feat: implement mail-login directadmin plugin

2026-06-30 11:31:19 +02:00
parent f6506e3293
commit 77c5431db0
34 changed files with 1620 additions and 0 deletions
@@ -0,0 +1,89 @@
+#!/usr/local/bin/php
+<?php
+declare(strict_types=1);
+
+$config = [
+    'base_url' => getenv('DA_BASE_URL') ?: 'https://127.0.0.1:2222',
+    'user' => getenv('DA_API_USER') ?: '',
+    'key' => getenv('DA_API_LOGIN_KEY') ?: '',
+    'audit_log' => getenv('MAIL_LOGIN_AUDIT_LOG') ?: '/usr/local/hitme_plugins/mail-login-helper/logs/audit.log',
+];
+
+if ($config['user'] === '' || $config['key'] === '') {
+    fwrite(STDERR, "DirectAdmin API credentials are required for cleanup\n");
+    exit(2);
+}
+
+$base = rtrim($config['base_url'], '/');
+$now = time();
+$entries = apiRequest('GET', $base . '/api/login-keys/urls', $config);
+if (!is_array($entries)) {
+    fwrite(STDERR, "DirectAdmin returned invalid login URL list\n");
+    exit(1);
+}
+
+$deleted = 0;
+foreach ($entries as $entry) {
+    if (!is_array($entry) || empty($entry['id']) || empty($entry['expires'])) {
+        continue;
+    }
+    $expires = strtotime((string)$entry['expires']);
+    if ($expires !== false && $expires < $now) {
+        apiRequest('DELETE', $base . '/api/login-keys/urls/' . rawurlencode((string)$entry['id']), $config);
+        $deleted++;
+    }
+}
+
+audit($config['audit_log'], [
+    'event' => 'cleanup_expired_login_urls',
+    'result' => 'success',
+    'deleted' => $deleted,
+]);
+
+echo "Deleted expired login URLs: {$deleted}\n";
+
+/**
+ * @param array<string,string> $config
+ * @return mixed
+ */
+function apiRequest(string $method, string $url, array $config): mixed
+{
+    $ch = curl_init($url);
+    if ($ch === false) {
+        throw new RuntimeException('Cannot initialize curl');
+    }
+    curl_setopt_array($ch, [
+        CURLOPT_CUSTOMREQUEST => $method,
+        CURLOPT_RETURNTRANSFER => true,
+        CURLOPT_HTTPAUTH => CURLAUTH_BASIC,
+        CURLOPT_USERPWD => $config['user'] . ':' . $config['key'],
+        CURLOPT_CONNECTTIMEOUT => 5,
+        CURLOPT_TIMEOUT => 20,
+        CURLOPT_HTTPHEADER => ['Accept: application/json'],
+    ]);
+    $body = curl_exec($ch);
+    $code = (int)curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
+    $error = curl_error($ch);
+    curl_close($ch);
+    if ($body === false || $code >= 400) {
+        throw new RuntimeException($error !== '' ? $error : 'DirectAdmin API request failed');
+    }
+    if ($method === 'DELETE') {
+        return true;
+    }
+    return json_decode((string)$body, true, 512, JSON_THROW_ON_ERROR);
+}
+
+/**
+ * @param array<string,mixed> $fields
+ */
+function audit(string $path, array $fields): void
+{
+    $dir = dirname($path);
+    if (!is_dir($dir)) {
+        mkdir($dir, 0700, true);
+    }
+    $fields['timestamp'] = gmdate('c');
+    file_put_contents($path, json_encode($fields, JSON_UNESCAPED_SLASHES) . "\n", FILE_APPEND | LOCK_EX);
+    chmod($path, 0600);
+}