strapi-plugin-magic-mail 2.10.10 → 3.0.0

package/CHANGELOG.md

@@ -1,3 +1,42 @@
+# [3.0.0](https://github.com/Schero94/Magic-Mail/compare/v2.10.11...v3.0.0) (2026-07-11)
+
+
+* feat(free)!: make MagicMail fully free and remove all licensing and telemetry ([d713246](https://github.com/Schero94/Magic-Mail/commit/d71324630bd9fb00d838dbbc25581f73e815bb5c))
+
+
+### Bug Fixes
+
+* **admin:** repair broken admin contracts and toggle accessibility ([e436849](https://github.com/Schero94/Magic-Mail/commit/e436849d404bf66a7093f7b5980f2f7b45bfc26f))
+* **delivery:** correct provider adapters, failover accounting and quota atomicity ([755ccfe](https://github.com/Schero94/Magic-Mail/commit/755ccfea866c16cd54dbe7cfcd203421362aa241))
+* **domain:** correct account, settings, template, routing and lifecycle contracts ([e81bea9](https://github.com/Schero94/Magic-Mail/commit/e81bea99a942e776265673b813e63772715062d8))
+* **security:** close OAuth XSS, duplicate delivery, tracking and sanitization gaps ([e7a1bc9](https://github.com/Schero94/Magic-Mail/commit/e7a1bc9c9514fcb3405ca6155d6b90b970b0a56b))
+
+
+### BREAKING CHANGES
+
+* The license system is removed. The admin /license/* endpoints,
+the license-guard service, the paid-tier feature gates, the license admin pages,
+and all device/telemetry pings to the former license server no longer exist.
+Every feature (all providers, unlimited accounts, routing rules, templates, and
+version history) is available to everyone with no license key or activation.
+Existing installations keep working; any stored license key is ignored.
+
+- Server: delete license-guard service, license controller, /license/* routes,
+  config/features.js, and every license call site (email-router, accounts,
+  oauth, routing-rules, email-designer).
+- Admin: delete LicensePage, license Settings page, useLicense hook and
+  LicenseGuard; drop the Upgrade/License settings links and the license
+  heartbeat; render every tab/feature and template versioning unconditionally;
+  remove paywalls and upgrade CTAs; drop license/tier translation keys.
+- README: remove the license-validation "additional condition" and tier limits.
+
+## [2.10.11](https://github.com/Schero94/Magic-Mail/compare/v2.10.10...v2.10.11) (2026-04-21)
+
+
+### Bug Fixes
+
+* **email-designer:** generate duplicate-template refId within int4 range ([d1ecae8](https://github.com/Schero94/Magic-Mail/commit/d1ecae8d657ead41521b08fcad35d9c483f779d9))
+
 ## [2.10.10](https://github.com/Schero94/Magic-Mail/compare/v2.10.9...v2.10.10) (2026-04-21)
 
 

package/README.md

@@ -138,7 +138,10 @@ await strapi.plugin('magic-mail').service('email-router').sendMessage({
 // POST /api/magic-mail/send-whatsapp
 await fetch('/api/magic-mail/send-whatsapp', {
   method: 'POST',
-  headers: { 'Content-Type': 'application/json' },
+  headers: {
+    'Content-Type': 'application/json',
+    'Authorization': 'Bearer YOUR_STRAPI_API_TOKEN'
+  },
   body: JSON.stringify({
     phoneNumber: '+491234567890',
     message: 'Hello from MagicMail!'
@@ -148,7 +151,10 @@ await fetch('/api/magic-mail/send-whatsapp', {
 // POST /api/magic-mail/send-message (unified)
 await fetch('/api/magic-mail/send-message', {
   method: 'POST',
-  headers: { 'Content-Type': 'application/json' },
+  headers: {
+    'Content-Type': 'application/json',
+    'Authorization': 'Bearer YOUR_STRAPI_API_TOKEN'
+  },
   body: JSON.stringify({
     channel: 'whatsapp',
     phoneNumber: '+491234567890',
@@ -234,6 +240,8 @@ When both **MagicMail** and **Magic-Link** are installed:
 
 ### Installation
 
+Requires Node.js 20.19 or newer and Strapi 5.50 or newer.
+
 ```bash
 npm install strapi-plugin-magic-mail
 # or
@@ -563,8 +571,8 @@ console.log(stats);
 //     { category: 'marketing', count: 4 },
 //     { category: 'notification', count: 3 }
 //   ],
-//   maxTemplates: 3,  // FREE tier limit
-//   remaining: 0      // Upgrade needed!
+//   maxTemplates: -1, // unlimited (all features are free)
+//   remaining: -1     // unlimited
 // }
 ```
 
@@ -589,8 +597,7 @@ console.log(rendered.html); // Preview HTML
 
 **3. Version Control**
 ```javascript
-// ADVANCED+: Keep version history
-// Automatically enabled for ADVANCED and ENTERPRISE licenses
+// Template version history is always enabled (free for everyone).
 ```
 
 **4. Organize with Tags**
@@ -1386,8 +1393,12 @@ DATABASE_NAME=strapi
 DATABASE_USERNAME=strapi
 DATABASE_PASSWORD=password
 
-# Optional - Custom encryption key
-ENCRYPTION_KEY=your-32-byte-secret-key-here
+# Required in production. Keep this stable across deploys and backups.
+# Generate: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
+MAGIC_MAIL_ENCRYPTION_KEY=your-generated-secret-with-at-least-32-bytes
+
+# Optional dedicated OAuth-state signing secret. APP_KEYS is used otherwise.
+MAGIC_MAIL_OAUTH_STATE_SECRET=your-generated-secret-with-at-least-32-bytes
 ```
 
 ### OAuth Callback URLs
@@ -1539,8 +1550,8 @@ Permission is hereby granted, free of charge, to any person obtaining a copy of
 
 The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
 
-**ADDITIONAL CONDITION:**
-The license validation system (including but not limited to license-guard.js, license controller, and related API endpoints) must remain intact and functional. Removing, bypassing, or disabling the license validation system is strictly prohibited.
+MagicMail is fully free and open source. Every feature is available to everyone
+with no license key, tier, activation, or usage limit.
 
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.