Auto dispatch emails

app/controllers/pushes_controller.rb

@@ -132,6 +132,7 @@ def create
 
     if @push.save
       log_creation(@push)
+      @push.send_creation_emails
 
       redirect_to preview_push_path(@push)
     else
@@ -365,16 +366,14 @@ def set_push
   end
 
   def push_params
+    base = %i[kind name expire_after_days expire_after_views retrieval_step payload note passphrase notify_emails_to notify_emails_to_locale]
     case params.dig(:push, :kind)
     when "url"
-      params.require(:push).permit(:kind, :name, :expire_after_days, :expire_after_views,
-        :retrieval_step, :payload, :note, :passphrase)
+      params.require(:push).permit(*base - [:deletable_by_viewer])
     when "file"
-      params.require(:push).permit(:kind, :name, :expire_after_days, :expire_after_views, :deletable_by_viewer,
-        :retrieval_step, :payload, :note, :passphrase, files: [])
+      params.require(:push).permit(*(base + [:deletable_by_viewer, {files: []}]))
     else
-      params.require(:push).permit(:kind, :name, :expire_after_days, :expire_after_views, :deletable_by_viewer,
-        :retrieval_step, :payload, :note, :passphrase)
+      params.require(:push).permit(*(base + [:deletable_by_viewer]))
     end
   rescue => e
     Rails.logger.error("Error in push_params: #{e.message}")

app/helpers/application_helper.rb

@@ -44,6 +44,21 @@ def secret_url(push, with_retrieval_step: true, locale: nil)
     raw_url
   end
 
+  # True when the application can send email (SMTP or equivalent), so the
+  # "notify emails" push option should be shown. In production this requires
+  # Settings.mail with smtp_address; in development mailbin counts as configured.
+  #
+  # @return [Boolean]
+  def smtp_configured?
+    if Rails.env.test?
+      false
+    elsif Rails.env.development?
+      true
+    else
+      Settings.mail.present? && Settings.mail.smtp_address.to_s.present?
+    end
+  end
+
   # qr_code
   #
   # Generates a QR code for the given URL

app/jobs/send_push_created_email_job.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+class SendPushCreatedEmailJob < ApplicationJob
+  queue_as :default
+
+  def perform(push)
+    return if push.notify_emails_to.blank?
+
+    PushCreatedMailer.with(record: push).notify.deliver_now
+  end
+end

app/mailers/push_created_mailer.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+class PushCreatedMailer < ApplicationMailer
+  def notify
+    @push = params[:record]
+    locale = @push.notify_emails_to_locale.presence
+    I18n.with_locale(locale || I18n.default_locale) do
+      @secret_url = secret_url_for_push(@push, locale: locale)
+      @subject = "#{Settings.brand&.title || "Password Pusher"} #{_("has sent you a push")}"
+      mail(
+        to: parse_emails(@push.notify_emails_to),
+        subject: @subject
+      )
+    end
+  end
+
+  private
+
+  def parse_emails(raw)
+    raw.to_s.split(",").map(&:strip).reject(&:blank?)
+  end
+
+  def secret_url_for_push(push, locale: nil)
+    raw_url = if push.retrieval_step
+      preliminary_push_url(push)
+    else
+      push_url(push)
+    end
+    base = raw_url.split("?").first
+    if locale.present? && Array(Settings.enabled_language_codes).include?(locale.to_s)
+      base += "?locale=#{locale}"
+    end
+    base = base.gsub(/http/i, "https") if ENV.key?("FORCE_SSL")
+    base
+  end
+end

app/models/concerns/pwpush/notify_emails_to.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Pwpush
+  module NotifyEmailsTo
+    extend ActiveSupport::Concern
+
+    included do
+      validates :notify_emails_to, multiple_emails: true, allow_blank: true
+    end
+
+    # Enqueue job to send creation email if notify_emails_to is present.
+    def send_creation_emails
+      return if notify_emails_to.blank?
+
+      if Rails.env.development?
+        SendPushCreatedEmailJob.perform_now(self)
+      else
+        SendPushCreatedEmailJob.perform_later(self)
+      end
+    end
+  end
+end

app/models/push.rb

@@ -3,6 +3,8 @@
 require "addressable/uri"
 
 class Push < ApplicationRecord
+  include Pwpush::NotifyEmailsTo
+
   enum :kind, [:text, :file, :url, :qr], validate: true
 
   validate :check_enabled_push_kinds, on: :create

app/validators/multiple_emails_validator.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+# Validates comma-separated email addresses: format, max 5, no duplicates.
+class MultipleEmailsValidator < ActiveModel::EachValidator
+  EMAIL_REGEX = /\A[^@\s]+@[^@\s]+\.[^@\s]+\z/
+  MAX_EMAILS = 5
+
+  def validate_each(record, attribute, value)
+    return if value.blank?
+
+    emails = value.to_s.split(",").map(&:strip).reject(&:blank?)
+
+    if emails.size > MAX_EMAILS
+      record.errors.add(attribute, "You can enter at most %{count} email addresses", count: MAX_EMAILS)
+    end
+
+    if emails.size != emails.uniq.size
+      record.errors.add(attribute, "Duplicate email addresses are not allowed")
+    end
+
+    invalid = emails.reject { |e| e.match?(EMAIL_REGEX) }
+    unless invalid.empty?
+      record.errors.add(attribute, "%{list} are invalid email addresses", list: invalid.join(", "))
+    end
+  end
+end

app/views/push_created_mailer/notify.html.erb

@@ -0,0 +1,16 @@
+<h1><%= Settings.brand.title %> <%= _('has sent you a push') %></h1>
+
+<p>
+  <%= _('Use the link below to view the shared content. The link will expire after a certain number of views or time.') %>
+</p>
+
+<p>
+  <%= link_to _('View the secret'), @secret_url %>
+</p>
+
+<p class="text-muted small">
+  <%= _('Or copy and paste this URL into your browser') %>
+</p>
+<pre><%= @secret_url %></pre>
+
+<%= render 'shared/email_footer' %>

app/views/push_created_mailer/notify.text.erb

@@ -0,0 +1,11 @@
+<%= Settings.brand.title %> <%= _('has sent you a push') %>
+
+<%= _('Use the link below to view the shared content. The link will expire after a certain number of views or time.') %>
+
+<%= _('View the secret') %>: <%= @secret_url %>
+
+<%= _('Or copy and paste this URL into your browser') %>: <%= @secret_url %>
+
+--
+<%= Settings.brand.title %>
+<%= Settings.brand.tagline %>

app/views/pushes/_files_form.html.erb

@@ -153,6 +153,10 @@
                     </div>
                 </div>
             </div>
+            <% if smtp_configured? %>
+                <%= render partial: "shared/notify_emails_to", locals: { f: f } %>
+                <%= render partial: "shared/notify_emails_to_locale", locals: { f: f } %>
+            <% end %>
             <% unless action_name == 'edit' %>
                 <div class='row'>
                     <div class='col'>

app/views/pushes/_form.html.erb

@@ -137,6 +137,10 @@
                     </div>
                 </div>
             </div>
+            <% if smtp_configured? %>
+                <%= render partial: "shared/notify_emails_to", locals: { f: f } %>
+                <%= render partial: "shared/notify_emails_to_locale", locals: { f: f } %>
+            <% end %>
             <% unless action_name == 'edit' %>
                 <div class='row'>
                     <div class='col'>

app/views/pushes/_qr_form.html.erb

@@ -129,6 +129,10 @@
                     </div>
                 </div>
             </div>
+            <% if smtp_configured? %>
+                <%= render partial: "shared/notify_emails_to", locals: { f: f } %>
+                <%= render partial: "shared/notify_emails_to_locale", locals: { f: f } %>
+            <% end %>
             <% unless action_name == 'edit' %>
                 <div class='row'>
                     <div class='col'>

app/views/pushes/_url_form.html.erb

@@ -107,6 +107,10 @@
                     </div>
                 </div>
             </div>
+            <% if smtp_configured? %>
+                <%= render partial: "shared/notify_emails_to", locals: { f: f } %>
+                <%= render partial: "shared/notify_emails_to_locale", locals: { f: f } %>
+            <% end %>
             <% unless action_name == 'edit' %>
                 <div class='row'>
                     <div class='col'>

app/views/shared/_notify_emails_to.html.erb

@@ -0,0 +1,13 @@
+<% unless action_name == 'edit' %>
+  <div class='row mb-3'>
+    <div class='col'>
+      <div class="input-group">
+        <span class="input-group-text"><%= _('Email notification recipients') %></span>
+        <%= f.text_field(:notify_emails_to, { class: "form-control",
+                                              placeholder: _('Enter email addresses separated by commas'),
+                                              autocomplete: "off" }) %>
+      </div>
+      <div class="form-text"><%= _('Enter email addresses separated by commas') %></div>
+    </div>
+  </div>
+<% end %>

app/views/shared/_notify_emails_to_locale.html.erb

@@ -0,0 +1,14 @@
+<% unless action_name == 'edit' %>
+  <div class='row mb-3'>
+    <div class='col'>
+      <div class="input-group">
+        <span class="input-group-text"><%= _('Email notification language') %></span>
+        <%= f.select(:notify_emails_to_locale,
+                     options_for_select([["", ""]] + language_options_for_select, f.object.notify_emails_to_locale),
+                     {},
+                     { class: "form-select" }) %>
+      </div>
+      <div class="form-text"><%= _('Select the language of the email notification') %></div>
+    </div>
+  </div>
+<% end %>

db/migrate/20260202120000_add_notify_emails_to_pushes.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+class AddNotifyEmailsToPushes < ActiveRecord::Migration[8.1]
+  def change
+    add_column :pushes, :notify_emails_to, :text
+    add_column :pushes, :notify_emails_to_locale, :string
+  end
+end

db/schema.rb

@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema[8.1].define(version: 2025_06_06_094103) do
+ActiveRecord::Schema[8.1].define(version: 2026_02_02_120000) do
   create_table "active_storage_attachments", force: :cascade do |t|
     t.integer "blob_id", null: false
     t.datetime "created_at", precision: nil, null: false
@@ -72,6 +72,8 @@
     t.integer "kind", null: false
     t.string "name"
     t.text "note_ciphertext"
+    t.text "notify_emails_to"
+    t.string "notify_emails_to_locale"
     t.text "passphrase_ciphertext", limit: 2048
     t.text "payload_ciphertext", limit: 16777215
     t.boolean "retrieval_step", default: false

test/helpers/application_helper_test.rb

@@ -181,4 +181,59 @@ def push_url(push)
     assert qr.html_safe?
     assert qr.is_a?(ActiveSupport::SafeBuffer)
   end
+
+  # Test smtp_configured? method
+  test "smtp_configured? is false in test environment" do
+    assert_equal "test", Rails.env
+    assert_not smtp_configured?
+  end
+
+  test "smtp_configured? is true in development environment" do
+    env = env_inquirer("development")
+    Rails.stub(:env, env) do
+      assert smtp_configured?
+    end
+  end
+
+  test "smtp_configured? in production is true when Settings.mail has smtp_address" do
+    env = env_inquirer("production")
+    Rails.stub(:env, env) do
+      Settings.stub(:mail, OpenStruct.new(smtp_address: "smtp.example.com")) do
+        assert smtp_configured?
+      end
+    end
+  end
+
+  test "smtp_configured? in production is false when Settings.mail has no smtp_address" do
+    env = env_inquirer("production")
+    Rails.stub(:env, env) do
+      Settings.stub(:mail, OpenStruct.new(smtp_address: nil)) do
+        assert_not smtp_configured?
+      end
+    end
+  end
+
+  test "smtp_configured? in production is false when Settings.mail is nil" do
+    env = env_inquirer("production")
+    Rails.stub(:env, env) do
+      Settings.stub(:mail, nil) do
+        assert_not smtp_configured?
+      end
+    end
+  end
+
+  test "smtp_configured? in production is false when smtp_address is empty string" do
+    env = env_inquirer("production")
+    Rails.stub(:env, env) do
+      Settings.stub(:mail, OpenStruct.new(smtp_address: "")) do
+        assert_not smtp_configured?
+      end
+    end
+  end
+
+  private
+
+  def env_inquirer(name)
+    ActiveSupport::StringInquirer.new(name)
+  end
 end