bvandeusen
aa67a09b80
New internal/mailer/ package:
- Sender interface with two impls: SMTPSender (production, reads
smtp_config at send time so admin edits apply without restart;
uses stdlib net/smtp + STARTTLS) and FakeSender (test/concurrent-
safe call recorder).
- Embedded text + HTML templates for the password reset email,
rendered via stdlib text/template + html/template. The HTML
uses the FabledSword forest-teal accent color.
- ErrNotConfigured surfaces when smtp_config.enabled is false or
required fields are empty; callers like the future forgot-password
handler will treat this as "log and pretend success" to avoid
user-enumeration leaks.
Three admin endpoints under RequireAdmin:
- GET /api/admin/smtp-config — returns the singleton; password
field is masked ("***" or "").
- PUT /api/admin/smtp-config — updates settings. Validates
host + from_address are non-empty when enabled=true. Empty
password in the request preserves the stored value (so the
operator doesn't have to re-enter it on every save).
- POST /api/admin/smtp-config/test — sends a real test email to
the calling admin's email. 400 if admin has no email; 500 with
the error message on send failure (so the operator can debug
config without grep-then-trace through logs).
Tests cover the password-mask, password-preservation-on-empty,
enabled-requires-host-and-from validation, and the no-email-on-file
rejection. Mailer unit tests cover the fake recorder and template
rendering. The "real SMTP send" path needs a live server and isn't
covered in CI; the FakeSender covers that role for downstream tests.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
30 lines
1.0 KiB
HTML
30 lines
1.0 KiB
HTML
<!doctype html>
|
|
<html>
|
|
<body style="font-family: -apple-system, system-ui, sans-serif; max-width: 560px; margin: 0 auto; padding: 24px; color: #2c2c2c;">
|
|
<p>Hello <strong>{{.Username}}</strong>,</p>
|
|
|
|
<p>A password reset was requested for your Minstrel account. To set a new
|
|
password, click the button below within <strong>{{.ExpiryHours}}</strong> hours:</p>
|
|
|
|
<p style="margin: 24px 0;">
|
|
<a href="{{.ResetURL}}" style="display: inline-block; padding: 12px 24px;
|
|
background: #4a6b5c; color: #ffffff; text-decoration: none; border-radius: 6px;
|
|
font-weight: 500;">Reset password</a>
|
|
</p>
|
|
|
|
<p style="font-size: 14px; color: #666;">
|
|
Or copy this URL into your browser:<br>
|
|
<code style="word-break: break-all;">{{.ResetURL}}</code>
|
|
</p>
|
|
|
|
<p style="font-size: 14px; color: #666;">
|
|
If you didn't request this, you can safely ignore this email — your
|
|
password won't change.
|
|
</p>
|
|
|
|
<p style="font-size: 12px; color: #999; margin-top: 32px; border-top: 1px solid #eee; padding-top: 16px;">
|
|
— Minstrel
|
|
</p>
|
|
</body>
|
|
</html>
|