copilot-swe-agent[bot]
03f4eaf724
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
123 lines
4.2 KiB
Python
123 lines
4.2 KiB
Python
from fastapi import APIRouter, Depends, HTTPException, BackgroundTasks
|
|
from typing import Dict, Any
|
|
from datetime import datetime
|
|
import logging
|
|
|
|
from app.services.imap_client import IMAPClient
|
|
from app.core.security import require_admin_auth
|
|
|
|
router = APIRouter()
|
|
logger = logging.getLogger(__name__)
|
|
|
|
@router.post("/test-connection")
|
|
async def test_imap_connection(
|
|
auth: dict = Depends(require_admin_auth),
|
|
server: str = None,
|
|
port: int = 993,
|
|
username: str = None,
|
|
password: str = None,
|
|
ssl: bool = True
|
|
) -> Dict[str, Any]:
|
|
"""
|
|
Test connection to an IMAP server and gather mailbox statistics
|
|
|
|
Security: Requires authentication (X-API-Key or Bearer token)
|
|
Note: Credentials should be passed in request body, not query params
|
|
"""
|
|
# Security: Don't accept credentials in query parameters (they get logged)
|
|
if any([server, username, password]):
|
|
logger.warning("IMAP credentials passed as query parameters - this is insecure")
|
|
raise HTTPException(
|
|
status_code=400,
|
|
detail="Credentials should be passed in request body, not query parameters"
|
|
)
|
|
|
|
imap_client = IMAPClient(
|
|
server=server,
|
|
port=port,
|
|
username=username,
|
|
password=password
|
|
)
|
|
|
|
success, message, stats = imap_client.test_connection()
|
|
|
|
return {
|
|
"success": success,
|
|
"message": message,
|
|
"message_count": stats.get("message_count", 0),
|
|
"unread_count": stats.get("unread_count", 0),
|
|
"dmarc_count": stats.get("dmarc_count", 0),
|
|
"available_mailboxes": stats.get("available_mailboxes", []),
|
|
"timestamp": datetime.now().isoformat()
|
|
}
|
|
|
|
|
|
@router.post("/fetch-reports")
|
|
async def fetch_imap_reports(
|
|
background_tasks: BackgroundTasks,
|
|
auth: dict = Depends(require_admin_auth),
|
|
days: int = 7,
|
|
delete_emails: bool = False
|
|
) -> Dict[str, Any]:
|
|
"""
|
|
Fetch DMARC reports from the configured IMAP mailbox
|
|
|
|
Security: Requires authentication (X-API-Key or Bearer token)
|
|
"""
|
|
# Security: Validate parameters
|
|
if days < 1 or days > 365:
|
|
raise HTTPException(
|
|
status_code=400,
|
|
detail="Days parameter must be between 1 and 365"
|
|
)
|
|
|
|
imap_client = IMAPClient(delete_emails=delete_emails)
|
|
|
|
# Run in background if it might take a while
|
|
if days > 14:
|
|
background_tasks.add_task(imap_client.fetch_reports, days)
|
|
return {
|
|
"success": True,
|
|
"message": f"Background task started to fetch {days} days of reports",
|
|
"timestamp": datetime.now().isoformat()
|
|
}
|
|
|
|
# Otherwise run immediately
|
|
try:
|
|
results = imap_client.fetch_reports(days=days)
|
|
|
|
return {
|
|
"success": results["success"],
|
|
"processed_emails": results["processed"],
|
|
"reports_found": results["reports_found"],
|
|
"new_domains": results["new_domains"],
|
|
"errors": results["errors"] if "errors" in results and results["errors"] else None,
|
|
"timestamp": datetime.now().isoformat()
|
|
}
|
|
except Exception as e:
|
|
logger.error(f"Error fetching IMAP reports: {str(e)}")
|
|
raise HTTPException(
|
|
status_code=500,
|
|
detail="Failed to fetch reports. Check server logs for details."
|
|
)
|
|
|
|
|
|
@router.get("/status")
|
|
async def get_imap_status(auth: dict = Depends(require_admin_auth)) -> Dict[str, Any]:
|
|
"""
|
|
Get the current status of IMAP polling background processes
|
|
|
|
Security: Requires authentication (X-API-Key or Bearer token)
|
|
"""
|
|
# In a real implementation this would check a persistent store
|
|
# or a global variable tracking the status of background tasks
|
|
# For now, returning simplified status
|
|
|
|
return {
|
|
"is_running": True, # In a real app, check if the background task is running
|
|
"last_check": None, # In production, track actual last check time
|
|
"next_check": None, # In production, calculate based on polling interval
|
|
"messages_processed": 0, # In production, track actual messages processed
|
|
"reports_found": 0, # In production, track reports found
|
|
"timestamp": datetime.now().isoformat()
|
|
} |