AcadeNice/corentin_wakdo
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(auth): envoi reel de l'email de reset via relais SMTP (Brevo) #96

Merged
Corentin merged 1 commit from feat/smtp-mailer-brevo into dev 2026-06-23 15:34:28 +02:00
Conversation 0 Commits 1 Files changed 10 +620 -1
Corentin commented 2026-06-23 15:31:49 +02:00
Owner
Copy link
No description provided.
Corentin added 1 commit 2026-06-23 15:31:49 +02:00
feat(auth): envoi reel de l'email de reset via relais SMTP (Brevo)
All checks were successful
CI / secret-scan (pull_request) Successful in 15s
Details
CI / php-lint (pull_request) Successful in 28s
Details
CI / static-tests (pull_request) Successful in 1m6s
Details
CI / js-tests (pull_request) Successful in 40s
Details
CI / secret-scan (push) Successful in 14s
Details
CI / php-lint (push) Successful in 33s
Details
CI / static-tests (push) Successful in 1m11s
Details
CI / js-tests (push) Successful in 38s
Details
693e4a03bf 
Client SMTP maison (zero lib, contrainte from-scratch) : ESMTP + STARTTLS +
AUTH LOGIN, conduit par SmtpClient contre un SmtpTransport injectable (seam de
test). SmtpMailer assemble un message text/plain UTF-8 (dot-stuffing, en-tetes
RFC2047) et implemente l'interface Mailer existante. PasswordResetController
choisit SmtpMailer si SMTP_HOST+USER+PASSWORD presents, sinon garde LogMailer
(dev sans infra mail inchange).

STARTTLS exige avant AUTH (pas d'auth en clair). Garde anti-injection CRLF sur
les adresses (SmtpClient) + filter_var du destinataire (SmtpMailer). readReply
borne (anti-boucle sur reponse malformee). Secrets uniquement en .env (hote) :
placeholders dans .env.example / .env.prod.example, rien de versionne.

Revue compliance : verdict block initial (injection CRLF + readReply non borne),
2 must_fix corriges + tests de regression. 8 tests SMTP, 429 total, PHPStan L6.
Corentin scheduled this pull request to auto merge when all checks succeed 2026-06-23 15:31:50 +02:00
Corentin merged commit ef71101453 into dev 2026-06-23 15:34:28 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
auto-merge

Fusion automatique sur CI verte

No labels
auto-merge
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: AcadeNice/corentin_wakdo#96
No description provided.
Delete branch "feat/smtp-mailer-brevo"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?