From b1bc5f76c4bd8e812f6f351e8a59d0d64c43bde6 Mon Sep 17 00:00:00 2001 From: the-djmaze <3752035+the-djmaze@users.noreply.github.com> Date: Wed, 4 Nov 2026 00:32:53 +0100 Subject: [PATCH] Remove ronzz.org bypass --- .../v/0.0.0/app/libraries/RainLoop/Actions/Admin.php | 9 --------- 1 file changed, 9 deletions(-) diff --git a/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/Admin.php b/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/Admin.php index c2f4db681..970703a77 100644 --- a/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/Admin.php +++ b/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/Admin.php @@ -14,15 +14,6 @@ trait Admin public function IsAdminLoggined(bool $bThrowExceptionOnFalse = true) : bool { if ($this->Config()->Get('security', 'allow_admin_panel', true)) { - // [PATCH ronzz.org] OIDC bridge: nginx auth_request (webmail-admin.ronzz.org) - // sets X-NC-Admin after validating the Nextcloud session. Honored only on the - // dedicated admin host (admin_panel.host); the header is stripped/overridden - // at nginx for any other path. - if (!empty($_SERVER['HTTP_X_NC_ADMIN']) - && \strtolower((string) $this->Config()->Get('admin_panel', 'host', '')) === \strtolower($this->Http()->GetHost())) - { - return true; - } $sAdminKey = $this->getAdminAuthKey(); if ($sAdminKey && $this->Cacher(null, true)->Get(KeyPathHelper::SessionAdminKey($sAdminKey))) { return true;