@rapidmx/autodiscover-plugin 1.0.0-beta.2 → 1.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/lib/AutodiscoverXml.js +28 -1
- package/dist/lib/AutodiscoverXml.js.map +1 -1
- package/dist/lib/BaseAutodiscoverRoute.js +28 -2
- package/dist/lib/BaseAutodiscoverRoute.js.map +1 -1
- package/dist/lib/index.js +9 -12
- package/dist/lib/index.js.map +1 -1
- package/dist/types/BaseAutodiscoverRoute.d.ts +16 -0
- package/dist/types/index.d.ts +9 -12
- package/package.json +6 -5
|
@@ -23,6 +23,31 @@ function readTagName(xml, start) {
|
|
|
23
23
|
function isElement(name, localName) {
|
|
24
24
|
return name === localName || name.endsWith(`:${localName}`);
|
|
25
25
|
}
|
|
26
|
+
/**
|
|
27
|
+
* Returns the index of the `>` that closes a start/self-closing tag beginning at `start` (just past the tag
|
|
28
|
+
* name), or `-1` if it's never closed. XML permits an unescaped literal `>` inside a quoted (`'`/`"`) attribute
|
|
29
|
+
* value (e.g. `xmlns:x="a>b"`), so a plain `indexOf(">", start)` would stop early on that inner `>` and return
|
|
30
|
+
* a corrupted tag boundary; this tracks quote state and only reports a `>` seen outside any quote. Still one
|
|
31
|
+
* forward, linear-time scan - no character is inspected more than once.
|
|
32
|
+
*/
|
|
33
|
+
function findTagClose(xml, start) {
|
|
34
|
+
let quote;
|
|
35
|
+
for (let i = start; i < xml.length; i++) {
|
|
36
|
+
const ch = xml[i];
|
|
37
|
+
if (quote) {
|
|
38
|
+
if (ch === quote) {
|
|
39
|
+
quote = undefined;
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
else if (ch === '"' || ch === "'") {
|
|
43
|
+
quote = ch;
|
|
44
|
+
}
|
|
45
|
+
else if (ch === ">") {
|
|
46
|
+
return i;
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
return -1;
|
|
50
|
+
}
|
|
26
51
|
const COMMENT_OPEN = "<!--";
|
|
27
52
|
const COMMENT_CLOSE = "-->";
|
|
28
53
|
const CDATA_OPEN = "<![CDATA[";
|
|
@@ -55,6 +80,8 @@ function skipWhitespace(xml, start) {
|
|
|
55
80
|
* Returns the text content of the first `<localName>text</localName>` element (namespace prefix and attributes
|
|
56
81
|
* allowed, case-insensitive, whitespace allowed before the closing tag's `>`) whose content is plain text:
|
|
57
82
|
* entities are decoded, `<![CDATA[...]]>` sections are unwrapped verbatim and `<!-- -->` comments are dropped.
|
|
83
|
+
* An attribute value on the matched opening tag may itself contain a literal `>` (`findTagClose()` tracks
|
|
84
|
+
* quote state so that doesn't end the tag early).
|
|
58
85
|
* Comments/CDATA outside such an element are skipped whole, so a commented-out element never matches. A single
|
|
59
86
|
* forward, linear-time scan - deliberately NOT a regex: this runs on an unauthenticated request body, and the
|
|
60
87
|
* previous `\s*([^<]*?)\s*<\/...>` pattern backtracked cubically on an unterminated element padded with
|
|
@@ -78,7 +105,7 @@ function extractElementText(xml, localName) {
|
|
|
78
105
|
if (!isElement(open.name, target)) {
|
|
79
106
|
continue;
|
|
80
107
|
}
|
|
81
|
-
const gt = xml
|
|
108
|
+
const gt = findTagClose(xml, pos);
|
|
82
109
|
if (gt === -1) {
|
|
83
110
|
return undefined;
|
|
84
111
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"AutodiscoverXml.js","sourceRoot":"","sources":["../../src/AutodiscoverXml.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAE/E;;;;;;;;GAQG;AAEH,gHAAgH;AAChH,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa;IAC3C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,EAAE,CAAC;IACV,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC;AAC9D,CAAC;AAED,uGAAuG;AACvG,SAAS,SAAS,CAAC,IAAY,EAAE,SAAiB;IAC9C,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,UAAU,GAAG,WAAW,CAAC;AAC/B,MAAM,WAAW,GAAG,KAAK,CAAC;AAE1B;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,EAAU;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AAC9G,CAAC;AAED,mFAAmF;AACnF,SAAS,cAAc,CAAC,GAAW,EAAE,KAAa;IAC9C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,EAAE,CAAC;IACV,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED
|
|
1
|
+
{"version":3,"file":"AutodiscoverXml.js","sourceRoot":"","sources":["../../src/AutodiscoverXml.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAE/E;;;;;;;;GAQG;AAEH,gHAAgH;AAChH,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa;IAC3C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,EAAE,CAAC;IACV,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC;AAC9D,CAAC;AAED,uGAAuG;AACvG,SAAS,SAAS,CAAC,IAAY,EAAE,SAAiB;IAC9C,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;IAC5C,IAAI,KAAyB,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBACf,KAAK,GAAG,SAAS,CAAC;YACtB,CAAC;QACL,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAClC,KAAK,GAAG,EAAE,CAAC;QACf,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC;QACb,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACd,CAAC;AAED,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,UAAU,GAAG,WAAW,CAAC;AAC/B,MAAM,WAAW,GAAG,KAAK,CAAC;AAE1B;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,EAAU;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AAC9G,CAAC;AAED,mFAAmF;AACnF,SAAS,cAAc,CAAC,GAAW,EAAE,KAAa;IAC9C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,EAAE,CAAC;IACV,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,SAAiB;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrB,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;YAClB,SAAS;QACb,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QACvC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAChC,SAAS;QACb,CAAC;QACD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QACb,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACtB,SAAS,CAAC,oCAAoC;QAClD,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,EAAU,CAAC;QACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,MAAM;YACV,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrB,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAChC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACtB,CAAC;QACD,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YACvC,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC/E,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;QACL,CAAC;QACD,oGAAoG;QACpG,GAAG,GAAG,EAAE,CAAC;IACb,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC3C,OAAO,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACxE,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,SAAS,CAAC,KAAa;IACnC,OAAO,KAAK;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACpC,OAAO,KAAK;SACP,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAQD;;mGAEmG;AACnG,MAAM,CAAC,MAAM,uBAAuB,GAAG,iFAAiF,CAAC;AAEzH;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,GAAW;IACvD,OAAO,kBAAkB,CAAC,GAAG,EAAE,0BAA0B,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAA0B;IAC5F,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,kBAAkB,GAAG,WAAW;QAClC,CAAC,CAAC,2CAA2C,SAAS,CAAC,WAAW,CAAC,6BAA6B;QAChG,CAAC,CAAC,EAAE,CAAC;IACT,OAAO;;;;6BAIkB,kBAAkB;yCACN,KAAK;;;;;;wCAMN,GAAG;yCACF,GAAG;;;;;gBAK5B,CAAC;AACjB,CAAC;AAQD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAA8B;IACrG,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,SAAS,CACtB,uFAAuF,YAAY,EAAE,CACxG,CAAC;IACF,OAAO;;uBAEY,uBAAuB;;2BAEnB,IAAI;wBACP,QAAQ;uCACO,KAAK;;;;;;;;;mCAST,GAAG;mCACH,GAAG;;;;;gBAKtB,CAAC;AACjB,CAAC"}
|
|
@@ -22,13 +22,18 @@ const { Config, Init, Logger } = ObjectDecorators;
|
|
|
22
22
|
/** The plugin packages whose endpoints Autodiscover advertises. */
|
|
23
23
|
export const ACTIVESYNC_PLUGIN = "@rapidmx/activesync-plugin";
|
|
24
24
|
export const MAPI_PLUGIN = "@rapidmx/mapi-plugin";
|
|
25
|
-
const { Get, Param, Post, Query, Request, Response } = RouteDecorators;
|
|
25
|
+
const { Get, Param, Post, Query, RateLimit, Request, Response } = RouteDecorators;
|
|
26
26
|
/** The largest POX request body (in bytes) `pox()` will scan; anything bigger gets a `413`. */
|
|
27
27
|
export const MAX_POX_BODY_BYTES = 16 * 1024;
|
|
28
28
|
/** The longest email address looked up (RFC 5321's 254-character forward-path limit). */
|
|
29
29
|
export const MAX_ADDRESS_LENGTH = 254;
|
|
30
30
|
/** A single plain `local@domain` address: nothing the search query parser could read as an operator or a list. */
|
|
31
31
|
const PLAIN_ADDRESS_PATTERN = /^[^\s@(),"\\]+@[^\s@(),"\\]+$/;
|
|
32
|
+
/**
|
|
33
|
+
* A fixed `@RateLimit({ id: ... })` identifier for `v2()` - see the "Rate limiting" section of this class's own
|
|
34
|
+
* doc comment for why `v2()` (and only `v2()`) needs one.
|
|
35
|
+
*/
|
|
36
|
+
const V2_LOOKUP_RATE_LIMIT_ID = "autodiscover:v2-lookup";
|
|
32
37
|
/**
|
|
33
38
|
* Abstract base for the two Autodiscover endpoints a real mail client uses to find this deployment's EAS
|
|
34
39
|
* server URL from just an email address - classic POX (`POST /autodiscover/autodiscover.xml`, per
|
|
@@ -47,6 +52,22 @@ const PLAIN_ADDRESS_PATTERN = /^[^\s@(),"\\]+@[^\s@(),"\\]+$/;
|
|
|
47
52
|
* a real `Mailbox` in this deployment. The actual security boundary is unchanged from Phase 2: real mailbox
|
|
48
53
|
* access still requires a JWT at `BaseEasRoute`, exactly as today.
|
|
49
54
|
*
|
|
55
|
+
* **Rate limiting.** Both endpoints answer anonymously with an observably different outcome (404 vs. a success
|
|
56
|
+
* response) depending on whether the requested address belongs to a real `Mailbox`, which makes each one a
|
|
57
|
+
* mailbox-existence oracle for anyone who can reach them. Both are `@RateLimit()`-decorated - the same bare
|
|
58
|
+
* usage `BaseKeyDiscoveryRoute`'s own public key lookup uses - so a caller can't enumerate real mailboxes at a
|
|
59
|
+
* domain just by hammering either endpoint. `pox()` uses that bare form unmodified: its address is read from
|
|
60
|
+
* the POST body, never the URL, so `RouteUtils.getRateLimitPath()`'s route-pattern-with-`:param`-substituted
|
|
61
|
+
* identifier is already the same value (IP + method + static path) no matter which address is queried. `v2()`
|
|
62
|
+
* can't rely on the same default: its address is the `:email` URL parameter, which `getRateLimitPath()`
|
|
63
|
+
* substitutes into the auto-derived identifier verbatim - meaning, left undecorated-further, every distinct
|
|
64
|
+
* queried address would land in its own always-fresh, never-exceeded bucket, and an anonymous caller could
|
|
65
|
+
* enumerate any number of candidate addresses from one IP with no throttling beyond the coarse, generic,
|
|
66
|
+
* shared-across-every-route per-IP layer (`RateLimiter`'s own always-on secondary counter). `v2()` therefore
|
|
67
|
+
* passes a fixed `id` (`V2_LOOKUP_RATE_LIMIT_ID`) so its identifier-layer bucket is one shared, per-endpoint
|
|
68
|
+
* budget instead of one per queried address - the same budget is now spent regardless of which (or how many
|
|
69
|
+
* different) addresses a caller tries.
|
|
70
|
+
*
|
|
50
71
|
* **Known gap, deliberately out of scope**: `Action.Redirect` (for multi-tenant hosted providers whose mailbox
|
|
51
72
|
* moved to a different domain) is not implemented - this library serves exactly one EAS URL for its whole
|
|
52
73
|
* deployment, so there's never a different domain to redirect to. The client-side well-known-URL discovery
|
|
@@ -198,7 +219,10 @@ export class BaseAutodiscoverRoute {
|
|
|
198
219
|
const xml = outlook
|
|
199
220
|
? buildOutlookSuccessXml({ emailAddress: email, displayName: email, mapiUrl: url })
|
|
200
221
|
: buildPoxSuccessXml({ emailAddress: email, displayName: email, easUrl: url });
|
|
201
|
-
|
|
222
|
+
// `text/xml`, not `application/xml`: real Exchange POX Autodiscover responses (per Microsoft's own
|
|
223
|
+
// "Autodiscover for Exchange ActiveSync developers" example) use `text/xml`, and some older/strict
|
|
224
|
+
// mobile mail clients hard-check the exact MIME type rather than accepting any XML content type.
|
|
225
|
+
res.setHeader("Content-Type", "text/xml; charset=utf-8").status(200).send(xml);
|
|
202
226
|
}
|
|
203
227
|
/**
|
|
204
228
|
* Autodiscover v2 (JSON). Only the `ActiveSync` protocol is served - this library has no EWS/other
|
|
@@ -247,6 +271,7 @@ __decorate([
|
|
|
247
271
|
__metadata("design:returntype", Promise)
|
|
248
272
|
], BaseAutodiscoverRoute.prototype, "init", null);
|
|
249
273
|
__decorate([
|
|
274
|
+
RateLimit(),
|
|
250
275
|
Post("/autodiscover.xml"),
|
|
251
276
|
__param(0, Request),
|
|
252
277
|
__param(1, Response),
|
|
@@ -255,6 +280,7 @@ __decorate([
|
|
|
255
280
|
__metadata("design:returntype", Promise)
|
|
256
281
|
], BaseAutodiscoverRoute.prototype, "pox", null);
|
|
257
282
|
__decorate([
|
|
283
|
+
RateLimit({ id: V2_LOOKUP_RATE_LIMIT_ID }),
|
|
258
284
|
Get("/autodiscover.json/v1.0/:email"),
|
|
259
285
|
__param(0, Param("email")),
|
|
260
286
|
__param(1, Query("Protocol")),
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"BaseAutodiscoverRoute.js","sourceRoot":"","sources":["../../src/BaseAutodiscoverRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAA6B,UAAU,EAAiB,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC3H,OAAO,EACH,sBAAsB,EACtB,kBAAkB,EAClB,+BAA+B,EAC/B,mBAAmB,EACnB,uBAAuB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAW,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC3D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAElD,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAClD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;
|
|
1
|
+
{"version":3,"file":"BaseAutodiscoverRoute.js","sourceRoot":"","sources":["../../src/BaseAutodiscoverRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAA6B,UAAU,EAAiB,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC3H,OAAO,EACH,sBAAsB,EACtB,kBAAkB,EAClB,+BAA+B,EAC/B,mBAAmB,EACnB,uBAAuB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAW,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC3D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAElD,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAClD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;AAElF,+FAA+F;AAC/F,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,kHAAkH;AAClH,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAE9D;;;GAGG;AACH,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,OAAgB,qBAAqB;IAA3C;QAGI,6FAA6F;QAEnF,cAAS,GAAW,EAAE,CAAC;IAwMrC,CAAC;IAtMG,2FAA2F;IAC3F,IAAc,MAAM;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,8BAA8B,CAAC,CAAC;IAC/E,CAAC;IAED;oFACgF;IAChF,IAAc,OAAO;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACzD,CAAC;IAUD;;;;;OAKG;IACO,eAAe,CAAC,OAAe;QACrC,OAAO,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,IAAY,OAAO;QACf,MAAM,KAAK,GAAW,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACD,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAAY,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrF,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,wFAAwF;QACxF,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7E,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9D,CAAC;IAEO,WAAW,CAAC,MAAc,EAAE,IAAY;QAC5C,MAAM,IAAI,GAAuB,IAAI,CAAC,OAAO,CAAC;QAC9C,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;IAC5B,CAAC;IAGY,AAAN,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,kGAAkG,CAAC,CAAC;QAC1H,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,EAAE,IAAI,CACb,oGAAoG;gBAChG,sDAAsD,CAC7D,CAAC;QACN,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE;YACjE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;YAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;SAC5B,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACK,gBAAgB,CAAC,KAAa;QAClC,MAAM,OAAO,GAAW,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnD,OAAO,OAAO,CAAC,MAAM,IAAI,kBAAkB,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7G,CAAC;IAED,iHAAiH;IACzG,KAAK,CAAC,cAAc,CAAC,OAAe;QACxC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,IAAI,CAAC,WAAY,CAAC,IAAI,CAAC,EAAE,kBAAkB,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACpH,IAAI,CAAC,WAAY,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;SACrH,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;;;OAUG;IAGU,AAAN,KAAK,CAAC,GAAG,CAAU,GAAgB,EAAY,GAAiB;QACnE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QAED,6FAA6F;QAC7F,4BAA4B;QAC5B,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAW,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,SAAS,GAAuB,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,KAAK,GAAuB,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QAED,MAAM,OAAO,GAAkB,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QAED,MAAM,OAAO,GAAY,+BAA+B,CAAC,IAAI,CAAC,KAAK,uBAAuB,CAAC;QAC3F,MAAM,GAAG,GAAuB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACrE,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,6GAA6G;YAC7G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QACD,qGAAqG;QACrG,wGAAwG;QACxG,MAAM,GAAG,GAAW,OAAO;YACvB,CAAC,CAAC,sBAAsB,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YACnF,CAAC,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,mGAAmG;QACnG,mGAAmG;QACnG,iGAAiG;QACjG,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IAED;;;;OAIG;IAGU,AAAN,KAAK,CAAC,EAAE,CACK,KAAa,EACV,QAA4B,EACrC,GAAiB;QAE3B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QACD,uFAAuF;QACvF,MAAM,MAAM,GAAuB,IAAI,CAAC,MAAM,CAAC;QAC/C,IAAI,QAAQ,KAAK,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,SAAS,EAAE,sBAAsB;gBACjC,YAAY,EAAE,yBAAyB,QAAQ,IAAI,EAAE,EAAE;aAC1D,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAED,4GAA4G;QAC5G,MAAM,OAAO,GAAuB,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,OAAO,GAAkB,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,SAAS,EAAE,cAAc;gBACzB,YAAY,EAAE,0CAA0C;aAC3D,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;CACJ;AAxMa;IADT,MAAM,CAAC,8BAA8B,EAAE,EAAE,CAAC;;wDACV;AAmBzB;IADP,MAAM;;qDACa;AAiDP;IADZ,IAAI;;;;iDAcJ;AAoCY;IAFZ,SAAS,EAAE;IACX,IAAI,CAAC,mBAAmB,CAAC;IACR,WAAA,OAAO,CAAA;IAAoB,WAAA,QAAQ,CAAA;;;;gDA0CpD;AASY;IAFZ,SAAS,CAAC,EAAE,EAAE,EAAE,uBAAuB,EAAE,CAAC;IAC1C,GAAG,CAAC,gCAAgC,CAAC;IAEjC,WAAA,KAAK,CAAC,OAAO,CAAC,CAAA;IACd,WAAA,KAAK,CAAC,UAAU,CAAC,CAAA;IACjB,WAAA,QAAQ,CAAA;;;;+CA4BZ"}
|
package/dist/lib/index.js
CHANGED
|
@@ -10,18 +10,15 @@
|
|
|
10
10
|
* exported from this package's `./mongo`/`./sql` subpaths instead, alongside every other entity/route/job this
|
|
11
11
|
* library defines - see `src/eas/index.ts`'s identical doc comment for the same convention.
|
|
12
12
|
*
|
|
13
|
-
* A deployment mounts Autodiscover
|
|
14
|
-
*
|
|
15
|
-
*
|
|
16
|
-
*
|
|
17
|
-
*
|
|
18
|
-
*
|
|
19
|
-
*
|
|
20
|
-
*
|
|
21
|
-
*
|
|
22
|
-
* protected readonly mapiUrl = "https://mail.example.com/mapi/emsmdb";
|
|
23
|
-
* }
|
|
24
|
-
* ```
|
|
13
|
+
* A deployment mounts Autodiscover by loading the ready-to-mount `AutodiscoverRouteMongo`/`AutodiscoverRouteSQL`
|
|
14
|
+
* class from this plugin's `./mongo`/`./sql` entry point directly - no subclass or URLs to supply, since
|
|
15
|
+
* `BaseAutodiscoverRoute` builds the EAS (`easUrl`) and MAPI (`mapiUrl`) endpoint URLs itself from the
|
|
16
|
+
* `mail:autodiscover:public_url` config setting (also exposed as this plugin's own "Public server URL"
|
|
17
|
+
* admin-console setting - see `package.json`'s `rapidmx.plugin.settings`), and only advertises each protocol
|
|
18
|
+
* while its own plugin (`@rapidmx/activesync-plugin`, `@rapidmx/mapi-plugin`) is loaded. Set
|
|
19
|
+
* `mail:autodiscover:public_url` to this deployment's externally-reachable `https://` base URL (e.g.
|
|
20
|
+
* `https://mail.example.com`) for either endpoint to be advertised at all - see `BaseAutodiscoverRoute`'s own
|
|
21
|
+
* doc comment for the exact validation rules.
|
|
25
22
|
*/
|
|
26
23
|
export * from "./AutodiscoverXml.js";
|
|
27
24
|
export * from "./BaseAutodiscoverRoute.js";
|
package/dist/lib/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAE/E
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;GAiBG;AACH,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC"}
|
|
@@ -25,6 +25,22 @@ export declare const MAX_ADDRESS_LENGTH = 254;
|
|
|
25
25
|
* a real `Mailbox` in this deployment. The actual security boundary is unchanged from Phase 2: real mailbox
|
|
26
26
|
* access still requires a JWT at `BaseEasRoute`, exactly as today.
|
|
27
27
|
*
|
|
28
|
+
* **Rate limiting.** Both endpoints answer anonymously with an observably different outcome (404 vs. a success
|
|
29
|
+
* response) depending on whether the requested address belongs to a real `Mailbox`, which makes each one a
|
|
30
|
+
* mailbox-existence oracle for anyone who can reach them. Both are `@RateLimit()`-decorated - the same bare
|
|
31
|
+
* usage `BaseKeyDiscoveryRoute`'s own public key lookup uses - so a caller can't enumerate real mailboxes at a
|
|
32
|
+
* domain just by hammering either endpoint. `pox()` uses that bare form unmodified: its address is read from
|
|
33
|
+
* the POST body, never the URL, so `RouteUtils.getRateLimitPath()`'s route-pattern-with-`:param`-substituted
|
|
34
|
+
* identifier is already the same value (IP + method + static path) no matter which address is queried. `v2()`
|
|
35
|
+
* can't rely on the same default: its address is the `:email` URL parameter, which `getRateLimitPath()`
|
|
36
|
+
* substitutes into the auto-derived identifier verbatim - meaning, left undecorated-further, every distinct
|
|
37
|
+
* queried address would land in its own always-fresh, never-exceeded bucket, and an anonymous caller could
|
|
38
|
+
* enumerate any number of candidate addresses from one IP with no throttling beyond the coarse, generic,
|
|
39
|
+
* shared-across-every-route per-IP layer (`RateLimiter`'s own always-on secondary counter). `v2()` therefore
|
|
40
|
+
* passes a fixed `id` (`V2_LOOKUP_RATE_LIMIT_ID`) so its identifier-layer bucket is one shared, per-endpoint
|
|
41
|
+
* budget instead of one per queried address - the same budget is now spent regardless of which (or how many
|
|
42
|
+
* different) addresses a caller tries.
|
|
43
|
+
*
|
|
28
44
|
* **Known gap, deliberately out of scope**: `Action.Redirect` (for multi-tenant hosted providers whose mailbox
|
|
29
45
|
* moved to a different domain) is not implemented - this library serves exactly one EAS URL for its whole
|
|
30
46
|
* deployment, so there's never a different domain to redirect to. The client-side well-known-URL discovery
|
package/dist/types/index.d.ts
CHANGED
|
@@ -6,18 +6,15 @@
|
|
|
6
6
|
* exported from this package's `./mongo`/`./sql` subpaths instead, alongside every other entity/route/job this
|
|
7
7
|
* library defines - see `src/eas/index.ts`'s identical doc comment for the same convention.
|
|
8
8
|
*
|
|
9
|
-
* A deployment mounts Autodiscover
|
|
10
|
-
*
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
*
|
|
16
|
-
*
|
|
17
|
-
*
|
|
18
|
-
* protected readonly mapiUrl = "https://mail.example.com/mapi/emsmdb";
|
|
19
|
-
* }
|
|
20
|
-
* ```
|
|
9
|
+
* A deployment mounts Autodiscover by loading the ready-to-mount `AutodiscoverRouteMongo`/`AutodiscoverRouteSQL`
|
|
10
|
+
* class from this plugin's `./mongo`/`./sql` entry point directly - no subclass or URLs to supply, since
|
|
11
|
+
* `BaseAutodiscoverRoute` builds the EAS (`easUrl`) and MAPI (`mapiUrl`) endpoint URLs itself from the
|
|
12
|
+
* `mail:autodiscover:public_url` config setting (also exposed as this plugin's own "Public server URL"
|
|
13
|
+
* admin-console setting - see `package.json`'s `rapidmx.plugin.settings`), and only advertises each protocol
|
|
14
|
+
* while its own plugin (`@rapidmx/activesync-plugin`, `@rapidmx/mapi-plugin`) is loaded. Set
|
|
15
|
+
* `mail:autodiscover:public_url` to this deployment's externally-reachable `https://` base URL (e.g.
|
|
16
|
+
* `https://mail.example.com`) for either endpoint to be advertised at all - see `BaseAutodiscoverRoute`'s own
|
|
17
|
+
* doc comment for the exact validation rules.
|
|
21
18
|
*/
|
|
22
19
|
export * from "./AutodiscoverXml.js";
|
|
23
20
|
export * from "./BaseAutodiscoverRoute.js";
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@rapidmx/autodiscover-plugin",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.1.0",
|
|
4
4
|
"description": "A RapidMX plugin that provides Autodiscover protocol support.",
|
|
5
5
|
"repository": "https://github.com/RapidMX/autodiscover.git",
|
|
6
6
|
"author": "RapidREST <rapidrests@gmail.com>",
|
|
@@ -27,9 +27,9 @@
|
|
|
27
27
|
"@rapidrest/service-core": "^2.x"
|
|
28
28
|
},
|
|
29
29
|
"devDependencies": {
|
|
30
|
-
"@rapidmx/restapi": "^0.
|
|
31
|
-
"@rapidrest/core": "^
|
|
32
|
-
"@rapidrest/service-core": "^2.
|
|
30
|
+
"@rapidmx/restapi": "^0.20.1",
|
|
31
|
+
"@rapidrest/core": "^6.0.0",
|
|
32
|
+
"@rapidrest/service-core": "^2.3.0",
|
|
33
33
|
"@swc/core": "^1.16.2",
|
|
34
34
|
"@types/nconf": "^0.10.7",
|
|
35
35
|
"@types/node": "^26.5.0",
|
|
@@ -97,7 +97,8 @@
|
|
|
97
97
|
"key": "mail:autodiscover:public_url",
|
|
98
98
|
"label": "Public server URL",
|
|
99
99
|
"type": "string",
|
|
100
|
-
"
|
|
100
|
+
"default": "",
|
|
101
|
+
"help": "The address clients reach this server at, for example https://mail.example.com - the same host your DNS/MX setup already points at. Nothing is advertised until this is set. Also add a CNAME (autodiscover.<domain> -> this host) or, to avoid needing a second TLS certificate, a DNS SRV record (_autodiscover._tcp.<domain> -> this host) so mail clients can find this server automatically - see this deployment's Domain DNS setup checklist."
|
|
101
102
|
}
|
|
102
103
|
],
|
|
103
104
|
"requires": {
|