EmailNotification.php

<?php

declare(strict_types=1);

/*
 * This file is part of the "typo3_login_warning" TYPO3 CMS extension.
 *
 * (c) 2025-2026 Konrad Michalik <km@move-elevator.de>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace MoveElevator\Typo3LoginWarning\Notification;

use Exception;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Log\{LoggerAwareInterface, LoggerAwareTrait};
use Symfony\Component\Mailer\Exception\{TransportException, TransportExceptionInterface};
use Symfony\Component\Mime\Exception\RfcComplianceException;
use TYPO3\CMS\Core\Authentication\{AbstractUserAuthentication, BackendUserAuthentication};
use TYPO3\CMS\Core\Mail\{FluidEmail, MailerInterface};
use TYPO3\CMS\Core\Utility\GeneralUtility;

use function array_key_exists;
use function sprintf;

/**
 * EmailNotification.
 *
 * @author Konrad Michalik <km@move-elevator.de>
 * @license GPL-2.0-or-later
 */
class EmailNotification implements NotifierInterface, LoggerAwareInterface
{
    use LoggerAwareTrait;

    /**
     * User record fields exposed to the (overridable) email templates. The full
     * be_users row must never reach the template context as it contains sensitive
     * data like the password hash and the MFA configuration.
     */
    private const TEMPLATE_USER_FIELDS = ['uid', 'username', 'realName', 'email', 'admin', 'lang'];

    public function __construct(
        private readonly MailerInterface $mailer,
    ) {}

    /**
     * @param array<string, mixed> $configuration
     * @param array<string, mixed> $additionalValues
     *
     * @throws TransportExceptionInterface
     */
    public function notify(AbstractUserAuthentication $user, ServerRequestInterface $request, string $triggerClass, array $configuration = [], array $additionalValues = []): void
    {
        if (!$user instanceof BackendUserAuthentication) {
            return;
        }

        $recipientsList = $this->buildRecipientsList($user, $configuration);

        if ([] === $recipientsList) {
            $this->logger?->info('No recipient configured for login notification email. Please set $GLOBALS[\'TYPO3_CONF_VARS\'][\'BE\'][\'warning_email_addr\'], configure the recipient via Typo3LoginWarning configuration, or use notificationReceiver setting with a valid user email.');

            return;
        }

        $this->sendNotificationEmails($user, $request, $triggerClass, $recipientsList, $additionalValues);
    }

    /**
     * @param array<string, mixed> $configuration
     *
     * @return array<int, string>
     */
    private function buildRecipientsList(BackendUserAuthentication $user, array $configuration): array
    {
        $recipients = array_key_exists('recipient', $configuration) ? $configuration['recipient'] : '';
        if ('' === $recipients) {
            $recipients = $GLOBALS['TYPO3_CONF_VARS']['BE']['warning_email_addr'];
        }

        $notificationReceiver = $configuration['notificationReceiver'] ?? 'recipients';
        $userEmail = trim($user->user['email'] ?? '');
        $explodedRecipients = ('' !== $recipients && null !== $recipients) ? explode(',', $recipients) : [];

        $recipientsList = match ($notificationReceiver) {
            'user' => '' !== $userEmail ? [$userEmail] : [],
            'both' => '' !== $userEmail ? [...$explodedRecipients, $userEmail] : $explodedRecipients,
            default => $explodedRecipients,
        };

        return array_unique(array_filter(array_map(trim(...), $recipientsList), static fn (string $email): bool => '' !== $email));
    }

    /**
     * @param array<int, string>   $recipientsList
     * @param array<string, mixed> $additionalValues
     */
    private function sendNotificationEmails(BackendUserAuthentication $user, ServerRequestInterface $request, string $triggerClass, array $recipientsList, array $additionalValues): void
    {
        $userEmail = trim($user->user['email'] ?? '');
        $templateUser = array_intersect_key($user->user ?? [], array_flip(self::TEMPLATE_USER_FIELDS));

        foreach ($recipientsList as $recipient) {
            $isUserNotification = '' !== $userEmail && $recipient === $userEmail;

            $values = [
                'user' => $templateUser,
                'prefix' => $user->isAdmin() ? '[AdminLoginWarning]' : '[LoginWarning]',
                'language' => $user->user['lang'] ?? 'default',
                'headline' => 'TYPO3 Backend Login notification',
                'isUserNotification' => $isUserNotification,
            ];

            if ([] !== $additionalValues) {
                $values = array_merge($values, $additionalValues);
            }

            $email = GeneralUtility::makeInstance(FluidEmail::class)
                ->to($recipient)
                ->setRequest($request)
                ->setTemplate(sprintf('LoginNotification/%s', basename(str_replace('\\', '/', $triggerClass))))
                ->assignMultiple($values);

            try {
                $this->mailer->send($email);
            } catch (TransportException $e) {
                $this->logger?->warning('Could not send notification email to "{recipient}" due to mailer settings error', [
                    'recipient' => $recipient,
                    'userId' => $user->user['uid'] ?? 0,
                    'exception' => $e,
                ]);
            } catch (RfcComplianceException $e) {
                $this->logger?->warning('Could not send notification email to "{recipient}" due to invalid email address', [
                    'recipient' => $recipient,
                    'userId' => $user->user['uid'] ?? 0,
                    'exception' => $e,
                ]);
            } catch (Exception $e) {
                $this->logger?->error('Could not send notification email to "{recipient}" due to a PHP exception', [
                    'recipient' => $recipient,
                    'userId' => $user->user['uid'] ?? 0,
                    'exception' => $e,
                ]);
            }
        }
    }
}