
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Provides a simple interface to set up SMTP with your APIStar application and send messages from your view functions. Please note this work derives largely from the Flask-Mail extension by 'Dan Jacob' and contributors, but has been modified extensively to remove Python 2 support and be used as an APIStar component.
$ pip install apistar-mail
To send mail messages from your view functions you must include a dictionary of mail options to the MailComponent
. Here we have a minimally viable app capable of sending an email message and returning a 204 response code:
from apistar import App, Route
from apistar.http import Response
from apistar_mail import MailComponent, Mail, Message
mail_options = {
'MAIL_SERVER': 'smtp.example.com',
'MAIL_USERNAME': 'me@example.com',
'MAIL_PASSWORD': 'dontcommitthistoversioncontrol',
'MAIL_PORT': 587,
'MAIL_USE_TLS': True,
'MAIL_DEFAULT_SENDER': 'me@example.com'
}
def send_a_message(mail: Mail):
msg = Message(subject='Hello',
body='Welcome to APIStar!',
recipients=['you@example.com'])
mail.send(msg)
return Response('', 204)
routes = [
Route('/', 'POST', send_a_message)
]
components = [
MailComponent(**mail_options)
]
app = App(
routes=routes,
components=components
)
if __name__ == '__main__':
app.serve('127.0.0.1', 5000, debug=True)
To send a message ,first include the Mail component for injection into your view. Then create an instance of Message, and pass it to your Mail component using mail.send(msg)
from apistar_mail import Mail, Message
def send_a_message(mail:Mail):
msg = Message('Hello',
sender='drew@example.com',
recipients=['you@example.com'])
mail.send(msg)
return
Your message recipients can be set in bulk or individually:
msg.recipients = ['you@example.com', 'me@example.com']
msg.add_recipient('otherperson@example.com')
If you have set MAIL_DEFAULT_SENDER
you don’t need to set the message sender explicitly, as it will use this configuration value by default:
msg = Message('Hello',
recipients=['you@example.com'])
The sender can also be passed as a two element tuple containing a name and email address which will be split like so:
msg = Message('Hello',
sender=('Me', 'me@example.com'))
assert msg.sender == 'Me <me@example.com>'
A Message can contain a body and/or HTML:
msg.body = 'message body'
msg.html = '<b>Hello apistar_mail!</b>'
apistar-mail is configured through the inclusion of the MAIL
dictionary in your apistar settings. These are the available options:
To run the test suite with coverage first install the package in editable mode with it's testing requirements:
$ pip install -e ".[testing]"
To run the project's tests
$ pytest --cov
To run tests against multiple python interpreters use:
$ tox
0.3.0 Added support for APIStar version >= 0.4.0
0.2.1 Pinned APIStar requirement to 0.3.9
APIStar 0.4.0 introduced breaking changes to the framework. Since Components have completely changed we are pinning the requirement for this release.
FAQs
A simple email Component for APIStar
We found that apistar-mail demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.