width:0 !important}div.tox .tox-dialog__header{background-color:#f1eeea}div.tox .tox-dialog__header .tox-button{display:none}div.tox .tox-dialog__title{font-size:1rem;text-align:center;padding:0 1rem}div.tox .tox-dialog__footer{background-color:#f1eeea}div.tox .tox-dialog__footer .tox-button{color:#4f4f4f !important;background:transparent !important;padding:.45rem;margin:0 !important;border:0;font-size:90%}div.tox .tox-dialog__footer .tox-button:before{display:block;float:none;width:100%;margin:0;line-height:1.75;height:1.75rem}div.tox .tox-dialog__footer .tox-button:active,div.tox .tox-dialog__footer .tox-button:focus,div.tox .tox-dialog__footer .tox-button:hover{background:transparent;border:0;box-shadow:none;color:#4f4f4f}div.tox .tox-dialog__footer>div{justify-content:space-evenly;display:flex;width:100%}div.tox .tox-dialog__footer>div:empty{display:none}}.image-selector{padding:1rem .5rem 10rem .5rem !important}.image-selector.droptarget{border:.2rem dashed #d4dbde}.image-selector.droptarget:after{margin-top:2rem}.image-selector form{position:absolute;top:0}.image-selector .attachmentslist{margin:0;overflow-x:hidden;overflow-y:auto;height:19.1em;padding:0 !important}.image-selector .attachmentslist li{padding:.25rem;cursor:pointer}.image-selector .attachmentslist li:before{display:none}.image-selector .attachmentslist li:hover,.image-selector .attachmentslist li:focus{background:#fdf6d9}.image-selector .attachmentslist li span.name{flex:1;margin:auto;padding-left:1rem;overflow:hidden;text-overflow:ellipsis}.image-selector .attachmentslist li span.img{height:80px;width:80px;display:flex;border:1px solid #f8f7f4;background:white;border-radius:.75rem;overflow:hidden}.image-selector .attachmentslist li img{margin:auto}html.layout-phone .image-selector .attachmentslist{height:auto}.html-editor{position:relative;margin-bottom:.2rem}.html-editor .editor-toolbar{position:absolute;left:1px;top:1px;right:1px;border-radius:.25rem .25rem 0 0;border-bottom:1px solid #ced4da;background-color:#f8f7f4}.html-editor .editor-toolbar .mce-i-html{display:block;margin:2px 2px 2px 4px;width:34px;height:28px;border-radius:.25rem;color:#222f3e}.html-editor .editor-toolbar .mce-i-html:focus,.html-editor .editor-toolbar .mce-i-html:hover{text-decoration:none;border-color:#e2e4e7;background-color:#dee0e2}.html-editor .editor-toolbar .mce-i-html:before{content:"\f03e";margin:0;width:34px;line-height:28px}.html-editor.mailvelope .editor-toolbar,.html-editor .tox-tinymce+.editor-toolbar{display:none}.html-editor>.googie_edit_layer,.html-editor>textarea{font-family:monospace;font-size:13px;width:100% !important;padding-top:40px;resize:none}.html-editor>iframe{border-radius:.3rem;border:1px solid #ced4da;min-height:30em}.googie_window{width:16rem;height:auto}.googie_edit_layer{font-family:monospace;padding:.5rem .75rem;border:1px solid #ced4da;border-radius:.3rem;line-height:1.5}.googie_link{color:#ff5552;text-decoration:underline;cursor:pointer}.googie_list li{min-width:8rem;width:auto}.googie_list li.googie_list_onhover{color:#fff;background-color:#f4c200}.googie_list li .googie_list_revert:before{content:"\f0e2"}.googie_list li .googie_add_to_dict:before{content:"\f0fe"}.googie_list input{display:inline-block;margin:.25rem .5rem}.task-login #layout-content{text-align:center;width:100%;display:block}.task-login #logo{display:inline-block;position:relative;top:16vh;max-height:100px}#login-form{margin:0 auto;top:20vh;width:95%;max-width:320px;position:relative}#login-form table,#login-form tbody{display:block}#login-form .row{margin-right:0;margin-left:0}#login-form .oauthlogin{margin-top:1em;padding-top:1em}#login-form .formbuttons+.oauthlogin{border-top:1px solid #ccc}#rcmloginsubmit:before{display:none !important}#login-footer{flex:1;color:#7b7b77}#login-footer>div{margin-top:1rem;padding:1rem;background:#f8f7f4;border-radius:.3rem}#login-addon{position:absolute;bottom:0;max-height:30%;margin:1rem !important;width:auto !important;overflow:auto}@media screen and (min-width:769px){#login-addon{max-width:768px;margin:auto !important;bottom:1rem;left:0;right:0}}body.task-error-login #layout #layout-menu,body.task-error-login #layout #layout-content>.header{display:none}#contactpic{width:112px;height:135px;border-radius:.5rem;overflow:hidden;display:table-cell;vertical-align:middle;text-align:center;background-color:#f4f4f4}#contactpic img{max-width:112px;max-height:135px}#contacthead .names{margin-bottom:.5rem}#contacthead .names span.namefield{font-size:1.5rem;font-weight:bold;line-height:1.2}#contacthead.readonly .source.row{color:#7b7b77;font-size:90%;margin-bottom:.25rem}#message-header{margin-bottom:1rem}#message-header>.subject{font-size:1.5rem;font-weight:bold}body.status-flagged #message-header>.subject:before{display:inline;float:none;content:"\f024";font-size:1em;color:#ff5552}#message-header>.subject a.extwin{text-decoration:none}#message-header>.subject a.extwin:before{float:none;display:inline-block;font-size:75%;line-height:1.5;margin:0;content:"\f360"}#message-header>.subject span.inner{display:none}#message-header>.header{display:flex}#message-header>.header img.contactphoto{margin:0 1rem 0 0;border-radius:50%;width:4rem;height:4rem;object-fit:cover;background:#f4f4f4}#message-header .header-content{min-height:4rem;flex:1}#message-header .header-content.details-view .header-summary{display:none}#message-header .header-content.details-view .header-headers{display:initial}#message-header .header-summary{margin-top:.25rem}#message-header .header-summary>span{display:inline-block}#message-header .header-headers{display:none}#message-header .header-headers .header-title{white-space:nowrap;color:#7b7b77;font-weight:bold;padding-right:1rem;vertical-align:top}#message-header .header-links{margin-top:.25rem}#message-header .header-links a{font-size:90%;margin-right:.5rem;text-decoration:none;white-space:nowrap;display:inline-block}#message-header .header-links a:before{height:1.5rem;line-height:1.3}#message-header .header-links a.headers-details:before{content:"\f0e0"}#message-header .header-links a.headers-summary:before{content:"\f0e0";font-weight:400}#message-header .header-links a.headers-all:before{content:"\f05a"}#message-header .header-links a.html:before{content:"\f03e"}#message-header .header-links a.plain:before{content:"\f039"}#message-header .header-links a.zipdownload:before{content:"\f019"}.message-partheaders{padding:.25rem .5rem;margin:.5rem 0 -0.5rem 0;border-top:1px solid #f4f4f4;background-color:#fcfcfc}.message-partheaders table.headers-table{font-size:90%;color:#7b7b77}.message-partheaders table.headers-table .header-title{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:8em;font-weight:bold;padding-right:1rem;vertical-align:top}.message-partheaders table.headers-table .subject{font-weight:bold}.message-partheaders table.headers-table+.message-part,.message-partheaders table.headers-table+.message-htmlpart{border-top:0;margin:0}#message-content .attachmentslist:not(:empty){margin-bottom:1rem}#messagebody.mailvelope iframe{min-height:75vh}.message-part,.message-htmlpart{padding-top:.5rem;position:relative}.message-part:not(:first-child),.message-htmlpart:not(:first-child){border-top:1px solid #f4f4f4;margin-top:.5rem}.message-part:last-child,.message-htmlpart:last-child{margin-bottom:.5rem}.message-part div.rcmBody,.message-htmlpart div.rcmBody{margin:0 auto !important}.message-part blockquote,.message-htmlpart blockquote{overflow:hidden;text-overflow:ellipsis;color:#5b4800;border-left:2px solid #5b4800;border-right:2px solid #5b4800;background-color:rgba(248,247,244,0.5);margin:2px 0;padding:0 .4em}.message-part blockquote blockquote,.message-htmlpart blockquote blockquote{color:#205a24;border-left:2px solid #205a24;border-right:2px solid #205a24}.message-part blockquote blockquote blockquote,.message-htmlpart blockquote blockquote blockquote{color:#eb0400;border-left:2px solid #eb0400;border-right:2px solid #eb0400}.message-part blockquote span.blockquote-link,.message-htmlpart blockquote span.blockquote-link{top:0;cursor:pointer;right:.5rem;min-width:4rem;padding:.2rem .25rem .2rem .5rem;font-size:90%;text-align:center;color:#7b7b77;background:#f8f7f4;border:1px solid #d4dbde;border-radius:.3rem;line-height:1;font-family:Roboto,sans-serif}.message-part blockquote span.blockquote-link:after,.message-htmlpart blockquote span.blockquote-link:after{content:"\f107";display:inline-block;float:none;margin:0;font-size:90%}.message-part blockquote span.blockquote-link.collapsed:after,.message-htmlpart blockquote span.blockquote-link.collapsed:after{content:"\f106"}.message-part blockquote.blockquote-header,.message-htmlpart blockquote.blockquote-header{text-overflow:ellipsis !important;padding-right:5rem !important}.message-part span.sig{color:#7b7b77}.message-part div.pre{font-family:monospace;font-size:13px}#compose-attachments{margin:1rem 1rem 0 1rem}#composestatusbar{opacity:.3;right:2.5rem}@media screen and (min-width:769px){#composestatusbar{display:none}}#composestatusbar a.button{display:inline-block}#composestatusbar a.button:before{line-height:58px;font-size:1.25rem !important}.settings-default-icon tr>td.section::before,.settings-default-icon li>a:before{content:"\f013"}html.dark-mode{scrollbar-color:#5b4800 #4d6066;scrollbar-width:thin}html.dark-mode textarea,html.dark-mode select,html.dark-mode .popover-body,html.dark-mode .popupmenu,html.dark-mode .ui-dialog-content,html.dark-mode .frame-content,html.dark-mode .formcontent,html.dark-mode .table-responsive,html.dark-mode .table-responsive-sm,html.dark-mode .scroller{scrollbar-width:thin}html.dark-mode:not(.touch) ::-webkit-scrollbar{width:6px}html.dark-mode:not(.touch) ::-webkit-scrollbar-track{background-color:#4d6066}html.dark-mode:not(.touch) ::-webkit-scrollbar-thumb{background-color:#5b4800}html.dark-mode body{color:#c5d1d3;background-color:#21292c}html.dark-mode #logo{opacity:.8}html.dark-mode #layout-list,html.dark-mode #layout-content,html.dark-mode #layout-sidebar,html.dark-mode #layout>div>.header,html.dark-mode #layout>div>.footer,html.dark-mode .popup .listbox .footer,html.dark-mode .menu.pagenav.pagenav-list,html.dark-mode .menu.pagenav.pagenav-list+.navlist,html.dark-mode .menu.pagenav.pagenav-list.expanded+.navlist{background-color:transparent;border-color:#4d6066}html.dark-mode #layout>div>.footer{font-weight:normal}html.dark-mode #layout>div>.header,html.dark-mode #layout>div>.footer{color:unset}html.dark-mode #layout>div>.header a.button,html.dark-mode #layout>div>.footer a.button{color:#c5d1d3}html.dark-mode #layout-menu{background:unset;border-right:1px solid #4d6066}html.dark-mode #layout-menu .popover-header,html.dark-mode #layout-menu .special-buttons{background:transparent !important}@media screen and (max-width:480px){html.dark-mode #layout-menu{border-left:0}html.dark-mode #layout-menu .popover-header{border-bottom:1px solid #4d6066}}html.dark-mode #layout-menu .special-buttons a:not(:focus){background:#21292c}html.dark-mode.layout-phone #layout-menu{background:#161b1d}html.dark-mode .searchbar{background-color:transparent;border-color:#4d6066}html.dark-mode .searchbar form:before,html.dark-mode .searchbar a,html.dark-mode .searchbar input{color:unset}html.dark-mode .searchbar a.selected{color:#41b849}html.dark-mode #messagestack div{color:#c5d1d3}html.dark-mode #messagestack div i.icon:before{color:#c5d1d3}html.dark-mode .ui.alert.boxinformation,html.dark-mode #messagestack .alert-info{background-color:#927400}html.dark-mode .ui.alert.boxerror,html.dark-mode #messagestack .alert-danger{background-color:#993331}html.dark-mode .ui.alert.boxwarning,html.dark-mode #messagestack .alert-warning{background-color:#997f31}html.dark-mode .ui.alert.boxconfirmation,html.dark-mode #messagestack .alert-success{background-color:#276e2c}html.dark-mode #messagestack .loading{background-color:#374449}html.dark-mode .ui.alert.boxinformation,html.dark-mode .ui.alert.boxerror,html.dark-mode .ui.alert.boxwarning,html.dark-mode .ui.alert.boxconfirmation{color:#c5d1d3}html.dark-mode .ui.alert.boxinformation i.icon:before,html.dark-mode .ui.alert.boxerror i.icon:before,html.dark-mode .ui.alert.boxwarning i.icon:before,html.dark-mode .ui.alert.boxconfirmation i.icon:before{color:#c5d1d3}html.dark-mode .ui.alert a:not(.btn){color:#c5d1d3;text-decoration:underline}html.dark-mode .iframe-loader{background-color:rgba(33,41,44,0.9)}html.dark-mode .iframe-loader .spinner-border{color:#7d989c;border-color:currentColor #425457 currentColor currentColor}html.dark-mode #taskmenu a,html.dark-mode .menu.toolbar a{color:#c5d1d3}html.dark-mode #taskmenu a.selected,html.dark-mode .menu.toolbar a.selected{background-color:#374549}html.dark-mode pre,html.dark-mode .popover .menu li aaria-haspopup::after,html.dark-mode .menu.pagenav .pagenav-text,html.dark-mode .menu.pagenav a{color:unset}html.dark-mode #taskmenu .action-buttons a{color:#f4c200}@media screen and (max-width:480px){html.dark-mode #taskmenu a{border-color:#2c373a !important}html.dark-mode #taskmenu a.selected{background:transparent}}@media screen and (min-width:481px) and (max-width:1024px){html.dark-mode #taskmenu a{width:41px}}@media screen and (min-width:1025px){html.dark-mode #taskmenu a{width:77px}}html.dark-mode.layout-small .popover,html.dark-mode.layout-phone .popover{border-left:1px solid #4d6066}html.dark-mode.layout-small .popover .menu .dropbutton a.dropdown,html.dark-mode.layout-phone .popover .menu .dropbutton a.dropdown{background:transparent}html.dark-mode.layout-small .popover:not(.select-menu) .listing li:last-child,html.dark-mode.layout-phone .popover:not(.select-menu) .listing li:last-child{border-color:#2c373a}html.dark-mode.layout-small .popover-header,html.dark-mode.layout-phone .popover-header{background:#161b1d;border-bottom:1px solid #4d6066;color:unset}html.dark-mode.layout-small .popover-overlay,html.dark-mode.layout-phone .popover-overlay{background:rgba(0,0,0,0.7)}html.dark-mode #taskmenu a:hover,html.dark-mode .popupmenu .listing li>a:not(.disabled):hover,html.dark-mode .header a.button.icon:not(.disabled):focus,html.dark-mode .header a.button.icon:not(.disabled):hover,html.dark-mode .menu.toolbar .dropbutton:not(.disabled):hover,html.dark-mode .menu a:not(.disabled):focus,html.dark-mode .menu a:not(.disabled):hover{background-color:#374549}html.dark-mode .menu.toolbar a.selected{color:#41b849;background:transparent}html.dark-mode .menu.toolbar .dropbutton a.dropdown:hover{background-color:#425358}html.dark-mode .listing tbody td,html.dark-mode .listing tbody td a,html.dark-mode .listing li a{color:#c5d1d3}html.dark-mode .listing li ul,html.dark-mode .listing tbody td,html.dark-mode .listing li{border-color:#2c373a}html.dark-mode .listing li.selected,html.dark-mode .listing li.selected>a,html.dark-mode .listing li.selected>div>a,html.dark-mode .listing tr.selected td{color:#f4c200;background-color:#374549}html.dark-mode .listing li.selected ul{background-color:#21292c}html.dark-mode .listing li.selected ul div.treetoggle{color:#c5d1d3}html.dark-mode .listing li.disabled,html.dark-mode .listing tr.disabled td{color:#637e82}html.dark-mode .listing li.droptarget>a,html.dark-mode .listing tr.droptarget>td{background-color:#4d4d00}html.dark-mode .messagelist{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.size,html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.date,html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.fromto{color:#8ba3a7}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.msgicon.status{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.msgicon.status.unread::before{color:#b88a00}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) span.flag{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted).selected td.subject a,html.dark-mode .messagelist tr:not(.flagged):not(.deleted).selected td.subject span.msgicon.status{color:#f4c200}html.dark-mode .messagelist tr.flagged:not(.deleted) td,html.dark-mode .messagelist tr.flagged:not(.deleted) span.attachment span{color:#ff5552}html.dark-mode .messagelist tr.deleted td span.flag,html.dark-mode .messagelist tr.deleted td span.attachment span,html.dark-mode .messagelist tr.deleted td.subject span.msgicon.status,html.dark-mode .messagelist tr.deleted td.subject span.msgicon.status.unread:before,html.dark-mode .messagelist tr.deleted td.subject span.subject a,html.dark-mode .messagelist tr.deleted td.subject span.date,html.dark-mode .messagelist tr.deleted td.subject span.fromto{color:#637e82}html.dark-mode .messagelist span.attachment span{color:#8ba3a7}html.dark-mode .folderlist li.mailbox .unreadcount{background-color:#4d6066;color:#e2e8e9;font-weight:normal}html.dark-mode .attachmentslist{background-color:#374549;border:0}html.dark-mode .attachmentslist a{color:#c5d1d3}html.dark-mode .attachmentslist li .attachment-name{color:#c5d1d3}html.dark-mode .attachmentslist li .attachment-size{color:#8ba3a7}html.dark-mode .btn{color:#c5d1d3}html.dark-mode .btn:focus,html.dark-mode .btn:hover{color:#e2e8e9}html.dark-mode .btn:disabled{opacity:.5 !important}html.dark-mode .btn-primary{background-color:#5b4800;color:#e2e8e9}html.dark-mode .btn-primary:hover:not(:disabled){background-color:#755d00}html.dark-mode .btn-secondary{background-color:#4d6066;color:#e2e8e9}html.dark-mode .btn-secondary:hover:not(:disabled){background-color:#586e75}html.dark-mode .btn-danger{background-color:#993331;color:#e2e8e9}html.dark-mode .btn-danger:hover:not(:disabled){background-color:#ac3937}html.dark-mode .floating-action-buttons a.button{box-shadow:none;background:#5b4800}html.dark-mode .custom-file-label,html.dark-mode .form-control{background-color:#21292c;color:#c5d1d3}html.dark-mode .custom-file-label:not(.is-invalid),html.dark-mode .form-control:not(.is-invalid){border-color:#7c949c}html.dark-mode .custom-file-label:focus,html.dark-mode .form-control:focus{background-color:#2c373b}html.dark-mode .custom-file-label:focus:not(.is-invalid),html.dark-mode .form-control:focus:not(.is-invalid){color:#e2e7e9 !important;border-color:#f4c200}html.dark-mode .custom-file-label::after{color:#c5d1d3;background-color:#374549}html.dark-mode .custom-select{background:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23c5d1d3' viewBox='0 0 4 5'%3e%3cpath d='M2 0L0 2h4zm0 5L0 3h4z'/%3e%3c/svg%3e") no-repeat right .75rem center / 8px 10px}html.dark-mode .custom-switch .custom-control-label::before{background-color:#4d6066}html.dark-mode .custom-switch .custom-control-label::after{background-color:#c5d1d3}html.dark-mode .custom-switch .custom-control-input:disabled~.custom-control-label{opacity:.4}html.dark-mode .custom-switch .custom-control-input:checked~.custom-control-label::before{background-color:#5b4800}html.dark-mode .custom-switch .custom-control-input:checked~.custom-control-label::after{background-color:#c5d1d3}html.dark-mode input:disabled,html.dark-mode select:disabled{opacity:.5}html.dark-mode .multi-input:not(.is-invalid)>.content{border-color:#7c949c}html.dark-mode .multi-input:not(.is-invalid)>.content.focused{border-color:#f4c200}html.dark-mode .input-group-text{color:#c5d1d3;background-color:#374549;border-color:#7c949c}html.dark-mode .input-group a:focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25);z-index:1}html.dark-mode .form-control-plaintext{color:unset}html.dark-mode .recipient-input.focus{color:#e2e7e9;background-color:#2c373b;border-color:#f4c200}html.dark-mode .recipient-input a.button.icon,html.dark-mode .recipient-input input{color:#c5d1d3}html.dark-mode .recipient-input .recipient{background-color:#374549;border-color:#7c949c}html.dark-mode .file-upload{border-color:#4d6066}html.dark-mode .file-upload:after{mix-blend-mode:soft-light}html.dark-mode .file-upload.droptarget.active{border-color:#c5d1d3}html.dark-mode .file-upload.droptarget.hover{border-color:#c5d1d3;background-color:#374549}html.dark-mode .file-upload .attachmentslist{background:transparent}html.dark-mode .image-upload{background-color:#374549}html.dark-mode .image-upload a.button{background-color:rgba(33,41,44,0.25)}html.dark-mode .formcontent.raweditor .CodeMirror{color:#c5d1d3;background-color:#21292c;border-color:#7c949c}html.dark-mode .formcontent.raweditor .CodeMirror-focused{background-color:#2c373b;border-color:#f4c200}html.dark-mode .CodeMirror-selected,html.dark-mode .CodeMirror-line::selection,html.dark-mode .CodeMirror-line>span::selection,html.dark-mode .CodeMirror-line>span>span::selection{background:#374549}html.dark-mode .CodeMirror-gutters{background-color:#212a2c;border:0}html.dark-mode .CodeMirror-activeline-background{background:#374549}html.dark-mode .skinselection .skinthumbnail{border-color:#7c949c;background:transparent}html.dark-mode .html-editor .editor-toolbar{background-color:#374549;border-color:#7c949c}html.dark-mode .html-editor .editor-toolbar .mce-i-html{color:unset}html.dark-mode .html-editor .editor-toolbar .mce-i-html:hover,html.dark-mode .html-editor .editor-toolbar .mce-i-html:focus{background-color:#586e75;border-color:transparent}html.dark-mode .tox.tox-tinymce{border-color:#7c949c}html.dark-mode .tox .tox-toolbar{background-color:#374549;border-color:#7c949c}html.dark-mode .tox .tox-toolbar-overlord>div{background:url("data:image/svg+xml,%3Csvg height='33px' viewBox='0 0 40 33px' width='40' xmlns='http://www.w3.org/2000/svg'%3E%3Crect x='0' y='32px' width='100' height='1' fill='%237c949c'/%3E%3C/svg%3E") #374549}html.dark-mode .tox .tox-pop.tox-pop--top:before,html.dark-mode .tox .tox-pop.tox-pop--top:after{border-bottom-color:#8b9fa7}html.dark-mode .tox .tox-pop__dialog{box-shadow:none;border-color:#8b9fa7}html.dark-mode .tox .tox-tbtn,html.dark-mode .tox .tox-split-button,html.dark-mode .tox .tox-swatches__picker-btn{color:#c5d1d3}html.dark-mode .tox .tox-tbtn svg,html.dark-mode .tox .tox-split-button svg,html.dark-mode .tox .tox-swatches__picker-btn svg{fill:#c5d1d3 !important}html.dark-mode .tox .tox-tbtn:hover,html.dark-mode .tox .tox-split-button:hover,html.dark-mode .tox .tox-swatches__picker-btn:hover,html.dark-mode .tox .tox-tbtn:focus,html.dark-mode .tox .tox-split-button:focus,html.dark-mode .tox .tox-swatches__picker-btn:focus{color:#c5d1d3;background:#586e75;box-shadow:none}html.dark-mode .tox .tox-tbtn--enabled{background:#586e75}html.dark-mode .tox .tox-button--naked:focus:not(:disabled),html.dark-mode .tox .tox-button--naked.tox-button--icon:hover:not(:disabled){color:#d4ddde;background-color:#586e75;border-color:transparent}html.dark-mode .tox .tox-button--naked:disabled{background:transparent;border:transparent}html.dark-mode .tox .tox-dialog__header .tox-button--naked:hover{background:transparent !important}html.dark-mode .tox .tox-selectfield select{background:transparent;color:#c5d1d3}html.dark-mode .tox .tox-selectfield svg{fill:#c5d1d3}html.dark-mode .tox .tox-color-input span::before{background-color:#c5d1d3}html.dark-mode .tox .tox-toolbar__group:not(:last-of-type){border-color:#7c949c}html.dark-mode .tox .tox-dialog,html.dark-mode .tox .tox-dialog__header,html.dark-mode .tox .tox-dialog__body,html.dark-mode .tox .tox-dialog__footer,html.dark-mode .tox .tox-dialog__title{color:#c5d1d3;border-color:#4d6066;background-color:#21292c}html.dark-mode .tox .tox-textfield,html.dark-mode .tox .tox-color-input>input,html.dark-mode .tox .tox-label,html.dark-mode .tox .tox-dialog__body-nav-item,html.dark-mode .tox .tox-button--naked,html.dark-mode .tox .tox-dialog__header .tox-button,html.dark-mode .tox .tox-insert-table-picker__label{color:#c5d1d3}html.dark-mode .tox .tox-dialog__footer .tox-button{background-color:#5b4800;color:#e2e8e9}html.dark-mode .tox .tox-dialog__footer .tox-button:disabled{opacity:.5}@media screen and (max-width:480px){html.dark-mode .tox .tox-dialog__footer .tox-button{color:#c5d1d3 !important}}html.dark-mode .tox .tox-dialog__footer .tox-button:focus:not(:disabled){background-color:#5b4800}html.dark-mode .tox .tox-dialog__footer .tox-button:hover:not(:disabled){background-color:#755d00}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary{background-color:#4d6066;color:#e2e8e9}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary:focus:not(:disabled){background-color:#4d6066}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary:hover:not(:disabled){background-color:#586e75}html.dark-mode .tox .tox-dialog__body-nav-item--active{color:#f4c200}html.dark-mode .tox .tox-dialog-wrap__backdrop{background-color:rgba(0,0,0,0.7)}html.dark-mode .tox .tox-menu{scrollbar-width:thin;background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .tox .tox-dialog__body-nav,html.dark-mode .tox .tox-collection__group{scrollbar-width:thin}html.dark-mode .tox .tox-collection__item-caret svg{fill:#c5d1d3}html.dark-mode .tox .tox-collection__item{color:#c5d1d3}html.dark-mode .tox .tox-collection__item:not(:last-child){border-bottom:1px solid #2c373a}html.dark-mode .tox .tox-collection--grid .tox-collection__item{border:0}html.dark-mode .tox .tox-collection__item--active,html.dark-mode .tox .tox-collection__item--active:not(.tox-collection__item--state-disabled){color:#c5d1d3;background-color:#374549}html.dark-mode .tox .tox-collection__item--enabled{color:#f4c200;background-color:#374549}html.dark-mode .message-part,html.dark-mode .message-htmlpart{border-color:#4d6066}html.dark-mode .message-part blockquote,html.dark-mode .message-htmlpart blockquote{background-color:#21292c;border-color:#ffd328;color:#ffd328}html.dark-mode .message-part blockquote span.blockquote-link,html.dark-mode .message-htmlpart blockquote span.blockquote-link{color:currentColor;background:#21292c;border-color:currentColor}html.dark-mode .message-part blockquote blockquote,html.dark-mode .message-htmlpart blockquote blockquote{color:#64c86b;border-color:#64c86b}html.dark-mode .message-part blockquote blockquote blockquote,html.dark-mode .message-htmlpart blockquote blockquote blockquote{color:#ff8785;border-color:#ff8785}html.dark-mode .message-part span.sig{color:#8ba3a7}html.dark-mode .message-htmlpart{background-color:white;color:#4f4f4f;padding:0;margin-top:.5rem}html.dark-mode #message-header .header-headers .header-title{color:#c5d1d3;font-weight:normal}html.dark-mode .message-partheaders{background-color:#374549;border:0}html.dark-mode .message-partheaders table.headers-table{color:#c5d1d3}html.dark-mode .message-partheaders table.headers-table *{font-weight:normal}html.dark-mode p.image-attachment{border-color:#4d6066;background-color:#374549}html.dark-mode p.image-attachment span{color:#8ba3a7}html.dark-mode fieldset.image-attachment legend{color:#8ba3a7;border-color:#4d6066}html.dark-mode #messagepartframe{background:#fff}html.dark-mode .ui-widget{border-color:#4d6066}html.dark-mode .ui-widget-overlay{background-color:rgba(0,0,0,0.7)}html.dark-mode .ui-widget-header,html.dark-mode .ui-widget-content{background-color:#21292c}html.dark-mode .ui-dialog .ui-dialog-titlebar{border-color:#4d6066}html.dark-mode .ui-dialog .ui-dialog-title,html.dark-mode .ui-dialog .ui-dialog-titlebar-close{color:#c5d1d3;background:transparent}html.dark-mode .ui-dialog .ui-dialog-buttonpane{border-color:#4d6066}html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{color:#c5d1d3}html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:focus{background:transparent}@media screen and (max-width:480px){html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-primary:not(.btn-danger),html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-secondary{color:#c5d1d3}}html.dark-mode .ui-datepicker .ui-datepicker-header{border-color:#4d6066}html.dark-mode .ui-datepicker th{color:#8ba3a7;font-size:80%;font-weight:normal}html.dark-mode .ui-datepicker .ui-datepicker-prev,html.dark-mode .ui-datepicker .ui-datepicker-next,html.dark-mode .ui-datepicker .ui-state-default,html.dark-mode .ui-datepicker.ui-widget-content .ui-state-default{color:#c5d1d3}html.dark-mode .ui-datepicker .ui-state-highlight,html.dark-mode .ui-datepicker.ui-widget-content .ui-state-highlight{color:#f4c200;background-color:#374549}html.dark-mode .ui-datepicker .ui-datepicker-days-cell-over a{background-color:#4d6066}html.dark-mode .ui-menu{scrollbar-width:thin;background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .ui-menu .ui-menu-item{border-bottom:1px solid #2c373a}html.dark-mode .ui-menu .ui-state-active{background-color:#374549 !important}html.dark-mode .minicolors-panel{box-shadow:none;border-color:#4d6066;background:#161b1d}html.dark-mode ::placeholder,html.dark-mode ::-webkit-input-placeholder,html.dark-mode .listing-info,html.dark-mode .listing span.secondary,html.dark-mode .file-upload .hint,html.dark-mode .contactlist span.email,html.dark-mode #login-footer,html.dark-mode #contacthead.readonly .source.row,html.dark-mode .formcontent .hint{font-weight:normal;color:#8ba3a7}html.dark-mode .popover{background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .popover .menu li.separator{background-color:transparent;color:#8ba3a7}html.dark-mode .popover .menu ul+li.separator{border-top:1px solid #2c373a}html.dark-mode .popover-body{color:#c5d1d3}html.dark-mode .bs-popover-autox-placement^="right">.arrow::after,html.dark-mode .bs-popover-right>.arrow::after{border-right-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="left">.arrow::after,html.dark-mode .bs-popover-left>.arrow::after{border-left-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="top">.arrow::after,html.dark-mode .bs-popover-top>.arrow::after{border-top-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="bottom">.arrow::after,html.dark-mode .bs-popover-bottom>.arrow::after{border-bottom-color:#8b9fa7}html.dark-mode .nav-tabs{border-color:#4d6066}html.dark-mode .nav-tabs .nav-link{color:#c5d1d3;border-color:transparent;border-bottom-color:#4d6066}html.dark-mode .nav-tabs .nav-link:hover{background:#21292c;border-color:#4d6066;color:#c5d1d3}html.dark-mode .nav-tabs .nav-link.active{background:#21292c;border-color:#4d6066;border-bottom-color:transparent;color:#fff}html.dark-mode .table{color:#c5d1d3}html.dark-mode .table td,html.dark-mode .table th,html.dark-mode .table thead th{border-color:#4d6066}html.dark-mode .table-widget{border-color:#4d6066}html.dark-mode .table-widget>.footer{border-color:#4d6066}html.dark-mode .table-widget table.options-table tr:last-child td{border-color:#4d6066}html.dark-mode .table-widget table.options-table tr.selected td{background-color:#374549;color:#c5d1d3}html.dark-mode #rcmdraglayer{background-color:#161b1d;border:1px solid #8b9fa7;box-shadow:none;color:#c5d1d3}html.dark-mode .quota-widget{color:unset}html.dark-mode .quota-widget .bar{border-color:#4d6066;background-color:#4d6066}html.dark-mode .quota-info .root{color:#8ba3a7;background-color:transparent}html.dark-mode img.contactphoto,html.dark-mode #contactpic{background-color:#374549 !important}html.dark-mode .pgpkeyimport div.key.revoked,html.dark-mode .pgpkeyimport div.key.disabled{color:#637e82}html.dark-mode .pgpkeyimport li.uid::before{opacity:1}#taskmenu span.inner{text-transform:uppercase}@media screen and (min-width:1025px) and (min-height:640px){#taskmenu span.inner{font-size:65%;font-weight:bold}#taskmenu a:before{line-height:1.2;font-size:180%;height:1.9rem !important}}@media screen and (min-width:769px){#taskmenu a.logout:not(:hover){color:#71777d !important}}#taskmenu .action-buttons{display:none}#layout-menu .popover-header{background-color:#3a444e !important}#layout-menu .popover-header img{width:100%}html.layout-phone #layout-menu .popover-header img{width:unset;max-height:58px}.watermark{background-image:url(../images/watermark.svg) !important;background-size:60% !important;background-blend-mode:unset !important}.watermark:before{background:rgba(255,255,255,0.75) !important}body.task-mail .menu a.compose{display:block !important}#message-header .short-header img.contactphoto{order:2;margin:0 0 0 1rem}.content-frame-navigation{height:35px !important;line-height:35px !important;min-height:35px !important}.content-frame-navigation a{max-width:8em;padding:0;line-height:35px}.content-frame-navigation a:before{display:none !important;height:35px !important;line-height:35px !important}.content-frame-navigation a.prev,.content-frame-navigation a.next{padding:0}.content-frame-navigation a.prev:before,.content-frame-navigation a.next:before{display:block !important;line-height:1.8}.content-frame-navigation a.prev span.inner,.content-frame-navigation a.next span.inner{display:none}.content-frame-navigation a span.inner{color:#f4c200;font-weight:bold}
\ No newline at end of file
+p.image-attachment .attachment-links a:before,.quota-widget:before,.table-widget table.options-table td:not(:first-child) span:before,table.table th.checkbox-cell:before,a.button.icon:before,button.btn:before,.floating-action-buttons a.button:before,.ui-dialog .ui-dialog-titlebar-close:before,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before,.ui-datepicker .ui-datepicker-prev:before,.ui-datepicker .ui-datepicker-next:before,.pgpkeyimport div.key label.keyid+a:before,.pgpkeyimport li.uid:before,.menu a:before,.popover .menu li aaria-haspopup:after,.searchbar form:before,.searchbar a:before,.ui.alert>i.icon:before,.listing td.action a:before,.listing.iconized li a:before,.listing.iconized li>i:before,.listing.iconized tr td:before,.listing.iconized.selectable li a:before,ul.treelist li div.treetoggle:before,.folderlist li a:before,.messagelist tr.thread td.threads div:before,.messagelist td.subject span.msgicon.status:before,.messagelist td.subject span.msgicon.status.replied.forwarded:after,.messagelist span.attachment span,.messagelist span.flagged:before,.messagelist tr.flaggedroot:not(:hover) span.unflagged:before,.messagelist tr:hover span.unflagged:before,.contactlist td.contact:before,.contactlist td.contactgroup:before,.contactlist li a:before,.attachmentslist li:before,.attachmentslist li a.cancelupload:before,.attachmentslist li a.delete:before,.keylist li:before,#identities-table td.mail:before,#responses-table td.name:before,#filterslist td.name:before,#filtersetslist td.name:before,.propform td.rowbuttons a:before,fieldset.advanced>legend:after,.input-group .icon:before,.multi-input a.icon.reset:before,.tagedit-list li.tagedit-listelement-old a:before,div.tox .tox-dialog__header .tox-button:before,div.tox .tox-dialog__footer .tox-button:before,.html-editor .editor-toolbar .mce-i-html:before,.googie_list li .googie_list_revert:before,.googie_list li .googie_add_to_dict:before,body.status-flagged #message-header>.subject:before,#message-header>.subject a.extwin:before,#message-header .header-links a:before,.message-part blockquote span.blockquote-link:after,.message-htmlpart blockquote span.blockquote-link:after{font-size:1.25em;display:block;float:left;margin:0 .25rem 0 0;width:1.18em;height:1em;font-family:'Icons';font-style:normal;font-weight:900;text-decoration:inherit;text-align:center;speak:none;font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased}@font-face{font-family:'Icons';font-style:normal;font-weight:900;src:url("../fonts/fa-solid-900.woff2") format('woff2'),url("../fonts/fa-solid-900.woff") format('woff')}@font-face{font-family:'Icons';font-style:normal;font-weight:400;src:url("../fonts/fa-regular-400.woff2") format('woff2'),url("../fonts/fa-regular-400.woff") format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:local('Roboto'),local('Roboto-Regular'),url('../fonts/roboto-v19-regular.woff2') format('woff2'),url('../fonts/roboto-v19-regular.woff') format('woff')}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:local('Roboto Italic'),local('Roboto-Italic'),url('../fonts/roboto-v19-italic.woff2') format('woff2'),url('../fonts/roboto-v19-italic.woff') format('woff')}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:local('Roboto Bold'),local('Roboto-Bold'),url('../fonts/roboto-v19-regular-700.woff2') format('woff2'),url('../fonts/roboto-v19-regular-700.woff') format('woff')}@font-face{font-family:'Roboto';font-style:italic;font-weight:700;src:local('Roboto Bold Italic'),local('Roboto-BoldItalic'),url('../fonts/roboto-v19-italic-700.woff2') format('woff2'),url('../fonts/roboto-v19-italic-700.woff') format('woff')}body,button,input,optgroup,select,textarea,.popover{font-family:Roboto,sans-serif}button,input,select,textarea{line-height:initial}input{vertical-align:middle}a{color:#f4c200}a:hover{color:#c19900}a.disabled{pointer-events:none}a.disabled:not(.btn){opacity:.5}html{height:100%;font-size:14px}body{min-width:240px;height:100%;color:#4f4f4f;overflow:hidden}html.iframe body{overflow:auto}#layout{overflow:hidden;display:flex;height:100%;width:100%}#layout>div>.scroller{flex:1;position:relative}#layout>div>.header,#layout>div>.footer{font-size:1rem;font-weight:bold;line-height:58px;height:58px;min-height:58px;padding:0 .25em;margin:0;position:relative;overflow:hidden;white-space:nowrap;display:flex;justify-content:center}#layout>div>.header{border-bottom:1px solid #d4dbde;color:#4f4f4f;background-color:#f1eeea}#layout>div>.header .header-title{overflow:hidden;text-overflow:ellipsis;flex:1;text-align:center;margin:0 -20rem}#layout>div>.header a.button{color:#7b7b77}#layout>div>.header a.toolbar-list-button,#layout>div>.header a.toolbar-menu-button{order:99}#layout>div>.footer{border-top:1px solid #d4dbde;background-color:#fff}#layout>div>.footer.small{height:35px;min-height:35px;line-height:35px}#layout>div>.footer:empty{display:none}#layout-sidebar{position:relative;display:flex;flex-direction:column;flex:2;max-width:30%;min-width:220px;border-right:1px solid #d4dbde;background-color:#fff}#layout-sidebar.sidebar-right{order:2;border-right:0;border-left:1px solid #d4dbde;flex:3}#layout-list{position:relative;display:flex;flex-direction:column;flex:3;max-width:30%;min-width:300px;border-right:1px solid #d4dbde;background-color:#fff}#layout-content{display:flex;flex:6;flex-direction:column;background-color:#fff}html.iframe #layout-content{height:100%}#layout-content>.formcontent,#layout-content>.content{height:100%;width:100%;overflow:auto;flex:1}#layout-content .iframe-wrapper{width:100%;flex:1}#layout-content .iframe-wrapper iframe{width:100%;height:100%;border:0}#layout-content.only>.scroller{overflow:auto}#layout-menu.popover{left:0 !important}#layout-menu .popover-header{height:58px;line-height:58px;border:0;border-radius:0;text-align:center}#layout-menu .popover-header img{max-height:58px;max-width:78px;padding:.25rem}@media screen and (min-width:481px) and (max-width:1024px){#layout-menu .popover-header img{max-width:35.1px}}@media screen and (min-width:481px){#layout-menu .popover-header{padding:0 !important;background-color:#3a444e !important}#layout-menu .popover-header a{display:none !important}}html.layout-phone #layout-menu .popover-header{display:flex !important;align-items:center;justify-content:center;padding:0 .5rem}html.layout-phone #layout-menu .popover-header img{max-width:222px}html.layout-phone #layout-menu .popover-header a{width:auto;flex:1}html.layout-phone #layout-menu .popover-header a:before{height:58px;float:right}html.layout-phone #layout-menu .popover-header a .inner{display:none}.column-resizer{cursor:col-resize;z-index:1;position:absolute;top:0;right:-3px;width:6px;height:100%}.column-resizer.inverted{right:auto;left:-3px}.column-resizer.active{width:10000px;right:-5000px}.column-resizer.active.inverted{right:auto;left:-5000px}@media screen and (max-width:1200px){#layout-sidebar,#layout-list{min-width:260px;flex:3}#layout-list>.header>a.button{padding:0 .25rem;margin:0 .25rem}}@media screen and (max-width:1024px){.column-resizer{display:none}#layout-sidebar,#layout-list{width:auto !important;flex:3 !important}}@media screen and (max-width:768px){#layout-sidebar,#layout-list{max-width:none;border:0 !important}#layout>div>.header{background-color:#f1eeea}#layout>div>.header a.button{margin:0 .3rem !important;padding:0 !important}#layout>div>.header a.button:before{font-size:1.75rem;height:58px;margin:0}#layout>div>.header a.button.filter:before{font-size:1.6rem}#layout>div>.header a.button .inner{display:none}#layout>div>.footer{background-color:#f1eeea}a.toolbar-list-button{display:none}}@media screen and (max-width:320px){#layout-sidebar,#layout-list{min-width:240px}}@media screen and (min-width:481px){a.task-menu-button{display:none}#layout-menu{background-color:#3a444e;width:42px}}@media screen and (min-width:769px){.floating-action-buttons,#layout-content>.header>.header-title,#layout>div>.header>.buttons,a.toolbar-menu-button{display:none}}@media screen and (min-width:1025px){#layout-menu{width:78px}}@media screen and (min-width:1201px){#layout-list>.header>.header-title:not(.all-sizes),a.toolbar-list-button,a.back-list-button,a.back-sidebar-button{display:none}}html.layout-phone .hidden-phone{display:none !important}html.layout-phone .hidden-small,html.layout-small .hidden-small{display:none !important}html.layout-small .hidden-lbs{display:none !important}html.layout-large .hidden-lbs,html.layout-normal .hidden-lbs,html.layout-large .hidden-big,html.layout-normal .hidden-big{display:none !important}html.layout-large .hidden-large{display:none !important}.rcmaddcontact,.hidden,.voice{display:none !important}font.bold{font-weight:bold}#rcmdraglayer{min-width:260px;width:260px;background-color:#3a444e;color:#fff;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem;z-index:250;opacity:.92;padding:.5rem;white-space:nowrap}#rcmdraglayer div{line-height:1.6em;overflow:hidden;text-overflow:ellipsis}.frame-content{padding:1rem}.frame-content h2{font-weight:bold;font-size:1.5em}.frame-content h3{font-weight:bold;font-size:1.25em}.listbox .scroller{width:100%;overflow-x:hidden;overflow-y:auto}.listbox .navlist{height:0;flex:initial !important}.listbox .navlist .listing tr:last-child td,.listbox .navlist .listing li:last-child{border-bottom:0}.popup .listbox{height:100%;display:flex;flex-direction:column}.popup .listbox .scroller{flex:1}.popup .listbox .footer{border-top:1px solid #d4dbde;background-color:#fbfbfb}.contact-header{display:flex;margin-bottom:1rem}.contact-header .contact-photo{min-width:112px}.contact-header .contact-head{margin-left:1rem;margin-top:0 !important}.contact-header .contact-head legend{display:none}p.image-attachment{position:relative;border:1px solid #ddd;border-radius:.3rem;background-color:rgba(244,194,0,0.05);float:left;margin:.5rem;min-width:47%;min-height:250px;overflow:hidden;display:flex;justify-content:center}@media screen and (max-width:480px){p.image-attachment{float:none;margin:.5rem 0 .5rem 0}}p.image-attachment .image-link{align-self:center;text-align:center;margin:1.6rem .5rem}p.image-attachment span{color:#7b7b77;padding:0 .5rem;font-size:90%;white-space:nowrap;position:absolute;line-height:1.5rem}p.image-attachment .image-filename{overflow:hidden;text-overflow:ellipsis;left:0;top:0;right:0;padding-right:4rem}p.image-attachment .image-filesize{right:0;top:0}p.image-attachment .attachment-links{position:absolute;bottom:0;left:0;width:100%;text-align:center}p.image-attachment .attachment-links a{text-decoration:none;display:inline-block;padding:0 .5rem;line-height:1.5rem}p.image-attachment .attachment-links a:before{display:inline-block}p.image-attachment .attachment-links a.open:before{content:"\f360"}p.image-attachment .attachment-links a.download:before{content:"\f019"}fieldset.image-attachment{margin-top:.5rem}fieldset.image-attachment legend{color:#7b7b77;font-size:.9rem;border-top:1px solid #f9f9f8;margin:0}fieldset.image-attachment img{max-width:100%}#folder-selector{overflow-y:auto}.noselect{user-select:none;-moz-user-select:none;-khtml-user-select:none;-ms-user-select:none;-webkit-user-select:none}.iframe-loader{width:100%;position:absolute;top:0;bottom:0;background-color:rgba(255,255,255,0.95);display:flex;align-items:center;justify-content:center;z-index:3}.iframe-loader .spinner-border{width:7rem;height:7rem;color:#f8f7f4;border:1rem solid;border-color:currentColor #7b7b77 currentColor currentColor}.footer.toolbar+.iframe-loader{top:58px;bottom:58px}.ios-scroll{padding:0;-webkit-overflow-scrolling:touch !important;overflow:scroll !important}.ios-scroll.iframe-wrapper{margin-top:1px}.webkit-scroller::-webkit-scrollbar{-webkit-appearance:none}.webkit-scroller::-webkit-scrollbar:vertical{width:.5rem}.webkit-scroller::-webkit-scrollbar:horizontal{height:.5rem}.webkit-scroller::-webkit-scrollbar-thumb{background-color:rgba(0,0,0,0.3);border-radius:.25rem;border:2px solid #fff}.quota-widget{width:100%;max-width:15em;padding:.5rem 1rem;display:flex;align-items:center;color:#7b7b77}.quota-widget:before{content:"\f0a0";line-height:1}.quota-widget .count{font-size:80%;order:2}.quota-widget .bar{flex:1;height:.5rem;margin:0 1rem;background-color:#fff;border:1px solid #d4dbde;border-radius:.25rem;overflow:hidden}.quota-widget .value{display:block;background-color:#f4c200;height:1rem;opacity:.75}.quota-widget .value.warning{background-color:#ff5552}.image-tools{position:absolute;top:5rem;left:0;height:58px;overflow:hidden;transform:translateX(-87%);transition:transform .3s ease-in-out;background-color:rgba(244,194,0,0.4);border-radius:0 .3rem .3rem 0}.image-tools .menu{float:left}.image-tools a.button.icon.tools{padding:0 .25rem;display:inline-block;height:58px}.image-tools a.button.icon.tools span.inner{display:none}.image-tools a.button.icon.tools:before{line-height:58px;margin:0}.image-tools.open{transform:translateX(0)}.image-tools.open a.button.icon.tools:before{content:"\f053"}.image-tools a{color:#fff !important}.image-tools a:focus,.image-tools a:hover{background-color:rgba(244,194,0,0.5) !important;outline:0}.quota-info{width:100%;display:table !important}.quota-info td,.quota-info th{text-align:center;white-space:nowrap}.quota-info th{border-top:0}.quota-info .root{line-height:1;font-style:italic;color:#7b7b77;background-color:#f8f7f4}.quota-info th:first-child,.quota-info .name{text-align:left}.nav-tabs{flex-wrap:nowrap}.nav-tabs .nav-item{white-space:nowrap;overflow:hidden}.nav-tabs .nav-link{overflow:hidden;text-overflow:ellipsis}.props-table td.title{width:7em}.table-widget{display:flex;flex-direction:column;margin-bottom:.5rem;border:1px solid #d4dbde}.table-widget>.content{overflow-x:auto;flex-grow:1;height:18.5em}.table-widget>.content table th{border-top:0}.table-widget>.footer{height:3.5rem;border-top:1px solid #d4dbde;text-align:left}.table-widget>.footer a{padding:.2rem .45rem !important;height:calc(3.5rem - 1px) !important}.table-widget table{margin:0;max-height:18.5em}.table-widget table.options-table td,.table-widget table.options-table th{text-align:center;vertical-align:middle}.table-widget table.options-table td:first-child,.table-widget table.options-table th:first-child{overflow:hidden;text-overflow:ellipsis;text-align:left}.table-widget table.options-table tr:last-child td{border-bottom:1px solid #d4dbde}.table-widget table.options-table tr.selected td{background-color:#fdf6d9;color:#4f4f4f;outline:0}.table-widget table.options-table td:not(:first-child) span{display:inline-block;line-height:1.25}.table-widget table.options-table td.enabled span:before{content:"\f00c"}.table-widget table.options-table td.partial span:before{opacity:.3;content:"\f00c"}table.compact-table{margin:0;width:100%}table.compact-table *:not(.invalid-feedback){font-size:inherit}table.compact-table td{padding:.25rem;border:0}table.compact-table td:first-child{padding-left:0}table.compact-table td:last-child{padding-right:0}table.table .checkbox-cell{width:3rem;white-space:nowrap;overflow:hidden;text-align:center;padding:.5rem}html.touch table.table .checkbox-cell{padding:.5rem .3rem}table.table th.checkbox-cell{padding:.75rem 0;max-width:1rem}table.table th.checkbox-cell:before{cursor:pointer;margin:0 1rem;line-height:1}table.table th.checkbox-cell.subscription:before{content:"\f143"}table.table th.checkbox-cell.alarm:before{content:"\f0f3";font-weight:400}table.table th.checkbox-cell.read:before{content:"\f06e"}table.table th.checkbox-cell.write:before{content:"\f303"}table.table .buttons-cell{width:1%;white-space:nowrap;text-align:center}table.table .buttons-cell a.button:before{line-height:1;float:none;display:inline-block}@media screen and (min-width:480px){table.table .buttons-cell a.button .inner{display:inline}}table.table label{margin:0;display:inline}fieldset.tab-pane table.table thead th{border:0}table.table tr.deleted td{color:rgba(79,79,79,0.5) !important}.table thead th{border-width:1px;white-space:nowrap}.button.disabled{opacity:.5}a.button{text-decoration:none !important}a.button.icon.sidebar-menu:before,button.btn.sidebar-menu:before,a.button.icon.toolbar-menu-button:before,button.btn.toolbar-menu-button:before,a.button.icon.toolbar-list-button:before,button.btn.toolbar-list-button:before{content:"\f142";width:1em}a.button.icon.task-menu-button:before,button.btn.task-menu-button:before{content:"\f0c9"}a.button.icon.back-sidebar-button:before,button.btn.back-sidebar-button:before,a.button.icon.back-content-button:before,button.btn.back-content-button:before,a.button.icon.back-list-button:before,button.btn.back-list-button:before{content:"\f053"}a.button.icon.refresh:before,button.btn.refresh:before{content:"\f021"}a.button.icon.generate:before,button.btn.generate:before,a.button.icon.yes:before,button.btn.yes:before,a.button.icon.submit:before,button.btn.submit:before,a.button.icon.continue:before,button.btn.continue:before,a.button.icon.save:before,button.btn.save:before{content:"\f00c"}a.button.icon.create:before,button.btn.create:before{content:"\f0fe"}a.button.icon.edit:before,button.btn.edit:before{content:"\f303"}a.button.icon.qrcode:before,button.btn.qrcode:before{content:"\f029"}a.button.icon.search:before,button.btn.search:before{content:"\f002"}a.button.icon.filter:before,button.btn.filter:before{content:"\f0b0";font-size:1.2em}a.button.icon.import:before,button.btn.import:before{content:"\f093"}a.button.icon.export:before,button.btn.export:before{content:"\f019"}a.button.icon.discard:before,button.btn.discard:before,a.button.icon.delete:before,button.btn.delete:before{content:"\f2ed";font-weight:400}a.button.icon.next:before,button.btn.next:before{content:"\f061"}a.button.icon.restore:before,button.btn.restore:before{content:"\f0e2"}a.button.icon.send:before,button.btn.send:before,a.button.icon.bounce:before,button.btn.bounce:before{content:"\f1d8"}a.button.icon.attach:before,button.btn.attach:before{content:"\f0c6"}a.button.icon.attach.vcard:before,button.btn.attach.vcard:before{content:"\f007"}a.button.icon.no:before,button.btn.no:before,a.button.icon.close:before,button.btn.close:before,a.button.icon.cancel:before,button.btn.cancel:before{content:"\f00d"}a.button.icon.back:before,button.btn.back:before{content:"\f053"}a.button.icon.remove:before,button.btn.remove:before{content:"\f00d"}a.button.icon.unlock:before,button.btn.unlock:before{content:"\f09c"}a.button.icon.help:before,button.btn.help:before{content:"\f1cd";font-weight:400}a.button.icon.folders:before,button.btn.folders:before{content:"\f07c"}a.button.icon.options:before,button.btn.options:before{content:"\f1de"}a.button.icon.tools:before,button.btn.tools:before,a.button.icon.settings:before,button.btn.settings:before{content:"\f013"}a.button.icon.properties:before,button.btn.properties:before{content:"\f05a"}a.button.icon.selection:before,button.btn.selection:before{content:"\f14a";font-weight:400}a.button.icon.insert.recipient:before,button.btn.insert.recipient:before{content:"\f234"}a.button.icon.encrypt:before,button.btn.encrypt:before{content:"\f023"}a.button.icon.sign:before,button.btn.sign:before{content:"\f5b7"}a.button.icon.sso:before,button.btn.sso:before{content:"\f2f6"}a.button.icon.extwin:before,button.btn.extwin:before{content:"\f360"}a.btn:before,button.btn:before{display:inline !important;float:none !important;vertical-align:middle;margin-right:.4rem !important}a.btn.oauth.google:before,button.btn.oauth.google:before,a.btn.oauth.outlook:before,button.btn.oauth.outlook:before{content:" ";display:inline-block !important;height:1.5rem;width:1.5rem;margin-right:.8rem !important;background-size:100% auto}a.btn.oauth.google:before,button.btn.oauth.google:before{background:url('../images/google-icon.svg') top left no-repeat}a.btn.oauth.outlook:before,button.btn.oauth.outlook:before{background:url('../images/microsoft-icon.svg') top left no-repeat}a.button.icon.dropdown:before{content:"\f0d7";font-size:1em}a.button.icon>span.inner{display:none}html.touch .btn:focus{box-shadow:none !important}.floating-action-buttons{position:absolute;right:0;bottom:0}.footer:not(:empty)+.floating-action-buttons{bottom:35px}.floating-action-buttons a.button{display:block;float:left;width:4rem;height:4rem;border-radius:50%;background:#f4c200;color:white;opacity:.95;box-shadow:0 0 5px 5px #ffeda7;margin:0 1rem 1rem 0}.floating-action-buttons a.button:before{content:"\f067";width:4rem;height:4rem;line-height:4rem}.floating-action-buttons a.button.compose:before{content:"\f304"}.floating-action-buttons a.button .inner{display:none}.btn:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.3)}.btn-link{color:#f4c200}.btn-secondary{color:#fff;background:#8b9fa7;border-color:#8b9fa7}.btn-secondary:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}.btn-secondary:hover{background:#7c939c;border-color:#778e98}.btn-secondary.disabled,.btn-secondary:disabled{background:#8b9fa7;border-color:#8b9fa7}.btn-secondary:not(:disabled):not(.disabled):active,.btn-secondary:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}.btn-secondary:not(:disabled):not(.disabled):active:focus,.btn-secondary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}.btn-primary{color:#fff;background:#f4c200;border-color:#f4c200}.btn-primary:focus{background:#dbae00;border-color:#d0a600;box-shadow:0 0 0 .2rem rgba(244,194,0,0.5)}.btn-primary:hover{background:#dbae00;border-color:#d0a600}.btn-primary.disabled,.btn-primary:disabled{background:#f4c200;border-color:#f4c200}.btn-primary:not(:disabled):not(.disabled):active,.btn-primary:not(:disabled):not(.disabled).active{background:#c19900;border-color:#b79100}.btn-primary:not(:disabled):not(.disabled):active:focus,.btn-primary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.53)}.btn-danger{color:#fff;background:#ff5552;border-color:#ff5552}.btn-danger:focus{background:#ff3c38;border-color:#ff322e;box-shadow:0 0 0 .2rem rgba(255,85,82,0.5)}.btn-danger:hover{background:#ff3c38;border-color:#ff322e}.btn-danger.disabled,.btn-danger:disabled{background:#ff5552;border-color:#ff5552}.btn-danger:not(:disabled):not(.disabled):active,.btn-danger:not(:disabled):not(.disabled).active{background:#ff231f;border-color:#ff1915}.btn-danger:not(:disabled):not(.disabled):active:focus,.btn-danger:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(255,85,82,0.53)}.ui-widget-overlay{background-color:rgba(79,79,79,0.5);opacity:1 !important}.ui-widget-overlay.datepicker{z-index:119}.ui-widget{border:1px solid #d4dbde;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem}.ui-menu{overflow-y:auto;overflow-x:hidden;max-height:400px;border-radius:.3rem;z-index:240;position:absolute}.ui-menu .ui-state-active{border:0 !important;background-color:#f4c200 !important}.ui-menu .ui-menu-item{white-space:nowrap;cursor:default}.ui-menu .ui-menu-item-wrapper{margin:0 !important}.ui-dialog{border-radius:0;box-shadow:none}.ui-dialog.no-titlebar .ui-dialog-titlebar{display:none}.ui-dialog .ui-dialog-titlebar{height:58px;border-bottom:1px solid #ddd}.ui-dialog .ui-dialog-titlebar button:before{margin:0}.ui-dialog .ui-dialog-title{line-height:58px;font-size:1.25rem;padding:0 3rem 0 1rem;color:#4f4f4f}.ui-dialog .ui-dialog-titlebar-close{border:0;color:#4f4f4f;background:transparent;right:0;top:0;position:absolute;padding:.25rem .5rem;margin:15px .5rem}.ui-dialog .ui-dialog-titlebar-close:before{content:"\f00d";line-height:1.5rem;margin:0 !important}.ui-dialog .ui-dialog-content>.popupmenu{display:block !important}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset{display:flex;justify-content:flex-end}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button{overflow:hidden;text-overflow:ellipsis;min-width:5rem;margin:9px 4px}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:last-child,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:last-child{margin-right:0}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{padding-right:0;padding-left:0;text-decoration:none;color:#4f4f4f}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:focus{background-color:rgba(244,194,0,0.5)}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options{order:-1;padding:.375rem .25rem;margin-right:.3rem}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before{content:"\f013";width:100%;height:1.25em}.ui-dialog iframe,.ui-dialog .ui-dialog-content.iframe{padding:0;width:100% !important;height:100%;border:0;overflow:hidden}.ui-dialog,.ui-dialog-content{box-sizing:initial}.ui-widget-content .ui-icon.ui-resizable-se{background:url("data:image/svg+xml;charset=utf-8,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%2016%2016%22%3E%0A%20%20%3Cpath%20fill%3D%22%23888%22%20d%3D%22M6.7%2016L16%206.7V5.3L5.3%2016zM9.7%2016L16%209.7V8.3L8.3%2016zM12.7%2016l3.3-3.3v-1.4L11.3%2016zM15.7%2016l.3-.3v-1.4L14.3%2016z%22%2F%3E%0A%3C%2Fsvg%3E%0A")}@media screen and (max-width:480px){.ui-dialog{width:100% !important;height:100% !important;display:flex;flex-direction:column;border:0;top:0 !important}.ui-dialog .ui-resizable-handle,.ui-dialog .ui-dialog-titlebar-close{display:none !important}.ui-dialog .ui-dialog-titlebar{height:58px;text-align:center;background-color:#f1eeea}.ui-dialog .ui-dialog-title{line-height:58px;font-size:1rem;padding:0 1rem}.ui-dialog .ui-dialog-content{flex:1}.ui-dialog .ui-dialog-content:not(.iframe){padding:1rem}.ui-dialog .ui-dialog-buttonpane{padding:0 !important;text-align:center !important;border-top:1px solid #ddd;height:58px !important;background-color:#f1eeea}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset{justify-content:space-around}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button{margin:0 !important;padding:.45rem;border:0 !important;height:58px;box-shadow:none;font-size:90%;line-height:1.5}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:before{display:block !important;float:none;width:auto;height:1.75rem;line-height:1.75;margin:0 !important}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:active{box-shadow:none}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-primary,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-secondary{color:#7b7b77;background:transparent}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-danger{color:#ff5552;background:transparent}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.disabled,.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button:disabled{opacity:.5}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.cancel{order:100}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{color:#7b7b77;margin:0;padding:.45rem;font-size:90%}.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link.options:before{display:block !important;height:1.75rem;line-height:1.75;margin:0}}.ui-slider{box-shadow:none}.ui-slider .ui-slider-range{border-radius:.3rem;background:#ffe88e}.ui-slider .ui-slider-handle{border-radius:.3rem}.ui-slider .ui-slider-handle.ui-state-active{background:#f4c200;border-color:#5b4800}.ui-datepicker{margin:calc(50vh - 10em) calc(50vw - 10em) !important;top:0 !important;left:0 !important;box-shadow:none;user-select:none}.ui-datepicker:not(.ui-datepicker-inline){z-index:120 !important}.ui-datepicker .ui-datepicker-header,.ui-datepicker .ui-datepicker-title{line-height:4rem;height:4rem;padding:0}.ui-datepicker .ui-datepicker-header{border-bottom:1px solid #ddd}.ui-datepicker .ui-datepicker-header a{height:4rem}.ui-datepicker .ui-datepicker-header select{display:inline-block}.ui-datepicker .ui-icon{background-image:none !important;background-position:none !important}.ui-datepicker .ui-datepicker-prev,.ui-datepicker .ui-datepicker-next{cursor:pointer;width:auto;color:#4f4f4f;text-decoration:none}.ui-datepicker .ui-datepicker-prev:before,.ui-datepicker .ui-datepicker-next:before{content:"\f053";margin:0 .25em;height:auto;width:1em}.ui-datepicker .ui-datepicker-prev:before{content:"\f053"}.ui-datepicker .ui-datepicker-next:before{content:"\f054"}.ui-datepicker td a{padding:0;line-height:1.8em;border-radius:.3rem}.ui-datepicker .ui-state-default,.ui-datepicker.ui-widget-content .ui-state-default{border:0;background:transparent;color:#4f4f4f}.ui-datepicker .ui-datepicker-days-cell-over a,.ui-datepicker .ui-datepicker-days-cell-over a.ui-state-default,.ui-datepicker .ui-state-highlight,.ui-datepicker.ui-widget-content .ui-state-highlight{background:#ffe88e;color:#f4c200}.ui-datepicker a.ui-state-active{background:#f4c200 !important;color:#fff !important;font-weight:bold}.ui-datepicker html.touch td a{font-size:1.2em;line-height:2.2em}.input-group>.form-control.hasDatepicker{position:initial}.minicolors-panel{border:1px solid #d4dbde;box-shadow:3px 3px 5px #f8f7f4;border-radius:.3rem;height:152px;padding:1px}.input-group .minicolors-input{width:100%;min-width:130px;border-left:0;border-right:0}@media screen and (max-width:320px){.ui-widget-content{border-radius:0}.ui-menu{border-radius:.3rem;left:15px !important;right:15px;width:auto}.ui-dialog .ui-dialog-content:not(.iframe){padding:.65rem}}.popupmenu{display:none;padding:0;min-width:180px;height:100%}.popupmenu li>a{width:100%}.popupmenu.propform{overflow:hidden;padding:.25rem}.popupmenu.simplelist{min-width:80px}.popup.justified{display:flex;justify-content:space-around}.popover-body{padding:0;overflow-x:hidden}.popover-body>.popupmenu{display:block !important}.popover{box-shadow:3px 3px 5px #f8f7f4;border-color:#d4dbde;padding:0;z-index:1300}.popover .popover-header{display:none}@media screen and (min-width:769px){.popover .listing li:first-child{border-radius:.25rem .25rem 0 0}.popover .listing li:last-child{border-bottom-right-radius:.25rem;border-bottom-left-radius:.25rem}.popover .listing ul.rounded-0>li{border-radius:0}}html.layout-small .popover:not(.select-menu),html.layout-phone .popover:not(.select-menu){margin:0 !important;padding:0;right:0;left:initial !important;bottom:0;top:0;width:272px;transform:none !important;border-radius:0;border:0;display:flex;flex-direction:column;box-shadow:none}html.layout-small .popover:not(.select-menu) div.arrow,html.layout-phone .popover:not(.select-menu) div.arrow{display:none}html.layout-small .popover:not(.select-menu) .listing li:last-child,html.layout-phone .popover:not(.select-menu) .listing li:last-child{border-bottom:1px solid #f8f7f4}html.layout-small .popover-overlay,html.layout-phone .popover-overlay{z-index:1299;background-color:rgba(79,79,79,0.5);position:absolute;top:0;bottom:0;width:100%}html.layout-small .popover-header,html.layout-phone .popover-header{display:block;border-radius:0;border:0;padding:0 .5em;height:58px;min-height:58px;line-height:58px;font-size:16px;color:#fff;background-color:#3a444e}html.layout-small .popover-header:before,html.layout-phone .popover-header:before{display:none}html.layout-small .popover-header a,html.layout-phone .popover-header a{display:inline-block;width:100%}html.layout-small .popover-body>*,html.layout-phone .popover-body>*{max-height:100% !important}html.touch .popover .listing li a{line-height:47px;font-size:16px;padding:0 .5em}html.touch .popover .listing li a:before{float:left}.select-menu{max-width:initial;margin:0;height:auto;z-index:1301}.select-menu .popover-header{border-radius:.25rem .25rem 0 0 !important}.select-menu .listing li a{padding-left:.25rem;outline:0}.select-menu .listing li:last-child{border-bottom-right-radius:.25rem;border-bottom-left-radius:.25rem}.select-menu.inline .listing li{padding-right:.5rem}.select-menu.inline .listing li:first-child{border-top-left-radius:.25rem;border-top-right-radius:.25rem}.pgpkeyimport div.key{position:relative;padding:.5rem 0}.pgpkeyimport div.key.revoked,.pgpkeyimport div.key.disabled{color:#7b7b77}.pgpkeyimport div.key label{display:inline-block;margin-right:.5em;margin-bottom:0}.pgpkeyimport div.key label:after{content:":"}.pgpkeyimport div.key label.keyid{display:none}.pgpkeyimport div.key label+a,.pgpkeyimport div.key label+span{line-height:2.6rem;margin-right:1em;white-space:nowrap;text-decoration:none}.pgpkeyimport div.key label.keyid+a{font-weight:bold}.pgpkeyimport div.key label.keyid+a:before{content:"\f084"}.pgpkeyimport ul.uids{margin:0;padding:0}.pgpkeyimport li.uid{border:0;padding:.25rem 0 0 1.5em;line-height:1.5rem !important;list-style-type:none}.pgpkeyimport li.uid:before{content:"\f007";opacity:.25;font-size:1em;line-height:1.25}.pgpkeyimport button.importkey{position:absolute;top:.5rem;right:0}.pgpkeyimport button:disabled{display:none}.menu{margin:0;text-align:center;white-space:nowrap}.menu a{overflow:hidden;text-overflow:ellipsis;text-decoration:none}.menu a:before{content:"\00a0"}.menu a:hover,.menu a:focus{outline:0}.menu a:not(.disabled):focus,.menu a:not(.disabled):hover{background-color:#f7f5f2}.menu.toolbar li{display:inline-block;height:58px}.menu.toolbar a{color:#7b7b77;display:block;float:left;border:0 !important;height:58px;min-width:3.2rem;max-width:6rem;width:auto;padding:.45rem;line-height:1.5;cursor:pointer;font-size:1rem;text-align:center}.menu.toolbar a:before{height:1.75rem !important;float:none !important;width:auto !important;margin:0 !important}.menu.toolbar a.selected{color:#41b849}.menu.toolbar>.spacer{width:1em}.menu.toolbar .dropbutton:not(.disabled):hover{background-color:#f7f5f2}.menu.toolbar .dropbutton a.dropdown{padding:0 .3rem}.menu.toolbar .dropbutton a.dropdown:before{line-height:58px}.menu.toolbar .dropbutton a.dropdown:hover{background-color:#ece8e3}.menu span.inner{font-size:90%;font-weight:normal}.menu .dropbutton{display:inline-block}.menu .dropbutton a.dropdown{font-size:75%;min-width:0}html.ie11 .menu .dropbutton a.dropdown:before{font-size:80%}.menu .dropbutton a.dropdown span.inner{display:none}.menu .dropbutton a:first-child{padding-right:0}.menu.pagenav{display:flex;justify-content:space-between;align-items:center;padding:0 !important;font-size:100%}.menu.pagenav a{flex-grow:1;display:inline-block;min-width:2rem !important;height:35px;color:#7b7b77}.menu.pagenav a:before{margin:0;display:inline;float:none;line-height:35px}.menu.pagenav .pagenav-text{overflow:hidden;text-overflow:ellipsis;color:#7b7b77;flex-grow:4;font-size:80%}.menu.pagenav input{width:3rem;max-width:5rem;font-size:90%;text-align:center;max-height:1.6rem;margin:0 .2rem}html.layout-phone .menu.pagenav input{display:none}.menu.pagenav span.inner{display:none}.menu.pagenav.pagenav-list{cursor:pointer;background-color:#fbfbfb;border-bottom:1px solid #f8f7f4}.menu.pagenav.pagenav-list a{flex-grow:unset}.menu.pagenav.pagenav-list .pagenav-text{text-align:left;font-size:100%}.menu.pagenav.pagenav-list+.navlist{background-color:#fbfbfb}.menu.pagenav.pagenav-list.expanded+.navlist{border-bottom:1px solid #d4dbde}.menu.content-frame-navigation.hide-nav-buttons a.next,.menu.content-frame-navigation.hide-nav-buttons a.prev{display:none}.menu .listselectors{max-width:100%;display:flex;justify-content:space-around}.menu .buttons{display:block}.menu .buttons button{display:block;float:left;cursor:pointer;color:#7b7b77;background-color:transparent;border:0;padding:0;height:58px;line-height:58px;width:2.5em}.menu .buttons button:before{font-size:1.75rem}.popover .menu li{display:block;height:auto;text-align:left}.popover .menu li.spacer{display:none}.popover .menu li:last-child{border:0}.popover .menu li.separator{line-height:1.5rem !important;font-size:.75rem !important;padding:0 .5rem;color:#7b7b77;background-color:#f8f7f4}.popover .menu li.separator label{margin:0}.popover .menu li a{height:unset;max-width:100%;width:100%;line-height:35px;display:block;padding:0 .5rem;text-align:left}.popover .menu li a:before{line-height:inherit;height:inherit !important;margin-right:.5rem !important;float:left !important;width:1.18em !important;min-width:1.18em}.popover .menu li a:not(.disabled):hover{color:#fff;background-color:#f4c200}.popover .menu li aaria-haspopup{display:flex}.popover .menu li aaria-haspopup:after{color:#7b7b77;font-size:.9em;margin:0 0 0 .2em;min-width:1.18em;content:"\f054"}html.layout-small .popover .menu li aaria-haspopup:after{margin:0 .2em}.popover .menu li aaria-haspopup.dropdown:after{color:#4f4f4f;margin:0 .6em !important}.popover .menu li aaria-haspopup:hover:after{color:#fff}.popover .menu li aaria-haspopup>span{overflow:hidden;text-overflow:ellipsis;flex:1}.popover .menu li span.inner{font-size:100%}.popover .menu .dropbutton{display:flex}.popover .menu .dropbutton a:first-child{overflow:hidden;text-overflow:ellipsis;flex:1}.popover .menu .dropbutton:not(.disabled):hover{background-color:#f6f6f6}.popover .menu .dropbutton a.dropdown{width:3.5rem;padding:0 .5em;background-color:#f6f6f6}.popover .menu .dropbutton a.dropdown:hover{background-color:#f4c200}.popover .menu .dropbutton a.dropdown:before,.popover .menu .dropbutton a.dropdown span.inner{display:none}.popover .menu.no-icon a:before{display:none}@media screen and (min-width:769px){.content-frame-navigation{display:none !important}.header a.button.icon:not(.disabled):focus,.header a.button.icon:not(.disabled):hover{background-color:#f7f5f2;outline:0}.header a.button.icon:before{margin:0}}@media screen and (max-width:768px){.menu.footer{justify-content:space-around !important}.menu.footer>*{flex-grow:1}.menu.footer .buttons{display:flex;justify-content:space-evenly}.menu.footer .listselectors>*{flex-grow:1}.menu.listing a{color:#4f4f4f}}a.toolbar-button{cursor:pointer}@media screen and (min-width:1201px){a.toolbar-button{line-height:1.5;padding:.45rem}a.toolbar-button:before{float:none !important;height:1.75rem !important;line-height:1.5;width:auto !important}a.toolbar-button span.inner{display:inline !important;font-weight:normal;font-size:90%}}.menu a.mail:before{content:"\f0e0"}.menu a.contacts:before{content:"\f0c0"}.menu a.options:before{content:"\f1de"}.menu a.settings:before{content:"\f013"}.menu a.theme.light:before{content:"\f185"}.menu a.theme.dark:before{content:"\f186"}.menu a.help:before{content:"\f1cd"}.menu a.logout:before{content:"\f011"}.menu a.about:before{content:"\f128"}.menu a.refresh:before{content:"\f021"}.menu a.compose:before{content:"\f044"}.menu a.calendar:before{content:"\f073"}.menu a.tasklist:before{content:"\f0ae"}.menu a.files:before{content:"\f07b"}.menu a.notes:before{content:"\f249"}.menu a.chat:before{content:"\f086"}.menu a.actions:before{content:"\f013"}.menu a.addressbook:before{content:"\f007"}.menu a.archive:before{content:"\f187"}.menu a.assigngroup:before{content:"\f234"}.menu a.attach:before,.menu a.vcard:before{content:"\f0c6"}.menu a.next:before{content:"\f061"}.menu a.prev:before,.menu a.back:before{content:"\f060"}.menu a.check:before{content:"\00a0"}.menu a.check.selected:before{content:"\f00c"}.menu a.closewin:before{content:"\f410"}.menu a.collapse:before{content:"\f107"}.menu a.copy:before{content:"\f0c5"}.menu a.create:before{content:"\f0fe"}.menu a.delete:before{content:"\f2ed"}.menu a.download:before,.menu a.download.eml:before,.menu a.download.maildir:before,.menu a.download.mbox:before{content:"\f019"}.menu a.dropdown:before{content:"\f0d7"}.menu a.edit:before{content:"\f303"}.menu a.encrypt:before,.menu a.enigma:before{content:"\f023"}.menu a.encrypt.sign:before{content:"\f023"}.menu a.expand:before{content:"\f105"}.menu a.expand.all:before{content:"\f103"}.menu a.expand.none:before{content:"\f102"}.menu a.export:before,.menu a.export.all:before,.menu a.export.selection:before{content:"\f019"}.menu a.expunge:before{content:"\f78c"}.menu a.extwin:before{content:"\f360"}.menu a.filterlink:before{content:"\f0b0"}.menu a.firstpage:before{content:"\f100"}.menu a.nextpage:before{content:"\f105"}.menu a.prevpage:before{content:"\f104"}.menu a.lastpage:before{content:"\f101"}.menu a.flag:before,.menu a.select.flagged:before{content:"\f024";font-weight:900}.menu a.unflag:before{content:"\f024";font-weight:400}.menu a.folders:before{content:"\f07b"}.menu a.forward:before,.menu a.forward.attachment:before,.menu a.forward.bounce:before,.menu a.forward.inline:before{content:"\f064"}.menu a.import:before,.menu a.upload:before{content:"\f093"}.menu a.insertresponse:before{content:"\f075"}.menu a.junk:before{content:"\f7e4"}.menu a.notjunk:before{content:"\f01c"}.menu a.markmessage:before{content:"\f02b"}.menu a.more:before{content:"\f141"}.menu a.move:before{content:"\f07c"}.menu a.print:before{content:"\f02f"}.menu a.properties:before{content:"\f15b"}.menu a.purge:before{content:"\f12d"}.menu a.qrcode:before{content:"\f029"}.menu a.read:before{content:"\f2b6";font-weight:400}.menu a.unread:before,.menu a.expand.unread:before,.menu a.select.unread:before{content:"\f0e0";font-weight:900}.menu a.recipient:before{content:"\f0e0";font-weight:400}.menu a.refresh:before{content:"\f021"}.menu a.remove:before{content:"\f12d"}.menu a.removegroup:before{content:"\f235"}.menu a.rename:before{content:"\f303"}.menu a.reply:before{content:"\f3e5"}.menu a.reply-all:before,.menu a.reply.all:before,.menu a.reply.list:before{content:"\f122"}.menu a.responses:before{content:"\f075"}.menu a.rotate:before{content:"\f2f9"}.menu a.save:before{content:"\f0c7";font-weight:400}.menu a.search:before{content:"\f002"}.menu a.search.delete:before{content:"\f2ed"}.menu a.select:before{content:"\f245"}.menu a.select.all:before{content:"\f069"}.menu a.select.invert:before{content:"\f14a"}.menu a.select.none:before{content:"\f00d";font-weight:900}.menu a.select.page:before{content:"\f0c9";font-weight:900}.menu a.selection:before{content:"\f14a" !important;font-weight:400 !important}.menu a.send:before{content:"\f1d8"}.menu a.showurl:before{content:"\f0c1"}.menu a.signature:before{content:"\f5b7"}.menu a.source:before{content:"\f1c9"}.menu a.spellcheck:before{content:"\f891"}.menu a.status:before{content:"\f0eb";font-weight:400}.menu a.submit:before{content:"\f00c"}.menu a.info:before{content:"\f05a"}.menu a.threads:before{content:"\f086"}.menu a.zoomin:before{content:"\f00e"}.menu a.zoomout:before{content:"\f010"}.searchbar{height:36px;min-height:36px;line-height:36px;background-color:#fbfbfb;border-bottom:1px solid #f8f7f4;display:flex;align-items:center;overflow:hidden;position:relative}.searchbar form{flex:1;display:flex}.searchbar form:before{content:"\f002";height:36px;color:#7b7b77;margin:0 0 0 .75rem}.searchbar input{width:100%;border:0;background:transparent;padding:.5rem;line-height:normal;outline:0}.searchbar input::-ms-clear{display:none}.searchbar a{color:#7b7b77}.searchbar a:before{width:2rem;height:36px;margin:0}.searchbar a.options:before{content:"\f107"}.searchbar a.reset:before{content:"\f00d";font-size:1rem}.searchbar a.unread:before{content:"\f0e0";font-weight:900}.searchbar a.reset,.searchbar a.search{display:none}.searchbar a.selected{color:#41b849}.searchbar span.inner{display:none}.searchbar.active a.reset{display:inline}.searchbar.open a.options:before{content:"\f106"}.searchoptions button.search{width:100%}.searchoptions ul.proplist+div{margin-top:1rem}.searchoptions .input-group:not(:last-child){margin-bottom:.5rem}.searchoptions .input-group .input-group-prepend{width:30%}.searchoptions .input-group label{width:100%}.searchoptions .formbuttons{display:block !important}#taskmenu a{display:block;float:none}@media screen and (max-width:480px){#taskmenu{z-index:30001;overflow-x:hidden}#taskmenu a{max-width:unset;padding:0 .5em;margin-top:1px;text-align:left;line-height:47px;height:47px;border-bottom:1px solid #f8f7f4 !important;color:#4f4f4f;font-size:1.2rem}#taskmenu a:before{float:left !important;width:1.2em !important;margin-right:.5rem !important}#taskmenu span.inner{font-size:100%}}@media screen and (min-width:481px){#taskmenu a{color:#71777d;padding:.45rem 0;min-width:unset}#taskmenu a.selected{color:#e1e2e3;background:#505e6b}#taskmenu a.selected:hover{color:#fff;background:#505e6b}#taskmenu a:hover{color:#e1e2e3;background:#505e6b}#taskmenu .special-buttons{position:absolute;bottom:0;left:0;background-color:#3a444e}#taskmenu .action-buttons a{color:#f4c200;background:transparent}#taskmenu .action-buttons a:hover{color:#f4c200;background:#505e6b}#taskmenu a.logout{color:#ff5552 !important}#taskmenu a.logout:hover{color:#ff5552 !important}}@media screen and (min-width:481px) and (max-width:1024px){#taskmenu a{width:42px;height:42px;font-size:1.2rem;padding:0}#taskmenu a:before{line-height:42px}#taskmenu span.inner{display:none}}@media screen and (min-width:1025px){#taskmenu a{width:78px;font-size:1rem}#taskmenu a:before{float:none}#taskmenu a:focus{background-color:#505e6b}#taskmenu span.inner{padding:0 .1em}}.ui.alert{margin:0;margin-bottom:.2rem;opacity:.95;width:100%;padding:.75em;color:#4f4f4f;border:1px solid transparent;background-color:rgba(244,194,0,0.05);display:flex;align-items:center}@media screen and (max-width:480px){.ui.alert{border:0}}.ui.alert span{margin:auto 0}.ui.alert>i.icon{line-height:1;color:#4d5f66;margin:auto 0}.ui.alert>i.icon:before{content:"\f05a";margin-right:.6rem}.ui.alert .btn{margin-left:.5rem}.ui.alert.loading{color:#848484}.ui.alert.loading>i.icon:before{content:"\f1ce";-webkit-animation:spinner-border 1.5s infinite linear;animation:spinner-border 1.5s infinite linear;width:1em}.ui.alert.alert-success>i.icon:before{content:"\f058";color:#41b849}.ui.alert.alert-warning>i.icon:before{content:"\f071";color:#ffd452}.ui.alert.alert-danger>i.icon:before{content:"\f06a";color:#ff5552}.ui.alert.vcardattachment>i.icon:before{content:"\f2bb"}.ui.alert.enigmaattachment>i.icon:before{content:"\f084"}.ui.alert.signed>i.icon:before,.ui.alert.encrypted>i.icon:before{content:"\f023"}.ui.alert.chat>i.icon:before{content:"\f075"}.ui.alert .boxbuttons{white-space:nowrap}.ui.alert .boxbuttons .btn{overflow:hidden;text-overflow:ellipsis;max-width:220px}@media screen and (max-width:480px){.ui.alert .boxbuttons{display:flex;flex-direction:column}.ui.alert .boxbuttons .btn{max-width:160px}.ui.alert .boxbuttons .btn:not(:first-child){margin-top:.25rem}}.ui.alert.aligned-buttons{display:flex}.ui.alert.aligned-buttons span{flex:1}.ui.alert a:not(.btn){color:#f4c200;font-weight:normal}.ui.alert h3{font-weight:bold;font-size:1.2rem}.ui.alert p{margin:1rem 0}.ui.alert.boxerror,.ui.alert.boxconfirmation,.ui.alert.boxinformation,.ui.alert.boxwarning{padding:.5em;border-radius:0}.ui.alert.boxerror i.icon,.ui.alert.boxconfirmation i.icon,.ui.alert.boxinformation i.icon,.ui.alert.boxwarning i.icon{font-size:1.5em !important}.ui.alert.boxerror{background-color:rgba(255,85,82,0.2)}.ui.alert.boxinformation{background-color:rgba(244,194,0,0.2)}.ui.alert.boxconfirmation{background-color:rgba(65,184,73,0.2)}.ui.alert.boxwarning{background-color:rgba(255,212,82,0.2)}.ui.alert+table{margin-top:1em}#messagestack{position:absolute;bottom:.5em;right:.7em;z-index:105;width:320px;height:auto;max-height:85%}@media screen and (max-width:480px){#messagestack{left:0;right:0;bottom:0;width:auto}}#messagestack div{background-color:#4f4f4f;color:#fff}@media screen and (max-width:480px){#messagestack div{margin:0;border-radius:0;min-height:4.2rem}}#messagestack div.voice{position:absolute;top:-1000px}#messagestack div i.icon{font-size:1.5em !important}#messagestack div>i.icon:before{color:#fff}#messagestack div:last-child{margin-bottom:0}#messagestack .loading{background-color:#848484}#messagestack .alert-info.information{background-color:#f4c200}#messagestack .alert-success{background-color:#41b849}#messagestack .alert-warning{background-color:#ffd452;color:#4f4f4f}#messagestack .alert-warning>i.icon:before{color:#4f4f4f}#messagestack .alert-danger{background-color:#ff5552}#messagestack a{color:inherit !important;text-decoration:underline;cursor:pointer}.listing tbody td,.listing li{border-bottom:1px solid #f8f7f4;cursor:default;font-weight:normal;line-height:35px}.listing tbody td,.listing li a{padding:0 .5rem;white-space:nowrap;vertical-align:middle;color:#4f4f4f}.listing tbody td{overflow:hidden;text-overflow:ellipsis;outline:none}.listing tbody td a{color:#4f4f4f}.listing li a{display:block;text-decoration:none;cursor:default;width:100%}.listing li.selected,.listing tr.selected td{color:#4f4f4f;background-color:#fdf6d9}.listing td.selection{padding:0 0 0 .5em;width:2em;text-align:center}.listing td.selection>input{vertical-align:middle}.listing:not(.withselection) td.selection{display:none}.listing td.name{overflow:hidden;text-overflow:ellipsis}.listing td.action{padding:0 .5em;width:2em;text-align:center}.listing td.action:empty{width:0}.listing td.action a{display:block;overflow:hidden;text-decoration:none}.listing td.action a:before{margin:0;font-size:1rem}.listing td.action a.pushgroup:before{content:"\f054"}.listing li.droptarget>a,.listing tr.droptarget>td{background-color:#ffffcc}.listing li.disabled,.listing tr.disabled td{color:rgba(79,79,79,0.5)}.listing li>a.virtual,.listing li.virtual>a{opacity:.4}.listing span.secondary{color:#7b7b77}html:not(.touch) .listing li>a,html:not(.touch) .listing tbody tr>td:first-child,html:not(.touch) .listing:not(.withselection) tbody tr>td.selection+td{border-left:2px solid transparent}html:not(.touch) .listing li>a:focus,html:not(.touch) .listing.focus tbody tr.focused>td:first-child,html:not(.touch) .listing.focus:not(.withselection) tbody tr.focused>td.selection+td{border-left:2px solid #ffdd5b;outline:0}table.listing{width:100%;table-layout:fixed;border-spacing:0;border-collapse:unset}ul.listing{margin:0;padding:0}ul.listing>ul{padding:0}ul.listing li{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;position:relative;list-style:none}ul.listing li ul{border-top:1px solid #f8f7f4;padding-left:1.5em}ul.listing li ul li:last-child{border-bottom:none}ul.listing li .custom-switch{position:absolute;padding:0;top:0;right:0;height:35px;vertical-align:middle}ul.listing li .custom-switch .custom-control-label:before,ul.listing li .custom-switch .custom-control-label:after{margin-top:.4rem}html.touch ul.listing li .custom-switch .custom-control-label:before,html.touch ul.listing li .custom-switch .custom-control-label:after{margin-top:.75rem}html.touch ul.listing li .custom-switch{height:47px}ul.listing.simplelist li{padding:0 .5rem}.listing-info{position:absolute;top:50%;left:50%;transform:translate(-50%, -50%);width:80%;text-align:center;font-weight:bold;color:#7b7b77}html.touch .listing:not(.toolbar) li,html.touch .listing tbody td{line-height:47px;font-size:1.2rem}html.touch li inputtype=checkbox{height:47px}html.touch td.selection{padding:0;width:3em}@media screen and (max-width:1200px){.listing.selection-large-only li.selected{color:#4f4f4f;background-color:transparent}}.listing.iconized li a:before{height:2em;margin-right:.5rem}.listing.iconized li.preferences>a:before{content:"\f1de"}.listing.iconized li.folders>a:before{content:"\f07b"}.listing.iconized li.responses>a:before{content:"\f075"}.listing.iconized li.identities>a:before{content:"\f2c2"}.listing.iconized li.password>a:before{content:"\f023"}.listing.iconized li.addressbook a:before{content:"\f2b9";font-weight:400}.listing.iconized li.contactgroup a:before{content:"\f0c0";font-weight:900}.listing.iconized li.contactsearch a:before{content:"\f002"}.listing.iconized li.filter>a:before{content:"\f0b0"}.listing.iconized li.vacation>a:before{content:"\f017";font-weight:400}.listing.iconized li.forward>a:before{content:"\f14d"}.listing.iconized li.enigma.keys>a:before{content:"\f084"}.listing.iconized li.info>a:before,.listing.iconized li.userinfo>a:before{content:"\f05a"}.listing.iconized li.twofactorauth>a:before{content:"\f2f6"}.listing.iconized li a.help:before{content:"\f1cd"}.listing.iconized li a.about:before{content:"\f059";font-weight:400}.listing.iconized li a.license:before{content:"\f3ed"}.listing.iconized li>i:before{content:"\f007";margin-left:.5rem}.listing.iconized li.group>i:before{content:"\f0c0"}html.ie11 .listing.iconized li a:before{font-size:1.25rem}.listing.iconized tr td:before{margin-right:.5rem}.listing.iconized tr.contact.person td.name:before{content:"\f007"}.listing.iconized tr.contact.group td.name:before{content:"\f0c0"}.listing.iconized tr.general>td.section:before{content:"\f108"}.listing.iconized tr.mailbox>td.section:before{content:"\f0e0";font-weight:400}.listing.iconized tr.mailview>td.section:before{content:"\f01c"}.listing.iconized tr.compose>td.section:before{content:"\f1d8"}.listing.iconized tr.addressbook>td.section:before{content:"\f0c0"}.listing.iconized tr.folders>td.section:before{content:"\f07b";font-weight:400}.listing.iconized tr.server>td.section:before{content:"\f233"}.listing.iconized tr.encryption>td.section:before{content:"\f023"}.listing.iconized tr.calendar>td.section:before{content:"\f133"}.listing.iconized tr.chat>td.section:before{content:"\f086"}.listing.iconized.selectable li a:before{content:""}.listing.iconized.selectable li a.selected:before{content:"\f00c"}.popupmenu .listing li>a{border-left:0}.popupmenu .listing li>a:not(.disabled):hover{color:#fff;background-color:#f4c200}.popupmenu .listing li.selected{color:#fff;background-color:#f4c200}.popupmenu .listing td{overflow:hidden;text-overflow:ellipsis}ul.treelist li div.treetoggle{position:absolute;top:0;left:0;width:1.5em;cursor:pointer;background-color:transparent}ul.treelist li div.treetoggle:before{content:"\f105";margin-left:.25em;font-size:1em}ul.treelist li div.treetoggle.expanded:before{content:"\f107"}ul.treelist li>a{overflow:hidden;text-overflow:ellipsis;padding-left:1.5em}ul.treelist li.selected{color:inherit;background-color:transparent}ul.treelist li.selected>div>a,ul.treelist li.selected>a{color:#4f4f4f;background-color:#fdf6d9}ul.treelist li ul{padding:0}ul.treelist li ul li{padding-left:0}ul.treelist li ul li a{padding-left:3em}ul.treelist li ul li div.treetoggle{left:1.5em}ul.treelist li ul li li a{padding-left:4.5em}ul.treelist li ul li li div.treetoggle{left:3em}ul.treelist li ul li li li a{padding-left:6em}ul.treelist li ul li li li div.treetoggle{left:4.5em}ul.treelist li ul li li li li a{padding-left:7.5em}ul.treelist li ul li li li li div.treetoggle{left:6em}ul.treelist li ul li li li li li a{padding-left:9em}ul.treelist li ul li li li li li div.treetoggle{left:7.5em}ul.treelist.notree div.treetoggle{display:none}ul.treelist.notree li>a{padding-left:.5em}.folderlist li.mailbox.unread>a{padding-right:2.8em;font-weight:bold}.folderlist li.mailbox .unreadcount{position:absolute;top:0;right:0;min-width:2em;line-height:1.4rem;margin:7.7px;padding:0 .3em;border-radius:.4em;background:#f4c200;color:#fff;text-align:center;font-weight:bold}html.touch .folderlist li.mailbox .unreadcount{line-height:2rem;margin:9.5px}.folderlist li.mailbox.recent>a{color:#8e7100}.folderlist li.mailbox.recent>a>.unreadcount{background:#f4c200;color:#fff}.folderlist li.mailbox.root{display:none !important}.folderlist li a:before{content:"\f07b";font-weight:400;margin-right:.5rem}.folderlist li.inbox>a:before{content:"\f01c";font-weight:900}.folderlist li.trash a:before{content:"\f2ed";font-weight:900}.folderlist li.trash.empty>a:before{content:"\f2ed";font-weight:400}.folderlist li.drafts a:before{content:"\f303";font-weight:900}.folderlist li.sent a:before{content:"\f1d8";font-weight:900}.folderlist li.junk a:before{content:"\f7e4";font-weight:900}.folderlist li.archive>a:before{content:"\f187";font-weight:900}.folderlist li.ns-shared>a:before{content:"\f1e0";font-weight:900}.folderlist li.ns-other>a:before{content:"\f500";font-weight:900}.folderlist.menu a:before{margin-left:.5em}.messagelist>thead,.messagelist .branch,table.fixedcopy{display:none}.messagelist td{border-left:0;width:2em;vertical-align:top;font-size:1rem !important}.messagelist td.subject{width:100%;padding-right:0;display:flex;flex-wrap:wrap}.messagelist td.subject a{text-decoration:none;cursor:default}.messagelist td.subject span{line-height:2em}.messagelist td.subject span.size,.messagelist td.subject span.date{font-size:90%;color:#7b7b77}.messagelist td.subject span.fromto{overflow:hidden;text-overflow:ellipsis;flex:1;font-size:90%;color:#7b7b77;padding-left:1.5em;padding-right:.5rem}.messagelist td.subject span.subject{overflow:hidden;text-overflow:ellipsis;width:100%;user-select:none}.messagelist td.threads{padding:0 0 0 .25rem;width:1.5em}.messagelist td.flags{width:2.5em}.messagelist td.flags>span{height:1.7em;line-height:1.7em;display:block}.messagelist td.flags>span.flag{cursor:pointer}.messagelist tr.flagged td,.messagelist tr.flagged td.subject span.subject a,.messagelist tr.flagged td.subject span.date,.messagelist tr.flagged td.subject span.fromto{color:#ff5552}.messagelist tr.deleted td,.messagelist tr.deleted td.subject span.subject a,.messagelist tr.deleted td.subject span.date,.messagelist tr.deleted td.subject span.fromto{color:rgba(79,79,79,0.5)}.messagelist tr.unread td.subject span.subject{font-weight:bold}.messagelist tr.unroot td.subject a{text-decoration:underline}.messagelist tr.thread td.threads div:before{content:"\f105";cursor:pointer;width:1em}.messagelist tr.thread.expanded td.threads div:before{content:"\f107"}.messagelist td.subject span.msgicon.status:before{content:"\f111";cursor:pointer;font-size:.4rem;width:1.1rem;height:2rem}.messagelist td.subject span.msgicon.status.unread:before{content:"\f111";color:#ffd452;font-size:.5rem}.messagelist td.subject span.msgicon.status.unreadchildren:before{content:"\f111";font-weight:400;font-size:.5rem}.messagelist td.subject span.msgicon.status.replied:before{content:"\f3e5";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.forwarded:before{content:"\f064";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.replied.forwarded:before{content:"\f3e5";font-weight:900;font-size:1rem}.messagelist td.subject span.msgicon.status.replied.forwarded:after{content:"\f064";font-weight:900;font-size:1rem;opacity:.5;margin:0 -0.1em 0 -1.25em}.messagelist tr.deleted td.subject span.msgicon.status:before{content:"\f05e" !important;font-weight:900 !important;font-size:1rem}.messagelist tr.deleted td.subject span.msgicon.status:after{display:none !important}.messagelist span.attachment span{color:rgba(123,123,119,0.75)}.messagelist span.attachment span:before{margin:0;content:"\f0c6"}.messagelist span.attachment span.report:before{content:"\f15c";font-weight:400}.messagelist span.attachment span.encrypted:before{content:"\f023"}.messagelist span.attachment span.vcard:before{content:"\f007";font-weight:400}.messagelist span.flagged:before{content:"\f024"}.messagelist tr.flaggedroot:not(:hover) span.unflagged:before{content:"\f024";color:rgba(123,123,119,0.75)}.messagelist tr:hover span.unflagged:before{content:"\f024";font-weight:400}.messagelist span.size{display:none}.messagelist tr:hover span.date{display:none}.messagelist tr:hover span.size{display:inline}.messagelist.sort-size span.date{display:none}.messagelist.sort-size span.size{display:inline}.messagelist.sort-size tr:hover span.date{display:inline}.messagelist.sort-size tr:hover span.size{display:none}html.layout-phone .messagelist tr,html.touch .messagelist tr{position:relative;display:flex}html.layout-phone .messagelist td.selection,html.touch .messagelist td.selection,html.layout-phone .messagelist td.threads,html.touch .messagelist td.threads{line-height:3.8em}html.layout-phone .messagelist td.flags,html.touch .messagelist td.flags{position:absolute;top:.25rem;right:0;bottom:0;background-color:transparent}html.layout-phone .messagelist td.flags .flag,html.touch .messagelist td.flags .flag{visibility:hidden}html.layout-phone .messagelist td.subject,html.touch .messagelist td.subject{padding-right:.5em}html.layout-phone .messagelist td.subject .subject,html.touch .messagelist td.subject .subject{padding-right:1.5rem}.contactlist .contact.readonly td{font-style:italic}.contactlist td.contact:before{content:"\f007"}.contactlist td.contactgroup:before{content:"\f0c0"}.contactlist span.email{display:inline;color:#7b7b77;font-style:italic;margin-left:.5em}.contactlist li a:before{margin-right:.5rem}.contactlist li a.addressbook::before{content:"\f2b9";font-weight:400}.contactlist li a.contactgroup::before{content:"\f0c0";font-weight:900}.attachmentslist{padding:0;margin:0;background-color:#fcfcfc;border:1px solid #f4f4f4}.attachmentslist:empty{padding:0;border:0}.attachmentslist li{list-style:none;display:inline-flex;white-space:nowrap;line-height:2rem;padding:0 .25em;max-width:100%}.attachmentslist li:before{content:"\f15b";font-weight:400;height:2rem;margin:0}.attachmentslist li.txt:before,.attachmentslist li.text:before{content:"\f15c";font-weight:400}.attachmentslist li.pdf:before{content:"\f1c1";font-weight:400}.attachmentslist li.odt:before,.attachmentslist li.doc:before,.attachmentslist li.docx:before,.attachmentslist li.msword:before{content:"\f1c2";font-weight:400}.attachmentslist li.ods:before,.attachmentslist li.xls:before,.attachmentslist li.xlsx:before,.attachmentslist li.msexcel:before{content:"\f1c3";font-weight:400}.attachmentslist li.rar:before,.attachmentslist li.zip:before,.attachmentslist li.gz:before{content:"\f1c6";font-weight:400}.attachmentslist li.image:before,.attachmentslist li.jpg:before,.attachmentslist li.jpeg:before,.attachmentslist li.png:before{content:"\f1c5";font-weight:400}.attachmentslist li.mp3:before,.attachmentslist li.audio:before{content:"\f1c7";font-weight:400}.attachmentslist li.m4p:before,.attachmentslist li.video:before{content:"\f1c8";font-weight:400}.attachmentslist li.vcard:before{content:"\f2bb";font-weight:400}.attachmentslist li.html:before{content:"\f1c9";font-weight:400}.attachmentslist li.odp:before,.attachmentslist li.otp:before,.attachmentslist li.ppt:before,.attachmentslist li.pptx:before,.attachmentslist li.ppsx:before,.attachmentslist li.vnd.mspowerpoint:before{content:"\f1c4";font-weight:400}.attachmentslist li a{text-decoration:none;line-height:2rem;height:2rem}.attachmentslist li a.cancelupload:before,.attachmentslist li a.delete:before{content:"\f2ed";line-height:2rem;height:2rem;margin:0}.attachmentslist li a.dropdown:before{margin:0}.attachmentslist li.uploading:before{-webkit-animation:spinner-border 1.5s infinite linear;animation:spinner-border 1.5s infinite linear;content:"\f1ce";font-weight:900}.attachmentslist li a.filename{display:flex;overflow:hidden;padding:0 .2em}.attachmentslist li .attachment-name{overflow:hidden;text-overflow:ellipsis;color:#4f4f4f}.attachmentslist li .attachment-size{color:#7b7b77;padding-left:.25em}.keylist{padding:0;list-style:none}.keylist li{line-height:2}.keylist li:before{content:"\f084";line-height:1.5}#identities-table td.mail:before{content:"\f2c2"}#responses-table td.name:before{content:"\f075"}#filterslist td.name:before{content:"\f0b0"}#filtersetslist td.name:before{content:"\f15c"}#subscription-table li.mailbox a{padding-right:2.5rem}#uploadform{display:none}form.smart-upload,input.smart-upload{visibility:hidden;width:1px;height:1px;opacity:0}.propform:not(.popupmenu){width:100%}.propform .form-check td:not(.title)>label{display:block;margin:0;line-height:2rem}.propform .form-check td:not(.title)>label label{margin-right:.5rem}.propform td.datetime{display:flex}.propform td.datetime input:first-child{margin-right:.5rem}.propform td.datetime input:last-child{width:75%}.propform td.rowbuttons{width:1%;white-space:nowrap;vertical-align:top}.propform td.rowbuttons span{display:none}.propform td.rowbuttons a{padding:0;line-height:2.3rem;height:2.3rem;font-size:1rem}.propform td.rowbuttons a:before{content:"\f067";vertical-align:unset}@media screen and (min-width:577px){.propform td.rowbuttons a:before{margin:0 !important}}.propform td.rowbuttons a.delete:before{content:"\f2ed"}.propform td.rowbuttons a.advanced:before{content:"\f013"}.propform td.rowbuttons a:not(:last-child){margin-right:.25rem}.propform td.rowactions{width:1%;vertical-align:top}.propform td.rowactions .form-control{width:auto}.propform td.rowtargets{vertical-align:top}.propform td.rowtargets .composite input,.propform td.rowtargets .composite textarea,.propform td.rowtargets .composite select,.propform td.rowtargets .composite .multi-input,.propform td.rowtargets .composite .input-group{margin-bottom:.5rem}.propform td.rowtargets .composite .input-group input,.propform td.rowtargets .composite .input-group textarea,.propform td.rowtargets .composite .input-group select,.propform td.rowtargets .composite .input-group .multi-input{margin-bottom:0}.propform td.rowtargets .composite br{display:block}.propform td.rowtargets .input-group{margin-bottom:.25rem}.propform td.rowtargets .input-group *:first-child.input-group-prepend{text-align:left;min-width:7.5em}.propform td.rowtargets .input-group *:first-child.input-group-prepend>*{width:100%}.propform td.rowtargets>.advanced{margin-top:.25rem}.propform td.title{padding-top:0;padding-bottom:0}.propform td>.flexbox{display:flex}.propform td>.flexbox>.multi-input{width:100%;margin-left:.25rem}.propform.grouped.readonly legend{margin:0}.propform.grouped.readonly .row.input-group{margin-bottom:0 !important}.propform.grouped.readonly label{min-width:7rem;background-color:transparent;border:0;border-radius:0}.propform.grouped .row.input-group{margin-bottom:.5rem;flex-wrap:nowrap}.propform.grouped .row.input-group>*:first-child{overflow:hidden;text-overflow:ellipsis;min-width:8rem}.propform.grouped .row.input-group>*:first-child:not(select){padding:0}@media screen and (max-width:480px){.propform.grouped .row.input-group>*:first-child{min-width:6rem;width:6rem;flex-grow:unset}}.propform.grouped .row.input-group>*:first-child label{width:100%}.propform.grouped .row.input-group>*:nth-child(2){flex-grow:30}.propform.grouped .row.input-group:last-child{margin-bottom:1rem}.propform.grouped .row.input-group select{text-align:left}.propform.grouped .row.input-group.composite select{height:auto}.propform.grouped .row.input-group .content{padding:0;display:flex;flex-wrap:wrap;border-radius:0;border-left-color:transparent}.propform.grouped .row.input-group .content input{border-radius:0;border-color:transparent}.propform.grouped .row.input-group .content .ff_street{width:100%}.propform.grouped .row.input-group .content .ff_locality{width:75%}.propform.grouped .row.input-group .content .ff_zipcode{width:25%}.propform.grouped .row.input-group .content .ff_country,.propform.grouped .row.input-group .content .ff_region{width:50%}.propform.grouped .form-control-plaintext{flex-grow:1;border:0}.propform .addfield{margin:0}.propform .addfield select{width:8rem;margin-top:.5rem}.propform .form-text{font-size:90%;color:#7b7b77}.propform.row.form-group{margin-left:0;margin-right:0}.propform.row.form-group label,.propform.row.form-group div{padding-left:0;padding-right:0}.propform select+select,.propform select+.input-group{padding-top:.5rem}.propform.text-only{margin-bottom:.25rem}.propform.text-only tr{margin:0}.propform.text-only label{padding-bottom:0 !important}@media screen and (max-width:576px){.propform.text-only tr{display:table-row}.propform.text-only td{width:auto}.propform.text-only td:first-child{width:33%}.propform.text-only :not(tr).form-group.row .col-form-label{width:33%}.propform.text-only :not(tr).form-group.row>:last-child{width:67%}}@media screen and (max-width:576px){.propform table.compact-table .rowactions>select,.propform table.compact-table .flexbox>select{width:100%}.propform table.compact-table tr{display:flex;flex-direction:column}.propform table.compact-table tr td{width:100%;padding:.25rem 0 0 0}.propform table.compact-table tr td.rowbuttons{text-align:right;padding-top:0}.propform table.compact-table tr td.rowbuttons a{margin-left:.5rem}.propform table.compact-table tr td.rowbuttons a>span{display:inline}}.propform fieldset:not(.tab-pane):nth-of-type(n+2),.formcontent fieldset:not(.tab-pane):nth-of-type(n+2){margin-top:1em}.propform legend,.formcontent legend{font-weight:bold;font-size:1.2em}.propform label,.formcontent label{-webkit-hyphens:auto;-ms-hyphens:auto;hyphens:auto;overflow:hidden;margin-bottom:0}fieldset.advanced>legend{width:auto;cursor:pointer}fieldset.advanced>legend:after{float:right;margin:0 0 0 .25rem;line-height:inherit;font-size:inherit;content:"\f106"}fieldset.advanced>legend.closed:after{content:"\f107"}@media screen and (max-width:576px){.formcontent .text-only .form-group:not(tr){margin-bottom:.25rem}.formcontent .text-only .form-group:not(tr) .col-form-label{width:33%}.formcontent .text-only .form-group:not(tr) .col-form-label+span{width:67%}html.iframe .formcontent>.propform{padding:.25rem}}html.ms .propform .row:not(.form-check)>td{display:flex;flex-wrap:wrap}@media screen and (min-width:576px){html.ms .propform .row.form-check>td{display:flex}}.formcontainer{display:flex;flex-direction:column;justify-content:flex-start;overflow-y:hidden !important}.formcontainer .formcontent{overflow-x:hidden;overflow-y:auto}.formcontainer .formbuttons{padding:.5rem 1rem}.formcontainer .formbuttons button{margin-right:.5rem}html.iframe.ipad .formcontainer .formbuttons,html.iframe.webkit.tablet .formcontainer .formbuttons{min-height:4rem}html.layout-small .formcontainer,html.layout-phone .formcontainer{display:initial;overflow-y:auto !important}html.layout-small .formcontainer .formcontent,html.layout-phone .formcontainer .formcontent{overflow:initial !important}html.layout-small .formcontainer .formbuttons,html.layout-phone .formcontainer .formbuttons{display:none}.formcontent:not(.popupmenu){padding:1rem}.formcontent .row{margin-right:0;margin-left:0}.formcontent .row .col,.formcontent .row .col-2,.formcontent .row .col-4,.formcontent .row .col-6,.formcontent .row .col-8,.formcontent .row .col-10,.formcontent .row .col-12,.formcontent .row .col-sm,.formcontent .row .col-sm-2,.formcontent .row .col-sm-4,.formcontent .row .col-sm-6,.formcontent .row .col-sm-8,.formcontent .row .col-sm-10,.formcontent .row .col-sm-12{padding:0}.formcontent .row .form-control-plaintext,.formcontent .row label.col-form-label{padding:5px 5px 5px 0}.formcontent .row .form-control-plaintext{padding-bottom:0;border:0}@media screen and (max-width:576px){.formcontent .row.form-group>td label{padding-bottom:0}}.formcontent .row.form-check{padding:0;display:flex;flex-wrap:nowrap}@media screen and (max-width:576px){.formcontent .row.form-check .col-6{max-width:100%;flex:auto}.formcontent .row.form-check>*:last-child{width:1%;min-width:2.6rem}.formcontent .row.form-check.with-link>*:last-child{min-width:8rem}}.formcontent .row.form-check .form-check-input{margin:.5rem 0}.formcontent .row.form-check .custom-switch+a{line-height:2;vertical-align:bottom}.formcontent .row.form-check td>label{padding-bottom:0}.formcontent .nav-tabs{margin-bottom:1rem}.formcontent .nav-tabs:empty{display:none}.formcontent .hint{font-style:italic;color:#7b7b77}.formcontent.raweditor{height:100%}.formcontent.raweditor form{height:100%}.formcontent.raweditor textarea{font-family:monospace;height:100%}.formcontent.raweditor .CodeMirror{border:1px solid #ced4da;border-radius:.3rem;height:100%;color:#4f4f4f}.formcontent.raweditor .CodeMirror-focused{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.formcontent.raweditor .CodeMirror-linebackground.line-error{background-color:#ff5552;opacity:.4}.formcontent.raweditor .errorGutter{width:.8em}@media screen and (max-width:320px){.formcontent .col-form-label{flex:auto;max-width:100%}.formcontent .col-6,.formcontent .col-8,.formcontent .col-10{flex:auto;max-width:100%}}.input-group .icon{text-decoration:none;padding:5px .5rem}.input-group .icon.input-group-text{min-width:2.4rem}.input-group .icon:before{margin:0 !important;line-height:1;font-size:1.1rem}.input-group .icon.user:before{content:"\f007"}.input-group .icon.pass:before{content:"\f023"}.input-group .icon.host:before{content:"\f015"}.input-group .icon.language:before{content:"\f0ac"}.input-group .icon.cancel:before{content:"\f00d"}.input-group .icon.delete:before{content:"\f2ed"}.input-group .icon.edit:before{content:"\f303"}.input-group .icon.add:before{content:"\f067"}.input-group .icon.add.recipient:before{content:"\f0c0"}.input-group .icon.search:before{content:"\f002"}.input-group .icon.filter:before{content:"\f0b0"}.input-group .icon.key:before{content:"\f084"}.input-group .icon .inner{display:none}.input-group a:focus{background-color:rgba(244,194,0,0.25);outline:0}.proplist{margin-bottom:0;padding:0}.proplist li{list-style-type:none;line-height:2rem;margin-bottom:.25rem;display:flex;align-items:center}.proplist li:last-child{margin-bottom:0}.proplist li inputtype=radio{margin-right:.5em}.proplist li inputtype=radio:disabled+label{opacity:.5}.proplist li label:not(.input-group-text){margin:0;line-height:2rem}.proplist li select{width:auto;display:inline}.checklist>div{line-height:2rem;display:block}.checklist .custom-control-label:before,.checklist .custom-control-label:after{margin:calc(2px * -1) 0 0 0}.checklist>div+br{display:none}.popup form.propform{padding:.25rem;overflow-x:hidden}.popupmenu.form.nolist{padding:0 .5rem}.popupmenu.form ul{list-style-type:none;padding:0;margin:0}.popupmenu.form li:not(.separator){padding:0 1rem}.popupmenu.form li:not(.separator) label{margin:0;line-height:35px}.popupmenu.form li:not(.separator) label input{margin-right:.5rem}.popupmenu.form input{vertical-align:middle}.popupmenu.form select{margin:.5rem 0}.popupmenu.form .buttons{text-align:center;padding:.5rem}.multi-input>.content{max-height:11.65em;overflow:hidden;overflow-y:auto;border-radius:.25rem;border:1px solid #ced4da}.multi-input>.content.focused{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.multi-input a.icon.reset:before{content:"\f2ed"}.multi-input input.form-control{padding-left:.75rem;height:auto}.multi-input input,.multi-input input:focus,.multi-input .input-group-text{border-radius:0;border:0;border-bottom:1px solid #ced4da;box-shadow:none}.multi-input .input-group-text{border-left:1px solid #ced4da}.multi-input .input-group-append{margin-left:0}.multi-input .input-group{margin:0 !important;flex-wrap:nowrap}.multi-input .input-group:last-child *{border-bottom:0}.multi-input+.btn{margin-top:.5rem}.multi-input.is-invalid>.content{border:1px solid #ff5552}.multi-input.is-invalid>.content.focused{border-color:#ff5552;box-shadow:0 0 0 .2rem rgba(255,85,82,0.25)}.multi-input.is-invalid>.invalid-feedback{display:inline-block;line-height:1.5}.file-upload{padding:1rem 1rem 12rem;margin:0 1rem .25rem 1rem;border-radius:.5rem;border:.2rem dashed #d4dbde}fieldset .file-upload{margin:0}.file-upload .upload-form{text-align:center;padding-bottom:1em}.file-upload .upload-form a.btn,.file-upload .upload-form button{margin-bottom:.25rem}.file-upload .hint{margin-bottom:.5rem;color:#7b7b77;text-align:center}.file-upload .attachmentslist{border:0;background:transparent}.file-upload .attachmentslist li{position:relative;display:flex;padding-right:1.5em;margin:.15em 0}.file-upload .attachmentslist li a.filename{flex:1}.file-upload .attachmentslist li a.delete,.file-upload .attachmentslist li a.cancelupload{position:absolute;right:.25em;width:auto}.file-upload .attachmentslist li a.dropdown{margin-right:.5em}.file-upload .attachmentslist li .inner{display:none}.file-upload.droptarget{padding-bottom:.5rem !important}.file-upload.droptarget:after{content:url("data:image/svg+xml;charset=utf-8,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%20960%20560%22%3E%0A%3Cpath%20fill%3D%22%23d4dbde%22%20d%3D%22M690%20245c0%209.2-3.5%2017.9-10.1%2024.9l-175%20175c-6.6%206.6-15.3%2010.1-24.9%2010.1-9.2%200-18.4-3.5-24.9-10.1l-175-175c-6.6-7-10.1-15.8-10.1-24.9%200-4.4.9-9.2%202.6-13.6C277.9%20218.3%20291%20210%20305%20210h87.5V35c0-19.2%2015.8-35%2035-35h105c19.2%200%2035%2015.8%2035%2035v175H655c14%200%2027.1%208.3%2032.4%2021.4%201.7%204.4%202.6%209.2%202.6%2013.6zm0%20245H270V350h-70v140c0%2038.5%2031.5%2070%2070%2070h420c38.5%200%2070-31.5%2070-70V350h-70v140z%22%2F%3E%0A%3C%2Fsvg%3E%0A");width:10rem;margin:5rem auto 0 auto;display:block}.file-upload.droptarget.active{border-color:#cec3b5}.file-upload.droptarget.hover{border-color:#cec3b5;background-color:#f7f5f2}.recipient-input{display:flex;flex-wrap:wrap;padding:0 .75rem 4px .75rem;list-style-type:none;cursor:text;height:auto}.recipient-input.focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.recipient-input .recipient{display:flex;position:relative;max-width:calc(50% - 3px);border:1px solid #ced4da;background-color:#f8f7f4;border-radius:.25em;padding:0 .25em;margin-top:4px;margin-right:.2em;white-space:nowrap;cursor:default}@media screen and (max-width:450px){.recipient-input .recipient{width:100%;max-width:100%}}.recipient-input .name{overflow:hidden;text-overflow:ellipsis;flex-grow:1;line-height:1.1;padding:3px;vertical-align:middle}.recipient-input .email{text-indent:-5000rem;display:inline-block;width:0}.recipient-input .quotes{position:absolute;width:0;opacity:0}.recipient-input a.button.icon{font-size:.75em;cursor:pointer;padding:0;color:#4f4f4f}.recipient-input a.button.icon:before{display:inline-block;width:1em;line-height:1.6}.recipient-input li{max-width:100%}.recipient-input li:not(.recipient){user-select:text}.recipient-input li.input{flex:1;min-width:100px}.recipient-input input{width:100%;background:transparent !important;border:0 !important;margin-top:4px;outline:0;line-height:1.5}.recipient-input input::-ms-clear{display:none}.tagedit-list{display:flex;flex-wrap:wrap;padding:0 .75rem 4px .75rem;margin:0;list-style-type:none;min-height:2.3rem}.tagedit-list+.placeholder{display:none}.tagedit-listtabindex="-1"{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.tagedit-list li.tagedit-listelement-new{margin-top:4px}.tagedit-list li.tagedit-listelement-new input{width:15px;background:transparent !important;border:0;outline:0;margin:0;padding:0;line-height:1.5}.tagedit-list li.tagedit-listelement-new input.tagedit-input-disabled{visibility:hidden}.tagedit-list li.tagedit-listelement-old{max-width:50%;border:1px solid #ced4da;background-color:#f8f7f4;border-radius:.25em;margin-top:4px;margin-right:.2em;white-space:nowrap}.tagedit-list li.tagedit-listelement-old a{font-size:.8em;cursor:pointer;display:inline-block;width:1.1em;overflow:hidden;vertical-align:middle;margin-right:.2rem}.tagedit-list li.tagedit-listelement-old a:before{content:"\f00d";width:1em;line-height:1.2}.tagedit-list li.tagedit-listelement-old span{overflow:hidden;text-overflow:ellipsis;flex-grow:1;display:inline-block;line-height:1.4;padding:0 .25rem;vertical-align:middle}.skinselection{white-space:nowrap;display:table-row}.skinselection>span{display:table-cell;vertical-align:middle;padding:.1em .5em;white-space:normal}.skinselection>span:last-child{padding-right:0}.skinselection .skinitem input{width:auto}.skinselection .skinname{font-weight:bold}.skinselection .skinlicense,.skinselection .skinlicense a{font-style:italic;text-decoration:none}.skinselection .skinlicense a:hover{text-decoration:underline}.skinselection .skinlicense,.skinselection .skinauthor{font-size:90%}.skinselection .skinthumbnail{width:64px;height:64px;border:1px solid #ced4da;background:#fff;border-radius:4px}.input-percent-slider{display:flex;align-items:center}.input-percent-slider input{max-width:4em}.input-percent-slider span.label{line-height:2.4;padding:0 .5rem 0 .25rem}.input-percent-slider div.ui-slider{flex:1;margin:0 .5em}.image-upload{position:relative;overflow:hidden;cursor:pointer;background-color:#f4f4f4}.image-upload a.button{display:none;position:absolute;left:0;top:0;background-color:rgba(255,255,255,0.85);border-radius:5px;width:2.5em;padding:.5em;margin:.5em;line-height:1}.image-upload.changed a.button{display:inline}.input-group-combo select:first-of-type.alone{border-radius:.25rem !important}.input-group-combo select:first-of-type:not(.alone){flex:unset;width:auto}.input-group-combo .input-group{padding:0 !important;flex:2}.input-group-combo select+select,.input-group-combo .input-group :first-child{border-top-left-radius:0;border-bottom-left-radius:0}@-moz-document url-prefix(){select:-moz-focusring{color:transparent !important;text-shadow:0 0 0 #4f4f4f !important}}.form-control{color:#4f4f4f}.form-control:focus{color:#4f4f4f;border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.form-control.is-invalid{border-color:#ff5552;box-shadow:none}.form-control.is-invalid:focus{border-color:#ff5552;box-shadow:0 0 0 .2rem rgba(255,85,82,0.25)}.form-control::placeholder{color:#bbb}.form-control::-ms-input-placeholder,.form-control::-webkit-input-placeholder{color:#bbb}.invalid-feedback{color:#ff5552;font-size:90%}.form-group{margin-bottom:.5rem}.input-group-append.input-group-prepend{display:inline}.input-group-text{color:#4f4f4f;background-color:#f8f7f4}.input-group-text input:focus{z-index:1;border-color:#f4c200 !important}.custom-switch{padding-left:0;display:inline-block}.custom-switch .custom-control-input{left:0;opacity:0 !important}.custom-switch .custom-control-input:focus~.custom-control-label:before{box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}.custom-switch .custom-control-input:focus:not(:checked)~.custom-control-label::before{border-color:#f4c200}.custom-switch .custom-control-input:checked~.custom-control-label::before{border-color:#f4c200;background-color:#f4c200}.custom-switch .custom-control-input:checked:disabled~.custom-control-label::before{border-color:#ffd842;background-color:#ffd842}.custom-switch .custom-control-label{padding-left:2.5rem;min-height:2rem;line-height:2;display:inline-block}html.touch .custom-switch .custom-control-label{padding-left:3rem}.custom-switch .custom-control-label:before,.custom-switch .custom-control-label:after{border-radius:.6rem;margin:2px 0}html.touch .custom-switch .custom-control-label:before,html.touch .custom-switch .custom-control-label:after{border-radius:.8rem;margin:0}.custom-switch .custom-control-label:before{left:2px;top:4px;width:26px;height:16px}html.touch .custom-switch .custom-control-label:before{top:2px;width:35px;height:22px}.custom-switch .custom-control-label:after{left:4px;top:6px;width:12px;height:12px}html.touch .custom-switch .custom-control-label:after{top:4px;height:18px;width:18px}.custom-switch .custom-control-input:checked~.custom-control-label::after{transform:translateX(10px)}html.touch .custom-switch .custom-control-input:checked~.custom-control-label::after{transform:translateX(13px)}.custom-switch .custom-control-input:not(:disabled)~.custom-control-label:after,.custom-switch .custom-control-input:not(:disabled)~.custom-control-label:before{cursor:pointer}.custom-file{display:block}.custom-file .custom-file-label{white-space:nowrap;overflow:hidden;text-overflow:ellipsis;padding-right:100px}.custom-file+.hint{margin-top:3px}.custom-file-input:focus~.custom-file-label{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}div.tox{font-size:1rem}div.tox,div.tox :not(.svg){font-family:Roboto,sans-serif}div.tox.tox-tinymce{border-radius:.25rem;border:1px solid #ced4da}div.tox.focused{border-color:#f4c200 !important;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25) !important}div.tox .tox-toolbar-overlord{z-index:1}div.tox .tox-toolbar-overlord>div{background:url("data:image/svg+xml;charset=utf8,%3Csvg height='33px' viewBox='0 0 40 33px' width='40' xmlns='http://www.w3.org/2000/svg'%3E%3Crect x='0' y='32px' width='100' height='1' fill='%23cccccc'/%3E%3C/svg%3E");background-color:#f8f7f4}div.tox .tox-toolbar__primary{border-top:0}div.tox .tox-toolbar{background-color:#f8f7f4}div.tox .tox-edit-area{border:0}div.tox .tox-dialog{border-radius:0;border-color:#d4dbde;box-shadow:none;align-self:unset !important}div.tox .tox-dialog .tox-form__group{margin-top:0;margin-bottom:.75rem}div.tox .tox-dialog .tox-dialog__body-nav-item--active{color:#f4c200;border-color:transparent}div.tox .tox-dialog .tox-dialog__body-nav-item--active:hover{color:#c19900}div.tox .tox-dialog__body-content{overflow:unset}div.tox .tox-dialog__content-js{overflow:auto}div.tox .tox-dialog-wrap__backdrop{background-color:rgba(79,79,79,0.5)}div.tox .tox-dialog__header{height:57px;border-bottom:1px solid #ddd;justify-content:flex-end;padding:0}div.tox .tox-dialog__header .tox-button{color:#4f4f4f;right:0;height:57.3px;width:2.25em;margin-right:.4rem}div.tox .tox-dialog__header .tox-button:hover{background:transparent;border-color:transparent}div.tox .tox-dialog__header .tox-button .tox-icon{display:none}div.tox .tox-dialog__header .tox-button:before{content:"\f00d";line-height:1.5rem;margin:0 !important}div.tox .tox-dialog__footer{height:57px !important;border:0;margin:0;padding:0 1rem}@media screen and (max-width:480px){div.tox .tox-dialog__footer{border-top:1px solid #ddd}}div.tox .tox-dialog__footer>div{white-space:nowrap;max-height:57px}div.tox .tox-dialog__footer>div button:first-child{margin:0}div.tox .tox-dialog__footer .tox-button{color:#fff;background:#f4c200;border-color:#f4c200;font-weight:normal;padding:.5rem .75rem}div.tox .tox-dialog__footer .tox-button:focus{background:#dbae00;border-color:#d0a600;box-shadow:0 0 0 .2rem rgba(244,194,0,0.5)}div.tox .tox-dialog__footer .tox-button:hover{background:#dbae00;border-color:#d0a600}div.tox .tox-dialog__footer .tox-button.disabled,div.tox .tox-dialog__footer .tox-button:disabled{background:#f4c200;border-color:#f4c200}div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled):active,div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled).active{background:#c19900;border-color:#b79100}div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled):active:focus,div.tox .tox-dialog__footer .tox-button:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(244,194,0,0.53)}div.tox .tox-dialog__footer .tox-button:before{width:1em;content:"\f00c";line-height:1}div.tox .tox-dialog__footer .tox-button:focus:not(:disabled){background:#f4c200;border-color:#f4c200}div.tox .tox-dialog__footer .tox-button.tox-button--secondary{background:#8b9fa7;border-color:#8b9fa7;color:#fff}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:hover{background:#7c939c;border-color:#778e98}div.tox .tox-dialog__footer .tox-button.tox-button--secondary.disabled,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:disabled{background:#8b9fa7;border-color:#8b9fa7}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled):active,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled):active:focus,div.tox .tox-dialog__footer .tox-button.tox-button--secondary:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:before{content:"\f00d"}div.tox .tox-dialog__footer .tox-button.tox-button--secondary:focus:not(:disabled){background:#8b9fa7;border-color:#8b9fa7}div.tox .tox-search-dialog .tox-form__group:not(:first-child){flex:initial !important}div.tox .tox-search-dialog .tox-dialog__footer-start button{padding:.25rem}div.tox .tox-search-dialog .tox-dialog__footer-end button:before{content:"\f303" !important}div.tox .tox-search-dialog .tox-dialog__footer-end button:nth-of-type(1):before{content:"\f002" !important}div.tox .tox-dialog__title{line-height:calc(58px - 1px);font-size:1.25rem;font-weight:bold;padding:0 0 0 1rem;width:100%;color:#4f4f4f}div.tox .tox-tbtn{height:28px}div.tox .tox-tbtn:not(.tox-tbtn--select,.tox-split-button__chevron){width:32px}div.tox .tox-button{line-height:1.5}div.tox .tox-label{color:#4f4f4f;padding-bottom:.25rem}div.tox .tox-color-input>input,div.tox .tox-listboxfield .tox-listbox--select,div.tox .tox-textarea,div.tox .tox-textfield{font-family:Roboto,sans-serif !important;font-size:14px;line-height:1.5;color:#4f4f4f;border-radius:.25rem;min-height:0;padding:.375rem .75rem}div.tox .tox-color-input>input:focus,div.tox .tox-listboxfield .tox-listbox--select:focus,div.tox .tox-textarea:focus,div.tox .tox-textfield:focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25)}div.tox .tox-listbox__select-label{margin:0}div.tox .tox-color-input span{top:5px}div.tox .custom-switch{position:relative;font-size:1rem;margin-top:.15rem}div.tox .custom-switch .tox-checkbox__icons{display:none}div.tox .custom-switch .tox-checkbox__label{margin:0}div.tox .image-selector{font-size:1rem}div.tox .image-selector button{color:#fff;background:#8b9fa7;border-color:#8b9fa7;padding:.5rem .75rem;line-height:1.5}div.tox .image-selector button:focus{background:#7c939c;border-color:#778e98;box-shadow:0 0 0 .2rem rgba(139,159,167,0.5)}div.tox .image-selector button:hover{background:#7c939c;border-color:#778e98}div.tox .image-selector button.disabled,div.tox .image-selector button:disabled{background:#8b9fa7;border-color:#8b9fa7}div.tox .image-selector button:not(:disabled):not(.disabled):active,div.tox .image-selector button:not(:disabled):not(.disabled).active{background:#6e8791;border-color:#6a828b}div.tox .image-selector button:not(:disabled):not(.disabled):active:focus,div.tox .image-selector button:not(:disabled):not(.disabled).active:focus{box-shadow:0 0 0 .2rem rgba(139,159,167,0.53)}div.tox .tox-form__controls-h-stack div:not(:last-child){flex:1}div.tox .tox-collection__item-label{white-space:nowrap}@media screen and (max-width:480px){div.tox .tox-dialog{margin:0 !important;width:100% !important;height:100%;left:0 !important;top:0 !important;border-width:0 !important}div.tox .tox-dialog__header{background-color:#f1eeea}div.tox .tox-dialog__header .tox-button{display:none}div.tox .tox-dialog__title{font-size:1rem;text-align:center;padding:0 1rem}div.tox .tox-dialog__footer{background-color:#f1eeea}div.tox .tox-dialog__footer .tox-button{color:#4f4f4f !important;background:transparent !important;padding:.45rem;margin:0 !important;border:0;font-size:90%}div.tox .tox-dialog__footer .tox-button:before{display:block;float:none;width:100%;margin:0;line-height:1.75;height:1.75rem}div.tox .tox-dialog__footer .tox-button:active,div.tox .tox-dialog__footer .tox-button:focus,div.tox .tox-dialog__footer .tox-button:hover{background:transparent;border:0;box-shadow:none;color:#4f4f4f}div.tox .tox-dialog__footer>div{justify-content:space-evenly;display:flex;width:100%}div.tox .tox-dialog__footer>div:empty{display:none}}.image-selector{padding:1rem .5rem 10rem .5rem !important}.image-selector.droptarget{border:.2rem dashed #d4dbde}.image-selector.droptarget:after{margin-top:2rem}.image-selector form{position:absolute;top:0}.image-selector .attachmentslist{margin:0;overflow-x:hidden;overflow-y:auto;height:19.1em;padding:0 !important}.image-selector .attachmentslist li{padding:.25rem;cursor:pointer}.image-selector .attachmentslist li:before{display:none}.image-selector .attachmentslist li:hover,.image-selector .attachmentslist li:focus{background:#fdf6d9}.image-selector .attachmentslist li span.name{flex:1;margin:auto;padding-left:1rem;overflow:hidden;text-overflow:ellipsis}.image-selector .attachmentslist li span.img{height:80px;width:80px;display:flex;border:1px solid #f8f7f4;background:white;border-radius:.75rem;overflow:hidden}.image-selector .attachmentslist li img{margin:auto}html.layout-phone .image-selector .attachmentslist{height:auto}.html-editor{position:relative;margin-bottom:.2rem}.html-editor .editor-toolbar{position:absolute;left:1px;top:1px;right:1px;border-radius:.25rem .25rem 0 0;border-bottom:1px solid #ced4da;background-color:#f8f7f4}.html-editor .editor-toolbar .mce-i-html{display:block;margin:2px 2px 2px 4px;width:34px;height:28px;border-radius:.25rem;color:#222f3e}.html-editor .editor-toolbar .mce-i-html:focus,.html-editor .editor-toolbar .mce-i-html:hover{text-decoration:none;border-color:#e2e4e7;background-color:#dee0e2}.html-editor .editor-toolbar .mce-i-html:before{content:"\f03e";margin:0;width:34px;line-height:28px}.html-editor.mailvelope .editor-toolbar,.html-editor .tox-tinymce+.editor-toolbar{display:none}.html-editor>.googie_edit_layer,.html-editor>textarea{font-family:monospace;font-size:13px;width:100% !important;padding-top:40px;resize:none}.html-editor>iframe{border-radius:.3rem;border:1px solid #ced4da;min-height:30em}.googie_window{width:16rem;height:auto}.googie_edit_layer{font-family:monospace;padding:.5rem .75rem;border:1px solid #ced4da;border-radius:.3rem;line-height:1.5}.googie_link{color:#ff5552;text-decoration:underline;cursor:pointer}.googie_list li{min-width:8rem;width:auto}.googie_list li.googie_list_onhover{color:#fff;background-color:#f4c200}.googie_list li .googie_list_revert:before{content:"\f0e2"}.googie_list li .googie_add_to_dict:before{content:"\f0fe"}.googie_list input{display:inline-block;margin:.25rem .5rem}.task-login #layout-content{text-align:center;width:100%;display:block}.task-login #logo{display:inline-block;position:relative;top:16vh;max-height:100px}#login-form{margin:0 auto;top:20vh;width:95%;max-width:320px;position:relative}#login-form table,#login-form tbody{display:block}#login-form .row{margin-right:0;margin-left:0}#login-form .oauthlogin{margin-top:1em;padding-top:1em}#login-form .formbuttons+.oauthlogin{border-top:1px solid #ccc}#rcmloginsubmit:before{display:none !important}#login-footer{flex:1;color:#7b7b77}#login-footer>div{margin-top:1rem;padding:1rem;background:#f8f7f4;border-radius:.3rem}#login-addon{position:absolute;bottom:0;max-height:30%;margin:1rem !important;width:auto !important;overflow:auto}@media screen and (min-width:769px){#login-addon{max-width:768px;margin:auto !important;bottom:1rem;left:0;right:0}}body.task-error-login #layout #layout-menu,body.task-error-login #layout #layout-content>.header{display:none}#contactpic{width:112px;height:135px;border-radius:.5rem;overflow:hidden;display:table-cell;vertical-align:middle;text-align:center;background-color:#f4f4f4}#contactpic img{max-width:112px;max-height:135px}#contacthead .names{margin-bottom:.5rem}#contacthead .names span.namefield{font-size:1.5rem;font-weight:bold;line-height:1.2}#contacthead.readonly .source.row{color:#7b7b77;font-size:90%;margin-bottom:.25rem}#message-header{margin-bottom:1rem}#message-header>.subject{font-size:1.5rem;font-weight:bold}body.status-flagged #message-header>.subject:before{display:inline;float:none;content:"\f024";font-size:1em;color:#ff5552}#message-header>.subject a.extwin{text-decoration:none}#message-header>.subject a.extwin:before{float:none;display:inline-block;font-size:75%;line-height:1.5;margin:0;content:"\f360"}#message-header>.subject span.inner{display:none}#message-header>.header{display:flex}#message-header>.header img.contactphoto{margin:0 1rem 0 0;border-radius:50%;width:4rem;height:4rem;object-fit:cover;background:#f4f4f4}#message-header .header-content{min-height:4rem;flex:1}#message-header .header-content.details-view .header-summary{display:none}#message-header .header-content.details-view .header-headers{display:initial}#message-header .header-summary{margin-top:.25rem}#message-header .header-summary>span{display:inline-block}#message-header .header-headers{display:none}#message-header .header-headers .header-title{white-space:nowrap;color:#7b7b77;font-weight:bold;padding-right:1rem;vertical-align:top}#message-header .header-links{margin-top:.25rem}#message-header .header-links a{font-size:90%;margin-right:.5rem;text-decoration:none;white-space:nowrap;display:inline-block}#message-header .header-links a:before{height:1.5rem;line-height:1.3}#message-header .header-links a.headers-details:before{content:"\f0e0"}#message-header .header-links a.headers-summary:before{content:"\f0e0";font-weight:400}#message-header .header-links a.headers-all:before{content:"\f05a"}#message-header .header-links a.html:before{content:"\f03e"}#message-header .header-links a.plain:before{content:"\f039"}#message-header .header-links a.zipdownload:before{content:"\f019"}.message-partheaders{padding:.25rem .5rem;margin:.5rem 0 -0.5rem 0;border-top:1px solid #f4f4f4;background-color:#fcfcfc}.message-partheaders table.headers-table{font-size:90%;color:#7b7b77}.message-partheaders table.headers-table .header-title{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:8em;font-weight:bold;padding-right:1rem;vertical-align:top}.message-partheaders table.headers-table .subject{font-weight:bold}.message-partheaders table.headers-table+.message-part,.message-partheaders table.headers-table+.message-htmlpart{border-top:0;margin:0}#message-content .attachmentslist:not(:empty){margin-bottom:1rem}#messagebody.mailvelope iframe{min-height:75vh}.message-part,.message-htmlpart{padding-top:.5rem;position:relative}.message-part:not(:first-child),.message-htmlpart:not(:first-child){border-top:1px solid #f4f4f4;margin-top:.5rem}.message-part:last-child,.message-htmlpart:last-child{margin-bottom:.5rem}.message-part div.rcmBody,.message-htmlpart div.rcmBody{margin:0 auto !important}.message-part blockquote,.message-htmlpart blockquote{overflow:hidden;text-overflow:ellipsis;color:#5b4800;border-left:2px solid #5b4800;border-right:2px solid #5b4800;background-color:rgba(248,247,244,0.5);margin:2px 0;padding:0 .4em}.message-part blockquote blockquote,.message-htmlpart blockquote blockquote{color:#205a24;border-left:2px solid #205a24;border-right:2px solid #205a24}.message-part blockquote blockquote blockquote,.message-htmlpart blockquote blockquote blockquote{color:#eb0400;border-left:2px solid #eb0400;border-right:2px solid #eb0400}.message-part blockquote span.blockquote-link,.message-htmlpart blockquote span.blockquote-link{top:0;cursor:pointer;right:.5rem;min-width:4rem;padding:.2rem .25rem .2rem .5rem;font-size:90%;text-align:center;color:#7b7b77;background:#f8f7f4;border:1px solid #d4dbde;border-radius:.3rem;line-height:1;font-family:Roboto,sans-serif}.message-part blockquote span.blockquote-link:after,.message-htmlpart blockquote span.blockquote-link:after{content:"\f107";display:inline-block;float:none;margin:0;font-size:90%}.message-part blockquote span.blockquote-link.collapsed:after,.message-htmlpart blockquote span.blockquote-link.collapsed:after{content:"\f106"}.message-part blockquote.blockquote-header,.message-htmlpart blockquote.blockquote-header{text-overflow:ellipsis !important;padding-right:5rem !important}.message-part span.sig{color:#7b7b77}.message-part div.pre{font-family:monospace;font-size:13px}#compose-attachments{margin:1rem 1rem 0 1rem}#composestatusbar{opacity:.3;right:2.5rem}@media screen and (min-width:769px){#composestatusbar{display:none}}#composestatusbar a.button{display:inline-block}#composestatusbar a.button:before{line-height:58px;font-size:1.25rem !important}.settings-default-icon tr>td.section::before,.settings-default-icon li>a:before{content:"\f013"}html.dark-mode{scrollbar-color:#5b4800 #4d6066;scrollbar-width:thin}html.dark-mode textarea,html.dark-mode select,html.dark-mode .popover-body,html.dark-mode .popupmenu,html.dark-mode .ui-dialog-content,html.dark-mode .frame-content,html.dark-mode .formcontent,html.dark-mode .table-responsive,html.dark-mode .table-responsive-sm,html.dark-mode .scroller{scrollbar-width:thin}html.dark-mode:not(.touch) ::-webkit-scrollbar{width:6px}html.dark-mode:not(.touch) ::-webkit-scrollbar-track{background-color:#4d6066}html.dark-mode:not(.touch) ::-webkit-scrollbar-thumb{background-color:#5b4800}html.dark-mode body{color:#c5d1d3;background-color:#21292c}html.dark-mode #logo{opacity:.8}html.dark-mode #layout-list,html.dark-mode #layout-content,html.dark-mode #layout-sidebar,html.dark-mode #layout>div>.header,html.dark-mode #layout>div>.footer,html.dark-mode .popup .listbox .footer,html.dark-mode .menu.pagenav.pagenav-list,html.dark-mode .menu.pagenav.pagenav-list+.navlist,html.dark-mode .menu.pagenav.pagenav-list.expanded+.navlist{background-color:transparent;border-color:#4d6066}html.dark-mode #layout>div>.footer{font-weight:normal}html.dark-mode #layout>div>.header,html.dark-mode #layout>div>.footer{color:unset}html.dark-mode #layout>div>.header a.button,html.dark-mode #layout>div>.footer a.button{color:#c5d1d3}html.dark-mode #layout-menu{background:unset;border-right:1px solid #4d6066}html.dark-mode #layout-menu .popover-header,html.dark-mode #layout-menu .special-buttons{background:transparent !important}@media screen and (max-width:480px){html.dark-mode #layout-menu{border-left:0}html.dark-mode #layout-menu .popover-header{border-bottom:1px solid #4d6066}}html.dark-mode #layout-menu .special-buttons a:not(:focus){background:#21292c}html.dark-mode.layout-phone #layout-menu{background:#161b1d}html.dark-mode .searchbar{background-color:transparent;border-color:#4d6066}html.dark-mode .searchbar form:before,html.dark-mode .searchbar a,html.dark-mode .searchbar input{color:unset}html.dark-mode .searchbar a.selected{color:#41b849}html.dark-mode #messagestack div{color:#c5d1d3}html.dark-mode #messagestack div i.icon:before{color:#c5d1d3}html.dark-mode .ui.alert.boxinformation,html.dark-mode #messagestack .alert-info{background-color:#927400}html.dark-mode .ui.alert.boxerror,html.dark-mode #messagestack .alert-danger{background-color:#993331}html.dark-mode .ui.alert.boxwarning,html.dark-mode #messagestack .alert-warning{background-color:#997f31}html.dark-mode .ui.alert.boxconfirmation,html.dark-mode #messagestack .alert-success{background-color:#276e2c}html.dark-mode #messagestack .loading{background-color:#374449}html.dark-mode .ui.alert.boxinformation,html.dark-mode .ui.alert.boxerror,html.dark-mode .ui.alert.boxwarning,html.dark-mode .ui.alert.boxconfirmation{color:#c5d1d3}html.dark-mode .ui.alert.boxinformation i.icon:before,html.dark-mode .ui.alert.boxerror i.icon:before,html.dark-mode .ui.alert.boxwarning i.icon:before,html.dark-mode .ui.alert.boxconfirmation i.icon:before{color:#c5d1d3}html.dark-mode .ui.alert a:not(.btn){color:#c5d1d3;text-decoration:underline}html.dark-mode .iframe-loader{background-color:rgba(33,41,44,0.9)}html.dark-mode .iframe-loader .spinner-border{color:#7d989c;border-color:currentColor #425457 currentColor currentColor}html.dark-mode #taskmenu a,html.dark-mode .menu.toolbar a{color:#c5d1d3}html.dark-mode #taskmenu a.selected,html.dark-mode .menu.toolbar a.selected{background-color:#374549}html.dark-mode pre,html.dark-mode .popover .menu li aaria-haspopup::after,html.dark-mode .menu.pagenav .pagenav-text,html.dark-mode .menu.pagenav a{color:unset}html.dark-mode #taskmenu .action-buttons a{color:#f4c200}@media screen and (max-width:480px){html.dark-mode #taskmenu a{border-color:#2c373a !important}html.dark-mode #taskmenu a.selected{background:transparent}}@media screen and (min-width:481px) and (max-width:1024px){html.dark-mode #taskmenu a{width:41px}}@media screen and (min-width:1025px){html.dark-mode #taskmenu a{width:77px}}html.dark-mode.layout-small .popover,html.dark-mode.layout-phone .popover{border-left:1px solid #4d6066}html.dark-mode.layout-small .popover .menu .dropbutton a.dropdown,html.dark-mode.layout-phone .popover .menu .dropbutton a.dropdown{background:transparent}html.dark-mode.layout-small .popover:not(.select-menu) .listing li:last-child,html.dark-mode.layout-phone .popover:not(.select-menu) .listing li:last-child{border-color:#2c373a}html.dark-mode.layout-small .popover-header,html.dark-mode.layout-phone .popover-header{background:#161b1d;border-bottom:1px solid #4d6066;color:unset}html.dark-mode.layout-small .popover-overlay,html.dark-mode.layout-phone .popover-overlay{background:rgba(0,0,0,0.7)}html.dark-mode #taskmenu a:hover,html.dark-mode .popupmenu .listing li>a:not(.disabled):hover,html.dark-mode .header a.button.icon:not(.disabled):focus,html.dark-mode .header a.button.icon:not(.disabled):hover,html.dark-mode .menu.toolbar .dropbutton:not(.disabled):hover,html.dark-mode .menu a:not(.disabled):focus,html.dark-mode .menu a:not(.disabled):hover{background-color:#374549}html.dark-mode .menu.toolbar a.selected{color:#41b849;background:transparent}html.dark-mode .menu.toolbar .dropbutton a.dropdown:hover{background-color:#425358}html.dark-mode .listing tbody td,html.dark-mode .listing tbody td a,html.dark-mode .listing li a{color:#c5d1d3}html.dark-mode .listing li ul,html.dark-mode .listing tbody td,html.dark-mode .listing li{border-color:#2c373a}html.dark-mode .listing li.selected,html.dark-mode .listing li.selected>a,html.dark-mode .listing li.selected>div>a,html.dark-mode .listing tr.selected td{color:#f4c200;background-color:#374549}html.dark-mode .listing li.selected ul{background-color:#21292c}html.dark-mode .listing li.selected ul div.treetoggle{color:#c5d1d3}html.dark-mode .listing li.disabled,html.dark-mode .listing tr.disabled td{color:#637e82}html.dark-mode .listing li.droptarget>a,html.dark-mode .listing tr.droptarget>td{background-color:#4d4d00}html.dark-mode .messagelist{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.size,html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.date,html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.fromto{color:#8ba3a7}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.msgicon.status{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) td.subject span.msgicon.status.unread::before{color:#b88a00}html.dark-mode .messagelist tr:not(.flagged):not(.deleted) span.flag{color:#c5d1d3}html.dark-mode .messagelist tr:not(.flagged):not(.deleted).selected td.subject a,html.dark-mode .messagelist tr:not(.flagged):not(.deleted).selected td.subject span.msgicon.status{color:#f4c200}html.dark-mode .messagelist tr.flagged:not(.deleted) td,html.dark-mode .messagelist tr.flagged:not(.deleted) span.attachment span{color:#ff5552}html.dark-mode .messagelist tr.deleted td span.flag,html.dark-mode .messagelist tr.deleted td span.attachment span,html.dark-mode .messagelist tr.deleted td.subject span.msgicon.status,html.dark-mode .messagelist tr.deleted td.subject span.msgicon.status.unread:before,html.dark-mode .messagelist tr.deleted td.subject span.subject a,html.dark-mode .messagelist tr.deleted td.subject span.date,html.dark-mode .messagelist tr.deleted td.subject span.fromto{color:#637e82}html.dark-mode .messagelist span.attachment span{color:#8ba3a7}html.dark-mode .folderlist li.mailbox .unreadcount{background-color:#4d6066;color:#e2e8e9;font-weight:normal}html.dark-mode .attachmentslist{background-color:#374549;border:0}html.dark-mode .attachmentslist a{color:#c5d1d3}html.dark-mode .attachmentslist li .attachment-name{color:#c5d1d3}html.dark-mode .attachmentslist li .attachment-size{color:#8ba3a7}html.dark-mode .btn{color:#c5d1d3}html.dark-mode .btn:focus,html.dark-mode .btn:hover{color:#e2e8e9}html.dark-mode .btn:disabled{opacity:.5 !important}html.dark-mode .btn-primary{background-color:#5b4800;color:#e2e8e9}html.dark-mode .btn-primary:hover:not(:disabled){background-color:#755d00}html.dark-mode .btn-secondary{background-color:#4d6066;color:#e2e8e9}html.dark-mode .btn-secondary:hover:not(:disabled){background-color:#586e75}html.dark-mode .btn-danger{background-color:#993331;color:#e2e8e9}html.dark-mode .btn-danger:hover:not(:disabled){background-color:#ac3937}html.dark-mode .floating-action-buttons a.button{box-shadow:none;background:#5b4800}html.dark-mode .custom-file-label,html.dark-mode .form-control{background-color:#21292c;color:#c5d1d3}html.dark-mode .custom-file-label:not(.is-invalid),html.dark-mode .form-control:not(.is-invalid){border-color:#7c949c}html.dark-mode .custom-file-label:focus,html.dark-mode .form-control:focus{background-color:#2c373b}html.dark-mode .custom-file-label:focus:not(.is-invalid),html.dark-mode .form-control:focus:not(.is-invalid){color:#e2e7e9 !important;border-color:#f4c200}html.dark-mode .custom-file-label::after{color:#c5d1d3;background-color:#374549}html.dark-mode .custom-select{background:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23c5d1d3' viewBox='0 0 4 5'%3e%3cpath d='M2 0L0 2h4zm0 5L0 3h4z'/%3e%3c/svg%3e") no-repeat right .75rem center / 8px 10px}html.dark-mode .custom-switch .custom-control-label::before{background-color:#4d6066}html.dark-mode .custom-switch .custom-control-label::after{background-color:#c5d1d3}html.dark-mode .custom-switch .custom-control-input:disabled~.custom-control-label{opacity:.4}html.dark-mode .custom-switch .custom-control-input:checked~.custom-control-label::before{background-color:#5b4800}html.dark-mode .custom-switch .custom-control-input:checked~.custom-control-label::after{background-color:#c5d1d3}html.dark-mode input:disabled,html.dark-mode select:disabled{opacity:.5}html.dark-mode .multi-input:not(.is-invalid)>.content{border-color:#7c949c}html.dark-mode .multi-input:not(.is-invalid)>.content.focused{border-color:#f4c200}html.dark-mode .input-group-text{color:#c5d1d3;background-color:#374549;border-color:#7c949c}html.dark-mode .input-group a:focus{border-color:#f4c200;box-shadow:0 0 0 .2rem rgba(244,194,0,0.25);z-index:1}html.dark-mode .form-control-plaintext{color:unset}html.dark-mode .recipient-input.focus{color:#e2e7e9;background-color:#2c373b;border-color:#f4c200}html.dark-mode .recipient-input a.button.icon,html.dark-mode .recipient-input input{color:#c5d1d3}html.dark-mode .recipient-input .recipient{background-color:#374549;border-color:#7c949c}html.dark-mode .file-upload{border-color:#4d6066}html.dark-mode .file-upload:after{mix-blend-mode:soft-light}html.dark-mode .file-upload.droptarget.active{border-color:#c5d1d3}html.dark-mode .file-upload.droptarget.hover{border-color:#c5d1d3;background-color:#374549}html.dark-mode .file-upload .attachmentslist{background:transparent}html.dark-mode .image-upload{background-color:#374549}html.dark-mode .image-upload a.button{background-color:rgba(33,41,44,0.25)}html.dark-mode .formcontent.raweditor .CodeMirror{color:#c5d1d3;background-color:#21292c;border-color:#7c949c}html.dark-mode .formcontent.raweditor .CodeMirror-focused{background-color:#2c373b;border-color:#f4c200}html.dark-mode .CodeMirror-selected,html.dark-mode .CodeMirror-line::selection,html.dark-mode .CodeMirror-line>span::selection,html.dark-mode .CodeMirror-line>span>span::selection{background:#374549}html.dark-mode .CodeMirror-gutters{background-color:#212a2c;border:0}html.dark-mode .CodeMirror-activeline-background{background:#374549}html.dark-mode .skinselection .skinthumbnail{border-color:#7c949c;background:transparent}html.dark-mode .html-editor .editor-toolbar{background-color:#374549;border-color:#7c949c}html.dark-mode .html-editor .editor-toolbar .mce-i-html{color:unset}html.dark-mode .html-editor .editor-toolbar .mce-i-html:hover,html.dark-mode .html-editor .editor-toolbar .mce-i-html:focus{background-color:#586e75;border-color:transparent}html.dark-mode .tox.tox-tinymce{border-color:#7c949c}html.dark-mode .tox .tox-toolbar{background-color:#374549;border-color:#7c949c}html.dark-mode .tox .tox-toolbar-overlord>div{background:url("data:image/svg+xml,%3Csvg height='33px' viewBox='0 0 40 33px' width='40' xmlns='http://www.w3.org/2000/svg'%3E%3Crect x='0' y='32px' width='100' height='1' fill='%237c949c'/%3E%3C/svg%3E") #374549}html.dark-mode .tox .tox-pop.tox-pop--top:before,html.dark-mode .tox .tox-pop.tox-pop--top:after{border-bottom-color:#8b9fa7}html.dark-mode .tox .tox-pop__dialog{box-shadow:none;border-color:#8b9fa7}html.dark-mode .tox .tox-tbtn,html.dark-mode .tox .tox-split-button,html.dark-mode .tox .tox-swatches__picker-btn{color:#c5d1d3}html.dark-mode .tox .tox-tbtn svg,html.dark-mode .tox .tox-split-button svg,html.dark-mode .tox .tox-swatches__picker-btn svg{fill:#c5d1d3 !important}html.dark-mode .tox .tox-tbtn:hover,html.dark-mode .tox .tox-split-button:hover,html.dark-mode .tox .tox-swatches__picker-btn:hover,html.dark-mode .tox .tox-tbtn:focus,html.dark-mode .tox .tox-split-button:focus,html.dark-mode .tox .tox-swatches__picker-btn:focus{color:#c5d1d3;background:#586e75;box-shadow:none}html.dark-mode .tox .tox-tbtn--enabled{background:#586e75}html.dark-mode .tox .tox-button--naked:focus:not(:disabled),html.dark-mode .tox .tox-button--naked.tox-button--icon:hover:not(:disabled){color:#d4ddde;background-color:#586e75;border-color:transparent}html.dark-mode .tox .tox-button--naked:disabled{background:transparent;border:transparent}html.dark-mode .tox .tox-dialog__header .tox-button--naked:hover{background:transparent !important}html.dark-mode .tox .tox-selectfield select{background:transparent;color:#c5d1d3}html.dark-mode .tox .tox-selectfield svg{fill:#c5d1d3}html.dark-mode .tox .tox-color-input span::before{background-color:#c5d1d3}html.dark-mode .tox .tox-toolbar__group:not(:last-of-type){border-color:#7c949c}html.dark-mode .tox .tox-dialog,html.dark-mode .tox .tox-dialog__header,html.dark-mode .tox .tox-dialog__body,html.dark-mode .tox .tox-dialog__footer,html.dark-mode .tox .tox-dialog__title{color:#c5d1d3;border-color:#4d6066;background-color:#21292c}html.dark-mode .tox .tox-textfield,html.dark-mode .tox .tox-color-input>input,html.dark-mode .tox .tox-label,html.dark-mode .tox .tox-dialog__body-nav-item,html.dark-mode .tox .tox-button--naked,html.dark-mode .tox .tox-dialog__header .tox-button,html.dark-mode .tox .tox-insert-table-picker__label{color:#c5d1d3}html.dark-mode .tox .tox-dialog__footer .tox-button{background-color:#5b4800;color:#e2e8e9}html.dark-mode .tox .tox-dialog__footer .tox-button:disabled{opacity:.5}@media screen and (max-width:480px){html.dark-mode .tox .tox-dialog__footer .tox-button{color:#c5d1d3 !important}}html.dark-mode .tox .tox-dialog__footer .tox-button:focus:not(:disabled){background-color:#5b4800}html.dark-mode .tox .tox-dialog__footer .tox-button:hover:not(:disabled){background-color:#755d00}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary{background-color:#4d6066;color:#e2e8e9}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary:focus:not(:disabled){background-color:#4d6066}html.dark-mode .tox .tox-dialog__footer .tox-button.tox-button--secondary:hover:not(:disabled){background-color:#586e75}html.dark-mode .tox .tox-dialog__body-nav-item--active{color:#f4c200}html.dark-mode .tox .tox-dialog-wrap__backdrop{background-color:rgba(0,0,0,0.7)}html.dark-mode .tox .tox-menu{scrollbar-width:thin;background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .tox .tox-dialog__body-nav,html.dark-mode .tox .tox-collection__group{scrollbar-width:thin}html.dark-mode .tox .tox-collection__item-caret svg{fill:#c5d1d3}html.dark-mode .tox .tox-collection__item{color:#c5d1d3}html.dark-mode .tox .tox-collection__item:not(:last-child){border-bottom:1px solid #2c373a}html.dark-mode .tox .tox-collection--grid .tox-collection__item{border:0}html.dark-mode .tox .tox-collection__item--active,html.dark-mode .tox .tox-collection__item--active:not(.tox-collection__item--state-disabled){color:#c5d1d3;background-color:#374549}html.dark-mode .tox .tox-collection__item--enabled{color:#f4c200;background-color:#374549}html.dark-mode .message-part,html.dark-mode .message-htmlpart{border-color:#4d6066}html.dark-mode .message-part blockquote,html.dark-mode .message-htmlpart blockquote{background-color:#21292c;border-color:#ffd328;color:#ffd328}html.dark-mode .message-part blockquote span.blockquote-link,html.dark-mode .message-htmlpart blockquote span.blockquote-link{color:currentColor;background:#21292c;border-color:currentColor}html.dark-mode .message-part blockquote blockquote,html.dark-mode .message-htmlpart blockquote blockquote{color:#64c86b;border-color:#64c86b}html.dark-mode .message-part blockquote blockquote blockquote,html.dark-mode .message-htmlpart blockquote blockquote blockquote{color:#ff8785;border-color:#ff8785}html.dark-mode .message-part span.sig{color:#8ba3a7}html.dark-mode .message-htmlpart{background-color:white;color:#4f4f4f;padding:0;margin-top:.5rem}html.dark-mode #message-header .header-headers .header-title{color:#c5d1d3;font-weight:normal}html.dark-mode .message-partheaders{background-color:#374549;border:0}html.dark-mode .message-partheaders table.headers-table{color:#c5d1d3}html.dark-mode .message-partheaders table.headers-table *{font-weight:normal}html.dark-mode p.image-attachment{border-color:#4d6066;background-color:#374549}html.dark-mode p.image-attachment span{color:#8ba3a7}html.dark-mode fieldset.image-attachment legend{color:#8ba3a7;border-color:#4d6066}html.dark-mode #messagepartframe{background:#fff}html.dark-mode .ui-widget{border-color:#4d6066}html.dark-mode .ui-widget-overlay{background-color:rgba(0,0,0,0.7)}html.dark-mode .ui-widget-header,html.dark-mode .ui-widget-content{background-color:#21292c}html.dark-mode .ui-dialog .ui-dialog-titlebar{border-color:#4d6066}html.dark-mode .ui-dialog .ui-dialog-title,html.dark-mode .ui-dialog .ui-dialog-titlebar-close{color:#c5d1d3;background:transparent}html.dark-mode .ui-dialog .ui-dialog-buttonpane{border-color:#4d6066}html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link{color:#c5d1d3}html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset a.btn-link:focus{background:transparent}@media screen and (max-width:480px){html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-primary:not(.btn-danger),html.dark-mode .ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset button.btn-secondary{color:#c5d1d3}}html.dark-mode .ui-datepicker .ui-datepicker-header{border-color:#4d6066}html.dark-mode .ui-datepicker th{color:#8ba3a7;font-size:80%;font-weight:normal}html.dark-mode .ui-datepicker .ui-datepicker-prev,html.dark-mode .ui-datepicker .ui-datepicker-next,html.dark-mode .ui-datepicker .ui-state-default,html.dark-mode .ui-datepicker.ui-widget-content .ui-state-default{color:#c5d1d3}html.dark-mode .ui-datepicker .ui-state-highlight,html.dark-mode .ui-datepicker.ui-widget-content .ui-state-highlight{color:#f4c200;background-color:#374549}html.dark-mode .ui-datepicker .ui-datepicker-days-cell-over a{background-color:#4d6066}html.dark-mode .ui-menu{scrollbar-width:thin;background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .ui-menu .ui-menu-item{border-bottom:1px solid #2c373a}html.dark-mode .ui-menu .ui-state-active{background-color:#374549 !important}html.dark-mode .minicolors-panel{box-shadow:none;border-color:#4d6066;background:#161b1d}html.dark-mode ::placeholder,html.dark-mode ::-webkit-input-placeholder,html.dark-mode .listing-info,html.dark-mode .listing span.secondary,html.dark-mode .file-upload .hint,html.dark-mode .contactlist span.email,html.dark-mode #login-footer,html.dark-mode #contacthead.readonly .source.row,html.dark-mode .formcontent .hint{font-weight:normal;color:#8ba3a7}html.dark-mode .popover{background-color:#161b1d;border-color:#8b9fa7;box-shadow:none}html.dark-mode .popover .menu li.separator{background-color:transparent;color:#8ba3a7}html.dark-mode .popover .menu ul+li.separator{border-top:1px solid #2c373a}html.dark-mode .popover-body{color:#c5d1d3}html.dark-mode .bs-popover-autox-placement^="right">.arrow::after,html.dark-mode .bs-popover-right>.arrow::after{border-right-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="left">.arrow::after,html.dark-mode .bs-popover-left>.arrow::after{border-left-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="top">.arrow::after,html.dark-mode .bs-popover-top>.arrow::after{border-top-color:#8b9fa7}html.dark-mode .bs-popover-autox-placement^="bottom">.arrow::after,html.dark-mode .bs-popover-bottom>.arrow::after{border-bottom-color:#8b9fa7}html.dark-mode .nav-tabs{border-color:#4d6066}html.dark-mode .nav-tabs .nav-link{color:#c5d1d3;border-color:transparent;border-bottom-color:#4d6066}html.dark-mode .nav-tabs .nav-link:hover{background:#21292c;border-color:#4d6066;color:#c5d1d3}html.dark-mode .nav-tabs .nav-link.active{background:#21292c;border-color:#4d6066;border-bottom-color:transparent;color:#fff}html.dark-mode .table{color:#c5d1d3}html.dark-mode .table td,html.dark-mode .table th,html.dark-mode .table thead th{border-color:#4d6066}html.dark-mode .table-widget{border-color:#4d6066}html.dark-mode .table-widget>.footer{border-color:#4d6066}html.dark-mode .table-widget table.options-table tr:last-child td{border-color:#4d6066}html.dark-mode .table-widget table.options-table tr.selected td{background-color:#374549;color:#c5d1d3}html.dark-mode #rcmdraglayer{background-color:#161b1d;border:1px solid #8b9fa7;box-shadow:none;color:#c5d1d3}html.dark-mode .quota-widget{color:unset}html.dark-mode .quota-widget .bar{border-color:#4d6066;background-color:#4d6066}html.dark-mode .quota-info .root{color:#8ba3a7;background-color:transparent}html.dark-mode img.contactphoto,html.dark-mode #contactpic{background-color:#374549 !important}html.dark-mode .pgpkeyimport div.key.revoked,html.dark-mode .pgpkeyimport div.key.disabled{color:#637e82}html.dark-mode .pgpkeyimport li.uid::before{opacity:1}#taskmenu span.inner{text-transform:uppercase}@media screen and (min-width:1025px) and (min-height:640px){#taskmenu span.inner{font-size:65%;font-weight:bold}#taskmenu a:before{line-height:1.2;font-size:180%;height:1.9rem !important}}@media screen and (min-width:769px){#taskmenu a.logout:not(:hover){color:#71777d !important}}#taskmenu .action-buttons{display:none}#layout-menu .popover-header{background-color:#3a444e !important}#layout-menu .popover-header img{width:100%}html.layout-phone #layout-menu .popover-header img{width:unset;max-height:58px}.watermark{background-image:url(../images/watermark.svg) !important;background-size:60% !important;background-blend-mode:unset !important}html:not(.dark-mode) .watermark:before{background:rgba(255,255,255,0.75) !important}html.dark-mode .watermark{background-blend-mode:soft-light !important}body.task-mail .menu a.compose{display:block !important}#message-header .short-header img.contactphoto{order:2;margin:0 0 0 1rem}.content-frame-navigation{height:35px !important;line-height:35px !important;min-height:35px !important}.content-frame-navigation a{max-width:8em;padding:0;line-height:35px}.content-frame-navigation a:before{display:none !important;height:35px !important;line-height:35px !important}.content-frame-navigation a.prev,.content-frame-navigation a.next{padding:0}.content-frame-navigation a.prev:before,.content-frame-navigation a.next:before{display:block !important;line-height:1.8}.content-frame-navigation a.prev span.inner,.content-frame-navigation a.next span.inner{display:none}.content-frame-navigation a span.inner{color:#f4c200;font-weight:bold}
\ No newline at end of file

roundcubemail-1.5.3.tar.gz/skins/kolab/watermark.html -> roundcubemail-1.5.tar.gz/skins/kolab/watermark.html Changed

roundcubemail-1.5.3.tar.gz/temp/js_cache/tinymce-langs-5.8.2.zip -> roundcubemail-1.5.tar.gz/temp/js_cache/tinymce-langs-5.8.2.zip Changed

roundcubemail-1.5.3.tar.gz/tests/Framework/VCard.php -> roundcubemail-1.5.tar.gz/tests/Framework/VCard.php Changed

roundcubemail-1.5.3.tar.gz/tests/src/Csv2vcard/email.vcf -> roundcubemail-1.5.tar.gz/tests/src/Csv2vcard/email.vcf Changed

roundcubemail-1.5.3.tar.gz/tests/src/Csv2vcard/outlook.vcf -> roundcubemail-1.5.tar.gz/tests/src/Csv2vcard/outlook.vcf Changed

roundcubemail-1.5.3.tar.gz/vendor/autoload.php -> roundcubemail-1.5.tar.gz/vendor/autoload.php Changed

roundcubemail-1.5.tar.gz/vendor/christian-riesen Added

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32 Added

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32/LICENSE Added

@@ -0,0 +1,19 @@
+Copyright (c) 2013-2014 Christian Riesen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished
+to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32/README.md Added

@@ -0,0 +1,64 @@
+base32
+======
+
+Base32 Encoder/Decoder for PHP according to RFC 4648(https://tools.ietf.org/html/rfc4648).
+
+!CI(https://github.com/ChristianRiesen/base32/workflows/CI/badge.svg)
+
+!Latest Stable Version(https://poser.pugx.org/christian-riesen/base32/v/stable.png)(https://packagist.org/packages/christian-riesen/base32) !Total Downloads(https://poser.pugx.org/christian-riesen/base32/downloads.png)(https://packagist.org/packages/christian-riesen/base32) !Latest Unstable Version(https://poser.pugx.org/christian-riesen/base32/v/unstable.png)(https://packagist.org/packages/christian-riesen/base32) !License(https://poser.pugx.org/christian-riesen/base32/license.png)(https://packagist.org/packages/christian-riesen/base32)
+
+
+Installation
+-----
+
+Use composer:
+
+```bash
+composer require christian-riesen/base32
+```
+
+Usage
+-----
+
+```php
+<?php
+
+// Include class or user autoloader
+use Base32\Base32;
+
+$string = 'fooba';
+
+// $encoded contains now 'MZXW6YTB'
+$encoded = Base32::encode($string);
+
+// $decoded is again 'fooba'
+$decoded = Base32::decode($encoded);
+```
+
+You can also use the extended hex alphabet by using the `Base32Hex` class instead.
+
+About
+=====
+
+Initially created to work with the one time password project(https://github.com/ChristianRiesen/otp), yet it can stand alone just as well as Jordi Boggiano(http://seld.be/) kindly pointed out. It's the only Base32 implementation that passes the test vectors and contains unit tests as well.
+
+Goal
+----
+Have a RFC compliant Base32 encoder and decoder. The implementation could be improved, but for now, it does the job and has unit tests. Ideally, the class can be enhanced while the unit tests keep passing.
+
+Requirements
+------------
+
+Works on PHP 7.2 and later, including PHP 8.0.
+
+Tests run on PHPUnit 9.5, with PHP 7.3 and later. For PHP 7.2, tests use an older PHPUnit version.
+
+Author
+------
+
+Christian Riesen <chris.riesen@gmail.com> http://christianriesen.com
+
+Acknowledgements
+----------------
+
+Base32 is mostly based on the work of https://github.com/NTICompass/PHP-Base32

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32/src Added

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32/src/Base32.php Added

@@ -0,0 +1,168 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Base32;
+
+/**
+ * Base32 encoder and decoder.
+ *
+ * RFC 4648 compliant
+ *
+ * @see     http://www.ietf.org/rfc/rfc4648.txt
+ * Some groundwork based on this class
+ * https://github.com/NTICompass/PHP-Base32
+ *
+ * @author  Christian Riesen <chris.riesen@gmail.com>
+ * @author  Sam Williams <sam@badcow.co>
+ *
+ * @see     http://christianriesen.com
+ *
+ * @license MIT License see LICENSE file
+ */
+class Base32
+{
+    /**
+     * Alphabet for encoding and decoding base32.
+     *
+     * @var string
+     */
+    protected const ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567=';
+
+    protected const BASE32HEX_PATTERN = '/^A-Z2-7/';
+
+    /**
+     * Maps the Base32 character to its corresponding bit value.
+     */
+    protected const MAPPING = 
+        '=' => 0b00000,
+        'A' => 0b00000,
+        'B' => 0b00001,
+        'C' => 0b00010,
+        'D' => 0b00011,
+        'E' => 0b00100,
+        'F' => 0b00101,
+        'G' => 0b00110,
+        'H' => 0b00111,
+        'I' => 0b01000,
+        'J' => 0b01001,
+        'K' => 0b01010,
+        'L' => 0b01011,
+        'M' => 0b01100,
+        'N' => 0b01101,
+        'O' => 0b01110,
+        'P' => 0b01111,
+        'Q' => 0b10000,
+        'R' => 0b10001,
+        'S' => 0b10010,
+        'T' => 0b10011,
+        'U' => 0b10100,
+        'V' => 0b10101,
+        'W' => 0b10110,
+        'X' => 0b10111,
+        'Y' => 0b11000,
+        'Z' => 0b11001,
+        '2' => 0b11010,
+        '3' => 0b11011,
+        '4' => 0b11100,
+        '5' => 0b11101,
+        '6' => 0b11110,
+        '7' => 0b11111,
+    ;
+
+    /**
+     * Encodes into base32.
+     *
+     * @param string $string Clear text string
+     *
+     * @return string Base32 encoded string
+     */
+    public static function encode(string $string): string
+    {
+        // Empty string results in empty string
+        if ('' === $string) {
+            return '';
+        }
+
+        $encoded = '';
+
+        //Set the initial values
+        $n = $bitLen = $val = 0;
+        $len = \strlen($string);
+
+        //Pad the end of the string - this ensures that there are enough zeros
+        $string .= \str_repeat(\chr(0), 4);
+
+        //Explode string into integers
+        $chars = (array) \unpack('C*', $string, 0);
+
+        while ($n < $len || 0 !== $bitLen) {
+            //If the bit length has fallen below 5, shift left 8 and add the next character.
+            if ($bitLen < 5) {
+                $val = $val << 8;
+                $bitLen += 8;
+                $n++;
+                $val += $chars$n;
+            }
+            $shift = $bitLen - 5;
+            $encoded .= ($n - (int)($bitLen > 8) > $len && 0 == $val) ? '=' : static::ALPHABET$val >> $shift;
+            $val = $val & ((1 << $shift) - 1);
+            $bitLen -= 5;
+        }
+
+        return $encoded;
+    }
+
+    /**
+     * Decodes base32.
+     *
+     * @param string $base32String Base32 encoded string
+     *
+     * @return string Clear text string
+     */
+    public static function decode(string $base32String): string
+    {
+        // Only work in upper cases
+        $base32String = \strtoupper($base32String);
+
+        // Remove anything that is not base32 alphabet
+        $base32String = \preg_replace(static::BASE32HEX_PATTERN, '', $base32String);
+
+        // Empty string results in empty string
+        if ('' === $base32String || null === $base32String) {
+            return '';
+        }
+
+        $decoded = '';
+
+        //Set the initial values
+        $len = \strlen($base32String);
+        $n = 0;
+        $bitLen = 5;
+        $val = static::MAPPING$base32String0;
+
+        while ($n < $len) {
+            //If the bit length has fallen below 8, shift left 5 and add the next pentet.
+            if ($bitLen < 8) {
+                $val = $val << 5;
+                $bitLen += 5;
+                $n++;
+                $pentet = $base32String$n ?? '=';
+
+                //If the new pentet is padding, make this the last iteration.
+                if ('=' === $pentet) {
+                    $n = $len;
+                }
+                $val += static::MAPPING$pentet;
+                continue;
+            }
+            $shift = $bitLen - 8;
+
+            $decoded .= \chr($val >> $shift);
+            $val = $val & ((1 << $shift) - 1);
+            $bitLen -= 8;
+        }
+
+        return $decoded;
+    }
+}

roundcubemail-1.5.tar.gz/vendor/christian-riesen/base32/src/Base32Hex.php Added

@@ -0,0 +1,68 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Base32;
+
+/**
+ * Base32Hex encoder and decoder.
+ *
+ * RFC 4648 compliant
+ * @see     http://www.ietf.org/rfc/rfc4648.txt
+ *
+ * @author  Sam Williams <sam@badcow.co>
+ *
+ * @see     http://christianriesen.com
+ *
+ * @license MIT License see LICENSE file
+ */
+class Base32Hex extends Base32
+{
+    /**
+     * Alphabet for encoding and decoding base32 extended hex.
+     *
+     * @var string
+     */
+    protected const ALPHABET = '0123456789ABCDEFGHIJKLMNOPQRSTUV=';
+
+    protected const BASE32HEX_PATTERN = '/^0-9A-V/';
+
+    /**
+     * Maps the Base32 character to its corresponding bit value.
+     */
+    protected const MAPPING = 
+        '=' => 0b00000,
+        '0' => 0b00000,
+        '1' => 0b00001,
+        '2' => 0b00010,
+        '3' => 0b00011,
+        '4' => 0b00100,
+        '5' => 0b00101,
+        '6' => 0b00110,
+        '7' => 0b00111,
+        '8' => 0b01000,
+        '9' => 0b01001,
+        'A' => 0b01010,
+        'B' => 0b01011,
+        'C' => 0b01100,
+        'D' => 0b01101,
+        'E' => 0b01110,
+        'F' => 0b01111,
+        'G' => 0b10000,
+        'H' => 0b10001,
+        'I' => 0b10010,
+        'J' => 0b10011,
+        'K' => 0b10100,
+        'L' => 0b10101,
+        'M' => 0b10110,
+        'N' => 0b10111,
+        'O' => 0b11000,
+        'P' => 0b11001,
+        'Q' => 0b11010,
+        'R' => 0b11011,
+        'S' => 0b11100,
+        'T' => 0b11101,
+        'U' => 0b11110,
+        'V' => 0b11111,
+    ;
+}

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_namespaces.php -> roundcubemail-1.5.tar.gz/vendor/composer/autoload_namespaces.php Changed

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_psr4.php -> roundcubemail-1.5.tar.gz/vendor/composer/autoload_psr4.php Changed

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_real.php -> roundcubemail-1.5.tar.gz/vendor/composer/autoload_real.php Changed

@@ -2,7 +2,7 @@
 
 // autoload_real.php @generated by Composer
 
-class ComposerAutoloaderInit454e4d64ed1e6e11bb59e667f281caeb
+class ComposerAutoloaderInit9fd62ebd5bd49d4418181d3ab689ae3b
 {
     private static $loader;
 
@@ -24,9 +24,9 @@
 
         require __DIR__ . '/platform_check.php';
 
-        spl_autoload_register(array('ComposerAutoloaderInit454e4d64ed1e6e11bb59e667f281caeb', 'loadClassLoader'), true, true);
+        spl_autoload_register(array('ComposerAutoloaderInit9fd62ebd5bd49d4418181d3ab689ae3b', 'loadClassLoader'), true, true);
         self::$loader = $loader = new \Composer\Autoload\ClassLoader(\dirname(\dirname(__FILE__)));
-        spl_autoload_unregister(array('ComposerAutoloaderInit454e4d64ed1e6e11bb59e667f281caeb', 'loadClassLoader'));
+        spl_autoload_unregister(array('ComposerAutoloaderInit9fd62ebd5bd49d4418181d3ab689ae3b', 'loadClassLoader'));
 
         $includePaths = require __DIR__ . '/include_paths.php';
         $includePaths = get_include_path();
@@ -36,7 +36,7 @@
         if ($useStaticLoader) {
             require __DIR__ . '/autoload_static.php';
 
-            call_user_func(\Composer\Autoload\ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::getInitializer($loader));
+            call_user_func(\Composer\Autoload\ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::getInitializer($loader));
         } else {
             $map = require __DIR__ . '/autoload_namespaces.php';
             foreach ($map as $namespace => $path) {
@@ -57,19 +57,19 @@
         $loader->register(true);
 
         if ($useStaticLoader) {
-            $includeFiles = Composer\Autoload\ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$files;
+            $includeFiles = Composer\Autoload\ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$files;
         } else {
             $includeFiles = require __DIR__ . '/autoload_files.php';
         }
         foreach ($includeFiles as $fileIdentifier => $file) {
-            composerRequire454e4d64ed1e6e11bb59e667f281caeb($fileIdentifier, $file);
+            composerRequire9fd62ebd5bd49d4418181d3ab689ae3b($fileIdentifier, $file);
         }
 
         return $loader;
     }
 }
 
-function composerRequire454e4d64ed1e6e11bb59e667f281caeb($fileIdentifier, $file)
+function composerRequire9fd62ebd5bd49d4418181d3ab689ae3b($fileIdentifier, $file)
 {
     if (empty($GLOBALS'__composer_autoload_files'$fileIdentifier)) {
         require $file;

roundcubemail-1.5.3.tar.gz/vendor/composer/autoload_static.php -> roundcubemail-1.5.tar.gz/vendor/composer/autoload_static.php Changed

@@ -4,7 +4,7 @@
 
 namespace Composer\Autoload;
 
-class ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb
+class ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b
 {
     public static $files = array (
         '320cde22f66dd4f5d3fd621d3e88b98f' => __DIR__ . '/..' . '/symfony/polyfill-ctype/bootstrap.php',
@@ -63,6 +63,10 @@
             'Psr\\Http\\Message\\' => 17,
             'Prophecy\\' => 9,
         ),
+        'O' => 
+        array (
+            'OTPHP\\' => 6,
+        ),
         'M' => 
         array (
             'Masterminds\\' => 12,
@@ -82,6 +86,10 @@
             'Doctrine\\Instantiator\\' => 22,
             'DeepCopy\\' => 9,
         ),
+        'B' => 
+        array (
+            'Base32\\' => 7,
+        ),
     );
 
     public static $prefixDirsPsr4 = array (
@@ -167,6 +175,10 @@
         array (
             0 => __DIR__ . '/..' . '/phpspec/prophecy/src/Prophecy',
         ),
+        'OTPHP\\' => 
+        array (
+            0 => __DIR__ . '/..' . '/spomky-labs/otphp/lib',
+        ),
         'Masterminds\\' => 
         array (
             0 => __DIR__ . '/..' . '/masterminds/html5/src',
@@ -195,6 +207,10 @@
         array (
             0 => __DIR__ . '/..' . '/myclabs/deep-copy/src/DeepCopy',
         ),
+        'Base32\\' => 
+        array (
+            0 => __DIR__ . '/..' . '/christian-riesen/base32/src',
+        ),
     );
 
     public static $prefixesPsr0 = array (
@@ -257,6 +273,13 @@
                 0 => __DIR__ . '/..' . '/zf1/zend-cache/library',
             ),
         ),
+        'Y' => 
+        array (
+            'Yubikey' => 
+            array (
+                0 => __DIR__ . '/..' . '/enygma/yubikey/src',
+            ),
+        ),
         'R' => 
         array (
             'Roundcube\\Composer' => 
@@ -1006,11 +1029,11 @@
     public static function getInitializer(ClassLoader $loader)
     {
         return \Closure::bind(function () use ($loader) {
-            $loader->prefixLengthsPsr4 = ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$prefixLengthsPsr4;
-            $loader->prefixDirsPsr4 = ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$prefixDirsPsr4;
-            $loader->prefixesPsr0 = ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$prefixesPsr0;
-            $loader->fallbackDirsPsr0 = ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$fallbackDirsPsr0;
-            $loader->classMap = ComposerStaticInit454e4d64ed1e6e11bb59e667f281caeb::$classMap;
+            $loader->prefixLengthsPsr4 = ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$prefixLengthsPsr4;
+            $loader->prefixDirsPsr4 = ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$prefixDirsPsr4;
+            $loader->prefixesPsr0 = ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$prefixesPsr0;
+            $loader->fallbackDirsPsr0 = ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$fallbackDirsPsr0;
+            $loader->classMap = ComposerStaticInit9fd62ebd5bd49d4418181d3ab689ae3b::$classMap;
 
         }, null, ClassLoader::class);
     }

roundcubemail-1.5.3.tar.gz/vendor/composer/installed.json -> roundcubemail-1.5.tar.gz/vendor/composer/installed.json Changed

@@ -64,6 +64,68 @@
             "install-path": "../caxy/php-htmldiff"
         },
         {
+            "name": "christian-riesen/base32",
+            "version": "1.6.0",
+            "version_normalized": "1.6.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ChristianRiesen/base32.git",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ChristianRiesen/base32/zipball/2e82dab3baa008e24a505649b0d583c31d31e894",
+                "reference": "2e82dab3baa008e24a505649b0d583c31d31e894",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "require-dev": {
+                "friendsofphp/php-cs-fixer": "^2.17",
+                "phpstan/phpstan": "^0.12",
+                "phpunit/phpunit": "^8.5.13 || ^9.5"
+            },
+            "time": "2021-02-26T10:19:33+00:00",
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.x-dev"
+                }
+            },
+            "installation-source": "dist",
+            "autoload": {
+                "psr-4": {
+                    "Base32\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Christian Riesen",
+                    "email": "chris.riesen@gmail.com",
+                    "homepage": "http://christianriesen.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Base32 encoder/decoder according to RFC 4648",
+            "homepage": "https://github.com/ChristianRiesen/base32",
+            "keywords": 
+                "base32",
+                "decode",
+                "encode",
+                "rfc4648"
+            ,
+            "support": {
+                "issues": "https://github.com/ChristianRiesen/base32/issues",
+                "source": "https://github.com/ChristianRiesen/base32/tree/1.6.0"
+            },
+            "install-path": "../christian-riesen/base32"
+        },
+        {
             "name": "doctrine/instantiator",
             "version": "1.5.0",
             "version_normalized": "1.5.0.0",
@@ -194,6 +256,62 @@
             "install-path": "../endroid/qr-code"
         },
         {
+            "name": "enygma/yubikey",
+            "version": "3.3",
+            "version_normalized": "3.3.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/enygma/yubikey.git",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/enygma/yubikey/zipball/2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "reference": "2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.3.1"
+            },
+            "require-dev": {
+                "codeclimate/php-test-reporter": "dev-master",
+                "phpunit/phpunit": "4.3.2"
+            },
+            "time": "2018-03-08T20:38:39+00:00",
+            "type": "library",
+            "installation-source": "dist",
+            "autoload": {
+                "psr-0": {
+                    "Yubikey": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": 
+                "MIT"
+            ,
+            "authors": 
+                {
+                    "name": "Chris Cornutt",
+                    "email": "ccornutt@phpdeveloper.org",
+                    "homepage": "http://www.phpdeveloper.org/"
+                }
+            ,
+            "description": "PHP library to interface with the Yubikey REST API",
+            "homepage": "https://github.com/enygma/yubikey.git",
+            "keywords": 
+                "api",
+                "rest",
+                "twofactor",
+                "yubico",
+                "yubikey"
+            ,
+            "support": {
+                "issues": "https://github.com/enygma/yubikey/issues",
+                "source": "https://github.com/enygma/yubikey/tree/master"
+            },
+            "install-path": "../enygma/yubikey"
+        },
+        {
             "name": "ezyang/htmlpurifier",
             "version": "v4.16.0",
             "version_normalized": "4.16.0.0",
@@ -622,7 +740,7 @@
             "version_normalized": "3.5.11.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/calendar",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/calendar",
                 "reference": "bcca59cdaa6cf7b2109eac32685bb750425c305e"
             },
             "require": {
@@ -663,12 +781,53 @@
             "install-path": "../../plugins/calendar"
         },
         {
+            "name": "kolab/kolab_2fa",
+            "version": "3.5.11",
+            "version_normalized": "3.5.11.0",
+            "dist": {
+                "type": "path",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_2fa",
+                "reference": "ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e"
+            },
+            "require": {
+                "endroid/qr-code": "~1.6.5",
+                "enygma/yubikey": "~3.2",
+                "php": ">=5.3.0",
+                "roundcube/plugin-installer": ">=0.1.3",
+                "spomky-labs/otphp": "~5.0.0"
+            },
+            "type": "roundcube-plugin",
+            "installation-source": "dist",
+            "license": 
+                "AGPLv3"
+            ,
+            "authors": 
+                {
+                    "name": "Thomas Bruederli",
+                    "email": "bruederli@kolabsys.com",
+                    "role": "Lead"
+                },
+                {
+                    "name": "Aleksander Machniak",
+                    "email": "machniak@kolabsys.com",
+                    "role": "Developer"
+                }
+            ,
+            "description": "Kolab 2-Factor Authentication",
+            "homepage": "https://git.kolab.org/diffusion/RPK/",
+            "transport-options": {
+                "symlink": false,
+                "relative": false
+            },
+            "install-path": "../../plugins/kolab_2fa"
+        },
+        {
             "name": "kolab/kolab_activesync",
             "version": "3.5.6",
             "version_normalized": "3.5.6.0",
             "dist": {
                 "type": "path",
-                "url": "/tmp/roundcubemail-1.5.3/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
+                "url": "/tmp/roundcubemail-1.5/roundcubemail-plugins-kolab-latest/plugins/kolab_activesync",
                 "reference": "7e8c46290074fe6c1ab72bc9f6b90aa271ee16ef"
             },
             "require": {
@@ -707,7 +866,7 @@
             "version_normalized": "3.5.10.0",
             "dist": {
                 "type": "path",

roundcubemail-1.5.3.tar.gz/vendor/composer/installed.php -> roundcubemail-1.5.tar.gz/vendor/composer/installed.php Changed

@@ -5,7 +5,7 @@
         'type' => 'library',
         'install_path' => __DIR__ . '/../../',
         'aliases' => array(),
-        'reference' => '0e7dda399d920cb31cf583b64231a5dd1e56d148',
+        'reference' => '8907e7e75d00020a45463439621f3d7f418704f5',
         'name' => 'roundcube/roundcubemail',
         'dev' => true,
     ),
@@ -19,6 +19,15 @@
             'reference' => '4bad5c6a4ecc76954d37764e6a29273b6b7bf1f8',
             'dev_requirement' => false,
         ),
+        'christian-riesen/base32' => array(
+            'pretty_version' => '1.6.0',
+            'version' => '1.6.0.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../christian-riesen/base32',
+            'aliases' => array(),
+            'reference' => '2e82dab3baa008e24a505649b0d583c31d31e894',
+            'dev_requirement' => false,
+        ),
         'doctrine/instantiator' => array(
             'pretty_version' => '1.5.0',
             'version' => '1.5.0.0',
@@ -37,6 +46,15 @@
             'reference' => 'cef5d5b7b904d7bb0708eb744c35316364b65fa0',
             'dev_requirement' => false,
         ),
+        'enygma/yubikey' => array(
+            'pretty_version' => '3.3',
+            'version' => '3.3.0.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../enygma/yubikey',
+            'aliases' => array(),
+            'reference' => '2c2502dd85ed3d13c08fbb8a3eef516fdef58ec6',
+            'dev_requirement' => false,
+        ),
         'ezyang/htmlpurifier' => array(
             'pretty_version' => 'v4.16.0',
             'version' => '4.16.0.0',
@@ -91,6 +109,15 @@
             'reference' => 'bcca59cdaa6cf7b2109eac32685bb750425c305e',
             'dev_requirement' => false,
         ),
+        'kolab/kolab_2fa' => array(
+            'pretty_version' => '3.5.11',
+            'version' => '3.5.11.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/kolab_2fa',
+            'aliases' => array(),
+            'reference' => 'ea133d30ae41f9ad3e3275d4bf11440aaa1fe20e',
+            'dev_requirement' => false,
+        ),
         'kolab/kolab_activesync' => array(
             'pretty_version' => '3.5.6',
             'version' => '3.5.6.0',
@@ -172,6 +199,15 @@
             'reference' => '07297b8ea8b3827d0ba46801760854b0db560576',
             'dev_requirement' => false,
         ),
+        'kolab/kolab_sso' => array(
+            'pretty_version' => '3.5.4',
+            'version' => '3.5.4.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/kolab_sso',
+            'aliases' => array(),
+            'reference' => 'a15ea62c786c8ffa4bb6fe27cbb7d4de7f193917',
+            'dev_requirement' => false,
+        ),
         'kolab/kolab_tags' => array(
             'pretty_version' => '3.5.2',
             'version' => '3.5.2.0',
@@ -199,6 +235,15 @@
             'reference' => '30bad7150f1999a5a2a0d33c9bcd490514a4a307',
             'dev_requirement' => false,
         ),
+        'kolab/logon_page' => array(
+            'pretty_version' => '3.4.2',
+            'version' => '3.4.2.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/logon_page',
+            'aliases' => array(),
+            'reference' => '262a87c48721ba04a581eb5c1f8dcfd44a565993',
+            'dev_requirement' => false,
+        ),
         'kolab/net_ldap3' => array(
             'pretty_version' => 'v1.1.4',
             'version' => '1.1.4.0',
@@ -208,6 +253,15 @@
             'reference' => 'ec4f0d6918aa4b5364e99e1132e0a5a9b3ab23ab',
             'dev_requirement' => false,
         ),
+        'kolab/nextcloud_link' => array(
+            'pretty_version' => '1.0',
+            'version' => '1.0.0.0',
+            'type' => 'roundcube-plugin',
+            'install_path' => __DIR__ . '/../../plugins/nextcloud_link',
+            'aliases' => array(),
+            'reference' => 'f00215f711dc4d376fb667d0d97c238c0b9e791f',
+            'dev_requirement' => false,
+        ),
         'kolab/odfviewer' => array(
             'pretty_version' => '3.4.0',
             'version' => '3.4.0.0',
@@ -425,12 +479,12 @@
             'dev_requirement' => true,
         ),
         'phpstan/phpstan' => array(
-            'pretty_version' => '1.10.15',
-            'version' => '1.10.15.0',
+            'pretty_version' => '1.10.18',
+            'version' => '1.10.18.0',
             'type' => 'library',
             'install_path' => __DIR__ . '/../phpstan/phpstan',
             'aliases' => array(),
-            'reference' => '762c4dac4da6f8756eebb80e528c3a47855da9bd',
+            'reference' => '52b6416c579663eebdd2f1d97df21971daf3b43f',
             'dev_requirement' => true,
         ),
         'phpunit/php-code-coverage' => array(
@@ -544,7 +598,7 @@
             'type' => 'library',
             'install_path' => __DIR__ . '/../../',
             'aliases' => array(),
-            'reference' => '0e7dda399d920cb31cf583b64231a5dd1e56d148',
+            'reference' => '8907e7e75d00020a45463439621f3d7f418704f5',
             'dev_requirement' => false,
         ),
         'roundcube/rtf-html-php' => array(
@@ -715,6 +769,15 @@
             'reference' => '2fc443806cdcaee4441be4d0bb09f8fa56a17f2c',
             'dev_requirement' => false,
         ),
+        'spomky-labs/otphp' => array(
+            'pretty_version' => 'v5.0.1',
+            'version' => '5.0.1.0',
+            'type' => 'library',
+            'install_path' => __DIR__ . '/../spomky-labs/otphp',
+            'aliases' => array(),
+            'reference' => 'ada44930d9d85be1480123eca418c8c24e9a1f96',
+            'dev_requirement' => false,
+        ),
         'squizlabs/php_codesniffer' => array(
             'pretty_version' => '3.7.2',
             'version' => '3.7.2.0',

roundcubemail-1.5.tar.gz/vendor/enygma Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/.travis.yml Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/LICENSE.md Added

@@ -0,0 +1,7 @@
+Copyright 2017 Chris Cornutt <ccornutt@phpdeveloper.org>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/README.md Added

@@ -0,0 +1,106 @@
+Yubikey PHP Library
+=======================
+
+!Travis-CI Build Status(https://secure.travis-ci.org/enygma/yubikey.png?branch=master)(http://travis-ci.org/enygma/yubikey)
+!Codacy Badge(https://www.codacy.com/project/badge/6b73c56a21734a6d93dae6019f733c5e)(https://www.codacy.com)
+!Code Climate(https://codeclimate.com/github/enygma/yubikey/badges/gpa.svg)(https://codeclimate.com/github/enygma/yubikey)
+!Total Downloads(https://img.shields.io/packagist/dt/enygma/yubikey.svg?style=flat-square)(https://packagist.org/packages/enygma/yubikey)
+
+This library lets you easily interface with the Yubico REST API for validating
+the codes created by the Yubikey.
+
+### Requirements:
+
+- An API as requested from the Yubico site
+- A client ID requested from Yubico
+- A Yubikey to test out the implementation
+
+### Installation
+
+Use the followng command to install the library via Composer:
+
+```
+composer require enygma/yubikey
+```
+
+### Usage:
+
+Look at the `test.php` example script to see how to use it. This can be executed like:
+
+`php test.php generated key`
+
+Example code:
+
+```php
+<?php
+$apiKey = 'dGVzdGluZzEyMzQ1Njc4OTA=';
+$clientId = '12345';
+
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey);
+
+echo ($response->success() === true) ? 'success!' : 'you failed. aw.';
+?>
+```
+
+### HTTP vs HTTPS
+
+By default the library will try to use a `HTTPS` request to the host given. If you need to disable this for some reason
+(like no SSL support), you can use the `setUseSecure` method and set it to false:
+
+```php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$v->setUseSecure(false);
+```
+
+### Overriding hosts
+
+The library comes with a set of hostnames for the Yubico external API servers (api.yubico.com through api5.yubico.com). If
+you ever have a need to override these, you can use `setHosts`:
+
+```php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$v->setHosts(array(
+    'api.myhost1.com',
+    'api1.myhost.com'
+));
+```
+Remember, this will *overwrite* the current hosts in the class, so be sure you don't still need those. If you just want to add
+another host, look at the `addHost` method.
+
+### Multi-Server Requests:
+
+Additonally, the library also supports simultaneous connections to multiple servers. By default it will only make
+the request to the first server in the `hosts` list. You can enable the multi-server checking with a second parameter on
+the `check()` method:
+
+```php
+<?php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey, true);
+
+echo ($response->success() === true) ? 'success!' : 'you failed. aw.';
+?>
+````
+
+This will make multiple requests and return the pass/fail status of the aggregate responses from each. So, if you have all but one
+server pass, the overall response will be a fail. If all return `OK` though, you're in the clear.
+
+### "First in" result
+
+Additionally, you can also switch on and off this aggregation of the results and go with only the "first in" response. You do this
+with a flag on the `success` checking method:
+
+```php
+<?php
+$v = new \Yubikey\Validate($apiKey, $clientId);
+$response = $v->check($inputtedKey, true);
+
+echo ($response->success(true) === true) ? 'success!' : 'you failed. aw.';
+?>
+````
+
+**NOTE:** This will still work without multi-server checking. The "first in" will just always be the single response.
+
+
+@author Chris Cornutt <ccornutt@phpdeveloper.org>

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/composer.json Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/Client.php Added

@@ -0,0 +1,65 @@
+<?php
+namespace Yubikey;
+
+class Client
+{
+    /**
+     * Send the request(s) via curl
+     *
+     * @param  array|\Yukikey\RequestCollection $requests Set of \Yubikey\Request objects
+     * @return \Yubikey\ResponseCollection instance
+     */
+    public function send($requests)
+    {
+        if (get_class($requests) !== 'Yubikey\\RequestCollection') {
+            $requests = new \Yubikey\RequestCollection($requests);
+        }
+
+        $responses = $this->request($requests);
+        return $responses;
+    }
+
+    /**
+     * Make the request given the Request set and content
+     *
+     * @param \Yubikey\RequestCollection $requests Request collection
+     * @return \Yubikey\ResponseCollection instance
+     */
+    public function request(\Yubikey\RequestCollection $requests)
+    {
+        $responses = new \Yubikey\ResponseCollection();
+        $startTime = microtime(true);
+        $multi = curl_multi_init();
+        $curls = array();
+
+        foreach ($requests as $index => $request) {
+            $curls$index = curl_init();
+            curl_setopt_array($curls$index, array(
+                CURLOPT_URL => $request->getUrl(),
+                CURLOPT_HEADER => 0,
+                CURLOPT_RETURNTRANSFER => 1
+            ));
+            curl_multi_add_handle($multi, $curls$index);
+        }
+
+        do {
+            while ((curl_multi_exec($multi, $active)) == CURLM_CALL_MULTI_PERFORM);
+            while ($info = curl_multi_info_read($multi)) {
+                if ($info'result' == CURLE_OK) {
+                    $return = curl_multi_getcontent($info'handle');
+                    $cinfo = curl_getinfo($info'handle');
+                    $url = parse_url($cinfo'url');
+
+                    $response = new \Yubikey\Response(array(
+                        'host' => $url'host',
+                        'mt' => (microtime(true)-$startTime)
+                    ));
+                    $response->parse($return);
+                    $responses->add($response);
+                }
+            }
+        } while ($active);
+
+        return $responses;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/Request.php Added

@@ -0,0 +1,73 @@
+<?php
+
+namespace Yubikey;
+
+class Request
+{
+    /**
+     * Request HTTP type (verb)
+     * @var string
+     */
+    private $type = 'GET';
+
+    /**
+     * Request URL location
+     * @var string
+     */
+    private $url;
+
+    /**
+     * Init the object and set the URL if given
+     *
+     * @param string $url URL to request
+     */
+    public function __construct($url = null)
+    {
+        if ($url !== null) {
+            $this->setUrl($url);
+        }
+    }
+
+    /**
+     * Get the type of request
+     *
+     * @return string HTTP verb type
+     */
+    public function getType()
+    {
+        return $this->type;
+    }
+
+    /**
+     * Set the type of the request
+     *
+     * @param string $type HTTP verb type
+     */
+    public function setType($type)
+    {
+        $this->type = $type;
+    }
+
+    /**
+     * Get the current request URL location
+     *
+     * @return string URL location
+     */
+    public function getUrl()
+    {
+        return $this->url;
+    }
+
+    /**
+     * Set the URL location for the request
+     *
+     * @param string $url URL location
+     */
+    public function setUrl($url)
+    {
+        if (filter_var($url, FILTER_VALIDATE_URL) !== $url) {
+            throw new \Exception('Invalid URL: '.$url);
+        }
+        $this->url = $url;
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/RequestCollection.php Added

@@ -0,0 +1,143 @@
+<?php
+
+namespace Yubikey;
+
+class RequestCollection implements \Countable, \Iterator, \ArrayAccess
+{
+    /**
+     * Set of \Yubikey\Request objects
+     * @var array
+     */
+    private $requests = array();
+
+    /**
+     * Current array position
+     * @var integer
+     */
+    private $position = 0;
+
+    /**
+     * Init the collection and set requests data if given
+     *
+     * @param array $requests Set of \Yubikey\Requests objects
+     */
+    public function __construct(array $requests = array())
+    {
+        if (!empty($requests)) {
+            foreach ($requests as $request) {
+                $this->add($request);
+            }
+        }
+    }
+
+    /**
+     * Add the given request to the set
+     *
+     * @param \Yubikey\Request $request Request object
+     */
+    public function add(\Yubikey\Request $request)
+    {
+        $this->requests = $request;
+    }
+
+    /**
+     * For Countable
+     *
+     * @return integer Count of current Requests
+     */
+    public function count()
+    {
+        return count($this->requests);
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return Current Request object
+     */
+    public function current()
+    {
+        return $this->requests$this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Current position in set
+     */
+    public function key()
+    {
+        return $this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Next positiion in set
+     */
+    public function next()
+    {
+        return ++$this->position;
+    }
+
+    /**
+     * For Iterator, rewind set location to beginning
+     */
+    public function rewind()
+    {
+        $this->position = 0;
+    }
+
+    /**
+     * For Iterator, check to see if set item is valid
+     *
+     * @return boolean Valid/invalid result
+     */
+    public function valid()
+    {
+        return isset($this->requests$this->position);
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset identifier
+     * @return boolean Found/not found result
+     */
+    public function offsetExists($offset)
+    {
+        return (isset($this->requests$offset));
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to locate
+     * @return \Yubikey\Request object if found
+     */
+    public function offsetGet($offset)
+    {
+        return $this->requests$offset;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to use in data set
+     * @param mixed $data Data to assign
+     */
+    public function offsetSet($offset, $data)
+    {
+        $this->requests$offset = $data;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to remove
+     */
+    public function offsetUnset($offset)
+    {
+        unset($this->requests$offset);
+    }
+}
\ No newline at end of file

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/Response.php Added

@@ -0,0 +1,286 @@
+<?php
+
+namespace Yubikey;
+
+class Response
+{
+    /**
+     * Returned value of the hash given in the request
+     * @var string
+     */
+    private $h = null;
+
+    /**
+     * Timestamp in UTC of request
+     * @var string
+     */
+    private $t = null;
+
+    /**
+     * OTP given in request
+     * @var string
+     */
+    private $otp = null;
+
+    /**
+     * Nonce given in the request
+     * @var string
+     */
+    private $nonce = null;
+
+    /**
+     * Percent of validation servers that replied with "success" (0% - 100%)
+     * @var integer
+     */
+    private $sl = null;
+
+    /**
+     * Status of the response (see constants below)
+     * @var string
+     */
+    private $status = null;
+
+    /**
+     * OTP given by the user (used for verification)
+     * @var string
+     */
+    private $inputOtp = null;
+
+    /**
+     * Nonce used in the request (used for verification)
+     * @var string
+     */
+    private $inputNonce = null;
+
+    /**
+     * Timestamp returned from the response
+     * @var string
+     */
+    private $timestamp = null;
+
+    /**
+     * Session counter
+     * @var integer
+     */
+    private $sessioncounter = null;
+
+    /**
+     * Session use #
+     * @var integer
+     */
+    private $sessionuse = null;
+
+    /**
+     * Hostname request was made to
+     * @var string
+     */
+    private $host;
+
+    /**
+     * Microtime difference taken to get response
+     * @var integer
+     */
+    private $mt;
+
+    /**
+     * Define constants for the return status from API
+     */
+    const SUCCESS = 'OK';
+    const REPLAY_OTP = 'REPLAYED_OTP';
+    const REPLAY_REQUEST = 'REPLAYED_REQUEST';
+    const MISSING_PARAMETER = 'MISSING_PARAMETER';
+    const NO_CLIENT = 'NO_SUCH_CLIENT';
+    const BAD_OTP = 'BAD_OTP';
+    const BAD_SIGNATURE = 'BAD_SIGNATURE';
+    const OP_NOT_ALLOWED = 'OPERATION_NOT_ALLOWED';
+    const BACKEND_ERROR = 'BACKEND_ERROR';
+    const NOT_ENOUGH_ANSWERS = 'NOT_ENOUGH_ANSWERS';
+
+    /**
+     * Init the object and set the data into the response
+     *
+     * @param array $data Data from the Yubi API response
+     */
+    public function __construct($data = null)
+    {
+        if ($data !== null) {
+            $this->load($data);
+        }
+    }
+
+    /**
+     * Load the data into the object
+     *
+     * @param array $data Data from the object
+     * @return boolean True when loading is done
+     */
+    public function load($data)
+    {
+        foreach ($data as $index => $value) {
+            if (property_exists($this, $index)) {
+                $this->$index = trim($value);
+            }
+        }
+        return true;
+    }
+
+    /**
+     * Parse the return data from the request and
+     *     load it into the object properties
+     *
+     * @param string $data API return data
+     */
+    public function parse($data)
+    {
+        $result = array();
+        $parts = explode("\n", $data);
+
+        foreach($parts as $index => $part) {
+            $kv = explode("=", $part);
+            if (!empty($kv1)) {
+                $result$kv0 = $kv1;
+            }
+        }
+
+        $this->load($result);
+    }
+
+    /**
+     * Get the time value for the response
+     *
+     * @return string Date/time string
+     */
+    public function getTime()
+    {
+        return $this->t;
+    }
+
+    /**
+     * Return the time to execute (microtime)
+     *
+     * @return integer Time result
+     */
+    public function getMt()
+    {
+        return $this->mt;
+    }
+
+    /**
+     * Set the OTP used in the request
+     * @param string $otp OTP string (from key)
+     */
+    public function setInputOtp($otp)
+    {
+        $this->inputOtp = $otp;
+        return $this;
+    }
+
+    /**
+     * Get the OTP used in the request
+     * @return string OTP string
+     */
+    public function getInputOtp()
+    {
+        return $this->inputOtp;
+    }
+
+    /**
+     * Set the nonce used in the request
+     * @param string $nonce Nonce from request
+     */
+    public function setInputNonce($nonce)
+    {
+        $this->inputNonce = $nonce;
+        return $this;
+    }
+
+    /**
+     * Get the nonce used in the request
+     * @return string Nonce from request

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/ResponseCollection.php Added

@@ -0,0 +1,172 @@
+<?php
+
+namespace Yubikey;
+
+class ResponseCollection implements \Countable, \Iterator, \ArrayAccess
+{
+    /**
+     * Set of \Yubikey\Response objects
+     * @var array
+     */
+    private $responses = array();
+
+    /**
+     * Position in the data set (for Iterator)
+     * @var integer
+     */
+    private $position = 0;
+
+    /**
+     * Init the object and set the Response objects if provided
+     *
+     * @param array $responses Response object set
+     */
+    public function __construct(array $responses = array())
+    {
+        if (!empty($responses)) {
+            foreach ($responses as $response) {
+                $this->add($response);
+            }
+        }
+    }
+
+    /**
+     * Determine, based on the Response status (success)
+     *     if the overall operation was successful
+     *
+     * @return boolean Success/fail status
+     */
+    public function success($first = false)
+    {
+        $success = false;
+        if ($first === true) {
+            // Sort them by timestamp, pop the first one and return pass/fail
+            usort($this->responses, function(\Yubikey\Response $r1, \Yubikey\Response $r2) {
+                return $r1->getMt() > $r2->getMt();
+            });
+            $response = $this->responses0;
+            return $response->success();
+        } else {
+            foreach ($this->responses as $response) {
+                if ($response->success() === false
+                    && $response->status !== Response::REPLAY_REQUEST) {
+                    return false;
+                } elseif ($response->success()) {
+                    $success = true;
+                }
+            }
+        }
+        return $success;
+    }
+
+    /**
+     * Add a new Response object to the set
+     *
+     * @param \Yubikey\Response $response Response object
+     */
+    public function add(\Yubikey\Response $response)
+    {
+        $this->responses = $response;
+    }
+
+        /**
+     * For Countable
+     *
+     * @return integer Count of current Requests
+     */
+    public function count()
+    {
+        return count($this->responses);
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return Current Request object
+     */
+    public function current()
+    {
+        return $this->responses$this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Current position in set
+     */
+    public function key()
+    {
+        return $this->position;
+    }
+
+    /**
+     * For Iterator
+     *
+     * @return integer Next positiion in set
+     */
+    public function next()
+    {
+        return ++$this->position;
+    }
+
+    /**
+     * For Iterator, rewind set location to beginning
+     */
+    public function rewind()
+    {
+        $this->position = 0;
+    }
+
+    /**
+     * For Iterator, check to see if set item is valid
+     *
+     * @return boolean Valid/invalid result
+     */
+    public function valid()
+    {
+        return isset($this->responses$this->position);
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset identifier
+     * @return boolean Found/not found result
+     */
+    public function offsetExists($offset)
+    {
+        return (isset($this->responses$offset));
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to locate
+     * @return \Yubikey\Request object if found
+     */
+    public function offsetGet($offset)
+    {
+        return $this->responses$offset;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to use in data set
+     * @param mixed $data Data to assign
+     */
+    public function offsetSet($offset, $data)
+    {
+        $this->responses$offset = $data;
+    }
+
+    /**
+     * For ArrayAccess
+     *
+     * @param mixed $offset Offset to remove
+     */
+    public function offsetUnset($offset)
+    {
+        unset($this->responses$offset);
+    }
+}

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/src/Yubikey/Validate.php Added

@@ -0,0 +1,412 @@
+<?php
+
+namespace Yubikey;
+
+class Validate
+{
+    /**
+     * Yubico API hosts
+     * @var array
+     */
+    private $hosts = array(
+        'api.yubico.com',
+        'api2.yubico.com',
+        'api3.yubico.com',
+        'api4.yubico.com',
+        'api5.yubico.com'
+    );
+
+    /**
+     * Selected hosted for request
+     * @var string
+     */
+    private $host = null;
+
+    /**
+     * API given for request
+     * @var string
+     */
+    private $apiKey = null;
+
+    /**
+     * Use a secure/insecure connection (HTTPS vs HTTP)
+     * @var boolean
+     */
+    private $useSecure = true;
+
+    /**
+     * OTP provided by user
+     * @var string
+     */
+    private $otp = null;
+
+    /**
+     * Yubikey ID, to identify a connected user
+     * @var string
+     */
+    private $yubikeyid = null;
+
+    /**
+     * Init the object and set the API key, Client ID and optionally hosts
+     *
+     * @param string $apiKey API Key
+     * @param string $clientId Client ID
+     * @param array $hosts Set of hostnames (overwrites current)
+     * @throws \DomainException If curl is not enabled
+     */
+    public function __construct($apiKey, $clientId, array $hosts = array())
+    {
+        if ($this->checkCurlSupport() === false) {
+            throw new \DomainException('cURL support is required and is not enabled!');
+        }
+
+        $this->setApiKey($apiKey);
+        $this->setClientId($clientId);
+
+        if (!empty($hosts)) {
+            $this->setHosts($hosts);
+        }
+    }
+
+    /**
+     * Check for enabled curl support (requirement)
+     *
+     * @return boolean Enabled/not found flag
+     */
+    public function checkCurlSupport()
+    {
+        return (function_exists('curl_init'));
+    }
+
+    /**
+     * Get the currently set API key
+     *
+     * @return string API key
+     */
+    public function getApiKey($decoded = false)
+    {
+        return ($decoded === false) ? $this->apiKey : base64_decode($this->apiKey);
+    }
+
+    /**
+     * Set the API key
+     *
+     * @param string $apiKey API request key
+     */
+    public function setApiKey($apiKey)
+    {
+        $key = base64_decode($apiKey, true);
+        if ($key === false) {
+            throw new \InvalidArgumentException('Invalid API key');
+        }
+
+        $this->apiKey = $key;
+        return $this;
+    }
+
+    /**
+     * Set the OTP for the request
+     *
+     * @param string $otp One-time password
+     */
+    public function setOtp($otp)
+    {
+        $this->otp = $otp;
+        return $this;
+    }
+
+    /**
+     * Get the currently set OTP
+     *
+     * @return string One-time password
+     */
+    public function getOtp()
+    {
+        return $this->otp;
+    }
+
+    /**
+     * Get the current Client ID
+     *
+     * @return integer Client ID
+     */
+    public function getClientId()
+    {
+        return $this->clientId;
+    }
+
+    /**
+     * Set the current Client ID
+     *
+     * @param integer $clientId Client ID
+     */
+    public function setClientId($clientId)
+    {
+        $this->clientId = $clientId;
+        return $this;
+    }
+
+    /**
+     * Get the "use secure" setting
+     *
+     * @return boolean Use flag
+     */
+    public function getUseSecure()
+    {
+        return $this->useSecure;
+    }
+
+    /**
+     * Set the "use secure" setting
+     *
+     * @param boolean $use Use/don't use secure
+     * @throws \InvalidArgumentException when value is not boolean
+     */
+    public function setUseSecure($use)
+    {
+        if (!is_bool($use)) {
+            throw new \InvalidArgumentException('"Use secure" value must be boolean');
+        }
+        $this->useSecure = $use;
+        return $this;
+    }
+
+    /**
+     * Get the host for the request
+     *     If one is not set, it returns a random one from the host set
+     *
+     * @return string Hostname string
+     */
+    public function getHost()
+    {
+        if ($this->host === null) {
+            // pick a "random" host
+            $host = $this->hostsmt_rand(0,count($this->hosts)-1);
+            $this->setHost($host);
+            return $host;
+        } else {
+            return $this->host;
+        }
+    }
+
+    /**
+     * Get the current hosts list
+     *
+     * @return array Hosts list
+     */
+    public function getHosts()
+    {
+        return $this->hosts;

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/test.php Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/tests Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/tests/ValidateTest.php Added

@@ -0,0 +1,179 @@
+<?php
+
+class ValidateTest extends \PHPUnit_Framework_TestCase
+{
+    private $validate = null;
+
+    private $apiKey = 'dGVzdGluZzEyMzQ1Njc4OTA=';
+
+    private $clientId = 12345;
+
+    public function setUp()
+    {
+        $this->validate = new \Yubikey\Validate($this->apiKey, $this->clientId);
+    }
+
+    /**
+     * Test the getter and setter for the API key
+     * @covers \Yubikey\Validate::setApiKey
+     * @covers \Yubikey\Validate::getApiKey
+     */
+    public function testGetSetApiKey()
+    {
+        $preKey = 'testing1234567890';
+        $key = base64_encode($preKey);
+
+        $this->validate->setApiKey($key);
+        $this->assertEquals($this->validate->getApiKey(), $preKey);
+    }
+
+    /**
+     * Test the setting of a non-base64 encoded API key
+     * @covers \Yubikey\Validate::setApiKey
+     * @expectedException \InvalidArgumentException
+     */
+    public function testSetInvalidApiKey()
+    {
+        $key = 'testing1234^%$#^#';
+        $this->validate->setApiKey($key);
+    }
+
+    /**
+     * Test the getter and setter for the One-time password
+     * @covers \Yubikey\Validate::setOtp
+     * @covers \Yubikey\Validate::getOtp
+     */
+    public function testGetSetOtp()
+    {
+        $otp = base64_encode('testing1234567890');
+
+        $this->validate->setOtp($otp);
+        $this->assertEquals($this->validate->getOtp(), $otp);
+    }
+
+    /**
+     * Test that the getter/setter for the Client ID works correctly
+     * @covers \Yubikey\Validate::getClientId
+     * @covers \Yubikey\Validate::setClientId
+     */
+    public function testGetSetClientId()
+    {
+        $clientId = 12345;
+
+        $this->validate->setClientId($clientId);
+        $this->assertEquals($clientId, $this->validate->getClientId());
+    }
+
+    /**
+     * Test thta the getter/setter for the "use secure" setting works correctly
+     * @covers \Yubikey\Validate::setUseSecure
+     * @covers \Yubikey\Validate::getUseSecure
+     */
+    public function testGetSetUseSecure()
+    {
+        $useSecure = true;
+
+        $this->validate->setUseSecure($useSecure);
+        $this->assertEquals($useSecure, $this->validate->getUseSecure());
+    }
+
+    /**
+     * Test that an exception is thrown when the "use secure" valus
+     *     is not boolean
+     *
+     * @expectedException \InvalidArgumentException
+     * @covers \Yubikey\Validate::setUseSecure
+     */
+    public function testSetUseSecureInvalid()
+    {
+        $useSecure = 'invalid';
+        $this->validate->setUseSecure($useSecure);
+    }
+
+    /**
+     * Test that the getter/setter for the host works correctly
+     * @covers \Yubikey\Validate::setHost
+     * @covers \Yubikey\Validate::getHost
+     */
+    public function testGetSetHost()
+    {
+        $host = 'test.foo.com';
+
+        $this->validate->setHost($host);
+        $this->assertEquals($this->validate->getHost(), $host);
+    }
+
+    /**
+     * Test that a valid random host is selected if none was previously set
+     * @covers \Yubikey\Validate::getHost
+     */
+    public function testGetRandomHost()
+    {
+        $host1 = $this->validate->getHost();
+        $this->assertNotEquals($host1, null);
+    }
+
+    /**
+     * Test that the signature generation is valid
+     * @covers \Yubikey\Validate::generateSignature
+     */
+    public function testSignatureGenerate()
+    {
+        $data = array('foo' => 'bar');
+        $key = $this->validate->getApiKey();
+        $hash = preg_replace(
+            '/\+/', '%2B',
+            base64_encode(hash_hmac('sha1', http_build_query($data), $key, true))
+        );
+
+        $signature = $this->validate->generateSignature($data);
+        $this->assertEquals($hash, $signature);
+    }
+
+    /**
+     * Test that an exception is thrown when the API is invalid (null or empty)
+     * @covers \Yubikey\Validate::generateSignature
+     * @expectedException \InvalidArgumentException
+     */
+    public function testSignatureGenerateNoApiKey()
+    {
+        $key = null;
+        $data = array('foo' => 'bar');
+        $validate = new \Yubikey\Validate($key, $this->clientId);
+        $hash = preg_replace(
+            '/\+/', '%2B',
+            base64_encode(hash_hmac('sha1', http_build_query($data), $key, true))
+        );
+
+        $signature = $validate->generateSignature($data);
+    }
+
+    /**
+     * Add a new Host to the list
+     * @covers \Yubikey\Validate::addHost
+     */
+    public function testAddNewHost()
+    {
+        $this->validate->addHost('test.com');
+        $this->assertTrue(
+            in_array('test.com', $this->validate->getHosts())
+        );
+    }
+
+    /**
+     * Set the new Hosts list (override)
+     * @covers \Yubikey\Validate::setHosts
+     * @covers \Yubikey\Validate::getHosts
+     */
+    public function testSetHosts()
+    {
+        $hosts = array('foo.com');
+        $this->validate->setHosts($hosts);
+
+        $this->assertEquals(
+            $this->validate->getHosts(),
+            $hosts
+        );
+    }
+}
+

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/tests/bootstrap.php Added

roundcubemail-1.5.tar.gz/vendor/enygma/yubikey/tests/phpunit.xml Added

roundcubemail-1.5.3.tar.gz/vendor/phpstan/phpstan/phpstan.phar -> roundcubemail-1.5.tar.gz/vendor/phpstan/phpstan/phpstan.phar Changed

roundcubemail-1.5.3.tar.gz/vendor/phpstan/phpstan/phpstan.phar.asc -> roundcubemail-1.5.tar.gz/vendor/phpstan/phpstan/phpstan.phar.asc Changed

@@ -1,16 +1,16 @@
 -----BEGIN PGP SIGNATURE-----
 
-iQIzBAABCgAdFiEEynwsejDI6OEnSoR2UcZzBf/C5cAFAmRaZmcACgkQUcZzBf/C
-5cAn/Q//fbWiR/qaSvlHpk73KH7iDfoHwNvRrHSQODZdMa4PGiEbL+SXsKnRxFDo
-kEJZwgU5qi3WMflt7Ml3dYDlQDgoDerdaiySYFoBcv1NXDWKoF7+Egy1AHxpfNq+
-FMCkZNR2ulSaYUCofM4GkTNap4yVkPCy289ZU6yUmRnJxF+hh/CFfdVPAPbwh/a6
-UqV3R2ENJZSbtA1pzSTBpUPQGQ9qcsqngKyNyxk1hEd9opdMg2eSFvO1e1ZZm/Tk
-Kgh5wCbsbSJuRPGO4vbiybTeO/qXPDlHV6oA5SHnjJ4H24phCsHdyJHHvLQmrUeR
-BKHgnH1y/b5J9cgr9OgEQJK9TMHHd6dii9//Qp+0rUZIDZ4Ym2lDSA/Vn/D9GoV3
-zo4QYzW3TvE3QMdnLcX/ZtaLliPdDYIaYUXOiyaYwLFGVxSWZWOC5IN0G0bLJb39
-Ca/z839nkWdMqg68q/oHC2Nk/v/KZnKg1RlRjYhj53T6nr0JDEiaYMyETSOIFsVX
-AcCQnLLwMndUAibJAyORDnTk+ipg0SecFoPvvhea1BtlTfhSDIlrT4OPKZ5nExzd
-nR/zGbIH8lCvsBc+hq+Kgodtfs5nauwEOwlVUwet26xL1YKOd0jxz+Zp6tgk0wba
-cMf5L9fm85j83DQYr7Ukaaj81kmMujRWDo/dRojKhUlJUrNnjXA=
-=jTtX
+iQIzBAABCgAdFiEEynwsejDI6OEnSoR2UcZzBf/C5cAFAmSA/fQACgkQUcZzBf/C
+5cCwLA/+K91IrL7ggTr2A/gptErLu05s1wUZ0meZfNi+457tcWsspaI67gSiqxIH
+cypjMFL7gvwedB9dxJct+e0HmhYbkyjQJgqadOYHiqiG0LVdxRnd6X2ZIoargOUw
+V4J4+3Avdfp00kUMUoLh1cczSlriT8rrUA7wFahfIalgT2vw7ZxbjusbAgI7cA5Z
+P6T933/Q+mSUd2HN1iZ/kyNxtGhyqb3ZiuW+Cs0lnz2ojhvg79lsmDrEF1LRyRg7
+Nsn1paL4Uivo8lTheLOVtjLS1G/4Rk3ZJjyuJDnuyI3BMwpD1cLizW+6bs9ydHCx
+pbSticFoEbaSqnKeXOrqS9ci8QnC8zHVYdYi+yBI76Cf9LvORd90TC+sApxm6vC/
+66jOuHxrkX85enRgS1e7pxSJjDl6XdW+hdAAgp0BAI48Ec++X4EE5IY5+N465c4K
+TJ/xjco+e4TSG7RMCaq+USuSXF1vM+ZDKU+TtmkH8oH8gwAYLvd2Kpki0DCMrt3q
+rxrKkbzFt6q8rNhUPTHNxQkMhpkzd1yTDEpQVs1XjVxwpYDgH2NdcaSblid71t8v
+jZCtcgl4AwnONCR4zVckGcz6c98dpX39T/Ru560GUdJeXE3YL4Y3HXTyvDUsCXZB
++ovYyPKsxYXJu2XcT26Am8nXPLen2bZ3O4DECRlB4C7RVvWd55g=
+=1LOo
 -----END PGP SIGNATURE-----

roundcubemail-1.5.tar.gz/vendor/spomky-labs Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/.scrutinizer.yml Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/.travis.yml Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/LICENCE Added

@@ -0,0 +1,20 @@
+The MIT License (MIT)
+
+Copyright (c) 2014 Florent Morselli
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/README.md Added

@@ -0,0 +1,61 @@
+# TOTP / HOTP library in PHP #
+
+!Scrutinizer Quality Score(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/badges/quality-score.png?s=a184d180414b30764d19b421a12d6cf7e9e5e7c2)(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/)
+!Code Coverage(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/badges/coverage.png?s=d1bd1b26b56e581d6a4d1deb87eaadc51a05f31d)(https://scrutinizer-ci.com/g/Spomky-Labs/otphp/)
+
+!Build Status(https://travis-ci.org/Spomky-Labs/otphp.svg?branch=master)(https://travis-ci.org/Spomky-Labs/otphp)
+!HHVM Status(http://hhvm.h4cc.de/badge/Spomky-Labs/otphp.png)(http://hhvm.h4cc.de/package/Spomky-Labs/otphp)
+!PHP 7 ready(http://php7ready.timesplinter.ch/Spomky-Labs/otphp/badge.svg)(https://travis-ci.org/Spomky-Labs/otphp)
+
+!SensioLabsInsight(https://insight.sensiolabs.com/projects/49e5925d-0dd8-4b89-a215-5eb33b4d96d9/big.png)(https://insight.sensiolabs.com/projects/49e5925d-0dd8-4b89-a215-5eb33b4d96d9)
+
+!Latest Stable Version(https://poser.pugx.org/spomky-labs/otphp/v/stable.png)(https://packagist.org/packages/spomky-labs/otphp) !Total Downloads(https://poser.pugx.org/spomky-labs/otphp/downloads.png)(https://packagist.org/packages/spomky-labs/otphp) !Latest Unstable Version(https://poser.pugx.org/spomky-labs/otphp/v/unstable.png)(https://packagist.org/packages/spomky-labs/otphp) !License(https://poser.pugx.org/spomky-labs/otphp/license.png)(https://packagist.org/packages/spomky-labs/otphp)
+
+A php library for generating one time passwords according to  RFC 4226 (http://tools.ietf.org/html/rfc4226) (HOTP Algorithm) and the  RFC 6238 (http://tools.ietf.org/html/rfc6238) (TOTP Algorithm)
+
+This library is compatible with Google Authenticator apps available for Android and iPhone. It is also compatible with other applications such as FreeOTP(https://play.google.com/store/apps/details?id=org.fedorahosted.freeotp) for example.
+
+This is a fork of https://github.com/lelag/otphp with the following changes:
+
+* Continuous unit and functional tests using Travis-CI
+* 100% test coverage
+* Code Quality improvement
+* Better namespace usage
+* Issuer support
+* Window support
+* Completely abstract objects
+
+## The Release Process
+
+The release process is described here(doc/Release.md).
+
+## Prerequisites
+
+This library needs at least `PHP 5.3`.
+It has been successfully tested using `PHP 5.3` to `PHP 5.6`, `PHP 7` and `HHVM`
+
+## Installation
+
+The preferred way to install this library is to rely on Composer:
+
+```sh
+composer require "spomky-labs/otphp" "~5.0.0"
+```
+
+## Extend the library
+
+This library only contains the logic. You must extend all classes to define setters and getters.
+
+Look at Extend classes(doc/Extend.md) for more information and examples.
+
+## How to use
+
+Your classes are ready to use? Have a look at How to use(doc/Use.md) to generate your first OTP.
+
+## Contributing
+
+Requests for new features, bug fixed and all other ideas to make this library useful are welcome. Please follow these best practices(doc/Contributing.md).
+
+## Licence
+
+This software is release under MIT licence(LICENSE).

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/composer.json Added

@@ -0,0 +1,38 @@
+{
+    "name": "spomky-labs/otphp",
+    "type": "library",
+    "description": "PHP OTP Library compatible with Google Authenticator",
+    "license": "MIT",
+    "keywords": "otp", "hotp", "totp", "RFC 4226", "RFC 6238",
+    "homepage": "https://github.com/Spomky-Labs/otphp",
+    "authors": 
+        {
+            "name": "Florent Morselli",
+            "homepage": "https://github.com/Spomky"
+        },
+        {
+            "name": "All contributors",
+            "homepage": "https://github.com/Spomky-Labs/otphp/contributors"
+        }
+    ,
+    "require": {
+        "php": ">=5.3.2",
+        "christian-riesen/base32": "~1.1"
+    },
+    "require-dev": {
+        "phpunit/phpunit": "~4.0"
+    },
+    "suggest": {
+    },
+    "autoload": {
+        "psr-4": { "OTPHP\\": "lib/" }
+    },
+    "autoload-dev": {
+        "psr-4": { "MyProject\\": "examples/" }
+    },
+    "extra": {
+        "branch-alias": {
+            "dev-master": "5.0.x-dev"
+        }
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/doc Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/doc/Contributing.md Added

@@ -0,0 +1,26 @@
+Contributing
+=============================
+
+First of all, **thank you** for contributing.
+
+Bugs or feature requests can be posted online on the GitHub issues section of the project.
+
+Few rules to ease code reviews and merges:
+
+- You MUST follow the PSR-1(http://www.php-fig.org/psr/psr-1/), PSR-2(http://www.php-fig.org/psr/psr-2/) and PSR-4(http://www.php-fig.org/psr/psr-4/).
+- You MUST run the test suite.
+- You MUST write (or update) unit tests when bugs are fixed or features are added.
+- You SHOULD write documentation.
+
+We use Git-Flow(http://jeffkreeftmeijer.com/2010/why-arent-you-using-git-flow/) to automate our git branching workflow.
+
+To contribute use Pull Requests(https://help.github.com/articles/using-pull-requests), please, write commit messages that make sense, and rebase your branch before submitting your PR.
+
+May be asked to squash your commits too. This is used to "clean" your Pull Request before merging it, avoiding commits such as fix tests, fix 2, fix 3, etc.
+
+Run test suite
+------------
+
+* install composer: `curl -s http://getcomposer.org/installer | php`
+* install dependencies: `php composer.phar install`
+* run tests: `vendor/bin/phpunit`

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/doc/Extend.md Added

@@ -0,0 +1,331 @@
+# Extending all classes
+
+## Description of classes
+
+This library has three abstract classes:
+
+* OTP: the base of all OTP classes
+* TOTP: Time Based OTP
+* HOTP: Counter Based OTP
+
+## OTP Class
+
+The all classes must implement the following methods:
+
+* ```public functon getLabel();```
+* ```public functon getIssuer();```
+* ```public functon isIssuerIncludedAsParameter();```
+* ```public functon getDigits();```
+* ```public functon getDigest();```
+
+If you wand to extend
+
+* TOTP Class, you must also implement ```public functon getInterval();```.
+* HOTP Class, you must also implement ```public functon getCounter();``` and ```protected functon updateCounter($counter);```.
+
+## Implementation
+
+### TOTP Class
+
+The following class is a possible implementation of the TOTP Class:
+
+```php
+<?php
+
+namespace MyProject;
+
+use OTPHP\TOTP as BaseTOTP;
+
+class TOTP extends BaseTOTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+    protected $interval = 30;
+
+    public function setSecret($secret)
+    {
+        //You must check that the secret is a valid Base32 string
+        $this->secret = $secret;
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception("Label must not contain a semi-colon.");
+        }
+        $this->label = $label;
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception("Issuer must not contain a semi-colon.");
+        }
+        $this->issuer = $issuer;
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if( !is_numeric($digits) || $digits < 1 ) {
+            throw new \Exception("Digits must be at least 1.");
+        }
+        $this->digits = $digits;
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if( !in_array($digest, array('md5', 'sha1', 'sha256', 'sha512')) ) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    public function setInterval($interval)
+    {
+        if( !is_integer($interval) || $interval < 1 ) {
+            throw new \Exception("Interval must be at least 1.");
+        }
+        $this->interval = $interval;
+        return $this;
+    }
+
+    public function getInterval()
+    {
+        return $this->interval;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}
+```
+
+This this class, you can easily create a TOTP object:
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setSecret('JDDK4U6G3BJLEZ7Y');
+```
+
+Your object is ready to use.
+You can also change all options:
+
+```php
+$totp->setLabel('foo@bar.baz')
+     ->setIssuer('My Project')
+     ->setDigits(4)
+     ->setDigest('sha512')
+     ->setInterval(60);
+```
+
+
+### HOTP Class
+
+The following class is a possible implementation of the HOTP Class:
+
+```php
+<?php
+
+namespace MyProject;
+
+use OTPHP\HOTP as BaseHOTP;
+
+class HOTP extends BaseHOTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+    protected $counter = 0;
+
+    public function setSecret($secret)

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/doc/Release.md Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/doc/Use.md Added

@@ -0,0 +1,131 @@
+# How to Use
+
+## Common methods
+
+TOTP and HOTP objects have the following common methods:
+
+* ```public function at($input);```: generate an OTP at the specified counter
+* ```public function verify($otp, $input, $window);```: verify if the OTP is valid for the specified input (timestamp, counter...)
+* ```public function getProvisioningUri()```: return a provisioning URI to ease integration in applications
+
+Example:
+
+```php
+$my_otp_object->at(1000); //e.g. will return 123456
+$my_otp_object->verify(123456, 1000); //Will return true
+$my_otp_object->verify(123456, 1001); //Will return false
+```
+
+## Counter Based OTP (HOTP)
+
+### The window parameter
+
+The `windows` parameter will try all OTP within a window of counters.
+
+By default, this value is `null`. It means that the OTP will be tested at the exact counter.
+
+If the parameter is an integer, the OTP from `counter` to `counter+window` will be tested.
+For example, if the `counter`is `1000` and the window `10`, the OTP tested are within `1000` and `1010`.
+
+```php
+$my_otp_object->verify(123456, 999); //Will return false
+$my_otp_object->verify(123456, 999, 10); //Will return true (1000 is tested)
+```
+
+If the verification succeed, the counter will be updated.
+
+## Time Based OTP (TOTP)
+
+This OTP object has a specific method:
+
+* ```public function now()```: return an OTP at the current timestamp
+
+Example:
+
+```php
+$my_otp_object->now(); //e.g. will return 123456
+$my_otp_object->verify(123456); //Will return true.
+```
+    
+After the interval defined by the object:
+
+```php
+$my_otp_object->verify(123456); //Will return false
+```
+
+### The window parameter
+
+The `windows` parameter will try all OTP within a window of timestamps.
+
+By default, this value is `null`. It means that the OTP will be tested at the exact timestamp.
+If the parameter is an integer, the OTP before and after the timestamp will be tested.
+
+The window of timestamps goes from `- $window * interval + timestamp` to `+ $window * interval + timestamp`. For example, if the `window`is `5`, the interval `30` and the timestamp `600`, the OTP tested are within `450` and `750`.
+
+### Google Authenticator Compatible
+
+The library works with the Google Authenticator iPhone and Android app, and also
+includes the ability to generate provisioning URI's for use with the QR Code scanner
+built into the app.
+
+Google only supports SHA-1 digest algorithm, 30 second interval and 6 digits OTP. Other values for these parameters are ignored by the Google Authenticator application.
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(6)
+     ->setDigest('sha1')
+     ->setInterval(30)
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+$totp->getProvisioningUri(); // => 'otpauth://totp/alice%40google.com?secret=JBSWY3DPEHPK3PXP'
+```
+
+### Working examples
+
+#### Compatible with Google Authenticator
+
+Scan the following barcode with your phone, using Google Authenticator
+
+!QR Code for OTP(http://chart.apis.google.com/chart?cht=qr&chs=250x250&chl=otpauth%3A%2F%2Ftotp%2FMy%2520Big%2520Compagny%3Aalice%2540google.com%3Fsecret%3DJBSWY3DPEHPK3PXP%26issuer%3DMy%2520Big%2520Compagny)
+
+Now run the following and compare the output
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(6)
+     ->setDigest('sha1')
+     ->setInterval(30);
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+echo "Current OTP: ". $totp->now();
+```
+
+#### Not Compatible with Google Authenticator
+
+The following barcode will not work with Google Authenticator because digest algoritm is not SHA-1, there are 8 digits and counter is not 30 seconds.
+
+!QR Code for OTP(http://chart.apis.google.com/chart?cht=qr&chs=250x250&chl=otpauth%3A%2F%2Ftotp%2FMy%2520Big%2520Compagny%3Aalice%2540google.com%3Falgorithm%3Dsha512%26digits%3D8%26period%3D10%26secret%3DJBSWY3DPEHPK3PXP%26issuer%3DMy%2520Big%2520Compagny)
+
+Now run the following and compare the output
+
+```php
+<?php
+use MyProject\TOTP;
+
+$totp = new TOTP;
+$totp->setLabel("alice@google.com")
+     ->setDigits(8)
+     ->setDigest('sha512')
+     ->setInterval(10)
+     ->setSecret("JBSWY3DPEHPK3PXP");
+
+echo "Current OTP: ". $totp->now();
+```

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/examples Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/examples/HOTP.php Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/examples/OTP.php Added

@@ -0,0 +1,109 @@
+<?php
+
+namespace MyProject;
+
+trait OTP
+{
+    protected $secret = null;
+    protected $issuer = null;
+    protected $issuer_included_as_parameter = false;
+    protected $label = null;
+    protected $digest = 'sha1';
+    protected $digits = 6;
+
+    public function setSecret($secret)
+    {
+        $this->secret = $secret;
+
+        return $this;
+    }
+
+    public function getSecret()
+    {
+        return $this->secret;
+    }
+
+    public function setLabel($label)
+    {
+        if ($this->hasSemicolon($label)) {
+            throw new \Exception('Label must not contain a semi-colon.');
+        }
+        $this->label = $label;
+
+        return $this;
+    }
+
+    public function getLabel()
+    {
+        return $this->label;
+    }
+
+    public function setIssuer($issuer)
+    {
+        if ($this->hasSemicolon($issuer)) {
+            throw new \Exception('Issuer must not contain a semi-colon.');
+        }
+        $this->issuer = $issuer;
+
+        return $this;
+    }
+
+    public function getIssuer()
+    {
+        return $this->issuer;
+    }
+
+    public function isIssuerIncludedAsParameter()
+    {
+        return $this->issuer_included_as_parameter;
+    }
+
+    public function setIssuerIncludedAsParameter($issuer_included_as_parameter)
+    {
+        $this->issuer_included_as_parameter = $issuer_included_as_parameter;
+
+        return $this;
+    }
+
+    public function setDigits($digits)
+    {
+        if (!is_numeric($digits) || $digits < 1) {
+            throw new \Exception('Digits must be at least 1.');
+        }
+        $this->digits = $digits;
+
+        return $this;
+    }
+
+    public function getDigits()
+    {
+        return $this->digits;
+    }
+
+    public function setDigest($digest)
+    {
+        if (!in_array($digest, array('md5', 'sha1', 'sha256', 'sha512'))) {
+            throw new \Exception("'$digest' digest is not supported.");
+        }
+        $this->digest = $digest;
+
+        return $this;
+    }
+
+    public function getDigest()
+    {
+        return $this->digest;
+    }
+
+    private function hasSemicolon($value)
+    {
+        $semicolons = array(':', '%3A', '%3a');
+        foreach ($semicolons as $semicolon) {
+            if (false !== strpos($value, $semicolon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/examples/TOTP.php Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/examples/examples.php Added

@@ -0,0 +1,45 @@
+<?php
+
+require_once implode(DIRECTORY_SEPARATOR, array(__DIR__, '..', 'vendor', 'autoload.php'));
+
+use MyProject\TOTP;
+use MyProject\HOTP;
+use Base32\Base32;
+
+$secret = trim(Base32::encode(uniqid('', true)), '=');
+
+$totp = new TOTP();
+
+$totp->setSecret($secret)
+     ->setDigest('sha256')
+     ->setDigits(8)
+     ->setLabel('alice@localhost')
+     ->setIssuer('MyProject')
+     ->setInterval(60)
+     ->setIssuerIncludedAsParameter(true);
+
+$hotp = new HOTP();
+
+$hotp->setSecret($secret)
+    ->setDigest('sha512')
+    ->setDigits(5)
+    ->setLabel('alice@localhost')
+    ->setIssuer('MyProject')
+    ->setCounter(1000)
+    ->setIssuerIncludedAsParameter(true);
+
+printf(str_repeat('=', 50)."\r\n");
+printf("Time Based On-time password\r\n");
+printf(str_repeat('=', 50)."\r\n");
+printf("Secret is %s\r\n", $secret);
+printf("TOTP provisioning URI is %s\r\n", $totp->getProvisioningUri());
+printf("Current code is %s\r\n", $totp->now());
+
+printf(str_repeat("\r\n", 3));
+
+printf(str_repeat('=', 50)."\r\n");
+printf("Counter Based On-time password\r\n");
+printf(str_repeat('=', 50)."\r\n");
+printf("Secret is %s\r\n", $secret);
+printf("TOTP provisioning URI is %s\r\n", $hotp->getProvisioningUri());
+printf("Current code is %s\r\n", $hotp->at(1010));

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/HOTP.php Added

@@ -0,0 +1,44 @@
+<?php
+
+namespace OTPHP;
+
+abstract class HOTP extends OTP implements HOTPInterface
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function getProvisioningUri($google_compatible = true)
+    {
+        return $this->generateURI('hotp', array('counter' => $this->getCounter()), $google_compatible);
+    }
+
+    /**
+     * @param int $counter The new initial counter (a positive integer)
+     */
+    abstract protected function updateCounter($counter);
+
+    /**
+     * {@inheritdoc}
+     */
+    public function verify($otp, $counter, $window = null)
+    {
+        if ($counter < $this->getCounter()) {
+            return false;
+        }
+
+        if (!is_integer($window)) {
+            $window = 0;
+        }
+        $window = abs($window);
+
+        for ($i = $counter; $i <= $counter + $window; ++$i) {
+            if ($otp === $this->at($i)) {
+                $this->updateCounter($i + 1);
+
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/HOTPInterface.php Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/OTP.php Added

@@ -0,0 +1,146 @@
+<?php
+
+namespace OTPHP;
+
+use Base32\Base32;
+
+abstract class OTP implements OTPInterface
+{
+    /**
+     * @param int $input
+     *
+     * @return string The OTP at the specified input
+     */
+    protected function generateOTP($input)
+    {
+        $hash = hash_hmac($this->getDigest(), $this->intToByteString($input), $this->getDecodedSecret());
+        $hmac = array();
+        foreach (str_split($hash, 2) as $hex) {
+            $hmac = hexdec($hex);
+        }
+        $offset = $hmaccount($hmac) - 1 & 0xF;
+        $code = ($hmac$offset + 0 & 0x7F) << 24 |
+            ($hmac$offset + 1 & 0xFF) << 16 |
+            ($hmac$offset + 2 & 0xFF) << 8 |
+            ($hmac$offset + 3 & 0xFF);
+
+        $otp = $code % pow(10, $this->getDigits());
+
+        return str_pad((string) $otp, $this->getDigits(), '0', STR_PAD_LEFT);
+    }
+
+    /**
+     * @return bool Return true is it must be included as parameter, else false
+     */
+    protected function issuerAsParameter()
+    {
+        if (!is_null($this->getIssuer()) && $this->isIssuerIncludedAsParameter() === true) {
+            return true;
+        }
+
+        return false;
+    }
+
+    /**
+     * @throws \InvalidArgumentException
+     *
+     * @return array
+     */
+    private function getParameters()
+    {
+        $options = array(
+            'algorithm' => $this->getDigest(),
+            'digits' => $this->getDigits(),
+            'secret' => $this->getSecret(),
+        );
+        if ($this->issuerAsParameter()) {
+            $options'issuer' = $this->getIssuer();
+        }
+
+        return $options;
+    }
+
+    /**
+     * @param array $options
+     * @param bool  $google_compatible
+     */
+    protected function filterOptions(array &$options, $google_compatible)
+    {
+        if (true === $google_compatible) {
+            foreach (array('algorithm' => 'sha1', 'period' => 30, 'digits' => 6) as $key => $default) {
+                if (isset($options$key) && $default === $options$key) {
+                    unset($options$key);
+                }
+            }
+        }
+
+        ksort($options);
+    }
+
+    /**
+     * @param       $type
+     * @param array $options
+     * @param       $google_compatible
+     *
+     * @return string
+     *
+     * @throws \InvalidArgumentException
+     */
+    protected function generateURI($type, array $options = array(), $google_compatible)
+    {
+        if (is_null($this->getLabel())) {
+            throw new \InvalidArgumentException('No label defined.');
+        }
+        $options = array_merge($options, $this->getParameters());
+        $this->filterOptions($options, $google_compatible);
+
+        $params = str_replace(
+            array('+', '%7E'),
+            array('%20', '~'),
+            http_build_query($options)
+        );
+
+        return sprintf(
+            'otpauth://%s/%s?%s',
+            $type,
+            rawurlencode((!is_null($this->getIssuer()) ? $this->getIssuer().':' : '').$this->getLabel()),
+            $params
+        );
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function at($input)
+    {
+        return $this->generateOTP($input);
+    }
+
+    /**
+     * @return string
+     *
+     * @throws \InvalidArgumentException
+     */
+    private function getDecodedSecret()
+    {
+        $secret = Base32::decode($this->getSecret());
+
+        return $secret;
+    }
+
+    /**
+     * @param int $int
+     *
+     * @return string
+     */
+    private function intToByteString($int)
+    {
+        $result = array();
+        while (0 !== $int) {
+            $result = chr($int & 0xFF);
+            $int >>= 8;
+        }
+
+        return str_pad(implode(array_reverse($result)), 8, "\000", STR_PAD_LEFT);
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/OTPInterface.php Added

@@ -0,0 +1,61 @@
+<?php
+
+namespace OTPHP;
+
+interface OTPInterface
+{
+    /**
+     * @param int $input
+     *
+     * @return string Return the OTP at the specified input
+     */
+    public function at($input);
+
+    /**
+     * Verify that the OTP is valid with the specified input.
+     *
+     * @param string   $otp
+     * @param int      $input
+     * @param int|null $window
+     *
+     * @return bool
+     */
+    public function verify($otp, $input, $window = null);
+
+    /**
+     * @return string The secret of the OTP
+     */
+    public function getSecret();
+
+    /**
+     * @return string The label of the OTP
+     */
+    public function getLabel();
+
+    /**
+     * @return string The issuer
+     */
+    public function getIssuer();
+
+    /**
+     * @return bool If true, the issuer will be added as a parameter in the provisioning URI
+     */
+    public function isIssuerIncludedAsParameter();
+
+    /**
+     * @return int Number of digits in the OTP
+     */
+    public function getDigits();
+
+    /**
+     * @return string Digest algorithm used to calculate the OTP. Possible values are 'md5', 'sha1', 'sha256' and 'sha512'
+     */
+    public function getDigest();
+
+    /**
+     * @param bool $google_compatible If true (default), will produce provisioning URI compatible with Google Authenticator. Only applicable if algorithm="sha1", period=30 and digits=6.
+     *
+     * @return string Get the provisioning URI
+     */
+    public function getProvisioningUri($google_compatible = true);
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/TOTP.php Added

@@ -0,0 +1,68 @@
+<?php
+
+namespace OTPHP;
+
+abstract class TOTP extends OTP implements TOTPInterface
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function at($timestamp)
+    {
+        return $this->generateOTP($this->timecode($timestamp));
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function now()
+    {
+        return $this->at(time());
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function verify($otp, $timestamp = null, $window = null)
+    {
+        if (is_null($timestamp)) {
+            $timestamp = time();
+        }
+
+        if (!is_integer($window)) {
+            return $otp === $this->at($timestamp);
+        }
+        $window = abs($window);
+
+        for ($i = -$window; $i <= $window; ++$i) {
+            if ($otp === $this->at($i * $this->getInterval() + $timestamp)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * {@inheritdoc}
+     */
+    public function getProvisioningUri($google_compatible = true)
+    {
+        $params = array();
+        if (true !== $google_compatible || 30 !== $this->getInterval()) {
+            $params = array('period' => $this->getInterval());
+        }
+
+        return $this->generateURI('totp', $params, $google_compatible);
+    }
+
+    /**
+     * @param int $timestamp
+     *
+     * @return int
+     */
+    private function timecode($timestamp)
+    {
+        return (int) ((((int) $timestamp * 1000) / ($this->getInterval() * 1000)));
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/lib/TOTPInterface.php Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/phpunit.xml.dist Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/tests Added

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/tests/HOTPTest.php Added

@@ -0,0 +1,144 @@
+<?php
+
+class HOTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGetProvisioningUri()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->expects($this->any())
+            ->method('getCounter')
+            ->will($this->returnValue(1000));
+
+        $otp->expects($this->never())
+            ->method('updateCounter');
+
+        $this->assertEquals('otpauth://hotp/My%20Project%3Aalice%40foo.bar?counter=1000&digits=8&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    public function testVerifyCounterInvalid()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->expects($this->any())
+            ->method('getCounter')
+            ->will($this->returnValue(1000));
+
+        $otp->expects($this->never())
+            ->method('updateCounter');
+
+        $this->assertFalse($otp->verify(0, 100));
+    }
+
+    public function testVerifyCounterChanged()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $otp->method('getCounter')
+            ->will($this->onConsecutiveCalls(1000, 1100, 1100));
+
+        $otp->expects($this->once())
+            ->method('updateCounter')
+            ->with(1101);
+
+        $this->assertTrue($otp->verify('98449994', 1100));
+        $this->assertFalse($otp->verify('11111111', 1099));
+    }
+
+    public function testVerifyValidInWindow()
+    {
+        $otp = $this->getMockBuilder('OTPHP\HOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getCounter', 'updateCounter'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $this->assertTrue($otp->verify('59647237', 1000, 50));
+        $this->assertFalse($otp->verify('51642065', 1000, 50));
+        $this->assertTrue($otp->verify('51642065', 1000, 100));
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/tests/OTPTest.php Added

@@ -0,0 +1,92 @@
+<?php
+
+class OTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGenerateOtpAt()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->setMethods(array('verify', 'getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getProvisioningUri'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(6));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $this->assertEquals('855783', $otp->at(0));
+        $this->assertEquals('549607', $otp->at(500));
+        $this->assertEquals('654666', $otp->at(1500));
+    }
+
+    /**
+     * @expectedException Exception
+     */
+    public function testGenerateUriWithoutLabel()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->getMock();
+
+        $method = self::getMethod('generateURI');
+
+        $method->invokeArgs($otp, array('test', array(), true));
+    }
+
+    public function testGenerateUriWithValidLabel()
+    {
+        $otp = $this->getMockBuilder('OTPHP\OTP')
+            ->setMethods(array('verify', 'getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getProvisioningUri'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue('alice@foo.bar'));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue('JDDK4U6G3BJLEZ7Y'));
+
+        $method = self::getMethod('generateURI');
+
+        $this->assertEquals('otpauth://test/alice%40foo.bar?secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+        $this->assertEquals('otpauth://test/alice%40foo.bar?option1=baz&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array('option1' => 'baz'), true)));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue('My Project'));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue('sha1'));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue(8));
+
+        $this->assertEquals('otpauth://test/My%20Project%3Aalice%40foo.bar?digits=8&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+
+        $otp->expects($this->any())
+            ->method('isIssuerIncludedAsParameter')
+            ->will($this->returnValue(true));
+
+        $this->assertEquals('otpauth://test/My%20Project%3Aalice%40foo.bar?digits=8&issuer=My%20Project&secret=JDDK4U6G3BJLEZ7Y', $method->invokeArgs($otp, array('test', array(), true)));
+    }
+
+    /**
+     * @param string $name
+     */
+    protected static function getMethod($name)
+    {
+        $class = new \ReflectionClass('OTPHP\OTP');
+        $method = $class->getMethod($name);
+        $method->setAccessible(true);
+
+        return $method;
+    }
+}

roundcubemail-1.5.tar.gz/vendor/spomky-labs/otphp/tests/TOTPTest.php Added

@@ -0,0 +1,151 @@
+<?php
+
+use Base32\Base32;
+
+class TOTPTest extends \PHPUnit_Framework_TestCase
+{
+    public function testGetProvisioningUri()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    public function testGenerateOtpAt()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('855783', $otp->at(0));
+        $this->assertEquals('762124', $otp->at(319690800));
+        $this->assertEquals('139664', $otp->at(1301012137));
+    }
+
+    public function testGenerateOtpNow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals($otp->now(), $otp->at(time()));
+    }
+
+    public function testVerifyOtpNow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $totp = $otp->at(time());
+        $this->assertTrue($otp->verify($totp));
+    }
+
+    public function testVerifyOtp()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertTrue($otp->verify('855783', 0));
+        $this->assertTrue($otp->verify('762124', 319690800));
+        $this->assertTrue($otp->verify('139664', 1301012137));
+
+        $this->assertFalse($otp->verify('139664', 1301012107));
+        $this->assertFalse($otp->verify('139664', 1301012167));
+        $this->assertFalse($otp->verify('139664', 1301012197));
+    }
+
+    public function testNotCompatibleWithGoogleAuthenticator()
+    {
+        $otp = $this->creatTOTP(9, 'sha512', 10);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?algorithm=sha512&digits=9&period=10&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri());
+    }
+
+    /**
+     * @dataProvider testVectorsData
+     */
+    public function testVectors($totp, $timestamp, $expected_value)
+    {
+        $this->assertEquals($expected_value, $totp->at($timestamp));
+        $this->assertTrue($totp->verify($expected_value, $timestamp));
+    }
+
+    /**
+     * @see https://tools.ietf.org/html/rfc6238#appendix-B
+     * @see http://www.rfc-editor.org/errata_search.php?rfc=6238
+     */
+    public function testVectorsData()
+    {
+        $totp_sha1 = $this->creatTOTP(8, 'sha1',   30, Base32::encode('12345678901234567890'));
+        $totp_sha256 = $this->creatTOTP(8, 'sha256', 30, Base32::encode('12345678901234567890123456789012'));
+        $totp_sha512 = $this->creatTOTP(8, 'sha512', 30, Base32::encode('1234567890123456789012345678901234567890123456789012345678901234'));
+
+        return array(
+            array($totp_sha1,   59, '94287082'),
+            array($totp_sha256, 59, '46119246'),
+            array($totp_sha512, 59, '90693936'),
+            array($totp_sha1,   1111111109, '07081804'),
+            array($totp_sha256, 1111111109, '68084774'),
+            array($totp_sha512, 1111111109, '25091201'),
+            array($totp_sha1,   1111111111, '14050471'),
+            array($totp_sha256, 1111111111, '67062674'),
+            array($totp_sha512, 1111111111, '99943326'),
+            array($totp_sha1,   1234567890, '89005924'),
+            array($totp_sha256, 1234567890, '91819424'),
+            array($totp_sha512, 1234567890, '93441116'),
+            array($totp_sha1,   2000000000, '69279037'),
+            array($totp_sha256, 2000000000, '90698825'),
+            array($totp_sha512, 2000000000, '38618901'),
+            array($totp_sha1,   20000000000, '65353130'),
+            array($totp_sha256, 20000000000, '77737706'),
+            array($totp_sha512, 20000000000, '47863826'),
+        );
+    }
+
+    public function testWithoutGoogleAuthenticatorCompatibility()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertEquals('otpauth://totp/My%20Project%3Aalice%40foo.bar?algorithm=sha1&digits=6&period=30&secret=JDDK4U6G3BJLEZ7Y', $otp->getProvisioningUri(false));
+    }
+
+    public function testVerifyOtpInWindow()
+    {
+        $otp = $this->creatTOTP(6, 'sha1', 30);
+
+        $this->assertFalse($otp->verify('054409', 319690800, 10)); // -11 intervals
+        $this->assertTrue($otp->verify('808167', 319690800, 10)); // -10 intervals
+        $this->assertTrue($otp->verify('364393', 319690800, 10)); // -9 intervals
+        $this->assertTrue($otp->verify('762124', 319690800, 10)); // 0 intervals
+        $this->assertTrue($otp->verify('988451', 319690800, 10)); // +9 intervals
+        $this->assertTrue($otp->verify('789387', 319690800, 10)); // +10 intervals
+        $this->assertFalse($otp->verify('465009', 319690800, 10)); // +11 intervals
+    }
+
+    private function creatTOTP($digits, $digest, $interval, $secret = 'JDDK4U6G3BJLEZ7Y', $label = 'alice@foo.bar', $issuer = 'My Project')
+    {
+        $otp = $this->getMockBuilder('OTPHP\TOTP')
+            ->setMethods(array('getSecret', 'getDigits', 'getDigest', 'getIssuer', 'getLabel', 'isIssuerIncludedAsParameter', 'getInterval'))
+            ->getMock();
+
+        $otp->expects($this->any())
+            ->method('getLabel')
+            ->will($this->returnValue($label));
+
+        $otp->expects($this->any())
+            ->method('getSecret')
+            ->will($this->returnValue($secret));
+
+        $otp->expects($this->any())
+            ->method('getIssuer')
+            ->will($this->returnValue($issuer));
+
+        $otp->expects($this->any())
+            ->method('getDigest')
+            ->will($this->returnValue($digest));
+
+        $otp->expects($this->any())
+            ->method('getDigits')
+            ->will($this->returnValue($digits));
+
+        $otp->expects($this->any())
+            ->method('getInterval')
+            ->will($this->returnValue($interval));
+
+        return $otp;
+    }
+}

roundcubemail.dsc Changed

Changes of Revision 27