gitea-admin/gh-christianlouis-dmarq
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
283 Commits 2 Branches 0 Tags
4fc69602b328973cfebd090674ffef8a1eabb083
Commit Graph

283 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Christian Krakau-Louis 4fc69602b3 feat: add mail source import history 2026-05-22 19:29:49 +02:00
Christian Krakau-Louis 07b2ea400e fix: harden DMARC mail import 2026-05-22 19:17:32 +02:00
Christian Krakau-Louis 9e9df108c8 ci: publish release image tags 2026-05-22 15:07:02 +02:00
Christian Krakau-Louis bf76e2d450 Merge pull request #97 from dependabot/pip/docs/readthedocs/pymdown-extensions-10.21.3 
Bump pymdown-extensions in docs/readthedocs to fix the moderate security advisory.
 2026-05-21 13:05:18 +02:00
dependabot[bot] 00e1ee2a72 chore(deps): bump pymdown-extensions in /docs/readthedocs 
Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.16.1 to 10.21.3.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.16.1...10.21.3)

---
updated-dependencies:
- dependency-name: pymdown-extensions
  dependency-version: 10.21.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-19 21:06:25 +00:00
Christian Krakau-Louis 181b43bff9 address copilot review followups (#96) 2026-05-18 19:17:36 +02:00
Christian Krakau-Louis ee7c15ce4b Merge pull request #95 from christianlouis/codex/address-backend-security-and-test-suggestions 
[codex] address backend security and test suggestions
 2026-05-18 16:52:50 +02:00
Christian Krakau-Louis b4191e956c address backend security and test suggestions 2026-05-18 16:44:06 +02:00
semantic-release 8f7c41193f chore(release): v1.8.4 2026-04-02 17:49:04 +00:00
Christian Krakau-Louis 20dddd0824 Merge pull request #92 from christianlouis/copilot/fix-login-and-profile-management 
Fix profile page: use Logto Account Center prebuilt flows for password change and MFA
 2026-04-02 19:48:06 +02:00
copilot-swe-agent[bot] 523b0529f4 fix: use Logto Account Center routes for password change and MFA management 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/d566f8d7-4560-4945-b9e5-388259f626a3

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-04-02 17:05:20 +00:00
semantic-release b0e643bdf3 chore(release): v1.8.3 2026-03-31 14:00:29 +00:00
Christian Krakau-Louis f8d4f936a7 Merge pull request #90 from christianlouis/copilot/fix-id-token-claims-extraction 
fix: remove erroneous await from synchronous getIdTokenClaims() + add callback endpoint tests
 2026-03-31 15:59:36 +02:00
copilot-swe-agent[bot] 32351a2134 test: add TestCallbackEndpoint tests to cover /callback auth endpoint 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/0683a057-d74b-4b1a-aeab-47f5bfbe4190

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-31 08:57:05 +00:00
Christian Krakau-Louis 2c9e5f4ca9 Merge pull request #91 from christianlouis/copilot/implement-password-reset-and-mfa-management 
Add password reset link on login screen and MFA management via Logto account portal
 2026-03-31 10:15:42 +02:00
copilot-swe-agent[bot] c81173e417 implement password reset on login screen and MFA management for users 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/0419399d-3a03-4f02-a3a8-fc75da7172bc

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 19:58:40 +00:00
copilot-swe-agent[bot] 9f1494a090 fix: remove erroneous await from getIdTokenClaims() call 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/2a043a05-25c6-4750-a9e8-da2b1651b55b

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 19:51:43 +00:00
copilot-swe-agent[bot] 6805ae301a Initial plan 2026-03-30 19:50:34 +00:00
copilot-swe-agent[bot] c4a5d7da53 Initial plan 2026-03-30 19:48:00 +00:00
Christian Krakau-Louis 6581cf05b2 Merge pull request #89 from christianlouis/copilot/fix-logto-callback-error 
Fix Logto callback failure: extend LOGTO_SKIP_SSL_VERIFY to cover JWKS fetch (PyJWKClient/urllib)
 2026-03-30 21:42:23 +02:00
copilot-swe-agent[bot] 3a5b75e964 Fix Logto callback SSL error: extend LOGTO_SKIP_SSL_VERIFY patch to PyJWKClient (JWKS/urllib) 
The 'Fail to fetch data from the url' callback error came from PyJWT's
PyJWKClient.fetch_data() using urllib to retrieve the JWKS, which is not
covered by the existing aiohttp.ClientSession SSL monkey-patch.

Extend _apply_logto_ssl_patch() to also replace PyJWKClient inside
logto.OidcCore with a subclass that injects the non-verifying ssl.SSLContext
via the ssl_context constructor parameter, ensuring both the OIDC discovery/
token requests (aiohttp) and ID-token JWKS verification (urllib) honour
LOGTO_SKIP_SSL_VERIFY=True.

Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/14676b1a-3421-4839-9ba3-8229a3e5adf1

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 17:15:58 +00:00
copilot-swe-agent[bot] 8d75f2e045 Initial plan 2026-03-30 17:06:35 +00:00
Christian Krakau-Louis 74ce9a7e37 Merge pull request #88 from christianlouis/copilot/implement-secure-api-key-storage 
Add LOGTO_SKIP_SSL_VERIFY setting to support self-signed certificates on Logto instances
 2026-03-30 18:56:48 +02:00
copilot-swe-agent[bot] 92d6a06a33 Default LOGTO_SKIP_SSL_VERIFY to true; update comment and docs 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/8a17f133-904d-45c7-bc35-b3f5c1d2c97e

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 16:46:25 +00:00
Christian Krakau-Louis 8d98d96afc Merge pull request #87 from christianlouis/copilot/exclude-static-assets-login 
Exclude static asset file extensions from auth redirect middleware
 2026-03-30 18:43:36 +02:00
copilot-swe-agent[bot] 9e579972ca Initial plan 2026-03-30 16:38:37 +00:00
copilot-swe-agent[bot] 3fb90dbcf6 Exclude static asset extensions from auth redirect middleware 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/3e1fe3d2-54b1-4eb4-90d2-173a5e95d376

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 16:36:28 +00:00
semantic-release 3c6d737139 chore(release): v1.8.2 2026-03-30 16:33:46 +00:00
Christian Krakau-Louis a463599d05 Merge pull request #86 from christianlouis/copilot/fix-asgi-application-exception 
Fix AttributeError: Scope.offlineAccess removed in logto SDK 0.2.x
 2026-03-30 18:32:53 +02:00
copilot-swe-agent[bot] 420975c1d7 Initial plan 2026-03-30 16:32:32 +00:00
copilot-swe-agent[bot] 9f5e2c1258 fix: use OAuthScope.offlineAccess instead of Scope.offlineAccess for logto SDK compatibility 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/2982bcbd-abe6-474a-94ff-e7c6aabe4890

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 15:57:24 +00:00
Christian Krakau-Louis bf7cb918bf Merge pull request #85 from christianlouis/copilot/add-favicon-to-app 
Add favicon to the DMARQ web app
 2026-03-30 17:54:47 +02:00
copilot-swe-agent[bot] a808c62d4f Initial plan 2026-03-30 15:53:55 +00:00
copilot-swe-agent[bot] 274b0b09c5 Add favicon to the app 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/d5386c25-5b4f-4f21-8537-ae2d0fc06c04

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 15:46:23 +00:00
copilot-swe-agent[bot] f31877b964 Initial plan 2026-03-30 15:43:40 +00:00
semantic-release 11440f4a02 chore(release): v1.8.1 2026-03-30 14:52:49 +00:00
Christian Krakau-Louis a23c69011a Merge pull request #84 from christianlouis/copilot/fix-internal-server-error 
fix: resolve TemplateNotFound 500 on /dashboard endpoint
 2026-03-30 16:51:57 +02:00
copilot-swe-agent[bot] 975f14c3f7 fix: resolve 500 error on /dashboard by using existing index.html template 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/e0466584-8008-4217-bb87-f6d6b9d77387

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 14:40:56 +00:00
copilot-swe-agent[bot] 797567d441 Initial plan 2026-03-30 14:34:05 +00:00
semantic-release 3e35eab5ed chore(release): v1.8.0 2026-03-30 14:29:53 +00:00
Christian Krakau-Louis 63ce49ab66 Merge pull request #83 from christianlouis/copilot/fix-unauthorized-access-settings-api 
feat: Logto OIDC authentication + AUTH_DISABLED no-auth fallback
 2026-03-30 16:28:55 +02:00
copilot-swe-agent[bot] 04931172dd feat: add AUTH_DISABLED no-auth fallback mode 
- config.py: AUTH_DISABLED: bool = False setting
- middleware/auth.py: bypass all checks when AUTH_DISABLED=True
- security.py: require_admin_auth returns synthetic context when disabled
- endpoints/auth.py: /me returns synthetic admin; /sign-out → / when disabled
- main.py: startup WARNING when disabled; pass auth_disabled to login.html
- templates/login.html: info banner with Go to dashboard link when disabled
- templates/setup.html: document AUTH_DISABLED option with security warning
- tests/test_auth.py: 4 new AUTH_DISABLED tests (445 total, all pass)

Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/18f41bf2-0b68-4b7d-afb5-d2894c212a8f

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 11:38:52 +00:00
copilot-swe-agent[bot] 531dc968a8 feat: integrate Logto OIDC for user authentication 
- Add Logto OIDC integration (app/core/logto.py): CookieStorage adapter,
  create/decode session token helpers, sync_logto_user upsert
- New auth endpoints (/api/v1/auth): sign-in, callback, sign-out, me
- AuthRedirectMiddleware: protects HTML pages, redirects to /setup when
  Logto is unconfigured, to /login otherwise
- Update require_admin_auth: accepts dmarq_session cookie JWT first,
  then API key, then Bearer JWT (fully backward compatible)
- Update User model: add logto_id, username, picture, created_at, updated_at;
  make hashed_password nullable for Logto-only users; is_superuser default=True
- New Alembic migration d4e5f6a7b8c9 for the above schema changes
- Add LOGTO_ENDPOINT / LOGTO_APP_ID / LOGTO_APP_SECRET / LOGTO_REDIRECT_URI
  settings with logto_configured property
- Create login.html (Sign in with Logto button) and setup.html (step-by-step
  configuration guide)
- Update base.html: user menu with avatar/name and sign-out via Alpine.js
  fetch to /api/v1/auth/me
- Update settings.html: remove localStorage adminApiKey; session cookie is
  sent automatically by browser; add 401 → /login redirect
- Update requirements.txt: replace fastapi-users additions with logto + aiohttp
- Add test_auth.py: 18 new tests covering session tokens, CookieStorage,
  sync_logto_user, /me, /sign-in (503), /sign-out cookie clearing
- Fix test_security_extra.py: pass Request mock to require_admin_auth;
  add new test_valid_session_cookie_returns_auth_context

Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/b448f585-7646-40f8-ae2d-9986c361e3fd

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 10:09:50 +00:00
copilot-swe-agent[bot] 308e6f8d91 chore: pivot plan to Logto OIDC integration 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/b448f585-7646-40f8-ae2d-9986c361e3fd

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 09:59:13 +00:00
semantic-release 6dd5c1e8f6 chore(release): v1.7.1 2026-03-30 09:37:20 +00:00
copilot-swe-agent[bot] 13a82ee148 Initial plan 2026-03-30 09:37:20 +00:00
Christian Krakau-Louis 9a331f18c5 Merge pull request #80 from christianlouis/copilot/increase-test-coverage-80 
Increase test coverage to >80% with CI enforcement
 2026-03-30 11:36:28 +02:00
copilot-swe-agent[bot] bd26f3c607 fix: remove unused imports (flake8 F401) and replace hardcoded test password 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/72367edf-35f7-4c7c-a5ff-bbe4909b2139

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 08:32:56 +00:00
Christian Krakau-Louis 42e3a1f148 Merge pull request #78 from christianlouis/copilot/fix-update-settings-persistence 
Add persistent settings system with database backend and comprehensive settings UI
 2026-03-30 10:30:07 +02:00
copilot-swe-agent[bot] 241713083b Add persistent settings system with database backend and comprehensive UI 
- New Setting ORM model (key-value store with category, value_type, audit fields)
- Alembic migration to create the settings table
- Settings API endpoints: GET/PUT /api/v1/settings/{key}, GET /api/v1/settings (list+filter), POST /api/v1/settings/bulk
- Default seeding (17 sensible defaults across general/dmarc/dns/cloudflare/notifications categories)
- Secret redaction for cloudflare.api_token and notifications.smtp_password
- Updated settings.html: General, DMARC Policy Defaults, DNS Resolver, Cloudflare Integration, Email Notifications sections
- All forms wired to the API via Alpine.js with flash feedback
- 12 new tests for the settings model and endpoints

Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/19dbc6cd-07cb-406e-b3b6-411f7721f737

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-30 07:58:51 +00:00