get_email_webhook_old_musha.py

import os
import json
import hmac
import hashlib
import requests
from msal import ConfidentialClientApplication
from datetime import datetime

# --- Determine mode ---
TEST_MODE = os.getenv("TEST_MODE", "true").lower() == "true"

# Only import Flask if not in TEST_MODE
if not TEST_MODE:
    from flask import Flask, request
    app = Flask(__name__)

# --- Microsoft Graph Email Sending Function ---
def send_email_via_graph(subject, body):
    TENANT_ID = os.getenv("TENANT_ID")
    CLIENT_ID = os.getenv("CLIENT_ID")
    CLIENT_SECRET = os.getenv("CLIENT_SECRET")
    FROM_EMAIL = os.getenv("FROM_EMAIL")
    TO_EMAIL = os.getenv("TO_EMAIL")

    if not all([TENANT_ID, CLIENT_ID, CLIENT_SECRET, FROM_EMAIL, TO_EMAIL]):
        print("❌ Missing required environment variables")
        return

    try:
        app_msal = ConfidentialClientApplication(
            CLIENT_ID,
            authority=f"https://login.microsoftonline.com/{TENANT_ID}",
            client_credential=CLIENT_SECRET
        )
        token = app_msal.acquire_token_for_client(scopes=["https://graph.microsoft.com/.default"])
        access_token = token.get("access_token")
        if not access_token:
            print(f"❌ Failed to get access token: {token}")
            return

        email_msg = {
            "message": {
                "subject": subject,
                "body": {"contentType": "Text", "content": body},
                "toRecipients": [{"emailAddress": {"address": TO_EMAIL}}]
            }
        }

        response = requests.post(
            f"https://graph.microsoft.com/v1.0/users/{FROM_EMAIL}/sendMail",
            headers={"Authorization": f"Bearer {access_token}", "Content-Type": "application/json"},
            json=email_msg
        )

        if response.status_code == 202:
            print(f"✅ Email sent to {TO_EMAIL}")
        else:
            print(f"❌ Failed to send email: {response.status_code} {response.text}")

    except Exception as e:
        print(f"❌ Exception occurred while sending email: {e}")

# --- Format GitHub timestamp ---
def format_timestamp(ts):
    """Convert GitHub timestamp to 'YYYY-MM-DD HH:MM:SS' format."""
    if not ts:
        return None
    try:
        dt = datetime.strptime(ts, "%Y-%m-%dT%H:%M:%SZ")
        return dt.strftime("%Y-%m-%d %H:%M:%S")
    except Exception:
        return ts  # fallback

# --- Verify GitHub webhook signature ---
def verify_github_signature(payload_body, signature, secret):
    if not secret:
        print("⚠️ No webhook secret set, skipping verification")
        return True
    if not signature:
        print("❌ No signature provided in headers")
        return False

    mac = hmac.new(secret.encode(), msg=payload_body, digestmod=hashlib.sha256)
    expected_signature = "sha256=" + mac.hexdigest()
    return hmac.compare_digest(expected_signature, signature)

# --- GitHub Webhook + Health Handlers ---
if not TEST_MODE:
    @app.route("/webhook", methods=["POST"])
    def github_webhook():
        payload_body = request.data
        signature = request.headers.get("X-Hub-Signature-256")
        secret = os.getenv("GITHUB_WEBHOOK_SECRET")

        # Debug logging
        print("📥 Incoming GitHub webhook")
        print(f"📥 Payload size: {len(payload_body)} bytes")
        print(f"📥 GitHub Event: {request.headers.get('X-GitHub-Event')}")
        print(f"📥 Signature header: {signature}")
        print(f"📥 Secret length: {len(secret) if secret else 'None'}")

        if not verify_github_signature(payload_body, signature, secret):
            print("❌ Invalid signature! Webhook rejected.")
            return "❌ Invalid signature", 401

        try:
            data = request.json or {}
        except Exception as e:
            print(f"❌ Failed to parse JSON payload: {e}")
            return "❌ Bad payload", 400

        event = request.headers.get("X-GitHub-Event", "")

        if event == "repository" and data.get("action") in ["created", "deleted"]:
            repo = data.get("repository", {})
            action = data["action"]

            repo_name = repo.get("name")
            full_name = repo.get("full_name")
            org = repo.get("owner", {}).get("login")
            owner_id = repo.get("owner", {}).get("id")
            default_branch = repo.get("default_branch")
            created_at = format_timestamp(repo.get("created_at"))
            updated_at = format_timestamp(repo.get("updated_at"))
            html_url = repo.get("html_url")

            subject = f"[GitHub Alert] Repository {action}: {full_name}"
            body = f"""
A repository was {action} in your GitHub organization.

Repository: {repo_name}
Full name: {full_name}
Organization: {org}
Owner ID: {owner_id}
Default branch: {default_branch}
Created at: {created_at}
Last updated: {updated_at}
URL: {html_url}
"""

            print(f"📩 Sending email alert: {subject}")
            send_email_via_graph(subject, body.strip())
        else:
            print(f"ℹ️ Ignored event: {event}, action: {data.get('action')}")

        return "OK", 200

    # Health check endpoint
    @app.route("/health", methods=["GET"])
    def health_check():
        return {"status": "running"}, 200

# --- Main Entry Point ---
if __name__ == "__main__":
    if TEST_MODE:
        print("🔹 TEST_MODE: sending test email")
        send_email_via_graph(
            "[Test] Graph Email",
            "The information of Quantori's GitHub repositories has been updated"
        )
    else:
        print("✅ Flask is up and listening on /webhook and /health")
        app.run(host="0.0.0.0", port=int(os.getenv("PORT", 8000)))