Piton.Emailing.Application 1.5.0

Piton.Emailing

Reusable ABP Framework email module. EmailManager delegates message delivery to the package-owned MailKit sender. The package supports regular SMTP credentials and Gmail SMTP XOAUTH2.

The host supplies only the IEmailSecretStore integration (Vault, Key Vault, or another secret store) and deploy-time options. SMTP passwords, Google client secrets, refresh tokens, and access tokens never appear in DTOs or status responses.

Packages

Install

Reference the layers hosted by the application:

<PackageReference Include="Piton.Emailing.Domain" Version="1.1.0" />
<PackageReference Include="Piton.Emailing.Infrastructure" Version="1.1.0" />
<PackageReference Include="Piton.Emailing.Application" Version="1.1.0" />
<PackageReference Include="Piton.Emailing.HttpApi" Version="1.1.0" />

Add the matching module dependencies:

[DependsOn(typeof(EmailingDomainModule))]
[DependsOn(typeof(EmailingInfrastructureModule))]
[DependsOn(typeof(EmailingApplicationModule))]
[DependsOn(typeof(EmailingHttpApiModule))] // optional

Configuration

The infrastructure module binds the typed Piton:Emailing section:

{
  "Piton": {
    "Emailing": {
      "Provider": "GmailOAuth2",
      "FromAddress": "noreply@example.com",
      "FromDisplayName": "Example",
      "SmtpHost": "smtp.gmail.com",
      "SmtpPort": 587,
      "SmtpSecurity": "StartTls",
      "GoogleClientId": "...",
      "GoogleRedirectUri": "https://app.example.com/api/email/platform/google/callback",
      "GoogleScope": "https://mail.google.com/",
      "SecretPath": "platform/email"
    }
  }
}

The host implements Piton.Emailing.Interface.Emailing.IEmailSecretStore. The package never assumes Vault or another concrete secret provider.

Internal send

Inject EmailManager in a domain manager or application background job:

await _emailManager.SendAsync(new EmailMessageModel
{
    To = { new EmailAddressModel { Address = "ops@example.com", Name = "Ops" } },
    Subject = "Schema comparison finished",
    Body = "<h1>3 differences found</h1>",
    IsHtml = true
});

The generic HTTP endpoint is optional. If it is hosted, protect it with the consuming application's authorization policy; report/password-reset emails should normally use the internal manager path.