From dd6445547b68b8c4b9a3bd91a9911d4aa8b44904 Mon Sep 17 00:00:00 2001
From: Tero <tero.huttunen@eternityproject.fi>
Date: Sat, 29 Aug 2026 20:29:13 +0300
Subject: [PATCH] Add script for sending test message

---
 README.md                                     |   6 +-
 TODO.md                                       |   2 +-
 .../__pycache__/check-smtp.cpython-314.pyc    | Bin 3772 -> 3772 bytes
 .../send-test-email.cpython-314.pyc           | Bin 0 -> 4769 bytes
 scripts/send-test-email.py                    |  68 ++++++++++++++++++
 5 files changed, 72 insertions(+), 4 deletions(-)
 create mode 100644 scripts/__pycache__/send-test-email.cpython-314.pyc
 create mode 100644 scripts/send-test-email.py

diff --git a/README.md b/README.md
index d40414a..93ce30d 100644
--- a/README.md
+++ b/README.md
@@ -62,11 +62,11 @@ The command prints `SMTP_CONNECTION_OK` only after the SMTP server accepts the S
 
 6. Send a delivery test to an inbox you control:
 
-```powershell
-.\scripts\test-smtp.ps1 -To you@example.com
+```sh
+python ./scripts/send-test-email.py --to you@example.com
 ```
 
-The command prints `SMTP_TEST_SENT_TO=<address>` only after the SMTP server accepts the message. Confirm the message arrives, then use **Forgot your password?** in the application to verify a real reset email and link.
+The command works on Windows, Linux, and macOS. It prints `SMTP_TEST_SENT_TO=<address>` only after the SMTP server accepts the message. Confirm the message arrives, then use **Forgot your password?** in the application to verify a real reset email and link. The existing PowerShell alternative remains available as `./scripts/test-smtp.ps1 -To you@example.com`.
 
 ## Production notes
 
diff --git a/TODO.md b/TODO.md
index d13ede4..a3ac9e1 100644
--- a/TODO.md
+++ b/TODO.md
@@ -4,7 +4,7 @@
 - [x] Local accounts, administrator approval, and TOTP MFA.
 - [x] QR-based MFA enrollment for iPhone and Android authenticators.
 - [x] Email addresses, member password changes, and expiring password-reset links.
-- [ ] Configure production SMTP credentials and verify outgoing email delivery. Run `python ./scripts/check-smtp.py`, then complete after the delivery test in [README.md](README.md) is received.
+- [ ] Configure production SMTP credentials and verify outgoing email delivery. Run `python ./scripts/check-smtp.py`, then `python ./scripts/send-test-email.py --to you@example.com`; complete after the delivery test in [README.md](README.md) is received.
 - [ ] Run `./scripts/rotate-admin.ps1` on Windows or `sh ./scripts/rotate-admin.sh` on Linux/macOS, then sign in as `admin` and scan the new MFA QR code to complete authenticator enrollment.
 - [x] Add CSRF protection to all state-changing forms.
 - [ ] Add automated database backups and test restoration.
diff --git a/scripts/__pycache__/check-smtp.cpython-314.pyc b/scripts/__pycache__/check-smtp.cpython-314.pyc
index 402e4764586864e682850d9ec9ddff1e86bb0c7e..edc70952156d4334bbbacaeda8dec21a5558c998 100644
GIT binary patch
delta 19
ZcmdlZyGNEwn~#@^0SLszHgav^0{|#f1GE4D

delta 19
ZcmdlZyGNEwn~#@^0SJDIZsgj;2LLUg1eO2*

diff --git a/scripts/__pycache__/send-test-email.cpython-314.pyc b/scripts/__pycache__/send-test-email.cpython-314.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..51577f4b89ad2d4ccba064d65748d54f9a2e60f0
GIT binary patch
literal 4769
zcmai1|4$p|8Gp}r=dWk;#f0w(mq3#k0;G_PGyzgl3~>n9Jv*dbOgzUv;F$4wcjpk?
zZKXd<g0>QkIw?ep6sk>Xs!5wVMM|ShN>g=R+n?+jYI04KP3<4Rnn>N+U-rCbAEt;U
zFZkZ)ec$JK-{*Pn`SQ6Ihuw;xy;J%2)I$qGU*mz^j0NJ+IuLV+Lkc>NIKo3Hgw`7r
zgVvJ@sr8gXX+5pb&>K9)lSajO(xjLgupH?zpR_0zjix--lQzZHfH<qdaC8+??3@vv
zj<FKXbmS$3q9q8`qdGKJx*Lr-cB4ZDRSpq(Vv^v9M#Q4AG9!vUgL#$mG3Rc?na9c*
z)L|H-eftX{n>x<YWylX3w4KizHt(mD_mvBTfR2$nkwCa?DYu`GM_Dn>v;3t*Oo#{y
z>mLsI*eD+pF7nbWtMIbI^3!1<#wKMUKEcMsNI1r}@$rkS%qt2^$!#MpgKCb36<!gh
zdDV=cDcI9RsEiwn4)d}cp1@<u7gi=C1q(GjP4Fb)_oy25o<pO^w|O;h%EsO7D~u-?
zd>=t9r!@{0t%MzDeZJUp1ZU_f?Cis5ZfW}Mm!g4>5lRrFgb#dWYty;#x~@yK8tVf5
zwyoR<JVMuNgBx_NM?<g?NZ7ZLpmd2D;FKB@)F`RTPUK}dkTpC>yDj`v2n8MbNxo8@
zD)v5Sk=CgvpD;>2>HO{1I9j)B+f}2!dT7IYhdx2bf_5R!)QDW>RR6FbYYvEAuZ?{{
zOw4Lt*v4N9PbXqLtB85841+`SafO#yWs=W(^M<3Q=%g~<dITKN%*P{Q6ueg@8dai4
zCHAPqz7dyIH3@QPT!`^1!zJU`liiXeN~%TT!_kn!Us6=743VP5gg7s&w5&)%0;ZI(
zq{uUZGO1b;KnjW=##MtTt0quakYHd1Eu#E*I2lu1v`Qr)5L629qLM%7XH|>LgJ4*J
zv*?TASdy2q7w=`Esr79^IRfV>a!`hNZN)*^ss&|RVpg@qL{Kd%DsYli4?_4A%YTB$
z99pxLEOsw+FZRCPd*4x;t_x=!7t-bnYo!%e9G4w8Om8`|r3Z7R$1<hIzAWvTr`AfG
zi>Zaw8^4^V9+o)YQm(vu`PF4PSJm=GRm(l5VvTKj*YS?yhMZ+PGv=N1<P!bRR<ZEh
zlJk1a)tc*d*Xr&wj>S_8r*h2h46}Q=@m<$DuHU!ZNdEbi_g?wquX61tGVLcm?98?g
z=Guod?Zcl&vhCcLjQ^1xmGwRXjZp+Y^kxDAd>%b|6YgRT1@(F4D|pGq1Q3uJA#>|7
zp1_%8yF6gvNRHy@F1#<a2F!=g+0u%U9^A+SL9LEpM%`Pti(p;Sw-Iy2t+$&?7=mRw
z$Eblb9@vye^m7_euw3UUMQ6yQp$#Ps0|y{ek--Xm#aF3Q#okv_q;+ca|7E3S$SmZD
zVW=%1c?l{(j#7FyiSE*JZk@ghXX4Dho%*QQk8WfzT%~jiCW&B!&ZFN@g61rvG-url
z3s1I!vmL0_r9nrUW3UWlP_{U$Q?P2+R%u_OK3D8HN3cmB`7qm-wi^XEs;Up}V{6mx
z@wIMU0k0@bF^DVa*tp{csPRF#(R}kA)Tv?*XFl;Aa;2NC4|eL3PmwCyET!vxzJx2+
zeg7B{B9ewA8QRc1VH`F34(t0Dd)+dK7Nf7LIImN|BRb_fs#C?jh;2Bh9-rDyPdlln
zxQ9+X#pa65Ha~@T$7bGQ-2n@a>!%g_(T(~Ah^`X<9oonsLATDw)daTn$<2{~(P1M*
zZv*@iqyPx71?e$10eP(+39z;kG86tg-JZv4EDAoapR&oDPUv&RzS97B5j?jZB}|(%
zs|uK~7Qq3X(|1y*ial3dM2|bc&V=c>={%s&Jhcfq)}~w<aty~=H<a4Apv<y9Nu1&%
z1pryZjcrhEZBag7z@RFosMc0R45X?!J|ZLpDAfgg8IDFJ0E!q(O8hU9g2YEvYLbs7
zQWUQFDON`S`s$C1`%yM!IKZa%Y_AW1Sz%m=gtfYC@+U7~RaMJypXYRFfb$Nk)PN*T
ztA>D>+W%t&yjhZsh!|@qe3T6<Z0h+o>&s%2jleC$#hE--PK0H7MwFthU<<Dlf%G_R
zuOX6f0t0PLk+y;YC%yhaf%JK~09=>}BM&jDU@{^CngQHl*OWcucXK0s!|uY+*XQ@2
z^>Y0qsdB7#DB$)7LIYrxyZ<Qr9sq8PWj3$*-6Mfez}w?`Mm2|}3BVjOuR8jqiR3iA
z3LhRyDg*B#1gqMdYSozVSe9@}Rm~v{B85V#39J-j7kSkPJRq;(54DVQzj(&Ox%)$Y
zcOc*y8T3mSVoEs6spJH&NErF5)RZX1B?^-UMO1BYUm?v{*asJQm4sWBaG0rNQi-S*
zK^DhFX*#T^CV5(cYrLRR*lLv&;)+V~lQB^>Yfwyy$to$!F|{%Rz)j&p1>}|AA1;%Q
zi4#IxWiXx!P3ON)RFl`AM|*a>tNT)fPiX!^CnS6TDbLEPQ3ezzNiMTyGQKPdUyRBm
z^6np!L=o$k|29%h(|OnmMBxx)B!-<{rC}FQlFeWq26?zixVWkmd@{u)Kad#A$q24u
z4&Ar!$l05|us5Zj4X)V7<_6X%YmTbQP*qFD8x`q8!)dB&g&JA2mE~;p8C!kUwrj5c
z8)wxu^V_{Srz_)hWt}ZKXGg}_k#jzmaXvS9`aV_i7PEA5we*=4YVU)+U0KK3%-*i0
zuD?llQnyogetrAbpHAeCk1o#4&%pfLVA^r^p~-<^<j$TCqIZPb!l$NeuP@#6V!DpY
zI{ay~{~Jf`8}YfpwVIx}!Ff-Hs=QxWeP!zM)N<WwWh+b#yyji2sJ=3Ic@PHuuMMwJ
zw!9H*){dJ;Zgu~q`(yJzn7d52b2!&|Hq&`F+xc?3<EQJ0I0xV4&{;ghW0Ite>sAY0
zcHdsH7<@f=ZO`@QtIf;jR%@TV*?CjCm3lw*VasaQNVe0Pe)(L^9$d8t(?1(uW6BqY
z7KYv&#)Nml`-c~DO}$?<^=6x%pZBgXeLq@1y>R+k`SseXwaebsnnO1)+?slS>cfWB
zpS-xjaKM;j8Zu17vT23c|D6pv#)!uih_<GgT}#UKnX5BPLfX22g>v1qG5`Ix6P3I~
zd{>XTK$jmLGss@?+q1bH&6yp|X<N%<WB^Od_H^l<<-^PS(vIev&Rezb*RGnoAC#2-
zuujAB_i{gY!bhfko_*9uokn>6eOF(F=Q#SL<Al?5fc}g&!{D<6Hcz+Zvn~qL-6Vb<
zuNxxC&ue#`>Low#rGdtwi`^>}O4Vxl;sx)>fM@Uw*B9`3M?!9n^KwU734kSX(Gtc-
z60S`WMnX~xeqc=H+M$|4@Wl}cg(Qq@^3jc}wS)_j<iQUd!TI2|=RZ{n0gw-P6aM~z
z0M-(Ugn@vTIyAS(O2)&}JmeRve^yrbY4;@|pED%*_(c+~T+%6cyoV%=K=W~9?w%H-
z$r#@&or5|2tuOxu9_u7Q5dT6$U!#(*kmW1n_zGF!{~_A<0PTH%s{dIrmPTdY8ZAVC
z__mrQ?CS#rqL}&A3R$ympy>L0j_RuwzpKnT*tD7bH;t&;|EwDkQ;pwT{XP8Vnr|Gw
z0dKD31LvLE+wkW4L1d}yjp?+xPJ4m%-^*2?$zSb#R&>{D>N`x{Eo<mINZvh21N}dz
C=jX%#

literal 0
HcmV?d00001

diff --git a/scripts/send-test-email.py b/scripts/send-test-email.py
new file mode 100644
index 0000000..f16a326
--- /dev/null
+++ b/scripts/send-test-email.py
@@ -0,0 +1,68 @@
+#!/usr/bin/env python3
+"""Send one explicit SMTP delivery test email using local .env settings."""
+
+import argparse
+import os
+import smtplib
+import ssl
+import sys
+from datetime import datetime, timezone
+from email.message import EmailMessage
+from pathlib import Path
+
+REQUIRED_SETTINGS = ("MAIL_HOST", "MAIL_PORT", "MAIL_USERNAME", "MAIL_PASSWORD", "MAIL_FROM")
+
+
+def load_dotenv(path):
+    if not path.is_file():
+        raise RuntimeError("Missing .env. Copy .env.example to .env and enter the SMTP settings.")
+    for line in path.read_text(encoding="utf-8").splitlines():
+        line = line.strip()
+        if not line or line.startswith("#"):
+            continue
+        key, separator, value = line.partition("=")
+        if separator and key.strip():
+            os.environ.setdefault(key.strip(), value.strip().strip('"').strip("'"))
+
+
+def main():
+    parser = argparse.ArgumentParser(description="Send an Eternity Project SMTP test email.")
+    parser.add_argument("--to", required=True, help="Recipient email address")
+    args = parser.parse_args()
+
+    project_root = Path(__file__).resolve().parent.parent
+    load_dotenv(project_root / ".env")
+    missing = [setting for setting in REQUIRED_SETTINGS if not os.environ.get(setting)]
+    if missing:
+        raise RuntimeError(f"Missing required SMTP settings: {', '.join(missing)}")
+
+    message = EmailMessage()
+    message["Subject"] = "Eternity Project SMTP verification"
+    message["From"] = os.environ["MAIL_FROM"]
+    message["To"] = args.to
+    message.set_content(
+        f"SMTP delivery verification completed at {datetime.now(timezone.utc).isoformat()}.\n"
+        "You can now test password-reset delivery from the application."
+    )
+
+    try:
+        with smtplib.SMTP(os.environ["MAIL_HOST"], int(os.environ["MAIL_PORT"]), timeout=15) as client:
+            client.ehlo()
+            client.starttls(context=ssl.create_default_context())
+            client.ehlo()
+            client.login(os.environ["MAIL_USERNAME"], os.environ["MAIL_PASSWORD"])
+            client.send_message(message)
+    except (OSError, smtplib.SMTPException) as error:
+        print(f"SMTP_TEST_FAILED: {error}", file=sys.stderr)
+        return 1
+
+    print(f"SMTP_TEST_SENT_TO={args.to}")
+    return 0
+
+
+if __name__ == "__main__":
+    try:
+        raise SystemExit(main())
+    except RuntimeError as error:
+        print(f"SMTP_CONFIGURATION_ERROR: {error}", file=sys.stderr)
+        raise SystemExit(2)