) => {
+ const { name, value, type } = e.target;
+ setSmtpForm((prev) => ({
+ ...prev,
+ [name]: type === 'checkbox' ? (e.target as HTMLInputElement).checked
+ : name === 'port' ? Number(value)
+ : value,
+ }));
+ };
+
const handleProfileSubmit = async (e: React.FormEvent) => {
e.preventDefault();
try {
@@ -68,7 +153,55 @@ function SettingsContent() {
}
};
+ const handleSmtpSubmit = async (e: React.FormEvent) => {
+ e.preventDefault();
+ try {
+ await saveSmtpMutation.mutateAsync({
+ host: smtpForm.host,
+ port: smtpForm.port,
+ username: smtpForm.username,
+ password: smtpForm.password || undefined,
+ use_tls: smtpForm.use_tls,
+ });
+ } catch (error) {
+ const errorMessage =
+ error instanceof Error && 'response' in error
+ ? (error as { response?: { data?: { detail?: string } } }).response?.data
+ ?.detail
+ : null;
+ alert(errorMessage || 'Failed to save SMTP settings');
+ }
+ };
+
+ const handleConnectGmail = async () => {
+ try {
+ const redirectUri = `${window.location.origin}/auth/gmail-callback`;
+ const url = await gmailApi.getAuthorizeUrl(redirectUri);
+ window.location.href = url;
+ } catch (error) {
+ const errorMessage =
+ error instanceof Error && 'response' in error
+ ? (error as { response?: { data?: { detail?: string } } }).response?.data
+ ?.detail
+ : null;
+ alert(errorMessage || 'Failed to start Gmail authorization');
+ }
+ };
+
+ const handleDisconnectGmail = async () => {
+ if (confirm('Disconnect Gmail? Mail accounts using Gmail API delivery will fall back to SMTP.')) {
+ try {
+ await disconnectGmailMutation.mutateAsync();
+ } catch {
+ alert('Failed to disconnect Gmail');
+ }
+ }
+ };
+
const displayUser = currentUser ?? user;
+ const gmailConnected = gmailCredential?.is_valid === true;
+ // gmail 404 just means "not connected yet" β not a real error
+ const gmailNotConnected = !gmailCredential && !gmailLoading;
return (
@@ -134,6 +267,218 @@ function SettingsContent() {
+ {/* Gmail API Section */}
+
+
+
Gmail API Delivery
+
+
+
+ Grant this app permission to inject emails directly into your Gmail inbox.
+ This is the preferred delivery method β emails arrive with original headers
+ intact, bypassing SMTP entirely.
+
+
+ Token lifetime: Access tokens expire after 1 hour and are
+ refreshed automatically. Refresh tokens do not expire unless you revoke
+ access via your{' '}
+
+ Google Account permissions
+
+ . If revoked, click “Connect Gmail” again to re-authorise.
+
+
+ {gmailLoading && (
+
+
+ )}
+
+ {!gmailLoading && gmailConnected && (
+
+
+
+
+
+ Connected as {gmailCredential.gmail_email}
+
+ {gmailCredential.last_verified_at && (
+
+ Last verified: {new Date(gmailCredential.last_verified_at).toLocaleString()}
+
+ )}
+
+
+
+
+ Re-authorise
+
+
+ Disconnect
+
+
+
+ )}
+
+ {!gmailLoading && gmailCredential && !gmailCredential.is_valid && (
+
+
+
+ Gmail access was revoked. Click “Re-authorise” below to restore Gmail API delivery.
+
+
+ )}
+
+ {!gmailLoading && (gmailNotConnected || (gmailCredential && !gmailCredential.is_valid)) && (
+
+
+ )}
+
+ {!gmailLoading && gmailNotConnected && (
+
+
+ )}
+
+
+
+
SMTP Fallback
+
+
+
+ Used when Gmail API is not connected or when a mail account is configured
+ to use SMTP delivery. Your credentials are stored encrypted.
+
+
+ {smtpLoading ? (
+
+
+ ) : (
+
+ )}
+
+
@@ -204,3 +549,4 @@ function SettingsContent() {
);
}
+
diff --git a/frontend/src/components/AddMailAccountModal.tsx b/frontend/src/components/AddMailAccountModal.tsx
index 75c2c72..8b3c834 100644
--- a/frontend/src/components/AddMailAccountModal.tsx
+++ b/frontend/src/components/AddMailAccountModal.tsx
@@ -315,6 +315,19 @@ export function AddMailAccountModal({ account, onClose }: AddMailAccountModalPro
Delete after forwarding
+
+
+ Enabled
+
+
diff --git a/frontend/src/lib/api.ts b/frontend/src/lib/api.ts
index 15855c5..4c64f2d 100644
--- a/frontend/src/lib/api.ts
+++ b/frontend/src/lib/api.ts
@@ -116,6 +116,28 @@ export interface AutoDetectSuggestion {
[key: string]: unknown;
}
+export interface GmailCredential {
+ id: number;
+ user_id: number;
+ gmail_email: string;
+ is_valid: boolean;
+ last_verified_at?: string | null;
+ created_at: string;
+ updated_at: string;
+}
+
+export interface UserSmtpConfig {
+ id: number;
+ user_id: number;
+ host: string;
+ port: number;
+ username: string;
+ use_tls: boolean;
+ has_password: boolean;
+ created_at: string;
+ updated_at: string;
+}
+
interface TokenResponse {
access_token: string;
refresh_token: string;
@@ -250,4 +272,61 @@ export const processingRunsApi = {
},
};
+// ββ Gmail API βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
+
+export const gmailApi = {
+ /** Returns the Google OAuth2 URL the user should be redirected to. */
+ async getAuthorizeUrl(redirectUri: string): Promise {
+ const response = await api.get<{ authorization_url: string }>(
+ '/providers/gmail/authorize-url',
+ { params: { redirect_uri: redirectUri } }
+ );
+ return response.data.authorization_url;
+ },
+
+ /** Exchange an OAuth2 code for Gmail tokens and persist them. */
+ async saveCallback(code: string, redirectUri: string): Promise {
+ const response = await api.post('/providers/gmail/callback', {
+ code,
+ redirect_uri: redirectUri,
+ });
+ return response.data;
+ },
+
+ /** Get the current user's stored Gmail credential status. */
+ async getCredential(): Promise {
+ const response = await api.get('/providers/gmail-credential');
+ return response.data;
+ },
+
+ /** Remove stored Gmail credentials. */
+ async disconnect(): Promise {
+ await api.delete('/providers/gmail-credential');
+ },
+};
+
+// ββ SMTP Config API βββββββββββββββββββββββββββββββββββββββββββββββββββββ
+
+export const smtpApi = {
+ async get(): Promise {
+ const response = await api.get('/users/smtp-config');
+ return response.data;
+ },
+
+ async save(data: {
+ host: string;
+ port: number;
+ username: string;
+ password?: string;
+ use_tls: boolean;
+ }): Promise {
+ const response = await api.put('/users/smtp-config', data);
+ return response.data;
+ },
+
+ async remove(): Promise {
+ await api.delete('/users/smtp-config');
+ },
+};
+
export default api;