2 Commits

Author	SHA1	Message	Date
tliu93	2bc5d6ea9a	M2-T05: add SMTP test action API (POST /api/config/smtp/test) ... - reuses send_smtp_test_email; tri-state result success(200)/config-error(400)/failed(502) - session + CSRF protected; never echoes SMTP secrets - SmtpTestResponse schema; regenerate openapi/ - extend tests/test_api_config.py (3 states + 401 + missing-CSRF 403)	2026-06-13 15:20:50 +02:00
tliu93	c2b1b7b751	M2-T01: add config JSON API (GET/PUT /api/config) ... - new app/api/routes/api/ package with shared require_session (401) and require_csrf (presence-only X-CSRF-Token, 403) dependencies - GET /api/config returns masked config sections; PUT /api/config reuses save_config_updates (blank secret keeps old; invalid -> 422, no write) - session-protected; PUT also CSRF-protected - register router in app/main.py; regenerate openapi/ - tests/test_api_config.py	2026-06-12 23:08:14 +02:00