65b154ae7f
feat: add mailbox test diagnostics
2026-05-23 12:14:49 +02:00
a6c795ee16
feat: add evidence-linked DNS health guidance
2026-05-23 12:01:45 +02:00
beae6e7469
feat: add operations health and domain setup polish
2026-05-23 11:37:10 +02:00
521dbc92d0
feat: add Cloudflare DNS integration
...
Closes #31
2026-05-23 01:17:59 +02:00
947428afb6
harden notification settings
2026-05-23 00:56:49 +02:00
d5693c6d1d
fix: encrypt mail source credentials
2026-05-23 00:27:08 +02:00
32129a41c9
fix: render dashboard domain rows safely
2026-05-23 00:17:34 +02:00
8d6acc25ea
feat: add guided setup onboarding
2026-05-23 00:06:44 +02:00
88af60ed2e
test: cover webhook ingestion edge cases
2026-05-22 23:53:36 +02:00
302159aeb6
feat: import selected fork operational fixes
2026-05-22 23:48:00 +02:00
77fd0f9552
feat: add cached DNS checks
2026-05-22 23:30:12 +02:00
af66c93829
feat: add alert history
2026-05-22 23:18:32 +02:00
f4ff1f151d
feat: add scheduled summary notifications
2026-05-22 23:06:21 +02:00
05b687b525
feat: add notification alert rules
2026-05-22 22:55:49 +02:00
dd4b90c9de
feat: add apprise notification delivery
2026-05-22 22:44:08 +02:00
7973620e42
Merge pull request #114 from christianlouis/copilot/fix-mail-folder-validation
...
Allow mail source folders with spaces
2026-05-22 22:19:49 +02:00
51f9f303ca
Merge pull request #113 from christianlouis/copilot/fix-imap-client-folder-issue
...
Honor configured IMAP source folder
2026-05-22 22:19:01 +02:00
ed38cef7d0
feat: add production startup checks
2026-05-22 22:08:19 +02:00
2c528137db
test: allow mail source folders with spaces
2026-05-22 20:07:46 +00:00
f626675609
fix: honor configured IMAP source folder
2026-05-22 20:06:11 +00:00
eeff24fa5c
fix: redact secret diagnostics
2026-05-22 22:00:28 +02:00
67e5fedce5
feat: add dashboard change summaries
2026-05-22 21:40:59 +02:00
364d517e07
feat: add source recommendations
2026-05-22 21:30:41 +02:00
34d8a655a2
feat: add domain report csv export
2026-05-22 21:21:39 +02:00
ccc634a10b
feat: add domain daily rollups
2026-05-22 21:12:43 +02:00
8485514445
feat: add dashboard trend charts
2026-05-22 20:52:47 +02:00
14f9f6defd
feat: add source pass fail rollups
2026-05-22 20:41:34 +02:00
c1b81d3e06
feat: add mail import detail events
2026-05-22 20:11:56 +02:00
1b7f00e7a0
feat: add per-source mail import trigger
2026-05-22 19:54:11 +02:00
69aa1459eb
feat: show mail import history
2026-05-22 19:44:18 +02:00
b9041012de
feat: persist imported DMARC reports
2026-05-22 19:38:03 +02:00
4fc69602b3
feat: add mail source import history
2026-05-22 19:29:49 +02:00
07b2ea400e
fix: harden DMARC mail import
2026-05-22 19:17:32 +02:00
181b43bff9
address copilot review followups ( #96 )
2026-05-18 19:17:36 +02:00
b4191e956c
address backend security and test suggestions
2026-05-18 16:44:06 +02:00
32351a2134
test: add TestCallbackEndpoint tests to cover /callback auth endpoint
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/0683a057-d74b-4b1a-aeab-47f5bfbe4190
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-31 08:57:05 +00:00
3a5b75e964
Fix Logto callback SSL error: extend LOGTO_SKIP_SSL_VERIFY patch to PyJWKClient (JWKS/urllib)
...
The 'Fail to fetch data from the url' callback error came from PyJWT's
PyJWKClient.fetch_data() using urllib to retrieve the JWKS, which is not
covered by the existing aiohttp.ClientSession SSL monkey-patch.
Extend _apply_logto_ssl_patch() to also replace PyJWKClient inside
logto.OidcCore with a subclass that injects the non-verifying ssl.SSLContext
via the ssl_context constructor parameter, ensuring both the OIDC discovery/
token requests (aiohttp) and ID-token JWKS verification (urllib) honour
LOGTO_SKIP_SSL_VERIFY=True.
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/14676b1a-3421-4839-9ba3-8229a3e5adf1
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 17:15:58 +00:00
3fb90dbcf6
Exclude static asset extensions from auth redirect middleware
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/3e1fe3d2-54b1-4eb4-90d2-173a5e95d376
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 16:36:28 +00:00
04931172dd
feat: add AUTH_DISABLED no-auth fallback mode
...
- config.py: AUTH_DISABLED: bool = False setting
- middleware/auth.py: bypass all checks when AUTH_DISABLED=True
- security.py: require_admin_auth returns synthetic context when disabled
- endpoints/auth.py: /me returns synthetic admin; /sign-out → / when disabled
- main.py: startup WARNING when disabled; pass auth_disabled to login.html
- templates/login.html: info banner with Go to dashboard link when disabled
- templates/setup.html: document AUTH_DISABLED option with security warning
- tests/test_auth.py: 4 new AUTH_DISABLED tests (445 total, all pass)
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/18f41bf2-0b68-4b7d-afb5-d2894c212a8f
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 11:38:52 +00:00
531dc968a8
feat: integrate Logto OIDC for user authentication
...
- Add Logto OIDC integration (app/core/logto.py): CookieStorage adapter,
create/decode session token helpers, sync_logto_user upsert
- New auth endpoints (/api/v1/auth): sign-in, callback, sign-out, me
- AuthRedirectMiddleware: protects HTML pages, redirects to /setup when
Logto is unconfigured, to /login otherwise
- Update require_admin_auth: accepts dmarq_session cookie JWT first,
then API key, then Bearer JWT (fully backward compatible)
- Update User model: add logto_id, username, picture, created_at, updated_at;
make hashed_password nullable for Logto-only users; is_superuser default=True
- New Alembic migration d4e5f6a7b8c9 for the above schema changes
- Add LOGTO_ENDPOINT / LOGTO_APP_ID / LOGTO_APP_SECRET / LOGTO_REDIRECT_URI
settings with logto_configured property
- Create login.html (Sign in with Logto button) and setup.html (step-by-step
configuration guide)
- Update base.html: user menu with avatar/name and sign-out via Alpine.js
fetch to /api/v1/auth/me
- Update settings.html: remove localStorage adminApiKey; session cookie is
sent automatically by browser; add 401 → /login redirect
- Update requirements.txt: replace fastapi-users additions with logto + aiohttp
- Add test_auth.py: 18 new tests covering session tokens, CookieStorage,
sync_logto_user, /me, /sign-in (503), /sign-out cookie clearing
- Fix test_security_extra.py: pass Request mock to require_admin_auth;
add new test_valid_session_cookie_returns_auth_context
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/b448f585-7646-40f8-ae2d-9986c361e3fd
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 10:09:50 +00:00
9a331f18c5
Merge pull request #80 from christianlouis/copilot/increase-test-coverage-80
...
Increase test coverage to >80% with CI enforcement
2026-03-30 11:36:28 +02:00
bd26f3c607
fix: remove unused imports (flake8 F401) and replace hardcoded test password
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/72367edf-35f7-4c7c-a5ff-bbe4909b2139
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 08:32:56 +00:00
241713083b
Add persistent settings system with database backend and comprehensive UI
...
- New Setting ORM model (key-value store with category, value_type, audit fields)
- Alembic migration to create the settings table
- Settings API endpoints: GET/PUT /api/v1/settings/{key}, GET /api/v1/settings (list+filter), POST /api/v1/settings/bulk
- Default seeding (17 sensible defaults across general/dmarc/dns/cloudflare/notifications categories)
- Secret redaction for cloudflare.api_token and notifications.smtp_password
- Updated settings.html: General, DMARC Policy Defaults, DNS Resolver, Cloudflare Integration, Email Notifications sections
- All forms wired to the API via Alpine.js with flash feedback
- 12 new tests for the settings model and endpoints
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/19dbc6cd-07cb-406e-b3b6-411f7721f737
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 07:58:51 +00:00
dc4e8377ee
test: tighten token expiry tolerance in test_security_extra.py
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/752de981-5cf5-4789-a5b9-1f5ff165d202
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 00:38:16 +00:00
3524344a4a
test: add comprehensive tests for imap, stats, setup, security; enforce 80% coverage gate
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/752de981-5cf5-4789-a5b9-1f5ff165d202
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 00:33:00 +00:00
06a007d9db
Merge pull request #76 from christianlouis/copilot/update-dkim-selectors
...
Fix DKIM selector extraction: surface all working selectors and auto-discovered report selectors
2026-03-30 01:57:12 +02:00
596a9b882e
Fix DKIM selector extraction: show all working selectors and report-discovered selectors
...
- check_dkim now returns ALL matching selectors instead of stopping at first match
- DomainDNSResult.dkim_selectors is now a List[str] instead of a single Optional[str]
- DNSRecordResponse.dkimSelectors is now List[str]
- /selectors endpoint now also returns report_selectors (auto-discovered from DMARC reports)
- Frontend shows all live-check selectors and auto-discovered selectors as read-only
- Updated tests to match new data structures; added tests for multi-selector and report_selectors
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/87d8b8d9-23c3-4d3b-85a3-8e354e62c768
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-29 23:54:45 +00:00
14ac9572b2
Merge pull request #73 from christianlouis/copilot/implement-database-backed-key-storage
...
Fix CodeQL clear-text logging alerts and improve startup branch coverage
2026-03-30 01:52:12 +02:00
4f9e3b4b4b
Fix CodeQL clear-text logging alerts and improve startup test coverage
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/3d5dbbdc-99d5-4dc3-8ca9-a763ba917ae4
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-29 23:43:14 +00:00
ba4dcd9f81
Add tests for GET /api/v1/reports endpoint to fix codecov/patch coverage
...
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/7652d25c-fe9d-4576-a69d-731b091b84ff
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-29 23:39:16 +00:00
Christian Krakau-Louis