@dargmuesli/nuxt-vio 20.3.0 → 20.5.0

package/nuxt.config.ts

@@ -113,6 +113,13 @@ export default defineNuxtConfig(
             isTesting: false,
           },
         },
+        vio: {
+          email: {
+            nodemailer: {
+              transport: undefined,
+            },
+          },
+        },
       },
       typescript: {
         tsConfig: {

package/package.json

@@ -35,6 +35,7 @@
     "jiti": "2.6.1",
     "jose": "6.1.3",
     "lucide-vue-next": "0.562.0",
+    "nodemailer": "7.0.13",
     "nuxt-gtag": "4.1.0",
     "nuxt-security": "2.5.1",
     "reka-ui": "2.7.0",
@@ -45,6 +46,7 @@
     "vue-tsc": "3.2.2"
   },
   "devDependencies": {
+    "@types/nodemailer": "7.0.9",
     "@types/node": "24.10.9",
     "@urql/devtools": "2.0.3",
     "@urql/exchange-graphcache": "9.0.0",
@@ -115,5 +117,5 @@
     "start:static": "serve playground/.output/public --ssl-cert ./.config/certificates/ssl.crt --ssl-key ./.config/certificates/ssl.key"
   },
   "type": "module",
-  "version": "20.3.0"
+  "version": "20.5.0"
 }

package/server/plugins/nodemailer.ts

@@ -0,0 +1,38 @@
+import { createTransport, type Transporter } from 'nodemailer'
+
+export default defineNitroPlugin((nitroApp) => {
+  const runtimeConfig = useRuntimeConfig()
+
+  if (!runtimeConfig.vio.email.nodemailer.transport) {
+    ;(import.meta.dev ? console.warn : console.error)(
+      'The SMTP configuration secret is missing!',
+    )
+    return
+  }
+
+  const transporter = createTransport(
+    runtimeConfig.vio.email.nodemailer.transport,
+  )
+
+  nitroApp.hooks.hook('request', (event) => {
+    event.context.$email = {
+      nodemailer: {
+        transporter,
+      },
+    }
+  })
+
+  nitroApp.hooks.hookOnce('close', () => {
+    transporter.close()
+  })
+})
+
+declare module 'h3' {
+  interface H3EventContext {
+    $email?: {
+      nodemailer: {
+        transporter: Transporter
+      }
+    }
+  }
+}

package/server/utils/dependencies/index.ts

@@ -0,0 +1 @@
+export * from './turnstile'

package/server/utils/dependencies/turnstile.ts

@@ -0,0 +1,25 @@
+import { consola } from 'consola'
+
+/**
+ * Verifies a Turnstile token from the request body
+ * @throws {Error} If token is missing or verification fails
+ */
+export const assertTurnstileValid = async ({ token }: { token?: string }) => {
+  if (!token) {
+    throw createError({
+      statusCode: 422,
+      statusMessage: 'Turnstile token not provided.',
+    })
+  }
+
+  const result = await verifyTurnstileToken(token)
+
+  if (!result.success) {
+    throw createError({
+      statusCode: 403,
+      statusMessage: `Turnstile verification unsuccessful: ${result['error-codes'].join(', ')}`,
+    })
+  }
+
+  consola.debug('Turnstile verification succeeded')
+}

package/server/utils/index.ts

@@ -0,0 +1 @@
+export * from './dependencies'

package/shared/utils/constants.ts

@@ -45,6 +45,11 @@ export const VIO_GET_CSP = ({ siteUrl }: { siteUrl: URL }) =>
       // Google Service Worker (https://developers.google.com/tag-platform/tag-manager/web/csp)
       'frame-src': ['https://www.googletagmanager.com'],
     },
+    {
+      // Cloudflare Turnstile
+      'frame-src': ['https://challenges.cloudflare.com'],
+      'script-src-elem': ['https://challenges.cloudflare.com'],
+    },
     {
       // vio
       'manifest-src': [`${siteUrl}site.webmanifest`],