letter_thief 0.1.1 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 39bd9fdf0035b1bf8b6ffdaadb8dd5df7eca96b2d9bb03c7b0a9db6c0dc80667
-  data.tar.gz: 213afbdd43435763f9b2c40e5d62f3190a99ac96e8d2e97cffad46165ba43170
+  metadata.gz: f3b860cc3ad45c5e200e2cb4b5d9610fd6a2e8438131de9b24dc2c8c902390f5
+  data.tar.gz: d5ce85e83a08a78010c79bfd3ca77f14f3d3c3f8e3632458bd0eb0ffb0886f53
 SHA512:
-  metadata.gz: c84699514d01c43ee6fe829a98fab49642c682fbeab3cd4aa1b683b647426a37c8d3dcb5ab49e8392afa81990bc6dc7fcfae5d0c49d617003c6d9b9e637053a6
-  data.tar.gz: eb1d35d8fec2b7130d15efd7ab616598a74d2e50d57da32a32b294292cad9215ad422218c7c0ed52940a3ff8a09059cd74de5df9cb3835b0d42105969fdfbf68
+  metadata.gz: f698e01a0984e8d8f4404892831ae71275d5fd1ae35077a5c0b58ce1cb7ab1bd1eacf2d9a567a47d09ad4ea017ab042ae5ab9b0aefbadf473e224a656b043c8e
+  data.tar.gz: 5f817d2ddbd8260fe90b9aab6c9c7433361df14f0944e45ff3fb1c0751b0d4e931482e9f4cccba2f49bdaa13b43036ca6ce3162280c513c4f1df7fb5174e5461

data/README.md

@@ -52,7 +52,7 @@ Mount the engine in your routes, protecting it.
 The code below might be different depending on how you authenticate your users.
 
 ```ruby
-authenticate :user, ->(user) { sys_manager&.administrator? } do
+authenticate :user, ->(user) { user&.administrator? } do
   mount LetterThief::Engine => "/letter_thief"
 end
 ```

data/app/controllers/letter_thief/email_messages_controller.rb

@@ -4,6 +4,13 @@ module LetterThief
   class EmailMessagesController < ApplicationController
     layout "letter_thief/application"
 
+    before_action :turn_off_csp_nonce_generation
+    before_action :set_email, only: [:show, :destroy]
+
+    content_security_policy do |policy|
+      policy.style_src :self, :https, :unsafe_inline
+    end
+
     PAGE_SIZE = 20
 
     def index
@@ -11,7 +18,27 @@ module LetterThief
     end
 
     def show
+    end
+
+    def destroy
+      redirect_to email_messages_path if @email.destroy
+    end
+
+    def destroy_all
+      EmailMessage.destroy_all
+      redirect_to email_messages_path, notice: "All email messages have been deleted"
+    end
+
+    private
+
+    def set_email
       @email = EmailMessage.find(params[:id])
     end
+
+    private
+
+    def turn_off_csp_nonce_generation
+      request.content_security_policy_nonce_directives = []
+    end
   end
 end

data/app/models/letter_thief/email_message.rb

@@ -2,7 +2,12 @@ module LetterThief
   class EmailMessage < ApplicationRecord
     self.table_name = "letter_thief_email_messages"
 
-    has_many_attached :attachments
+    connects_to(**LetterThief.connects_to) if LetterThief.connects_to
+
+    if LetterThief.activestorage_available?
+      has_many_attached :attachments
+      has_one_attached :raw_email
+    end
 
     unless ActiveRecord::Base.connection.adapter_name.downcase.include?("postgresql")
       serialize :to, coder: JSON, type: Array

data/app/models/letter_thief/email_search.rb

@@ -42,7 +42,7 @@ module LetterThief
     private
 
     def parse_datetime(value)
-      DateTime.parse(value) if value.present?
+      Time.zone.parse(value) if value.present?
     rescue ArgumentError
       nil
     end

data/app/views/letter_thief/email_messages/_email_message.html.erb

@@ -0,0 +1,25 @@
+<%# locals:(email_message:) %>
+<tr>
+  <td>
+    <%= email_message.from&.join(", ") %>
+  </td>
+  <td>
+    <%= email_message.to&.join(", ") %>
+  </td>
+  <td>
+    <%= link_to email_message.subject.presence || "(no subject)", email_message_path(email_message) %>
+  </td>
+  <td>
+    <%= email_message.intercepted_at.strftime("%Y-%m-%d %H:%M") %>
+  </td>
+  <td>
+    <% if @email.respond_to?(:raw_email) %>
+      <%= number_to_human_size(email_message.raw_email.byte_size) %>
+    <% else %>
+      -
+    <% end %>
+  </td>
+  <td>
+    <%= button_to 'Delete', email_message_path(email_message), method: :delete, class: 'outline contrast' %>
+  </td>
+</tr>

data/app/views/letter_thief/email_messages/index.html.erb

@@ -1,6 +1,14 @@
 <% content_for :title, "Letter Thief" %>
 
-<h1>📬 Intercepted Emails</h1>
+<h1>📬 Intercepted Emails (Outbox)</h1>
+
+<p>
+  <% if LetterThief.activestorage_available? %>
+    Currently occupying <%= number_to_human_size(LetterThief.used_activestorage_space)%>
+  <% else %>
+    Attachments are not saved. In order to save the attachments you need to setup ActiveStorage.
+  <% end %>
+</p>
 
 <form method="get" style="margin-bottom: 1rem;">
   <fieldset class="grid">
@@ -33,7 +41,6 @@
   </fieldset>
 </form>
 
-
 <% if @search.total_count > 0 %>
   <p><%= pluralize(@search.total_count, "email") %> found</p>
 
@@ -44,21 +51,12 @@
       <th>To</th>
       <th>Subject</th>
       <th>Time</th>
+      <th>Size</th>
+      <th></th>
     </tr>
     </thead>
     <tbody>
-    <% @search.results.each do |email| %>
-      <tr>
-        <td><%= email.from&.join(", ") %></td>
-        <td><%= email.to&.join(", ") %></td>
-        <td>
-          <a href="<%= email_message_path(email) %>">
-            <%= email.subject.presence || "(no subject)" %>
-          </a>
-        </td>
-        <td><%= email.intercepted_at.strftime("%Y-%m-%d %H:%M") %></td>
-      </tr>
-    <% end %>
+      <%= render @search.results %>
     </tbody>
   </table>
 
@@ -89,6 +87,22 @@
       <% end %>
     </ul>
   </nav>
+
+  <%= button_to "Delete All Messages",
+      destroy_all_email_messages_path,
+      method: :delete,
+      class: "secondary outline",        
+      onclick: "return confirmDeleteAll(event)" %>
+
+  <script>
+    function confirmDeleteAll(event) {
+      event.preventDefault();
+      if (window.confirm('Are you sure you want to delete all messages? This action cannot be undone.')) {
+        event.target.closest('form').submit();
+      }
+      return false;
+    }
+  </script>
 <% else %>
   <p>No emails found.</p>
 <% end %>

data/app/views/letter_thief/email_messages/show.html.erb

@@ -1,6 +1,6 @@
 <% content_for :title, "Message ##{@email.id}" %>
 
-<p><a href="<%= email_messages_path %>">&larr; Back to Inbox 📬</a></p>
+<p><a href="<%= email_messages_path %>">&larr; Back to Outbox 📬</a></p>
 
 <section id="message_headers">
   <dl>
@@ -33,18 +33,29 @@
       <dt>BCC:</dt>
       <dd><%= @email.bcc.join(", ") %></dd>
     <% end %>
-
-    <% if @email.attachments.any? %>
-      <dt>Attachments:</dt>
-      <dd>
-        <% @email.attachments.each do |file| %>
-          <%= link_to file.filename, main_app.rails_blob_path(file, disposition: "attachment") %>
+    <% if @email.respond_to?(:attachments) %>
+        <% if @email.attachments.any? %>
+          <dt>Attachments:</dt>
+          <dd>
+            <% @email.attachments.each do |file| %>
+              <%= link_to file.filename, main_app.rails_blob_path(file, disposition: "attachment") %>
+            <% end %>
+          </dd>
         <% end %>
-      </dd>
     <% end %>
   </dl>
+
+  <% if @email.respond_to?(:raw_email) %>
+      <% if @email.raw_email.attached? %>
+        <%= link_to "Download", main_app.rails_blob_path(@email.raw_email, disposition: "attachment") %>
+      <% end %>
+  <% end %>
 </section>
 
+<% if !LetterThief.activestorage_available? %>
+  <p>Attachments are not saved. In order to save the attachments you need to setup ActiveStorage.</p>
+<% end %>
+
 <hr>
 
 <% if @email.multipart? %>

data/config/routes.rb

@@ -1,4 +1,6 @@
 LetterThief::Engine.routes.draw do
-  resources :email_messages, only: [:index, :show]
+  resources :email_messages, only: [:index, :show, :destroy] do
+    delete :destroy_all, on: :collection
+  end
   root "email_messages#index"
 end

data/lib/generators/letter_thief/templates/create_email_messages.rb.erb

@@ -21,7 +21,6 @@ class CreateLetterThiefEmailMessages < ActiveRecord::Migration<%= migration_vers
       t.text :body_text
       t.text :body_html
       t.text :headers
-      t.text :raw_message
       t.string :content_type
       t.datetime :intercepted_at
 

data/lib/letter_thief/engine.rb

@@ -1,13 +1,13 @@
-require "letter_thief/interceptor"
+require "letter_thief/observer"
 require "letter_thief/delivery_method"
 
 module LetterThief
   class Engine < ::Rails::Engine
     isolate_namespace LetterThief
 
-    initializer "letter_thief.add_interceptor" do
+    initializer "letter_thief.add_observer" do
       ActiveSupport.on_load(:action_mailer) do
-        ActionMailer::Base.register_interceptor(LetterThief::Interceptor)
+        ActionMailer::Base.register_observer(LetterThief::Observer)
       end
     end
 

data/lib/letter_thief/observer.rb

@@ -0,0 +1,40 @@
+module LetterThief
+  class Observer
+    def self.delivered_email(mail)
+      string_io = StringIO.new(mail.to_s)
+      email = EmailMessage.create!(
+        to: mail.to,
+        from: mail.from,
+        sender: mail.sender,
+        cc: mail.cc,
+        bcc: mail.bcc,
+        subject: mail.subject,
+        body_text: mail.text_part&.decoded || mail.body.decoded,
+        body_html: mail.html_part&.decoded,
+        headers: mail.header.to_s,
+        content_type: mail.content_type,
+        intercepted_at: Time.current
+      )
+
+      if LetterThief.activestorage_available?
+        Array(mail.attachments).each do |attachment|
+          ar_attachment = email.attachments.attach(
+            io: StringIO.new(attachment.body.decoded),
+            filename: attachment.filename,
+            content_type: attachment.mime_type
+          ).last
+          ar_attachment.blob.metadata["cid"] = attachment.cid
+          ar_attachment.blob.save!
+        end
+
+        email.raw_email.attach(
+          io: string_io,
+          filename: "message-#{email.id}.eml",
+          content_type: "message/rfc822"
+        )
+      end
+    rescue => e
+      Rails.logger.error("[LetterThief] Failed to store observed email: #{e.message}")
+    end
+  end
+end

data/lib/letter_thief/version.rb

@@ -1,3 +1,3 @@
 module LetterThief
-  VERSION = "0.1.1"
+  VERSION = "0.3.0"
 end

data/lib/letter_thief.rb

@@ -2,5 +2,18 @@ require "letter_thief/version"
 require "letter_thief/engine"
 
 module LetterThief
-  # Your code goes here...
+  mattr_accessor :connects_to
+
+  def self.used_activestorage_space
+    ActiveStorage::Blob
+      .joins(:attachments)
+      .where(active_storage_attachments: {
+        record_type: "LetterThief::EmailMessage"
+      }).sum(:byte_size)
+  end
+
+  def self.activestorage_available?
+    defined?(ActiveStorage) &&
+      ActiveRecord::Base.connection.table_exists?("active_storage_attachments")
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: letter_thief
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.3.0
 platform: ruby
 authors:
 - Alessandro Rodi
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-04-04 00:00:00.000000000 Z
+date: 2025-05-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -41,6 +41,7 @@ files:
 - app/models/letter_thief/email_message.rb
 - app/models/letter_thief/email_search.rb
 - app/views/layouts/letter_thief/application.html.erb
+- app/views/letter_thief/email_messages/_email_message.html.erb
 - app/views/letter_thief/email_messages/index.html.erb
 - app/views/letter_thief/email_messages/show.html.erb
 - config/routes.rb
@@ -49,7 +50,7 @@ files:
 - lib/letter_thief.rb
 - lib/letter_thief/delivery_method.rb
 - lib/letter_thief/engine.rb
-- lib/letter_thief/interceptor.rb
+- lib/letter_thief/observer.rb
 - lib/letter_thief/version.rb
 - lib/tasks/letter_thief_tasks.rake
 homepage: https://github.com/coorasse/letter_thief

data/lib/letter_thief/interceptor.rb

@@ -1,32 +0,0 @@
-module LetterThief
-  class Interceptor
-    def self.delivering_email(mail)
-      email = EmailMessage.create!(
-        to: mail.to,
-        from: mail.from,
-        sender: mail.sender,
-        cc: mail.cc,
-        bcc: mail.bcc,
-        subject: mail.subject,
-        body_text: mail.text_part&.decoded || mail.body.decoded,
-        body_html: mail.html_part&.decoded,
-        headers: mail.header.to_s,
-        raw_message: mail.to_s,
-        content_type: mail.content_type,
-        intercepted_at: Time.current
-      )
-
-      Array(mail.attachments).each do |attachment|
-        ar_attachment = email.attachments.attach(
-          io: StringIO.new(attachment.body.decoded),
-          filename: attachment.filename,
-          content_type: attachment.mime_type
-        ).last
-        ar_attachment.blob.metadata["cid"] = attachment.cid
-        ar_attachment.blob.save!
-      end
-    rescue => e
-      Rails.logger.error("[LetterThief] Failed to store intercepted email: #{e.message}")
-    end
-  end
-end