Linus Rath
ab72fc06ff
- Add Stalwart API client library (lib/stalwart/client.ts) - Add server-side proxy routes for auth, crypto, password, principal, probe - Add account security Zustand store with full state management - Add Security settings tab with password change, display name, TOTP 2FA, app passwords, and encryption-at-rest controls - Add stalwartFeaturesEnabled config flag (opt-out via STALWART_FEATURES=false) - Add i18n translations for all 8 locales (en, de, es, fr, it, ja, nl, pt) - Add tests for Stalwart client (24 tests) and security store (29 tests)
95 lines
3.1 KiB
TypeScript
95 lines
3.1 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import { cookies } from 'next/headers';
|
|
import { logger } from '@/lib/logger';
|
|
import { decryptSession } from '@/lib/auth/crypto';
|
|
import { SESSION_COOKIE } from '@/lib/auth/session-cookie';
|
|
|
|
async function getCredentials(request: NextRequest): Promise<{ serverUrl: string; authHeader: string; username: string } | null> {
|
|
const authHeader = request.headers.get('Authorization');
|
|
const serverUrl = request.headers.get('X-JMAP-Server-URL');
|
|
const username = request.headers.get('X-JMAP-Username');
|
|
|
|
if (authHeader && serverUrl && username) {
|
|
return { serverUrl, authHeader, username };
|
|
}
|
|
|
|
const cookieStore = await cookies();
|
|
const token = cookieStore.get(SESSION_COOKIE)?.value;
|
|
if (!token) return null;
|
|
|
|
const credentials = decryptSession(token);
|
|
if (!credentials) return null;
|
|
|
|
const basic = `Basic ${Buffer.from(`${credentials.username}:${credentials.password}`).toString('base64')}`;
|
|
return { serverUrl: credentials.serverUrl, authHeader: basic, username: credentials.username };
|
|
}
|
|
|
|
/**
|
|
* GET /api/account/stalwart/crypto
|
|
* Proxy to Stalwart GET /api/account/crypto
|
|
*/
|
|
export async function GET(request: NextRequest) {
|
|
try {
|
|
const creds = await getCredentials(request);
|
|
if (!creds) {
|
|
return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
|
|
}
|
|
|
|
const response = await fetch(`${creds.serverUrl}/api/account/crypto`, {
|
|
method: 'GET',
|
|
headers: { 'Authorization': creds.authHeader },
|
|
});
|
|
|
|
if (!response.ok) {
|
|
const text = await response.text();
|
|
logger.warn('Stalwart crypto info failed', { status: response.status });
|
|
return NextResponse.json(
|
|
{ error: 'Failed to fetch crypto info', details: text },
|
|
{ status: response.status }
|
|
);
|
|
}
|
|
|
|
const data = await response.json();
|
|
return NextResponse.json(data);
|
|
} catch (error) {
|
|
logger.error('Stalwart crypto proxy error', { error: error instanceof Error ? error.message : 'Unknown' });
|
|
return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
|
|
}
|
|
}
|
|
|
|
/**
|
|
* POST /api/account/stalwart/crypto
|
|
* Proxy to Stalwart POST /api/account/crypto
|
|
*/
|
|
export async function POST(request: NextRequest) {
|
|
try {
|
|
const creds = await getCredentials(request);
|
|
if (!creds) {
|
|
return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
|
|
}
|
|
|
|
const body = await request.json();
|
|
|
|
const response = await fetch(`${creds.serverUrl}/api/account/crypto`, {
|
|
method: 'POST',
|
|
headers: {
|
|
'Authorization': creds.authHeader,
|
|
'Content-Type': 'application/json',
|
|
},
|
|
body: JSON.stringify(body),
|
|
});
|
|
|
|
const data = await response.json();
|
|
|
|
if (!response.ok) {
|
|
logger.warn('Stalwart crypto update failed', { status: response.status });
|
|
return NextResponse.json(data, { status: response.status });
|
|
}
|
|
|
|
return NextResponse.json(data);
|
|
} catch (error) {
|
|
logger.error('Stalwart crypto update proxy error', { error: error instanceof Error ? error.message : 'Unknown' });
|
|
return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
|
|
}
|
|
}
|