Sender setup: edit, SMTP authentication and security, reply-to, test send #35

New issue

Closed

opened 2026-10-15 01:18:49 -04:00 by vmanne-poc · 0 comments

vmanne-poc commented

2026-10-15 01:18:49 -04:00

Owner

Today:

Senders can only be created or deleted.
The SMTP form has host and port only: no username, password, or TLS choice.
There is no reply-to and no way to check that a sender works.
TLS certificate checks are turned off (rejectUnauthorized: false).

Plan

GET and PATCH /projects/:id/senders/:sid.
New sender and Edit sender pages:
- internal name, from address and from name, each with help text
- an optional reply-to name and address
- SMTP settings: server, port, authentication (none or password), username, password (write-only; leave blank to keep the current one)
- connection security: SSL/TLS on 465, STARTTLS on 587, or none
- SES settings: region, access key, secret (write-only)
Verify TLS certificates by default. A per-sender "allow self-signed" option is for on-prem relays, with a warning.
Send test email (POST .../senders/:sid/test, sent to the signed-in user) returns the server's error text when it fails.
Deleting a sender that DRAFT or SCHEDULED campaigns use gets a 409 with an explanation. Deleting needs confirmation.
Depends on the secret-masking fix in Phase 9.5.

**Today:** - Senders can only be created or deleted. - The SMTP form has host and port only: no username, password, or TLS choice. - There is no reply-to and no way to check that a sender works. - TLS certificate checks are turned off (`rejectUnauthorized: false`). **Plan** - `GET` and `PATCH /projects/:id/senders/:sid`. - **New sender** and **Edit sender** pages: - internal name, from address and from name, each with help text - an optional reply-to name and address - SMTP settings: server, port, authentication (none or password), username, password (write-only; leave blank to keep the current one) - connection security: SSL/TLS on 465, STARTTLS on 587, or none - SES settings: region, access key, secret (write-only) - Verify TLS certificates by default. A per-sender "allow self-signed" option is for on-prem relays, with a warning. - **Send test email** (`POST .../senders/:sid/test`, sent to the signed-in user) returns the server's error text when it fails. - Deleting a sender that DRAFT or SCHEDULED campaigns use gets a 409 with an explanation. Deleting needs confirmation. - Depends on the secret-masking fix in Phase 9.5.

vmanne-poc added this to the Phase 10: Contacts, senders & sending milestone

2026-10-15 01:18:49 -04:00

vmanne-poc added the

security

feature

labels

2026-10-15 01:18:49 -04:00

vmanne-poc referenced this issue from a commit

2026-10-15 08:41:32 -04:00

Sender setup: edit, SMTP security and auth, reply-to, test send, safe delete

vmanne-poc referenced this issue from a pull request that will close it,

2026-10-15 08:51:37 -04:00