Add logo.dev for business emails

Author: pieterbeulque

clients/apps/web/next.config.mjs

@@ -24,7 +24,7 @@ const baseCSP = `
     frame-src 'self' https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com https://customer-wl21dabnj6qtvcai.cloudflarestream.com videodelivery.net *.cloudflarestream.com;
     script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.js.stripe.com https://js.stripe.com https://maps.googleapis.com https://www.googletagmanager.com https://chat.cdn-plain.com https://embed.cloudflarestream.com;
     style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
-    img-src 'self' blob: data: https://www.gravatar.com https://lh3.googleusercontent.com https://avatars.githubusercontent.com ${S3_PUBLIC_IMAGES_BUCKET_ORIGIN} https://prod-uk-services-workspac-workspacefilespublicbuck-vs4gjqpqjkh6.s3.amazonaws.com https://prod-uk-services-attachm-attachmentsbucket28b3ccf-uwfssb4vt2us.s3.eu-west-2.amazonaws.com https://i0.wp.com;
+    img-src 'self' blob: data: https://www.gravatar.com https://img.logo.dev https://lh3.googleusercontent.com https://avatars.githubusercontent.com ${S3_PUBLIC_IMAGES_BUCKET_ORIGIN} https://prod-uk-services-workspac-workspacefilespublicbuck-vs4gjqpqjkh6.s3.amazonaws.com https://prod-uk-services-attachm-attachmentsbucket28b3ccf-uwfssb4vt2us.s3.eu-west-2.amazonaws.com https://i0.wp.com;
     font-src 'self';
     object-src 'none';
     base-uri 'self';

server/polar/config.py

@@ -222,6 +222,9 @@ class Settings(BaseSettings):
     # Loops
     LOOPS_API_KEY: str | None = None
 
+    # Logo.dev (for company logo avatars)
+    LOGO_DEV_TOKEN: str | None = None
+
     # Logfire
     LOGFIRE_TOKEN: str | None = None
     LOGFIRE_IGNORED_ACTORS: set[str] = {

server/polar/customer/schemas/customer.py

@@ -6,6 +6,7 @@
 from fastapi import Path
 from pydantic import UUID4, Field, computed_field
 
+from polar.config import settings
 from polar.kit.address import Address, AddressInput
 from polar.kit.email import EmailStrDNS
 from polar.kit.metadata import (
@@ -40,6 +41,23 @@
 _name_description = "The name of the customer."
 _name_example = "John Doe"
 
+_personal_email_domains: set[str] = {
+    "gmail.com",
+    "yahoo.com",
+    "hotmail.com",
+    "outlook.com",
+    "aol.com",
+    "icloud.com",
+    "mail.com",
+    "protonmail.com",
+    "zoho.com",
+    "gmx.com",
+    "yandex.com",
+    "msn.com",
+    "live.com",
+    "qq.com",
+}
+
 CustomerNameInput = Annotated[
     str,
     MaxLen(256),
@@ -127,8 +145,13 @@ class CustomerBase(MetadataOutputMixin, TimestampedSchema, IDSchema):
 
     @computed_field(examples=["https://www.gravatar.com/avatar/xxx?d=404"])
     def avatar_url(self) -> str:
-        email_hash = hashlib.sha256(self.email.lower().encode()).hexdigest()
-        return f"https://www.gravatar.com/avatar/{email_hash}?d=404"
+        domain = self.email.split("@")[-1].lower()
+
+        if not settings.LOGO_DEV_TOKEN or domain in _personal_email_domains:
+            email_hash = hashlib.sha256(self.email.lower().encode()).hexdigest()
+            return f"https://www.gravatar.com/avatar/{email_hash}?d=404"
+
+        return f"https://img.logo.dev/{domain}?token={settings.LOGO_DEV_TOKEN}&fallback=404"
 
 
 class Customer(CustomerBase):