Simon Ser

Upgrade to new authentication API

18

Investigate what the web client and official bridge use, and do the same. Ref https://github.com/emersion/hydroxide/issues/181

Add a timeout for sessions

1

Currently, once opened sessions never die.

The official bridge has implemented a persistent cookie jar. Maybe this can help with the "Login temporarily not permitted from your connection for security reasons" errors.

It doesn't seem like this is used anymore.

A configuration file could specify what services to enable, which ports to use, etc. This could be more user-friendly than requiring everything to be specified as CLI flags.

When the clients sets a non-existing flag on a message, create a new label.

This may need frequent re-authentication on the server.

See https://github.com/awnumar/memguard

Add a padding to encrypted saved credentials

1

To make it more difficult to guess the password length.