gdpr audit implemented, email log, vollmachten, pdf delete cancel data privacy and vollmachten, removed message no id card in engergy car, and other contracts that are not telecom contracts, added insert counter for engery

backend/src/services/emailProvider/emailProviderService.ts

@@ -73,6 +73,9 @@ export interface CreateProviderConfigData {
   imapEncryption?: MailEncryption;
   smtpEncryption?: MailEncryption;
   allowSelfSignedCerts?: boolean;
+  // System-E-Mail
+  systemEmailAddress?: string;
+  systemEmailPassword?: string;
   isActive?: boolean;
   isDefault?: boolean;
 }
@@ -86,9 +89,10 @@ export async function createProviderConfig(data: CreateProviderConfigData) {
     });
   }
 
-  // Passwort verschlüsseln falls vorhanden
+  // Passwörter verschlüsseln falls vorhanden
   const { encrypt } = await import('../../utils/encryption.js');
   const passwordEncrypted = data.password ? encrypt(data.password) : null;
+  const systemEmailPasswordEncrypted = data.systemEmailPassword ? encrypt(data.systemEmailPassword) : null;
 
   return prisma.emailProviderConfig.create({
     data: {
@@ -103,6 +107,8 @@ export async function createProviderConfig(data: CreateProviderConfigData) {
       imapEncryption: data.imapEncryption ?? 'SSL',
       smtpEncryption: data.smtpEncryption ?? 'SSL',
       allowSelfSignedCerts: data.allowSelfSignedCerts ?? false,
+      systemEmailAddress: data.systemEmailAddress || null,
+      systemEmailPasswordEncrypted,
       isActive: data.isActive ?? true,
       isDefault: data.isDefault ?? false,
     },
@@ -134,20 +140,30 @@ export async function updateProviderConfig(
   if (data.imapEncryption !== undefined) updateData.imapEncryption = data.imapEncryption;
   if (data.smtpEncryption !== undefined) updateData.smtpEncryption = data.smtpEncryption;
   if (data.allowSelfSignedCerts !== undefined) updateData.allowSelfSignedCerts = data.allowSelfSignedCerts;
+  if (data.systemEmailAddress !== undefined) updateData.systemEmailAddress = data.systemEmailAddress || null;
   if (data.isActive !== undefined) updateData.isActive = data.isActive;
   if (data.isDefault !== undefined) updateData.isDefault = data.isDefault;
 
+  const { encrypt } = await import('../../utils/encryption.js');
+
   // Passwort-Logik:
   // - Wenn neues Passwort übergeben → verschlüsseln und speichern
   // - Wenn Benutzername gelöscht wird → Passwort auch löschen (gehören zusammen)
   if (data.password) {
-    const { encrypt } = await import('../../utils/encryption.js');
     updateData.passwordEncrypted = encrypt(data.password);
   } else if (data.username !== undefined && !data.username) {
     // Benutzername wird gelöscht → Passwort auch löschen
     updateData.passwordEncrypted = null;
   }
 
+  // System-E-Mail-Passwort
+  if (data.systemEmailPassword) {
+    updateData.systemEmailPasswordEncrypted = encrypt(data.systemEmailPassword);
+  } else if (data.systemEmailAddress !== undefined && !data.systemEmailAddress) {
+    // System-E-Mail wird gelöscht → Passwort auch löschen
+    updateData.systemEmailPasswordEncrypted = null;
+  }
+
   return prisma.emailProviderConfig.update({
     where: { id },
     data: updateData,
@@ -564,3 +580,45 @@ export async function testProviderConnection(options?: {
     };
   }
 }
+
+// ==================== SYSTEM EMAIL ====================
+
+export interface SystemEmailCredentials {
+  emailAddress: string;
+  password: string;
+  smtpServer: string;
+  smtpPort: number;
+  smtpEncryption: MailEncryption;
+  allowSelfSignedCerts: boolean;
+}
+
+/**
+ * System-E-Mail-Credentials vom aktiven Provider holen.
+ * Wird für automatisierten Versand (DSGVO, Benachrichtigungen etc.) verwendet.
+ */
+export async function getSystemEmailCredentials(): Promise<SystemEmailCredentials | null> {
+  const config = await getActiveProviderConfig();
+  if (!config?.systemEmailAddress || !config?.systemEmailPasswordEncrypted) {
+    return null;
+  }
+
+  let password: string;
+  try {
+    password = decrypt(config.systemEmailPasswordEncrypted);
+  } catch {
+    console.error('System-E-Mail-Passwort konnte nicht entschlüsselt werden');
+    return null;
+  }
+
+  const settings = await getImapSmtpSettings();
+  if (!settings) return null;
+
+  return {
+    emailAddress: config.systemEmailAddress,
+    password,
+    smtpServer: settings.smtpServer,
+    smtpPort: settings.smtpPort,
+    smtpEncryption: settings.smtpEncryption,
+    allowSelfSignedCerts: settings.allowSelfSignedCerts,
+  };
+}