legacy-email-proxy

11 Commits

Author	SHA1	Message	Date
lyrathorpeandEmma Thorpe	9a4bab33e2	feat: ignore client-supplied POP3 credentials (#15 ) Build and publish container / build (push) Successful in 12m15s Details Accept any POP3 `USER`/`PASS` from the client and discard them. The proxy always authenticates to the IMAP backend with the configured `BACKEND_IMAP_USER` / `BACKEND_IMAP_PASS`. ## Changes - `handle_user` / `handle_pass`: accept client credentials unconditionally, no validation. - `authenticate`: always use backend credentials; remove the fallback that connected with client-supplied credentials when backend credentials were unset. Raise a clear configuration error when backend credentials are missing. - Tests: client credentials are ignored; missing backend credentials are reported. Closes #14 --------- Co-authored-by: Emma Thorpe <emma.thorpe@citrix.com> Reviewed-on: #15	2026-06-17 18:16:37 +01:00
lyrathorpe	e51740b8db	Document unauthenticated listener exposure (#13 ) Adds a Security section: the front-end POP3/SMTP listeners are unauthenticated and must be bound to a trusted internal network only. Closes #9 Reviewed-on: #13 Co-authored-by: Lyra Thorpe <iam@emmathe.dev> Co-committed-by: Lyra Thorpe <iam@emmathe.dev>	2026-06-17 17:33:51 +01:00
lyrathorpe	4ab12f8ce6	Cache pip before install and fix cache key expansion (#12 ) Moves the actions/cache step ahead of the install step and uses the runner.os Actions expression in the cache key. Closes #8 Reviewed-on: #12 Co-authored-by: Lyra Thorpe <iam@emmathe.dev> Co-committed-by: Lyra Thorpe <iam@emmathe.dev>	2026-06-17 17:33:37 +01:00
lyrathorpe	7930235efd	Run container as non-root user (#11 ) Build and publish container / build (push) Successful in 5m59s Details Adds a dedicated non-root user and switches to it before CMD. Verified the container runs as a non-root uid. Closes #7 Reviewed-on: #11 Co-authored-by: Lyra Thorpe <iam@emmathe.dev> Co-committed-by: Lyra Thorpe <iam@emmathe.dev>	2026-06-17 17:33:23 +01:00
lyrathorpe	bde999185a	Fix POP3/SMTP correctness and IMAP robustness (#10 ) Build and publish container / build (push) Has been cancelled Details POP3/SMTP proxy correctness fixes. - RETR now returns the message body (reads the FETCH tuple). Closes #1 - Maildrop snapshotted once; DELE marks survive STAT/LIST/UIDL. Closes #2 - RETR/TOP dot-stuff and CRLF-terminate per RFC 1939. Closes #3 - SMTP relays raw bytes, no UTF-8 mangling. Closes #4 - Message sizes batched in one IMAP round-trip off the event loop; IMAP timeout added. Closes #5 - POP3 TOP implemented. Closes #6 pytest: 10 passed. Reviewed-on: #10 Co-authored-by: Lyra Thorpe <iam@emmathe.dev> Co-committed-by: Lyra Thorpe <iam@emmathe.dev>	2026-06-17 17:33:09 +01:00
lyrathorpe	e05f08995e	chore: separate runtime and dev dependencies, add pytest config and CI cache Build and publish container / build (push) Successful in 8m20s Details	2026-06-17 16:40:39 +01:00
lyrathorpe	91d70cf10c	test: finalize CI test coverage and fix dependency import path	2026-06-17 16:39:22 +01:00
lyrathorpe	aa746b780d	test: add pytest coverage and run tests in CI Build and publish container / build (push) Failing after 1m7s Details	2026-06-17 16:14:22 +01:00
lyrathorpe	739280f930	fix: correct workflow path filter for proxy_server.py	2026-06-17 16:12:39 +01:00
lyrathorpe	e6eca290ba	chore: add documented POP3/SMTP proxy scaffold and Renovate config	2026-06-17 16:08:06 +01:00
lyrathorpe	a41fbf04da	feat(requirements): add a summary of project requirements	2026-06-17 15:53:07 +01:00