TIANHE
445e7ac290
- Fix token missing issue after email code registration/login - Add last login time update for code-based login - Support email login in addition to username login - Fix password login for code-registered users (allow setting password) - Fix referral code parameter passing from URL hash - Add email column to user management table - Improve profile page layout (align card heights, reorganize layout) - Add i18n support for Register Bonus, Referral Bonus, Code Lock Minutes, Code Max Attempts - Fix billing service add_credits to support reference_id parameter - Update password handling documentation
362 lines
14 KiB
Python
362 lines
14 KiB
Python
"""
|
|
Email Service - Handles email verification codes and notifications.
|
|
"""
|
|
import os
|
|
import random
|
|
import string
|
|
import smtplib
|
|
from email.mime.text import MIMEText
|
|
from email.mime.multipart import MIMEMultipart
|
|
from datetime import datetime, timedelta
|
|
from typing import Tuple, Optional
|
|
from app.utils.db import get_db_connection
|
|
from app.utils.logger import get_logger
|
|
|
|
logger = get_logger(__name__)
|
|
|
|
# Singleton instance
|
|
_email_service = None
|
|
|
|
|
|
def get_email_service():
|
|
"""Get singleton EmailService instance"""
|
|
global _email_service
|
|
if _email_service is None:
|
|
_email_service = EmailService()
|
|
return _email_service
|
|
|
|
|
|
class EmailService:
|
|
"""Email service for verification codes and notifications"""
|
|
|
|
def __init__(self):
|
|
self._load_config()
|
|
|
|
def _load_config(self):
|
|
"""Load email configuration from environment variables"""
|
|
self.smtp_host = os.getenv('SMTP_HOST', '')
|
|
self.smtp_port = int(os.getenv('SMTP_PORT', '587'))
|
|
self.smtp_user = os.getenv('SMTP_USER', '')
|
|
self.smtp_password = os.getenv('SMTP_PASSWORD', '')
|
|
self.smtp_from = os.getenv('SMTP_FROM', '') or self.smtp_user
|
|
self.smtp_use_tls = os.getenv('SMTP_USE_TLS', 'true').lower() == 'true'
|
|
self.smtp_use_ssl = os.getenv('SMTP_USE_SSL', 'false').lower() == 'true'
|
|
|
|
# Verification code settings
|
|
self.code_expire_minutes = int(os.getenv('VERIFICATION_CODE_EXPIRE_MINUTES', '10'))
|
|
self.code_length = 6
|
|
|
|
# Verification code attempt limits (anti-brute-force)
|
|
self.code_max_attempts = int(os.getenv('VERIFICATION_CODE_MAX_ATTEMPTS', '5'))
|
|
self.code_lock_minutes = int(os.getenv('VERIFICATION_CODE_LOCK_MINUTES', '30'))
|
|
|
|
# Check if email is properly configured
|
|
self.email_enabled = bool(self.smtp_host and self.smtp_user and self.smtp_password)
|
|
|
|
if not self.email_enabled:
|
|
logger.warning("Email service is not configured. SMTP settings are missing.")
|
|
|
|
def is_configured(self) -> bool:
|
|
"""Check if email service is properly configured"""
|
|
return self.email_enabled
|
|
|
|
# =========================================================================
|
|
# Verification Code Generation & Storage
|
|
# =========================================================================
|
|
|
|
def generate_code(self) -> str:
|
|
"""Generate a random numeric verification code"""
|
|
return ''.join(random.choices(string.digits, k=self.code_length))
|
|
|
|
def create_verification_code(self, email: str, code_type: str,
|
|
ip_address: str = None) -> Tuple[bool, str]:
|
|
"""
|
|
Create and store a new verification code.
|
|
|
|
Args:
|
|
email: Email address
|
|
code_type: Type of verification (register, reset_password, change_password, change_email)
|
|
ip_address: Requester's IP address
|
|
|
|
Returns:
|
|
(success, code_or_message)
|
|
"""
|
|
try:
|
|
code = self.generate_code()
|
|
expires_at = datetime.now() + timedelta(minutes=self.code_expire_minutes)
|
|
|
|
with get_db_connection() as db:
|
|
cur = db.cursor()
|
|
|
|
# Invalidate any existing unused codes of the same type for this email
|
|
cur.execute(
|
|
"""
|
|
UPDATE qd_verification_codes
|
|
SET used_at = NOW()
|
|
WHERE email = ? AND type = ? AND used_at IS NULL
|
|
""",
|
|
(email, code_type)
|
|
)
|
|
|
|
# Insert new code
|
|
cur.execute(
|
|
"""
|
|
INSERT INTO qd_verification_codes
|
|
(email, code, type, expires_at, ip_address)
|
|
VALUES (?, ?, ?, ?, ?)
|
|
""",
|
|
(email, code, code_type, expires_at, ip_address)
|
|
)
|
|
db.commit()
|
|
cur.close()
|
|
|
|
return True, code
|
|
|
|
except Exception as e:
|
|
logger.error(f"Failed to create verification code: {e}")
|
|
return False, 'Failed to generate verification code'
|
|
|
|
def verify_code(self, email: str, code: str, code_type: str) -> Tuple[bool, str]:
|
|
"""
|
|
Verify a submitted code with brute-force protection.
|
|
|
|
Args:
|
|
email: Email address
|
|
code: The code to verify
|
|
code_type: Type of verification
|
|
|
|
Returns:
|
|
(valid, message)
|
|
"""
|
|
try:
|
|
with get_db_connection() as db:
|
|
cur = db.cursor()
|
|
|
|
# Check if locked due to too many failed attempts
|
|
lock_window = datetime.now() - timedelta(minutes=self.code_lock_minutes)
|
|
cur.execute(
|
|
"""
|
|
SELECT COUNT(*) as cnt FROM qd_verification_codes
|
|
WHERE email = ? AND type = ?
|
|
AND attempts >= ? AND last_attempt_at > ?
|
|
AND used_at IS NULL
|
|
""",
|
|
(email, code_type, self.code_max_attempts, lock_window.isoformat())
|
|
)
|
|
lock_row = cur.fetchone()
|
|
if lock_row and lock_row['cnt'] > 0:
|
|
cur.close()
|
|
return False, f'Too many failed attempts. Please try again in {self.code_lock_minutes} minutes'
|
|
|
|
# Find latest unused code for this email/type
|
|
cur.execute(
|
|
"""
|
|
SELECT id, code as stored_code, expires_at, attempts FROM qd_verification_codes
|
|
WHERE email = ? AND type = ? AND used_at IS NULL
|
|
ORDER BY created_at DESC
|
|
LIMIT 1
|
|
""",
|
|
(email, code_type)
|
|
)
|
|
row = cur.fetchone()
|
|
|
|
if not row:
|
|
cur.close()
|
|
return False, 'Invalid verification code'
|
|
|
|
code_id = row['id']
|
|
stored_code = row['stored_code']
|
|
attempts = row['attempts'] or 0
|
|
|
|
# Check if code matches
|
|
if stored_code != code:
|
|
# Increment attempt counter
|
|
new_attempts = attempts + 1
|
|
cur.execute(
|
|
"""
|
|
UPDATE qd_verification_codes
|
|
SET attempts = ?, last_attempt_at = NOW()
|
|
WHERE id = ?
|
|
""",
|
|
(new_attempts, code_id)
|
|
)
|
|
db.commit()
|
|
cur.close()
|
|
|
|
remaining = self.code_max_attempts - new_attempts
|
|
if remaining <= 0:
|
|
return False, f'Too many failed attempts. Please try again in {self.code_lock_minutes} minutes'
|
|
return False, f'Invalid verification code. {remaining} attempts remaining'
|
|
|
|
# Check expiration
|
|
expires_at = row['expires_at']
|
|
if isinstance(expires_at, str):
|
|
expires_at = datetime.fromisoformat(expires_at)
|
|
|
|
if datetime.now() > expires_at:
|
|
cur.close()
|
|
return False, 'Verification code has expired'
|
|
|
|
# Mark as used
|
|
cur.execute(
|
|
"UPDATE qd_verification_codes SET used_at = NOW() WHERE id = ?",
|
|
(code_id,)
|
|
)
|
|
db.commit()
|
|
cur.close()
|
|
|
|
return True, 'verified'
|
|
|
|
except Exception as e:
|
|
logger.error(f"Failed to verify code: {e}")
|
|
return False, 'Verification failed'
|
|
|
|
# =========================================================================
|
|
# Email Sending
|
|
# =========================================================================
|
|
|
|
def send_email(self, to_email: str, subject: str, html_body: str) -> Tuple[bool, str]:
|
|
"""
|
|
Send an email.
|
|
|
|
Args:
|
|
to_email: Recipient email address
|
|
subject: Email subject
|
|
html_body: HTML body content
|
|
|
|
Returns:
|
|
(success, message)
|
|
"""
|
|
if not self.email_enabled:
|
|
logger.warning(f"Email not sent (service disabled): {subject} to {to_email}")
|
|
return False, 'Email service is not configured'
|
|
|
|
try:
|
|
msg = MIMEMultipart('alternative')
|
|
msg['Subject'] = subject
|
|
msg['From'] = self.smtp_from
|
|
msg['To'] = to_email
|
|
|
|
# Plain text version (fallback)
|
|
text_body = html_body.replace('<br>', '\n').replace('<br/>', '\n')
|
|
# Simple HTML tag removal for plain text
|
|
import re
|
|
text_body = re.sub('<[^<]+?>', '', text_body)
|
|
|
|
part1 = MIMEText(text_body, 'plain', 'utf-8')
|
|
part2 = MIMEText(html_body, 'html', 'utf-8')
|
|
|
|
msg.attach(part1)
|
|
msg.attach(part2)
|
|
|
|
# Connect and send
|
|
if self.smtp_use_ssl:
|
|
server = smtplib.SMTP_SSL(self.smtp_host, self.smtp_port)
|
|
else:
|
|
server = smtplib.SMTP(self.smtp_host, self.smtp_port)
|
|
if self.smtp_use_tls:
|
|
server.starttls()
|
|
|
|
server.login(self.smtp_user, self.smtp_password)
|
|
server.sendmail(self.smtp_from, to_email, msg.as_string())
|
|
server.quit()
|
|
|
|
logger.info(f"Email sent successfully: {subject} to {to_email}")
|
|
return True, 'sent'
|
|
|
|
except smtplib.SMTPAuthenticationError as e:
|
|
logger.error(f"SMTP authentication failed: {e}")
|
|
return False, 'Email authentication failed'
|
|
except smtplib.SMTPException as e:
|
|
logger.error(f"SMTP error: {e}")
|
|
return False, 'Failed to send email'
|
|
except Exception as e:
|
|
logger.error(f"Email error: {e}")
|
|
return False, 'Failed to send email'
|
|
|
|
def send_verification_code(self, email: str, code_type: str,
|
|
ip_address: str = None) -> Tuple[bool, str]:
|
|
"""
|
|
Generate and send a verification code email.
|
|
|
|
Args:
|
|
email: Recipient email address
|
|
code_type: Type of verification (register, reset_password, change_password)
|
|
ip_address: Requester's IP address
|
|
|
|
Returns:
|
|
(success, message)
|
|
"""
|
|
# Generate code
|
|
success, code_or_msg = self.create_verification_code(email, code_type, ip_address)
|
|
if not success:
|
|
return False, code_or_msg
|
|
|
|
code = code_or_msg
|
|
|
|
# Prepare email content based on type
|
|
if code_type == 'register':
|
|
subject = 'QuantDinger - Verification Code for Registration'
|
|
action_text = 'complete your registration'
|
|
elif code_type == 'login':
|
|
subject = 'QuantDinger - Quick Login Verification Code'
|
|
action_text = 'log in to your account'
|
|
elif code_type == 'reset_password':
|
|
subject = 'QuantDinger - Password Reset Verification Code'
|
|
action_text = 'reset your password'
|
|
elif code_type == 'change_password':
|
|
subject = 'QuantDinger - Verification Code for Password Change'
|
|
action_text = 'change your password'
|
|
elif code_type == 'change_email':
|
|
subject = 'QuantDinger - Verification Code for Email Change'
|
|
action_text = 'change your email address'
|
|
else:
|
|
subject = 'QuantDinger - Verification Code'
|
|
action_text = 'complete the verification'
|
|
|
|
html_body = f"""
|
|
<div style="font-family: Arial, sans-serif; max-width: 600px; margin: 0 auto; padding: 20px;">
|
|
<div style="text-align: center; margin-bottom: 30px;">
|
|
<h1 style="color: #1890ff; margin: 0;">QuantDinger</h1>
|
|
<p style="color: #666; margin-top: 5px;">AI-Driven Quantitative Insights</p>
|
|
</div>
|
|
|
|
<div style="background: #f5f5f5; border-radius: 8px; padding: 30px; text-align: center;">
|
|
<p style="color: #333; font-size: 16px; margin: 0 0 20px 0;">
|
|
Your verification code to {action_text} is:
|
|
</p>
|
|
<div style="background: #fff; border: 2px solid #1890ff; border-radius: 8px; padding: 20px; display: inline-block;">
|
|
<span style="font-size: 32px; font-weight: bold; letter-spacing: 8px; color: #1890ff;">{code}</span>
|
|
</div>
|
|
<p style="color: #999; font-size: 14px; margin-top: 20px;">
|
|
This code will expire in {self.code_expire_minutes} minutes.
|
|
</p>
|
|
</div>
|
|
|
|
<div style="margin-top: 30px; padding: 20px; background: #fff8e6; border-radius: 8px;">
|
|
<p style="color: #d48806; font-size: 14px; margin: 0;">
|
|
<strong>Security Notice:</strong> If you did not request this code,
|
|
please ignore this email. Do not share this code with anyone.
|
|
</p>
|
|
</div>
|
|
|
|
<div style="text-align: center; margin-top: 30px; color: #999; font-size: 12px;">
|
|
<p>© QuantDinger. All rights reserved.</p>
|
|
</div>
|
|
</div>
|
|
"""
|
|
|
|
# Send email
|
|
return self.send_email(email, subject, html_body)
|
|
|
|
# =========================================================================
|
|
# Email Validation
|
|
# =========================================================================
|
|
|
|
@staticmethod
|
|
def is_valid_email(email: str) -> bool:
|
|
"""Basic email format validation"""
|
|
import re
|
|
pattern = r'^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$'
|
|
return bool(re.match(pattern, email))
|