Update auth.py

auth.py

@@ -13,6 +13,7 @@ import logging
 import random
 import smtplib
 import uuid
+import requests
 from datetime import datetime, timezone, timedelta
 from email.mime.text import MIMEText
 from email.mime.multipart import MIMEMultipart
@@ -31,6 +32,7 @@ JWT_SECRET = os.environ.get("JWT_SECRET", "change-me-in-production")
 JWT_ALGORITHM = "HS256"
 JWT_EXPIRE_HOURS = 24 * 7  # 7 days
 
+BREVO_API_KEY = os.environ.get("BREVO_API_KEY", "")
 SMTP_EMAIL = os.environ.get("SMTP_EMAIL", "")
 SMTP_APP_PASSWORD = os.environ.get("SMTP_APP_PASSWORD", "")
 SMTP_HOST = os.environ.get("SMTP_HOST", "smtp.gmail.com")
@@ -90,32 +92,17 @@ def _generate_code() -> str:
 
 
 def _send_verification_email(to_email: str, code: str, username: str) -> bool:
-    """Send verification code via Gmail SMTP. Returns True on success."""
-    if not SMTP_EMAIL or not SMTP_APP_PASSWORD:
+    """Send verification code via Brevo API or Gmail SMTP. Returns True on success."""
+    if not BREVO_API_KEY and (not SMTP_EMAIL or not SMTP_APP_PASSWORD):
         logger.warning(
-            "SMTP_EMAIL or SMTP_APP_PASSWORD not configured. "
+            "Neither BREVO_API_KEY nor SMTP configured. "
             "Skipping email — code is: %s", code
         )
         return True  # Allow registration to proceed in dev mode
 
     try:
-        msg = MIMEMultipart("alternative")
-        msg["From"] = f"SADA <{SMTP_EMAIL}>"
-        msg["To"] = to_email
-        msg["Subject"] = f"SADA — Kode Verifikasi Anda: {code}"
-
-        # Plain text version
-        text = (
-            f"Halo {username},\n\n"
-            f"Kode verifikasi akun SADA Anda adalah:\n\n"
-            f"    {code}\n\n"
-            f"Kode ini berlaku selama {VERIFY_CODE_EXPIRE_MINUTES} menit.\n\n"
-            f"Jika Anda tidak mendaftar di SADA, abaikan email ini.\n\n"
-            f"— Tim SADA"
-        )
-
-        # HTML version
-        html = f"""
+        subject = f"SADA — Kode Verifikasi Anda: {code}"
+        html_content = f"""
         <div style="font-family: 'Segoe UI', Arial, sans-serif; max-width: 480px; margin: 0 auto; padding: 32px;">
             <div style="text-align: center; margin-bottom: 32px;">
                 <h1 style="font-size: 28px; font-weight: 700; color: #111; margin: 0;">SADA</h1>
@@ -143,16 +130,40 @@ def _send_verification_email(to_email: str, code: str, username: str) -> bool:
         </div>
         """
 
-        msg.attach(MIMEText(text, "plain"))
-        msg.attach(MIMEText(html, "html"))
-
-        with smtplib.SMTP(SMTP_HOST, SMTP_PORT) as server:
-            server.starttls()
-            server.login(SMTP_EMAIL, SMTP_APP_PASSWORD)
-            server.send_message(msg)
-
-        logger.info("Verification email sent to %s", to_email)
-        return True
+        if BREVO_API_KEY:
+            # Menggunakan Brevo REST API (Bypasses SMTP port blocking)
+            headers = {
+                "accept": "application/json",
+                "api-key": BREVO_API_KEY,
+                "content-type": "application/json"
+            }
+            payload = {
+                "sender": {"name": "SADA", "email": SMTP_EMAIL or "noreply@sada-detection.com"},
+                "to": [{"email": to_email, "name": username}],
+                "subject": subject,
+                "htmlContent": html_content
+            }
+            res = requests.post("https://api.brevo.com/v3/smtp/email", json=payload, headers=headers)
+            res.raise_for_status()
+            logger.info("Verification email sent via Brevo API to %s", to_email)
+            return True
+        else:
+            # Fallback ke standar Gmail SMTP
+            text = f"Halo {username},\n\nKode verifikasi SADA Anda: {code}\nBerlaku {VERIFY_CODE_EXPIRE_MINUTES} menit."
+            msg = MIMEMultipart("alternative")
+            msg["From"] = f"SADA <{SMTP_EMAIL}>"
+            msg["To"] = to_email
+            msg["Subject"] = subject
+            msg.attach(MIMEText(text, "plain"))
+            msg.attach(MIMEText(html_content, "html"))
+
+            with smtplib.SMTP(SMTP_HOST, SMTP_PORT) as server:
+                server.starttls()
+                server.login(SMTP_EMAIL, SMTP_APP_PASSWORD)
+                server.send_message(msg)
+
+            logger.info("Verification email sent via SMTP to %s", to_email)
+            return True
 
     except Exception as e:
         logger.error("Failed to send verification email to %s: %s", to_email, e)