Method validate

keepercommander/email_service.py:202–256

Validate email configuration completeness. Returns: List of validation error messages (empty if valid)

(self)

    _oauth_tokens_updated: bool = field(default=False, init=False)

    def validate(self) -> List[str]:
        """
        Validate email configuration completeness.

        Returns:
            List of validation error messages (empty if valid)
        """
        errors = []

        if not self.provider:
            errors.append("Provider is required")

        if not self.from_address:
            errors.append("From address is required")

        if self.provider == 'smtp':
            if not self.smtp_host:
                errors.append("SMTP host is required")
            if not self.smtp_username:
                errors.append("SMTP username is required")
            if not self.smtp_password:
                errors.append("SMTP password is required")

        elif self.provider == 'ses':
            if not self.aws_region:
                errors.append("AWS region is required for SES")
            if not self.aws_access_key:
                errors.append("AWS access key is required for SES")
            if not self.aws_secret_key:
                errors.append("AWS secret key is required for SES")

        elif self.provider == 'sendgrid':
            if not self.sendgrid_api_key:
                errors.append("SendGrid API key is required")

        elif self.provider in ('gmail-oauth', 'microsoft-oauth'):
            # OAuth providers require either interactive auth OR manual token entry
            if not self.oauth_client_id:
                errors.append(f"OAuth client ID is required for {self.provider}")
            if not self.oauth_client_secret:
                errors.append(f"OAuth client secret is required for {self.provider}")

            # If no access token, we'll do interactive OAuth flow
            # If access token provided, we should also have refresh token
            if self.oauth_access_token and not self.oauth_refresh_token:
                errors.append("OAuth refresh token is required when access token is provided")

            # Microsoft requires tenant ID
            if self.provider == 'microsoft-oauth' and not self.oauth_tenant_id:
                errors.append("OAuth tenant ID is required for Microsoft (use 'common' for multi-tenant)")

        else:
            errors.append(f"Unknown provider: {self.provider}")

        return errors

    def is_oauth_provider(self) -> bool:
        """Check if this config uses OAuth authentication."""