Blobs are scoped per JMAP account, but the attachment download/preview path always used the active account's client and accountId. Opening a message from a different account in the unified / All-Mail view and downloading (or previewing) an attachment therefore 404'd against the active account. Route the blob fetch to the message's source instead: - resolveBlobSource() picks the owning login's client (getClientForAccount(sourceClientAccountId)) and the owner accountId (sourceAccountId) for delegated/shared blobs, in the unified view; - handleDownloadAttachment + the attachment-preview handlers use it; - downloadBlob / fetchBlobAsObjectUrl / fetchBlobArrayBuffer gain an accountId param (getBlobDownloadUrl/fetchBlob already had one). Adds 10-attachments: an attachment on another account's All-Mail message downloads with the correct bytes (verified to fail without the routing).
155 lines
4.9 KiB
TypeScript
155 lines
4.9 KiB
TypeScript
/**
|
|
* Dependency-free SMTP submission client.
|
|
*
|
|
* Speaks just enough SMTP to authenticate against Stalwart's plaintext
|
|
* submission listener (AUTH LOGIN, no STARTTLS) and inject a message. Used to
|
|
* simulate real inbound mail so the webmail's sync behaviour can be observed.
|
|
* A raw socket keeps the test harness free of a nodemailer dependency.
|
|
*/
|
|
import net from 'node:net';
|
|
import { SMTP_HOST, SMTP_PORT } from './config';
|
|
|
|
interface SendOptions {
|
|
host?: string;
|
|
port?: number;
|
|
/** Envelope + auth sender, e.g. "alice@example.org". */
|
|
from: string;
|
|
/** Auth username; defaults to `from`. */
|
|
authUser?: string;
|
|
authPass: string;
|
|
/** One or more envelope recipients. */
|
|
to: string | string[];
|
|
subject: string;
|
|
/** Plain-text body. */
|
|
body: string;
|
|
/** Extra headers (e.g. custom Message-ID / In-Reply-To for threading). */
|
|
headers?: Record<string, string>;
|
|
/** Optional single attachment (sent as multipart/mixed, base64). */
|
|
attachment?: { filename: string; contentType: string; content: string };
|
|
}
|
|
|
|
class SmtpError extends Error {}
|
|
|
|
function crlf(s: string): string {
|
|
return s.replace(/\r?\n/g, '\r\n');
|
|
}
|
|
|
|
/**
|
|
* Submit a single message. Resolves once the server has accepted it (250 after
|
|
* end-of-DATA). Rejects on any non-2xx/3xx reply or socket error.
|
|
*/
|
|
export async function sendMail(opts: SendOptions): Promise<void> {
|
|
const host = opts.host ?? SMTP_HOST;
|
|
const port = opts.port ?? SMTP_PORT;
|
|
const recipients = Array.isArray(opts.to) ? opts.to : [opts.to];
|
|
const authUser = opts.authUser ?? opts.from;
|
|
|
|
const socket = net.createConnection({ host, port });
|
|
socket.setEncoding('utf8');
|
|
socket.setTimeout(15000);
|
|
|
|
let buffer = '';
|
|
let resolveLine: ((line: string) => void) | null = null;
|
|
let pendingError: Error | null = null;
|
|
|
|
socket.on('data', (chunk: string) => {
|
|
buffer += chunk;
|
|
// A complete reply ends with "<code> ...\r\n" (space, not hyphen, after code).
|
|
const lines = buffer.split('\r\n');
|
|
for (let i = 0; i < lines.length - 1; i++) {
|
|
const line = lines[i];
|
|
if (/^\d{3} /.test(line) && resolveLine) {
|
|
const r = resolveLine;
|
|
resolveLine = null;
|
|
buffer = lines.slice(i + 1).join('\r\n');
|
|
r(line);
|
|
return;
|
|
}
|
|
}
|
|
});
|
|
socket.on('timeout', () => { pendingError = new SmtpError('SMTP timeout'); socket.destroy(); });
|
|
socket.on('error', (e) => { pendingError = e; });
|
|
|
|
const waitReply = (expect: string): Promise<string> =>
|
|
new Promise((resolve, reject) => {
|
|
if (pendingError) return reject(pendingError);
|
|
resolveLine = (line) => {
|
|
if (!line.startsWith(expect)) {
|
|
reject(new SmtpError(`Expected ${expect}, got: ${line}`));
|
|
} else {
|
|
resolve(line);
|
|
}
|
|
};
|
|
});
|
|
|
|
const send = (line: string): void => { socket.write(line + '\r\n'); };
|
|
const b64 = (s: string) => Buffer.from(s).toString('base64');
|
|
|
|
try {
|
|
await new Promise<void>((resolve, reject) => {
|
|
socket.once('connect', resolve);
|
|
socket.once('error', reject);
|
|
});
|
|
await waitReply('220');
|
|
send('EHLO integration-tests');
|
|
await waitReply('250');
|
|
send('AUTH LOGIN');
|
|
await waitReply('334');
|
|
send(b64(authUser));
|
|
await waitReply('334');
|
|
send(b64(opts.authPass));
|
|
await waitReply('235');
|
|
send(`MAIL FROM:<${opts.from}>`);
|
|
await waitReply('250');
|
|
for (const rcpt of recipients) {
|
|
send(`RCPT TO:<${rcpt}>`);
|
|
await waitReply('250');
|
|
}
|
|
send('DATA');
|
|
await waitReply('354');
|
|
|
|
const headers: Record<string, string> = {
|
|
From: opts.from,
|
|
To: recipients.join(', '),
|
|
Subject: opts.subject,
|
|
...opts.headers,
|
|
};
|
|
|
|
let mime: string;
|
|
if (opts.attachment) {
|
|
const boundary = 'itmixed_boundary_0001';
|
|
headers['MIME-Version'] = '1.0';
|
|
headers['Content-Type'] = `multipart/mixed; boundary="${boundary}"`;
|
|
const b64 = Buffer.from(opts.attachment.content).toString('base64').replace(/(.{76})/g, '$1\r\n');
|
|
mime = [
|
|
`--${boundary}`,
|
|
'Content-Type: text/plain; charset=utf-8',
|
|
'',
|
|
crlf(opts.body),
|
|
`--${boundary}`,
|
|
`Content-Type: ${opts.attachment.contentType}; name="${opts.attachment.filename}"`,
|
|
`Content-Disposition: attachment; filename="${opts.attachment.filename}"`,
|
|
'Content-Transfer-Encoding: base64',
|
|
'',
|
|
b64,
|
|
`--${boundary}--`,
|
|
].join('\r\n');
|
|
} else {
|
|
headers['Content-Type'] = 'text/plain; charset=utf-8';
|
|
mime = crlf(opts.body);
|
|
}
|
|
|
|
const headerBlock = Object.entries(headers)
|
|
.map(([k, v]) => `${k}: ${v}`)
|
|
.join('\r\n');
|
|
// Dot-stuff any line that begins with '.'
|
|
const safeBody = mime.replace(/\r\n\./g, '\r\n..');
|
|
send(`${headerBlock}\r\n\r\n${safeBody}\r\n.`);
|
|
await waitReply('250');
|
|
send('QUIT');
|
|
await waitReply('221').catch(() => { /* some servers drop before 221 */ });
|
|
} finally {
|
|
socket.destroy();
|
|
}
|
|
}
|