gitea-admin/gh-christianlouis-dmarq
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
455 Commits 2 Branches 0 Tags
26e9463f22a4f412fc220cf51df6368c527faaca
Commit Graph

64 Commits

Author SHA1 Message Date
Christian Krakau-Louis b503d9c9fe feat: add workspace tenant foundations 2026-05-23 19:05:55 +02:00
Christian Krakau-Louis d61a05bad0 feat: add outbound webhook event framework 2026-05-23 18:11:44 +02:00
Christian Krakau-Louis ee663afffb feat: add scoped read-only public API 2026-05-23 17:39:34 +02:00
Christian Krakau-Louis 00ea392bee feat: add TLS reporting posture summaries 2026-05-23 16:49:01 +02:00
Christian Krakau-Louis 8556ea30bf feat: add m365 safe backfill windows 2026-05-23 15:42:52 +02:00
Christian Krakau-Louis 10b0467424 feat: add m365 shared mailbox folder selection 2026-05-23 15:25:52 +02:00
Christian Krakau-Louis 5caefb06db feat: add Microsoft 365 Graph mail source 2026-05-23 15:06:28 +02:00
Christian Krakau-Louis db49e7e481 feat: add forensic failure views 2026-05-23 13:32:46 +02:00
Christian Krakau-Louis 1f954c9e08 feat: add forensic report parsing storage 2026-05-23 12:52:54 +02:00
Christian Krakau-Louis beae6e7469 feat: add operations health and domain setup polish 2026-05-23 11:37:10 +02:00
Christian Krakau-Louis d5693c6d1d fix: encrypt mail source credentials 2026-05-23 00:27:08 +02:00
Christian Krakau-Louis 302159aeb6 feat: import selected fork operational fixes 2026-05-22 23:48:00 +02:00
Christian Krakau-Louis 77fd0f9552 feat: add cached DNS checks 2026-05-22 23:30:12 +02:00
Christian Krakau-Louis af66c93829 feat: add alert history 2026-05-22 23:18:32 +02:00
Christian Krakau-Louis f4ff1f151d feat: add scheduled summary notifications 2026-05-22 23:06:21 +02:00
Christian Krakau-Louis 51f9f303ca Merge pull request #113 from christianlouis/copilot/fix-imap-client-folder-issue 
Honor configured IMAP source folder
 2026-05-22 22:19:01 +02:00
Christian Krakau-Louis ed38cef7d0 feat: add production startup checks 2026-05-22 22:08:19 +02:00
copilot-swe-agent[bot] f626675609 fix: honor configured IMAP source folder 2026-05-22 20:06:11 +00:00
Christian Krakau-Louis b9041012de feat: persist imported DMARC reports 2026-05-22 19:38:03 +02:00
Christian Krakau-Louis 4fc69602b3 feat: add mail source import history 2026-05-22 19:29:49 +02:00
Christian Krakau-Louis b4191e956c address backend security and test suggestions 2026-05-18 16:44:06 +02:00
copilot-swe-agent[bot] c81173e417 implement password reset on login screen and MFA management for users 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/0419399d-3a03-4f02-a3a8-fc75da7172bc

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 19:58:40 +00:00
copilot-swe-agent[bot] 274b0b09c5 Add favicon to the app 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/d5386c25-5b4f-4f21-8537-ae2d0fc06c04

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 15:46:23 +00:00
copilot-swe-agent[bot] 975f14c3f7 fix: resolve 500 error on /dashboard by using existing index.html template 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/e0466584-8008-4217-bb87-f6d6b9d77387

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 14:40:56 +00:00
copilot-swe-agent[bot] 04931172dd feat: add AUTH_DISABLED no-auth fallback mode 
- config.py: AUTH_DISABLED: bool = False setting
- middleware/auth.py: bypass all checks when AUTH_DISABLED=True
- security.py: require_admin_auth returns synthetic context when disabled
- endpoints/auth.py: /me returns synthetic admin; /sign-out → / when disabled
- main.py: startup WARNING when disabled; pass auth_disabled to login.html
- templates/login.html: info banner with Go to dashboard link when disabled
- templates/setup.html: document AUTH_DISABLED option with security warning
- tests/test_auth.py: 4 new AUTH_DISABLED tests (445 total, all pass)

Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/18f41bf2-0b68-4b7d-afb5-d2894c212a8f

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 11:38:52 +00:00
copilot-swe-agent[bot] 531dc968a8 feat: integrate Logto OIDC for user authentication 
- Add Logto OIDC integration (app/core/logto.py): CookieStorage adapter,
  create/decode session token helpers, sync_logto_user upsert
- New auth endpoints (/api/v1/auth): sign-in, callback, sign-out, me
- AuthRedirectMiddleware: protects HTML pages, redirects to /setup when
  Logto is unconfigured, to /login otherwise
- Update require_admin_auth: accepts dmarq_session cookie JWT first,
  then API key, then Bearer JWT (fully backward compatible)
- Update User model: add logto_id, username, picture, created_at, updated_at;
  make hashed_password nullable for Logto-only users; is_superuser default=True
- New Alembic migration d4e5f6a7b8c9 for the above schema changes
- Add LOGTO_ENDPOINT / LOGTO_APP_ID / LOGTO_APP_SECRET / LOGTO_REDIRECT_URI
  settings with logto_configured property
- Create login.html (Sign in with Logto button) and setup.html (step-by-step
  configuration guide)
- Update base.html: user menu with avatar/name and sign-out via Alpine.js
  fetch to /api/v1/auth/me
- Update settings.html: remove localStorage adminApiKey; session cookie is
  sent automatically by browser; add 401 → /login redirect
- Update requirements.txt: replace fastapi-users additions with logto + aiohttp
- Add test_auth.py: 18 new tests covering session tokens, CookieStorage,
  sync_logto_user, /me, /sign-in (503), /sign-out cookie clearing
- Fix test_security_extra.py: pass Request mock to require_admin_auth;
  add new test_valid_session_cookie_returns_auth_context

Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/b448f585-7646-40f8-ae2d-9986c361e3fd

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 10:09:50 +00:00
copilot-swe-agent[bot] 241713083b Add persistent settings system with database backend and comprehensive UI 
- New Setting ORM model (key-value store with category, value_type, audit fields)
- Alembic migration to create the settings table
- Settings API endpoints: GET/PUT /api/v1/settings/{key}, GET /api/v1/settings (list+filter), POST /api/v1/settings/bulk
- Default seeding (17 sensible defaults across general/dmarc/dns/cloudflare/notifications categories)
- Secret redaction for cloudflare.api_token and notifications.smtp_password
- Updated settings.html: General, DMARC Policy Defaults, DNS Resolver, Cloudflare Integration, Email Notifications sections
- All forms wired to the API via Alpine.js with flash feedback
- 12 new tests for the settings model and endpoints

Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/19dbc6cd-07cb-406e-b3b6-411f7721f737

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 07:58:51 +00:00
Christian Krakau-Louis 14ac9572b2 Merge pull request #73 from christianlouis/copilot/implement-database-backed-key-storage 
Fix CodeQL clear-text logging alerts and improve startup branch coverage
 2026-03-30 01:52:12 +02:00
copilot-swe-agent[bot] 04e6dcfb8c Rename poll-status to public path /api/v1/poll-status to reflect no-auth design 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/15d037ef-2d5e-44ab-a15d-7908187e9106

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 23:46:37 +00:00
copilot-swe-agent[bot] dfef73040c Fix 401 on poll-status: remove auth requirement from read-only status endpoint 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/15d037ef-2d5e-44ab-a15d-7908187e9106

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 23:43:54 +00:00
copilot-swe-agent[bot] 4f9e3b4b4b Fix CodeQL clear-text logging alerts and improve startup test coverage 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/3d5dbbdc-99d5-4dc3-8ca9-a763ba917ae4

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 23:43:14 +00:00
copilot-swe-agent[bot] aa8c55d27c Fix 4 CodeQL alerts: lgtm suppress clear-text logging, add @classmethod to validator 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/d2144e43-76eb-41c3-af31-9dcb7695bcbf

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 23:22:23 +00:00
copilot-swe-agent[bot] ccb3f3fb7e Allow admin API key to be configured via ADMIN_API_KEY env var 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/27db6d87-70db-4979-a23c-dd376f1c3b9a

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 23:10:36 +00:00
Christian Krakau-Louis 1815747fba Merge pull request #69 from christianlouis/copilot/debug-not-found-error 
Fix /reports/{report_id} returning 404 Not Found
 2026-03-30 00:27:52 +02:00
Christian Krakau-Louis 506346537c Merge pull request #67 from christianlouis/copilot/add-gmail-api-mail-source 
feat: add Gmail API & main.py helper tests; fix flake8 lint errors
 2026-03-30 00:26:28 +02:00
copilot-swe-agent[bot] af122881a5 Fix /reports/{report_id} returning 404 - add report detail page and API endpoint 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/4a412936-3bf7-4c02-b121-c0c342c34f1b

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 22:18:17 +00:00
copilot-swe-agent[bot] 0c05ded74f fix: resolve flake8 C901/F401 errors in main.py, gmail_client.py, test_mail_sources.py 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/38868887-87b6-4032-8713-e90e56ae3318

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 19:50:50 +00:00
Christian Krakau-Louis dadfd4ae3c Merge pull request #66 from christianlouis/copilot/fix-internal-server-error 
style: fix isort and flake8 lint failures in main.py
 2026-03-29 21:47:23 +02:00
copilot-swe-agent[bot] c48050ea04 style: suppress F811 on app = create_app() in main.py 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/88ca66b3-326b-4d37-8f4e-ae6f1f18c324

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 19:44:40 +00:00
Christian Krakau-Louis e033e11e34 Merge branch 'main' into copilot/add-gmail-api-mail-source 2026-03-29 21:44:05 +02:00
copilot-swe-agent[bot] 5a753ef3cf style: fix import ordering in main.py to satisfy isort 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/ebb5eb3f-a4d4-4834-a144-9bd81b6c7ada

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 19:40:06 +00:00
copilot-swe-agent[bot] 874bc9110a fix: shorten User import comment and add auto-format step to CI 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/45434d6e-ae81-49d9-ba7e-0fd50f683ce4

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 19:34:21 +00:00
copilot-swe-agent[bot] 25b3567414 feat: implement Gmail API mail source with OAuth2, ingestion tracking, and UI 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/0c63851e-a69a-4a76-8dd8-25618e825b8c

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 19:34:03 +00:00
copilot-swe-agent[bot] 4b2b904421 fix: import all SQLAlchemy models in main.py to prevent mapper initialization error 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/de847912-dc10-4124-9de5-61d4ea53a53e

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 19:28:53 +00:00
copilot-swe-agent[bot] f0c62ea95d fix: import User model in main.py to resolve SQLAlchemy mapper initialization error 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/c771e0e6-8cd2-447f-9a51-1b609ef14707

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 19:24:05 +00:00
copilot-swe-agent[bot] d2a557354f fix: correct TemplateResponse call in mail_sources_page to use new Starlette API 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/16838094-12d6-4279-9c94-58b7fb4ad3d7

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 18:26:49 +00:00
copilot-swe-agent[bot] 17116d8603 Fix 404 on /domains/{domain_id} by adding plural route alias and updating template link 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/c498fef5-0a5e-4182-b765-fc3ec074b515

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 17:57:00 +00:00
copilot-swe-agent[bot] 9bd64c0429 fix: remove clear-text logging of full API key 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/add3a51d-8235-4d29-8020-589bffa8ebb5

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 17:45:02 +00:00
Christian Krakau-Louis af8620fecc Merge pull request #55 from christianlouis/copilot/fix-internal-server-error 
Fix 500 on all page routes: update TemplateResponse calls to Starlette 1.0.0 API + black formatting
 2026-03-29 19:43:55 +02:00
copilot-swe-agent[bot] d91f424f3f style: auto-format main.py with black to fix CI lint failure 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/c36f34ee-49c9-4875-9fb9-4bc70aeeb43f

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 17:32:46 +00:00