Files
metabuilder/workflow/plugins/ts/email-plugins.ts
johndoe6345789 df5398a7ee feat(auth): Phase 7 Flask authentication middleware with JWT and multi-tenant isolation
Complete implementation of enterprise-grade authentication middleware for email service:

Features:
- JWT token creation/validation with configurable expiration
- Bearer token extraction and validation
- Multi-tenant isolation enforced at middleware level
- Role-based access control (RBAC) with user/admin roles
- Row-level security (RLS) for resource access
- Automatic request logging with user context and audit trail
- CORS configuration for email client frontend
- Rate limiting (50 req/min per user with Redis backend)
- Comprehensive error handling with proper HTTP status codes

Implementation:
- Enhanced src/middleware/auth.py (415 lines)
  - JWTConfig class for token management
  - create_jwt_token() for token generation
  - decode_jwt_token() for token validation
  - @verify_tenant_context decorator for auth middleware
  - @verify_role decorator for RBAC
  - verify_resource_access() for row-level security
  - log_request_context() for audit logging

Testing:
- 52 comprehensive test cases covering all features
- 100% pass rate with fast execution (0.15s)
- Test categories: JWT, multi-tenant, RBAC, RLS, logging, integration
- Full coverage of error scenarios and edge cases

Documentation:
- AUTH_MIDDLEWARE.md: Complete API reference and configuration guide
- AUTH_INTEGRATION_EXAMPLE.py: Real-world usage examples for 5+ scenarios
- PHASE_7_SUMMARY.md: Implementation summary with checklist
- Inline code documentation with type hints

Security:
- Multi-tenant data isolation at all levels
- Constant-time password comparison
- JWT signature validation
- CORS protection
- Rate limiting against abuse
- Comprehensive audit logging

Dependencies Added:
- PyJWT==2.8.1

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
2026-01-24 00:20:19 +00:00

500 lines
12 KiB
TypeScript

/**
* Email Operation Plugin Node Definitions
* Registers email plugins (imap-sync, imap-search, email-parser) with workflow engine
*/
/**
* IMAP Sync Node Definition
* Performs incremental synchronization of emails from IMAP server
*
* @example
* {
* "id": "sync-inbox",
* "type": "node",
* "nodeType": "imap-sync",
* "name": "Sync Inbox",
* "description": "Synchronize new emails from Gmail inbox",
* "inputs": [
* {
* "id": "imapId",
* "name": "IMAP Account ID",
* "type": "string",
* "required": true,
* "description": "UUID of email account configuration"
* },
* {
* "id": "folderId",
* "name": "Folder ID",
* "type": "string",
* "required": true,
* "description": "UUID of email folder to sync"
* },
* {
* "id": "syncToken",
* "name": "Sync Token",
* "type": "string",
* "required": false,
* "description": "IMAP sync token from previous sync (UIDVALIDITY:UIDNEXT)"
* },
* {
* "id": "maxMessages",
* "name": "Max Messages",
* "type": "number",
* "required": false,
* "description": "Maximum messages to sync per execution (default: 100)"
* }
* ],
* "outputs": [
* {
* "id": "status",
* "name": "Status",
* "type": "string",
* "description": "Sync status: 'synced', 'error'"
* },
* {
* "id": "data",
* "name": "Sync Data",
* "type": "object",
* "description": "Contains syncedCount, errors array, newSyncToken, lastSyncAt"
* }
* ]
* }
*/
export const IMAPSyncNodeDef = {
nodeType: 'imap-sync',
category: 'email-integration',
label: 'IMAP Sync',
description: 'Synchronize emails from IMAP server (incremental)',
inputs: [
{
id: 'imapId',
label: 'IMAP Account ID',
type: 'string',
required: true,
description: 'UUID of email account configuration'
},
{
id: 'folderId',
label: 'Folder ID',
type: 'string',
required: true,
description: 'UUID of email folder to sync'
},
{
id: 'syncToken',
label: 'Sync Token',
type: 'string',
required: false,
description: 'IMAP sync token from previous sync (UIDVALIDITY:UIDNEXT)'
},
{
id: 'maxMessages',
label: 'Max Messages',
type: 'number',
required: false,
default: 100,
description: 'Maximum messages to sync per execution'
}
],
outputs: [
{
id: 'status',
label: 'Status',
type: 'string',
description: "Sync status: 'synced' or 'error'"
},
{
id: 'data',
label: 'Sync Data',
type: 'object',
description: 'Object containing syncedCount, errors array, newSyncToken, lastSyncAt'
}
]
} as const;
/**
* IMAP Search Node Definition
* Executes IMAP SEARCH commands to find messages matching criteria
*
* @example
* {
* "id": "find-unread",
* "type": "node",
* "nodeType": "imap-search",
* "name": "Find Unread",
* "description": "Search for unread emails",
* "inputs": [
* {
* "id": "imapId",
* "name": "IMAP Account ID",
* "type": "string",
* "required": true
* },
* {
* "id": "folderId",
* "name": "Folder ID",
* "type": "string",
* "required": true
* },
* {
* "id": "criteria",
* "name": "Search Criteria",
* "type": "string",
* "required": true,
* "description": "IMAP SEARCH criteria (e.g., 'UNSEEN SINCE 01-Jan-2026')"
* },
* {
* "id": "limit",
* "name": "Result Limit",
* "type": "number",
* "required": false,
* "description": "Maximum results to return (default: 100)"
* }
* ],
* "outputs": [
* {
* "id": "status",
* "name": "Status",
* "type": "string",
* "description": "Search status: 'found', 'error'"
* },
* {
* "id": "data",
* "name": "Search Results",
* "type": "object",
* "description": "Contains messageIds array, totalCount, criteria, executedAt"
* }
* ]
* }
*/
export const IMAPSearchNodeDef = {
nodeType: 'imap-search',
category: 'email-integration',
label: 'IMAP Search',
description: 'Search emails using IMAP SEARCH command',
inputs: [
{
id: 'imapId',
label: 'IMAP Account ID',
type: 'string',
required: true,
description: 'UUID of email account configuration'
},
{
id: 'folderId',
label: 'Folder ID',
type: 'string',
required: true,
description: 'UUID of email folder to search'
},
{
id: 'criteria',
label: 'Search Criteria',
type: 'string',
required: true,
description: 'IMAP SEARCH criteria (e.g., "UNSEEN SINCE 01-Jan-2026 FLAGGED")'
},
{
id: 'limit',
label: 'Result Limit',
type: 'number',
required: false,
default: 100,
description: 'Maximum results to return'
}
],
outputs: [
{
id: 'status',
label: 'Status',
type: 'string',
description: "Search status: 'found' or 'error'"
},
{
id: 'data',
label: 'Search Results',
type: 'object',
description: 'Object containing messageIds array, totalCount, criteria, executedAt'
}
]
} as const;
/**
* Email Parser Node Definition
* Parses RFC 5322 format email messages
*
* @example
* {
* "id": "parse-email",
* "type": "node",
* "nodeType": "email-parser",
* "name": "Parse Email",
* "description": "Parse email message from raw RFC 5322 format",
* "inputs": [
* {
* "id": "message",
* "name": "Message",
* "type": "string",
* "required": true,
* "description": "Email message in RFC 5322 format"
* },
* {
* "id": "includeAttachments",
* "name": "Include Attachments",
* "type": "boolean",
* "required": false,
* "description": "Whether to extract attachment metadata (default: true)"
* }
* ],
* "outputs": [
* {
* "id": "status",
* "name": "Status",
* "type": "string",
* "description": "Parse status: 'parsed', 'error'"
* },
* {
* "id": "data",
* "name": "Parsed Email",
* "type": "object",
* "description": "Contains headers, body, textBody, htmlBody, attachments, parseTime"
* }
* ]
* }
*/
export const EmailParserNodeDef = {
nodeType: 'email-parser',
category: 'email-utility',
label: 'Email Parser',
description: 'Parse RFC 5322 format email messages',
inputs: [
{
id: 'message',
label: 'Message',
type: 'string',
required: true,
description: 'Email message in RFC 5322 format'
},
{
id: 'includeAttachments',
label: 'Include Attachments',
type: 'boolean',
required: false,
default: true,
description: 'Whether to extract attachment metadata'
}
],
outputs: [
{
id: 'status',
label: 'Status',
type: 'string',
description: "Parse status: 'parsed' or 'error'"
},
{
id: 'data',
label: 'Parsed Email',
type: 'object',
description: 'Object containing headers, body, textBody, htmlBody, attachments, parseTime'
}
]
} as const;
/**
* SMTP Send Node Definition
* Sends emails via SMTP with attachment support
*
* @example
* {
* "id": "send-email",
* "type": "node",
* "nodeType": "smtp-send",
* "name": "Send Email",
* "description": "Send email via SMTP",
* "inputs": [
* {
* "id": "from",
* "name": "From",
* "type": "string",
* "required": true,
* "description": "Sender email address"
* },
* {
* "id": "to",
* "name": "To",
* "type": "string[]",
* "required": true,
* "description": "Recipient email addresses"
* },
* {
* "id": "subject",
* "name": "Subject",
* "type": "string",
* "required": true,
* "description": "Email subject line"
* },
* {
* "id": "textBody",
* "name": "Text Body",
* "type": "string",
* "required": false,
* "description": "Plain text email body"
* },
* {
* "id": "htmlBody",
* "name": "HTML Body",
* "type": "string",
* "required": false,
* "description": "HTML email body"
* },
* {
* "id": "cc",
* "name": "CC",
* "type": "string[]",
* "required": false,
* "description": "CC recipient addresses"
* },
* {
* "id": "bcc",
* "name": "BCC",
* "type": "string[]",
* "required": false,
* "description": "BCC recipient addresses"
* },
* {
* "id": "attachments",
* "name": "Attachments",
* "type": "object[]",
* "required": false,
* "description": "Array of attachments with filename, contentType, data (base64)"
* },
* {
* "id": "smtpConfig",
* "name": "SMTP Config",
* "type": "object",
* "required": false,
* "description": "SMTP server configuration (host, port, username, password, encryption)"
* }
* ],
* "outputs": [
* {
* "id": "status",
* "name": "Status",
* "type": "string",
* "description": "Send status: 'sent', 'partial', 'failed'"
* },
* {
* "id": "data",
* "name": "Send Result",
* "type": "object",
* "description": "Contains messageId, sentAt, successCount, failureCount, errors"
* }
* ]
* }
*/
export const SMTPSendNodeDef = {
nodeType: 'smtp-send',
category: 'email-integration',
label: 'SMTP Send',
description: 'Send emails via SMTP with HTML/text alternatives and attachments',
inputs: [
{
id: 'from',
label: 'From',
type: 'string',
required: true,
description: 'Sender email address'
},
{
id: 'to',
label: 'To',
type: 'string[]',
required: true,
description: 'Recipient email addresses (at least 1 required)'
},
{
id: 'cc',
label: 'CC',
type: 'string[]',
required: false,
description: 'CC recipient email addresses'
},
{
id: 'bcc',
label: 'BCC',
type: 'string[]',
required: false,
description: 'BCC recipient email addresses (hidden from other recipients)'
},
{
id: 'subject',
label: 'Subject',
type: 'string',
required: true,
description: 'Email subject line'
},
{
id: 'textBody',
label: 'Text Body',
type: 'string',
required: false,
description: 'Plain text email body (textBody or htmlBody required)'
},
{
id: 'htmlBody',
label: 'HTML Body',
type: 'string',
required: false,
description: 'HTML email body (textBody or htmlBody required)'
},
{
id: 'attachments',
label: 'Attachments',
type: 'object[]',
required: false,
description: 'Array of attachments with filename, contentType (MIME), data (base64)'
},
{
id: 'credentialId',
label: 'Credential ID',
type: 'string',
required: false,
description: 'UUID of Credential entity with SMTP config (or use smtpConfig)'
},
{
id: 'smtpConfig',
label: 'SMTP Config',
type: 'object',
required: false,
description: 'Inline SMTP configuration (host, port, username, password, encryption)'
}
],
outputs: [
{
id: 'status',
label: 'Status',
type: 'string',
description: "Send status: 'sent', 'partial', or 'failed'"
},
{
id: 'data',
label: 'Send Result',
type: 'object',
description: 'Object containing messageId, sentAt, successCount, failureCount, errors array'
}
]
} as const;
/**
* Email Plugin Node Registry
* Central registry of all email operation node definitions
*/
export const EMAIL_PLUGIN_NODES = {
'imap-sync': IMAPSyncNodeDef,
'imap-search': IMAPSearchNodeDef,
'email-parser': EmailParserNodeDef,
'smtp-send': SMTPSendNodeDef
} as const;
export type EmailNodeType = keyof typeof EMAIL_PLUGIN_NODES;