v_2.3

2026-09-13 20:09:20 +01:00
commit 9b5cc30fb4
482 changed files with 57569 additions and 0 deletions
@@ -0,0 +1,139 @@
+"""WTForms — all forms get CSRF protection automatically via Flask-WTF."""
+from flask_wtf import FlaskForm
+from flask_wtf.file import FileField, FileAllowed, FileRequired
+from wtforms import StringField, PasswordField, BooleanField, IntegerField, SelectField, DateField, TextAreaField, SubmitField
+from wtforms.validators import DataRequired, Email, Length, EqualTo, Optional, NumberRange, Regexp
+
+
+class LoginForm(FlaskForm):
+    username = StringField("Username", validators=[DataRequired(), Length(min=2, max=64)])
+    password = PasswordField("Password", validators=[DataRequired(), Length(min=1, max=200)])
+    submit = SubmitField("Sign in")
+
+
+class SetupAdminForm(FlaskForm):
+    """First-run form: create the very first administrator account."""
+    username = StringField("Admin username", validators=[
+        DataRequired(),
+        Length(min=2, max=64),
+        Regexp(r"^[A-Za-z0-9_.\-]+$", message="Letters, digits, underscore, dot, dash only."),
+    ])
+    email = StringField("Admin email", validators=[DataRequired(), Email(), Length(max=255)])
+    password = PasswordField("Password", validators=[
+        DataRequired(),
+        Length(min=10, max=200, message="Min 10 characters"),
+    ])
+    confirm = PasswordField("Confirm password", validators=[
+        DataRequired(),
+        EqualTo("password", message="Passwords must match."),
+    ])
+    submit = SubmitField("Create administrator")
+
+
+class AvatarForm(FlaskForm):
+    avatar = FileField("Avatar image", validators=[
+        FileRequired(message="Choose an image file."),
+        FileAllowed(["png", "jpg", "jpeg", "gif", "webp"], "Images only (png, jpg, gif, webp)."),
+    ])
+    submit = SubmitField("Upload avatar")
+
+
+class MfaForm(FlaskForm):
+    code = StringField("Authentication code", validators=[
+        DataRequired(),
+        Length(min=6, max=6, message="Must be 6 digits"),
+        Regexp(r"^\d{6}$", message="Digits only"),
+    ])
+    submit = SubmitField("Verify")
+
+
+class MfaSetupForm(FlaskForm):
+    code = StringField("Verification code", validators=[
+        DataRequired(),
+        Length(min=6, max=6),
+        Regexp(r"^\d{6}$"),
+    ])
+    submit = SubmitField("Enable MFA")
+
+
+class ChangePasswordForm(FlaskForm):
+    current_password = PasswordField("Current password", validators=[DataRequired()])
+    new_password = PasswordField("New password", validators=[
+        DataRequired(),
+        Length(min=10, max=200, message="Min 10 characters"),
+    ])
+    confirm = PasswordField("Confirm new password", validators=[
+        DataRequired(),
+        EqualTo("new_password", message="Passwords must match."),
+    ])
+    submit = SubmitField("Change password")
+
+
+class AlertForm(FlaskForm):
+    title = StringField("Title", validators=[DataRequired(), Length(max=200)])
+    category = StringField("Category", validators=[Optional(), Length(max=64)])
+    description = TextAreaField("Description", validators=[Optional(), Length(max=5000)])
+    expiration_date = DateField("Expiration date", validators=[DataRequired()], format="%Y-%m-%d")
+    reminder_days = StringField(
+        "Reminder days (comma-separated, days before expiration)",
+        validators=[DataRequired(), Regexp(r"^[\d,\s]+$", message="Numbers separated by commas only")],
+        default="30,14,7,1",
+    )
+    is_active = BooleanField("Active", default=True)
+    submit = SubmitField("Save")
+
+
+class UserForm(FlaskForm):
+    username = StringField("Username", validators=[
+        DataRequired(),
+        Length(min=2, max=64),
+        Regexp(r"^[A-Za-z0-9_.\-]+$", message="Letters, digits, underscore, dot, dash only."),
+    ])
+    email = StringField("Email", validators=[DataRequired(), Email(), Length(max=255)])
+    role = SelectField("Role", choices=[("user", "User (view only)"), ("admin", "Administrator")])
+    is_active = BooleanField("Active", default=True)
+    password = PasswordField("Password (leave blank to keep current)", validators=[Optional(), Length(min=10, max=200)])
+    submit = SubmitField("Save")
+
+
+class MailConfigForm(FlaskForm):
+    smtp_host = StringField("SMTP Host", validators=[DataRequired(), Length(max=255)])
+    smtp_port = IntegerField("Port", validators=[DataRequired(), NumberRange(min=1, max=65535)])
+    smtp_username = StringField("Username", validators=[Optional(), Length(max=255)])
+    smtp_password = PasswordField("Password (leave blank to keep current)", validators=[Optional(), Length(max=255)])
+    smtp_encryption = SelectField("Encryption", choices=[
+        ("none", "None (plain — not recommended)"),
+        ("starttls", "STARTTLS (port 587)"),
+        ("ssl", "SSL/TLS (port 465)"),
+    ])
+    smtp_from_address = StringField("From address", validators=[DataRequired(), Email(), Length(max=255)])
+    smtp_from_name = StringField("From name", validators=[Optional(), Length(max=255)])
+
+    # ---- IMAP: used to save a copy of every sent message to the Sent folder ----
+    imap_enabled = BooleanField("Save a copy of sent mail to the mailbox (IMAP)", default=True)
+    imap_host = StringField("IMAP Host", validators=[Optional(), Length(max=255)])
+    imap_port = IntegerField("IMAP Port", validators=[Optional(), NumberRange(min=1, max=65535)])
+    imap_username = StringField("IMAP Username (blank = use SMTP username)", validators=[Optional(), Length(max=255)])
+    imap_password = PasswordField("IMAP Password (blank = keep current / use SMTP password)", validators=[Optional(), Length(max=255)])
+    imap_sent_folder = StringField("Sent folder name", validators=[Optional(), Length(max=128)])
+
+    submit = SubmitField("Save mail configuration")
+
+
+class TestMailForm(FlaskForm):
+    test_recipient = StringField("Send test email to", validators=[DataRequired(), Email()])
+    submit = SubmitField("Send test email")
+
+
+class LogEmailForm(FlaskForm):
+    """Email an exported log (CSV attachment) to a destination address."""
+    log_recipient = StringField("Email log to", validators=[DataRequired(), Email()])
+    submit = SubmitField("Email log")
+
+
+class GlobalSettingsForm(FlaskForm):
+    default_reminder_days = StringField(
+        "Default reminder days (comma-separated)",
+        validators=[DataRequired(), Regexp(r"^[\d,\s]+$")],
+    )
+    submit = SubmitField("Save settings")