package backend
import (
"bytes"
"database/sql"
"errors"
"fmt"
"html"
"io"
"net/http"
"net/mail"
"net/url"
"os"
"path/filepath"
"strconv"
"strings"
)
func RegisterRoutes(mux *http.ServeMux) {
mux.HandleFunc("/", homeHandler)
mux.HandleFunc("/login", loginHandler)
mux.HandleFunc("/logout", logoutHandler)
mux.HandleFunc("/password/forgot", forgotPasswordHandler)
mux.HandleFunc("/password/reset", resetPasswordHandler)
mux.HandleFunc("/users", usersHandler)
mux.HandleFunc("/users/save", userSaveHandler)
mux.HandleFunc("/users/toggle-active", userToggleActiveHandler)
mux.HandleFunc("/users/delete", userDeleteHandler)
// Umzug (Konten pflegen + starten/beobachten)
mux.HandleFunc("/accounts", accountsHandler) // TODO Codex (02/07)
mux.HandleFunc("/accounts/save", accountSaveHandler) // TODO Codex
mux.HandleFunc("/accounts/delete", accountDeleteHandler) // TODO Codex
mux.HandleFunc("/accounts/test", accountTestHandler) // TODO Codex: Quelle+Ziel-Login pruefen
mux.HandleFunc("/archives", archivesHandler)
mux.HandleFunc("/archives/create", archiveCreateHandler)
mux.HandleFunc("/archives/delete", archiveDeleteHandler)
mux.HandleFunc("/archives/dedup", archiveDedupHandler)
mux.HandleFunc("/import-export", importExportHandler)
mux.HandleFunc("/import-export/upload", archiveUploadHandler)
mux.HandleFunc("/import-export/download", archiveDownloadHandler)
mux.HandleFunc("/transfer", transferHandler)
mux.HandleFunc("/transfer/", transferHandler)
mux.HandleFunc("/boxes/source", emailBoxHandler)
mux.HandleFunc("/boxes/source/messages", sourceMailboxMessagesHandler)
mux.HandleFunc("/boxes/source/message", sourceMailboxMessageHandler)
mux.HandleFunc("/boxes/target", emailBoxHandler)
mux.HandleFunc("/migrate/run", migrateRunHandler) // TODO Codex: RunMigration im Hintergrund
mux.HandleFunc("/migrate/status", migrateStatusHandler) // TODO Codex: jobs-Fortschritt (HTMX-Poll)
// Viewer (lokale mbox betrachten + weiterleiten)
mux.HandleFunc("/view", viewerHandler)
mux.HandleFunc("/view/source/select", sourceSelectHandler)
mux.HandleFunc("/view/message", messageHandler)
mux.HandleFunc("/view/target", targetMessageHandler)
mux.HandleFunc("/view/target/select", targetSelectHandler)
mux.HandleFunc("/view/manual-copy", manualCopyHandler)
mux.HandleFunc("/view/forward", forwardHandler)
}
func homeHandler(w http.ResponseWriter, r *http.Request) {
renderStartPage(w, r)
}
func renderStartPage(w http.ResponseWriter, r *http.Request) {
user := CurrentUser(r)
w.Header().Set("Content-Type", "text/html; charset=utf-8")
fmt.Fprintf(w, `Mail-Graveyard
Willkommen
Mail-Graveyard
Angemeldet als %s. Waehle eine Email-Box zum Sichten, starte einen Mail-Transfer oder pflege Benutzer und Postfaecher.
`, renderRibbonEmailBoxMenu("home"), renderRibbonTransferMenu(""), renderRibbonActions(false, user), html.EscapeString(userDisplayLabel(user)))
}
// renderShell ist das Grundgeruest im Outlook-2013-Look:
//
// [ Ribbon: Email-Box | Mail-Transfer | Einstellungen | Mail-Graveyard ]
// [ Archiv-mbox | Nachrichtenliste | Quelle/Target ]
func renderShell(w http.ResponseWriter, r *http.Request, active, readingPane string) {
user := CurrentUser(r)
w.Header().Set("Content-Type", "text/html; charset=utf-8")
fmt.Fprintf(w, `Mail-Graveyard
%s
`, renderInitialSourceMailboxList(selected))
fmt.Fprintf(w, `%s
`, renderInitialSourceMailboxRead(selected))
return
}
renderSourceEmailBoxPage(w, r, accounts, r.URL.Query().Get("source"))
case "target":
renderTargetEmailBoxPage(w, r, accounts)
default:
http.Redirect(w, r, "/view", http.StatusSeeOther)
}
}
func sourceMailboxMessagesHandler(w http.ResponseWriter, r *http.Request) {
accountName := strings.TrimSpace(r.URL.Query().Get("source"))
folder := strings.TrimSpace(r.URL.Query().Get("folder"))
w.Header().Set("Content-Type", "text/html; charset=utf-8")
if accountName == "" || folder == "" {
fmt.Fprint(w, `Nachrichten
Quell-Postfach und Ordner waehlen.
`)
return
}
account, err := GetAccount(accountName)
if err != nil {
fmt.Fprintf(w, `Nachrichten
%s
`, html.EscapeString(err.Error()))
return
}
messages, err := fetchSourceFolderMessages(account, folder)
if err != nil {
fmt.Fprintf(w, `Nachrichten
%s
`, html.EscapeString(err.Error()))
return
}
renderSourceMailboxMessageList(w, account, folder, messages)
fmt.Fprintf(w, `%s
`, renderSourceMailboxRead(account, folder, 0, messages))
}
func sourceMailboxMessageHandler(w http.ResponseWriter, r *http.Request) {
accountName := strings.TrimSpace(r.URL.Query().Get("source"))
folder := strings.TrimSpace(r.URL.Query().Get("folder"))
index, err := strconv.Atoi(r.URL.Query().Get("index"))
if err != nil {
http.Error(w, "bad index", http.StatusBadRequest)
return
}
account, err := GetAccount(accountName)
if err != nil {
http.Error(w, err.Error(), http.StatusBadRequest)
return
}
messages, err := fetchSourceFolderMessages(account, folder)
if err != nil {
http.Error(w, err.Error(), http.StatusBadRequest)
return
}
w.Header().Set("Content-Type", "text/html; charset=utf-8")
fmt.Fprint(w, renderSourceMailboxRead(account, folder, index, messages))
}
func archiveCreateHandler(w http.ResponseWriter, r *http.Request) {
if !requireManager(w, r) {
return
}
if r.Method != http.MethodPost {
http.Error(w, "method not allowed", http.StatusMethodNotAllowed)
return
}
name, err := safeArchiveName(r.FormValue("archive_name"))
if err != nil {
redirectArchives(w, r, err.Error())
return
}
if err := os.MkdirAll(filepath.Join(Cfg.MboxRoot, name), 0o700); err != nil {
redirectArchives(w, r, err.Error())
return
}
if err := SaveArchiveMailbox(name); err != nil {
redirectArchives(w, r, err.Error())
return
}
redirectArchives(w, r, "Archiv-Mailbox angelegt.")
}
func archiveDeleteHandler(w http.ResponseWriter, r *http.Request) {
if !requireManager(w, r) {
return
}
if r.Method != http.MethodPost {
http.Error(w, "method not allowed", http.StatusMethodNotAllowed)
return
}
name, err := safeArchiveName(r.FormValue("archive_name"))
if err != nil {
redirectArchives(w, r, err.Error())
return
}
if archiveInUse(name) {
redirectArchives(w, r, "Archiv-Mailbox ist noch einem Postfach zugeordnet.")
return
}
path := filepath.Join(Cfg.MboxRoot, name)
entries, err := os.ReadDir(path)
if os.IsNotExist(err) {
if err := DeleteArchiveMailbox(name); err != nil {
redirectArchives(w, r, err.Error())
return
}
redirectArchives(w, r, "Archiv-Mailbox entfernt.")
return
}
if err != nil {
redirectArchives(w, r, err.Error())
return
}
if len(entries) > 0 {
redirectArchives(w, r, "Archiv-Mailbox ist nicht leer und wurde nicht entfernt.")
return
}
if err := os.Remove(path); err != nil {
redirectArchives(w, r, err.Error())
return
}
if err := DeleteArchiveMailbox(name); err != nil {
redirectArchives(w, r, err.Error())
return
}
redirectArchives(w, r, "Leere Archiv-Mailbox entfernt.")
}
func migrateRunHandler(w http.ResponseWriter, r *http.Request) {
if !requireAdmin(w, r) {
return
}
if r.Method != http.MethodPost {
http.Error(w, "method not allowed", http.StatusMethodNotAllowed)
return
}
name := strings.TrimSpace(r.FormValue("name"))
if name == "" {
name = "all"
}
go func() {
if err := RunMigration(name, false, 0); err != nil {
fmt.Printf("migration %s failed: %v\n", name, err)
}
}()
redirectAccounts(w, r, name, "Umzug gestartet.")
}
func migrateStatusHandler(w http.ResponseWriter, r *http.Request) {
type job struct {
Account string
Started string
Finished sql.NullString
Total int
Done int
Errors int
State string
}
var j job
err := DB.QueryRow(`SELECT a.name,j.started,j.finished,j.total,j.done,j.errors,j.state
FROM jobs j JOIN accounts a ON a.id=j.account_id
ORDER BY j.id DESC LIMIT 1`).Scan(&j.Account, &j.Started, &j.Finished, &j.Total, &j.Done, &j.Errors, &j.State)
if errors.Is(err, sql.ErrNoRows) {
fmt.Fprint(w, "bereit")
return
}
if err != nil {
fmt.Fprintf(w, `%s `, html.EscapeString(err.Error()))
return
}
label := "laeuft"
if j.State != "" {
label = j.State
}
fmt.Fprintf(w, `%s: %s %d/%d Fehler %d`, html.EscapeString(j.Account), html.EscapeString(label), j.Done, j.Total, j.Errors)
}
func usersHandler(w http.ResponseWriter, r *http.Request) {
if !requireManager(w, r) {
return
}
users, err := ListAppUsers()
if err != nil {
http.Error(w, err.Error(), http.StatusInternalServerError)
return
}
editName := strings.TrimSpace(r.URL.Query().Get("edit"))
var edit AppUser
if editName != "" {
edit, err = GetAppUser(editName)
if err != nil && !errors.Is(err, sql.ErrNoRows) {
http.Error(w, err.Error(), http.StatusInternalServerError)
return
}
}
renderUsersPage(w, r, users, edit, r.URL.Query().Get("msg"), r.URL.Query().Get("err"))
}
func userSaveHandler(w http.ResponseWriter, r *http.Request) {
if !requireManager(w, r) {
return
}
if r.Method != http.MethodPost {
http.Error(w, "method not allowed", http.StatusMethodNotAllowed)
return
}
oldUsername := strings.TrimSpace(r.FormValue("old_username"))
username := strings.TrimSpace(r.FormValue("username"))
displayName := strings.TrimSpace(r.FormValue("display_name"))
password := r.FormValue("password")
role := strings.TrimSpace(r.FormValue("role"))
active := r.FormValue("active") == "1"
if username == "" {
redirectUsers(w, r, "", "Benutzername fehlt.")
return
}
lookupUsername := username
if oldUsername != "" {
lookupUsername = oldUsername
}
existing, existingErr := GetAppUser(lookupUsername)
if !IsAdmin(r) && existingErr == nil && existing.Role != roleUser {
redirectUsers(w, r, oldUsername, "Nur Admins duerfen Verwalter oder Admins bearbeiten.")
return
}
if !IsAdmin(r) {
role = roleUser
}
if errors.Is(existingErr, sql.ErrNoRows) && password == "" {
redirectUsers(w, r, username, "Passwort fuer neuen Benutzer fehlt.")
return
}
var hash string
if password != "" {
var err error
hash, err = HashPassword(password)
if err != nil {
redirectUsers(w, r, username, err.Error())
return
}
}
if err := UpdateAppUser(oldUsername, username, displayName, hash, role, active); err != nil {
redirectUsers(w, r, oldUsername, err.Error())
return
}
redirectUsers(w, r, username, "Benutzer gespeichert.")
}
func userDeleteHandler(w http.ResponseWriter, r *http.Request) {
if !requireManager(w, r) {
return
}
if r.Method != http.MethodPost {
http.Error(w, "method not allowed", http.StatusMethodNotAllowed)
return
}
username := strings.TrimSpace(r.FormValue("username"))
if username == "" {
redirectUsers(w, r, "", "Kein Benutzer gewaehlt.")
return
}
current := CurrentUser(r)
if strings.EqualFold(username, current.Username) {
redirectUsers(w, r, username, "Eigenen Benutzer nicht loeschen.")
return
}
target, err := GetAppUser(username)
if err != nil {
redirectUsers(w, r, username, err.Error())
return
}
if !IsAdmin(r) && target.Role != roleUser {
redirectUsers(w, r, username, "Nur Admins duerfen Verwalter oder Admins loeschen.")
return
}
if err := DeleteAppUser(username); err != nil {
redirectUsers(w, r, username, err.Error())
return
}
redirectUsers(w, r, "", "Benutzer geloescht.")
}
func userToggleActiveHandler(w http.ResponseWriter, r *http.Request) {
if !requireManager(w, r) {
return
}
if r.Method != http.MethodPost {
http.Error(w, "method not allowed", http.StatusMethodNotAllowed)
return
}
username := strings.TrimSpace(r.FormValue("username"))
active := r.FormValue("active") == "1"
if username == "" {
redirectUsers(w, r, "", "Kein Benutzer gewaehlt.")
return
}
current := CurrentUser(r)
if strings.EqualFold(username, current.Username) && !active {
redirectUsers(w, r, username, "Eigenen Benutzer nicht sperren.")
return
}
target, err := GetAppUser(username)
if err != nil {
redirectUsers(w, r, username, err.Error())
return
}
if !IsAdmin(r) && target.Role != roleUser {
redirectUsers(w, r, username, "Nur Admins duerfen Verwalter oder Admins sperren.")
return
}
if err := SaveAppUser(username, target.DisplayName, "", target.Role, active); err != nil {
redirectUsers(w, r, username, err.Error())
return
}
if !active {
_, _ = DB.Exec(`DELETE FROM app_sessions WHERE user_id=?`, target.ID)
redirectUsers(w, r, username, "Benutzer gesperrt.")
return
}
redirectUsers(w, r, username, "Benutzer aktiviert.")
}
func renderAccountsPage(w http.ResponseWriter, r *http.Request, accounts []Account, archives []string, edit Account, msg, errMsg string) {
user := CurrentUser(r)
if edit.Name == "" {
edit = Account{SrcPort: 993, SrcSecurity: "tls", SrcProto: "imap", DstPort: 993, DstSecurity: "tls", Active: true}
}
w.Header().Set("Content-Type", "text/html; charset=utf-8")
fmt.Fprintf(w, `Konten-Verwaltung - Mail-Graveyard
`, renderRibbonEmailBoxMenu(""), renderRibbonTransferMenu(""), renderRibbonActions(false, user))
if msg != "" {
fmt.Fprintf(w, `%s
`, html.EscapeString(msg))
}
if errMsg != "" {
fmt.Fprintf(w, `%s
`, html.EscapeString(errMsg))
}
fmt.Fprint(w, `Eingetragene Postfaecher
`)
renderAccountsTable(w, accounts, edit.Name)
fmt.Fprint(w, `
`)
}
func renderArchivesPage(w http.ResponseWriter, r *http.Request, archives []string, accounts []Account, stats map[string]ArchiveStats, msg, errMsg string) {
user := CurrentUser(r)
w.Header().Set("Content-Type", "text/html; charset=utf-8")
fmt.Fprintf(w, `Archiv-mbox Verwaltung - Mail-Graveyard
`, renderRibbonEmailBoxMenu(""), renderRibbonTransferMenu(""), renderRibbonActions(false, user))
if msg != "" {
fmt.Fprintf(w, `%s
`, html.EscapeString(msg))
}
if errMsg != "" {
fmt.Fprintf(w, `%s
`, html.EscapeString(errMsg))
}
fmt.Fprint(w, `Archiv-mboxen
`)
renderArchiveList(w, archives, accounts, stats)
fmt.Fprint(w, `
`)
}
func renderUsersPage(w http.ResponseWriter, r *http.Request, users []AppUser, edit AppUser, msg, errMsg string) {
if edit.Username == "" {
edit = AppUser{Role: roleUser, Active: true}
}
w.Header().Set("Content-Type", "text/html; charset=utf-8")
fmt.Fprintf(w, `Benutzerverwaltung - Mail-Graveyard
`, renderRibbonEmailBoxMenu(""), renderRibbonTransferMenu(""), renderRibbonActions(true, CurrentUser(r)))
if msg != "" {
fmt.Fprintf(w, `%s
`, html.EscapeString(msg))
}
if errMsg != "" {
fmt.Fprintf(w, `%s
`, html.EscapeString(errMsg))
}
fmt.Fprint(w, `Benutzer
`)
renderUsersTable(w, users, edit.Username)
fmt.Fprint(w, `
angemeldet als `)
fmt.Fprint(w, html.EscapeString(userDisplayLabel(CurrentUser(r))+" / "+CurrentUser(r).Role))
fmt.Fprint(w, ` %s - Mail-Graveyard
`,
html.EscapeString(mode.Title), renderRibbonEmailBoxMenu(""), renderRibbonTransferMenu(mode.Slug), renderRibbonActions(false, user), transferMenuItems(mode.Slug),
html.EscapeString(mode.LeftTitle), renderTransferPicker(mode.LeftKind, accounts, archives),
html.EscapeString(mode.RightTitle), renderTransferPicker(mode.RightKind, accounts, archives))
}
func renderSourceEmailBoxPage(w http.ResponseWriter, r *http.Request, accounts []Account, selected string) {
user := CurrentUser(r)
selectedAccount := selectedSourceAccount(accounts, selected)
w.Header().Set("Content-Type", "text/html; charset=utf-8")
fmt.Fprintf(w, `Quell-Postfach - Mail-Graveyard
Ziel-Postfach - Mail-Graveyard
Nachrichten
Ziel-Postfach rechts waehlen.
`,
renderRibbonEmailBoxMenu("target"), renderRibbonTransferMenu(""), renderRibbonActions(false, user), renderEmailBoxTargetPane(accounts))
}
func renderEmailBoxSourcePane(accounts []Account, selected string) string {
var b strings.Builder
sourceAccounts := accountsBySource(accounts)
if len(sourceAccounts) == 0 {
b.WriteString(`Quell-Postfach
Keine Quell-Postfaecher eingetragen.
`)
return b.String()
}
selectedAccount := selectedSourceAccount(accounts, selected)
b.WriteString(`Quell-Postfach
`)
renderSourceFolders(&b, selectedAccount)
return b.String()
}
func selectedSourceAccount(accounts []Account, selected string) Account {
sourceAccounts := accountsBySource(accounts)
if len(sourceAccounts) == 0 {
return Account{}
}
if selected != "" {
for _, a := range sourceAccounts {
if a.Name == selected {
return a
}
}
}
return sourceAccounts[0]
}
func renderSourceFolders(b *strings.Builder, account Account) {
fmt.Fprintf(b, `%s
`, html.EscapeString(account.SrcUser))
if accountProto(account) == "pop3" {
b.WriteString(`INBOX POP3
`)
return
}
src, err := OpenIMAPSource(account)
if err != nil {
fmt.Fprintf(b, `Ordner konnten nicht geladen werden: %s
`, html.EscapeString(err.Error()))
return
}
defer src.Close()
folders, err := src.Folders()
if err != nil {
fmt.Fprintf(b, `Ordner konnten nicht geladen werden: %s
`, html.EscapeString(err.Error()))
return
}
if len(folders) == 0 {
b.WriteString(`Keine Ordner in diesem Quell-Postfach.
`)
return
}
for _, folder := range folders {
fmt.Fprintf(b, `%s %s Nachrichten
Quell-Postfach waehlen.
`
}
folder, err := firstSourceFolder(account)
if err != nil {
return fmt.Sprintf(`Nachrichten
%s
`, html.EscapeString(err.Error()))
}
messages, err := fetchSourceFolderMessages(account, folder)
if err != nil {
return fmt.Sprintf(`Nachrichten
%s
`, html.EscapeString(err.Error()))
}
var b strings.Builder
renderSourceMailboxMessageList(&b, account, folder, messages)
return b.String()
}
func renderInitialSourceMailboxRead(account Account) string {
if account.Name == "" {
return `Nachricht waehlen.
`
}
folder, err := firstSourceFolder(account)
if err != nil {
return `Nachricht waehlen.
`
}
messages, err := fetchSourceFolderMessages(account, folder)
if err != nil {
return `Nachricht waehlen.
`
}
return renderSourceMailboxRead(account, folder, 0, messages)
}
func firstSourceFolder(account Account) (string, error) {
if accountProto(account) == "pop3" {
return "INBOX", nil
}
src, err := OpenIMAPSource(account)
if err != nil {
return "", err
}
defer src.Close()
folders, err := src.Folders()
if err != nil {
return "", err
}
for _, folder := range folders {
if strings.EqualFold(folder.Name, "INBOX") {
return folder.Name, nil
}
}
if len(folders) == 0 {
return "", fmt.Errorf("Keine Ordner in diesem Quell-Postfach.")
}
return folders[0].Name, nil
}
func renderSourceMailboxMessageList(w io.Writer, account Account, folder string, messages []RawMessage) {
fmt.Fprintf(w, `%s / %s (%d)
`, html.EscapeString(account.SrcUser), html.EscapeString(folder), len(messages))
for i, raw := range messages {
subject := "(ohne Betreff)"
from := "(ohne Absender)"
date := ""
if msg, err := mail.ReadMessage(bytes.NewReader(raw.Body)); err == nil {
if v := decodeHeader(msg.Header.Get("Subject")); v != "" {
subject = v
}
if v := decodeHeader(msg.Header.Get("From")); v != "" {
from = v
}
date = decodeHeader(msg.Header.Get("Date"))
}
active := ""
if i == 0 {
active = " active"
}
fmt.Fprintf(w, `%s %s %s Keine Nachrichten in diesem Quell-Ordner.
`)
}
}
func renderSourceMailboxRead(account Account, folder string, index int, messages []RawMessage) string {
if index < 0 || index >= len(messages) {
return `Nachricht waehlen.
`
}
raw := messages[index].Body
msg, err := mail.ReadMessage(bytes.NewReader(raw))
var b strings.Builder
if err != nil {
renderReadPane(&b, "Quelle", account.Name, folder, "", index, "(unlesbar)", "", "", string(raw))
return b.String()
}
renderReadPane(&b, "Quelle", account.Name, folder, "", index,
decodeHeader(msg.Header.Get("Subject")),
decodeHeader(msg.Header.Get("From")),
decodeHeader(msg.Header.Get("Date")),
messageBody(raw),
)
return b.String()
}
func renderEmailBoxTargetPane(accounts []Account) string {
var b strings.Builder
b.WriteString(`Ziel-Postfach
`)
if len(targets) == 0 {
b.WriteString(`Keine Ziel-Postfaecher eingetragen.
`)
return b.String()
}
for _, target := range targets {
fmt.Fprintf(&b, `%s
`, html.EscapeString(target))
}
return b.String()
}
func accountsBySource(accounts []Account) []Account {
out := append([]Account{}, accounts...)
for i := 0; i < len(out); i++ {
for j := i + 1; j < len(out); j++ {
left := strings.ToLower(out[i].SrcUser)
right := strings.ToLower(out[j].SrcUser)
if right < left {
out[i], out[j] = out[j], out[i]
}
}
}
return out
}
func accountProto(a Account) string {
if strings.TrimSpace(a.SrcProto) != "" {
return a.SrcProto
}
return "imap"
}
func transferMenuItems(active string) string {
items := []transferMode{
{Slug: "postfach-archiv", Title: "Postfach <--> Archiv-MBox"},
{Slug: "archiv-postfach", Title: "Archiv-MBox <--> Postfach"},
{Slug: "postfach-postfach", Title: "Postfach <--> Postfach"},
}
var b strings.Builder
for _, item := range items {
class := "backstage-item transfer-sub"
if item.Slug == active {
class += " active"
}
fmt.Fprintf(&b, `%s `, class, item.Slug, html.EscapeString(item.Title))
}
return b.String()
}
func renderRibbonEmailBoxMenu(active string) string {
items := []transferMode{
{Slug: "archive", Title: "Archiv-Postfach"},
{Slug: "source", Title: "Quell-Postfach"},
{Slug: "target", Title: "Ziel-Postfach"},
}
paths := map[string]string{
"archive": "/view",
"source": "/boxes/source",
"target": "/boxes/target",
}
buttonClass := "tab ribbon-menu-button"
if active != "" {
if active == "home" {
buttonClass = "tab ribbon-menu-button"
} else {
buttonClass += " active"
}
}
var b strings.Builder
homeClass := "tab app-tab"
if active == "home" {
homeClass += " active"
}
fmt.Fprintf(&b, `Mail-Graveyard `, homeClass)
fmt.Fprintf(&b, ``)
return b.String()
}
func renderRibbonActions(settingsActive bool, user AppUser) string {
settingsClass := "ribbon-icon"
if settingsActive {
settingsClass += " active"
}
return fmt.Sprintf(`
%s ⚙ ⏻ `,
html.EscapeString(user.Username), html.EscapeString(userDisplayName(user)), settingsClass)
}
func renderRibbonTransferMenu(active string) string {
items := []transferMode{
{Slug: "postfach-archiv", Title: "Postfach <--> Archiv-MBox"},
{Slug: "archiv-postfach", Title: "Archiv-MBox <--> Postfach"},
{Slug: "postfach-postfach", Title: "Postfach <--> Postfach"},
}
buttonClass := "tab ribbon-menu-button"
if active != "" {
buttonClass += " active"
}
var b strings.Builder
fmt.Fprintf(&b, ``)
return b.String()
}
func renderBackstage(active string) string {
items := []struct {
Key string
Href string
Label string
}{
{"home", "/", "Start"},
{"archive", "/view", "Archiv-Boxen"},
{"import-export", "/import-export", "Import/Export"},
{"accounts", "/accounts", "Konten-Verwaltung"},
{"archives", "/archives", "Archiv-mbox Verwaltung"},
{"transfer", "/transfer/postfach-archiv", "Mail-Transfer"},
{"users", "/users", "Benutzerverwaltung"},
{"logout", "/logout", "Logout"},
}
var b strings.Builder
b.WriteString(``)
switch kind {
case "archive":
fmt.Fprintf(&b, `Archiv-MBox%s `, transferSelect("archive", archives))
case "target":
fmt.Fprintf(&b, `Ziel-Postfach%s `, transferSelect("target", uniqueAccountValues(accounts, "target")))
default:
fmt.Fprintf(&b, `Quell-Postfach%s `, transferSelect("source", uniqueAccountValues(accounts, "source")))
}
b.WriteString(`
`)
return b.String()
}
func transferSelect(name string, values []string) string {
if len(values) == 0 {
return `Keine Eintraege `, name)
for _, v := range values {
fmt.Fprintf(&b, `%s `, html.EscapeString(v), html.EscapeString(v))
}
b.WriteString(` `)
return b.String()
}
func uniqueAccountValues(accounts []Account, field string) []string {
seen := map[string]bool{}
var out []string
for _, a := range accounts {
value := a.SrcUser
if field == "target" {
value = a.DstUser
}
value = strings.TrimSpace(value)
if value == "" || seen[value] {
continue
}
seen[value] = true
out = append(out, value)
}
sortStrings(out)
return out
}
func renderAccountsTable(w http.ResponseWriter, accounts []Account, editName string) {
if len(accounts) == 0 {
fmt.Fprint(w, `Noch keine Postfaecher eingetragen.
`)
return
}
fmt.Fprint(w, `Name Original Archiv-mbox Ziel Status `)
for _, a := range accounts {
activeClass := ""
if a.Name == editName {
activeClass = ` class="selected"`
}
status := "aktiv"
if !a.Active {
status = "inaktiv"
}
fmt.Fprintf(w, `%s %s %s %s %s
`,
activeClass, urlQuery(a.Name), html.EscapeString(a.Name), html.EscapeString(a.SrcUser),
html.EscapeString(accountMboxDir(a)), html.EscapeString(a.DstUser), status,
html.EscapeString(a.Name), html.EscapeString(a.Name), html.EscapeString(a.Name))
}
fmt.Fprint(w, `
`)
}
func renderUsersTable(w http.ResponseWriter, users []AppUser, editName string) {
if len(users) == 0 {
fmt.Fprint(w, `Noch keine Benutzer eingetragen.
`)
return
}
fmt.Fprint(w, `Name Login/E-Mail Rolle Status `)
for _, u := range users {
activeClass := ""
if u.Username == editName {
activeClass = ` class="selected"`
}
status := "aktiv"
if !u.Active {
status = "gesperrt"
}
nextActive := "0"
toggleLabel := "Sperren"
toggleClass := "btn compact secondary"
if !u.Active {
nextActive = "1"
toggleLabel = "Aktivieren"
}
editButton := fmt.Sprintf(`Bearbeiten `, urlQuery(u.Username))
toggleButton := fmt.Sprintf(``,
html.EscapeString(u.Username), nextActive, toggleClass, toggleLabel)
deleteButton := fmt.Sprintf(``, html.EscapeString(u.Username))
fmt.Fprintf(w, `%s %s %s %s %s%s%s `,
activeClass, html.EscapeString(userDisplayName(u)), html.EscapeString(u.Username), html.EscapeString(u.Role), status, editButton, toggleButton, deleteButton)
}
fmt.Fprint(w, `
`)
}
func renderUserForm(w http.ResponseWriter, r *http.Request, u AppUser) {
roleField := roleSelect(u.Role, IsAdmin(r))
if !IsAdmin(r) {
roleField = `Noch keine Archiv-Mailbox angelegt.
`)
return
}
fmt.Fprint(w, `Archiv-Mailbox Zuordnung Speicher Mails Dubletten `)
for _, archive := range archives {
uses := archiveUses(archive, accounts)
stat := stats[archive]
var actions strings.Builder
fmt.Fprintf(&actions, `Download `, urlQuery(archive))
if stat.Duplicates > 0 {
fmt.Fprintf(&actions, ``, html.EscapeString(archive))
}
if uses == "" {
fmt.Fprintf(&actions, ``, html.EscapeString(archive))
uses = "frei"
}
fmt.Fprintf(w, `%s %s %s %d %d %s
`)
}
func renderArchiveForm(w http.ResponseWriter) {
fmt.Fprint(w, `
Archivlogik
Archiv-mboxen sind eigenstaendige Mailboxen und nicht von einem Quellkonto abhaengig.
Sie koennen leer angelegt oder spaeter per Import mit mbox/PST-Inhalten gefuellt werden.
Entfernen ist nur moeglich, wenn die Mailbox keinem Konto zugeordnet und leer ist.
`)
}
func renderAccountForm(w http.ResponseWriter, a Account, archives []string) {
fmt.Fprintf(w, ``,
html.EscapeString(a.Name), checked(a.Active),
html.EscapeString(a.SrcHost), a.SrcPort, securitySelect("src_security", a.SrcSecurity),
html.EscapeString(a.SrcUser), protoSelect(a.SrcProto), checked(a.SrcInsecure),
archiveSelect(accountMboxDir(a), archives),
html.EscapeString(a.DstHost), a.DstPort, securitySelect("dst_security", a.DstSecurity),
html.EscapeString(a.DstUser), checked(a.DstInsecure))
}
func accountFromForm(r *http.Request) Account {
return Account{
Name: strings.TrimSpace(r.FormValue("name")),
SrcHost: strings.TrimSpace(r.FormValue("src_host")),
SrcPort: parsePort(r.FormValue("src_port")),
SrcSecurity: strings.TrimSpace(r.FormValue("src_security")),
SrcInsecure: r.FormValue("src_insecure") == "1",
SrcUser: strings.TrimSpace(r.FormValue("src_user")),
SrcPass: r.FormValue("src_pass"),
SrcProto: strings.TrimSpace(r.FormValue("src_proto")),
DstHost: strings.TrimSpace(r.FormValue("dst_host")),
DstPort: parsePort(r.FormValue("dst_port")),
DstSecurity: strings.TrimSpace(r.FormValue("dst_security")),
DstInsecure: r.FormValue("dst_insecure") == "1",
DstUser: strings.TrimSpace(r.FormValue("dst_user")),
DstPass: r.FormValue("dst_pass"),
MboxDir: strings.TrimSpace(r.FormValue("mbox_dir")),
Active: r.FormValue("active") == "1",
}
}
func securitySelect(name, current string) string {
if current == "" {
current = "tls"
}
return selectHTML(name, current, []string{"tls", "starttls", "none"})
}
func protoSelect(current string) string {
if current == "" {
current = "imap"
}
return selectHTML("src_proto", current, []string{"imap", "pop3"})
}
func archiveSelect(current string, archives []string) string {
values := append([]string{}, archives...)
found := false
for _, archive := range values {
if archive == current {
found = true
break
}
}
if current != "" && !found {
values = append([]string{current}, values...)
}
if len(values) == 0 {
return `erst Archiv-Mailbox erstellen `)
for _, v := range values {
sel := ""
if v == current {
sel = ` selected`
}
fmt.Fprintf(&b, `%s `, html.EscapeString(v), sel, html.EscapeString(v))
}
b.WriteString(` `)
return b.String()
}
func selectHTML(name, current string, values []string) string {
var b strings.Builder
fmt.Fprintf(&b, ``, name)
for _, v := range values {
sel := ""
if v == current {
sel = ` selected`
}
fmt.Fprintf(&b, `%s `, v, sel, v)
}
b.WriteString(` `)
return b.String()
}
func checked(v bool) string {
if v {
return "checked"
}
return ""
}
func parsePort(value string) int {
port, _ := strconv.Atoi(strings.TrimSpace(value))
return port
}
func archiveUses(archive string, accounts []Account) string {
var uses []string
for _, a := range accounts {
if accountMboxDir(a) == archive {
uses = append(uses, a.Name)
}
}
return strings.Join(uses, ", ")
}
func archiveInUse(archive string) bool {
accounts, err := ListAccounts()
if err != nil {
return true
}
return archiveUses(archive, accounts) != ""
}
func safeArchiveName(value string) (string, error) {
name := strings.TrimSpace(value)
if name == "" {
return "", fmt.Errorf("Name der Archiv-Mailbox fehlt.")
}
if name == "." || name == ".." || strings.ContainsAny(name, `/\:`) || filepath.Clean(name) != name {
return "", fmt.Errorf("Ungueltiger Archiv-Mailbox-Name.")
}
return name, nil
}
func sortStrings(values []string) {
for i := 0; i < len(values); i++ {
for j := i + 1; j < len(values); j++ {
if strings.ToLower(values[j]) < strings.ToLower(values[i]) {
values[i], values[j] = values[j], values[i]
}
}
}
}
func redirectAccounts(w http.ResponseWriter, r *http.Request, edit, msg string) {
key := "msg"
if strings.Contains(strings.ToLower(msg), "fehl") || strings.Contains(strings.ToLower(msg), "pflicht") || strings.Contains(strings.ToLower(msg), "error") {
key = "err"
}
target := "/accounts?" + key + "=" + urlQuery(msg)
if edit != "" {
target += "&edit=" + urlQuery(edit)
}
http.Redirect(w, r, target, http.StatusSeeOther)
}
func redirectArchives(w http.ResponseWriter, r *http.Request, msg string) {
key := "msg"
if strings.Contains(strings.ToLower(msg), "fehl") || strings.Contains(strings.ToLower(msg), "ungueltig") || strings.Contains(strings.ToLower(msg), "nicht") || strings.Contains(strings.ToLower(msg), "error") {
key = "err"
}
http.Redirect(w, r, "/archives?"+key+"="+urlQuery(msg), http.StatusSeeOther)
}
func redirectUsers(w http.ResponseWriter, r *http.Request, edit, msg string) {
key := "msg"
if strings.Contains(strings.ToLower(msg), "fehl") || strings.Contains(strings.ToLower(msg), "pflicht") || strings.Contains(strings.ToLower(msg), "nicht") || strings.Contains(strings.ToLower(msg), "error") {
key = "err"
}
target := "/users?" + key + "=" + urlQuery(msg)
if edit != "" {
target += "&edit=" + urlQuery(edit)
}
http.Redirect(w, r, target, http.StatusSeeOther)
}
func urlQuery(value string) string {
return url.QueryEscape(value)
}