sso in server plan

app/common/src/main/java/stirling/software/common/model/ApplicationProperties.java

@@ -112,6 +112,7 @@ public class ApplicationProperties {
     @Data
     public static class Security {
         private Boolean enableLogin;
+        private Boolean csrfDisabled;
         private InitialLogin initialLogin = new InitialLogin();
         private OAUTH2 oauth2 = new OAUTH2();
         private SAML2 saml2 = new SAML2();
@@ -574,16 +575,6 @@ public class ApplicationProperties {
         private String username;
         @ToString.Exclude private String password;
         private String from;
-        // STARTTLS upgrades a plain SMTP connection to TLS after connecting (RFC 3207)
-        private Boolean startTlsEnable = true;
-        private Boolean startTlsRequired;
-        // SSL/TLS wrapper for implicit TLS (typically port 465)
-        private Boolean sslEnable;
-        // Hostnames or patterns (e.g., "smtp.example.com" or "*") to trust for TLS certificates;
-        // defaults to "*" (trust all) when not set
-        private String sslTrust;
-        // Enables hostname verification for TLS connections
-        private Boolean sslCheckServerIdentity;
     }
 
     @Data

app/common/src/main/java/stirling/software/common/service/PostHogService.java

@@ -254,7 +254,10 @@ public class PostHogService {
                 properties,
                 "security_enableLogin",
                 applicationProperties.getSecurity().getEnableLogin());
-        addIfNotEmpty(properties, "security_csrfDisabled", true);
+        addIfNotEmpty(
+                properties,
+                "security_csrfDisabled",
+                applicationProperties.getSecurity().getCsrfDisabled());
         addIfNotEmpty(
                 properties,
                 "security_loginAttemptCount",

app/common/src/main/java/stirling/software/common/util/RequestUriUtils.java

@@ -162,9 +162,10 @@ public class RequestUriUtils {
                 // enableLogin)
                 || trimmedUri.startsWith(
                         "/api/v1/ui-data/footer-info") // Public footer configuration
+                || trimmedUri.startsWith("/v1/api-docs")
                 || trimmedUri.startsWith("/api/v1/invite/validate")
                 || trimmedUri.startsWith("/api/v1/invite/accept")
-                || trimmedUri.startsWith("/v1/api-docs");
+                || trimmedUri.contains("/v1/api-docs");
     }
 
     private static String stripContextPath(String contextPath, String requestURI) {

app/core/src/main/java/stirling/software/SPDF/config/InitialSetup.java

@@ -34,6 +34,7 @@ public class InitialSetup {
     public void init() throws IOException {
         initUUIDKey();
         initSecretKey();
+        initEnableCSRFSecurity();
         initLegalUrls();
         initSetAppVersion();
         GeneralUtils.extractPipeline();
@@ -59,6 +60,18 @@ public class InitialSetup {
         }
     }
 
+    public void initEnableCSRFSecurity() throws IOException {
+        if (GeneralUtils.isVersionHigher(
+                "0.46.0", applicationProperties.getAutomaticallyGenerated().getAppVersion())) {
+            Boolean csrf = applicationProperties.getSecurity().getCsrfDisabled();
+            if (!csrf) {
+                GeneralUtils.saveKeyToSettings("security.csrfDisabled", false);
+                GeneralUtils.saveKeyToSettings("system.enableAnalytics", true);
+                applicationProperties.getSecurity().setCsrfDisabled(false);
+            }
+        }
+    }
+
     public void initLegalUrls() throws IOException {
         // Initialize Terms and Conditions
         String termsUrl = applicationProperties.getLegal().getTermsAndConditions();
@@ -82,7 +95,7 @@ public class InitialSetup {
         isNewServer =
                 existingVersion == null
                         || existingVersion.isEmpty()
-                        || "0.0.0".equals(existingVersion);
+                        || existingVersion.equals("0.0.0");
 
         String appVersion = "0.0.0";
         Resource resource = new ClassPathResource("version.properties");

app/core/src/main/java/stirling/software/SPDF/config/OpenApiConfig.java

@@ -62,14 +62,10 @@ public class OpenApiConfig {
 
         // Add server configuration from environment variable
         String swaggerServerUrl = System.getenv("SWAGGER_SERVER_URL");
-        Server server;
         if (swaggerServerUrl != null && !swaggerServerUrl.trim().isEmpty()) {
-            server = new Server().url(swaggerServerUrl).description("API Server");
-        } else {
-            // Use relative path so Swagger uses the current browser origin to avoid CORS issues when accessing via different ports
-            server = new Server().url("/").description("Current Server");
+            Server server = new Server().url(swaggerServerUrl).description("API Server");
+            openAPI.addServersItem(server);
         }
-        openAPI.addServersItem(server);
 
         // Add ErrorResponse schema to components
         Schema<?> errorResponseSchema =

app/core/src/main/java/stirling/software/SPDF/controller/api/SettingsController.java

@@ -124,6 +124,7 @@ public class SettingsController {
         ApplicationProperties.Security security = applicationProperties.getSecurity();
 
         settings.put("enableLogin", security.getEnableLogin());
+        settings.put("csrfDisabled", security.getCsrfDisabled());
         settings.put("loginMethod", security.getLoginMethod());
         settings.put("loginAttemptCount", security.getLoginAttemptCount());
         settings.put("loginResetTimeMinutes", security.getLoginResetTimeMinutes());
@@ -158,6 +159,12 @@ public class SettingsController {
                     .getSecurity()
                     .setEnableLogin((Boolean) settings.get("enableLogin"));
         }
+        if (settings.containsKey("csrfDisabled")) {
+            GeneralUtils.saveKeyToSettings("security.csrfDisabled", settings.get("csrfDisabled"));
+            applicationProperties
+                    .getSecurity()
+                    .setCsrfDisabled((Boolean) settings.get("csrfDisabled"));
+        }
         if (settings.containsKey("loginMethod")) {
             GeneralUtils.saveKeyToSettings("security.loginMethod", settings.get("loginMethod"));
             applicationProperties

app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ConfigController.java

@@ -74,7 +74,6 @@ public class ConfigController {
             configData.put("appNameNavbar", applicationProperties.getUi().getAppNameNavbar());
             configData.put("languages", applicationProperties.getUi().getLanguages());
             configData.put("logoStyle", applicationProperties.getUi().getLogoStyle());
-            configData.put("defaultLocale", applicationProperties.getSystem().getDefaultLocale());
 
             // Security settings
             // enableLogin requires both the config flag AND proprietary features to be loaded

app/core/src/main/java/stirling/software/SPDF/controller/web/ReactRoutingController.java

@@ -4,6 +4,8 @@ import java.io.IOException;
 import java.io.InputStream;
 import java.nio.charset.StandardCharsets;
 
+import jakarta.annotation.PostConstruct;
+
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.core.io.ClassPathResource;
 import org.springframework.http.MediaType;
@@ -11,7 +13,6 @@ import org.springframework.http.ResponseEntity;
 import org.springframework.stereotype.Controller;
 import org.springframework.web.bind.annotation.GetMapping;
 
-import jakarta.annotation.PostConstruct;
 import jakarta.servlet.http.HttpServletRequest;
 
 @Controller
@@ -62,10 +63,9 @@ public class ReactRoutingController {
         }
     }
 
-    @GetMapping(
-            value = {"/", "/index.html"},
-            produces = MediaType.TEXT_HTML_VALUE)
-    public ResponseEntity<String> serveIndexHtml(HttpServletRequest request) throws IOException {
+    @GetMapping(value = {"/", "/index.html"}, produces = MediaType.TEXT_HTML_VALUE)
+    public ResponseEntity<String> serveIndexHtml(HttpServletRequest request)
+            throws IOException {
         if (indexHtmlExists && cachedIndexHtml != null) {
             return ResponseEntity.ok().contentType(MediaType.TEXT_HTML).body(cachedIndexHtml);
         }
@@ -75,7 +75,8 @@ public class ReactRoutingController {
 
     @GetMapping(
             "/{path:^(?!api|static|robots\\.txt|favicon\\.ico|manifest.*\\.json|pipeline|pdfjs|pdfjs-legacy|fonts|images|files|css|js|assets|locales|modern-logo|classic-logo|Login|og_images|samples)[^\\.]*$}")
-    public ResponseEntity<String> forwardRootPaths(HttpServletRequest request) throws IOException {
+    public ResponseEntity<String> forwardRootPaths(HttpServletRequest request)
+            throws IOException {
         return serveIndexHtml(request);
     }
 

app/core/src/main/resources/settings.yml.template

@@ -12,6 +12,7 @@
 
 security:
   enableLogin: true # set to 'true' to enable login
+  csrfDisabled: false # set to 'true' to disable CSRF protection (not recommended for production)
   loginAttemptCount: 5 # lock user account after 5 tries; when using e.g. Fail2Ban you can deactivate the function with -1
   loginResetTimeMinutes: 120 # lock account for 2 hours after x attempts
   loginMethod: all # Accepts values like 'all' and 'normal'(only Login with Username/Password), 'oauth2'(only Login with OAuth2) or 'saml2'(only Login with SAML2)
@@ -104,11 +105,6 @@ mail:
   username: '' # SMTP server username
   password: '' # SMTP server password
   from: '' # sender email address
-  startTlsEnable: true # enable STARTTLS (explicit TLS upgrade after connecting) when supported by the SMTP server
-  startTlsRequired: false # require STARTTLS; connection fails if the upgrade command is not supported
-  sslEnable: false # enable SSL/TLS wrapper for implicit TLS (typically used with port 465)
-  sslTrust: '' # optional trusted host override, e.g. "smtp.example.com" or "*"; defaults to "*" (trust all) when empty
-  sslCheckServerIdentity: false # enable hostname verification when using SSL/TLS
 
 legal:
   termsAndConditions: https://www.stirling.com/legal/terms-of-service # URL to the terms and conditions of your application (e.g. https://example.com/terms). Empty string to disable or filename to load from local file in static folder

app/proprietary/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPdfJsonController.java

@@ -31,10 +31,12 @@ import stirling.software.common.model.api.PDFFile;
 import stirling.software.common.service.JobOwnershipService;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.WebResponseUtils;
+import stirling.software.proprietary.security.config.PremiumEndpoint;
 
 @Slf4j
 @ConvertApi
 @RequiredArgsConstructor
+@PremiumEndpoint
 public class ConvertPdfJsonController {
 
     private final PdfJsonConversionService pdfJsonConversionService;

app/proprietary/src/main/java/stirling/software/SPDF/service/PdfJsonFallbackFontService.java

@@ -33,12 +33,8 @@ public class PdfJsonFallbackFontService {
     public static final String FALLBACK_FONT_CJK_ID = "fallback-noto-cjk";
     public static final String FALLBACK_FONT_JP_ID = "fallback-noto-jp";
     public static final String FALLBACK_FONT_KR_ID = "fallback-noto-korean";
-    public static final String FALLBACK_FONT_TC_ID = "fallback-noto-tc";
     public static final String FALLBACK_FONT_AR_ID = "fallback-noto-arabic";
     public static final String FALLBACK_FONT_TH_ID = "fallback-noto-thai";
-    public static final String FALLBACK_FONT_DEVANAGARI_ID = "fallback-noto-devanagari";
-    public static final String FALLBACK_FONT_MALAYALAM_ID = "fallback-noto-malayalam";
-    public static final String FALLBACK_FONT_TIBETAN_ID = "fallback-noto-tibetan";
 
     // Font name aliases map PDF font names to available fallback fonts
     // This provides better visual consistency when editing PDFs
@@ -63,22 +59,6 @@ public class PdfJsonFallbackFontService {
                     Map.entry("dejavuserif", "fallback-dejavu-serif"),
                     Map.entry("dejavumono", "fallback-dejavu-mono"),
                     Map.entry("dejavusansmono", "fallback-dejavu-mono"),
-                    // Traditional Chinese fonts (Taiwan, Hong Kong, Macau)
-                    Map.entry("mingliu", "fallback-noto-tc"),
-                    Map.entry("pmingliu", "fallback-noto-tc"),
-                    Map.entry("microsoftjhenghei", "fallback-noto-tc"),
-                    Map.entry("jhenghei", "fallback-noto-tc"),
-                    Map.entry("kaiti", "fallback-noto-tc"),
-                    Map.entry("kaiu", "fallback-noto-tc"),
-                    Map.entry("dfkaib5", "fallback-noto-tc"),
-                    Map.entry("dfkai", "fallback-noto-tc"),
-                    // Simplified Chinese fonts (Mainland China) - more common
-                    Map.entry("simsun", "fallback-noto-cjk"),
-                    Map.entry("simhei", "fallback-noto-cjk"),
-                    Map.entry("microsoftyahei", "fallback-noto-cjk"),
-                    Map.entry("yahei", "fallback-noto-cjk"),
-                    Map.entry("songti", "fallback-noto-cjk"),
-                    Map.entry("heiti", "fallback-noto-cjk"),
                     // Noto Sans - Google's universal font (use as last resort generic fallback)
                     Map.entry("noto", "fallback-noto-sans"),
                     Map.entry("notosans", "fallback-noto-sans"));
@@ -103,12 +83,6 @@ public class PdfJsonFallbackFontService {
                                     "classpath:/static/fonts/NotoSansKR-Regular.ttf",
                                     "NotoSansKR-Regular",
                                     "ttf")),
-                    Map.entry(
-                            FALLBACK_FONT_TC_ID,
-                            new FallbackFontSpec(
-                                    "classpath:/static/fonts/NotoSansTC-Regular.ttf",
-                                    "NotoSansTC-Regular",
-                                    "ttf")),
                     Map.entry(
                             FALLBACK_FONT_AR_ID,
                             new FallbackFontSpec(
@@ -121,24 +95,6 @@ public class PdfJsonFallbackFontService {
                                     "classpath:/static/fonts/NotoSansThai-Regular.ttf",
                                     "NotoSansThai-Regular",
                                     "ttf")),
-                    Map.entry(
-                            FALLBACK_FONT_DEVANAGARI_ID,
-                            new FallbackFontSpec(
-                                    "classpath:/static/fonts/NotoSansDevanagari-Regular.ttf",
-                                    "NotoSansDevanagari-Regular",
-                                    "ttf")),
-                    Map.entry(
-                            FALLBACK_FONT_MALAYALAM_ID,
-                            new FallbackFontSpec(
-                                    "classpath:/static/fonts/NotoSansMalayalam-Regular.ttf",
-                                    "NotoSansMalayalam-Regular",
-                                    "ttf")),
-                    Map.entry(
-                            FALLBACK_FONT_TIBETAN_ID,
-                            new FallbackFontSpec(
-                                    "classpath:/static/fonts/NotoSerifTibetan-Regular.ttf",
-                                    "NotoSerifTibetan-Regular",
-                                    "ttf")),
                     // Liberation Sans family
                     Map.entry(
                             "fallback-liberation-sans",
@@ -528,20 +484,6 @@ public class PdfJsonFallbackFontService {
      */
     public String resolveFallbackFontId(int codePoint) {
         Character.UnicodeBlock block = Character.UnicodeBlock.of(codePoint);
-
-        // Bopomofo is primarily used in Taiwan for Traditional Chinese phonetic annotation
-        if (block == Character.UnicodeBlock.BOPOMOFO
-                || block == Character.UnicodeBlock.BOPOMOFO_EXTENDED) {
-            return FALLBACK_FONT_TC_ID;
-        }
-
-        // Compatibility ideographs are primarily used by Traditional Chinese encodings (e.g., Big5,
-        // HKSCS) so prefer the Traditional Chinese fallback here.
-        if (block == Character.UnicodeBlock.CJK_COMPATIBILITY_IDEOGRAPHS
-                || block == Character.UnicodeBlock.CJK_COMPATIBILITY_IDEOGRAPHS_SUPPLEMENT) {
-            return FALLBACK_FONT_TC_ID;
-        }
-
         if (block == Character.UnicodeBlock.CJK_UNIFIED_IDEOGRAPHS
                 || block == Character.UnicodeBlock.CJK_UNIFIED_IDEOGRAPHS_EXTENSION_A
                 || block == Character.UnicodeBlock.CJK_UNIFIED_IDEOGRAPHS_EXTENSION_B
@@ -550,23 +492,19 @@ public class PdfJsonFallbackFontService {
                 || block == Character.UnicodeBlock.CJK_UNIFIED_IDEOGRAPHS_EXTENSION_E
                 || block == Character.UnicodeBlock.CJK_UNIFIED_IDEOGRAPHS_EXTENSION_F
                 || block == Character.UnicodeBlock.CJK_SYMBOLS_AND_PUNCTUATION
+                || block == Character.UnicodeBlock.BOPOMOFO
+                || block == Character.UnicodeBlock.BOPOMOFO_EXTENDED
                 || block == Character.UnicodeBlock.HALFWIDTH_AND_FULLWIDTH_FORMS) {
             return FALLBACK_FONT_CJK_ID;
         }
 
         Character.UnicodeScript script = Character.UnicodeScript.of(codePoint);
         return switch (script) {
-            // HAN script is used by both Simplified and Traditional Chinese
-            // Default to Simplified (mainland China, 1.4B speakers) as it's more common
-            // Traditional Chinese PDFs are detected via font name aliases (MingLiU, PMingLiU, etc.)
             case HAN -> FALLBACK_FONT_CJK_ID;
             case HIRAGANA, KATAKANA -> FALLBACK_FONT_JP_ID;
             case HANGUL -> FALLBACK_FONT_KR_ID;
             case ARABIC -> FALLBACK_FONT_AR_ID;
             case THAI -> FALLBACK_FONT_TH_ID;
-            case DEVANAGARI -> FALLBACK_FONT_DEVANAGARI_ID;
-            case MALAYALAM -> FALLBACK_FONT_MALAYALAM_ID;
-            case TIBETAN -> FALLBACK_FONT_TIBETAN_ID;
             default -> FALLBACK_FONT_ID;
         };
     }

app/proprietary/src/main/java/stirling/software/proprietary/controller/api/ProprietaryUIDataController.java

@@ -205,10 +205,6 @@ public class ProprietaryUIDataController {
         data.setLoginMethod(securityProps.getLoginMethod());
         data.setAltLogin(!providerList.isEmpty() && securityProps.isAltLogin());
 
-        // Add language configuration for login page
-        data.setLanguages(applicationProperties.getUi().getLanguages());
-        data.setDefaultLocale(applicationProperties.getSystem().getDefaultLocale());
-
         return ResponseEntity.ok(data);
     }
 
@@ -332,7 +328,6 @@ public class ProprietaryUIDataController {
         data.setGrandfatheredUserCount(grandfatheredCount);
         data.setLicenseMaxUsers(licenseMaxUsers);
         data.setPremiumEnabled(premiumEnabled);
-        data.setMailEnabled(applicationProperties.getMail().isEnabled());
 
         return ResponseEntity.ok(data);
     }
@@ -381,7 +376,7 @@ public class ProprietaryUIDataController {
         data.setUsername(username);
         data.setRole(user.get().getRolesAsString());
         data.setSettings(settingsJson);
-        data.setChangeCredsFlag(user.get().isFirstLogin() || user.get().isForcePasswordChange());
+        data.setChangeCredsFlag(user.get().isFirstLogin());
         data.setOAuth2Login(isOAuth2Login);
         data.setSaml2Login(isSaml2Login);
 
@@ -496,8 +491,6 @@ public class ProprietaryUIDataController {
         private boolean altLogin;
         private boolean firstTimeSetup;
         private boolean showDefaultCredentials;
-        private List<String> languages;
-        private String defaultLocale;
     }
 
     @Data
@@ -517,7 +510,6 @@ public class ProprietaryUIDataController {
         private int grandfatheredUserCount;
         private int licenseMaxUsers;
         private boolean premiumEnabled;
-        private boolean mailEnabled;
     }
 
     @Data

app/proprietary/src/main/java/stirling/software/proprietary/security/configuration/MailConfig.java

@@ -33,8 +33,7 @@ public class MailConfig {
 
         // Creates a new instance of JavaMailSenderImpl, which is a Spring implementation
         JavaMailSenderImpl mailSender = new JavaMailSenderImpl();
-        String host = mailProperties.getHost();
-        mailSender.setHost(host);
+        mailSender.setHost(mailProperties.getHost());
         mailSender.setPort(mailProperties.getPort());
         mailSender.setDefaultEncoding("UTF-8");
 
@@ -71,32 +70,8 @@ public class MailConfig {
             log.info("SMTP authentication disabled - no credentials provided");
         }
 
-        boolean startTlsEnabled =
-                mailProperties.getStartTlsEnable() == null || mailProperties.getStartTlsEnable();
         // Enables STARTTLS to encrypt the connection if supported by the SMTP server
-        props.put("mail.smtp.starttls.enable", Boolean.toString(startTlsEnabled));
-        if (mailProperties.getStartTlsRequired() != null) {
-            props.put(
-                    "mail.smtp.starttls.required", mailProperties.getStartTlsRequired().toString());
-        }
-
-        if (mailProperties.getSslEnable() != null) {
-            props.put("mail.smtp.ssl.enable", mailProperties.getSslEnable().toString());
-        }
-
-        // Trust the configured host to allow STARTTLS with self-signed certificates
-        String sslTrust = mailProperties.getSslTrust();
-        if (sslTrust == null || sslTrust.trim().isEmpty()) {
-            sslTrust = "*";
-        }
-        if (sslTrust != null && !sslTrust.trim().isEmpty()) {
-            props.put("mail.smtp.ssl.trust", sslTrust);
-        }
-        if (mailProperties.getSslCheckServerIdentity() != null) {
-            props.put(
-                    "mail.smtp.ssl.checkserveridentity",
-                    mailProperties.getSslCheckServerIdentity().toString());
-        }
+        props.put("mail.smtp.starttls.enable", "true");
 
         // Returns the configured mail sender, ready to send emails
         return mailSender;

app/proprietary/src/main/java/stirling/software/proprietary/security/configuration/SecurityConfiguration.java

@@ -1,6 +1,7 @@
 package stirling.software.proprietary.security.configuration;
 
 import java.util.List;
+import java.util.Optional;
 
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Qualifier;
@@ -24,6 +25,8 @@ import org.springframework.security.saml2.provider.service.web.authentication.Op
 import org.springframework.security.web.SecurityFilterChain;
 import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
 import org.springframework.security.web.authentication.rememberme.PersistentTokenRepository;
+import org.springframework.security.web.csrf.CookieCsrfTokenRepository;
+import org.springframework.security.web.csrf.CsrfTokenRequestAttributeHandler;
 import org.springframework.security.web.savedrequest.NullRequestCache;
 import org.springframework.security.web.servlet.util.matcher.PathPatternRequestMatcher;
 import org.springframework.web.cors.CorsConfiguration;
@@ -44,6 +47,7 @@ import stirling.software.proprietary.security.database.repository.PersistentLogi
 import stirling.software.proprietary.security.filter.IPRateLimitingFilter;
 import stirling.software.proprietary.security.filter.JwtAuthenticationFilter;
 import stirling.software.proprietary.security.filter.UserAuthenticationFilter;
+import stirling.software.proprietary.security.model.User;
 import stirling.software.proprietary.security.oauth2.CustomOAuth2AuthenticationFailureHandler;
 import stirling.software.proprietary.security.oauth2.CustomOAuth2AuthenticationSuccessHandler;
 import stirling.software.proprietary.security.saml2.CustomSaml2AuthenticationFailureHandler;
@@ -194,7 +198,9 @@ public class SecurityConfiguration {
             http.cors(cors -> cors.disable());
         }
 
-        http.csrf(CsrfConfigurer::disable);
+        if (securityProperties.getCsrfDisabled() || !loginEnabledValue) {
+            http.csrf(CsrfConfigurer::disable);
+        }
 
         if (loginEnabledValue) {
             boolean v2Enabled = appConfig.v2Enabled();
@@ -204,6 +210,48 @@ public class SecurityConfiguration {
                     .addFilterBefore(rateLimitingFilter, UsernamePasswordAuthenticationFilter.class)
                     .addFilterBefore(jwtAuthenticationFilter, UserAuthenticationFilter.class);
 
+            if (!securityProperties.getCsrfDisabled()) {
+                CookieCsrfTokenRepository cookieRepo =
+                        CookieCsrfTokenRepository.withHttpOnlyFalse();
+                CsrfTokenRequestAttributeHandler requestHandler =
+                        new CsrfTokenRequestAttributeHandler();
+                requestHandler.setCsrfRequestAttributeName(null);
+                http.csrf(
+                        csrf ->
+                                csrf.ignoringRequestMatchers(
+                                                request -> {
+                                                    String uri = request.getRequestURI();
+
+                                                    // Ignore CSRF for auth endpoints
+                                                    if (uri.startsWith("/api/v1/auth/")) {
+                                                        return true;
+                                                    }
+
+                                                    String apiKey = request.getHeader("X-API-KEY");
+                                                    // If there's no API key, don't ignore CSRF
+                                                    // (return false)
+                                                    if (apiKey == null || apiKey.trim().isEmpty()) {
+                                                        return false;
+                                                    }
+                                                    // Validate API key using existing UserService
+                                                    try {
+                                                        Optional<User> user =
+                                                                userService.getUserByApiKey(apiKey);
+                                                        // If API key is valid, ignore CSRF (return
+                                                        // true)
+                                                        // If API key is invalid, don't ignore CSRF
+                                                        // (return false)
+                                                        return user.isPresent();
+                                                    } catch (Exception e) {
+                                                        // If there's any error validating the API
+                                                        // key, don't ignore CSRF
+                                                        return false;
+                                                    }
+                                                })
+                                        .csrfTokenRepository(cookieRepo)
+                                        .csrfTokenRequestHandler(requestHandler));
+            }
+
             http.sessionManagement(
                     sessionManagement -> {
                         if (v2Enabled) {
@@ -283,9 +331,7 @@ public class SecurityConfiguration {
                         formLogin ->
                                 formLogin
                                         .loginPage("/login") // Redirect here when unauthenticated
-                                        .loginProcessingUrl(
-                                                "/perform_login") // Process form posts here (not
-                                        // /login)
+                                        .loginProcessingUrl("/perform_login") // Process form posts here (not /login)
                                         .successHandler(
                                                 new CustomAuthenticationSuccessHandler(
                                                         loginAttemptService,

app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/UserController.java

@@ -7,7 +7,6 @@ import java.util.HashMap;
 import java.util.List;
 import java.util.Map;
 import java.util.Optional;
-import java.util.UUID;
 
 import org.springframework.http.HttpStatus;
 import org.springframework.http.ResponseEntity;
@@ -19,7 +18,6 @@ import org.springframework.security.oauth2.core.user.OAuth2User;
 import org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler;
 import org.springframework.web.bind.annotation.*;
 
-import jakarta.mail.MessagingException;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
 import jakarta.transaction.Transactional;
@@ -238,8 +236,6 @@ public class UserController {
             return ResponseEntity.status(HttpStatus.UNAUTHORIZED)
                     .body(Map.of("error", "incorrectPassword", "message", "Incorrect password"));
         }
-        // Set flags before changing password so they're saved together
-        user.setForcePasswordChange(false);
         userService.changePassword(user, newPassword);
         userService.changeFirstUse(user, false);
         // Logout using Spring's utility
@@ -588,79 +584,6 @@ public class UserController {
         return ResponseEntity.ok(Map.of("message", "User role updated successfully"));
     }
 
-    @PreAuthorize("hasRole('ROLE_ADMIN')")
-    @PostMapping("/admin/changePasswordForUser")
-    public ResponseEntity<?> changePasswordForUser(
-            @RequestParam(name = "username") String username,
-            @RequestParam(name = "newPassword", required = false) String newPassword,
-            @RequestParam(name = "generateRandom", defaultValue = "false") boolean generateRandom,
-            @RequestParam(name = "sendEmail", defaultValue = "false") boolean sendEmail,
-            @RequestParam(name = "includePassword", defaultValue = "false") boolean includePassword,
-            @RequestParam(name = "forcePasswordChange", defaultValue = "false")
-                    boolean forcePasswordChange,
-            HttpServletRequest request,
-            Authentication authentication)
-            throws SQLException, UnsupportedProviderException, MessagingException {
-        Optional<User> userOpt = userService.findByUsernameIgnoreCase(username);
-        if (userOpt.isEmpty()) {
-            return ResponseEntity.status(HttpStatus.NOT_FOUND)
-                    .body(Map.of("error", "User not found."));
-        }
-
-        String currentUsername = authentication.getName();
-        if (currentUsername.equalsIgnoreCase(username)) {
-            return ResponseEntity.status(HttpStatus.BAD_REQUEST)
-                    .body(Map.of("error", "Cannot change your own password."));
-        }
-
-        User user = userOpt.get();
-
-        String finalPassword = newPassword;
-        if (generateRandom) {
-            finalPassword = UUID.randomUUID().toString().replace("-", "").substring(0, 12);
-        }
-
-        if (finalPassword == null || finalPassword.trim().isEmpty()) {
-            return ResponseEntity.status(HttpStatus.BAD_REQUEST)
-                    .body(Map.of("error", "New password is required."));
-        }
-
-        // Set force password change flag before changing password so both are saved together
-        user.setForcePasswordChange(forcePasswordChange);
-        userService.changePassword(user, finalPassword);
-
-        // Invalidate all active sessions to force reauthentication
-        userService.invalidateUserSessions(username);
-
-        if (sendEmail) {
-            if (emailService.isEmpty() || !applicationProperties.getMail().isEnabled()) {
-                return ResponseEntity.status(HttpStatus.BAD_REQUEST)
-                        .body(Map.of("error", "Email is not configured."));
-            }
-
-            String userEmail = user.getUsername();
-            // Check if username is a valid email format
-            if (userEmail == null || userEmail.isBlank() || !userEmail.contains("@")) {
-                return ResponseEntity.status(HttpStatus.BAD_REQUEST)
-                        .body(
-                                Map.of(
-                                        "error",
-                                        "User's email is not a valid email address. Notifications are disabled."));
-            }
-
-            String loginUrl = buildLoginUrl(request);
-            emailService
-                    .get()
-                    .sendPasswordChangedNotification(
-                            userEmail,
-                            user.getUsername(),
-                            includePassword ? finalPassword : null,
-                            loginUrl);
-        }
-
-        return ResponseEntity.ok(Map.of("message", "User password updated successfully"));
-    }
-
     @PreAuthorize("hasRole('ROLE_ADMIN')")
     @PostMapping("/admin/changeUserEnabled/{username}")
     public ResponseEntity<?> changeUserEnabled(

app/proprietary/src/main/java/stirling/software/proprietary/security/filter/JwtAuthenticationFilter.java

@@ -26,7 +26,6 @@ import jakarta.servlet.ServletException;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
 
-import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.common.model.ApplicationProperties;
@@ -40,7 +39,6 @@ import stirling.software.proprietary.security.service.JwtServiceInterface;
 import stirling.software.proprietary.security.service.UserService;
 
 @Slf4j
-@RequiredArgsConstructor
 public class JwtAuthenticationFilter extends OncePerRequestFilter {
 
     private final JwtServiceInterface jwtService;
@@ -49,6 +47,19 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
     private final AuthenticationEntryPoint authenticationEntryPoint;
     private final ApplicationProperties.Security securityProperties;
 
+    public JwtAuthenticationFilter(
+            JwtServiceInterface jwtService,
+            UserService userService,
+            CustomUserDetailsService userDetailsService,
+            AuthenticationEntryPoint authenticationEntryPoint,
+            ApplicationProperties.Security securityProperties) {
+        this.jwtService = jwtService;
+        this.userService = userService;
+        this.userDetailsService = userDetailsService;
+        this.authenticationEntryPoint = authenticationEntryPoint;
+        this.securityProperties = securityProperties;
+    }
+
     @Override
     protected void doFilterInternal(
             HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
@@ -57,11 +68,7 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
             filterChain.doFilter(request, response);
             return;
         }
-
-        String requestURI = request.getRequestURI();
-        String contextPath = request.getContextPath();
-
-        if (isStaticResource(contextPath, requestURI)) {
+        if (isStaticResource(request.getContextPath(), request.getRequestURI())) {
             filterChain.doFilter(request, response);
             return;
         }
@@ -70,7 +77,10 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
             String jwtToken = jwtService.extractToken(request);
 
             if (jwtToken == null) {
-                // Allow auth endpoints to pass through without JWT
+                // Allow specific auth endpoints to pass through without JWT
+                String requestURI = request.getRequestURI();
+                String contextPath = request.getContextPath();
+
                 if (!isPublicAuthEndpoint(requestURI, contextPath)) {
                     // For API requests, return 401 JSON
                     String acceptHeader = request.getHeader("Accept");

app/proprietary/src/main/java/stirling/software/proprietary/security/filter/UserAuthenticationFilter.java

@@ -241,6 +241,24 @@ public class UserAuthenticationFilter extends OncePerRequestFilter {
         filterChain.doFilter(request, response);
     }
 
+    private static boolean isPublicAuthEndpoint(String requestURI, String contextPath) {
+        // Remove context path from URI to normalize path matching
+        String trimmedUri =
+                requestURI.startsWith(contextPath)
+                        ? requestURI.substring(contextPath.length())
+                        : requestURI;
+
+        // Public auth endpoints that don't require authentication
+        return trimmedUri.startsWith("/login")
+                || trimmedUri.startsWith("/auth/")
+                || trimmedUri.startsWith("/oauth2")
+                || trimmedUri.startsWith("/saml2")
+                || trimmedUri.startsWith("/api/v1/auth/login")
+                || trimmedUri.startsWith("/api/v1/auth/refresh")
+                || trimmedUri.startsWith("/api/v1/auth/logout")
+                || trimmedUri.startsWith("/api/v1/proprietary/ui-data/login");
+    }
+
     private enum UserLoginType {
         USERDETAILS("UserDetails"),
         OAUTH2USER("OAuth2User"),

app/proprietary/src/main/java/stirling/software/proprietary/security/model/User.java

@@ -59,9 +59,6 @@ public class User implements UserDetails, Serializable {
     @Column(name = "hasCompletedInitialSetup")
     private Boolean hasCompletedInitialSetup = false;
 
-    @Column(name = "forcePasswordChange")
-    private Boolean forcePasswordChange = false;
-
     @Column(name = "roleName")
     private String roleName;
 
@@ -120,14 +117,6 @@ public class User implements UserDetails, Serializable {
         this.hasCompletedInitialSetup = hasCompletedInitialSetup;
     }
 
-    public boolean isForcePasswordChange() {
-        return forcePasswordChange != null && forcePasswordChange;
-    }
-
-    public void setForcePasswordChange(boolean forcePasswordChange) {
-        this.forcePasswordChange = forcePasswordChange;
-    }
-
     public void setAuthenticationType(AuthenticationType authenticationType) {
         this.authenticationType = authenticationType.toString().toLowerCase();
     }

app/proprietary/src/main/java/stirling/software/proprietary/security/oauth2/CustomOAuth2AuthenticationSuccessHandler.java

@@ -27,7 +27,6 @@ import jakarta.servlet.http.HttpServletResponse;
 import jakarta.servlet.http.HttpSession;
 
 import lombok.RequiredArgsConstructor;
-import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.common.model.ApplicationProperties;
 import stirling.software.common.model.exception.UnsupportedProviderException;
@@ -40,7 +39,6 @@ import stirling.software.proprietary.security.service.JwtServiceInterface;
 import stirling.software.proprietary.security.service.LoginAttemptService;
 import stirling.software.proprietary.security.service.UserService;
 
-@Slf4j
 @RequiredArgsConstructor
 public class CustomOAuth2AuthenticationSuccessHandler
         extends SavedRequestAwareAuthenticationSuccessHandler {
@@ -79,18 +77,12 @@ public class CustomOAuth2AuthenticationSuccessHandler
 
             if (user != null && !licenseSettingsService.isOAuthEligible(user)) {
                 // User is not grandfathered and no paid license - block OAuth login
-                log.warn(
-                        "OAuth login blocked for existing user '{}' - not eligible (not grandfathered and no paid license)",
-                        username);
                 response.sendRedirect(
                         request.getContextPath() + "/logout?oAuth2RequiresLicense=true");
                 return;
             }
         } else if (!licenseSettingsService.isOAuthEligible(null)) {
             // No existing user and no paid license -> block auto creation
-            log.warn(
-                    "OAuth login blocked for new user '{}' - not eligible (no paid license for auto-creation)",
-                    username);
             response.sendRedirect(request.getContextPath() + "/logout?oAuth2RequiresLicense=true");
             return;
         }

app/proprietary/src/main/java/stirling/software/proprietary/security/oauth2/OAuth2Configuration.java

@@ -67,15 +67,10 @@ public class OAuth2Configuration {
         keycloakClientRegistration().ifPresent(registrations::add);
 
         if (registrations.isEmpty()) {
-            log.error("No OAuth2 provider registered - check your OAuth2 configuration");
+            log.error("No OAuth2 provider registered");
             throw new NoProviderFoundException("At least one OAuth2 provider must be configured.");
         }
 
-        log.info(
-                "OAuth2 ClientRegistrationRepository created with {} provider(s): {}",
-                registrations.size(),
-                registrations.stream().map(ClientRegistration::getRegistrationId).toList());
-
         return new InMemoryClientRegistrationRepository(registrations);
     }
 
@@ -170,6 +165,7 @@ public class OAuth2Configuration {
                         githubClient.getUseAsUsername());
 
         boolean isValid = validateProvider(github);
+        log.info("Initialised GitHub OAuth2 provider");
 
         return isValid
                 ? Optional.of(
@@ -212,19 +208,7 @@ public class OAuth2Configuration {
                         null,
                         null);
 
-        boolean isValid =
-                !isStringEmpty(oidcProvider.getIssuer()) || validateProvider(oidcProvider);
-        if (isValid) {
-            log.info(
-                    "Initialised OIDC OAuth2 provider: registrationId='{}', issuer='{}', redirectUri='{}'",
-                    name,
-                    oauth.getIssuer(),
-                    REDIRECT_URI_PATH + name);
-        } else {
-            log.warn("OIDC OAuth2 provider validation failed - provider will not be registered");
-        }
-
-        return isValid
+        return !isStringEmpty(oidcProvider.getIssuer()) || validateProvider(oidcProvider)
                 ? Optional.of(
                         ClientRegistrations.fromIssuerLocation(oauth.getIssuer())
                                 .registrationId(name)
@@ -233,7 +217,7 @@ public class OAuth2Configuration {
                                 .scope(oidcProvider.getScopes())
                                 .userNameAttributeName(oidcProvider.getUseAsUsername().getName())
                                 .clientName(clientName)
-                                .redirectUri(REDIRECT_URI_PATH + name)
+                                .redirectUri(REDIRECT_URI_PATH + "oidc")
                                 .authorizationGrantType(AUTHORIZATION_CODE)
                                 .build())
                 : Optional.empty();

app/proprietary/src/main/java/stirling/software/proprietary/security/saml2/CustomSaml2AuthenticationSuccessHandler.java

@@ -74,18 +74,12 @@ public class CustomSaml2AuthenticationSuccessHandler
 
                 if (user != null && !licenseSettingsService.isSamlEligible(user)) {
                     // User is not grandfathered and no ENTERPRISE license - block SAML login
-                    log.warn(
-                            "SAML2 login blocked for existing user '{}' - not eligible (not grandfathered and no ENTERPRISE license)",
-                            username);
                     response.sendRedirect(
                             request.getContextPath() + "/logout?saml2RequiresLicense=true");
                     return;
                 }
             } else if (!licenseSettingsService.isSamlEligible(null)) {
                 // No existing user and no ENTERPRISE license -> block auto creation
-                log.warn(
-                        "SAML2 login blocked for new user '{}' - not eligible (no ENTERPRISE license for auto-creation)",
-                        username);
                 response.sendRedirect(
                         request.getContextPath() + "/logout?saml2RequiresLicense=true");
                 return;

app/proprietary/src/main/java/stirling/software/proprietary/security/service/EmailService.java

@@ -223,53 +223,4 @@ public class EmailService {
 
         sendPlainEmail(to, subject, body, true);
     }
-
-    @Async
-    public void sendPasswordChangedNotification(
-            String to, String username, String newPassword, String loginUrl) throws MessagingException {
-        String subject = "Your Stirling PDF password has been updated";
-
-        String passwordSection =
-                newPassword == null
-                        ? ""
-                        : """
-                          <div style=\"background-color: #f8f9fa; border-left: 4px solid #007bff; padding: 15px; margin: 20px 0; border-radius: 4px;\">
-                            <p style=\"margin: 0;\"><strong>Temporary Password:</strong> %s</p>
-                          </div>
-                        """
-                                .formatted(newPassword);
-
-        String body =
-                """
-                <html><body style=\"margin: 0; padding: 0;\">
-                <div style=\"font-family: Arial, sans-serif; background-color: #f8f9fa; padding: 20px;\">
-                  <div style=\"max-width: 600px; margin: auto; background-color: #ffffff; border-radius: 8px; overflow: hidden; border: 1px solid #e0e0e0;\">
-                    <div style=\"text-align: center; padding: 20px; background-color: #222;\">
-                      <img src=\"https://raw.githubusercontent.com/Stirling-Tools/Stirling-PDF/main/docs/stirling-transparent.svg\" alt=\"Stirling PDF\" style=\"max-height: 60px;\">
-                    </div>
-                    <div style=\"padding: 30px; color: #333;\">
-                      <h2 style=\"color: #222; margin-top: 0;\">Your password was changed</h2>
-                      <p>Hello %s,</p>
-                      <p>An administrator has updated the password for your Stirling PDF account.</p>
-                      %s
-                      <p>If you did not expect this change, please contact your administrator immediately.</p>
-                      <div style=\"text-align: center; margin: 30px 0;\">
-                        <a href=\"%s\" style=\"display: inline-block; background-color: #007bff; color: #ffffff; padding: 14px 28px; text-decoration: none; border-radius: 5px; font-weight: bold;\">Go to Stirling PDF</a>
-                      </div>
-                      <p style=\"font-size: 14px; color: #666;\">Or copy and paste this link in your browser:</p>
-                      <div style=\"background-color: #f8f9fa; padding: 12px; margin: 15px 0; border-radius: 4px; word-break: break-all; font-size: 13px; color: #555;\">
-                        %s
-                      </div>
-                    </div>
-                    <div style=\"text-align: center; padding: 15px; font-size: 12px; color: #777; background-color: #f0f0f0;\">
-                      &copy; 2025 Stirling PDF. All rights reserved.
-                    </div>
-                  </div>
-                </div>
-                </body></html>
-                """
-                        .formatted(username, passwordSection, loginUrl, loginUrl);
-
-        sendPlainEmail(to, subject, body, true);
-    }
 }

app/proprietary/src/main/java/stirling/software/proprietary/service/UserLicenseSettingsService.java

@@ -21,7 +21,6 @@ import stirling.software.common.model.ApplicationProperties;
 import stirling.software.proprietary.model.UserLicenseSettings;
 import stirling.software.proprietary.security.configuration.ee.KeygenLicenseVerifier.License;
 import stirling.software.proprietary.security.configuration.ee.LicenseKeyChecker;
-import stirling.software.proprietary.security.model.User;
 import stirling.software.proprietary.security.repository.UserLicenseSettingsRepository;
 import stirling.software.proprietary.security.service.UserService;
 
@@ -332,45 +331,28 @@ public class UserLicenseSettingsService {
     }
 
     /**
-     * Checks if a user is eligible to use OAuth/SAML authentication.
+     * Checks if a user is eligible to use OAuth authentication.
      *
      * <p>A user is eligible if:
      *
      * <ul>
      *   <li>They are grandfathered for OAuth (existing user before policy change), OR
-     *   <li>The system has an ENTERPRISE license (SSO is enterprise-only)
+     *   <li>The system has a paid license (SERVER or ENTERPRISE)
      * </ul>
      *
      * @param user The user to check
-     * @return true if the user can use OAuth/SAML
+     * @return true if the user can use OAuth
      */
-    public boolean isOAuthEligible(User user) {
-        String username = (user != null) ? user.getUsername() : "<new user>";
-        log.info("OAuth eligibility check for user: {}", username);
-
+    public boolean isOAuthEligible(stirling.software.proprietary.security.model.User user) {
         // Grandfathered users always have OAuth access
         if (user != null && user.isOauthGrandfathered()) {
             log.debug("User {} is grandfathered for OAuth", user.getUsername());
             return true;
         }
 
-        // todo: remove
-        if (user != null) {
-            log.info(
-                    "User {} is NOT grandfathered (isOauthGrandfathered={})",
-                    username,
-                    user.isOauthGrandfathered());
-        } else {
-            log.info("New user attempting OAuth login - checking license requirement");
-        }
-
         // Users can use OAuth with SERVER or ENTERPRISE license
         boolean hasPaid = hasPaidLicense();
-        log.info(
-                "OAuth eligibility result: hasPaidLicense={}, user={}, eligible={}",
-                hasPaid,
-                username,
-                hasPaid);
+        log.debug("OAuth eligibility check: hasPaidLicense={}", hasPaid);
         return hasPaid;
     }
 
@@ -387,32 +369,16 @@ public class UserLicenseSettingsService {
      * @param user The user to check
      * @return true if the user can use SAML
      */
-    public boolean isSamlEligible(User user) {
-        String username = (user != null) ? user.getUsername() : "<new user>";
-        log.info("SAML2 eligibility check for user: {}", username);
-
+    public boolean isSamlEligible(stirling.software.proprietary.security.model.User user) {
         // Grandfathered users always have SAML access
         if (user != null && user.isOauthGrandfathered()) {
-            log.info("User {} is grandfathered for SAML2 - ELIGIBLE", username);
+            log.debug("User {} is grandfathered for SAML", user.getUsername());
             return true;
         }
 
-        if (user != null) {
-            log.info(
-                    "User {} is NOT grandfathered (isOauthGrandfathered={})",
-                    username,
-                    user.isOauthGrandfathered());
-        } else {
-            log.info("New user attempting SAML2 login - checking license requirement");
-        }
-
         // Users can use SAML only with ENTERPRISE license
         boolean hasEnterprise = hasEnterpriseLicense();
-        log.info(
-                "SAML2 eligibility result: hasEnterpriseLicense={}, user={}, eligible={}",
-                hasEnterprise,
-                username,
-                hasEnterprise);
+        log.debug("SAML eligibility check: hasEnterpriseLicense={}", hasEnterprise);
         return hasEnterprise;
     }
 
@@ -555,17 +521,12 @@ public class UserLicenseSettingsService {
         if (checker == null) {
             return false;
         }
-
         License license = checker.getPremiumLicenseEnabledResult();
-        boolean hasPaid = (license == License.SERVER || license == License.ENTERPRISE);
-        log.info("License check result: type={}, requiresPaid=true, hasPaid={}", license, hasPaid);
-
-        return hasPaid;
+        return license == License.SERVER || license == License.ENTERPRISE;
     }
 
     /**
-     * Checks if the system has an ENTERPRISE license. Used for enterprise-only features like SSO
-     * (OAuth/SAML).
+     * Checks if the system has an ENTERPRISE license. Used for enterprise-only features like SAML.
      *
      * @return true if ENTERPRISE license is active
      */
@@ -574,19 +535,7 @@ public class UserLicenseSettingsService {
         if (checker == null) {
             return false;
         }
-
         License license = checker.getPremiumLicenseEnabledResult();
-        log.info(
-                "License check result: type={}, requiresEnterprise=true, hasEnterprise={}",
-                license,
-                (license == License.ENTERPRISE));
-
-        if (license != License.ENTERPRISE) {
-            log.warn(
-                    "SAML2 requires ENTERPRISE license but found: {}. SAML2 login will be blocked.",
-                    license);
-        }
-
         return license == License.ENTERPRISE;
     }
 }

app/proprietary/src/test/java/stirling/software/proprietary/security/oauth2/OAuth2ConfigurationTest.java

@@ -1,162 +0,0 @@
-package stirling.software.proprietary.security.oauth2;
-
-import static org.junit.jupiter.api.Assertions.assertEquals;
-import static org.junit.jupiter.api.Assertions.assertNotNull;
-
-import org.junit.jupiter.api.Test;
-
-/**
- * Unit tests for OAuth2Configuration redirect URI logic.
- *
- * <p>These tests validate the critical fix for GitHub issue #5141: The redirect URI path segment
- * MUST match the registration ID. Previously, the redirect URI was hardcoded to 'oidc', causing
- * InvalidClientRegistrationIdException when custom provider names were used.
- *
- * <p>Note: These are conceptual tests documenting the expected behavior. Full integration testing
- * with actual OIDC discovery would require: 1. Mock HTTP server for OIDC discovery endpoints 2.
- * Valid OIDC configuration responses 3. Network mocking infrastructure
- */
-class OAuth2ConfigurationTest {
-
-    /**
-     * Tests the redirect URI pattern for OIDC provider configurations.
-     *
-     * <p>Critical behavior (GitHub issue #5141 fix): The redirect URI path segment MUST match the
-     * registration ID. For example: - Provider name: "authentik" → Redirect URI:
-     * "/login/oauth2/code/authentik" - Provider name: "mycompany" → Redirect URI:
-     * "/login/oauth2/code/mycompany" - Provider name: "oidc" → Redirect URI:
-     * "/login/oauth2/code/oidc"
-     *
-     * <p>Previously, the redirect URI was hardcoded to 'oidc', causing Spring Security to look for
-     * a registration with ID 'oidc' when the provider redirected back. This caused
-     * InvalidClientRegistrationIdException when custom provider names were used.
-     */
-    @Test
-    void testRedirectUriPattern_usesProviderNameNotHardcodedOidc() {
-        // Verify the redirect URI pattern constant
-        String redirectUriBase = "{baseUrl}/login/oauth2/code/";
-
-        // Test cases: provider name → expected redirect URI
-        String[][] testCases = {
-            {"authentik", redirectUriBase + "authentik"},
-            {"mycompany", redirectUriBase + "mycompany"},
-            {"oidc", redirectUriBase + "oidc"},
-            {"okta", redirectUriBase + "okta"},
-            {"auth0", redirectUriBase + "auth0"}
-        };
-
-        for (String[] testCase : testCases) {
-            String providerName = testCase[0];
-            String expectedRedirectUri = testCase[1];
-
-            // The fix ensures: .redirectUri(REDIRECT_URI_PATH + name)
-            // instead of: .redirectUri(REDIRECT_URI_PATH + "oidc")
-            String actualRedirectUri = redirectUriBase + providerName;
-
-            assertEquals(
-                    expectedRedirectUri,
-                    actualRedirectUri,
-                    String.format(
-                            "Redirect URI for provider '%s' must use provider name, not hardcoded 'oidc'",
-                            providerName));
-        }
-    }
-
-    /**
-     * Documents the critical fix for OAuth2 redirect URI mismatch.
-     *
-     * <p>This test validates the logic that was changed in OAuth2Configuration.java line 220:
-     *
-     * <pre>
-     * // BEFORE (bug):
-     * .redirectUri(REDIRECT_URI_PATH + "oidc")  // Always "oidc"
-     *
-     * // AFTER (fix):
-     * .redirectUri(REDIRECT_URI_PATH + name)  // Dynamic provider name
-     * </pre>
-     */
-    @Test
-    void testCriticalFix_redirectUriMatchesRegistrationId() {
-        // The redirect URI path segment extraction by Spring Security
-        String callbackUrl = "http://localhost:8080/login/oauth2/code/authentik?code=abc123";
-
-        // Spring extracts the path segment between "code/" and "?"
-        String extractedRegistrationId = extractRegistrationIdFromCallback(callbackUrl);
-
-        // The extracted ID MUST match an actual registration ID
-        assertEquals("authentik", extractedRegistrationId);
-
-        // If we had used hardcoded "oidc", the callback would be:
-        String buggyCallbackUrl = "http://localhost:8080/login/oauth2/code/oidc?code=abc123";
-        String buggyExtractedId = extractRegistrationIdFromCallback(buggyCallbackUrl);
-
-        // This would look for registration with ID "oidc" but we registered "authentik"
-        assertEquals("oidc", buggyExtractedId);
-
-        // The mismatch: registrationId="authentik", but Spring looks for "oidc"
-        // Result: InvalidClientRegistrationIdException
-        assertNotNull(buggyExtractedId, "This demonstrates the bug that was fixed");
-    }
-
-    /** Helper method simulating Spring's extraction of registration ID from callback URL */
-    private String extractRegistrationIdFromCallback(String callbackUrl) {
-        // Simplified version of what Spring Security does
-        // Actual: OAuth2AuthorizationRequestRedirectFilter extracts from path
-        String path = callbackUrl.split("\\?")[0];
-        String[] parts = path.split("/");
-        return parts[parts.length - 1]; // Last path segment
-    }
-
-    /**
-     * Validates the frontend-backend flow for custom provider names.
-     *
-     * <p>Complete flow: 1. Backend: Provider configured as "authentik" in settings.yml 2. Backend:
-     * ClientRegistration created with registrationId="authentik" 3. Backend: Redirect URI set to
-     * "{baseUrl}/login/oauth2/code/authentik" 4. Backend: Login endpoint returns providerList with
-     * "/oauth2/authorization/authentik" 5. Frontend: Extracts "authentik" from path and uses it for
-     * OAuth login 6. Frontend: Redirects to "/oauth2/authorization/authentik" 7. Backend: Spring
-     * Security redirects to provider with redirect_uri containing "authentik" 8. Provider:
-     * Redirects back to "/login/oauth2/code/authentik?code=..." 9. Backend: Spring Security
-     * extracts "authentik" from callback URL 10. Backend: Looks up ClientRegistration with ID
-     * "authentik" ✅ SUCCESS
-     *
-     * <p>If redirect URI was hardcoded to "oidc" (the bug): Step 7: Provider redirects to
-     * "/login/oauth2/code/oidc?code=..." Step 9: Spring Security looks for registration ID "oidc"
-     * Step 10: FAIL - No registration found with ID "oidc" (we registered "authentik") Result:
-     * InvalidClientRegistrationIdException
-     */
-    @Test
-    void testEndToEndFlow_registrationIdConsistency() {
-        String providerName = "authentik";
-
-        // Step 2: Registration ID
-        String registrationId = providerName;
-        assertEquals("authentik", registrationId);
-
-        // Step 3: Redirect URI (MUST use same name)
-        String redirectUri = "{baseUrl}/login/oauth2/code/" + providerName;
-        assertEquals("{baseUrl}/login/oauth2/code/authentik", redirectUri);
-
-        // Step 4: Provider list endpoint
-        String authorizationPath = "/oauth2/authorization/" + providerName;
-        assertEquals("/oauth2/authorization/authentik", authorizationPath);
-
-        // Step 5: Frontend extracts provider ID
-        String frontendProviderId =
-                authorizationPath.substring(authorizationPath.lastIndexOf('/') + 1);
-        assertEquals("authentik", frontendProviderId);
-
-        // Step 6-8: OAuth flow (external)
-
-        // Step 9: Callback URL from provider
-        String callbackUrl =
-                "http://localhost:8080/login/oauth2/code/" + providerName + "?code=abc123";
-        String extractedId = extractRegistrationIdFromCallback(callbackUrl);
-
-        // Step 10: Registration lookup
-        assertEquals(
-                registrationId,
-                extractedId,
-                "Registration ID from callback MUST match original registration ID");
-    }
-}

app/proprietary/src/test/java/stirling/software/proprietary/security/service/MailConfigTest.java

@@ -27,11 +27,6 @@ class MailConfigTest {
         when(mailProps.getPort()).thenReturn(587);
         when(mailProps.getUsername()).thenReturn("user@example.com");
         when(mailProps.getPassword()).thenReturn("password");
-        when(mailProps.getStartTlsEnable()).thenReturn(null);
-        when(mailProps.getStartTlsRequired()).thenReturn(null);
-        when(mailProps.getSslEnable()).thenReturn(null);
-        when(mailProps.getSslTrust()).thenReturn(null);
-        when(mailProps.getSslCheckServerIdentity()).thenReturn(null);
     }
 
     @Test
@@ -55,32 +50,6 @@ class MailConfigTest {
                 () -> assertEquals("password", impl.getPassword()),
                 () -> assertEquals("UTF-8", impl.getDefaultEncoding()),
                 () -> assertEquals("true", props.getProperty("mail.smtp.auth")),
-                () -> assertEquals("true", props.getProperty("mail.smtp.starttls.enable")),
-                () -> assertEquals(null, props.getProperty("mail.smtp.starttls.required")),
-                () -> assertEquals(null, props.getProperty("mail.smtp.ssl.enable")),
-                () -> assertEquals("*", props.getProperty("mail.smtp.ssl.trust")));
-    }
-
-    @Test
-    void shouldRespectExplicitTlsOverrides() {
-        ApplicationProperties appProps = mock(ApplicationProperties.class);
-        when(mailProps.getStartTlsEnable()).thenReturn(false);
-        when(mailProps.getStartTlsRequired()).thenReturn(true);
-        when(mailProps.getSslEnable()).thenReturn(true);
-        when(mailProps.getSslTrust()).thenReturn("*");
-        when(mailProps.getSslCheckServerIdentity()).thenReturn(true);
-        when(appProps.getMail()).thenReturn(mailProps);
-
-        MailConfig config = new MailConfig(appProps);
-        JavaMailSenderImpl impl = (JavaMailSenderImpl) config.javaMailSender();
-
-        Properties props = impl.getJavaMailProperties();
-
-        assertAll(
-                () -> assertEquals("false", props.getProperty("mail.smtp.starttls.enable")),
-                () -> assertEquals("true", props.getProperty("mail.smtp.starttls.required")),
-                () -> assertEquals("true", props.getProperty("mail.smtp.ssl.enable")),
-                () -> assertEquals("*", props.getProperty("mail.smtp.ssl.trust")),
-                () -> assertEquals("true", props.getProperty("mail.smtp.ssl.checkserveridentity")));
+                () -> assertEquals("true", props.getProperty("mail.smtp.starttls.enable")));
     }
 }

app/proprietary/src/test/java/stirling/software/proprietary/service/UserLicenseSettingsServiceTest.java

@@ -267,222 +267,4 @@ class UserLicenseSettingsServiceTest {
         verify(userService, times(1)).grandfatherAllOAuthUsers();
         verify(userService, times(1)).grandfatherPendingSsoUsersWithoutSession();
     }
-
-    // ===== OAuth Eligibility Tests =====
-
-    @Test
-    void isOAuthEligible_grandfatheredUser_returnsTrue() {
-        // Grandfathered user should be eligible regardless of license
-        stirling.software.proprietary.security.model.User user =
-                new stirling.software.proprietary.security.model.User();
-        user.setUsername("grandfathered-user");
-        user.setOauthGrandfathered(true);
-
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.NORMAL);
-
-        boolean result = service.isOAuthEligible(user);
-
-        assertEquals(true, result, "Grandfathered user should be eligible for OAuth");
-    }
-
-    @Test
-    void isOAuthEligible_nonGrandfatheredUserWithServerLicense_returnsTrue() {
-        // Non-grandfathered user with SERVER license should be eligible
-        stirling.software.proprietary.security.model.User user =
-                new stirling.software.proprietary.security.model.User();
-        user.setUsername("test-user");
-        user.setOauthGrandfathered(false);
-
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.SERVER);
-
-        boolean result = service.isOAuthEligible(user);
-
-        assertEquals(true, result, "Non-grandfathered user with SERVER license should be eligible");
-    }
-
-    @Test
-    void isOAuthEligible_nonGrandfatheredUserWithEnterpriseLicense_returnsTrue() {
-        // Non-grandfathered user with ENTERPRISE license should be eligible
-        stirling.software.proprietary.security.model.User user =
-                new stirling.software.proprietary.security.model.User();
-        user.setUsername("test-user");
-        user.setOauthGrandfathered(false);
-
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.ENTERPRISE);
-
-        boolean result = service.isOAuthEligible(user);
-
-        assertEquals(
-                true, result, "Non-grandfathered user with ENTERPRISE license should be eligible");
-    }
-
-    @Test
-    void isOAuthEligible_nonGrandfatheredUserWithNoLicense_returnsFalse() {
-        // Non-grandfathered user without license should NOT be eligible
-        stirling.software.proprietary.security.model.User user =
-                new stirling.software.proprietary.security.model.User();
-        user.setUsername("test-user");
-        user.setOauthGrandfathered(false);
-
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.NORMAL);
-
-        boolean result = service.isOAuthEligible(user);
-
-        assertEquals(
-                false,
-                result,
-                "Non-grandfathered user without paid license should NOT be eligible");
-    }
-
-    @Test
-    void isOAuthEligible_newUserWithServerLicense_returnsTrue() {
-        // New user (null) with SERVER license should be eligible for auto-creation
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.SERVER);
-
-        boolean result = service.isOAuthEligible(null);
-
-        assertEquals(
-                true, result, "New user with SERVER license should be eligible for auto-creation");
-    }
-
-    @Test
-    void isOAuthEligible_newUserWithNoLicense_returnsFalse() {
-        // New user (null) without license should NOT be eligible
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.NORMAL);
-
-        boolean result = service.isOAuthEligible(null);
-
-        assertEquals(
-                false,
-                result,
-                "New user without paid license should NOT be eligible for auto-creation");
-    }
-
-    @Test
-    void isOAuthEligible_licenseCheckerUnavailable_returnsFalse() {
-        // If LicenseKeyChecker is unavailable, OAuth should be blocked
-        when(licenseKeyCheckerProvider.getIfAvailable()).thenReturn(null);
-
-        stirling.software.proprietary.security.model.User user =
-                new stirling.software.proprietary.security.model.User();
-        user.setUsername("test-user");
-        user.setOauthGrandfathered(false);
-
-        boolean result = service.isOAuthEligible(user);
-
-        assertEquals(
-                false, result, "OAuth should be blocked when LicenseKeyChecker is unavailable");
-    }
-
-    // ===== SAML Eligibility Tests =====
-
-    @Test
-    void isSamlEligible_grandfatheredUser_returnsTrue() {
-        // Grandfathered user should be eligible for SAML regardless of license
-        stirling.software.proprietary.security.model.User user =
-                new stirling.software.proprietary.security.model.User();
-        user.setUsername("grandfathered-user");
-        user.setOauthGrandfathered(true);
-
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.NORMAL);
-
-        boolean result = service.isSamlEligible(user);
-
-        assertEquals(true, result, "Grandfathered user should be eligible for SAML");
-    }
-
-    @Test
-    void isSamlEligible_nonGrandfatheredUserWithEnterpriseLicense_returnsTrue() {
-        // Non-grandfathered user with ENTERPRISE license should be eligible
-        stirling.software.proprietary.security.model.User user =
-                new stirling.software.proprietary.security.model.User();
-        user.setUsername("test-user");
-        user.setOauthGrandfathered(false);
-
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.ENTERPRISE);
-
-        boolean result = service.isSamlEligible(user);
-
-        assertEquals(
-                true,
-                result,
-                "Non-grandfathered user with ENTERPRISE license should be eligible for SAML");
-    }
-
-    @Test
-    void isSamlEligible_nonGrandfatheredUserWithServerLicense_returnsFalse() {
-        // Non-grandfathered user with SERVER license should NOT be eligible for SAML
-        stirling.software.proprietary.security.model.User user =
-                new stirling.software.proprietary.security.model.User();
-        user.setUsername("test-user");
-        user.setOauthGrandfathered(false);
-
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.SERVER);
-
-        boolean result = service.isSamlEligible(user);
-
-        assertEquals(
-                false,
-                result,
-                "Non-grandfathered user with SERVER license should NOT be eligible for SAML");
-    }
-
-    @Test
-    void isSamlEligible_nonGrandfatheredUserWithNoLicense_returnsFalse() {
-        // Non-grandfathered user without license should NOT be eligible
-        stirling.software.proprietary.security.model.User user =
-                new stirling.software.proprietary.security.model.User();
-        user.setUsername("test-user");
-        user.setOauthGrandfathered(false);
-
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.NORMAL);
-
-        boolean result = service.isSamlEligible(user);
-
-        assertEquals(
-                false,
-                result,
-                "Non-grandfathered user without ENTERPRISE license should NOT be eligible for SAML");
-    }
-
-    @Test
-    void isSamlEligible_newUserWithEnterpriseLicense_returnsTrue() {
-        // New user (null) with ENTERPRISE license should be eligible for auto-creation
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.ENTERPRISE);
-
-        boolean result = service.isSamlEligible(null);
-
-        assertEquals(
-                true,
-                result,
-                "New user with ENTERPRISE license should be eligible for SAML auto-creation");
-    }
-
-    @Test
-    void isSamlEligible_newUserWithServerLicense_returnsFalse() {
-        // New user (null) with SERVER license should NOT be eligible for SAML
-        when(licenseKeyChecker.getPremiumLicenseEnabledResult()).thenReturn(License.SERVER);
-
-        boolean result = service.isSamlEligible(null);
-
-        assertEquals(
-                false,
-                result,
-                "New user with SERVER license should NOT be eligible for SAML (requires ENTERPRISE)");
-    }
-
-    @Test
-    void isSamlEligible_licenseCheckerUnavailable_returnsFalse() {
-        // If LicenseKeyChecker is unavailable, SAML should be blocked
-        when(licenseKeyCheckerProvider.getIfAvailable()).thenReturn(null);
-
-        stirling.software.proprietary.security.model.User user =
-                new stirling.software.proprietary.security.model.User();
-        user.setUsername("test-user");
-        user.setOauthGrandfathered(false);
-
-        boolean result = service.isSamlEligible(user);
-
-        assertEquals(false, result, "SAML should be blocked when LicenseKeyChecker is unavailable");
-    }
 }

build.gradle

@@ -57,7 +57,7 @@ repositories {
 
 allprojects {
     group = 'stirling.software'
-    version = '2.1.2'
+    version = '2.0.3'
 
     configurations.configureEach {
         exclude group: 'commons-logging', module: 'commons-logging'

frontend/package-lock.json

@@ -456,7 +456,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=18"
       },
@@ -500,7 +499,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=18"
       }
@@ -581,7 +579,6 @@
       "resolved": "https://registry.npmjs.org/@embedpdf/core/-/core-1.5.0.tgz",
       "integrity": "sha512-Yrh9XoVaT8cUgzgqpJ7hx5wg6BqQrCFirqqlSwVb+Ly9oNn4fZbR9GycIWmzJOU5XBnaOJjXfQSaDyoNP0woNA==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@embedpdf/engines": "1.5.0",
         "@embedpdf/models": "1.5.0"
@@ -681,7 +678,6 @@
       "resolved": "https://registry.npmjs.org/@embedpdf/plugin-history/-/plugin-history-1.5.0.tgz",
       "integrity": "sha512-p7PTNNaIr4gH3jLwX+eLJe1DeUXgi21kVGN6SRx/pocH8esg4jqoOeD/YiRRZoZnPOiy0jBXVhkPkwSmY7a2hQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@embedpdf/models": "1.5.0"
       },
@@ -698,7 +694,6 @@
       "resolved": "https://registry.npmjs.org/@embedpdf/plugin-interaction-manager/-/plugin-interaction-manager-1.5.0.tgz",
       "integrity": "sha512-ckHgTfvkW6c5Ta7Mc+Dl9C2foVnvEpqEJ84wyBnqrU0OWbe/jsiPhyKBVeartMGqNI/kVfaQTXupyrKhekAVmg==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@embedpdf/models": "1.5.0"
       },
@@ -716,7 +711,6 @@
       "resolved": "https://registry.npmjs.org/@embedpdf/plugin-loader/-/plugin-loader-1.5.0.tgz",
       "integrity": "sha512-P4YpIZfaW69etYIjphyaL4cGl2pB14h3OdTE0tRQ2pZYZHFLTvlt4q9B3PVSdhlSrHK5nob7jfLGon2U7xCslg==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@embedpdf/models": "1.5.0"
       },
@@ -770,7 +764,6 @@
       "resolved": "https://registry.npmjs.org/@embedpdf/plugin-render/-/plugin-render-1.5.0.tgz",
       "integrity": "sha512-ywwSj0ByrlkvrJIHKRzqxARkOZriki8VJUC+T4MV8fGyF4CzvCRJyKlPktahFz+VxhoodqTh7lBCib68dH+GvA==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@embedpdf/models": "1.5.0"
       },
@@ -805,7 +798,6 @@
       "resolved": "https://registry.npmjs.org/@embedpdf/plugin-scroll/-/plugin-scroll-1.5.0.tgz",
       "integrity": "sha512-RNmTZCZ8X1mA8cw9M7TMDuhO9GtkOalGha2bBL3En3D1IlDRS7PzNNMSMV7eqT7OQICSTltlpJ8p8Qi5esvL/Q==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@embedpdf/models": "1.5.0"
       },
@@ -842,7 +834,6 @@
       "resolved": "https://registry.npmjs.org/@embedpdf/plugin-selection/-/plugin-selection-1.5.0.tgz",
       "integrity": "sha512-zrxLBAZQoPswDuf9q9DrYaQc6B0Ysc2U1hueTjNH/4+ydfl0BFXZkKR63C2e3YmWtXvKjkoIj0GyPzsiBORLUw==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@embedpdf/models": "1.5.0"
       },
@@ -918,7 +909,6 @@
       "resolved": "https://registry.npmjs.org/@embedpdf/plugin-viewport/-/plugin-viewport-1.5.0.tgz",
       "integrity": "sha512-G8GDyYRhfehw72+r4qKkydnA5+AU8qH67g01Y12b0DzI0VIzymh/05Z4dK8DsY3jyWPXJfw2hlg5+KDHaMBHgQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@embedpdf/models": "1.5.0"
       },
@@ -1074,7 +1064,6 @@
       "resolved": "https://registry.npmjs.org/@emotion/react/-/react-11.14.0.tgz",
       "integrity": "sha512-O000MLDBDdk/EohJPFUqvnp4qnHeYkVP5B0xEG0D/L7cOKP9kefu2DXn8dj74cQfsEzUqh+sr1RzFqiL1o+PpA==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@babel/runtime": "^7.18.3",
         "@emotion/babel-plugin": "^11.13.5",
@@ -1118,7 +1107,6 @@
       "resolved": "https://registry.npmjs.org/@emotion/styled/-/styled-11.14.1.tgz",
       "integrity": "sha512-qEEJt42DuToa3gurlH4Qqc1kVpNq8wO8cJtDzU46TjlzWjDlsVyevtYCRijVq3SrHsROS+gVQ8Fnea108GnKzw==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@babel/runtime": "^7.18.3",
         "@emotion/babel-plugin": "^11.13.5",
@@ -2149,7 +2137,6 @@
       "resolved": "https://registry.npmjs.org/@mantine/core/-/core-8.3.6.tgz",
       "integrity": "sha512-paTl+0x+O/QtgMtqVJaG8maD8sfiOdgPmLOyG485FmeGZ1L3KMdEkhxZtmdGlDFsLXhmMGQ57ducT90bvhXX5A==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@floating-ui/react": "^0.27.16",
         "clsx": "^2.1.1",
@@ -2200,7 +2187,6 @@
       "resolved": "https://registry.npmjs.org/@mantine/hooks/-/hooks-8.3.6.tgz",
       "integrity": "sha512-liHfaWXHAkLjJy+Bkr29UsCwAoDQ/a64WrM67lksx8F0qqyjR5RQH8zVlhuOjdpQnwtlUkE/YiTvbJiPcoI0bw==",
       "license": "MIT",
-      "peer": true,
       "peerDependencies": {
         "react": "^18.x || ^19.x"
       }
@@ -2268,7 +2254,6 @@
       "resolved": "https://registry.npmjs.org/@mui/material/-/material-7.3.5.tgz",
       "integrity": "sha512-8VVxFmp1GIm9PpmnQoCoYo0UWHoOrdA57tDL62vkpzEgvb/d71Wsbv4FRg7r1Gyx7PuSo0tflH34cdl/NvfHNQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@babel/runtime": "^7.28.4",
         "@mui/core-downloads-tracker": "^7.3.5",
@@ -3201,7 +3186,6 @@
       "resolved": "https://registry.npmjs.org/@stripe/stripe-js/-/stripe-js-7.9.0.tgz",
       "integrity": "sha512-ggs5k+/0FUJcIgNY08aZTqpBTtbExkJMYMLSMwyucrhtWexVOEY1KJmhBsxf+E/Q15f5rbwBpj+t0t2AW2oCsQ==",
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=12.16"
       }
@@ -3320,6 +3304,7 @@
       "resolved": "https://registry.npmjs.org/@sveltejs/acorn-typescript/-/acorn-typescript-1.0.6.tgz",
       "integrity": "sha512-4awhxtMh4cx9blePWl10HRHj8Iivtqj+2QdDCSMDzxG+XKa9+VCNupQuCuvzEhYPzZSrX+0gC+0lHA/0fFKKQQ==",
       "license": "MIT",
+      "peer": true,
       "peerDependencies": {
         "acorn": "^8.9.0"
       }
@@ -4096,7 +4081,6 @@
       "integrity": "sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@babel/code-frame": "^7.10.4",
         "@babel/runtime": "^7.12.5",
@@ -4425,7 +4409,6 @@
       "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.2.tgz",
       "integrity": "sha512-6mDvHUFSjyT2B2yeNx2nUgMxh9LtOWvkhIU3uePn2I2oyNymUAX1NIsdgviM4CH+JSrp2D2hsMvJOkxY+0wNRA==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "csstype": "^3.0.2"
       }
@@ -4436,7 +4419,6 @@
       "integrity": "sha512-9KQPoO6mZCi7jcIStSnlOWn2nEF3mNmyr3rIAsGnAbQKYbRLyqmeSc39EVgtxXVia+LMT8j3knZLAZAh+xLmrw==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "peerDependencies": {
         "@types/react": "^19.2.0"
       }
@@ -4506,7 +4488,6 @@
       "integrity": "sha512-6m1I5RmHBGTnUGS113G04DMu3CpSdxCAU/UvtjNWL4Nuf3MW9tQhiJqRlHzChIkhy6kZSAQmc+I1bcGjE3yNKg==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@typescript-eslint/scope-manager": "8.46.3",
         "@typescript-eslint/types": "8.46.3",
@@ -5220,6 +5201,7 @@
       "resolved": "https://registry.npmjs.org/@vue/reactivity/-/reactivity-3.5.24.tgz",
       "integrity": "sha512-BM8kBhtlkkbnyl4q+HiF5R5BL0ycDPfihowulm02q3WYp2vxgPcJuZO866qa/0u3idbMntKEtVNuAUp5bw4teg==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@vue/shared": "3.5.24"
       }
@@ -5229,6 +5211,7 @@
       "resolved": "https://registry.npmjs.org/@vue/runtime-core/-/runtime-core-3.5.24.tgz",
       "integrity": "sha512-RYP/byyKDgNIqfX/gNb2PB55dJmM97jc9wyF3jK7QUInYKypK2exmZMNwnjueWwGceEkP6NChd3D2ZVEp9undQ==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@vue/reactivity": "3.5.24",
         "@vue/shared": "3.5.24"
@@ -5239,6 +5222,7 @@
       "resolved": "https://registry.npmjs.org/@vue/runtime-dom/-/runtime-dom-3.5.24.tgz",
       "integrity": "sha512-Z8ANhr/i0XIluonHVjbUkjvn+CyrxbXRIxR7wn7+X7xlcb7dJsfITZbkVOeJZdP8VZwfrWRsWdShH6pngMxRjw==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@vue/reactivity": "3.5.24",
         "@vue/runtime-core": "3.5.24",
@@ -5251,6 +5235,7 @@
       "resolved": "https://registry.npmjs.org/@vue/server-renderer/-/server-renderer-3.5.24.tgz",
       "integrity": "sha512-Yh2j2Y4G/0/4z/xJ1Bad4mxaAk++C2v4kaa8oSYTMJBJ00/ndPuxCnWeot0/7/qafQFLh5pr6xeV6SdMcE/G1w==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@vue/compiler-ssr": "3.5.24",
         "@vue/shared": "3.5.24"
@@ -5277,7 +5262,6 @@
       "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz",
       "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==",
       "license": "MIT",
-      "peer": true,
       "bin": {
         "acorn": "bin/acorn"
       },
@@ -5685,6 +5669,7 @@
       "resolved": "https://registry.npmjs.org/axobject-query/-/axobject-query-4.1.0.tgz",
       "integrity": "sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==",
       "license": "Apache-2.0",
+      "peer": true,
       "engines": {
         "node": ">= 0.4"
       }
@@ -5961,7 +5946,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "baseline-browser-mapping": "^2.8.19",
         "caniuse-lite": "^1.0.30001751",
@@ -7009,8 +6993,7 @@
       "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1521046.tgz",
       "integrity": "sha512-vhE6eymDQSKWUXwwA37NtTTVEzjtGVfDr3pRbsWEQ5onH/Snp2c+2xZHWJJawG/0hCCJLRGt4xVtEVUVILol4w==",
       "dev": true,
-      "license": "BSD-3-Clause",
-      "peer": true
+      "license": "BSD-3-Clause"
     },
     "node_modules/dezalgo": {
       "version": "1.0.4",
@@ -7405,7 +7388,6 @@
       "integrity": "sha512-BhHmn2yNOFA9H9JmmIVKJmd288g9hrVRDkdoIgRCRuSySRUHH7r/DI6aAXW9T1WwUuY3DFgrcaqB+deURBLR5g==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@eslint-community/eslint-utils": "^4.8.0",
         "@eslint-community/regexpp": "^4.12.1",
@@ -7576,7 +7558,6 @@
       "integrity": "sha512-whOE1HFo/qJDyX4SnXzP4N6zOWn79WhnCUY/iDR0mPfQZO8wcYE4JClzI2oZrhBnnMUCBCHZhO6VQyoBU95mZA==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@rtsao/scc": "^1.1.0",
         "array-includes": "^3.1.9",
@@ -7743,7 +7724,8 @@
       "version": "1.2.2",
       "resolved": "https://registry.npmjs.org/esm-env/-/esm-env-1.2.2.tgz",
       "integrity": "sha512-Epxrv+Nr/CaL4ZcFGPJIYLWFom+YeV1DqMLHJoEd9SYRxNbaFruBwfEX/kkHUJf55j2+TUbmDcmuilbP1TmXHA==",
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
     },
     "node_modules/espree": {
       "version": "10.4.0",
@@ -7808,6 +7790,7 @@
       "resolved": "https://registry.npmjs.org/esrap/-/esrap-2.1.2.tgz",
       "integrity": "sha512-DgvlIQeowRNyvLPWW4PT7Gu13WznY288Du086E751mwwbsgr29ytBiYeLzAGIo0qk3Ujob0SDk8TiSaM5WQzNg==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@jridgewell/sourcemap-codec": "^1.4.15"
       }
@@ -8898,7 +8881,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@babel/runtime": "^7.27.6"
       },
@@ -9375,6 +9357,7 @@
       "resolved": "https://registry.npmjs.org/is-reference/-/is-reference-3.0.3.tgz",
       "integrity": "sha512-ixkJoqQvAP88E6wLydLGGqCJsrFUnqoH6HnaczB8XmDH1oaWU+xxdptvikTgaEhtZ53Ky6YXiBuUI2WXLMCwjw==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@types/estree": "^1.0.6"
       }
@@ -9695,7 +9678,6 @@
       "integrity": "sha512-Pcfm3eZ+eO4JdZCXthW9tCDT3nF4K+9dmeZ+5X39n+Kqz0DDIABRP5CAEOHRFZk8RGuC2efksTJxrjp8EXCunQ==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@acemir/cssom": "^0.9.19",
         "@asamuzakjp/dom-selector": "^6.7.3",
@@ -10282,7 +10264,8 @@
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/locate-character/-/locate-character-3.0.0.tgz",
       "integrity": "sha512-SW13ws7BjaeJ6p7Q6CO2nchbYEc3X3J6WrmTTDto7yMPqVSZTUyY5Tjbid+Ab8gLnATtygYtiDIJGQRRn2ZOiA==",
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
     },
     "node_modules/locate-path": {
       "version": "6.0.0",
@@ -11428,7 +11411,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "nanoid": "^3.3.11",
         "picocolors": "^1.1.1",
@@ -11708,7 +11690,6 @@
       "resolved": "https://registry.npmjs.org/preact/-/preact-10.27.2.tgz",
       "integrity": "sha512-5SYSgFKSyhCbk6SrXyMpqjb5+MQBgfvEKE/OC+PujcY34sOpqtr+0AZQtPYx5IA6VxynQ7rUPCtKzyovpj9Bpg==",
       "license": "MIT",
-      "peer": true,
       "funding": {
         "type": "opencollective",
         "url": "https://opencollective.com/preact"
@@ -12091,7 +12072,6 @@
       "resolved": "https://registry.npmjs.org/react/-/react-19.2.0.tgz",
       "integrity": "sha512-tmbWg6W31tQLeB5cdIBOicJDJRR2KzXsV7uSK9iNfLWQ5bIZfxuPEHp7M8wiHyHnn0DD1i7w3Zmin0FtkrwoCQ==",
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=0.10.0"
       }
@@ -12101,7 +12081,6 @@
       "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.2.0.tgz",
       "integrity": "sha512-UlbRu4cAiGaIewkPyiRGJk0imDN2T3JjieT6spoL2UeSf5od4n5LB/mQ4ejmxhCFT1tYe8IvaFulzynWovsEFQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "scheduler": "^0.27.0"
       },
@@ -13613,6 +13592,7 @@
       "resolved": "https://registry.npmjs.org/aria-query/-/aria-query-5.3.2.tgz",
       "integrity": "sha512-COROpnaoap1E2F000S62r6A60uHZnmlvomhfyT2DlTcrY1OrBKn2UhH7qn5wTC9zMvD0AY7csdPSNwKP+7WiQw==",
       "license": "Apache-2.0",
+      "peer": true,
       "engines": {
         "node": ">= 0.4"
       }
@@ -13821,7 +13801,6 @@
       "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=12"
       },
@@ -14123,7 +14102,6 @@
       "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
       "devOptional": true,
       "license": "Apache-2.0",
-      "peer": true,
       "bin": {
         "tsc": "bin/tsc",
         "tsserver": "bin/tsserver"
@@ -14205,7 +14183,6 @@
       "dev": true,
       "hasInstallScript": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "napi-postinstall": "^0.3.0"
       },
@@ -14410,7 +14387,6 @@
       "integrity": "sha512-BxAKBWmIbrDgrokdGZH1IgkIk/5mMHDreLDmCJ0qpyJaAteP8NvMhkwr/ZCQNqNH97bw/dANTE9PDzqwJghfMQ==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "esbuild": "^0.25.0",
         "fdir": "^6.5.0",
@@ -14562,7 +14538,6 @@
       "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=12"
       },
@@ -14576,7 +14551,6 @@
       "integrity": "sha512-LUCP5ev3GURDysTWiP47wRRUpLKMOfPh+yKTx3kVIEiu5KOMeqzpnYNsKyOoVrULivR8tLcks4+lga33Whn90A==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@types/chai": "^5.2.2",
         "@vitest/expect": "3.2.4",
@@ -15188,7 +15162,8 @@
       "version": "1.1.4",
       "resolved": "https://registry.npmjs.org/zimmerframe/-/zimmerframe-1.1.4.tgz",
       "integrity": "sha512-B58NGBEoc8Y9MWWCQGl/gq9xBCe4IiKM0a2x7GZdQKOW5Exr8S1W24J6OgM1njK8xCRGvAJIL/MxXHf6SkmQKQ==",
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
     },
     "node_modules/zod": {
       "version": "3.25.76",

frontend/public/locales/ar-AR/translation.toml

@@ -3828,8 +3828,8 @@ title = "التحليلات"
 description = "تساعدنا هذه الملفات على فهم كيفية استخدام أدواتنا، كي نركّز على بناء الميزات الأكثر قيمة لمجتمعنا. كن مطمئنًا—‏Stirling PDF لا يمكنه ولن يتتبع محتوى المستندات التي تعمل عليها."
 
 [cookieBanner.services]
-posthog = "تحليلات PostHog"
-scarf = "Scarf بكسل"
+posthog = "PostHog Analytics"
+scarf = "Scarf Pixel"
 
 [removeMetadata]
 submit = "إزالة البيانات الوصفية"
@@ -5177,7 +5177,7 @@ upgrade = "الترقية الآن →"
 freeTitle = "ترخيص الخادم"
 overLimitTitle = "مطلوب ترخيص خادم"
 overLimitBody = "ترخيصنا يسمح حتى <strong>{{freeTierLimit}}</strong> مستخدمين مجاناً لكل خادم. لديك <strong>{{overLimitUserCopy}}</strong> مستخدمي Stirling. للمتابعة دون انقطاع، ارقَ إلى خطة خادم Stirling - <strong>مقاعد غير محدودة</strong>، تحرير نصوص PDF، وتحكم إداري كامل مقابل $99/خادم/شهرياً."
-freeBody = "يتيح ترخيصنا <strong>Open-Core</strong> ما يصل إلى <strong>{{freeTierLimit}}</strong> مستخدمًا مجانًا لكل خادم. للتوسع دون انقطاع، نوصي بخطة Stirling Server - <strong>مقاعد غير محدودة</strong> و<strong>دعم SSO</strong> مقابل $99/server/mo."
+freeBody = "ترخيص <strong>Open-Core</strong> لدينا يسمح حتى <strong>{{freeTierLimit}}</strong> مستخدمين مجاناً لكل خادم. للتوسع بسلاسة والحصول على وصول مبكر إلى <strong>أداة تحرير نصوص PDF</strong> الجديدة، نوصي بخطة خادم Stirling - تحرير كامل و<strong>مقاعد غير محدودة</strong> مقابل $99/خادم/شهرياً."
 
 [onboarding.desktopInstall]
 title = "تنزيل"

frontend/public/locales/az-AZ/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "İndi yüksəlt →"
 freeTitle = "Server lisenziyası"
 overLimitTitle = "Server lisenziyası tələb olunur"
 overLimitBody = "Lisenziyalaşmamız hər server üçün pulsuz olaraq maksimum <strong>{{freeTierLimit}}</strong> istifadəçiyə icazə verir. Sizdə <strong>{{overLimitUserCopy}}</strong> Stirling istifadəçisi var. Fasiləsiz davam etmək üçün Stirling Server planına yüksəldin - <strong>limitsiz yerlər</strong>, PDF mətn redaktəsi və tam admin nəzarəti cəmi $99/server/ay."
-freeBody = "Bizim <strong>Open-Core</strong> lisenziyalaşdırmamız hər server üçün pulsuz olaraq ən çox <strong>{{freeTierLimit}}</strong> istifadəçiyə icazə verir. Fasiləsiz miqyaslama üçün Stirling Server planını tövsiyə edirik - <strong>limitsiz yerlər</strong> və <strong>SSO dəstəyi</strong> $99/server/ay."
+freeBody = "Bizim <strong>Open-Core</strong> lisenziyası hər server üçün pulsuz olaraq maksimum <strong>{{freeTierLimit}}</strong> istifadəçiyə icazə verir. Fasiləsiz miqyaslanmaq və yeni <strong>PDF mətn redaktəsi alətimizə</strong> erkən çıxış əldə etmək üçün Stirling Server planını tövsiyə edirik — tam redaktə və <strong>limitsiz yerlər</strong> $99/server/ay."
 
 [onboarding.desktopInstall]
 title = "Yüklə"

frontend/public/locales/bg-BG/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Надградете сега →"
 freeTitle = "Лиценз за сървър"
 overLimitTitle = "Необходим е лиценз за сървър"
 overLimitBody = "Нашият лиценз позволява до <strong>{{freeTierLimit}}</strong> безплатни потребители на сървър. Имате <strong>{{overLimitUserCopy}}</strong> потребители на Stirling. За да продължите без прекъсвания, надградете до плана Stirling Server – <strong>неограничени места</strong>, редакция на PDF текст и пълен админ контрол за $99/сървър/месец."
-freeBody = "Нашият лицензен модел <strong>Open-Core</strong> позволява до <strong>{{freeTierLimit}}</strong> потребители безплатно на сървър. За безпрепятствено мащабиране препоръчваме плана Stirling Server - <strong>неограничени места</strong> и <strong>поддръжка на SSO</strong> за $99/server/mo."
+freeBody = "Нашият <strong>Open-Core</strong> лиценз позволява до <strong>{{freeTierLimit}}</strong> безплатни потребители на сървър. За да мащабирате без прекъсвания и да получите ранен достъп до нашия нов <strong>инструмент за редакция на PDF текст</strong>, препоръчваме плана Stirling Server – пълно редактиране и <strong>неограничени места</strong> за $99/сървър/месец."
 
 [onboarding.desktopInstall]
 title = "Изтегляне"

frontend/public/locales/ca-CA/translation.toml

@@ -352,7 +352,7 @@ teams = "Equips"
 title = "Configuració"
 systemSettings = "Configuració del sistema"
 features = "Funcions"
-endpoints = "Punts finals"
+endpoints = "Endpoints"
 database = "Base de dades"
 advanced = "Avançat"
 
@@ -561,7 +561,7 @@ totalEndpoints = "Total d'endpoints"
 totalVisits = "Total de visites"
 showing = "Mostrant"
 selectedVisits = "Visites seleccionades"
-endpoint = "Punt final"
+endpoint = "Endpoint"
 visits = "Visites"
 percentage = "Percentatge"
 loading = "Carregant..."
@@ -4366,7 +4366,7 @@ features = "Banderes de funcions"
 processing = "Processament"
 
 [admin.settings.advanced.endpoints]
-label = "Punts finals"
+label = "Endpoints"
 manage = "Gestiona els endpoints de l'API"
 description = "La gestió d'endpoints es configura via YAML. Consulteu la documentació per a detalls sobre com habilitar/deshabilitar endpoints específics."
 
@@ -5177,7 +5177,7 @@ upgrade = "Actualitza ara →"
 freeTitle = "Llicència del servidor"
 overLimitTitle = "Cal una llicència de servidor"
 overLimitBody = "La nostra llicència permet fins a <strong>{{freeTierLimit}}</strong> usuaris gratuïts per servidor. Tens <strong>{{overLimitUserCopy}}</strong> usuaris de Stirling. Per continuar sense interrupcions, actualitza al pla Stirling Server: <strong>seients il·limitats</strong>, edició de text de PDF i control d'administració complet per 99 $/servidor/mes."
-freeBody = "La nostra llicència <strong>Open-Core</strong> permet fins a <strong>{{freeTierLimit}}</strong> usuaris gratuïts per servidor. Per escalar sense interrupcions, recomanem el pla Stirling Server - <strong>places il·limitades</strong> i <strong>suport SSO</strong> per $99/servidor/mes."
+freeBody = "La nostra llicència <strong>Open-Core</strong> permet fins a <strong>{{freeTierLimit}}</strong> usuaris gratuïts per servidor. Per escalar sense interrupcions i obtenir accés anticipat a la nova <strong>eina d'edició de text PDF</strong>, recomanem el pla Stirling Server: edició completa i <strong>seients il·limitats</strong> per 99 $/servidor/mes."
 
 [onboarding.desktopInstall]
 title = "Baixa"
@@ -5754,7 +5754,7 @@ title = "Gràfic d'ús dels endpoints"
 
 [usage.table]
 title = "Estadístiques detallades"
-endpoint = "Punt final"
+endpoint = "Endpoint"
 visits = "Visites"
 percentage = "Percentatge"
 noData = "No hi ha dades disponibles"

frontend/public/locales/cs-CZ/translation.toml

@@ -4176,7 +4176,7 @@ description = "Sledovat akce uživatelů a systémové události pro compliance
 
 [admin.settings.security.audit.level]
 label = "Úroveň auditu"
-description = "0=VYPNUTO, 1=ZÁKLADNÍ, 2=STANDARDNÍ, 3=PODROBNÝ"
+description = "0=OFF, 1=BASIC, 2=STANDARD, 3=VERBOSE"
 
 [admin.settings.security.audit.retentionDays]
 label = "Doba uchování auditů (dny)"
@@ -5177,7 +5177,7 @@ upgrade = "Upgradovat nyní →"
 freeTitle = "Serverová licence"
 overLimitTitle = "Vyžadována serverová licence"
 overLimitBody = "Naše licencování umožňuje až <strong>{{freeTierLimit}}</strong> uživatelů zdarma na server. Máte <strong>{{overLimitUserCopy}}</strong> uživatelů Stirling. Pro nepřerušené používání přejděte na plán Stirling Server – <strong>neomezený počet míst</strong>, úpravy textu PDF a plná správa za 99 $/server/měsíc."
-freeBody = "Naše licencování <strong>Open-Core</strong> umožňuje až <strong>{{freeTierLimit}}</strong> uživatelů zdarma na server. Pro nepřerušované škálování doporučujeme plán Stirling Server - <strong>neomezený počet míst</strong> a <strong>podpora SSO</strong> za $99/server/měs."
+freeBody = "Naše licencování <strong>Open-Core</strong> umožňuje až <strong>{{freeTierLimit}}</strong> uživatelů zdarma na server. Pro nepřerušený růst a přednostní přístup k našemu novému <strong>nástroji pro úpravu textu PDF</strong> doporučujeme plán Stirling Server – plné úpravy a <strong>neomezený počet míst</strong> za 99 $/server/měsíc."
 
 [onboarding.desktopInstall]
 title = "Stáhnout"

frontend/public/locales/da-DK/translation.toml

@@ -1221,9 +1221,9 @@ pdfaDigitalSignatureWarning = "PDF'en indeholder en digital signatur. Dette vil
 fileFormat = "Filformat"
 wordDoc = "Word-dokument"
 wordDocExt = "Word-dokument (.docx)"
-odtExt = "OpenDocument-tekst (.odt)"
+odtExt = "OpenDocument Text (.odt)"
 pptExt = "PowerPoint (.pptx)"
-odpExt = "OpenDocument-præsentation (.odp)"
+odpExt = "OpenDocument Presentation (.odp)"
 txtExt = "Almindelig tekst (.txt)"
 rtfExt = "Rich Text Format (.rtf)"
 selectedFiles = "Valgte filer"
@@ -3790,7 +3790,7 @@ version = "Nuværende udgivelse"
 title = "API-dokumentation"
 header = "API-dokumentation"
 desc = "Se og test Stirling PDF API-endpoints"
-tags = "api,dokumentation,swagger,endepunkter,udvikling"
+tags = "api,documentation,swagger,endpoints,development"
 
 [cookieBanner.popUp]
 title = "Sådan bruger vi cookies"
@@ -5177,7 +5177,7 @@ upgrade = "Opgrader nu →"
 freeTitle = "Serverlicens"
 overLimitTitle = "Serverlicens påkrævet"
 overLimitBody = "Vores licens tillader op til <strong>{{freeTierLimit}}</strong> brugere gratis pr. server. Du har <strong>{{overLimitUserCopy}}</strong> Stirling-brugere. For at fortsætte uden afbrydelser skal du opgradere til Stirling Server-abonnementet – <strong>ubegrænsede pladser</strong>, PDF-tekstredigering og fuld admin-kontrol for $99/server/md."
-freeBody = "Vores <strong>Open-Core</strong>-licens tillader op til <strong>{{freeTierLimit}}</strong> brugere gratis pr. server. For at skalere uden afbrydelser anbefaler vi Stirling Server-planen – <strong>ubegrænsede pladser</strong> og <strong>SSO-understøttelse</strong> for $99/server/md."
+freeBody = "Vores <strong>Open-Core</strong>-licens tillader op til <strong>{{freeTierLimit}}</strong> brugere gratis pr. server. For at skalere uden afbrydelser og få tidlig adgang til vores nye <strong>PDF-tekstredigeringsværktøj</strong> anbefaler vi Stirling Server-planen – fuld redigering og <strong>ubegrænsede pladser</strong> for $99/server/md."
 
 [onboarding.desktopInstall]
 title = "Download"

frontend/public/locales/de-DE/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Jetzt upgraden →"
 freeTitle = "Server-Lizenz"
 overLimitTitle = "Server-Lizenz erforderlich"
 overLimitBody = "Unsere Lizenz erlaubt bis zu <strong>{{freeTierLimit}}</strong> Nutzer pro Server kostenlos. Sie haben <strong>{{overLimitUserCopy}}</strong> Stirling-Nutzer. Um ohne Unterbrechung fortzufahren, upgraden Sie auf den Stirling-Server-Plan – <strong>unbegrenzte Plätze</strong>, PDF-Textbearbeitung und volle Admin-Kontrolle für $99/Server/Monat."
-freeBody = "Unsere <strong>Open-Core</strong>-Lizenz erlaubt bis zu <strong>{{freeTierLimit}}</strong> Nutzern pro Server kostenlos. Um unterbrechungsfrei zu skalieren, empfehlen wir den Stirling Server-Plan - <strong>unbegrenzte Plätze</strong> und <strong>SSO-Unterstützung</strong> für $99/Server/Monat."
+freeBody = "Unsere <strong>Open-Core</strong>-Lizenz erlaubt bis zu <strong>{{freeTierLimit}}</strong> Nutzer pro Server kostenlos. Für unterbrechungsfreies Skalieren und frühen Zugriff auf unser neues <strong>PDF-Textbearbeitungs-Tool</strong> empfehlen wir den Stirling-Server-Plan – volle Bearbeitung und <strong>unbegrenzte Plätze</strong> für $99/Server/Monat."
 
 [onboarding.desktopInstall]
 title = "Download"

frontend/public/locales/el-GR/translation.toml

@@ -3790,7 +3790,7 @@ version = "Τρέχουσα έκδοση"
 title = "Τεκμηρίωση API"
 header = "Τεκμηρίωση API"
 desc = "Προβάλετε και δοκιμάστε τα endpoints του Stirling PDF API"
-tags = "api,τεκμηρίωση,swagger,τελικά σημεία,ανάπτυξη"
+tags = "api,documentation,swagger,endpoints,development"
 
 [cookieBanner.popUp]
 title = "Πώς χρησιμοποιούμε τα cookies"
@@ -4482,7 +4482,7 @@ label = "Ενεργοποίηση προσκλήσεων μέσω email"
 description = "Να επιτρέπεται στους διαχειριστές να προσκαλούν χρήστες μέσω email με αυτόματα παραγόμενους κωδικούς"
 
 [admin.settings.mail.frontendUrl]
-label = "URL front-end"
+label = "Frontend URL"
 description = "Βασικό URL για το frontend (π.χ. https://pdf.example.com). Χρησιμοποιείται για τη δημιουργία συνδέσμων πρόσκλησης στα email. Αφήστε κενό για χρήση του backend URL."
 
 [admin.settings.legal]
@@ -5177,7 +5177,7 @@ upgrade = "Αναβάθμιση τώρα →"
 freeTitle = "Άδεια διακομιστή"
 overLimitTitle = "Απαιτείται άδεια διακομιστή"
 overLimitBody = "Η αδειοδότηση μας επιτρέπει έως <strong>{{freeTierLimit}}</strong> χρήστες δωρεάν ανά διακομιστή. Έχετε <strong>{{overLimitUserCopy}}</strong> χρήστες Stirling. Για να συνεχίσετε χωρίς διακοπές, αναβαθμίστε στο πλάνο Stirling Server - <strong>απεριόριστες θέσεις</strong>, επεξεργασία κειμένου PDF και πλήρης έλεγχος διαχειριστή για $99/server/μήνα."
-freeBody = "Οι άδειες χρήσης <strong>Open-Core</strong> επιτρέπουν έως και <strong>{{freeTierLimit}}</strong> χρήστες δωρεάν ανά διακομιστή. Για απρόσκοπτη κλιμάκωση, προτείνουμε το πλάνο Stirling Server - <strong>απεριόριστες θέσεις</strong> και <strong>υποστήριξη SSO</strong> με $99/διακομιστή/μήνα."
+freeBody = "Η αδειοδότηση <strong>Open-Core</strong> μας επιτρέπει έως <strong>{{freeTierLimit}}</strong> χρήστες δωρεάν ανά διακομιστή. Για απρόσκοπτη κλιμάκωση και έγκαιρη πρόσβαση στο νέο <strong>εργαλείο επεξεργασίας κειμένου PDF</strong>, προτείνουμε το πλάνο Stirling Server - πλήρης επεξεργασία και <strong>απεριόριστες θέσεις</strong> για $99/server/μήνα."
 
 [onboarding.desktopInstall]
 title = "Λήψη"

frontend/public/locales/en-GB/translation.toml

@@ -3036,91 +3036,6 @@ title = "Get Info on PDF"
 header = "Get Info on PDF"
 submit = "Get Info"
 downloadJson = "Download JSON"
-processing = "Extracting information..."
-results = "Results"
-noResults = "Run the tool to generate a report."
-downloads = "Downloads"
-noneDetected = "None detected"
-indexTitle = "Index"
-
-[getPdfInfo.report]
-entryLabel = "Full information summary"
-shortTitle = "PDF Information"
-
-[getPdfInfo.sections]
-metadata = "Metadata"
-formFields = "Form Fields"
-basicInfo = "Basic Info"
-documentInfo = "Document Info"
-compliance = "Compliance"
-encryption = "Encryption"
-permissions = "Permissions"
-other = "Other"
-perPageInfo = "Per Page Info"
-tableOfContents = "Table of Contents"
-
-[getPdfInfo.other]
-attachments = "Attachments"
-embeddedFiles = "Embedded Files"
-javaScript = "JavaScript"
-layers = "Layers"
-structureTree = "StructureTree"
-xmp = "XMPMetadata"
-
-[getPdfInfo.perPage]
-size = "Size"
-annotations = "Annotations"
-images = "Images"
-links = "Links"
-fonts = "Fonts"
-xobjects = "XObject Counts"
-multimedia = "Multimedia"
-
-[getPdfInfo.summary]
-pages = "Pages"
-fileSize = "File Size"
-pdfVersion = "PDF Version"
-language = "Language"
-title = "PDF Summary"
-author = "Author"
-created = "Created"
-modified = "Modified"
-permsAll = "All Permissions Allowed"
-permsRestricted = "{{count}} restrictions"
-permsMixed = "Some permissions restricted"
-hasCompliance = "Has compliance standards"
-noCompliance = "No Compliance Standards"
-basic = "Basic Information"
-documentInfo = "Document Information"
-securityTitle = "Security Status"
-technical = "Technical"
-overviewTitle = "PDF Overview"
-
-[getPdfInfo.summary.security]
-encrypted = "Encrypted PDF - Password protection present"
-unencrypted = "Unencrypted PDF - No password protection"
-
-[getPdfInfo.summary.tech]
-images = "Images"
-fonts = "Fonts"
-formFields = "Form Fields"
-embeddedFiles = "Embedded Files"
-javaScript = "JavaScript"
-layers = "Layers"
-bookmarks = "Bookmarks"
-multimedia = "Multimedia"
-
-[getPdfInfo.summary.overview]
-untitled = "an untitled document"
-unknown = "Unknown Author"
-text = "This is a {{pages}}-page PDF titled {{title}} created by {{author}} (PDF version {{version}})."
-
-[getPdfInfo.error]
-partial = "Some files could not be processed."
-unexpected = "Unexpected error during extraction."
-
-[getPdfInfo.status]
-complete = "Extraction complete"
 
 [extractPage]
 tags = "extract"
@@ -5263,7 +5178,7 @@ upgrade = "Upgrade now →"
 freeTitle = "Server License"
 overLimitTitle = "Server License Needed"
 overLimitBody = "Our licensing permits up to <strong>{{freeTierLimit}}</strong> users for free per server. You have <strong>{{overLimitUserCopy}}</strong> Stirling users. To continue uninterrupted, upgrade to the Stirling Server plan - <strong>unlimited seats</strong>, PDF text editing, and full admin control for $99/server/mo."
-freeBody = "Our <strong>Open-Core</strong> licensing permits up to <strong>{{freeTierLimit}}</strong> users for free per server. To scale uninterrupted, we recommend the Stirling Server plan - <strong>unlimited seats</strong> and <strong>SSO support</strong> for $99/server/mo."
+freeBody = "Our <strong>Open-Core</strong> licensing permits up to <strong>{{freeTierLimit}}</strong> users for free per server. To scale uninterrupted and get early access to our new <strong>PDF text editing tool</strong>, we recommend the Stirling Server plan - full editing and <strong>unlimited seats</strong> for $99/server/mo."
 
 [onboarding.desktopInstall]
 title = "Download"
@@ -5368,31 +5283,6 @@ error = "Failed to update user status"
 success = "User deleted successfully"
 error = "Failed to delete user"
 
-[workspace.people.changePassword]
-action = "Change password"
-title = "Change password"
-subtitle = "Update the password for"
-newPassword = "New password"
-confirmPassword = "Confirm password"
-placeholder = "Enter a new password"
-confirmPlaceholder = "Re-enter the new password"
-passwordRequired = "Please enter a new password"
-passwordMismatch = "Passwords do not match"
-generateRandom = "Generate secure password"
-generatedPreview = "Generated password:"
-copyTooltip = "Copy to clipboard"
-copiedToClipboard = "Password copied to clipboard"
-copyFailed = "Failed to copy password"
-sendEmail = "Email the user about this change"
-includePassword = "Include the new password in the email"
-forcePasswordChange = "Force user to change password on next login"
-emailUnavailable = "This user's email is not a valid email address. Notifications are disabled."
-smtpDisabled = "Email notifications require SMTP to be enabled in settings."
-notifyOnly = "An email will be sent without the password, letting the user know an admin changed it."
-submit = "Update password"
-success = "Password updated successfully"
-error = "Failed to update password"
-
 [workspace.people.emailInvite]
 tab = "Email Invite"
 description = "Type or paste in emails below, separated by commas. Users will receive login credentials via email."
@@ -5926,7 +5816,6 @@ subtitle = "Sign in with your Stirling account"
 [setup.selfhosted]
 title = "Sign in to Server"
 subtitle = "Enter your server credentials"
-link = "or connect to a self-hosted account"
 
 [setup.server]
 title = "Connect to Server"
@@ -5945,14 +5834,6 @@ description = "Enter the full URL of your self-hosted Stirling PDF server"
 emptyUrl = "Please enter a server URL"
 unreachable = "Could not connect to server"
 testFailed = "Connection test failed"
-configFetch = "Failed to fetch server configuration. Please check the URL and try again."
-
-[setup.server.error.securityDisabled]
-title = "Login Not Enabled"
-body = "This server does not have login enabled. To connect to this server, you must enable authentication:"
-step1 = "Set DOCKER_ENABLE_SECURITY=true in your environment"
-step2 = "Or set security.enableLogin=true in settings.yml"
-step3 = "Restart the server"
 
 [setup.login]
 title = "Sign In"
@@ -6025,7 +5906,6 @@ earlyAccess = "Early Access"
 reset = "Reset Changes"
 downloadJson = "Download JSON"
 generatePdf = "Generate PDF"
-saveChanges = "Save Changes"
 
 [pdfTextEditor.options.autoScaleText]
 title = "Auto-scale text to fit boxes"
@@ -6063,8 +5943,6 @@ alpha = "This alpha viewer is still evolving—certain fonts, colours, transpare
 [pdfTextEditor.empty]
 title = "No document loaded"
 subtitle = "Load a PDF or JSON file to begin editing text content."
-dropzone = "Drag and drop a PDF or JSON file here, or click to browse"
-dropzoneWithFiles = "Select a file from the Files tab, or drag and drop a PDF or JSON file here, or click to browse"
 
 [pdfTextEditor.welcomeBanner]
 title = "Welcome to PDF Text Editor (Early Access)"

frontend/public/locales/es-ES/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Actualizar ahora →"
 freeTitle = "Licencia del servidor"
 overLimitTitle = "Se necesita licencia de servidor"
 overLimitBody = "Nuestra licencia permite hasta <strong>{{freeTierLimit}}</strong> usuarios gratis por servidor. Tiene <strong>{{overLimitUserCopy}}</strong> usuarios de Stirling. Para continuar sin interrupciones, actualice al plan Stirling Server: <strong>plazas ilimitadas</strong>, edición de texto PDF y control total de administración por 99 $/servidor/mes."
-freeBody = "Nuestra licencia <strong>Open-Core</strong> permite hasta <strong>{{freeTierLimit}}</strong> usuarios gratis por servidor. Para escalar sin interrupciones, recomendamos el plan Stirling Server - <strong>plazas ilimitadas</strong> y <strong>soporte SSO</strong> por $99/servidor/mes."
+freeBody = "Nuestra licencia <strong>Open-Core</strong> permite hasta <strong>{{freeTierLimit}}</strong> usuarios gratis por servidor. Para escalar sin interrupciones y obtener acceso anticipado a nuestra nueva <strong>herramienta de edición de texto PDF</strong>, recomendamos el plan Stirling Server: edición completa y <strong>plazas ilimitadas</strong> por 99 $/servidor/mes."
 
 [onboarding.desktopInstall]
 title = "Descargar"

frontend/public/locales/eu-ES/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Eguneratu orain →"
 freeTitle = "Zerbitzari-lizentzia"
 overLimitTitle = "Beharrezkoa da zerbitzari-lizentzia"
 overLimitBody = "Gure lizentziak baimentzen ditu <strong>{{freeTierLimit}}</strong> erabiltzaile doan zerbitzari bakoitzeko. <strong>{{overLimitUserCopy}}</strong> Stirling erabiltzaile dituzu. Jarraitzeko etenik gabe, eguneratu Stirling Server planera - <strong>eserleku mugagabeak</strong>, PDF testu-edizioa, eta admin kontrol osoa $99/zerbitzari/hilean."
-freeBody = "Gure <strong>Open-Core</strong> lizentziak zerbitzari bakoitzeko doan gehienez <strong>{{freeTierLimit}}</strong> erabiltzaile baimentzen ditu. Etenik gabe eskalatzeko, Stirling Server plana gomendatzen dugu - <strong>eserleku mugagabeak</strong> eta <strong>SSO euskarria</strong> $99/server/mo."
+freeBody = "Gure <strong>Open-Core</strong> lizentziak <strong>{{freeTierLimit}}</strong> erabiltzaile arte baimentzen ditu doan zerbitzari bakoitzeko. Etenik gabe eskalatzeko eta gure <strong>PDF testu-edizio tresna</strong> berrirako sarbide goiztiarra lortzeko, gomendatzen dugu Stirling Server plana - edizio osoa eta <strong>eserleku mugagabeak</strong> $99/zerbitzari/hilean."
 
 [onboarding.desktopInstall]
 title = "Deskargatu"

frontend/public/locales/fa-IR/translation.toml

@@ -4258,11 +4258,11 @@ label = "URL صادرکننده"
 description = "Issuer URL ارائه‌دهنده OAuth2"
 
 [admin.settings.connections.oauth2.clientId]
-label = "شناسهٔ کلاینت"
+label = "Client ID"
 description = "Client ID مربوط به OAuth2 از ارائه‌دهنده شما"
 
 [admin.settings.connections.oauth2.clientSecret]
-label = "راز کلاینت"
+label = "Client Secret"
 description = "Client Secret مربوط به OAuth2 از ارائه‌دهنده شما"
 
 [admin.settings.connections.oauth2.useAsUsername]
@@ -4293,7 +4293,7 @@ label = "ارائه‌دهنده"
 description = "نام ارائه‌دهنده SAML2"
 
 [admin.settings.connections.saml2.registrationId]
-label = "شناسهٔ ثبت‌نام"
+label = "Registration ID"
 description = "شناسه ثبت‌نام SAML2"
 
 [admin.settings.connections.saml2.autoCreateUser]
@@ -5177,7 +5177,7 @@ upgrade = "همین حالا ارتقا بده →"
 freeTitle = "لایسنس سرور"
 overLimitTitle = "نیاز به لایسنس سرور"
 overLimitBody = "مجوز ما تا <strong>{{freeTierLimit}}</strong> کاربر رایگان به‌ازای هر سرور را مجاز می‌داند. شما <strong>{{overLimitUserCopy}}</strong> کاربر Stirling دارید. برای ادامه بدون وقفه، به پلن Stirling Server ارتقا دهید - <strong>صندلی نامحدود</strong>، ویرایش متن PDF و کنترل کامل ادمین با 99$ به‌ازای هر سرور در ماه."
-freeBody = "مجوز <strong>Open-Core</strong> ما به‌ازای هر سرور اجازهٔ استفادهٔ رایگان برای حداکثر <strong>{{freeTierLimit}}</strong> کاربر را می‌دهد. برای مقیاس‌دهی بدون وقفه، طرح Stirling Server را توصیه می‌کنیم - <strong>تعداد کاربران نامحدود</strong> و <strong>پشتیبانی از SSO</strong> با $99/سرور/ماه."
+freeBody = "مجوز <strong>Open-Core</strong> ما تا <strong>{{freeTierLimit}}</strong> کاربر رایگان به‌ازای هر سرور را مجاز می‌داند. برای مقیاس‌پذیری بدون وقفه و دسترسی زودهنگام به <strong>ابزار ویرایش متن PDF</strong> جدیدمان، پلن Stirling Server را پیشنهاد می‌کنیم - ویرایش کامل و <strong>صندلی نامحدود</strong> با 99$ به‌ازای هر سرور در ماه."
 
 [onboarding.desktopInstall]
 title = "دانلود"

frontend/public/locales/fr-FR/translation.toml

@@ -363,7 +363,7 @@ connections = "Connexions"
 
 [settings.licensingAnalytics]
 title = "Licences et analyses"
-plan = "Forfait"
+plan = "Plan"
 audit = "Audit"
 usageAnalytics = "Analyses d'utilisation"
 
@@ -4550,7 +4550,7 @@ successMessage = "Fichier de licence téléversé et activé avec succès. Aucun
 title = "Licence active"
 file = "Source: Fichier de licence ({{path}})"
 key = "Source: Clé de licence"
-type = "Type : {{type}}"
+type = "Type: {{type}}"
 noInput = "Veuillez fournir une clé de licence ou téléverser un fichier de certificat"
 success = "Succès"
 
@@ -5177,7 +5177,7 @@ upgrade = "Mettre à niveau maintenant →"
 freeTitle = "Licence serveur"
 overLimitTitle = "Licence serveur requise"
 overLimitBody = "Notre licence autorise jusqu’à <strong>{{freeTierLimit}}</strong> utilisateurs gratuits par serveur. Vous avez <strong>{{overLimitUserCopy}}</strong> utilisateurs Stirling. Pour continuer sans interruption, passez au plan Stirling Server — <strong>places illimitées</strong>, édition de texte PDF et contrôle d’administration complet pour 99 $/serveur/mois."
-freeBody = "Notre régime de licence <strong>Open-Core</strong> autorise jusqu'à <strong>{{freeTierLimit}}</strong> utilisateurs gratuitement par serveur. Pour évoluer sans interruption, nous recommandons le forfait Stirling Server - <strong>places illimitées</strong> et <strong>prise en charge du SSO</strong> pour 99 $/serveur/mois."
+freeBody = "Notre licence <strong>Open-Core</strong> autorise jusqu’à <strong>{{freeTierLimit}}</strong> utilisateurs gratuits par serveur. Pour évoluer sans interruption et accéder en avant-première à notre nouvel <strong>outil d’édition de texte PDF</strong>, nous recommandons le plan Stirling Server — édition complète et <strong>places illimitées</strong> pour 99 $/serveur/mois."
 
 [onboarding.desktopInstall]
 title = "Télécharger"
@@ -5892,7 +5892,7 @@ paragraph = "Page de paragraphe"
 sparse = "Texte clairsemé"
 
 [pdfTextEditor.groupingMode]
-auto = "Automatique"
+auto = "Auto"
 paragraph = "Paragraphe"
 singleLine = "Ligne unique"
 

frontend/public/locales/ga-IE/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Uasghrádaigh anois →"
 freeTitle = "Ceadúnas Freastalaí"
 overLimitTitle = "Ceadúnas Freastalaí de dhíth"
 overLimitBody = "Ceadaíonn ár gceadúnú suas le <strong>{{freeTierLimit}}</strong> úsáideoir in aisce in aghaidh freastalaí. Tá <strong>{{overLimitUserCopy}}</strong> úsáideoir Stirling agat. Chun leanúint gan bhriseadh, uasghrádaigh go plean Freastalaí Stirling - <strong>suíocháin neamhtheoranta</strong>, eagarthóireacht téacs PDF, agus lánrialú riaracháin ar $99/freastalaí/mí."
-freeBody = "Ceadaíonn ár gceadúnú <strong>Open-Core</strong> suas le <strong>{{freeTierLimit}}</strong> úsáideoirí saor in aisce in aghaidh an fhreastalaí. Chun scálú gan bhriseadh, molaimid an plean Stirling Server - <strong>suíocháin neamhtheoranta</strong> agus <strong>tacaíocht SSO</strong> ar $99/server/mo."
+freeBody = "Ceadaíonn ár gceadúnú <strong>Open-Core</strong> suas le <strong>{{freeTierLimit}}</strong> úsáideoir in aisce in aghaidh freastalaí. Chun méadú gan bhriseadh agus rochtain luath a fháil ar ár <strong>uirlis eagarthóireachta téacs PDF</strong> nua, molaimid Plean Freastalaí Stirling - eagarthóireacht iomlán agus <strong>suíocháin neamhtheoranta</strong> ar $99/freastalaí/mí."
 
 [onboarding.desktopInstall]
 title = "Íoslódáil"
@@ -5333,8 +5333,8 @@ emailDisabled = "Teastaíonn cumraíocht SMTP agus mail.enableInvites=true sna s
 [workspace.people.license]
 users = "úsáideoirí"
 availableSlots = "Áiteanna Ar Fáil"
-grandfathered = "Ceadaithe roimhe seo"
-grandfatheredShort = "{{count}} ceadaithe roimhe seo"
+grandfathered = "Grandfathered"
+grandfatheredShort = "{{count}} grandfathered"
 fromLicense = "ón gceadúnas"
 slotsAvailable = "{{count}} áit(í) úsáideora ar fáil"
 noSlotsAvailable = "Níl aon áiteanna ar fáil"

frontend/public/locales/hi-IN/translation.toml

@@ -834,7 +834,7 @@ title = "PDF हस्ताक्षर सत्यापित करें"
 desc = "PDF दस्तावेजों में डिजिटल हस्ताक्षर और प्रमाणपत्रों को सत्यापित करें"
 
 [home.swagger]
-tags = "API,दस्तावेज़ीकरण,परीक्षण"
+tags = "API,documentation,test"
 title = "API दस्तावेज़ीकरण"
 desc = "API दस्तावेज़ देखें और एंडपॉइंट टेस्ट करें"
 
@@ -883,7 +883,7 @@ title = "रंग बदलें/उलटें"
 desc = "PDF दस्तावेज़ों में रंगों को प्रतिस्थापित या उलटें"
 
 [home.devApi]
-tags = "API,विकास,दस्तावेज़ीकरण"
+tags = "API,development,documentation"
 title = "API"
 desc = "API दस्तावेज़ के लिए लिंक"
 
@@ -922,7 +922,7 @@ title = "PDF टेक्स्ट एडिटर"
 desc = "PDF फ़ाइलों के भीतर मौजूदा टेक्स्ट और इमेज संपादित करें"
 
 [home.addText]
-tags = "पाठ,टिप्पणी,लेबल"
+tags = "text,annotation,label"
 title = "टेक्स्ट जोड़ें"
 desc = "अपने PDF में कहीं भी कस्टम टेक्स्ट जोड़ें"
 
@@ -1840,7 +1840,7 @@ title = "उन्नत"
 tags = "कम्प्रेस,छोटा,छोटा"
 
 [unlockPDFForms]
-tags = "हटाएं,मिटाएं,फॉर्म,फ़ील्ड,रीड-ओनली"
+tags = "remove,delete,form,field,readonly"
 title = "फॉर्म फ़ील्ड से Read-Only हटाएं"
 header = "PDF फॉर्म अनलॉक करें"
 submit = "Remove"
@@ -2747,7 +2747,7 @@ submit = "जमा करें"
 failed = "मल्टी-पृष्ठ लेआउट बनाते समय त्रुटि हुई।"
 
 [bookletImposition]
-tags = "बुकलेट,इम्पोज़िशन,प्रिंटिंग,बाइंडिंग,फोल्डिंग,सिग्नेचर"
+tags = "booklet,imposition,printing,binding,folding,signature"
 title = "बुकलेट इम्पोज़िशन"
 header = "बुकलेट इम्पोज़िशन"
 submit = "बुकलेट बनाएँ"
@@ -2846,7 +2846,7 @@ scaleFactor = "एक पृष्ठ का ज़ूम स्तर (क्
 submit = "जमा करें"
 
 [adjustPageScale]
-tags = "आकार बदलें,संशोधित करें,आयाम,अनुकूलित करें"
+tags = "resize,modify,dimension,adapt"
 title = "पृष्ठ स्केल समायोजित करें"
 header = "पृष्ठ स्केल समायोजित करें"
 submit = "पृष्ठ स्केल समायोजित करें"
@@ -3396,7 +3396,7 @@ certHint = "कस्टम ट्रस्ट स्रोत के विर
 title = "सत्यापन सेटिंग्स"
 
 [replaceColor]
-tags = "रंग बदलें,पृष्ठ संचालन,Back end,server side"
+tags = "Replace Colour,Page operations,Back end,server side"
 
 [replaceColor.labels]
 settings = "सेटिंग्स"
@@ -3790,7 +3790,7 @@ version = "वर्तमान रिलीज़"
 title = "API दस्तावेज़ीकरण"
 header = "API दस्तावेज़ीकरण"
 desc = "Stirling PDF API एंडपॉइंट्स देखें और परीक्षण करें"
-tags = "api,दस्तावेज़ीकरण,swagger,endpoints,विकास"
+tags = "api,documentation,swagger,endpoints,development"
 
 [cookieBanner.popUp]
 title = "हम कुकीज़ का उपयोग कैसे करते हैं"
@@ -5177,7 +5177,7 @@ upgrade = "अभी अपग्रेड करें →"
 freeTitle = "सर्वर लाइसेंस"
 overLimitTitle = "सर्वर लाइसेंस आवश्यक"
 overLimitBody = "हमारा लाइसेंसिंग प्रति सर्वर अधिकतम <strong>{{freeTierLimit}}</strong> उपयोगकर्ताओं को मुफ्त अनुमति देता है। आपके पास <strong>{{overLimitUserCopy}}</strong> Stirling उपयोगकर्ता हैं। बिना बाधा के जारी रखने के लिए, Stirling Server प्लान में अपग्रेड करें - <strong>अनलिमिटेड सीट्स</strong>, PDF टेक्स्ट एडिटिंग, और पूर्ण एडमिन नियंत्रण $99/server/mo में।"
-freeBody = "हमारा <strong>Open-Core</strong> लाइसेंसिंग प्रति सर्वर अधिकतम <strong>{{freeTierLimit}}</strong> उपयोगकर्ताओं को निःशुल्क अनुमति देता है। बिना रुकावट स्केल करने के लिए, हम Stirling Server प्लान की अनुशंसा करते हैं - <strong>असीमित सीटें</strong> और <strong>SSO समर्थन</strong> $99/सर्वर/माह पर।"
+freeBody = "हमारा <strong>Open-Core</strong> लाइसेंसिंग प्रति सर्वर अधिकतम <strong>{{freeTierLimit}}</strong> उपयोगकर्ताओं को मुफ्त अनुमति देता है। बिना बाधा स्केल करने और हमारे नए <strong>PDF टेक्स्ट एडिटिंग टूल</strong> की प्रारंभिक पहुँच पाने के लिए हम Stirling Server प्लान की सलाह देते हैं - पूर्ण एडिटिंग और <strong>अनलिमिटेड सीट्स</strong> $99/server/mo में।"
 
 [onboarding.desktopInstall]
 title = "डाउनलोड"
@@ -6005,7 +6005,7 @@ insufficientPermissions = "आपके पास यह क्रिया क
 [addText]
 title = "टेक्स्ट जोड़ें"
 header = "PDFs में टेक्स्ट जोड़ें"
-tags = "पाठ,टिप्पणी,लेबल"
+tags = "text,annotation,label"
 applySignatures = "टेक्स्ट लागू करें"
 
 [addText.text]

frontend/public/locales/hr-HR/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Nadogradi odmah →"
 freeTitle = "Poslužiteljska licenca"
 overLimitTitle = "Potrebna poslužiteljska licenca"
 overLimitBody = "Naše licenciranje dopušta do <strong>{{freeTierLimit}}</strong> korisnika besplatno po poslužitelju. Imate <strong>{{overLimitUserCopy}}</strong> Stirling korisnika. Za nesmetan nastavak, nadogradite na Stirling Server plan - <strong>neograničena mjesta</strong>, uređivanje teksta u PDF-u i puna admin kontrola za $99/server/mo."
-freeBody = "Naše licenciranje <strong>Open-Core</strong> omogućuje do <strong>{{freeTierLimit}}</strong> korisnika besplatno po poslužitelju. Za neometano skaliranje preporučujemo Stirling Server plan - <strong>neograničena mjesta</strong> i <strong>podrška za SSO</strong> za $99/poslužitelj/mj."
+freeBody = "Naše <strong>Open-Core</strong> licenciranje dopušta do <strong>{{freeTierLimit}}</strong> korisnika besplatno po poslužitelju. Za nesmetano skaliranje i rani pristup našem novom <strong>alatu za uređivanje teksta u PDF-u</strong>, preporučujemo Stirling Server plan - potpuno uređivanje i <strong>neograničena mjesta</strong> za $99/server/mo."
 
 [onboarding.desktopInstall]
 title = "Preuzimanje"

frontend/public/locales/hu-HU/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Frissítés most →"
 freeTitle = "Szerverlicenc"
 overLimitTitle = "Szerverlicenc szükséges"
 overLimitBody = "Licencelésünk szerverenként legfeljebb <strong>{{freeTierLimit}}</strong> felhasználót enged ingyen. Önnek <strong>{{overLimitUserCopy}}</strong> Stirling felhasználója van. A zavartalan használathoz váltson a Stirling Server csomagra – <strong>korlátlan hely</strong>, PDF szövegszerkesztés és teljes adminisztrátori vezérlés $99/szerver/hó áron."
-freeBody = "A <strong>Open-Core</strong> licencünk szerverenként legfeljebb <strong>{{freeTierLimit}}</strong> felhasználót engedélyez ingyenesen. A zökkenőmentes skálázáshoz a Stirling Server csomagot ajánljuk - <strong>korlátlan felhasználó</strong> és <strong>SSO támogatás</strong> $99/szerver/hó."
+freeBody = "Az <strong>Open-Core</strong> licencelésünk szerverenként legfeljebb <strong>{{freeTierLimit}}</strong> felhasználót enged ingyen. A zavartalan bővüléshez és az új <strong>PDF szövegszerkesztő eszköz</strong> korai eléréséhez a Stirling Server csomagot ajánljuk – teljes szerkesztés és <strong>korlátlan hely</strong> $99/szerver/hó áron."
 
 [onboarding.desktopInstall]
 title = "Letöltés"

frontend/public/locales/id-ID/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Upgrade sekarang →"
 freeTitle = "Lisensi Server"
 overLimitTitle = "Perlu Lisensi Server"
 overLimitBody = "Lisensi kami mengizinkan hingga <strong>{{freeTierLimit}}</strong> pengguna gratis per server. Anda memiliki <strong>{{overLimitUserCopy}}</strong> pengguna Stirling. Untuk terus berjalan tanpa gangguan, upgrade ke paket Stirling Server - <strong>kursi tanpa batas</strong>, pengeditan teks PDF, dan kontrol admin penuh seharga $99/server/bulan."
-freeBody = "Lisensi <strong>Open-Core</strong> kami mengizinkan hingga <strong>{{freeTierLimit}}</strong> pengguna gratis per server. Untuk meningkatkan skala tanpa gangguan, kami merekomendasikan paket Stirling Server - <strong>pengguna tanpa batas</strong> dan <strong>dukungan SSO</strong> seharga $99/server/mo."
+freeBody = "Lisensi <strong>Open-Core</strong> kami mengizinkan hingga <strong>{{freeTierLimit}}</strong> pengguna gratis per server. Untuk skala tanpa hambatan dan mendapatkan akses awal ke <strong>alat pengeditan teks PDF</strong> baru kami, kami sarankan paket Stirling Server - pengeditan penuh dan <strong>kursi tanpa batas</strong> seharga $99/server/bulan."
 
 [onboarding.desktopInstall]
 title = "Unduh"
@@ -5433,7 +5433,7 @@ hideComparison = "Sembunyikan Perbandingan Fitur"
 featureComparison = "Perbandingan Fitur"
 from = "Mulai"
 perMonth = "/bulan"
-perSeat = "/pengguna"
+perSeat = "/seat"
 withServer = "+ Paket Server"
 licensedSeats = "Berlisensi: {{count}} seat"
 includedInCurrent = "Termasuk dalam Paket Anda"
@@ -5594,7 +5594,7 @@ modalTitle = "Mulai - {{planName}}"
 title = "Pilih Periode Penagihan"
 savingsNote = "Hemat {{percent}}% dengan penagihan tahunan"
 basePrice = "Harga Dasar"
-seatPrice = "Per Pengguna"
+seatPrice = "Per Seat"
 totalForSeats = "Total ({{count}} seat)"
 selectMonthly = "Pilih Bulanan"
 selectYearly = "Pilih Tahunan"

frontend/public/locales/it-IT/translation.toml

@@ -4176,7 +4176,7 @@ description = "Traccia azioni degli utenti ed eventi di sistema per conformità
 
 [admin.settings.security.audit.level]
 label = "Livello audit"
-description = "0=SPENTO, 1=BASE, 2=STANDARD, 3=DETTAGLIATO"
+description = "0=OFF, 1=BASIC, 2=STANDARD, 3=VERBOSE"
 
 [admin.settings.security.audit.retentionDays]
 label = "Conservazione audit (giorni)"
@@ -5177,7 +5177,7 @@ upgrade = "Esegui upgrade ora →"
 freeTitle = "Licenza server"
 overLimitTitle = "Licenza server necessaria"
 overLimitBody = "La nostra licenza consente fino a <strong>{{freeTierLimit}}</strong> utenti gratuiti per server. Hai <strong>{{overLimitUserCopy}}</strong> utenti Stirling. Per continuare senza interruzioni, esegui l'upgrade al piano Stirling Server - <strong>posti illimitati</strong>, modifica del testo PDF e pieno controllo admin a $99/server/mese."
-freeBody = "La nostra licenza <strong>Open-Core</strong> consente fino a <strong>{{freeTierLimit}}</strong> utenti gratuiti per server. Per scalare senza interruzioni, consigliamo il piano Stirling Server - <strong>posti illimitati</strong> e <strong>supporto SSO</strong> a $99/server/mese."
+freeBody = "La nostra licenza <strong>Open-Core</strong> consente fino a <strong>{{freeTierLimit}}</strong> utenti gratuiti per server. Per scalare senza interruzioni e ottenere accesso anticipato al nuovo <strong>strumento di modifica testo PDF</strong>, consigliamo il piano Stirling Server - modifica completa e <strong>posti illimitati</strong> a $99/server/mese."
 
 [onboarding.desktopInstall]
 title = "Download"

frontend/public/locales/ja-JP/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "今すぐアップグレード →"
 freeTitle = "サーバーライセンス"
 overLimitTitle = "サーバーライセンスが必要です"
 overLimitBody = "当社のライセンスでは、サーバーごとに <strong>{{freeTierLimit}}</strong> ユーザーまで無料です。現在 <strong>{{overLimitUserCopy}}</strong> の Stirling ユーザーがいます。中断なく利用を続けるには、Stirling Server プランにアップグレードしてください - <strong>無制限席数</strong>、PDF テキスト編集、完全な管理機能が $99/サーバー/月 です。"
-freeBody = "当社の<strong>Open-Core</strong>ライセンスでは、サーバーごとに最大<strong>{{freeTierLimit}}</strong>ユーザーまで無料でご利用いただけます。中断なくスケールするには、Stirling Server プランをおすすめします - <strong>無制限の席数</strong>と<strong>SSO サポート</strong>で $99/サーバー/月。"
+freeBody = "当社の <strong>オープンコア</strong> ライセンスでは、サーバーごとに最大 <strong>{{freeTierLimit}}</strong> ユーザーまで無料です。中断なく拡張し、新しい <strong>PDF テキスト編集ツール</strong> に早期アクセスするには、Stirling Server プランをお勧めします。完全編集と <strong>無制限席数</strong> が $99/サーバー/月 です。"
 
 [onboarding.desktopInstall]
 title = "ダウンロード"

frontend/public/locales/ko-KR/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "지금 업그레이드 →"
 freeTitle = "서버 라이선스"
 overLimitTitle = "서버 라이선스 필요"
 overLimitBody = "당사의 라이선스는 서버당 무료로 최대 <strong>{{freeTierLimit}}</strong>명의 사용자를 허용합니다. 현재 <strong>{{overLimitUserCopy}}</strong>명의 Stirling 사용자가 있습니다. 중단 없이 계속 사용하려면 Stirling Server 플랜으로 업그레이드하세요 - <strong>무제한 좌석</strong>, PDF 텍스트 편집, 전체 관리자 제어 제공, $99/서버/월."
-freeBody = "당사의 <strong>Open-Core</strong> 라이선스는 서버당 최대 <strong>{{freeTierLimit}}</strong>명의 사용자를 무료로 허용합니다. 중단 없이 확장하려면 Stirling Server 플랜을 권장합니다 - <strong>무제한 좌석</strong> 및 <strong>SSO 지원</strong>, $99/서버/월."
+freeBody = "당사의 <strong>Open-Core</strong> 라이선스는 서버당 최대 <strong>{{freeTierLimit}}</strong>명의 사용자를 무료로 허용합니다. 중단 없이 확장하고 새로운 <strong>PDF 텍스트 편집 도구</strong>에 조기 액세스하려면 Stirling Server 플랜을 권장합니다 - 전체 편집과 <strong>무제한 좌석</strong>을 $99/서버/월에 제공합니다."
 
 [onboarding.desktopInstall]
 title = "다운로드"

frontend/public/locales/ml-ML/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "ഇപ്പോൾ അപ്‌ഗ്രേഡ് ചെയ്യു
 freeTitle = "സെർവർ ലൈസൻസ്"
 overLimitTitle = "സെർവർ ലൈസൻസ് ആവശ്യമാണ്"
 overLimitBody = "ഞങ്ങളുടെ ലൈസൻസിംഗ് ഓരോ സെർവർക്കും പരമാവധി <strong>{{freeTierLimit}}</strong> ഉപയോക്താക്കളെ സൗജന്യമായി അനുവദിക്കുന്നു. നിങ്ങള്ക്ക് <strong>{{overLimitUserCopy}}</strong> Stirling ഉപയോക്താക്കളുണ്ട്. തടസ്സമില്ലാതെ തുടരാൻ, Stirling Server പ്ലാനിലേക്ക് അപ്‌ഗ്രേഡ് ചെയ്യുക - <strong>unlimited seats</strong>, PDF text editing, പൂർണ്ണ അഡ്മിൻ നിയന്ത്രണം, $99/server/mo."
-freeBody = "ഞങ്ങളുടെ <strong>Open-Core</strong> ലൈസൻസിംഗ് ഓരോ സെർവർക്കും പരമാവധി <strong>{{freeTierLimit}}</strong> ഉപയോക്താക്കളെ സൗജന്യമായി അനുവദിക്കുന്നു. തടസ്സമില്ലാതെ സ്‌കെയിൽ ചെയ്യാൻ, ഞങ്ങൾ Stirling Server പ്ലാൻ ശുപാർശ ചെയ്യുന്നു - <strong>പരിമിതിയില്ലാത്ത സീറ്റുകൾ</strong>യും <strong>SSO പിന്തുണ</strong>യും for $99/server/mo."
+freeBody = "ഞങ്ങളുടെ <strong>Open-Core</strong> ലൈസൻസിംഗ് ഓരോ സെർവർക്കും പരമാവധി <strong>{{freeTierLimit}}</strong> ഉപയോക്താക്കളെ സൗജന്യമായി അനുവദിക്കുന്നു. തടസ്സമില്ലാതെ സ്കെയിൽ ചെയ്യാനും പുതിയ <strong>PDF text editing tool</strong> ന് മുൻകാല ആക്സസ് നേടാനും, Stirling Server പ്ലാൻ ഞങ്ങൾ ശുപാർശ ചെയ്യുന്നു - പൂർണ്ണ എഡിറ്റിംഗും <strong>unlimited seats</strong> ഉം $99/server/mo."
 
 [onboarding.desktopInstall]
 title = "ഡൗൺലോഡ്"

frontend/public/locales/nl-NL/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Nu upgraden →"
 freeTitle = "Serverlicentie"
 overLimitTitle = "Serverlicentie vereist"
 overLimitBody = "Onze licentie staat tot <strong>{{freeTierLimit}}</strong> gebruikers gratis per server toe. Je hebt <strong>{{overLimitUserCopy}}</strong> Stirling-gebruikers. Om zonder onderbreking door te gaan, upgrade naar het Stirling Server-plan - <strong>onbeperkte plaatsen</strong>, PDF-tekstbewerking en volledige admincontrole voor $99/server/maand."
-freeBody = "Onze <strong>Open-Core</strong>-licentie staat tot <strong>{{freeTierLimit}}</strong> gebruikers per server gratis toe. Om ononderbroken op te schalen, raden we het Stirling Server-abonnement aan - <strong>onbeperkte plaatsen</strong> en <strong>SSO-ondersteuning</strong> voor $99/server/maand."
+freeBody = "Onze <strong>Open-Core</strong>-licentie staat tot <strong>{{freeTierLimit}}</strong> gebruikers gratis per server toe. Om ononderbroken te schalen en vroege toegang te krijgen tot onze nieuwe <strong>PDF-tekstbewerkingstool</strong>, raden we het Stirling Server-plan aan - volledige bewerking en <strong>onbeperkte plaatsen</strong> voor $99/server/maand."
 
 [onboarding.desktopInstall]
 title = "Downloaden"

frontend/public/locales/no-NB/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Oppgrader nå →"
 freeTitle = "Serverlisens"
 overLimitTitle = "Serverlisens kreves"
 overLimitBody = "Lisensieringen vår tillater opptil <strong>{{freeTierLimit}}</strong> brukere gratis per server. Du har <strong>{{overLimitUserCopy}}</strong> Stirling-brukere. For å fortsette uten avbrudd, oppgrader til Stirling Server-planen – <strong>ubegrensede plasser</strong>, PDF-tekstredigering og full admin-kontroll for $99/server/mnd."
-freeBody = "Vår <strong>Open-Core</strong>-lisensiering tillater opptil <strong>{{freeTierLimit}}</strong> brukere gratis per server. For å skalere uten avbrudd anbefaler vi Stirling Server-planen - <strong>ubegrensede plasser</strong> og <strong>SSO-støtte</strong> for $99/server/mnd."
+freeBody = "Vår <strong>Open-Core</strong>-lisensiering tillater opptil <strong>{{freeTierLimit}}</strong> brukere gratis per server. For å skalere uten avbrudd og få tidlig tilgang til vårt nye <strong>PDF-tekstredigeringsverktøy</strong>, anbefaler vi Stirling Server-planen – full redigering og <strong>ubegrensede plasser</strong> for $99/server/mnd."
 
 [onboarding.desktopInstall]
 title = "Last ned"

frontend/public/locales/pl-PL/translation.toml

@@ -568,7 +568,7 @@ loading = "Ładowanie..."
 failedToLoad = "Nie udało się załadować danych punktów końcowych. Spróbuj odświeżyć."
 home = "Strona główna"
 login = "Logowanie"
-top = "Najlepsze"
+top = "Top"
 numberOfVisits = "Liczba wizyt"
 visitsTooltip = "Wizyty: {0} ({1}% całości)"
 retry = "Spróbuj ponownie"
@@ -1225,7 +1225,7 @@ odtExt = "Tekst OpenDocument (.odt)"
 pptExt = "PowerPoint (.pptx)"
 odpExt = "Prezentacja OpenDocument (.odp)"
 txtExt = "Tekst niesformatowany (.txt)"
-rtfExt = "Format RTF (.rtf)"
+rtfExt = "Rich Text Format (.rtf)"
 selectedFiles = "Wybrane pliki"
 noFileSelected = "Nie wybrano pliku. Użyj panelu plików, aby dodać pliki."
 convertFiles = "Konwertuj pliki"
@@ -5177,7 +5177,7 @@ upgrade = "Ulepsz teraz →"
 freeTitle = "Licencja serwera"
 overLimitTitle = "Wymagana licencja serwera"
 overLimitBody = "Nasza licencja pozwala na maks. <strong>{{freeTierLimit}}</strong> użytkowników bez opłat na serwer. Masz <strong>{{overLimitUserCopy}}</strong> użytkowników Stirling. Aby kontynuować bez przerw, przejdź na plan Stirling Server – <strong>nielimitowane miejsca</strong>, edycja tekstu PDF i pełna kontrola administracyjna za 99 USD/serwer/mies."
-freeBody = "Nasza licencja <strong>Open-Core</strong> pozwala na maksymalnie <strong>{{freeTierLimit}}</strong> użytkowników bezpłatnie na serwer. Aby skalować bez zakłóceń, zalecamy plan Stirling Server - <strong>nielimitowana liczba miejsc</strong> i <strong>obsługa SSO</strong> za $99/serwer/mies."
+freeBody = "Nasza licencja <strong>Open-Core</strong> pozwala na maks. <strong>{{freeTierLimit}}</strong> użytkowników bez opłat na serwer. Aby skalować bez przerw i uzyskać wczesny dostęp do nowego <strong>narzędzia edycji tekstu PDF</strong>, polecamy plan Stirling Server – pełna edycja i <strong>nielimitowane miejsca</strong> za 99 USD/serwer/mies."
 
 [onboarding.desktopInstall]
 title = "Pobierz"
@@ -5586,7 +5586,7 @@ emailInvalid = "Wpisz poprawny adres e‑mail"
 title = "Podaj e‑mail"
 description = "Użyjemy go do wysłania klucza licencyjnego i rachunków."
 emailLabel = "Adres e‑mail"
-emailPlaceholder = "twoj@email.com"
+emailPlaceholder = "your@email.com"
 continue = "Kontynuuj"
 modalTitle = "Zaczynamy – {{planName}}"
 

frontend/public/locales/pt-BR/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Fazer upgrade agora →"
 freeTitle = "Licença do servidor"
 overLimitTitle = "Necessária licença do servidor"
 overLimitBody = "Nossa licença permite até <strong>{{freeTierLimit}}</strong> usuários grátis por servidor. Você tem <strong>{{overLimitUserCopy}}</strong> usuários do Stirling. Para continuar sem interrupções, faça upgrade para o plano Stirling Server - <strong>assentos ilimitados</strong>, edição de texto em PDF e controle total de admin por US$ 99/servidor/mês."
-freeBody = "Nossa licença <strong>Open-Core</strong> permite até <strong>{{freeTierLimit}}</strong> usuários gratuitos por servidor. Para escalar sem interrupções, recomendamos o plano Stirling Server - <strong>assentos ilimitados</strong> e <strong>suporte a SSO</strong> por US$ 99/servidor/mês."
+freeBody = "Nossa licença <strong>Open-Core</strong> permite até <strong>{{freeTierLimit}}</strong> usuários grátis por servidor. Para escalar sem interrupções e ter acesso antecipado à nova <strong>ferramenta de edição de texto em PDF</strong>, recomendamos o plano Stirling Server - edição completa e <strong>assentos ilimitados</strong> por US$ 99/servidor/mês."
 
 [onboarding.desktopInstall]
 title = "Download"
@@ -5586,7 +5586,7 @@ emailInvalid = "Digite um endereço de e-mail válido"
 title = "Informe seu e-mail"
 description = "Usaremos isso para enviar sua chave de licença e recibos."
 emailLabel = "Endereço de e-mail"
-emailPlaceholder = "seu@email.com"
+emailPlaceholder = "your@email.com"
 continue = "Continuar"
 modalTitle = "Começar - {{planName}}"
 

frontend/public/locales/pt-PT/translation.toml

@@ -5177,7 +5177,7 @@ upgrade = "Atualizar agora →"
 freeTitle = "Licença do servidor"
 overLimitTitle = "É necessária licença de servidor"
 overLimitBody = "A nossa licença permite até <strong>{{freeTierLimit}}</strong> utilizadores gratuitos por servidor. Tem <strong>{{overLimitUserCopy}}</strong> utilizadores Stirling. Para continuar sem interrupções, atualize para o plano Stirling Server - <strong>lugares ilimitados</strong>, edição de texto em PDF e controlo total de administração por $99/servidor/mês."
-freeBody = "O nosso licenciamento <strong>Open-Core</strong> permite até <strong>{{freeTierLimit}}</strong> utilizadores gratuitos por servidor. Para escalar sem interrupções, recomendamos o plano Stirling Server - <strong>lugares ilimitados</strong> e <strong>suporte SSO</strong> por $99/servidor/mês."
+freeBody = "A nossa licença <strong>Open-Core</strong> permite até <strong>{{freeTierLimit}}</strong> utilizadores gratuitos por servidor. Para escalar sem interrupções e obter acesso antecipado à nossa nova <strong>ferramenta de edição de texto PDF</strong>, recomendamos o plano Stirling Server - edição completa e <strong>lugares ilimitados</strong> por $99/servidor/mês."
 
 [onboarding.desktopInstall]
 title = "Transferir"

frontend/public/locales/ro-RO/translation.toml

@@ -3948,7 +3948,7 @@ files = "Fișiere"
 activity = "Jurnal"
 help = "Ajutor"
 account = "Cont"
-config = "Configurare"
+config = "Config"
 settings = "Setări"
 adminSettings = "Setări admin"
 allTools = "All Tools"
@@ -4176,7 +4176,7 @@ description = "Urmărește acțiunile utilizatorilor și evenimentele de sistem
 
 [admin.settings.security.audit.level]
 label = "Nivel audit"
-description = "0=OPRIT, 1=DE BAZĂ, 2=STANDARD, 3=DETALIAT"
+description = "0=OFF, 1=BASIC, 2=STANDARD, 3=VERBOSE"
 
 [admin.settings.security.audit.retentionDays]
 label = "Păstrare audit (zile)"
@@ -5177,7 +5177,7 @@ upgrade = "Fă upgrade acum →"
 freeTitle = "Licență server"
 overLimitTitle = "Necesită licență de server"
 overLimitBody = "Politica noastră de licențiere permite până la <strong>{{freeTierLimit}}</strong> utilizatori gratuit per server. Ai <strong>{{overLimitUserCopy}}</strong> utilizatori Stirling. Pentru a continua fără întreruperi, fă upgrade la planul Stirling Server - <strong>locuri nelimitate</strong>, editare text PDF și control complet de admin pentru $99/server/lună."
-freeBody = "Licențierea noastră <strong>Open-Core</strong> permite până la <strong>{{freeTierLimit}}</strong> utilizatori gratuit per server. Pentru scalare fără întreruperi, recomandăm planul Stirling Server - <strong>locuri nelimitate</strong> și <strong>suport SSO</strong> pentru $99/server/lună."
+freeBody = "Licențierea noastră <strong>Open-Core</strong> permite până la <strong>{{freeTierLimit}}</strong> utilizatori gratuit per server. Pentru a scala fără întreruperi și a primi acces timpuriu la noul nostru <strong>instrument de editare text PDF</strong>, recomandăm planul Stirling Server - editare completă și <strong>locuri nelimitate</strong> pentru $99/server/lună."
 
 [onboarding.desktopInstall]
 title = "Descărcare"
@@ -5984,7 +5984,7 @@ warnings = "Avertizări"
 suggestions = "Note"
 currentPageFonts = "Fonturi pe această pagină"
 allFonts = "Toate fonturile"
-fallback = "rezervă"
+fallback = "fallback"
 missing = "lipsește"
 perfectMessage = "Toate fonturile pot fi redate perfect."
 warningMessage = "Unele fonturi pot să nu fie redate corect."