f12461f5cf
test: add DMARC compatibility fixture pack
2026-05-23 14:30:36 +02:00
9d0b12efea
feat: persist DMARC aggregate metadata
2026-05-23 14:17:09 +02:00
cd6fa25f5d
feat: add DMARC aggregate parser compatibility
2026-05-23 13:58:32 +02:00
e781b32a01
feat: add forensic sample analysis
2026-05-23 13:46:32 +02:00
db49e7e481
feat: add forensic failure views
2026-05-23 13:32:46 +02:00
8bce8a8595
feat: add forensic redaction controls
2026-05-23 13:21:03 +02:00
8a4795187e
test: cover forensic ingestion safeguards
2026-05-23 13:08:22 +02:00
817270b1fb
fix: harden forensic report ingestion
2026-05-23 13:02:01 +02:00
908d4cd2cd
test: cover forensic report edge cases
2026-05-23 12:59:47 +02:00
1f954c9e08
feat: add forensic report parsing storage
2026-05-23 12:52:54 +02:00
65b154ae7f
feat: add mailbox test diagnostics
2026-05-23 12:14:49 +02:00
a6c795ee16
feat: add evidence-linked DNS health guidance
2026-05-23 12:01:45 +02:00
beae6e7469
feat: add operations health and domain setup polish
2026-05-23 11:37:10 +02:00
521dbc92d0
feat: add Cloudflare DNS integration
...
Closes #31
2026-05-23 01:17:59 +02:00
947428afb6
harden notification settings
2026-05-23 00:56:49 +02:00
d5693c6d1d
fix: encrypt mail source credentials
2026-05-23 00:27:08 +02:00
32129a41c9
fix: render dashboard domain rows safely
2026-05-23 00:17:34 +02:00
8d6acc25ea
feat: add guided setup onboarding
2026-05-23 00:06:44 +02:00
88af60ed2e
test: cover webhook ingestion edge cases
2026-05-22 23:53:36 +02:00
302159aeb6
feat: import selected fork operational fixes
2026-05-22 23:48:00 +02:00
77fd0f9552
feat: add cached DNS checks
2026-05-22 23:30:12 +02:00
af66c93829
feat: add alert history
2026-05-22 23:18:32 +02:00
f4ff1f151d
feat: add scheduled summary notifications
2026-05-22 23:06:21 +02:00
05b687b525
feat: add notification alert rules
2026-05-22 22:55:49 +02:00
dd4b90c9de
feat: add apprise notification delivery
2026-05-22 22:44:08 +02:00
7973620e42
Merge pull request #114 from christianlouis/copilot/fix-mail-folder-validation
...
Allow mail source folders with spaces
2026-05-22 22:19:49 +02:00
51f9f303ca
Merge pull request #113 from christianlouis/copilot/fix-imap-client-folder-issue
...
Honor configured IMAP source folder
2026-05-22 22:19:01 +02:00
ed38cef7d0
feat: add production startup checks
2026-05-22 22:08:19 +02:00
2c528137db
test: allow mail source folders with spaces
2026-05-22 20:07:46 +00:00
f626675609
fix: honor configured IMAP source folder
2026-05-22 20:06:11 +00:00
eeff24fa5c
fix: redact secret diagnostics
2026-05-22 22:00:28 +02:00
67e5fedce5
feat: add dashboard change summaries
2026-05-22 21:40:59 +02:00
364d517e07
feat: add source recommendations
2026-05-22 21:30:41 +02:00
34d8a655a2
feat: add domain report csv export
2026-05-22 21:21:39 +02:00
ccc634a10b
feat: add domain daily rollups
2026-05-22 21:12:43 +02:00
8485514445
feat: add dashboard trend charts
2026-05-22 20:52:47 +02:00
14f9f6defd
feat: add source pass fail rollups
2026-05-22 20:41:34 +02:00
c1b81d3e06
feat: add mail import detail events
2026-05-22 20:11:56 +02:00
1b7f00e7a0
feat: add per-source mail import trigger
2026-05-22 19:54:11 +02:00
69aa1459eb
feat: show mail import history
2026-05-22 19:44:18 +02:00
b9041012de
feat: persist imported DMARC reports
2026-05-22 19:38:03 +02:00
4fc69602b3
feat: add mail source import history
2026-05-22 19:29:49 +02:00
07b2ea400e
fix: harden DMARC mail import
2026-05-22 19:17:32 +02:00
181b43bff9
address copilot review followups ( #96 )
2026-05-18 19:17:36 +02:00
b4191e956c
address backend security and test suggestions
2026-05-18 16:44:06 +02:00
32351a2134
test: add TestCallbackEndpoint tests to cover /callback auth endpoint
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/0683a057-d74b-4b1a-aeab-47f5bfbe4190
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-31 08:57:05 +00:00
3a5b75e964
Fix Logto callback SSL error: extend LOGTO_SKIP_SSL_VERIFY patch to PyJWKClient (JWKS/urllib)
...
The 'Fail to fetch data from the url' callback error came from PyJWT's
PyJWKClient.fetch_data() using urllib to retrieve the JWKS, which is not
covered by the existing aiohttp.ClientSession SSL monkey-patch.
Extend _apply_logto_ssl_patch() to also replace PyJWKClient inside
logto.OidcCore with a subclass that injects the non-verifying ssl.SSLContext
via the ssl_context constructor parameter, ensuring both the OIDC discovery/
token requests (aiohttp) and ID-token JWKS verification (urllib) honour
LOGTO_SKIP_SSL_VERIFY=True.
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/14676b1a-3421-4839-9ba3-8229a3e5adf1
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 17:15:58 +00:00
3fb90dbcf6
Exclude static asset extensions from auth redirect middleware
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/3e1fe3d2-54b1-4eb4-90d2-173a5e95d376
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 16:36:28 +00:00
04931172dd
feat: add AUTH_DISABLED no-auth fallback mode
...
- config.py: AUTH_DISABLED: bool = False setting
- middleware/auth.py: bypass all checks when AUTH_DISABLED=True
- security.py: require_admin_auth returns synthetic context when disabled
- endpoints/auth.py: /me returns synthetic admin; /sign-out → / when disabled
- main.py: startup WARNING when disabled; pass auth_disabled to login.html
- templates/login.html: info banner with Go to dashboard link when disabled
- templates/setup.html: document AUTH_DISABLED option with security warning
- tests/test_auth.py: 4 new AUTH_DISABLED tests (445 total, all pass)
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/18f41bf2-0b68-4b7d-afb5-d2894c212a8f
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 11:38:52 +00:00
531dc968a8
feat: integrate Logto OIDC for user authentication
...
- Add Logto OIDC integration (app/core/logto.py): CookieStorage adapter,
create/decode session token helpers, sync_logto_user upsert
- New auth endpoints (/api/v1/auth): sign-in, callback, sign-out, me
- AuthRedirectMiddleware: protects HTML pages, redirects to /setup when
Logto is unconfigured, to /login otherwise
- Update require_admin_auth: accepts dmarq_session cookie JWT first,
then API key, then Bearer JWT (fully backward compatible)
- Update User model: add logto_id, username, picture, created_at, updated_at;
make hashed_password nullable for Logto-only users; is_superuser default=True
- New Alembic migration d4e5f6a7b8c9 for the above schema changes
- Add LOGTO_ENDPOINT / LOGTO_APP_ID / LOGTO_APP_SECRET / LOGTO_REDIRECT_URI
settings with logto_configured property
- Create login.html (Sign in with Logto button) and setup.html (step-by-step
configuration guide)
- Update base.html: user menu with avatar/name and sign-out via Alpine.js
fetch to /api/v1/auth/me
- Update settings.html: remove localStorage adminApiKey; session cookie is
sent automatically by browser; add 401 → /login redirect
- Update requirements.txt: replace fastapi-users additions with logto + aiohttp
- Add test_auth.py: 18 new tests covering session tokens, CookieStorage,
sync_logto_user, /me, /sign-in (503), /sign-out cookie clearing
- Fix test_security_extra.py: pass Request mock to require_admin_auth;
add new test_valid_session_cookie_returns_auth_context
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/b448f585-7646-40f8-ae2d-9986c361e3fd
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 10:09:50 +00:00
Christian Krakau-Louis