'use strict'; const Mailer = require('./mailer'); const shared = require('./shared'); const SMTPPool = require('./smtp-pool'); const SMTPTransport = require('./smtp-transport'); const SendmailTransport = require('./sendmail-transport'); const StreamTransport = require('./stream-transport'); const JSONTransport = require('./json-transport'); const SESTransport = require('./ses-transport'); const errors = require('./errors'); const nmfetch = require('./fetch'); const packageData = require('../package.json'); const ETHEREAL_API = (process.env.ETHEREAL_API || 'https://api.nodemailer.com').replace(/\/+$/, ''); const ETHEREAL_WEB = (process.env.ETHEREAL_WEB || 'https://ethereal.email').replace(/\/+$/, ''); const ETHEREAL_API_KEY = (process.env.ETHEREAL_API_KEY || '').replace(/\s*/g, '') || null; const ETHEREAL_CACHE = ['true', 'yes', 'y', '1'].includes((process.env.ETHEREAL_CACHE || 'yes').toString().trim().toLowerCase()); let testAccount = false; module.exports.createTransport = function (transporter, defaults) { let options; if ( // provided transporter is a configuration object, not transporter plugin (typeof transporter === 'object' && typeof transporter.send !== 'function') || // provided transporter looks like a connection url (typeof transporter === 'string' && /^(smtps?|direct):/i.test(transporter)) ) { const urlConfig = typeof transporter === 'string' ? transporter : transporter.url; if (urlConfig) { // parse a configuration URL into configuration options options = shared.parseConnectionUrl(urlConfig); } else { options = transporter; } if (options.pool) { transporter = new SMTPPool(options); } else if (options.sendmail) { transporter = new SendmailTransport(options); } else if (options.streamTransport) { transporter = new StreamTransport(options); } else if (options.jsonTransport) { transporter = new JSONTransport(options); } else if (options.SES) { if (options.SES.ses && options.SES.aws) { const error = new Error( 'Using legacy SES configuration, expecting @aws-sdk/client-sesv2, see https://nodemailer.com/transports/ses/' ); error.code = errors.ECONFIG; throw error; } transporter = new SESTransport(options); } else { transporter = new SMTPTransport(options); } } return new Mailer(transporter, options, defaults); }; module.exports.createTestAccount = function (apiUrl, callback) { let promise; if (!callback && typeof apiUrl === 'function') { callback = apiUrl; apiUrl = false; } if (!callback) { promise = new Promise((resolve, reject) => { callback = shared.callbackPromise(resolve, reject); }); } if (ETHEREAL_CACHE && testAccount) { setImmediate(() => callback(null, testAccount)); return promise; } apiUrl = apiUrl || ETHEREAL_API; const chunks = []; let chunklen = 0; const requestHeaders = {}; const requestBody = { requestor: packageData.name, version: packageData.version }; if (ETHEREAL_API_KEY) { requestHeaders.Authorization = 'Bearer ' + ETHEREAL_API_KEY; } const fetchOptions = { contentType: 'application/json', method: 'POST', headers: requestHeaders, body: Buffer.from(JSON.stringify(requestBody)) }; // Credential-bearing request to the Ethereal API. lib/fetch already // validates certs by default; pin rejectUnauthorized:true here so this // call stays strict regardless of any future default change and is never // relaxed for a real-cert endpoint. if (/^https:/i.test(apiUrl)) { fetchOptions.tls = { rejectUnauthorized: true }; } const req = nmfetch(apiUrl + '/user', fetchOptions); req.on('readable', () => { let chunk; while ((chunk = req.read()) !== null) { chunks.push(chunk); chunklen += chunk.length; } }); req.once('error', err => callback(err)); req.once('end', () => { const res = Buffer.concat(chunks, chunklen); let data; try { data = JSON.parse(res.toString()); } catch (E) { return callback(E); } if (data.status !== 'success' || data.error) { return callback(new Error(data.error || 'Request failed')); } delete data.status; testAccount = data; callback(null, testAccount); }); return promise; }; module.exports.getTestMessageUrl = function (info) { if (!info || !info.response) { return false; } const infoProps = new Map(); // Extract the trailing "[...]" part of the response (no "]" allowed inside) // with linear string scanning; the equivalent regex /\[([^\]]+)\]$/ was // flagged for polynomial backtracking on adversarial server responses const response = info.response.toString(); if (response.length > 2 && response.charAt(response.length - 1) === ']') { const open = response.indexOf('[', response.lastIndexOf(']', response.length - 2) + 1); if (open >= 0 && open < response.length - 2) { const props = response.substring(open + 1, response.length - 1); props.replace(/\b([A-Z0-9]+)=([^\s]+)/g, (m, key, value) => { infoProps.set(key, value); }); } } if (infoProps.has('STATUS') && infoProps.has('MSGID')) { return (testAccount.web || ETHEREAL_WEB) + '/message/' + infoProps.get('MSGID'); } return false; };