@hed-hog/core 0.0.387 → 0.0.393

package/dist/mail-delivery/ses-event.parser.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSesNotification = parseSesNotification;
+/**
+ * O SES publica o mesmo fato em dois formatos, e qual deles chega depende de
+ * como as notificacoes foram ligadas:
+ *
+ *   - notificacoes por identidade (o caminho simples): `notificationType`
+ *   - configuration set com event destination: `eventType`
+ *
+ * Suportar os dois e barato e evita que a escolha feita no console da AWS - que
+ * nem sempre e nossa - quebre a ingestao.
+ */
+function parseSesNotification(payload) {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s;
+    const rawType = String((_b = (_a = payload === null || payload === void 0 ? void 0 : payload.notificationType) !== null && _a !== void 0 ? _a : payload === null || payload === void 0 ? void 0 : payload.eventType) !== null && _b !== void 0 ? _b : '').trim();
+    if (!rawType)
+        return [];
+    const providerMessageId = String((_d = (_c = payload === null || payload === void 0 ? void 0 : payload.mail) === null || _c === void 0 ? void 0 : _c.messageId) !== null && _d !== void 0 ? _d : '').trim();
+    if (!providerMessageId)
+        return [];
+    const type = rawType.toLowerCase();
+    const mailTimestamp = (_e = payload === null || payload === void 0 ? void 0 : payload.mail) === null || _e === void 0 ? void 0 : _e.timestamp;
+    switch (type) {
+        case 'bounce': {
+            const bounce = (_f = payload.bounce) !== null && _f !== void 0 ? _f : {};
+            const recipients = Array.isArray(bounce.bouncedRecipients)
+                ? bounce.bouncedRecipients
+                : [];
+            const occurredAt = toDate((_g = bounce.timestamp) !== null && _g !== void 0 ? _g : mailTimestamp);
+            // Um bounce sem destinatario listado ainda e um bounce: registrar sem
+            // e-mail e melhor que descartar a unica evidencia de que a mensagem voltou.
+            if (!recipients.length) {
+                return [
+                    {
+                        providerMessageId,
+                        recipientEmail: null,
+                        eventType: type,
+                        bounceType: str(bounce.bounceType),
+                        bounceSubtype: str(bounce.bounceSubType),
+                        diagnosticCode: null,
+                        reportingMta: str(bounce.reportingMTA),
+                        occurredAt,
+                    },
+                ];
+            }
+            return recipients.map((recipient) => {
+                var _a;
+                return ({
+                    providerMessageId,
+                    recipientEmail: str(recipient === null || recipient === void 0 ? void 0 : recipient.emailAddress),
+                    eventType: type,
+                    bounceType: str(bounce.bounceType),
+                    bounceSubtype: str(bounce.bounceSubType),
+                    // A resposta literal do servidor destinatario - o campo que responde
+                    // "por que nao chegou".
+                    diagnosticCode: (_a = str(recipient === null || recipient === void 0 ? void 0 : recipient.diagnosticCode)) !== null && _a !== void 0 ? _a : str(recipient === null || recipient === void 0 ? void 0 : recipient.status),
+                    reportingMta: str(bounce.reportingMTA),
+                    occurredAt,
+                });
+            });
+        }
+        case 'complaint': {
+            const complaint = (_h = payload.complaint) !== null && _h !== void 0 ? _h : {};
+            const recipients = Array.isArray(complaint.complainedRecipients)
+                ? complaint.complainedRecipients
+                : [];
+            const occurredAt = toDate((_j = complaint.timestamp) !== null && _j !== void 0 ? _j : mailTimestamp);
+            const feedback = str(complaint.complaintFeedbackType);
+            if (!recipients.length) {
+                return [
+                    buildSimple(providerMessageId, null, type, occurredAt, feedback, null),
+                ];
+            }
+            return recipients.map((recipient) => buildSimple(providerMessageId, str(recipient === null || recipient === void 0 ? void 0 : recipient.emailAddress), type, occurredAt, feedback, null));
+        }
+        case 'delivery': {
+            const delivery = (_k = payload.delivery) !== null && _k !== void 0 ? _k : {};
+            const recipients = Array.isArray(delivery.recipients) ? delivery.recipients : [];
+            const occurredAt = toDate((_l = delivery.timestamp) !== null && _l !== void 0 ? _l : mailTimestamp);
+            if (!recipients.length) {
+                return [
+                    buildSimple(providerMessageId, null, type, occurredAt, str(delivery.smtpResponse), str(delivery.reportingMTA)),
+                ];
+            }
+            return recipients.map((recipient) => buildSimple(providerMessageId, str(recipient), type, occurredAt, str(delivery.smtpResponse), str(delivery.reportingMTA)));
+        }
+        default: {
+            // Send, Reject, Open, Click, DeliveryDelay, RenderingFailure e o que a AWS
+            // acrescentar depois. Guardar o desconhecido e o que faz um tipo novo
+            // aparecer no log em vez de sumir.
+            const destinations = Array.isArray((_m = payload === null || payload === void 0 ? void 0 : payload.mail) === null || _m === void 0 ? void 0 : _m.destination)
+                ? payload.mail.destination
+                : [];
+            const occurredAt = toDate(mailTimestamp);
+            const detail = (_r = (_p = str((_o = payload === null || payload === void 0 ? void 0 : payload.reject) === null || _o === void 0 ? void 0 : _o.reason)) !== null && _p !== void 0 ? _p : str((_q = payload === null || payload === void 0 ? void 0 : payload.failure) === null || _q === void 0 ? void 0 : _q.errorMessage)) !== null && _r !== void 0 ? _r : str((_s = payload === null || payload === void 0 ? void 0 : payload.deliveryDelay) === null || _s === void 0 ? void 0 : _s.delayType);
+            if (!destinations.length) {
+                return [
+                    buildSimple(providerMessageId, null, type, occurredAt, detail, null),
+                ];
+            }
+            return destinations.map((address) => buildSimple(providerMessageId, str(address), type, occurredAt, detail, null));
+        }
+    }
+}
+function buildSimple(providerMessageId, recipientEmail, eventType, occurredAt, diagnosticCode, reportingMta) {
+    return {
+        providerMessageId,
+        recipientEmail,
+        eventType,
+        bounceType: null,
+        bounceSubtype: null,
+        diagnosticCode,
+        reportingMta,
+        occurredAt,
+    };
+}
+function str(value) {
+    const text = String(value !== null && value !== void 0 ? value : '').trim();
+    return text || null;
+}
+/**
+ * Data do provedor. Cai para agora quando o timestamp vem ausente ou invalido -
+ * a coluna e NOT NULL e faz parte da chave de dedupe, entao um `Invalid Date`
+ * derrubaria a ingestao inteira do lote.
+ */
+function toDate(value) {
+    const parsed = new Date(String(value !== null && value !== void 0 ? value : ''));
+    return Number.isNaN(parsed.getTime()) ? new Date() : parsed;
+}
+//# sourceMappingURL=ses-event.parser.js.map

package/dist/mail-delivery/ses-event.parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ses-event.parser.js","sourceRoot":"","sources":["../../src/mail-delivery/ses-event.parser.ts"],"names":[],"mappings":";;AA0BA,oDAiIC;AA3ID;;;;;;;;;GASG;AACH,SAAgB,oBAAoB,CAAC,OAAY;;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,gBAAgB,mCAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrF,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,0CAAE,SAAS,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,CAAC,iBAAiB;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,aAAa,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,0CAAE,SAAS,CAAC;IAE/C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,MAAA,OAAO,CAAC,MAAM,mCAAI,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;gBACxD,CAAC,CAAC,MAAM,CAAC,iBAAiB;gBAC1B,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,UAAU,GAAG,MAAM,CAAC,MAAA,MAAM,CAAC,SAAS,mCAAI,aAAa,CAAC,CAAC;YAE7D,sEAAsE;YACtE,4EAA4E;YAC5E,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO;oBACL;wBACE,iBAAiB;wBACjB,cAAc,EAAE,IAAI;wBACpB,SAAS,EAAE,IAAI;wBACf,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;wBAClC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;wBACxC,cAAc,EAAE,IAAI;wBACpB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;wBACtC,UAAU;qBACX;iBACF,CAAC;YACJ,CAAC;YAED,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAc,EAAE,EAAE;;gBAAC,OAAA,CAAC;oBACzC,iBAAiB;oBACjB,cAAc,EAAE,GAAG,CAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,YAAY,CAAC;oBAC5C,SAAS,EAAE,IAAI;oBACf,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;oBAClC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;oBACxC,qEAAqE;oBACrE,wBAAwB;oBACxB,cAAc,EAAE,MAAA,GAAG,CAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,cAAc,CAAC,mCAAI,GAAG,CAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,MAAM,CAAC;oBACxE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;oBACtC,UAAU;iBACX,CAAC,CAAA;aAAA,CAAC,CAAC;QACN,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,SAAS,GAAG,MAAA,OAAO,CAAC,SAAS,mCAAI,EAAE,CAAC;YAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC;gBAC9D,CAAC,CAAC,SAAS,CAAC,oBAAoB;gBAChC,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,UAAU,GAAG,MAAM,CAAC,MAAA,SAAS,CAAC,SAAS,mCAAI,aAAa,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;YAEtD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO;oBACL,WAAW,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC;iBACvE,CAAC;YACJ,CAAC;YAED,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAc,EAAE,EAAE,CACvC,WAAW,CACT,iBAAiB,EACjB,GAAG,CAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,YAAY,CAAC,EAC5B,IAAI,EACJ,UAAU,EACV,QAAQ,EACR,IAAI,CACL,CACF,CAAC;QACJ,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,QAAQ,GAAG,MAAA,OAAO,CAAC,QAAQ,mCAAI,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAA,QAAQ,CAAC,SAAS,mCAAI,aAAa,CAAC,CAAC;YAE/D,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO;oBACL,WAAW,CACT,iBAAiB,EACjB,IAAI,EACJ,IAAI,EACJ,UAAU,EACV,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC1B,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAC3B;iBACF,CAAC;YACJ,CAAC;YAED,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAc,EAAE,EAAE,CACvC,WAAW,CACT,iBAAiB,EACjB,GAAG,CAAC,SAAS,CAAC,EACd,IAAI,EACJ,UAAU,EACV,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC1B,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAC3B,CACF,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACR,2EAA2E;YAC3E,sEAAsE;YACtE,mCAAmC;YACnC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,0CAAE,WAAW,CAAC;gBAC5D,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW;gBAC1B,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;YACzC,MAAM,MAAM,GACV,MAAA,MAAA,GAAG,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,0CAAE,MAAM,CAAC,mCAC5B,GAAG,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,0CAAE,YAAY,CAAC,mCACnC,GAAG,CAAC,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa,0CAAE,SAAS,CAAC,CAAC;YAEzC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;gBACzB,OAAO;oBACL,WAAW,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;iBACrE,CAAC;YACJ,CAAC;YAED,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,OAAY,EAAE,EAAE,CACvC,WAAW,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,iBAAyB,EACzB,cAA6B,EAC7B,SAAiB,EACjB,UAAgB,EAChB,cAA6B,EAC7B,YAA2B;IAE3B,OAAO;QACL,iBAAiB;QACjB,cAAc;QACd,SAAS;QACT,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,IAAI;QACnB,cAAc;QACd,YAAY;QACZ,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,IAAI,IAAI,IAAI,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9D,CAAC"}

package/dist/mail-delivery/ses-webhook.service.d.ts

@@ -0,0 +1,58 @@
+import { PrismaService } from '@hed-hog/api-prisma';
+import { OnModuleInit } from '@nestjs/common';
+import { IWebhookProtocolAdapter, WebhookProtocolRegistry, WebhookProtocolRequest, WebhookProtocolResponse } from '../webhook-integration/webhook-protocol.registry';
+import { MailDeliveryService } from './mail-delivery.service';
+/**
+ * Eventos de entrega do Amazon SES, publicados via SNS, sobre o webhook publico
+ * do core.
+ *
+ * Duas camadas de credencial, como o resto dos adaptadores:
+ *
+ *   1. o `public_uuid` da URL, que a requisicao ja provou conhecer para este
+ *      adaptador sequer ser chamado;
+ *   2. a assinatura RSA do proprio SNS, verificada contra o certificado da AWS.
+ *
+ * A segunda existe porque a primeira e uma URL: ela vaza em log de proxy, em
+ * print de tela, em copiar-e-colar. Um evento de bounce forjado envenenaria o
+ * historico de entrega exatamente da tela que existe para ser confiavel.
+ */
+export declare class SesWebhookService implements OnModuleInit, IWebhookProtocolAdapter {
+    private readonly prisma;
+    private readonly protocolRegistry;
+    private readonly delivery;
+    private readonly logger;
+    private readonly certCache;
+    constructor(prisma: PrismaService, protocolRegistry: WebhookProtocolRegistry, delivery: MailDeliveryService);
+    onModuleInit(): void;
+    /** O SNS so faz POST; nao existe handshake por GET. */
+    verify(): Promise<WebhookProtocolResponse>;
+    handle(request: WebhookProtocolRequest): Promise<WebhookProtocolResponse>;
+    /**
+     * Sem este passo a subscription fica em PendingConfirmation para sempre e
+     * nenhum evento chega - a falha silenciosa classica desse setup, que parece
+     * "a AWS nao esta mandando nada".
+     */
+    private confirmSubscription;
+    private handleNotification;
+    /**
+     * Confere que o evento veio do topico esperado.
+     *
+     * A assinatura prova apenas que a mensagem saiu do SNS da AWS - de qualquer
+     * conta, de qualquer topico. Sem esta checagem, quem descobrisse a URL poderia
+     * publicar bounces forjados no proprio topico e envenenar o historico de
+     * entrega justamente da tela que existe para ser confiavel.
+     *
+     * Com `sns_topic_arn` vazio o evento passa, com aviso: e o estado do setup
+     * inicial, antes de o topico existir. Preencher o campo no perfil e o que
+     * fecha a porta.
+     */
+    private checkTopic;
+    /**
+     * O SNS envia `Content-Type: text/plain`, entao o body pode chegar como string
+     * mesmo com o parser de JSON configurado. Aceitar as duas formas evita depender
+     * de um detalhe do middleware.
+     */
+    private readEnvelope;
+    private fetchCertificate;
+}
+//# sourceMappingURL=ses-webhook.service.d.ts.map

package/dist/mail-delivery/ses-webhook.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ses-webhook.service.d.ts","sourceRoot":"","sources":["../../src/mail-delivery/ses-webhook.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAA8B,YAAY,EAAc,MAAM,gBAAgB,CAAC;AACtF,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAe9D;;;;;;;;;;;;;GAaG;AACH,qBACa,iBAAkB,YAAW,YAAY,EAAE,uBAAuB;IAM3E,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAP3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;gBAIpC,MAAM,EAAE,aAAa,EACrB,gBAAgB,EAAE,uBAAuB,EACzC,QAAQ,EAAE,mBAAmB;IAGhD,YAAY;IAIZ,uDAAuD;IACjD,MAAM,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAI1C,MAAM,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAwC/E;;;;OAIG;YACW,mBAAmB;YA8BnB,kBAAkB;IAgBhC;;;;;;;;;;;OAWG;YACW,UAAU;IA6BxB;;;;OAIG;IACH,OAAO,CAAC,YAAY;YAwBN,gBAAgB;CAoB/B"}

package/dist/mail-delivery/ses-webhook.service.js

@@ -0,0 +1,214 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var SesWebhookService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SesWebhookService = void 0;
+const api_prisma_1 = require("@hed-hog/api-prisma");
+const common_1 = require("@nestjs/common");
+const webhook_protocol_registry_1 = require("../webhook-integration/webhook-protocol.registry");
+const mail_delivery_service_1 = require("./mail-delivery.service");
+const mail_delivery_constants_1 = require("./mail-delivery.constants");
+const sns_message_util_1 = require("./sns-message.util");
+/**
+ * 403 sem corpo: numa rota publica, dizer o motivo ajuda a mapear o que existe.
+ * O `logReason` fica so no log de chamadas, que exige login para ser lido.
+ */
+function forbidden(logReason) {
+    return { status: 403, contentType: 'text/plain', body: '', logReason };
+}
+/** Certificados da AWS mudam raramente; baixar um por notificacao seria absurdo. */
+const CERT_CACHE_MAX = 8;
+/**
+ * Eventos de entrega do Amazon SES, publicados via SNS, sobre o webhook publico
+ * do core.
+ *
+ * Duas camadas de credencial, como o resto dos adaptadores:
+ *
+ *   1. o `public_uuid` da URL, que a requisicao ja provou conhecer para este
+ *      adaptador sequer ser chamado;
+ *   2. a assinatura RSA do proprio SNS, verificada contra o certificado da AWS.
+ *
+ * A segunda existe porque a primeira e uma URL: ela vaza em log de proxy, em
+ * print de tela, em copiar-e-colar. Um evento de bounce forjado envenenaria o
+ * historico de entrega exatamente da tela que existe para ser confiavel.
+ */
+let SesWebhookService = SesWebhookService_1 = class SesWebhookService {
+    constructor(prisma, protocolRegistry, delivery) {
+        this.prisma = prisma;
+        this.protocolRegistry = protocolRegistry;
+        this.delivery = delivery;
+        this.logger = new common_1.Logger(SesWebhookService_1.name);
+        this.certCache = new Map();
+    }
+    onModuleInit() {
+        this.protocolRegistry.register(mail_delivery_constants_1.SES_DELIVERY_WEBHOOK_PROTOCOL, this);
+    }
+    /** O SNS so faz POST; nao existe handshake por GET. */
+    async verify() {
+        return forbidden('GET not supported');
+    }
+    async handle(request) {
+        var _a, _b;
+        const envelope = this.readEnvelope(request);
+        if (!envelope)
+            return forbidden('body is not an SNS envelope');
+        const signature = await (0, sns_message_util_1.verifySnsSignature)(envelope, (url) => this.fetchCertificate(url));
+        if (!signature.valid) {
+            this.logger.warn(`[ses] rejected webhook=${request.integration.id}: ${signature.reason}`);
+            return forbidden(`invalid SNS signature: ${signature.reason}`);
+        }
+        const topic = await this.checkTopic(request, envelope);
+        if (!topic.ok) {
+            this.logger.warn(`[ses] rejected webhook=${request.integration.id}: ${topic.reason}`);
+            return forbidden((_a = topic.reason) !== null && _a !== void 0 ? _a : 'topic mismatch');
+        }
+        switch (String(envelope.Type)) {
+            case 'SubscriptionConfirmation':
+                return this.confirmSubscription(envelope);
+            case 'UnsubscribeConfirmation':
+                this.logger.warn(`[ses] subscription removed from topic ${(_b = envelope.TopicArn) !== null && _b !== void 0 ? _b : '?'}`);
+                return { status: 200, body: { ok: true, type: 'UnsubscribeConfirmation' } };
+            case 'Notification':
+                return this.handleNotification(envelope);
+            default:
+                return forbidden(`unsupported SNS type "${envelope.Type}"`);
+        }
+    }
+    /**
+     * Sem este passo a subscription fica em PendingConfirmation para sempre e
+     * nenhum evento chega - a falha silenciosa classica desse setup, que parece
+     * "a AWS nao esta mandando nada".
+     */
+    async confirmSubscription(envelope) {
+        var _a;
+        const url = String((_a = envelope.SubscribeURL) !== null && _a !== void 0 ? _a : '');
+        // Mesma trava do certificado: seguir uma URL escolhida por quem chama
+        // transformaria este endpoint num buscador de URLs arbitrarias.
+        if (!(0, sns_message_util_1.isAwsSigningUrl)(url)) {
+            return forbidden('SubscribeURL is not an AWS SNS endpoint');
+        }
+        try {
+            const response = await fetch(url, { method: 'GET' });
+            if (!response.ok) {
+                this.logger.error(`[ses] subscription confirmation failed with HTTP ${response.status}`);
+                return { status: 502, body: { ok: false, reason: 'confirmation-failed' } };
+            }
+            this.logger.log(`[ses] subscription confirmed for topic ${envelope.TopicArn}`);
+            return { status: 200, body: { ok: true, type: 'SubscriptionConfirmation' } };
+        }
+        catch (error) {
+            this.logger.error(`[ses] subscription confirmation error: ${error === null || error === void 0 ? void 0 : error.message}`);
+            return { status: 502, body: { ok: false, reason: 'confirmation-error' } };
+        }
+    }
+    async handleNotification(envelope) {
+        var _a;
+        let payload;
+        try {
+            // `Message` e uma string com o JSON do evento: a dupla serializacao e do
+            // protocolo do SNS.
+            payload = JSON.parse(String((_a = envelope.Message) !== null && _a !== void 0 ? _a : ''));
+        }
+        catch (_b) {
+            return { status: 400, body: { ok: false, reason: 'invalid-message-json' } };
+        }
+        const result = await this.delivery.ingestSesNotification(payload);
+        return { status: 200, body: Object.assign({ ok: true }, result) };
+    }
+    /**
+     * Confere que o evento veio do topico esperado.
+     *
+     * A assinatura prova apenas que a mensagem saiu do SNS da AWS - de qualquer
+     * conta, de qualquer topico. Sem esta checagem, quem descobrisse a URL poderia
+     * publicar bounces forjados no proprio topico e envenenar o historico de
+     * entrega justamente da tela que existe para ser confiavel.
+     *
+     * Com `sns_topic_arn` vazio o evento passa, com aviso: e o estado do setup
+     * inicial, antes de o topico existir. Preencher o campo no perfil e o que
+     * fecha a porta.
+     */
+    async checkTopic(request, envelope) {
+        var _a, _b, _c;
+        const profileId = request.integration.integration_profile_id;
+        if (!profileId)
+            return { ok: true };
+        const profile = await this.prisma.integration_profile.findUnique({
+            where: { id: profileId },
+            select: { config: true },
+        });
+        const expected = String((_b = (_a = profile === null || profile === void 0 ? void 0 : profile.config) === null || _a === void 0 ? void 0 : _a.sns_topic_arn) !== null && _b !== void 0 ? _b : '').trim();
+        if (!expected) {
+            this.logger.warn(`[ses] profile ${profileId} has no sns_topic_arn: accepting events from any SNS topic`);
+            return { ok: true };
+        }
+        const received = String((_c = envelope.TopicArn) !== null && _c !== void 0 ? _c : '').trim();
+        return received === expected
+            ? { ok: true }
+            : { ok: false, reason: 'TopicArn does not match the configured topic' };
+    }
+    /**
+     * O SNS envia `Content-Type: text/plain`, entao o body pode chegar como string
+     * mesmo com o parser de JSON configurado. Aceitar as duas formas evita depender
+     * de um detalhe do middleware.
+     */
+    readEnvelope(request) {
+        const body = request.body;
+        if (body && typeof body === 'object' && !Buffer.isBuffer(body)) {
+            const envelope = body;
+            return envelope.Type ? envelope : null;
+        }
+        const raw = typeof body === 'string'
+            ? body
+            : request.rawBody
+                ? request.rawBody.toString('utf8')
+                : '';
+        if (!raw)
+            return null;
+        try {
+            const parsed = JSON.parse(raw);
+            return (parsed === null || parsed === void 0 ? void 0 : parsed.Type) ? parsed : null;
+        }
+        catch (_a) {
+            return null;
+        }
+    }
+    async fetchCertificate(url) {
+        const cached = this.certCache.get(url);
+        if (cached)
+            return cached;
+        const response = await fetch(url);
+        if (!response.ok) {
+            throw new Error(`HTTP ${response.status}`);
+        }
+        const pem = await response.text();
+        // Cache pequeno com descarte do mais antigo: a URL do certificado muda de
+        // tempos em tempos e um Map sem teto viraria vazamento lento.
+        if (this.certCache.size >= CERT_CACHE_MAX) {
+            const oldest = this.certCache.keys().next().value;
+            if (oldest)
+                this.certCache.delete(oldest);
+        }
+        this.certCache.set(url, pem);
+        return pem;
+    }
+};
+exports.SesWebhookService = SesWebhookService;
+exports.SesWebhookService = SesWebhookService = SesWebhookService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)((0, common_1.forwardRef)(() => api_prisma_1.PrismaService))),
+    __metadata("design:paramtypes", [api_prisma_1.PrismaService,
+        webhook_protocol_registry_1.WebhookProtocolRegistry,
+        mail_delivery_service_1.MailDeliveryService])
+], SesWebhookService);
+//# sourceMappingURL=ses-webhook.service.js.map

package/dist/mail-delivery/ses-webhook.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ses-webhook.service.js","sourceRoot":"","sources":["../../src/mail-delivery/ses-webhook.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAoD;AACpD,2CAAsF;AACtF,gGAK0D;AAC1D,mEAA8D;AAC9D,uEAA0E;AAC1E,yDAAsF;AAEtF;;;GAGG;AACH,SAAS,SAAS,CAAC,SAAiB;IAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;AACzE,CAAC;AAED,oFAAoF;AACpF,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB;;;;;;;;;;;;;GAaG;AAEI,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAI5B,YAEE,MAAsC,EACrB,gBAAyC,EACzC,QAA6B;QAF7B,WAAM,GAAN,MAAM,CAAe;QACrB,qBAAgB,GAAhB,gBAAgB,CAAyB;QACzC,aAAQ,GAAR,QAAQ,CAAqB;QAP/B,WAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;QAC5C,cAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAOpD,CAAC;IAEJ,YAAY;QACV,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,uDAA6B,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,MAAM;QACV,OAAO,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA+B;;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAE/D,MAAM,SAAS,GAAG,MAAM,IAAA,qCAAkB,EAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAC3D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAC3B,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0BAA0B,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,SAAS,CAAC,MAAM,EAAE,CACxE,CAAC;YACF,OAAO,SAAS,CAAC,0BAA0B,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0BAA0B,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,EAAE,CACpE,CAAC;YACF,OAAO,SAAS,CAAC,MAAA,KAAK,CAAC,MAAM,mCAAI,gBAAgB,CAAC,CAAC;QACrD,CAAC;QAED,QAAQ,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,KAAK,0BAA0B;gBAC7B,OAAO,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAE5C,KAAK,yBAAyB;gBAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,yCAAyC,MAAA,QAAQ,CAAC,QAAQ,mCAAI,GAAG,EAAE,CACpE,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,yBAAyB,EAAE,EAAE,CAAC;YAE9E,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAE3C;gBACE,OAAO,SAAS,CAAC,yBAAyB,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,mBAAmB,CAC/B,QAAqB;;QAErB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAA,QAAQ,CAAC,YAAY,mCAAI,EAAE,CAAC,CAAC;QAEhD,sEAAsE;QACtE,gEAAgE;QAChE,IAAI,CAAC,IAAA,kCAAe,EAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC,yCAAyC,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,oDAAoD,QAAQ,CAAC,MAAM,EAAE,CACtE,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,CAAC;YAC7E,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,0CAA0C,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0CAA2C,KAAe,aAAf,KAAK,uBAAL,KAAK,CAAY,OAAO,EAAE,CACtE,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,QAAqB;;QAErB,IAAI,OAAY,CAAC;QACjB,IAAI,CAAC;YACH,yEAAyE;YACzE,oBAAoB;YACpB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAA,QAAQ,CAAC,OAAO,mCAAI,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,CAAC;QAC9E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,kBAAI,EAAE,EAAE,IAAI,IAAK,MAAM,CAAE,EAAE,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,UAAU,CACtB,OAA+B,EAC/B,QAAqB;;QAErB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC;QAC7D,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC;YAC/D,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE;YACxB,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACzB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,CACrB,MAAA,MAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAc,0CAAE,aAAa,mCAAI,EAAE,CAC9C,CAAC,IAAI,EAAE,CAAC;QAET,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iBAAiB,SAAS,4DAA4D,CACvF,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAA,QAAQ,CAAC,QAAQ,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,OAAO,QAAQ,KAAK,QAAQ;YAC1B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;YACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IAC5E,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,OAA+B;QAClD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAE1B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,QAAQ,GAAG,IAAmB,CAAC;YACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,CAAC;QAED,MAAM,GAAG,GACP,OAAO,IAAI,KAAK,QAAQ;YACtB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,OAAO,CAAC,OAAO;gBACf,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAClC,CAAC,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;YAC9C,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACtC,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,GAAW;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAElC,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAClD,IAAI,MAAM;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAE7B,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAA;AAzMY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAa,CAAC,CAAC,CAAA;qCACf,0BAAa;QACH,mDAAuB;QAC/B,2CAAmB;GARrC,iBAAiB,CAyM7B"}

package/dist/mail-delivery/sns-message.util.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Envelope do SNS. `Message` e uma string com o JSON do evento de verdade -
+ * dupla serializacao e do protocolo, nao um engano.
+ */
+export type SnsEnvelope = {
+    Type?: string;
+    MessageId?: string;
+    TopicArn?: string;
+    Subject?: string;
+    Message?: string;
+    Timestamp?: string;
+    Token?: string;
+    SubscribeURL?: string;
+    SignatureVersion?: string;
+    Signature?: string;
+    SigningCertURL?: string;
+    SigningCertUrl?: string;
+};
+/**
+ * So a AWS pode ser a origem do certificado.
+ *
+ * Sem esta trava, quem manda o webhook escolhe de onde baixamos a chave publica
+ * - e passa a poder assinar o que quiser. E a diferenca entre validar assinatura
+ * e encenar que valida.
+ */
+export declare function isAwsSigningUrl(url: string): boolean;
+/** Monta a string canonica `chave\nvalor\n` dos campos assinados. */
+export declare function buildStringToSign(envelope: SnsEnvelope): string | null;
+/**
+ * Verifica a assinatura do envelope contra o certificado da AWS.
+ *
+ * `certificateFetcher` e injetado para o teste nao depender de rede.
+ */
+export declare function verifySnsSignature(envelope: SnsEnvelope, certificateFetcher: (url: string) => Promise<string>): Promise<{
+    valid: boolean;
+    reason?: string;
+}>;
+//# sourceMappingURL=sns-message.util.d.ts.map

package/dist/mail-delivery/sns-message.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sns-message.util.d.ts","sourceRoot":"","sources":["../../src/mail-delivery/sns-message.util.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAqBF;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQpD;AAED,qEAAqE;AACrE,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAatE;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,WAAW,EACrB,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GACnD,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA2C9C"}

package/dist/mail-delivery/sns-message.util.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAwsSigningUrl = isAwsSigningUrl;
+exports.buildStringToSign = buildStringToSign;
+exports.verifySnsSignature = verifySnsSignature;
+const crypto_1 = require("crypto");
+/**
+ * Campos que entram na string assinada, na ordem exata definida pela AWS.
+ * A ordem nao e alfabetica por acaso: e a especificacao, e trocar dois campos
+ * de lugar faz toda assinatura valida ser recusada.
+ */
+const SIGNED_KEYS = {
+    Notification: ['Message', 'MessageId', 'Subject', 'Timestamp', 'TopicArn', 'Type'],
+    SubscriptionConfirmation: [
+        'Message',
+        'MessageId',
+        'SubscribeURL',
+        'Timestamp',
+        'Token',
+        'TopicArn',
+        'Type',
+    ],
+};
+SIGNED_KEYS.UnsubscribeConfirmation = SIGNED_KEYS.SubscriptionConfirmation;
+/**
+ * So a AWS pode ser a origem do certificado.
+ *
+ * Sem esta trava, quem manda o webhook escolhe de onde baixamos a chave publica
+ * - e passa a poder assinar o que quiser. E a diferenca entre validar assinatura
+ * e encenar que valida.
+ */
+function isAwsSigningUrl(url) {
+    try {
+        const parsed = new URL(url);
+        if (parsed.protocol !== 'https:')
+            return false;
+        return /^sns\.[a-z0-9-]+\.amazonaws\.com(\.cn)?$/.test(parsed.hostname);
+    }
+    catch (_a) {
+        return false;
+    }
+}
+/** Monta a string canonica `chave\nvalor\n` dos campos assinados. */
+function buildStringToSign(envelope) {
+    var _a;
+    const keys = SIGNED_KEYS[String((_a = envelope.Type) !== null && _a !== void 0 ? _a : '')];
+    if (!keys)
+        return null;
+    let out = '';
+    for (const key of keys) {
+        const value = envelope[key];
+        // Campo ausente e pulado (o `Subject` costuma nao vir); presente e vazio
+        // entra, porque foi assim que a AWS assinou.
+        if (value === undefined || value === null)
+            continue;
+        out += `${key}\n${String(value)}\n`;
+    }
+    return out;
+}
+/**
+ * Verifica a assinatura do envelope contra o certificado da AWS.
+ *
+ * `certificateFetcher` e injetado para o teste nao depender de rede.
+ */
+async function verifySnsSignature(envelope, certificateFetcher) {
+    var _a, _b, _c;
+    const certUrl = String((_b = (_a = envelope.SigningCertURL) !== null && _a !== void 0 ? _a : envelope.SigningCertUrl) !== null && _b !== void 0 ? _b : '');
+    if (!certUrl)
+        return { valid: false, reason: 'missing SigningCertURL' };
+    if (!isAwsSigningUrl(certUrl)) {
+        return { valid: false, reason: 'SigningCertURL is not an AWS SNS endpoint' };
+    }
+    if (!envelope.Signature)
+        return { valid: false, reason: 'missing Signature' };
+    const stringToSign = buildStringToSign(envelope);
+    if (!stringToSign) {
+        return { valid: false, reason: `unsupported SNS message type "${envelope.Type}"` };
+    }
+    // SignatureVersion 1 assina com SHA1; a 2, com SHA256. Qualquer outra e
+    // desconhecida e recusada em vez de adivinhada.
+    const version = String((_c = envelope.SignatureVersion) !== null && _c !== void 0 ? _c : '1');
+    const algorithm = version === '2' ? 'RSA-SHA256' : version === '1' ? 'RSA-SHA1' : null;
+    if (!algorithm) {
+        return { valid: false, reason: `unsupported SignatureVersion "${version}"` };
+    }
+    let certificate;
+    try {
+        certificate = await certificateFetcher(certUrl);
+    }
+    catch (error) {
+        return {
+            valid: false,
+            reason: `could not fetch signing certificate: ${error === null || error === void 0 ? void 0 : error.message}`,
+        };
+    }
+    try {
+        const verifier = (0, crypto_1.createVerify)(algorithm);
+        verifier.update(stringToSign, 'utf8');
+        const valid = verifier.verify(certificate, String(envelope.Signature), 'base64');
+        return valid ? { valid: true } : { valid: false, reason: 'signature mismatch' };
+    }
+    catch (error) {
+        return {
+            valid: false,
+            reason: `signature check failed: ${error === null || error === void 0 ? void 0 : error.message}`,
+        };
+    }
+}
+//# sourceMappingURL=sns-message.util.js.map

package/dist/mail-delivery/sns-message.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sns-message.util.js","sourceRoot":"","sources":["../../src/mail-delivery/sns-message.util.ts"],"names":[],"mappings":";;AA+CA,0CAQC;AAGD,8CAaC;AAOD,gDA8CC;AA5HD,mCAAsC;AAqBtC;;;;GAIG;AACH,MAAM,WAAW,GAA6B;IAC5C,YAAY,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC;IAClF,wBAAwB,EAAE;QACxB,SAAS;QACT,WAAW;QACX,cAAc;QACd,WAAW;QACX,OAAO;QACP,UAAU;QACV,MAAM;KACP;CACF,CAAC;AACF,WAAW,CAAC,uBAAuB,GAAG,WAAW,CAAC,wBAAwB,CAAC;AAE3E;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC/C,OAAO,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1E,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,SAAgB,iBAAiB,CAAC,QAAqB;;IACrD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,MAAA,QAAQ,CAAC,IAAI,mCAAI,EAAE,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAI,QAAoC,CAAC,GAAG,CAAC,CAAC;QACzD,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QACpD,GAAG,IAAI,GAAG,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,kBAAkB,CACtC,QAAqB,EACrB,kBAAoD;;IAEpD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAA,MAAA,QAAQ,CAAC,cAAc,mCAAI,QAAQ,CAAC,cAAc,mCAAI,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACxE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAE9E,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;IACrF,CAAC;IAED,wEAAwE;IACxE,gDAAgD;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAA,QAAQ,CAAC,gBAAgB,mCAAI,GAAG,CAAC,CAAC;IACzD,MAAM,SAAS,GACb,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,OAAO,GAAG,EAAE,CAAC;IAC/E,CAAC;IAED,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,wCAAyC,KAAe,aAAf,KAAK,uBAAL,KAAK,CAAY,OAAO,EAAE;SAC5E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;QACzC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;QACjF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,2BAA4B,KAAe,aAAf,KAAK,uBAAL,KAAK,CAAY,OAAO,EAAE;SAC/D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/mail-layout/dto/update.dto.d.ts

@@ -0,0 +1,17 @@
+export declare class UpdateDTO {
+    wrapper?: string;
+    /**
+     * Traducoes indexadas pelo CODIGO do locale (`{ pt: { name, header, footer } }`).
+     *
+     * Codigo e nao id de proposito: o `useApp().locales` do admin so expoe
+     * `{ code, name }`, entao qualquer payload baseado em id acabaria adivinhando o
+     * id a partir do indice do array. `LocaleService.updateModelWithLocale` resolve
+     * o codigo via `getByCode`.
+     */
+    locale?: Record<string, {
+        name?: string;
+        header?: string;
+        footer?: string;
+    }>;
+}
+//# sourceMappingURL=update.dto.d.ts.map

package/dist/mail-layout/dto/update.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.dto.d.ts","sourceRoot":"","sources":["../../../src/mail-layout/dto/update.dto.ts"],"names":[],"mappings":"AAEA,qBAAa,SAAS;IAGpB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;;;;OAOG;IAGH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9E"}

package/dist/mail-layout/dto/update.dto.js

@@ -0,0 +1,27 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateDTO = void 0;
+const class_validator_1 = require("class-validator");
+class UpdateDTO {
+}
+exports.UpdateDTO = UpdateDTO;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], UpdateDTO.prototype, "wrapper", void 0);
+__decorate([
+    (0, class_validator_1.IsObject)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", Object)
+], UpdateDTO.prototype, "locale", void 0);
+//# sourceMappingURL=update.dto.js.map

package/dist/mail-layout/dto/update.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.dto.js","sourceRoot":"","sources":["../../../src/mail-layout/dto/update.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAiE;AAEjE,MAAa,SAAS;CAgBrB;AAhBD,8BAgBC;AAbC;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;0CACI;AAYjB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;yCACgE"}