actionmailbox-resend 1.0.1 → 1.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b42b54e45b1412b1d80d387526c1014168237d095eb4357e34e005d50ed14fc4
-  data.tar.gz: 12b8f05d67bc727a91147a1cbca4d9b5b4b34e0ee8368eb9c054ab13f5cb223e
+  metadata.gz: d45c722df269ab5d5d3cc9fb7ee00910fe2d484c7c9467f5b5d09f1ead86f7da
+  data.tar.gz: a2b6f0e21506575a568099f6a31cf41b407d07d5457645420bbea8abc2a06bfa
 SHA512:
-  metadata.gz: b41a106441f4bc4288b24e3857149598c827d3eca6364ff6038f0ed329f60622ebbefc3043d4e3c2039d131b9742f9e9c0e22c694e215109807f9dc5294a910b
-  data.tar.gz: 8a63047029a116a38346604163379594cde7f9fa5e32dcf602c7db357666c3d55027fa7e4e81ce3a16a8819cfda88cc1c7be26df83c00433b5f0714a13d4f4df
+  metadata.gz: adbb6611b11cabfd924664c256ce84b26b26162b9c6592d3756bc53d9aa31c323e22d856cbc872b5e47237723aa33d0359002b7d1bfd1c8d43143887c16dd72a
+  data.tar.gz: 9f4c4a4da7dcbca4b1c07fbbfeb356e37cf1730270f96530872f594e51dd2e2122af3df088e63c889e5fbe4e339c6032e47d5b1ead9aa9dde73331d67f6299f9

data/app/controllers/action_mailbox/resend/inbound_emails_controller.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require "openssl"
+
 # rubocop:disable Metrics/ClassLength
 module ActionMailbox
   module Resend
@@ -27,7 +29,7 @@ module ActionMailbox
 
         # Extract email_id from webhook
         email_id = payload.dig('data', 'email_id')
-        return head(:unprocessable_entity) if email_id.blank?
+        return head(422) if email_id.blank?
 
         # Fetch full email from Resend API
         email_data = fetch_email_from_resend(email_id)
@@ -141,9 +143,7 @@ module ActionMailbox
         request['Authorization'] = "Bearer #{api_key}"
         request['Content-Type'] = 'application/json'
 
-        response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true, open_timeout: 5, read_timeout: 10) do |http|
-          http.request(request)
-        end
+        response = http_request(uri) { |http| http.request(request) }
 
         return JSON.parse(response.body) if response.is_a?(Net::HTTPSuccess)
 
@@ -290,9 +290,7 @@ module ActionMailbox
         metadata_request = Net::HTTP::Get.new(metadata_uri)
         metadata_request['Authorization'] = "Bearer #{api_key}"
 
-        metadata_response = Net::HTTP.start(metadata_uri.hostname, metadata_uri.port, use_ssl: true, open_timeout: 5, read_timeout: 10) do |http|
-          http.request(metadata_request)
-        end
+        metadata_response = http_request(metadata_uri) { |http| http.request(metadata_request) }
 
         unless metadata_response.is_a?(Net::HTTPSuccess)
           Rails.logger.error("Resend API error fetching attachment metadata: #{metadata_response.code} - #{metadata_response.body}")
@@ -317,9 +315,7 @@ module ActionMailbox
         download_uri = URI(download_url)
 
         # Check attachment size before downloading
-        head_response = Net::HTTP.start(download_uri.hostname, download_uri.port, use_ssl: true, open_timeout: 5, read_timeout: 10) do |http|
-          http.head(download_uri.request_uri)
-        end
+        head_response = http_request(download_uri) { |http| http.head(download_uri.request_uri) }
 
         if head_response['content-length'].present?
           content_length = head_response['content-length'].to_i
@@ -329,9 +325,7 @@ module ActionMailbox
           end
         end
 
-        download_response = Net::HTTP.start(download_uri.hostname, download_uri.port, use_ssl: true, open_timeout: 5, read_timeout: 10) do |http|
-          http.get(download_uri.request_uri)
-        end
+        download_response = http_request(download_uri) { |http| http.get(download_uri.request_uri) }
 
         # Block redirects to prevent SSRF attacks
         if download_response.is_a?(Net::HTTPRedirection)
@@ -419,6 +413,30 @@ module ActionMailbox
         Rails.logger.error("Invalid URL in Resend webhook: #{url} - #{e.message}")
         false
       end
+
+      # Returns a cert store configured for broad compatibility.
+      # OpenSSL 3.x enables CRL checking by default, which fails for many CDNs
+      # (including Cloudflare, which fronts Resend's API). This disables CRL
+      # checking while maintaining certificate verification.
+      def default_cert_store
+        store = OpenSSL::X509::Store.new
+        store.set_default_paths
+        store.flags = 0 # Disable CRL checking for OpenSSL 3.x compatibility
+        store
+      end
+
+      def http_request(uri, open_timeout: 5, read_timeout: 10)
+        Net::HTTP.start(
+          uri.hostname,
+          uri.port,
+          use_ssl: true,
+          cert_store: default_cert_store,
+          open_timeout: open_timeout,
+          read_timeout: read_timeout
+        ) do |http|
+          yield http
+        end
+      end
     end
   end
 end

data/lib/action_mailbox/resend/version.rb

@@ -2,6 +2,6 @@
 
 module ActionMailbox
   module Resend
-    VERSION = "1.0.1"
+    VERSION = "1.0.2"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: actionmailbox-resend
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.0.2
 platform: ruby
 authors:
 - rcoenen
@@ -103,7 +103,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.7.2
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Resend email ingress for ActionMailbox
 test_files: []