copilot-swe-agent[bot]
a918421945
Fix all 33 ruff linting errors causing CI failures
...
- Remove unused imports (F401) across 17 files
- Fix f-strings without placeholders (F541) in 3 files
- Add noqa: E712 to SQLAlchemy == True comparisons (valid ORM pattern)
- Preserve alembic side-effect import with noqa: F401
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/99c3a25f-3479-473d-ac95-9faaa0ddd55b
2026-03-23 10:38:39 +00:00
Christian Krakau-Louis
46104d7d21
Merge pull request #18 from christianlouis/copilot/add-account-management-functionality
...
Fix CI: pytest module resolution, black formatting, authlib security vulnerabilities
2026-03-23 11:33:12 +01:00
copilot-swe-agent[bot]
f7fc10f2dc
fix: bump authlib 1.6.6 → 1.6.9 to patch four security vulnerabilities
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/a88d0d53-5145-4ae3-b86b-5374c55e4a2b
2026-03-23 10:30:22 +00:00
copilot-swe-agent[bot]
5c84441195
fix: add pythonpath = . to pytest.ini to resolve ModuleNotFoundError for app module
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/a88d0d53-5145-4ae3-b86b-5374c55e4a2b
2026-03-23 10:27:33 +00:00
copilot-swe-agent[bot]
9f8f63ec17
Fix authlib security vulnerabilities: upgrade 1.6.6 -> 1.6.9
...
Fixes four CVEs:
- OIDC hash binding fail-open cryptographic verification
- JWE RSA1_5 Bleichenbacher padding oracle
- alg:none signature verification bypass
- JWS JWK header injection signature verification bypass
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/beb47db2-da25-416a-8fb0-c1452a3b22a7
2026-03-23 10:27:14 +00:00
copilot-swe-agent[bot]
bcbef88803
Fix CI failures: add backend/conftest.py for module resolution and run black formatting
...
- Add backend/conftest.py that inserts the backend directory into sys.path,
fixing ModuleNotFoundError when pytest runs from the backend/ directory
(as CI does with `cd backend && pytest tests/`)
- Run black formatter on all 28 backend files that needed reformatting
- All 53 tests pass with both `pytest tests/` and `python -m pytest tests/`
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/beb47db2-da25-416a-8fb0-c1452a3b22a7
2026-03-23 10:24:28 +00:00
copilot-swe-agent[bot]
681e0582f6
Address code review: fix imports, salt hashing, conditional delivery message
...
- Move asyncio import to module level in gmail_service.py
- Move datetime import to module level in providers.py
- Use hashlib.sha256 for per-user salt generation (no truncation risk)
- Make delivery method message conditional in AddMailAccountModal
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/de3ef930-a980-4958-8a9d-a2c802918e81
2026-03-22 19:05:41 +00:00
copilot-swe-agent[bot]
b05d489563
Fix pre-existing bugs: PBKDF2 import, test function names, salt truncation
...
- Fix cryptography import: PBKDF2 -> PBKDF2HMAC
- Fix test_security.py: use CredentialEncryption class instead of non-existent functions
- Fix salt generation to include user_id in differentiation
- Remove unavailable poplib3 dependency
- All 53 tests pass
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/de3ef930-a980-4958-8a9d-a2c802918e81
2026-03-22 19:03:22 +00:00
copilot-swe-agent[bot]
40150da3a9
Add Gmail API injection, provider presets, delivery method, and frontend wizard
...
- Add gmail_service.py with Gmail API users.messages.insert() for direct email injection
- Add DeliveryMethod enum and GmailCredential model to database models
- Add delivery_method field to MailAccount schema and model
- Create providers.py endpoint with 12 provider presets (Gmail, GMX, WEB.DE, Outlook, Yahoo, AOL, T-Online, 1&1/IONOS, Freenet, Posteo, mail.de, iCloud)
- Expand MailServerAutoDetect with 30+ domain mappings
- Update Celery tasks to prefer Gmail API injection, with SMTP fallback
- Add ProviderWizard.tsx frontend component for quick provider setup
- Update AddMailAccountModal.tsx with wizard integration
- Add Google API Python client libraries to requirements.txt
- Add Gmail API config settings
- Add unit tests for Gmail service and provider presets
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/de3ef930-a980-4958-8a9d-a2c802918e81
2026-03-22 19:00:30 +00:00
dependabot[bot]
7838ed17f9
Bump cryptography from 44.0.1 to 46.0.5 in /backend
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 44.0.1 to 46.0.5.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/44.0.1...46.0.5 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 46.0.5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-11 01:53:51 +00:00
copilot-swe-agent[bot]
da4d501acb
fix: Address code review feedback - datetime, event_loop, and readability
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-06 22:05:09 +00:00
copilot-swe-agent[bot]
e64f0f2705
feat: Add security hardening, agentic coding infrastructure, and test framework
...
- Add SECRET_KEY and ENCRYPTION_KEY validation on startup
- Implement security headers middleware (X-Frame-Options, CSP, HSTS)
- Add CSRF protection middleware
- Create comprehensive GitHub issue templates and PR template
- Add Makefile with common development tasks
- Configure pre-commit hooks (black, ruff, mypy, bandit, detect-secrets)
- Create docs/CODING_PATTERNS.md with best practices
- Create docs/ERRORS.md documenting all error codes
- Add Architecture Decision Records (ADR) for Celery and Fernet encryption
- Create CHANGELOG.md for version tracking
- Set up pytest test infrastructure with fixtures and factories
- Add sample unit tests for security and config validation
- Create CI/CD workflows (test, lint, security)
- Add comprehensive TODO.md with milestones and progress tracking
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-06 22:01:11 +00:00
Christian Krakau-Louis
27845caf66
Merge pull request #5 from christianlouis/dependabot/pip/backend/authlib-1.6.6
...
Bump authlib from 1.6.5 to 1.6.6 in /backend
2026-02-01 14:56:19 +01:00
dependabot[bot]
0928cc6161
Bump authlib from 1.6.5 to 1.6.6 in /backend
...
Bumps [authlib](https://github.com/authlib/authlib ) from 1.6.5 to 1.6.6.
- [Release notes](https://github.com/authlib/authlib/releases )
- [Changelog](https://github.com/authlib/authlib/blob/main/docs/changelog.rst )
- [Commits](https://github.com/authlib/authlib/compare/v1.6.5...v1.6.6 )
---
updated-dependencies:
- dependency-name: authlib
dependency-version: 1.6.6
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-01 13:55:31 +00:00
dependabot[bot]
50143ef5f6
Bump cryptography from 42.0.4 to 44.0.1 in /backend
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 42.0.4 to 44.0.1.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/42.0.4...44.0.1 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 44.0.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-01 13:55:31 +00:00
copilot-swe-agent[bot]
439d1f2ec7
SECURITY: Update dependencies to fix 11 vulnerabilities (aiohttp, authlib, cryptography, fastapi, python-multipart)
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-01 13:00:31 +00:00
copilot-swe-agent[bot]
bb535028cc
Fix code review issues: remove duplicate dependency, improve error handling, fix hardcoded credentials, improve encryption salt
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-01 12:55:26 +00:00
copilot-swe-agent[bot]
78731566c9
Add comprehensive documentation: architecture, implementation, migration guides, and feature summary
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-01 12:53:32 +00:00
copilot-swe-agent[bot]
5be2794c95
Add FastAPI application, API endpoints, Celery workers, and Docker configuration
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-01 12:48:32 +00:00
copilot-swe-agent[bot]
130b53d37f
Add backend foundation: database models, security, and mail processing service
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-01 12:44:22 +00:00