Fix email-api middleware order: API key check before swagger

UseInternalApiKeyProtection was registered after UseSwaggerInDevelopment, allowing unauthenticated access to /swagger. Swapped order to match rag-api and cv-matcher-api. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Fix email-api Dockerfile: add missing shared-data COPY
2026-06-01 22:41:29 +03:00 · 2026-06-01 22:30:25 +03:00 · 2026-06-01 22:25:26 +03:00 · 2026-06-01 22:03:46 +03:00 · 2026-06-01 21:57:06 +03:00
12 changed files with 85 additions and 174 deletions
@@ -69,6 +69,8 @@ namespace Api.Controllers
        {
            try
            {
+                var userIp = HttpContext.Connection.RemoteIpAddress?.ToString();
+
                // Captcha required on the initial (full) download only — range requests are resume continuations.
                var isRangeRequest = !string.IsNullOrEmpty(Request.Headers[HeaderNames.Range].ToString());
                if (!isRangeRequest)
@@ -79,7 +81,6 @@ namespace Api.Controllers
                        return BadRequest(new ErrorResponse { Error = "Captcha token is required.", Code = "captcha_token_missing" });
                    }

-                    var userIp = HttpContext.Connection.RemoteIpAddress?.ToString();
                    var verdict = await _captcha.VerifyAsync(captchaToken, userIp, "file_download", CancellationToken.None);
                    if (!verdict.Success)
                    {
@@ -125,7 +126,6 @@ namespace Api.Controllers
                if (!_contentTypeProvider.TryGetContentType(filePath, out var contentType))
                    contentType = "application/octet-stream";

-                var userIp = HttpContext.Connection.RemoteIpAddress?.ToString();
                _ = Task.Run(async () =>
                {
                    try
@@ -2,8 +2,7 @@
  "Serilog": {
    "Using": [
      "Serilog.Sinks.Console",
-      "Serilog.Sinks.File",
-      "Serilog.Sinks.Email"
+      "Serilog.Sinks.File"
    ],
    "MinimumLevel": {
      "Default": "Information",
@@ -30,25 +29,6 @@
          "retainedFileCountLimit": 30,
          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}: {Message:lj}{NewLine}{Exception}"
        }
-      },
-      {
-        "Name": "Email",
-        "Args": {
-          "restrictedToMinimumLevel": "Error",
-          "fromEmail": "",
-          "toEmail": "",
-          "mailServer": "",
-          "networkCredential": {
-            "userName": "",
-            "password": ""
-          },
-          "port": 587,
-          "enableSsl": true,
-          "emailSubject": "[mihes.ro API] Error Alert",
-          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}{NewLine}{Message:lj}{NewLine}{Exception}",
-          "batchPostingLimit": 10,
-          "period": "0.00:05:00"
-        }
      }
    ],
    "Enrich": [
@@ -2,8 +2,7 @@
  "Serilog": {
    "Using": [
      "Serilog.Sinks.Console",
-      "Serilog.Sinks.File",
-      "Serilog.Sinks.Email"
+      "Serilog.Sinks.File"
    ],
    "MinimumLevel": {
      "Default": "Information",
@@ -30,25 +29,6 @@
          "retainedFileCountLimit": 30,
          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}: {Message:lj}{NewLine}{Exception}"
        }
-      },
-      {
-        "Name": "Email",
-        "Args": {
-          "restrictedToMinimumLevel": "Error",
-          "fromEmail": "",
-          "toEmail": "",
-          "mailServer": "",
-          "networkCredential": {
-            "userName": "",
-            "password": ""
-          },
-          "port": 587,
-          "enableSsl": true,
-          "emailSubject": "[mihes.ro API] Error Alert",
-          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}{NewLine}{Message:lj}{NewLine}{Exception}",
-          "batchPostingLimit": 10,
-          "period": "0.00:05:00"
-        }
      }
    ],
    "Enrich": [
@@ -4,6 +4,7 @@ WORKDIR /src

 COPY Apis/email-api/email-api.csproj Apis/email-api/
 COPY Apis/email-data/email-data.csproj Apis/email-data/
+COPY Apis/shared-data/shared-data.csproj Apis/shared-data/
 COPY Apis/email-api-models/email-api-models.csproj Apis/email-api-models/
 COPY Apis/api-models/api-models.csproj Apis/api-models/
 COPY Apis/common/common.csproj Apis/common/
@@ -15,6 +16,7 @@ RUN dotnet restore Apis/email-api/email-api.csproj

 COPY Apis/email-api/ Apis/email-api/
 COPY Apis/email-data/ Apis/email-data/
+COPY Apis/shared-data/ Apis/shared-data/
 COPY Apis/email-api-models/ Apis/email-api-models/
 COPY Apis/api-models/ Apis/api-models/
 COPY Apis/common/ Apis/common/
@@ -50,9 +50,8 @@ try

    app.UseDefaultSerilogRequestLogging();
    app.UseJsonExceptionHandler(ServiceName);
-    app.UseSwaggerInDevelopment("Email API", "EmailAPI");
-
    app.UseInternalApiKeyProtection();
+    app.UseSwaggerInDevelopment("Email API", "EmailAPI");

    app.UseRouting();
    app.UseAuthorization();
@@ -2,8 +2,7 @@
  "Serilog": {
    "Using": [
      "Serilog.Sinks.Console",
-      "Serilog.Sinks.File",
-      "Serilog.Sinks.Email"
+      "Serilog.Sinks.File"
    ],
    "MinimumLevel": {
      "Default": "Information",
@@ -30,25 +29,6 @@
          "retainedFileCountLimit": 30,
          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}: {Message:lj}{NewLine}{Exception}"
        }
-      },
-      {
-        "Name": "Email",
-        "Args": {
-          "restrictedToMinimumLevel": "Error",
-          "fromEmail": "",
-          "toEmail": "",
-          "mailServer": "",
-          "networkCredential": {
-            "userName": "",
-            "password": ""
-          },
-          "port": 587,
-          "enableSsl": true,
-          "emailSubject": "[myAi] Email API Error Alert",
-          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}{NewLine}{Message:lj}{NewLine}{Exception}",
-          "batchPostingLimit": 10,
-          "period": "0.00:05:00"
-        }
      }
    ],
    "Enrich": [
@@ -2,8 +2,7 @@
  "Serilog": {
    "Using": [
      "Serilog.Sinks.Console",
-      "Serilog.Sinks.File",
-      "Serilog.Sinks.Email"
+      "Serilog.Sinks.File"
    ],
    "MinimumLevel": {
      "Default": "Information",
@@ -30,25 +29,6 @@
          "retainedFileCountLimit": 30,
          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}: {Message:lj}{NewLine}{Exception}"
        }
-      },
-      {
-        "Name": "Email",
-        "Args": {
-          "restrictedToMinimumLevel": "Error",
-          "fromEmail": "",
-          "toEmail": "",
-          "mailServer": "",
-          "networkCredential": {
-            "userName": "",
-            "password": ""
-          },
-          "port": 587,
-          "enableSsl": true,
-          "emailSubject": "[mihes.ro API] Error Alert",
-          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}{NewLine}{Message:lj}{NewLine}{Exception}",
-          "batchPostingLimit": 10,
-          "period": "0.00:05:00"
-        }
      }
    ],
    "Enrich": [
@@ -1,5 +1,7 @@
+using System.Net;
 using System.Reflection;
 using Azure.Identity;
+using MailKit.Security;
 using Microsoft.AspNetCore.Builder;
 using Microsoft.AspNetCore.Diagnostics;
 using Microsoft.AspNetCore.Http;
@@ -9,6 +11,7 @@ using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Serilog;
+using Serilog.Events;
 using Swashbuckle.AspNetCore.SwaggerGen;
 using Swashbuckle.AspNetCore.Annotations;

@@ -41,6 +44,8 @@ public static class StartupExtensions
                .Enrich.WithProperty("Service", serviceName)
                .Enrich.WithProperty("AppVersion", appVersion)
                .WriteTo.Console(new Serilog.Formatting.Json.JsonFormatter());
+
+            AddEmailSinkIfConfigured(configuration, context.Configuration, serviceName);
        });
    }

@@ -57,9 +62,40 @@ public static class StartupExtensions
                .Enrich.WithProperty("Service", serviceName)
                .Enrich.WithProperty("AppVersion", appVersion)
                .WriteTo.Console(new Serilog.Formatting.Json.JsonFormatter());
+
+            AddEmailSinkIfConfigured(configuration, builder.Configuration, serviceName);
        });
    }

+    private static void AddEmailSinkIfConfigured(LoggerConfiguration loggerConfig, IConfiguration appConfig, string serviceName)
+    {
+        var from = appConfig["SerilogEmail:From"];
+        var to = appConfig["SerilogEmail:To"];
+        var host = appConfig["SerilogEmail:Host"];
+
+        if (string.IsNullOrWhiteSpace(from) || string.IsNullOrWhiteSpace(to) || string.IsNullOrWhiteSpace(host))
+            return;
+
+        var port = appConfig.GetValue("SerilogEmail:Port", 587);
+        var userName = appConfig["SerilogEmail:UserName"];
+        var password = appConfig["SerilogEmail:Password"];
+
+        NetworkCredential? credentials = null;
+        if (!string.IsNullOrWhiteSpace(userName))
+            credentials = new NetworkCredential(userName, password);
+
+        loggerConfig.WriteTo.Email(
+            from: from,
+            to: to,
+            host: host,
+            port: port,
+            connectionSecurity: SecureSocketOptions.StartTls,
+            credentials: credentials,
+            subject: $"[myAi {serviceName}] Error Alert",
+            body: "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}{NewLine}{Message:lj}{NewLine}{Exception}",
+            restrictedToMinimumLevel: LogEventLevel.Error);
+    }
+
    public static void AddAzureKeyVaultIfConfigured(this WebApplicationBuilder builder)
    {
        var keyVaultUri = builder.Configuration["KeyVault:VaultUri"];
@@ -2,8 +2,7 @@
  "Serilog": {
    "Using": [
      "Serilog.Sinks.Console",
-      "Serilog.Sinks.File",
-      "Serilog.Sinks.Email"
+      "Serilog.Sinks.File"
    ],
    "MinimumLevel": {
      "Default": "Information",
@@ -31,25 +30,6 @@
          "retainedFileCountLimit": 30,
          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}: {Message:lj}{NewLine}{Exception}"
        }
-      },
-      {
-        "Name": "Email",
-        "Args": {
-          "restrictedToMinimumLevel": "Error",
-          "fromEmail": "",
-          "toEmail": "",
-          "mailServer": "",
-          "networkCredential": {
-            "userName": "",
-            "password": ""
-          },
-          "port": 587,
-          "enableSsl": true,
-          "emailSubject": "[mihes.ro CV cleanup job] Error Alert",
-          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}{NewLine}{Message:lj}{NewLine}{Exception}",
-          "batchPostingLimit": 10,
-          "period": "0.00:05:00"
-        }
      }
    ],
    "Enrich": [
@@ -125,7 +125,7 @@ public sealed class HtmlJobSearcher
        }
        catch (Exception ex)
        {
-            _logger.LogWarning(ex, "Provider {Provider}: HTTP fetch failed for {Url}", providerName, url);
+            _logger.LogError(ex, "Provider {Provider}: HTTP fetch failed for {Url}", providerName, url);
            return null;
        }
    }
@@ -169,7 +169,7 @@ public sealed class HtmlJobSearcher
        }
        catch (Exception ex)
        {
-            _logger.LogWarning(ex, "Provider {Provider}: Playwright fetch failed for {Url}", providerName, url);
+            _logger.LogError(ex, "Provider {Provider}: Playwright fetch failed for {Url}", providerName, url);
            return null;
        }
    }
@@ -13,8 +13,7 @@
  "Serilog": {
    "Using": [
      "Serilog.Sinks.Console",
-      "Serilog.Sinks.File",
-      "Serilog.Sinks.Email"
+      "Serilog.Sinks.File"
    ],
    "MinimumLevel": {
      "Default": "Information",
@@ -42,25 +41,6 @@
          "retainedFileCountLimit": 30,
          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}: {Message:lj}{NewLine}{Exception}"
        }
-      },
-      {
-        "Name": "Email",
-        "Args": {
-          "restrictedToMinimumLevel": "Error",
-          "fromEmail": "",
-          "toEmail": "",
-          "mailServer": "",
-          "networkCredential": {
-            "userName": "",
-            "password": ""
-          },
-          "port": 587,
-          "enableSsl": true,
-          "emailSubject": "[mihes.ro CV search job] Error Alert",
-          "outputTemplate": "{Timestamp:yyyy-MM-dd HH:mm:ss.fff zzz} [{Level:u3}] {SourceContext}{NewLine}{Message:lj}{NewLine}{Exception}",
-          "batchPostingLimit": 10,
-          "period": "0.00:05:00"
-        }
      }
    ],
    "Enrich": [
@@ -35,13 +35,12 @@ services:
      - Ai__Ollama__EmbeddingModel=${Ai__Ollama__EmbeddingModel:-nomic-embed-text}
      - Ai__Ollama__TimeoutSeconds=${Ai__Ollama__TimeoutSeconds:-180}

-      - Serilog__WriteTo__2__Args__fromEmail=${Serilog__WriteTo__2__Args__fromEmail:-}
-      - Serilog__WriteTo__2__Args__toEmail=${Serilog__WriteTo__2__Args__toEmail:-}
-      - Serilog__WriteTo__2__Args__mailServer=${Serilog__WriteTo__2__Args__mailServer:-}
-      - Serilog__WriteTo__2__Args__networkCredential__userName=${Serilog__WriteTo__2__Args__networkCredential__userName:-}
-      - Serilog__WriteTo__2__Args__networkCredential__password=${Serilog__WriteTo__2__Args__networkCredential__password:-}
-      - Serilog__WriteTo__2__Args__port=${Serilog__WriteTo__2__Args__port:-587}
-      - Serilog__WriteTo__2__Args__enableSsl=${Serilog__WriteTo__2__Args__enableSsl:-true}
+      - SerilogEmail__From=${SerilogEmail__From:-}
+      - SerilogEmail__To=${SerilogEmail__To:-}
+      - SerilogEmail__Host=${SerilogEmail__Host:-}
+      - SerilogEmail__Port=${SerilogEmail__Port:-587}
+      - SerilogEmail__UserName=${SerilogEmail__UserName:-}
+      - SerilogEmail__Password=${SerilogEmail__Password:-}
    volumes:
      - ${LOGS_PATH:-/opt/myai/logs}/rag-api:/app/logs
    networks:
@@ -85,13 +84,12 @@ services:
      - Matcher__DeepScoreTopN=${Matcher__DeepScoreTopN:-5}
      - Matcher__MaxJobTextChars=${Matcher__MaxJobTextChars:-60000}

-      - Serilog__WriteTo__2__Args__fromEmail=${Serilog__WriteTo__2__Args__fromEmail:-}
-      - Serilog__WriteTo__2__Args__toEmail=${Serilog__WriteTo__2__Args__toEmail:-}
-      - Serilog__WriteTo__2__Args__mailServer=${Serilog__WriteTo__2__Args__mailServer:-}
-      - Serilog__WriteTo__2__Args__networkCredential__userName=${Serilog__WriteTo__2__Args__networkCredential__userName:-}
-      - Serilog__WriteTo__2__Args__networkCredential__password=${Serilog__WriteTo__2__Args__networkCredential__password:-}
-      - Serilog__WriteTo__2__Args__port=${Serilog__WriteTo__2__Args__port:-587}
-      - Serilog__WriteTo__2__Args__enableSsl=${Serilog__WriteTo__2__Args__enableSsl:-true}
+      - SerilogEmail__From=${SerilogEmail__From:-}
+      - SerilogEmail__To=${SerilogEmail__To:-}
+      - SerilogEmail__Host=${SerilogEmail__Host:-}
+      - SerilogEmail__Port=${SerilogEmail__Port:-587}
+      - SerilogEmail__UserName=${SerilogEmail__UserName:-}
+      - SerilogEmail__Password=${SerilogEmail__Password:-}
    volumes:
      - ${LOGS_PATH:-/opt/myai/logs}/cv-matcher-api:/app/logs
    networks:
@@ -126,13 +124,12 @@ services:

      - FileStorage__Path=${FileStorage__Path:-Files}

-      - Serilog__WriteTo__2__Args__fromEmail=${Serilog__WriteTo__2__Args__fromEmail:-}
-      - Serilog__WriteTo__2__Args__toEmail=${Serilog__WriteTo__2__Args__toEmail:-}
-      - Serilog__WriteTo__2__Args__mailServer=${Serilog__WriteTo__2__Args__mailServer:-}
-      - Serilog__WriteTo__2__Args__networkCredential__userName=${Serilog__WriteTo__2__Args__networkCredential__userName:-}
-      - Serilog__WriteTo__2__Args__networkCredential__password=${Serilog__WriteTo__2__Args__networkCredential__password:-}
-      - Serilog__WriteTo__2__Args__port=${Serilog__WriteTo__2__Args__port:-587}
-      - Serilog__WriteTo__2__Args__enableSsl=${Serilog__WriteTo__2__Args__enableSsl:-true}
+      - SerilogEmail__From=${SerilogEmail__From:-}
+      - SerilogEmail__To=${SerilogEmail__To:-}
+      - SerilogEmail__Host=${SerilogEmail__Host:-}
+      - SerilogEmail__Port=${SerilogEmail__Port:-587}
+      - SerilogEmail__UserName=${SerilogEmail__UserName:-}
+      - SerilogEmail__Password=${SerilogEmail__Password:-}
    volumes:
      - ${LOGS_PATH:-/opt/myai/logs}/email-api:/app/logs
      - ${FILES_PATH:-/opt/myai/files}:/app/Files
@@ -201,13 +198,12 @@ services:
      - Cors__AllowedOrigins__0=${Cors__AllowedOrigins__0:-}
      - Cors__AllowedOrigins__1=${Cors__AllowedOrigins__1:-}

-      - Serilog__WriteTo__2__Args__fromEmail=${Serilog__WriteTo__2__Args__fromEmail:-}
-      - Serilog__WriteTo__2__Args__toEmail=${Serilog__WriteTo__2__Args__toEmail:-}
-      - Serilog__WriteTo__2__Args__mailServer=${Serilog__WriteTo__2__Args__mailServer:-}
-      - Serilog__WriteTo__2__Args__networkCredential__userName=${Serilog__WriteTo__2__Args__networkCredential__userName:-}
-      - Serilog__WriteTo__2__Args__networkCredential__password=${Serilog__WriteTo__2__Args__networkCredential__password:-}
-      - Serilog__WriteTo__2__Args__port=${Serilog__WriteTo__2__Args__port:-587}
-      - Serilog__WriteTo__2__Args__enableSsl=${Serilog__WriteTo__2__Args__enableSsl:-true}
+      - SerilogEmail__From=${SerilogEmail__From:-}
+      - SerilogEmail__To=${SerilogEmail__To:-}
+      - SerilogEmail__Host=${SerilogEmail__Host:-}
+      - SerilogEmail__Port=${SerilogEmail__Port:-587}
+      - SerilogEmail__UserName=${SerilogEmail__UserName:-}
+      - SerilogEmail__Password=${SerilogEmail__Password:-}
    volumes:
      - ${LOGS_PATH:-/opt/myai/logs}/api:/app/logs
      - ${FILES_PATH:-/opt/myai/files}:/app/Files
@@ -232,13 +228,12 @@ services:
      - Jobs__Tasks__0__Interval=${Jobs__CvStorageCleanupInterval:-01:00:00}
      - Jobs__Tasks__0__Parameters__MaxTotalSizeMegabytes=${Jobs__CvStorageMaxTotalSizeMegabytes:-40}

-      - Serilog__WriteTo__2__Args__fromEmail=${Serilog__WriteTo__2__Args__fromEmail:-}
-      - Serilog__WriteTo__2__Args__toEmail=${Serilog__WriteTo__2__Args__toEmail:-}
-      - Serilog__WriteTo__2__Args__mailServer=${Serilog__WriteTo__2__Args__mailServer:-}
-      - Serilog__WriteTo__2__Args__networkCredential__userName=${Serilog__WriteTo__2__Args__networkCredential__userName:-}
-      - Serilog__WriteTo__2__Args__networkCredential__password=${Serilog__WriteTo__2__Args__networkCredential__password:-}
-      - Serilog__WriteTo__2__Args__port=${Serilog__WriteTo__2__Args__port:-587}
-      - Serilog__WriteTo__2__Args__enableSsl=${Serilog__WriteTo__2__Args__enableSsl:-true}
+      - SerilogEmail__From=${SerilogEmail__From:-}
+      - SerilogEmail__To=${SerilogEmail__To:-}
+      - SerilogEmail__Host=${SerilogEmail__Host:-}
+      - SerilogEmail__Port=${SerilogEmail__Port:-587}
+      - SerilogEmail__UserName=${SerilogEmail__UserName:-}
+      - SerilogEmail__Password=${SerilogEmail__Password:-}
    volumes:
      - ${LOGS_PATH:-/opt/myai/logs}/cv-cleanup-job:/app/logs
      - ${FILES_PATH:-/opt/myai/files}:/app/Files
@@ -283,13 +278,12 @@ services:
      - Jobs__Tasks__0__Enabled=${Jobs__CvSearchEnabled:-true}
      - Jobs__Tasks__0__Interval=${Jobs__CvSearchInterval:-00:00:30}

-      - Serilog__WriteTo__2__Args__fromEmail=${Serilog__WriteTo__2__Args__fromEmail:-}
-      - Serilog__WriteTo__2__Args__toEmail=${Serilog__WriteTo__2__Args__toEmail:-}
-      - Serilog__WriteTo__2__Args__mailServer=${Serilog__WriteTo__2__Args__mailServer:-}
-      - Serilog__WriteTo__2__Args__networkCredential__userName=${Serilog__WriteTo__2__Args__networkCredential__userName:-}
-      - Serilog__WriteTo__2__Args__networkCredential__password=${Serilog__WriteTo__2__Args__networkCredential__password:-}
-      - Serilog__WriteTo__2__Args__port=${Serilog__WriteTo__2__Args__port:-587}
-      - Serilog__WriteTo__2__Args__enableSsl=${Serilog__WriteTo__2__Args__enableSsl:-true}
+      - SerilogEmail__From=${SerilogEmail__From:-}
+      - SerilogEmail__To=${SerilogEmail__To:-}
+      - SerilogEmail__Host=${SerilogEmail__Host:-}
+      - SerilogEmail__Port=${SerilogEmail__Port:-587}
+      - SerilogEmail__UserName=${SerilogEmail__UserName:-}
+      - SerilogEmail__Password=${SerilogEmail__Password:-}
    volumes:
      - ${LOGS_PATH:-/opt/myai/logs}/cv-search-job:/app/logs
      - ${FILES_PATH:-/opt/myai/files}:/app/Files
Author	SHA1	Message	Date
claude	91b2baa445	Fix email-api middleware order: API key check before swagger Build and Push Docker Images Staging / build (push) Successful in 17m14s Details UseInternalApiKeyProtection was registered after UseSwaggerInDevelopment, allowing unauthenticated access to /swagger. Swapped order to match rag-api and cv-matcher-api. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-01 22:41:29 +03:00
claude	0f64cb8d99	Fix email-api Dockerfile: add missing shared-data COPY email-data references shared-data but the email-api Dockerfile never copied it into the build context, causing MSB9008 during Docker build. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-01 22:30:25 +03:00
claude	b67e926c5f	Fix Serilog email sink: configure in code, not JSON config Serilog.Settings.Configuration cannot deserialize NetworkCredential or MailKit's SecureSocketOptions from JSON, causing an InvalidOperationException in the binder and preventing containers from starting. Fix: remove Email from the WriteTo JSON array entirely and wire it in code inside ConfigureJsonSerilog using a dedicated SerilogEmail:* config section. The sink is skipped when From/To/Host are absent, so local dev is unaffected. Also renames the docker-compose env vars from the verbose Serilog__WriteTo__2__Args__* prefix to the clean SerilogEmail__* prefix. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-01 22:25:26 +03:00
claude	f7d856147e	Escalate provider fetch failures to Error for alert emails HTTP and Playwright fetch failures in HtmlJobSearcher are now logged at Error so that Serilog's email sink triggers an alert when a job provider is unreachable. Per-URL match failures remain at Warning (expected noise). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-01 22:03:46 +03:00
claude	8679bd1efd	Fix Serilog email sink config for v4 API breaking changes Serilog.Sinks.Email v4 renamed all configuration parameters from their v2 names. The old names were silently ignored, so no error alert emails were ever sent. Parameter renames applied across all 6 appsettings.json and docker-compose: fromEmail → from toEmail → to mailServer → host networkCredential → credentials enableSsl: true → connectionSecurity: StartTls emailSubject → subject outputTemplate → body batchPostingLimit / period removed (v4 batching uses a separate overload) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-01 21:57:06 +03:00