The webmail is now a PWA: web app manifest, icons (any + maskable, a status-bar badge), theme-coloured title bar following the chosen theme, and an app-icon badge with the unread Inbox count. The service worker is always installed; offline access is on only when it is registered as /sw.js?offline=1, so turning it on or off is an update that applies at once. Notifications (Settings → Accounts → Notifications, per device) use Web Push. Encryption (RFC 8291) and VAPID signing (RFC 8292) are implemented in app/push/webpush.py — pywebpush needs a newer cryptography than we pin — and checked against the RFC's worked example. The server makes its key pair on first use (private half encrypted with MASTER_KEY). New mail found by the live sync in an Inbox enqueues a job 5 s later that tells the user's devices about messages still unread there, under 2 hours old and not from the user; more than three become one "N new messages". A subscription belongs to the session it was made under: signed out or revoked, nothing more is sent there. Endpoints are limited to the known push services (no SSRF). Nothing shows while the app is in front (except on Apple, which requires it). Tested with real pushes through Google's service in Chromium and Opera. The mobile drawer gets "Install app": Chrome's own install dialog where the browser offers one, else short steps for iPhone/iPad, Opera and Firefox, with "Don't show this again". docs/nas-install.md §5.3 covers installing, notifications, Public URL and a later Android app (TWA). Migration 0022: push_subscriptions, app_settings.vapid_*. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
58 lines
2.1 KiB
Python
58 lines
2.1 KiB
Python
"""REST API routers (SPEC §9.1). One module per route group."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from fastapi import FastAPI
|
|
|
|
|
|
def register_routers(app: FastAPI) -> None:
|
|
"""Mount all API routers under the ``/api`` prefix.
|
|
|
|
Routers are added milestone by milestone; imports are local so the app
|
|
factory stays importable while modules are still being built out.
|
|
"""
|
|
from app.api.accounts import router as accounts_router
|
|
from app.api.actions import router as actions_router
|
|
from app.api.admin import router as admin_router
|
|
from app.api.avatar import router as avatar_router
|
|
from app.api.compose import router as compose_router
|
|
from app.api.mailboxes import router as mailboxes_router
|
|
from app.api.messages import router as messages_router
|
|
from app.api.plugins import router as plugins_router
|
|
from app.api.push import router as push_router
|
|
from app.api.recipients import router as recipients_router
|
|
from app.api.saved_searches import router as saved_searches_router
|
|
from app.api.search import router as search_router
|
|
from app.api.settings import router as settings_router
|
|
from app.api.spellcheck import router as spellcheck_router
|
|
from app.api.threads import router as threads_router
|
|
from app.identity.routes import router as auth_router
|
|
from app.ws import router as ws_router
|
|
|
|
for router in (
|
|
auth_router,
|
|
accounts_router,
|
|
threads_router,
|
|
messages_router,
|
|
search_router,
|
|
actions_router,
|
|
compose_router,
|
|
recipients_router,
|
|
settings_router,
|
|
mailboxes_router,
|
|
saved_searches_router,
|
|
avatar_router,
|
|
plugins_router,
|
|
admin_router,
|
|
spellcheck_router,
|
|
push_router,
|
|
):
|
|
app.include_router(router, prefix="/api")
|
|
app.include_router(ws_router, prefix="/api")
|
|
|
|
# Mount discovered plugin routers at /api/plugins/{name} (SPEC §11). Hooks are
|
|
# subscribed in the lifespan startup so they register once per process.
|
|
from app.plugins import loader
|
|
|
|
loader.mount_routers(app)
|