Function connect_and_login

src/email.rs:568–647

(
    credentials: &EmailAccountCredentials,
    timeout: Duration,
)

}

fn connect_and_login(
    credentials: &EmailAccountCredentials,
    timeout: Duration,
) -> Result<BlockingImapSession, EmailServiceError> {
    let host = credentials.imap_host.trim();
    if host.is_empty() {
        return Err(EmailServiceError::ClientSetup(
            "IMAP host cannot be empty".to_string(),
        ));
    }
    if credentials.imap_port == 0 {
        return Err(EmailServiceError::ClientSetup(
            "IMAP port must be greater than 0".to_string(),
        ));
    }

    let mut root_store = RootCertStore::empty();
    let native_certs = rustls_native_certs::load_native_certs();
    for cert in native_certs.certs {
        root_store.add(cert).map_err(|e| {
            EmailServiceError::ClientSetup(format!("failed to add native root certificate: {e}"))
        })?;
    }
    if root_store.is_empty() {
        if native_certs.errors.is_empty() {
            return Err(EmailServiceError::ClientSetup(
                "no native root certificates found".to_string(),
            ));
        }
        return Err(EmailServiceError::ClientSetup(format!(
            "failed to load native root certificates: {:?}",
            native_certs.errors
        )));
    }

    let client_config = ClientConfig::builder()
        .with_root_certificates(root_store)
        .with_no_client_auth();

    let server_name = ServerName::try_from(host.to_string())
        .map_err(|_| EmailServiceError::ClientSetup(format!("invalid IMAP host '{host}'")))?;

    let socket = TcpStream::connect((host, credentials.imap_port)).map_err(|e| {
        EmailServiceError::ClientSetup(format!(
            "failed to connect to IMAP server {host}:{}: {e}",
            credentials.imap_port
        ))
    })?;
    socket
        .set_read_timeout(Some(timeout))
        .map_err(|e| EmailServiceError::ClientSetup(format!("failed to set read timeout: {e}")))?;
    socket
        .set_write_timeout(Some(timeout))
        .map_err(|e| EmailServiceError::ClientSetup(format!("failed to set write timeout: {e}")))?;

    let connection = ClientConnection::new(Arc::new(client_config), server_name).map_err(|e| {
        EmailServiceError::ClientSetup(format!("failed to initialize TLS client: {e}"))
    })?;