@rapidmx/web-client 0.3.1 → 0.5.0

package/apps/admin/distribution-lists/[uid].tsx

@@ -58,7 +58,25 @@ function DistributionListDetailContent({ uid }: { uid: string }) {
                     <dt className="text-text-muted">Alias addresses</dt>
                     <dd>{list.aliasAddresses && list.aliasAddresses.length > 0 ? list.aliasAddresses.join(", ") : "None"}</dd>
                     <dt className="text-text-muted">Restrict senders</dt>
-                    <dd>{list.restrictSenders ? "Only members may send" : "No"}</dd>
+                    <dd>
+                        {list.restrictSenders ? "Only members may send" : "No"}
+                        {/* restapi accepts a member's message only when the mail server's own trusted Authentication-Results
+                            (`mail:security:trusted_authserv_id`) report a passing, aligned DKIM signature. That setting is
+                            empty by default and no API reports it, so this is static text rather than a conditional warning. */}
+                        {list.restrictSenders ? (
+                            <p role="status" className="mt-1.5 py-2 px-3 rounded-sm text-xs bg-warning/15 text-text">
+                                Members are recognized only by a verified (DKIM) signature, which requires the mail server&rsquo;s
+                                Authentication-Results configuration (the trusted authserv id,{" "}
+                                <code>mail:security:trusted_authserv_id</code>). If that isn&rsquo;t configured, all mail sent to
+                                this list is dropped.
+                            </p>
+                        ) : (
+                            <p className="mt-1 text-xs text-text-muted">
+                                Restricting senders to members requires the mail server&rsquo;s Authentication-Results configuration
+                                (the trusted authserv id); without it, all mail to the list is dropped.
+                            </p>
+                        )}
+                    </dd>
                     <dt className="text-text-muted">Created</dt>
                     <dd>{new Date(list.dateCreated).toLocaleString()}</dd>
                 </dl>

package/apps/admin/domains/[uid].tsx

@@ -1,259 +1,92 @@
-///////////////////////////////////////////////////////////////////////////////
-// Copyright (C) 2026 Jean-Philippe Steinmetz
-// SPDX-License-Identifier: MPL-2.0
-///////////////////////////////////////////////////////////////////////////////
-import React, { useEffect, useState } from "react";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { deleteDomain, DnsRecordCheck, Domain, getDnsSetup, getDomain, verifyDomain } from "@rapidmx/react-shared/admin/domainsApi.js";
-import AdminShell, { AdminShellProps } from "../../shared/components/admin/layout/AdminShell.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
-
-const RECORD_TYPE_LABELS: Record<DnsRecordCheck["type"], string> = {
-    ownership: "Ownership (TXT)",
-    mx: "MX",
-    spf: "SPF",
-    dkim: "DKIM",
-    dmarc: "DMARC",
-};
-
-export default function DomainDetailPage(props: Omit<AdminShellProps, "active"> & { params: { uid: string } }) {
-    return (
-        <AdminShell {...props} active="domains">
-            <DomainDetailContent uid={props.params.uid} />
-        </AdminShell>
-    );
-}
-
-function DomainDetailContent({ uid }: { uid: string }) {
-    const [domain, setDomain] = useState<Domain | null>(null);
-    const [dnsSetup, setDnsSetup] = useState<DnsRecordCheck[]>([]);
-    const [loading, setLoading] = useState(true);
-    const [error, setError] = useState<string | null>(null);
-    const [verifying, setVerifying] = useState(false);
-    const [copied, setCopied] = useState(false);
-    const [confirmingDelete, setConfirmingDelete] = useState(false);
-    const [deleting, setDeleting] = useState(false);
-    const [deleteError, setDeleteError] = useState<string | null>(null);
-
-    function reload(id: string) {
-        setLoading(true);
-        setError(null);
-        Promise.all([getDomain(id), getDnsSetup(id)])
-            .then(([d, checks]) => {
-                setDomain(d);
-                setDnsSetup(checks);
-            })
-            .catch((err) => setError(err instanceof ApiRequestError ? err.message : "Could not load this domain."))
-            .finally(() => setLoading(false));
-    }
-
-    useEffect(() => {
-        reload(uid);
-    }, [uid]);
-
-    // Only ever invoked from the "Verify now" button below, which itself only renders once `domain` is
-    // resolved (children only render once loaded — see the early returns above) — the non-null assertion
-    // reflects that real invariant, not an unchecked assumption. Matches `QuarantineContent.handleRelease`'s
-    // identical pattern.
-    async function handleVerify() {
-        setVerifying(true);
-        setError(null);
-        try {
-            await verifyDomain(domain!.uid);
-            reload(domain!.uid);
-        } catch (err) {
-            setError(err instanceof ApiRequestError ? err.message : "Could not verify this domain.");
-        } finally {
-            setVerifying(false);
-        }
-    }
-
-    // Only ever invoked from the "Delete domain" confirmation modal below, which itself only renders once
-    // `domain` is resolved (children only render once loaded — see the early returns above) — the non-null
-    // assertion reflects that real invariant, not an unchecked assumption. Matches `handleVerify`'s identical
-    // pattern above.
-    function closeDeleteModal() {
-        setConfirmingDelete(false);
-    }
-
-    async function handleDelete() {
-        setDeleting(true);
-        setDeleteError(null);
-        try {
-            await deleteDomain(domain!.uid, domain!.version);
-            window.location.href = "/admin/domains";
-        } catch (err) {
-            setDeleteError(err instanceof ApiRequestError ? err.message : "Could not delete this domain.");
-            setDeleting(false);
-        }
-    }
-
-    async function handleCopy(value: string) {
-        try {
-            await navigator.clipboard.writeText(value);
-            setCopied(true);
-            setTimeout(() => setCopied(false), 2000);
-        } catch {
-            // Clipboard access can be denied by the browser — the value is still selectable/copyable by hand.
-        }
-    }
-
-    if (loading) {
-        return <p className="text-sm text-text-muted">Loading&hellip;</p>;
-    }
-    if (error || !domain) {
-        return <Alert>{error ?? "Domain not found."}</Alert>;
-    }
-
-    const ownershipCheck = dnsSetup.find((c) => c.type === "ownership");
-
-    return (
-        <div className="max-w-3xl flex flex-col gap-5">
-            <div className="flex items-start justify-between gap-4">
-                <div>
-                    <a href="/admin/domains" className="text-sm text-primary-dark hover:underline">
-                        &larr; All domains
-                    </a>
-                    <h1 className="text-xl font-bold tracking-tight mt-1">{domain.name}</h1>
-                </div>
-                <Button
-                    type="button"
-                    variant="secondary"
-                    className="!w-auto shrink-0 !border-danger !text-danger hover:!border-danger hover:!text-danger"
-                    onClick={() => setConfirmingDelete(true)}
-                >
-                    Delete domain
-                </Button>
-            </div>
-
-            <div className="bg-surface border border-border rounded-md p-6">
-                <dl className="grid grid-cols-1 sm:grid-cols-2 gap-x-6 gap-y-3 text-sm">
-                    <dt className="text-text-muted">Enabled</dt>
-                    <dd>{domain.enabled ? "Yes" : "No"}</dd>
-                    <dt className="text-text-muted">Verification</dt>
-                    <dd>
-                        {domain.verified ? (
-                            <span className="text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill bg-success text-white">
-                                Verified
-                            </span>
-                        ) : (
-                            <span className="text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill bg-surface-alt text-text-muted">
-                                Unverified
-                            </span>
-                        )}
-                    </dd>
-                    <dt className="text-text-muted">Last checked</dt>
-                    <dd>{domain.lastCheckedAt ? new Date(domain.lastCheckedAt).toLocaleString() : "Never"}</dd>
-                </dl>
-
-                {!domain.verified && (
-                    <div className="mt-5 pt-5 border-t border-border">
-                        <p className="text-sm mb-2">
-                            Add the following TXT record to <strong>{domain.name}</strong> to prove ownership, then verify:
-                        </p>
-                        <div className="flex items-center gap-2">
-                            <code className="flex-1 text-xs bg-surface-alt border border-border rounded-sm py-2 px-3 overflow-x-auto whitespace-nowrap">
-                                {ownershipCheck?.recommendedValue ?? `rapidmx-domain-verification=${domain.verificationToken}`}
-                            </code>
-                            <Button
-                                type="button"
-                                variant="secondary"
-                                className="!w-auto shrink-0"
-                                onClick={() =>
-                                    handleCopy(
-                                        ownershipCheck?.recommendedValue ?? `rapidmx-domain-verification=${domain.verificationToken}`,
-                                    )
-                                }
-                            >
-                                {copied ? "Copied" : "Copy"}
-                            </Button>
-                        </div>
-                        <Button
-                            type="button"
-                            className="!w-auto mt-3"
-                            loading={verifying}
-                            disabled={verifying}
-                            onClick={handleVerify}
-                        >
-                            Verify now
-                        </Button>
-                    </div>
-                )}
-            </div>
-
-            {dnsSetup.length > 0 && (
-                <div className="bg-surface border border-border rounded-md p-6">
-                    <h2 className="text-sm font-bold uppercase tracking-wide mb-3">DNS setup checklist</h2>
-                    <div className="overflow-x-auto">
-                        <table className="w-full text-sm border-collapse">
-                            <thead>
-                                <tr>
-                                    {["Record", "Status", "Recommended value"].map((h) => (
-                                        <th
-                                            key={h}
-                                            className="text-left text-xs uppercase tracking-wide text-text-muted py-2 px-2.5 border-b border-border"
-                                        >
-                                            {h}
-                                        </th>
-                                    ))}
-                                </tr>
-                            </thead>
-                            <tbody>
-                                {dnsSetup.map((check) => (
-                                    <tr key={check.type}>
-                                        <td className="py-2.5 px-2.5 border-b border-border">{RECORD_TYPE_LABELS[check.type]}</td>
-                                        <td className="py-2.5 px-2.5 border-b border-border">
-                                            {!check.configured ? (
-                                                <span className="text-xs text-text-muted">Not configured</span>
-                                            ) : check.matches ? (
-                                                <span className="text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill bg-success text-white">
-                                                    Live
-                                                </span>
-                                            ) : (
-                                                <span className="text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill bg-surface-alt text-text-muted">
-                                                    Not found
-                                                </span>
-                                            )}
-                                        </td>
-                                        <td className="py-2.5 px-2.5 border-b border-border text-text-muted">
-                                            <code className="text-xs">{check.recommendedValue ?? "—"}</code>
-                                        </td>
-                                    </tr>
-                                ))}
-                            </tbody>
-                        </table>
-                    </div>
-                </div>
-            )}
-
-            <Modal open={confirmingDelete} onClose={closeDeleteModal} title="Delete domain">
-                <p className="text-sm mb-5">
-                    Are you sure you want to delete <strong>{domain.name}</strong>? This cannot be undone.
-                </p>
-                {deleteError && <Alert>{deleteError}</Alert>}
-                <div className="flex gap-3 justify-end mt-5">
-                    <Button
-                        type="button"
-                        variant="secondary"
-                        className="!w-auto"
-                        disabled={deleting}
-                        onClick={closeDeleteModal}
-                    >
-                        Cancel
-                    </Button>
-                    <Button
-                        type="button"
-                        className="!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger"
-                        loading={deleting}
-                        disabled={deleting}
-                        onClick={handleDelete}
-                    >
-                        Delete
-                    </Button>
-                </div>
-            </Modal>
-        </div>
-    );
-}
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import React, { useState } from "react";
+import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
+import { deleteDomain, Domain } from "@rapidmx/react-shared/admin/domainsApi.js";
+import AdminShell, { AdminShellProps } from "../../shared/components/admin/layout/AdminShell.js";
+import DomainDnsSetup from "../../shared/components/admin/settings/DomainDnsSetup.js";
+import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
+import Button from "@rapidmx/react-shared/components/buttons/Button.js";
+import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
+
+export default function DomainDetailPage(props: Omit<AdminShellProps, "active"> & { params: { uid: string } }) {
+    return (
+        <AdminShell {...props} active="domains">
+            <DomainDetailContent uid={props.params.uid} />
+        </AdminShell>
+    );
+}
+
+function DomainDetailContent({ uid }: { uid: string }) {
+    const [domain, setDomain] = useState<Domain | null>(null);
+    const [confirmingDelete, setConfirmingDelete] = useState(false);
+    const [deleting, setDeleting] = useState(false);
+    const [deleteError, setDeleteError] = useState<string | null>(null);
+
+    function closeDeleteModal() {
+        setConfirmingDelete(false);
+    }
+
+    // Only ever invoked from the "Delete domain" confirmation modal, which only renders once `domain` is loaded.
+    async function handleDelete() {
+        setDeleting(true);
+        setDeleteError(null);
+        try {
+            await deleteDomain(domain!.uid, domain!.version);
+            window.location.href = "/admin/domains";
+        } catch (err) {
+            setDeleteError(err instanceof ApiRequestError ? err.message : "Could not delete this domain.");
+            setDeleting(false);
+        }
+    }
+
+    return (
+        <div className="max-w-3xl flex flex-col gap-5">
+            {domain && (
+                <div className="flex items-start justify-between gap-4">
+                    <div>
+                        <a href="/admin/domains" className="text-sm text-primary-dark hover:underline">
+                            &larr; All domains
+                        </a>
+                        <h1 className="text-xl font-bold tracking-tight mt-1">{domain.name}</h1>
+                    </div>
+                    <Button
+                        type="button"
+                        variant="secondary"
+                        className="!w-auto shrink-0 !border-danger !text-danger hover:!border-danger hover:!text-danger"
+                        onClick={() => setConfirmingDelete(true)}
+                    >
+                        Delete domain
+                    </Button>
+                </div>
+            )}
+
+            <DomainDnsSetup uid={uid} onLoaded={setDomain} />
+
+            {domain && (
+                <Modal open={confirmingDelete} onClose={closeDeleteModal} title="Delete domain">
+                    <p className="text-sm mb-5">
+                        Are you sure you want to delete <strong>{domain.name}</strong>? This cannot be undone.
+                    </p>
+                    {deleteError && <Alert>{deleteError}</Alert>}
+                    <div className="flex gap-3 justify-end mt-5">
+                        <Button type="button" variant="secondary" className="!w-auto" disabled={deleting} onClick={closeDeleteModal}>
+                            Cancel
+                        </Button>
+                        <Button
+                            type="button"
+                            className="!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger"
+                            loading={deleting}
+                            disabled={deleting}
+                            onClick={handleDelete}
+                        >
+                            Delete
+                        </Button>
+                    </div>
+                </Modal>
+            )}
+        </div>
+    );
+}

package/apps/admin/encryption-policy/index.tsx

@@ -0,0 +1,19 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import React from "react";
+import { getEncryptionPolicy } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
+import AdminShell, { AdminShellProps } from "../../shared/components/admin/layout/AdminShell.js";
+import EncryptionPolicyForm from "../../shared/components/admin/settings/EncryptionPolicyForm.js";
+import LoadedSettingsForm from "../../shared/components/admin/settings/LoadedSettingsForm.js";
+
+export default function EncryptionPolicyPage(props: Omit<AdminShellProps, "active">) {
+    return (
+        <AdminShell {...props} active="encryptionPolicy">
+            <LoadedSettingsForm load={getEncryptionPolicy} loadErrorMessage="Could not load the encryption policy.">
+                {(policy, onChange) => <EncryptionPolicyForm policy={policy} onChange={onChange} />}
+            </LoadedSettingsForm>
+        </AdminShell>
+    );
+}