@protobase/server 0.66.16 → 0.67.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -21,6 +21,11 @@ const clientTimeouts = {
21
21
  * reports, which is often just `[127.0.0.1]` and makes receiving servers trust the mail less. A `name` query parameter
22
22
  * on the SMTP URL still overrides it. With a `name`, the From header carries it as the sender's display name.
23
23
  *
24
+ * Over `smtp://` the client always upgrades with STARTTLS (`requireTLS`), and fails before it logs in or names a
25
+ * sender when the server does not upgrade, so a server without TLS, or someone on the path who strips STARTTLS from
26
+ * the server's answer, never sees the relay's password or a message. `?requireTLS=false` on the URL is the one way to
27
+ * send in plaintext, such as to a mail catcher in development. `smtps://` is TLS from the start and ignores it.
28
+ *
24
29
  * A send that has not finished after `limitMs` rejects with a `MailServerTimeoutError`, with no retry: a firewall that
25
30
  * drops the mail port's packets would otherwise hold it for minutes, once for each of the server's addresses.
26
31
  */
@@ -30,6 +35,7 @@ const smtpMailer = (settings, limitMs = sendLimitMs) => {
30
35
  transport ??= import("nodemailer").then(({ createTransport }) => createTransport({
31
36
  url: settings.smtpUrl,
32
37
  name: senderDomain(settings.from),
38
+ requireTLS: true,
33
39
  ...clientTimeouts
34
40
  }));
35
41
  const mail = {
package/dist/package.js CHANGED
@@ -1,4 +1,4 @@
1
1
  //#region package.json
2
- var version = "0.66.16";
2
+ var version = "0.67.0";
3
3
  //#endregion
4
4
  export { version };
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@protobase/server",
3
- "version": "0.66.16",
3
+ "version": "0.67.0",
4
4
  "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
5
5
  "license": "Apache-2.0",
6
6
  "repository": {
@@ -43,9 +43,9 @@
43
43
  "@better-auth/sso": "^1.7.12",
44
44
  "@livekit/protocol": "1.53.1",
45
45
  "@modelcontextprotocol/server": "^2.3.1",
46
- "@protobase/layout": "0.66.16",
47
- "@protobase/query": "0.66.16",
48
- "@protobase/schema": "0.66.16",
46
+ "@protobase/layout": "0.67.0",
47
+ "@protobase/query": "0.67.0",
48
+ "@protobase/schema": "0.67.0",
49
49
  "@react-email/render": "^2.1.0",
50
50
  "@react-pdf/primitives": "^4.4.0",
51
51
  "@react-pdf/renderer": "^4.9.0",