2020-10-20 16:44:22 +02:00
|
|
|
from dataclasses import dataclass
|
|
|
|
|
2020-01-29 17:57:11 +01:00
|
|
|
from flask import render_template, redirect, url_for, flash, request
|
2019-07-06 23:25:52 +02:00
|
|
|
from flask_login import login_required, current_user
|
2020-05-02 12:15:03 +02:00
|
|
|
from itsdangerous import TimestampSigner, SignatureExpired
|
2020-10-24 15:50:29 +02:00
|
|
|
from sqlalchemy.exc import IntegrityError
|
2019-07-06 23:25:52 +02:00
|
|
|
|
2020-11-03 10:39:08 +01:00
|
|
|
from app.alias_utils import check_alias_prefix
|
2020-05-02 12:15:03 +02:00
|
|
|
from app.config import (
|
|
|
|
DISABLE_ALIAS_SUFFIX,
|
|
|
|
CUSTOM_ALIAS_SECRET,
|
|
|
|
)
|
2019-07-06 23:25:52 +02:00
|
|
|
from app.dashboard.base import dashboard_bp
|
|
|
|
from app.extensions import db
|
|
|
|
from app.log import LOG
|
2020-05-23 11:51:35 +02:00
|
|
|
from app.models import (
|
|
|
|
Alias,
|
|
|
|
CustomDomain,
|
|
|
|
DeletedAlias,
|
|
|
|
Mailbox,
|
|
|
|
User,
|
|
|
|
AliasMailbox,
|
|
|
|
DomainDeletedAlias,
|
|
|
|
)
|
2019-12-31 17:11:42 +01:00
|
|
|
from app.utils import convert_to_id, random_word, word_exist
|
2019-07-06 23:25:52 +02:00
|
|
|
|
2020-05-02 12:15:03 +02:00
|
|
|
signer = TimestampSigner(CUSTOM_ALIAS_SECRET)
|
|
|
|
|
2019-07-06 23:25:52 +02:00
|
|
|
|
2020-05-02 12:34:11 +02:00
|
|
|
def available_suffixes(user: User) -> [bool, str, str]:
|
|
|
|
"""Return (is_custom_domain, alias-suffix, time-signed alias-suffix)"""
|
2020-10-09 22:54:13 +02:00
|
|
|
user_custom_domains = user.verified_custom_domains()
|
2020-05-02 12:34:11 +02:00
|
|
|
|
|
|
|
# List of (is_custom_domain, alias-suffix, time-signed alias-suffix)
|
|
|
|
suffixes = []
|
|
|
|
|
|
|
|
# put custom domain first
|
2020-10-05 21:00:52 +02:00
|
|
|
# for each user domain, generate both the domain and a random suffix version
|
2020-05-02 12:34:11 +02:00
|
|
|
for alias_domain in user_custom_domains:
|
2020-10-09 22:54:13 +02:00
|
|
|
suffix = "@" + alias_domain.domain
|
2020-12-31 12:50:04 +01:00
|
|
|
suffix_info = (True, suffix, signer.sign(suffix).decode())
|
2020-12-31 13:59:03 +01:00
|
|
|
|
|
|
|
# put the default domain to top
|
2020-12-31 14:06:32 +01:00
|
|
|
if user.default_alias_custom_domain_id == alias_domain.id:
|
2020-12-31 13:59:03 +01:00
|
|
|
suffixes.insert(0, suffix_info)
|
|
|
|
else:
|
|
|
|
suffixes.append(suffix_info)
|
|
|
|
|
2020-10-09 22:54:13 +02:00
|
|
|
if alias_domain.random_prefix_generation:
|
|
|
|
suffix = "." + random_word() + "@" + alias_domain.domain
|
2020-10-05 21:00:52 +02:00
|
|
|
suffixes.append((True, suffix, signer.sign(suffix).decode()))
|
2020-05-02 12:34:11 +02:00
|
|
|
|
2020-10-15 16:21:31 +02:00
|
|
|
# then SimpleLogin domain
|
2020-12-31 13:59:03 +01:00
|
|
|
for domain in user.get_sl_domains():
|
|
|
|
suffix = (
|
|
|
|
("" if DISABLE_ALIAS_SUFFIX else "." + random_word()) + "@" + domain.domain
|
|
|
|
)
|
2020-12-31 12:50:04 +01:00
|
|
|
suffix_info = (False, suffix, signer.sign(suffix).decode())
|
2020-12-31 13:59:03 +01:00
|
|
|
|
|
|
|
# put the default domain to top
|
2020-12-31 14:14:56 +01:00
|
|
|
if user.default_alias_public_domain_id == domain.id:
|
2020-12-31 13:59:03 +01:00
|
|
|
suffixes.insert(0, suffix_info)
|
|
|
|
else:
|
|
|
|
suffixes.append(suffix_info)
|
2020-05-02 12:34:11 +02:00
|
|
|
|
|
|
|
return suffixes
|
|
|
|
|
|
|
|
|
2020-10-20 16:44:22 +02:00
|
|
|
@dataclass
|
|
|
|
class SuffixInfo:
|
2020-12-31 12:50:04 +01:00
|
|
|
"""Alias suffix info"""
|
|
|
|
|
|
|
|
# whether this is a custom domain
|
2020-10-20 16:44:22 +02:00
|
|
|
is_custom: bool
|
|
|
|
suffix: str
|
|
|
|
signed_suffix: str
|
2020-12-31 12:50:04 +01:00
|
|
|
|
|
|
|
# whether this is a premium SL domain. Not apply to custom domain
|
2020-10-20 16:44:22 +02:00
|
|
|
is_premium: bool
|
|
|
|
|
|
|
|
|
|
|
|
def available_suffixes_more_info(user: User) -> [SuffixInfo]:
|
|
|
|
"""
|
|
|
|
Similar to as available_suffixes() but also return whether the suffix comes from a premium domain
|
|
|
|
Note that is-premium-domain is only relevant for SL domain
|
|
|
|
"""
|
|
|
|
user_custom_domains = user.verified_custom_domains()
|
|
|
|
|
|
|
|
suffixes: [SuffixInfo] = []
|
|
|
|
|
|
|
|
# put custom domain first
|
|
|
|
# for each user domain, generate both the domain and a random suffix version
|
|
|
|
for alias_domain in user_custom_domains:
|
|
|
|
suffix = "@" + alias_domain.domain
|
|
|
|
suffixes.append(SuffixInfo(True, suffix, signer.sign(suffix).decode(), False))
|
|
|
|
if alias_domain.random_prefix_generation:
|
|
|
|
suffix = "." + random_word() + "@" + alias_domain.domain
|
2020-12-31 13:59:03 +01:00
|
|
|
suffix_info = SuffixInfo(True, suffix, signer.sign(suffix).decode(), False)
|
|
|
|
# put the default domain to top
|
2020-12-31 14:06:32 +01:00
|
|
|
if user.default_alias_custom_domain_id == alias_domain.id:
|
2020-12-31 13:59:03 +01:00
|
|
|
suffixes.insert(0, suffix_info)
|
|
|
|
else:
|
|
|
|
suffixes.append(suffix_info)
|
2020-10-20 16:44:22 +02:00
|
|
|
|
|
|
|
# then SimpleLogin domain
|
|
|
|
for sl_domain in user.get_sl_domains():
|
|
|
|
suffix = (
|
|
|
|
("" if DISABLE_ALIAS_SUFFIX else "." + random_word())
|
|
|
|
+ "@"
|
|
|
|
+ sl_domain.domain
|
|
|
|
)
|
2020-12-31 13:59:03 +01:00
|
|
|
suffix_info = SuffixInfo(
|
|
|
|
False, suffix, signer.sign(suffix).decode(), sl_domain.premium_only
|
2020-10-20 16:44:22 +02:00
|
|
|
)
|
2020-12-31 13:59:03 +01:00
|
|
|
# put the default domain to top
|
2020-12-31 14:14:56 +01:00
|
|
|
if user.default_alias_public_domain_id == sl_domain.id:
|
2020-12-31 13:59:03 +01:00
|
|
|
suffixes.insert(0, suffix_info)
|
|
|
|
else:
|
|
|
|
suffixes.append(suffix_info)
|
2020-10-20 16:44:22 +02:00
|
|
|
|
|
|
|
return suffixes
|
|
|
|
|
|
|
|
|
2019-07-06 23:25:52 +02:00
|
|
|
@dashboard_bp.route("/custom_alias", methods=["GET", "POST"])
|
|
|
|
@login_required
|
|
|
|
def custom_alias():
|
2020-01-22 00:03:25 +01:00
|
|
|
# check if user has not exceeded the alias quota
|
2019-12-22 17:27:55 +01:00
|
|
|
if not current_user.can_create_new_alias():
|
2020-07-15 19:14:37 +02:00
|
|
|
LOG.warning("user %s tries to create custom alias", current_user)
|
2020-01-30 04:52:56 +01:00
|
|
|
flash(
|
|
|
|
"You have reached free plan limit, please upgrade to create new aliases",
|
|
|
|
"warning",
|
|
|
|
)
|
2019-07-06 23:25:52 +02:00
|
|
|
return redirect(url_for("dashboard.index"))
|
|
|
|
|
2020-01-22 00:03:25 +01:00
|
|
|
user_custom_domains = [cd.domain for cd in current_user.verified_custom_domains()]
|
2020-10-20 16:44:22 +02:00
|
|
|
suffixes = available_suffixes_more_info(current_user)
|
|
|
|
at_least_a_premium_domain = False
|
|
|
|
for suffix in suffixes:
|
|
|
|
if not suffix.is_custom and suffix.is_premium:
|
|
|
|
at_least_a_premium_domain = True
|
|
|
|
break
|
2019-07-06 23:25:52 +02:00
|
|
|
|
2020-05-03 16:50:39 +02:00
|
|
|
mailboxes = current_user.mailboxes()
|
2020-02-10 17:19:42 +01:00
|
|
|
|
2019-12-02 01:34:54 +01:00
|
|
|
if request.method == "POST":
|
2020-09-02 09:56:16 +02:00
|
|
|
alias_prefix = request.form.get("prefix").strip().lower().replace(" ", "")
|
2020-05-02 12:15:03 +02:00
|
|
|
signed_suffix = request.form.get("suffix")
|
2020-05-03 16:50:39 +02:00
|
|
|
mailbox_ids = request.form.getlist("mailboxes")
|
2020-02-05 11:36:06 +01:00
|
|
|
alias_note = request.form.get("note")
|
2020-01-22 00:03:25 +01:00
|
|
|
|
2020-11-03 10:39:08 +01:00
|
|
|
if not check_alias_prefix(alias_prefix):
|
|
|
|
flash(
|
|
|
|
"Only lowercase letters, numbers, dashes (-) and underscores (_) "
|
2020-11-18 10:38:35 +01:00
|
|
|
"are currently supported for alias prefix. Cannot be more than 40 letters",
|
2020-11-03 10:39:08 +01:00
|
|
|
"error",
|
|
|
|
)
|
|
|
|
return redirect(url_for("dashboard.custom_alias"))
|
|
|
|
|
2020-02-10 17:19:42 +01:00
|
|
|
# check if mailbox is not tempered with
|
2020-05-03 16:50:39 +02:00
|
|
|
mailboxes = []
|
|
|
|
for mailbox_id in mailbox_ids:
|
|
|
|
mailbox = Mailbox.get(mailbox_id)
|
|
|
|
if (
|
|
|
|
not mailbox
|
|
|
|
or mailbox.user_id != current_user.id
|
|
|
|
or not mailbox.verified
|
|
|
|
):
|
2020-02-10 17:19:42 +01:00
|
|
|
flash("Something went wrong, please retry", "warning")
|
|
|
|
return redirect(url_for("dashboard.custom_alias"))
|
2020-05-03 16:50:39 +02:00
|
|
|
mailboxes.append(mailbox)
|
|
|
|
|
|
|
|
if not mailboxes:
|
|
|
|
flash("At least one mailbox must be selected", "error")
|
|
|
|
return redirect(url_for("dashboard.custom_alias"))
|
2020-02-10 17:19:42 +01:00
|
|
|
|
2020-05-06 10:10:47 +02:00
|
|
|
# hypothesis: user will click on the button in the 600 secs
|
2020-05-02 12:15:03 +02:00
|
|
|
try:
|
2020-05-06 10:10:47 +02:00
|
|
|
alias_suffix = signer.unsign(signed_suffix, max_age=600).decode()
|
2020-05-02 12:15:03 +02:00
|
|
|
except SignatureExpired:
|
2020-05-21 20:05:54 +02:00
|
|
|
LOG.warning("Alias creation time expired for %s", current_user)
|
2020-05-02 12:15:03 +02:00
|
|
|
flash("Alias creation time is expired, please retry", "warning")
|
|
|
|
return redirect(url_for("dashboard.custom_alias"))
|
|
|
|
except Exception:
|
2020-08-24 19:58:21 +02:00
|
|
|
LOG.warning("Alias suffix is tampered, user %s", current_user)
|
2020-05-02 12:15:03 +02:00
|
|
|
flash("Unknown error, refresh the page", "error")
|
|
|
|
return redirect(url_for("dashboard.custom_alias"))
|
|
|
|
|
2020-05-02 12:27:54 +02:00
|
|
|
if verify_prefix_suffix(current_user, alias_prefix, alias_suffix):
|
2020-01-22 00:03:25 +01:00
|
|
|
full_alias = alias_prefix + alias_suffix
|
2020-01-23 11:45:52 +01:00
|
|
|
|
2020-10-09 11:48:52 +02:00
|
|
|
general_error_msg = f"{full_alias} cannot be used"
|
|
|
|
|
|
|
|
if Alias.get_by(email=full_alias):
|
|
|
|
alias = Alias.get_by(email=full_alias)
|
|
|
|
if alias.user_id == current_user.id:
|
|
|
|
flash(f"You already have this alias {full_alias}", "error")
|
|
|
|
else:
|
|
|
|
flash(general_error_msg, "error")
|
|
|
|
elif DomainDeletedAlias.get_by(email=full_alias):
|
|
|
|
domain_deleted_alias: DomainDeletedAlias = DomainDeletedAlias.get_by(
|
|
|
|
email=full_alias
|
2019-08-30 22:42:06 +02:00
|
|
|
)
|
2020-10-09 11:48:52 +02:00
|
|
|
custom_domain = domain_deleted_alias.domain
|
|
|
|
if domain_deleted_alias.user_id == current_user.id:
|
|
|
|
flash(
|
|
|
|
f"You have deleted this alias before. You can restore it on "
|
|
|
|
f"{custom_domain.domain} 'Deleted Alias' page",
|
|
|
|
"error",
|
|
|
|
)
|
|
|
|
else:
|
|
|
|
# should never happen as user can only choose their domains
|
|
|
|
LOG.exception(
|
|
|
|
"Deleted Alias %s does not belong to user %s",
|
|
|
|
domain_deleted_alias,
|
|
|
|
)
|
|
|
|
|
|
|
|
elif DeletedAlias.get_by(email=full_alias):
|
|
|
|
flash(general_error_msg, "error")
|
|
|
|
|
2020-01-22 00:03:25 +01:00
|
|
|
else:
|
2020-05-23 11:51:35 +02:00
|
|
|
custom_domain_id = None
|
|
|
|
# get the custom_domain_id if alias is created with a custom domain
|
|
|
|
if alias_suffix.startswith("@"):
|
|
|
|
alias_domain = alias_suffix[1:]
|
|
|
|
domain = CustomDomain.get_by(domain=alias_domain)
|
|
|
|
|
|
|
|
# check if the alias is currently in the domain trash
|
|
|
|
if domain and DomainDeletedAlias.get_by(
|
|
|
|
domain_id=domain.id, email=full_alias
|
|
|
|
):
|
|
|
|
flash(
|
|
|
|
f"Alias {full_alias} is currently in the {domain.domain} trash. "
|
|
|
|
f"Please remove it from the trash in order to re-create it.",
|
|
|
|
"warning",
|
|
|
|
)
|
|
|
|
return redirect(url_for("dashboard.custom_alias"))
|
|
|
|
|
2020-05-27 22:13:43 +02:00
|
|
|
if domain:
|
|
|
|
custom_domain_id = domain.id
|
2020-05-23 11:51:35 +02:00
|
|
|
|
2020-10-24 15:50:29 +02:00
|
|
|
try:
|
|
|
|
alias = Alias.create(
|
|
|
|
user_id=current_user.id,
|
|
|
|
email=full_alias,
|
|
|
|
note=alias_note,
|
|
|
|
mailbox_id=mailboxes[0].id,
|
|
|
|
custom_domain_id=custom_domain_id,
|
|
|
|
)
|
|
|
|
db.session.flush()
|
|
|
|
except IntegrityError:
|
|
|
|
LOG.warning("Alias %s already exists", full_alias)
|
|
|
|
db.session.rollback()
|
|
|
|
flash("Unknown error, please retry", "error")
|
|
|
|
return redirect(url_for("dashboard.custom_alias"))
|
2020-05-03 16:50:39 +02:00
|
|
|
|
|
|
|
for i in range(1, len(mailboxes)):
|
|
|
|
AliasMailbox.create(
|
2020-08-27 10:20:48 +02:00
|
|
|
alias_id=alias.id,
|
|
|
|
mailbox_id=mailboxes[i].id,
|
2020-05-03 16:50:39 +02:00
|
|
|
)
|
2020-01-23 11:45:52 +01:00
|
|
|
|
2019-07-06 23:25:52 +02:00
|
|
|
db.session.commit()
|
2020-01-22 00:03:25 +01:00
|
|
|
flash(f"Alias {full_alias} has been created", "success")
|
2019-07-06 23:25:52 +02:00
|
|
|
|
2020-03-17 11:51:40 +01:00
|
|
|
return redirect(url_for("dashboard.index", highlight_alias_id=alias.id))
|
2020-01-22 00:03:25 +01:00
|
|
|
# only happen if the request has been "hacked"
|
|
|
|
else:
|
|
|
|
flash("something went wrong", "warning")
|
2019-07-06 23:25:52 +02:00
|
|
|
|
2020-05-02 12:34:11 +02:00
|
|
|
return render_template(
|
|
|
|
"dashboard/custom_alias.html",
|
|
|
|
user_custom_domains=user_custom_domains,
|
|
|
|
suffixes=suffixes,
|
2020-10-20 16:44:22 +02:00
|
|
|
at_least_a_premium_domain=at_least_a_premium_domain,
|
2020-05-02 12:34:11 +02:00
|
|
|
mailboxes=mailboxes,
|
|
|
|
)
|
2020-01-22 00:03:25 +01:00
|
|
|
|
|
|
|
|
2020-10-15 16:21:31 +02:00
|
|
|
def verify_prefix_suffix(user: User, alias_prefix, alias_suffix) -> bool:
|
2020-01-22 00:03:25 +01:00
|
|
|
"""verify if user could create an alias with the given prefix and suffix"""
|
2020-01-22 23:03:52 +01:00
|
|
|
if not alias_prefix or not alias_suffix: # should be caught on frontend
|
|
|
|
return False
|
|
|
|
|
2020-05-02 12:27:54 +02:00
|
|
|
user_custom_domains = [cd.domain for cd in user.verified_custom_domains()]
|
2020-01-22 00:03:25 +01:00
|
|
|
alias_prefix = alias_prefix.strip()
|
|
|
|
alias_prefix = convert_to_id(alias_prefix)
|
|
|
|
|
|
|
|
# make sure alias_suffix is either .random_word@simplelogin.co or @my-domain.com
|
|
|
|
alias_suffix = alias_suffix.strip()
|
2020-10-07 17:57:02 +02:00
|
|
|
# alias_domain_prefix is either a .random_word or ""
|
2020-10-05 21:00:52 +02:00
|
|
|
alias_domain_prefix, alias_domain = alias_suffix.split("@", 1)
|
2020-01-22 10:22:59 +01:00
|
|
|
|
2020-10-07 17:57:02 +02:00
|
|
|
# alias_domain must be either one of user custom domains or built-in domains
|
2020-10-15 16:21:31 +02:00
|
|
|
if alias_domain not in user.available_alias_domains():
|
2020-10-07 17:57:02 +02:00
|
|
|
LOG.exception("wrong alias suffix %s, user %s", alias_suffix, user)
|
|
|
|
return False
|
|
|
|
|
2020-10-15 16:21:31 +02:00
|
|
|
# SimpleLogin domain case:
|
2020-10-07 17:57:02 +02:00
|
|
|
# 1) alias_suffix must start with "." and
|
|
|
|
# 2) alias_domain_prefix must come from the word list
|
2020-10-15 16:21:31 +02:00
|
|
|
if (
|
|
|
|
alias_domain in user.available_sl_domains()
|
|
|
|
and alias_domain not in user_custom_domains
|
2020-10-20 16:42:05 +02:00
|
|
|
# when DISABLE_ALIAS_SUFFIX is true, alias_domain_prefix is empty
|
|
|
|
and not DISABLE_ALIAS_SUFFIX
|
2020-10-15 16:21:31 +02:00
|
|
|
):
|
2020-10-20 16:42:05 +02:00
|
|
|
|
2020-10-07 17:57:02 +02:00
|
|
|
if not alias_domain_prefix.startswith("."):
|
|
|
|
LOG.exception("User %s submits a wrong alias suffix %s", user, alias_suffix)
|
2020-01-22 00:03:25 +01:00
|
|
|
return False
|
|
|
|
|
2020-10-07 17:57:02 +02:00
|
|
|
random_word_part = alias_domain_prefix[1:]
|
2020-01-22 00:03:25 +01:00
|
|
|
if not word_exist(random_word_part):
|
2020-07-17 12:59:07 +02:00
|
|
|
LOG.exception(
|
2020-01-22 00:03:25 +01:00
|
|
|
"alias suffix %s needs to start with a random word, user %s",
|
|
|
|
alias_suffix,
|
|
|
|
user,
|
|
|
|
)
|
|
|
|
return False
|
2020-10-05 21:00:52 +02:00
|
|
|
else:
|
|
|
|
if alias_domain not in user_custom_domains:
|
|
|
|
if not DISABLE_ALIAS_SUFFIX:
|
|
|
|
LOG.exception("wrong alias suffix %s, user %s", alias_suffix, user)
|
|
|
|
return False
|
|
|
|
|
2020-10-15 16:21:31 +02:00
|
|
|
if alias_domain not in user.available_sl_domains():
|
2020-10-05 21:00:52 +02:00
|
|
|
LOG.exception("wrong alias suffix %s, user %s", alias_suffix, user)
|
|
|
|
return False
|
2020-01-22 00:03:25 +01:00
|
|
|
|
|
|
|
return True
|