@rapidmx/autodiscover-plugin 1.0.0 → 1.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -0
- package/dist/lib/AutodiscoverXml.js +78 -41
- package/dist/lib/AutodiscoverXml.js.map +1 -1
- package/dist/lib/BaseAutodiscoverRoute.js +33 -3
- package/dist/lib/BaseAutodiscoverRoute.js.map +1 -1
- package/dist/types/AutodiscoverXml.d.ts +9 -2
- package/dist/types/BaseAutodiscoverRoute.d.ts +18 -0
- package/package.json +7 -7
package/README.md
CHANGED
|
@@ -74,6 +74,7 @@ const { Route } = RouteDecorators;
|
|
|
74
74
|
export class MyAutodiscoverRoute extends AutodiscoverRouteMongo {
|
|
75
75
|
protected readonly easUrl = "https://mail.example.com/Microsoft-Server-ActiveSync";
|
|
76
76
|
protected readonly mapiUrl = "https://mail.example.com/mapi/emsmdb";
|
|
77
|
+
protected readonly nspiUrl = "https://mail.example.com/mapi/nspi";
|
|
77
78
|
}
|
|
78
79
|
```
|
|
79
80
|
|
|
@@ -23,6 +23,31 @@ function readTagName(xml, start) {
|
|
|
23
23
|
function isElement(name, localName) {
|
|
24
24
|
return name === localName || name.endsWith(`:${localName}`);
|
|
25
25
|
}
|
|
26
|
+
/**
|
|
27
|
+
* Returns the index of the `>` that closes a start/self-closing tag beginning at `start` (just past the tag
|
|
28
|
+
* name), or `-1` if it's never closed. XML permits an unescaped literal `>` inside a quoted (`'`/`"`) attribute
|
|
29
|
+
* value (e.g. `xmlns:x="a>b"`), so a plain `indexOf(">", start)` would stop early on that inner `>` and return
|
|
30
|
+
* a corrupted tag boundary; this tracks quote state and only reports a `>` seen outside any quote. Still one
|
|
31
|
+
* forward, linear-time scan - no character is inspected more than once.
|
|
32
|
+
*/
|
|
33
|
+
function findTagClose(xml, start) {
|
|
34
|
+
let quote;
|
|
35
|
+
for (let i = start; i < xml.length; i++) {
|
|
36
|
+
const ch = xml[i];
|
|
37
|
+
if (quote) {
|
|
38
|
+
if (ch === quote) {
|
|
39
|
+
quote = undefined;
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
else if (ch === '"' || ch === "'") {
|
|
43
|
+
quote = ch;
|
|
44
|
+
}
|
|
45
|
+
else if (ch === ">") {
|
|
46
|
+
return i;
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
return -1;
|
|
50
|
+
}
|
|
26
51
|
const COMMENT_OPEN = "<!--";
|
|
27
52
|
const COMMENT_CLOSE = "-->";
|
|
28
53
|
const CDATA_OPEN = "<![CDATA[";
|
|
@@ -55,6 +80,8 @@ function skipWhitespace(xml, start) {
|
|
|
55
80
|
* Returns the text content of the first `<localName>text</localName>` element (namespace prefix and attributes
|
|
56
81
|
* allowed, case-insensitive, whitespace allowed before the closing tag's `>`) whose content is plain text:
|
|
57
82
|
* entities are decoded, `<![CDATA[...]]>` sections are unwrapped verbatim and `<!-- -->` comments are dropped.
|
|
83
|
+
* An attribute value on the matched opening tag may itself contain a literal `>` (`findTagClose()` tracks
|
|
84
|
+
* quote state so that doesn't end the tag early).
|
|
58
85
|
* Comments/CDATA outside such an element are skipped whole, so a commented-out element never matches. A single
|
|
59
86
|
* forward, linear-time scan - deliberately NOT a regex: this runs on an unauthenticated request body, and the
|
|
60
87
|
* previous `\s*([^<]*?)\s*<\/...>` pattern backtracked cubically on an unterminated element padded with
|
|
@@ -78,7 +105,7 @@ function extractElementText(xml, localName) {
|
|
|
78
105
|
if (!isElement(open.name, target)) {
|
|
79
106
|
continue;
|
|
80
107
|
}
|
|
81
|
-
const gt = xml
|
|
108
|
+
const gt = findTagClose(xml, pos);
|
|
82
109
|
if (gt === -1) {
|
|
83
110
|
return undefined;
|
|
84
111
|
}
|
|
@@ -162,23 +189,23 @@ export function buildPoxSuccessXml({ emailAddress, displayName, easUrl }) {
|
|
|
162
189
|
const displayNameElement = displayName
|
|
163
190
|
? `\n <autodiscover:DisplayName>${escapeXml(displayName)}</autodiscover:DisplayName>`
|
|
164
191
|
: "";
|
|
165
|
-
return `<?xml version="1.0" encoding="utf-8"?>
|
|
166
|
-
<Autodiscover xmlns:autodiscover="https://schemas.microsoft.com/exchange/autodiscover/mobilesync/responseschema/2006">
|
|
167
|
-
<autodiscover:Response>
|
|
168
|
-
<autodiscover:Culture>en:us</autodiscover:Culture>
|
|
169
|
-
<autodiscover:User>${displayNameElement}
|
|
170
|
-
<autodiscover:EMailAddress>${email}</autodiscover:EMailAddress>
|
|
171
|
-
</autodiscover:User>
|
|
172
|
-
<autodiscover:Action>
|
|
173
|
-
<autodiscover:Settings>
|
|
174
|
-
<autodiscover:Server>
|
|
175
|
-
<autodiscover:Type>MobileSync</autodiscover:Type>
|
|
176
|
-
<autodiscover:Url>${url}</autodiscover:Url>
|
|
177
|
-
<autodiscover:Name>${url}</autodiscover:Name>
|
|
178
|
-
</autodiscover:Server>
|
|
179
|
-
</autodiscover:Settings>
|
|
180
|
-
</autodiscover:Action>
|
|
181
|
-
</autodiscover:Response>
|
|
192
|
+
return `<?xml version="1.0" encoding="utf-8"?>
|
|
193
|
+
<Autodiscover xmlns:autodiscover="https://schemas.microsoft.com/exchange/autodiscover/mobilesync/responseschema/2006">
|
|
194
|
+
<autodiscover:Response>
|
|
195
|
+
<autodiscover:Culture>en:us</autodiscover:Culture>
|
|
196
|
+
<autodiscover:User>${displayNameElement}
|
|
197
|
+
<autodiscover:EMailAddress>${email}</autodiscover:EMailAddress>
|
|
198
|
+
</autodiscover:User>
|
|
199
|
+
<autodiscover:Action>
|
|
200
|
+
<autodiscover:Settings>
|
|
201
|
+
<autodiscover:Server>
|
|
202
|
+
<autodiscover:Type>MobileSync</autodiscover:Type>
|
|
203
|
+
<autodiscover:Url>${url}</autodiscover:Url>
|
|
204
|
+
<autodiscover:Name>${url}</autodiscover:Name>
|
|
205
|
+
</autodiscover:Server>
|
|
206
|
+
</autodiscover:Settings>
|
|
207
|
+
</autodiscover:Action>
|
|
208
|
+
</autodiscover:Response>
|
|
182
209
|
</Autodiscover>`;
|
|
183
210
|
}
|
|
184
211
|
/**
|
|
@@ -196,39 +223,49 @@ export function buildPoxSuccessXml({ emailAddress, displayName, easUrl }) {
|
|
|
196
223
|
* request always gets the mapiHttp form - the real `X-MapiHttpCapability` request-header negotiation a full
|
|
197
224
|
* implementation would consult to choose between EXCH/mapiHttp is not implemented, a documented gap.
|
|
198
225
|
* `MailStore.InternalUrl`/`ExternalUrl` are both set to the same `mapiUrl`, since this library serves one URL
|
|
199
|
-
* per deployment with no separate internal/external network split.
|
|
226
|
+
* per deployment with no separate internal/external network split. The `mapiHttp` `Protocol` also carries an `AddressBook`
|
|
227
|
+
* block (the `nspi` endpoint, `nspiUrl`) in the same shape: a MAPI/HTTP client uses the address book as well as the mail
|
|
228
|
+
* store, and Outlook stops right after the Autodiscover response - "Something went wrong and Outlook couldn't set up your
|
|
229
|
+
* account", with no request to either endpoint - when it is missing.
|
|
200
230
|
*
|
|
201
231
|
* `LegacyDN`/`DeploymentId` are schema-required fields this library has no real backing value for (no X.500
|
|
202
232
|
* DN resolution, no multi-tenant deployment identity) - both are synthesized placeholders. Real Outlook does
|
|
203
233
|
* not validate their exact content for MAPI/HTTP connectivity; they matter for classic RPC/TCP MAPI
|
|
204
234
|
* free-busy/permissions lookups this library doesn't implement anyway.
|
|
205
235
|
*/
|
|
206
|
-
export function buildOutlookSuccessXml({ emailAddress, displayName, mapiUrl }) {
|
|
236
|
+
export function buildOutlookSuccessXml({ emailAddress, displayName, mapiUrl, nspiUrl }) {
|
|
207
237
|
const email = escapeXml(emailAddress);
|
|
208
238
|
const url = escapeXml(mapiUrl);
|
|
239
|
+
const addressBook = nspiUrl
|
|
240
|
+
? `
|
|
241
|
+
<AddressBook>
|
|
242
|
+
<InternalUrl>${escapeXml(nspiUrl)}</InternalUrl>
|
|
243
|
+
<ExternalUrl>${escapeXml(nspiUrl)}</ExternalUrl>
|
|
244
|
+
</AddressBook>`
|
|
245
|
+
: "";
|
|
209
246
|
const name = escapeXml(displayName ?? emailAddress);
|
|
210
247
|
const legacyDn = escapeXml(`/o=ExchangeLabs/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=${emailAddress}`);
|
|
211
|
-
return `<?xml version="1.0" encoding="utf-8"?>
|
|
212
|
-
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
|
|
213
|
-
<Response xmlns="${OUTLOOK_RESPONSE_SCHEMA}">
|
|
214
|
-
<User>
|
|
215
|
-
<DisplayName>${name}</DisplayName>
|
|
216
|
-
<LegacyDN>${legacyDn}</LegacyDN>
|
|
217
|
-
<AutoDiscoverSMTPAddress>${email}</AutoDiscoverSMTPAddress>
|
|
218
|
-
<DeploymentId>00000000-0000-0000-0000-000000000000</DeploymentId>
|
|
219
|
-
</User>
|
|
220
|
-
<Account>
|
|
221
|
-
<AccountType>email</AccountType>
|
|
222
|
-
<Action>settings</Action>
|
|
223
|
-
<MicrosoftOnline>False</MicrosoftOnline>
|
|
224
|
-
<Protocol Type="mapiHttp" Version="1">
|
|
225
|
-
<MailStore>
|
|
226
|
-
<InternalUrl>${url}</InternalUrl>
|
|
227
|
-
<ExternalUrl>${url}</ExternalUrl>
|
|
228
|
-
</MailStore
|
|
229
|
-
</Protocol>
|
|
230
|
-
</Account>
|
|
231
|
-
</Response>
|
|
248
|
+
return `<?xml version="1.0" encoding="utf-8"?>
|
|
249
|
+
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
|
|
250
|
+
<Response xmlns="${OUTLOOK_RESPONSE_SCHEMA}">
|
|
251
|
+
<User>
|
|
252
|
+
<DisplayName>${name}</DisplayName>
|
|
253
|
+
<LegacyDN>${legacyDn}</LegacyDN>
|
|
254
|
+
<AutoDiscoverSMTPAddress>${email}</AutoDiscoverSMTPAddress>
|
|
255
|
+
<DeploymentId>00000000-0000-0000-0000-000000000000</DeploymentId>
|
|
256
|
+
</User>
|
|
257
|
+
<Account>
|
|
258
|
+
<AccountType>email</AccountType>
|
|
259
|
+
<Action>settings</Action>
|
|
260
|
+
<MicrosoftOnline>False</MicrosoftOnline>
|
|
261
|
+
<Protocol Type="mapiHttp" Version="1">
|
|
262
|
+
<MailStore>
|
|
263
|
+
<InternalUrl>${url}</InternalUrl>
|
|
264
|
+
<ExternalUrl>${url}</ExternalUrl>
|
|
265
|
+
</MailStore>${addressBook}
|
|
266
|
+
</Protocol>
|
|
267
|
+
</Account>
|
|
268
|
+
</Response>
|
|
232
269
|
</Autodiscover>`;
|
|
233
270
|
}
|
|
234
271
|
//# sourceMappingURL=AutodiscoverXml.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"AutodiscoverXml.js","sourceRoot":"","sources":["../../src/AutodiscoverXml.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAE/E;;;;;;;;GAQG;AAEH,gHAAgH;AAChH,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa;IAC3C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,EAAE,CAAC;IACV,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC;AAC9D,CAAC;AAED,uGAAuG;AACvG,SAAS,SAAS,CAAC,IAAY,EAAE,SAAiB;IAC9C,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,UAAU,GAAG,WAAW,CAAC;AAC/B,MAAM,WAAW,GAAG,KAAK,CAAC;AAE1B;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,EAAU;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AAC9G,CAAC;AAED,mFAAmF;AACnF,SAAS,cAAc,CAAC,GAAW,EAAE,KAAa;IAC9C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,EAAE,CAAC;IACV,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED
|
|
1
|
+
{"version":3,"file":"AutodiscoverXml.js","sourceRoot":"","sources":["../../src/AutodiscoverXml.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAE/E;;;;;;;;GAQG;AAEH,gHAAgH;AAChH,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa;IAC3C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,EAAE,CAAC;IACV,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC;AAC9D,CAAC;AAED,uGAAuG;AACvG,SAAS,SAAS,CAAC,IAAY,EAAE,SAAiB;IAC9C,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;IAC5C,IAAI,KAAyB,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,KAAK,EAAE,CAAC;YACR,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBACf,KAAK,GAAG,SAAS,CAAC;YACtB,CAAC;QACL,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAClC,KAAK,GAAG,EAAE,CAAC;QACf,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC;QACb,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACd,CAAC;AAED,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,UAAU,GAAG,WAAW,CAAC;AAC/B,MAAM,WAAW,GAAG,KAAK,CAAC;AAE1B;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,EAAU;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AAC9G,CAAC;AAED,mFAAmF;AACnF,SAAS,cAAc,CAAC,GAAW,EAAE,KAAa;IAC9C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,EAAE,CAAC;IACV,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,SAAiB;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrB,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;YAClB,SAAS;QACb,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QACvC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAChC,SAAS;QACb,CAAC;QACD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QACb,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACtB,SAAS,CAAC,oCAAoC;QAClD,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,EAAU,CAAC;QACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,MAAM;YACV,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrB,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAChC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACtB,CAAC;QACD,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YACvC,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC/E,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;QACL,CAAC;QACD,oGAAoG;QACpG,GAAG,GAAG,EAAE,CAAC;IACb,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC3C,OAAO,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACxE,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,SAAS,CAAC,KAAa;IACnC,OAAO,KAAK;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACpC,OAAO,KAAK;SACP,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAQD;;mGAEmG;AACnG,MAAM,CAAC,MAAM,uBAAuB,GAAG,iFAAiF,CAAC;AAEzH;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,GAAW;IACvD,OAAO,kBAAkB,CAAC,GAAG,EAAE,0BAA0B,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAA0B;IAC5F,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,kBAAkB,GAAG,WAAW;QAClC,CAAC,CAAC,2CAA2C,SAAS,CAAC,WAAW,CAAC,6BAA6B;QAChG,CAAC,CAAC,EAAE,CAAC;IACT,OAAO;;;;6BAIkB,kBAAkB;yCACN,KAAK;;;;;;wCAMN,GAAG;yCACF,GAAG;;;;;gBAK5B,CAAC;AACjB,CAAC;AAYD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAA8B;IAC9G,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,OAAO;QACvB,CAAC,CAAC;;mCAEyB,SAAS,CAAC,OAAO,CAAC;mCAClB,SAAS,CAAC,OAAO,CAAC;+BACtB;QACvB,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,SAAS,CACtB,uFAAuF,YAAY,EAAE,CACxG,CAAC;IACF,OAAO;;uBAEY,uBAAuB;;2BAEnB,IAAI;wBACP,QAAQ;uCACO,KAAK;;;;;;;;;mCAST,GAAG;mCACH,GAAG;8BACR,WAAW;;;;gBAIzB,CAAC;AACjB,CAAC"}
|
|
@@ -22,13 +22,18 @@ const { Config, Init, Logger } = ObjectDecorators;
|
|
|
22
22
|
/** The plugin packages whose endpoints Autodiscover advertises. */
|
|
23
23
|
export const ACTIVESYNC_PLUGIN = "@rapidmx/activesync-plugin";
|
|
24
24
|
export const MAPI_PLUGIN = "@rapidmx/mapi-plugin";
|
|
25
|
-
const { Get, Param, Post, Query, Request, Response } = RouteDecorators;
|
|
25
|
+
const { Get, Param, Post, Query, RateLimit, Request, Response } = RouteDecorators;
|
|
26
26
|
/** The largest POX request body (in bytes) `pox()` will scan; anything bigger gets a `413`. */
|
|
27
27
|
export const MAX_POX_BODY_BYTES = 16 * 1024;
|
|
28
28
|
/** The longest email address looked up (RFC 5321's 254-character forward-path limit). */
|
|
29
29
|
export const MAX_ADDRESS_LENGTH = 254;
|
|
30
30
|
/** A single plain `local@domain` address: nothing the search query parser could read as an operator or a list. */
|
|
31
31
|
const PLAIN_ADDRESS_PATTERN = /^[^\s@(),"\\]+@[^\s@(),"\\]+$/;
|
|
32
|
+
/**
|
|
33
|
+
* A fixed `@RateLimit({ id: ... })` identifier for `v2()` - see the "Rate limiting" section of this class's own
|
|
34
|
+
* doc comment for why `v2()` (and only `v2()`) needs one.
|
|
35
|
+
*/
|
|
36
|
+
const V2_LOOKUP_RATE_LIMIT_ID = "autodiscover:v2-lookup";
|
|
32
37
|
/**
|
|
33
38
|
* Abstract base for the two Autodiscover endpoints a real mail client uses to find this deployment's EAS
|
|
34
39
|
* server URL from just an email address - classic POX (`POST /autodiscover/autodiscover.xml`, per
|
|
@@ -47,6 +52,22 @@ const PLAIN_ADDRESS_PATTERN = /^[^\s@(),"\\]+@[^\s@(),"\\]+$/;
|
|
|
47
52
|
* a real `Mailbox` in this deployment. The actual security boundary is unchanged from Phase 2: real mailbox
|
|
48
53
|
* access still requires a JWT at `BaseEasRoute`, exactly as today.
|
|
49
54
|
*
|
|
55
|
+
* **Rate limiting.** Both endpoints answer anonymously with an observably different outcome (404 vs. a success
|
|
56
|
+
* response) depending on whether the requested address belongs to a real `Mailbox`, which makes each one a
|
|
57
|
+
* mailbox-existence oracle for anyone who can reach them. Both are `@RateLimit()`-decorated - the same bare
|
|
58
|
+
* usage `BaseKeyDiscoveryRoute`'s own public key lookup uses - so a caller can't enumerate real mailboxes at a
|
|
59
|
+
* domain just by hammering either endpoint. `pox()` uses that bare form unmodified: its address is read from
|
|
60
|
+
* the POST body, never the URL, so `RouteUtils.getRateLimitPath()`'s route-pattern-with-`:param`-substituted
|
|
61
|
+
* identifier is already the same value (IP + method + static path) no matter which address is queried. `v2()`
|
|
62
|
+
* can't rely on the same default: its address is the `:email` URL parameter, which `getRateLimitPath()`
|
|
63
|
+
* substitutes into the auto-derived identifier verbatim - meaning, left undecorated-further, every distinct
|
|
64
|
+
* queried address would land in its own always-fresh, never-exceeded bucket, and an anonymous caller could
|
|
65
|
+
* enumerate any number of candidate addresses from one IP with no throttling beyond the coarse, generic,
|
|
66
|
+
* shared-across-every-route per-IP layer (`RateLimiter`'s own always-on secondary counter). `v2()` therefore
|
|
67
|
+
* passes a fixed `id` (`V2_LOOKUP_RATE_LIMIT_ID`) so its identifier-layer bucket is one shared, per-endpoint
|
|
68
|
+
* budget instead of one per queried address - the same budget is now spent regardless of which (or how many
|
|
69
|
+
* different) addresses a caller tries.
|
|
70
|
+
*
|
|
50
71
|
* **Known gap, deliberately out of scope**: `Action.Redirect` (for multi-tenant hosted providers whose mailbox
|
|
51
72
|
* moved to a different domain) is not implemented - this library serves exactly one EAS URL for its whole
|
|
52
73
|
* deployment, so there's never a different domain to redirect to. The client-side well-known-URL discovery
|
|
@@ -76,6 +97,10 @@ export class BaseAutodiscoverRoute {
|
|
|
76
97
|
get mapiUrl() {
|
|
77
98
|
return this.endpointUrl(MAPI_PLUGIN, "/mapi/emsmdb");
|
|
78
99
|
}
|
|
100
|
+
/** The MAPI/HTTP `nspi` (address book) endpoint URL, reported beside `mapiUrl`: available exactly when it is. */
|
|
101
|
+
get nspiUrl() {
|
|
102
|
+
return this.endpointUrl(MAPI_PLUGIN, "/mapi/nspi");
|
|
103
|
+
}
|
|
79
104
|
/**
|
|
80
105
|
* Builds the query value used to match `Mailbox.aliasAddresses` against the given address. See
|
|
81
106
|
* `BaseMailIngestRoute.aliasQueryValue()`'s identical doc comment - same Mongo-array vs.
|
|
@@ -196,9 +221,12 @@ export class BaseAutodiscoverRoute {
|
|
|
196
221
|
// The display name is never disclosed to this anonymous caller (see the class doc): the address they
|
|
197
222
|
// already supplied stands in for it, which keeps the Outlook schema's required `DisplayName` populated.
|
|
198
223
|
const xml = outlook
|
|
199
|
-
? buildOutlookSuccessXml({ emailAddress: email, displayName: email, mapiUrl: url })
|
|
224
|
+
? buildOutlookSuccessXml({ emailAddress: email, displayName: email, mapiUrl: url, nspiUrl: this.nspiUrl })
|
|
200
225
|
: buildPoxSuccessXml({ emailAddress: email, displayName: email, easUrl: url });
|
|
201
|
-
|
|
226
|
+
// `text/xml`, not `application/xml`: real Exchange POX Autodiscover responses (per Microsoft's own
|
|
227
|
+
// "Autodiscover for Exchange ActiveSync developers" example) use `text/xml`, and some older/strict
|
|
228
|
+
// mobile mail clients hard-check the exact MIME type rather than accepting any XML content type.
|
|
229
|
+
res.setHeader("Content-Type", "text/xml; charset=utf-8").status(200).send(xml);
|
|
202
230
|
}
|
|
203
231
|
/**
|
|
204
232
|
* Autodiscover v2 (JSON). Only the `ActiveSync` protocol is served - this library has no EWS/other
|
|
@@ -247,6 +275,7 @@ __decorate([
|
|
|
247
275
|
__metadata("design:returntype", Promise)
|
|
248
276
|
], BaseAutodiscoverRoute.prototype, "init", null);
|
|
249
277
|
__decorate([
|
|
278
|
+
RateLimit(),
|
|
250
279
|
Post("/autodiscover.xml"),
|
|
251
280
|
__param(0, Request),
|
|
252
281
|
__param(1, Response),
|
|
@@ -255,6 +284,7 @@ __decorate([
|
|
|
255
284
|
__metadata("design:returntype", Promise)
|
|
256
285
|
], BaseAutodiscoverRoute.prototype, "pox", null);
|
|
257
286
|
__decorate([
|
|
287
|
+
RateLimit({ id: V2_LOOKUP_RATE_LIMIT_ID }),
|
|
258
288
|
Get("/autodiscover.json/v1.0/:email"),
|
|
259
289
|
__param(0, Param("email")),
|
|
260
290
|
__param(1, Query("Protocol")),
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"BaseAutodiscoverRoute.js","sourceRoot":"","sources":["../../src/BaseAutodiscoverRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAA6B,UAAU,EAAiB,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC3H,OAAO,EACH,sBAAsB,EACtB,kBAAkB,EAClB,+BAA+B,EAC/B,mBAAmB,EACnB,uBAAuB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAW,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC3D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAElD,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAClD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;
|
|
1
|
+
{"version":3,"file":"BaseAutodiscoverRoute.js","sourceRoot":"","sources":["../../src/BaseAutodiscoverRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,mCAAmC;AACnC,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAA6B,UAAU,EAAiB,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC3H,OAAO,EACH,sBAAsB,EACtB,kBAAkB,EAClB,+BAA+B,EAC/B,mBAAmB,EACnB,uBAAuB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAW,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC3D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAElD,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAClD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC;AAElF,+FAA+F;AAC/F,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,kHAAkH;AAClH,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAE9D;;;GAGG;AACH,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,OAAgB,qBAAqB;IAA3C;QAGI,6FAA6F;QAEnF,cAAS,GAAW,EAAE,CAAC;IA6MrC,CAAC;IA3MG,2FAA2F;IAC3F,IAAc,MAAM;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,8BAA8B,CAAC,CAAC;IAC/E,CAAC;IAED;oFACgF;IAChF,IAAc,OAAO;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACzD,CAAC;IAED,iHAAiH;IACjH,IAAc,OAAO;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IAUD;;;;;OAKG;IACO,eAAe,CAAC,OAAe;QACrC,OAAO,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,IAAY,OAAO;QACf,MAAM,KAAK,GAAW,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACD,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAAY,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrF,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,wFAAwF;QACxF,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7E,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9D,CAAC;IAEO,WAAW,CAAC,MAAc,EAAE,IAAY;QAC5C,MAAM,IAAI,GAAuB,IAAI,CAAC,OAAO,CAAC;QAC9C,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;IAC5B,CAAC;IAGY,AAAN,KAAK,CAAC,IAAI;QACb,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,kGAAkG,CAAC,CAAC;QAC1H,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,EAAE,IAAI,CACb,oGAAoG;gBAChG,sDAAsD,CAC7D,CAAC;QACN,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE;YACjE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;YAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;SAC5B,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACK,gBAAgB,CAAC,KAAa;QAClC,MAAM,OAAO,GAAW,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnD,OAAO,OAAO,CAAC,MAAM,IAAI,kBAAkB,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7G,CAAC;IAED,iHAAiH;IACzG,KAAK,CAAC,cAAc,CAAC,OAAe;QACxC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,IAAI,CAAC,WAAY,CAAC,IAAI,CAAC,EAAE,kBAAkB,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACpH,IAAI,CAAC,WAAY,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;SACrH,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;;;OAUG;IAGU,AAAN,KAAK,CAAC,GAAG,CAAU,GAAgB,EAAY,GAAiB;QACnE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QAED,6FAA6F;QAC7F,4BAA4B;QAC5B,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAW,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,SAAS,GAAuB,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,KAAK,GAAuB,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QAED,MAAM,OAAO,GAAkB,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QAED,MAAM,OAAO,GAAY,+BAA+B,CAAC,IAAI,CAAC,KAAK,uBAAuB,CAAC;QAC3F,MAAM,GAAG,GAAuB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACrE,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,6GAA6G;YAC7G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QACD,qGAAqG;QACrG,wGAAwG;QACxG,MAAM,GAAG,GAAW,OAAO;YACvB,CAAC,CAAC,sBAAsB,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1G,CAAC,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,mGAAmG;QACnG,mGAAmG;QACnG,iGAAiG;QACjG,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IAED;;;;OAIG;IAGU,AAAN,KAAK,CAAC,EAAE,CACK,KAAa,EACV,QAA4B,EACrC,GAAiB;QAE3B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QACD,uFAAuF;QACvF,MAAM,MAAM,GAAuB,IAAI,CAAC,MAAM,CAAC;QAC/C,IAAI,QAAQ,KAAK,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,SAAS,EAAE,sBAAsB;gBACjC,YAAY,EAAE,yBAAyB,QAAQ,IAAI,EAAE,EAAE;aAC1D,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAED,4GAA4G;QAC5G,MAAM,OAAO,GAAuB,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,OAAO,GAAkB,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,SAAS,EAAE,cAAc;gBACzB,YAAY,EAAE,0CAA0C;aAC3D,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;CACJ;AA7Ma;IADT,MAAM,CAAC,8BAA8B,EAAE,EAAE,CAAC;;wDACV;AAwBzB;IADP,MAAM;;qDACa;AAiDP;IADZ,IAAI;;;;iDAcJ;AAoCY;IAFZ,SAAS,EAAE;IACX,IAAI,CAAC,mBAAmB,CAAC;IACR,WAAA,OAAO,CAAA;IAAoB,WAAA,QAAQ,CAAA;;;;gDA0CpD;AASY;IAFZ,SAAS,CAAC,EAAE,EAAE,EAAE,uBAAuB,EAAE,CAAC;IAC1C,GAAG,CAAC,gCAAgC,CAAC;IAEjC,WAAA,KAAK,CAAC,OAAO,CAAC,CAAA;IACd,WAAA,KAAK,CAAC,UAAU,CAAC,CAAA;IACjB,WAAA,QAAQ,CAAA;;;;+CA4BZ"}
|
|
@@ -30,7 +30,11 @@ export declare function buildPoxSuccessXml({ emailAddress, displayName, easUrl }
|
|
|
30
30
|
export interface AutodiscoverOutlookSuccess {
|
|
31
31
|
emailAddress: string;
|
|
32
32
|
displayName?: string;
|
|
33
|
+
/** The MAPI/HTTP `emsmdb` (mail store) endpoint. */
|
|
33
34
|
mapiUrl: string;
|
|
35
|
+
/** The MAPI/HTTP `nspi` (address book) endpoint. Outlook can't finish setting up an account without one, so a caller that
|
|
36
|
+
* serves MAPI always passes it; left out, the response has no `AddressBook` block. */
|
|
37
|
+
nspiUrl?: string;
|
|
34
38
|
}
|
|
35
39
|
/**
|
|
36
40
|
* Builds a real Outlook/EXCH `2006a` response per `[MS-OXDSCLI]`'s confirmed Autodiscover Response XSD -
|
|
@@ -47,11 +51,14 @@ export interface AutodiscoverOutlookSuccess {
|
|
|
47
51
|
* request always gets the mapiHttp form - the real `X-MapiHttpCapability` request-header negotiation a full
|
|
48
52
|
* implementation would consult to choose between EXCH/mapiHttp is not implemented, a documented gap.
|
|
49
53
|
* `MailStore.InternalUrl`/`ExternalUrl` are both set to the same `mapiUrl`, since this library serves one URL
|
|
50
|
-
* per deployment with no separate internal/external network split.
|
|
54
|
+
* per deployment with no separate internal/external network split. The `mapiHttp` `Protocol` also carries an `AddressBook`
|
|
55
|
+
* block (the `nspi` endpoint, `nspiUrl`) in the same shape: a MAPI/HTTP client uses the address book as well as the mail
|
|
56
|
+
* store, and Outlook stops right after the Autodiscover response - "Something went wrong and Outlook couldn't set up your
|
|
57
|
+
* account", with no request to either endpoint - when it is missing.
|
|
51
58
|
*
|
|
52
59
|
* `LegacyDN`/`DeploymentId` are schema-required fields this library has no real backing value for (no X.500
|
|
53
60
|
* DN resolution, no multi-tenant deployment identity) - both are synthesized placeholders. Real Outlook does
|
|
54
61
|
* not validate their exact content for MAPI/HTTP connectivity; they matter for classic RPC/TCP MAPI
|
|
55
62
|
* free-busy/permissions lookups this library doesn't implement anyway.
|
|
56
63
|
*/
|
|
57
|
-
export declare function buildOutlookSuccessXml({ emailAddress, displayName, mapiUrl }: AutodiscoverOutlookSuccess): string;
|
|
64
|
+
export declare function buildOutlookSuccessXml({ emailAddress, displayName, mapiUrl, nspiUrl }: AutodiscoverOutlookSuccess): string;
|
|
@@ -25,6 +25,22 @@ export declare const MAX_ADDRESS_LENGTH = 254;
|
|
|
25
25
|
* a real `Mailbox` in this deployment. The actual security boundary is unchanged from Phase 2: real mailbox
|
|
26
26
|
* access still requires a JWT at `BaseEasRoute`, exactly as today.
|
|
27
27
|
*
|
|
28
|
+
* **Rate limiting.** Both endpoints answer anonymously with an observably different outcome (404 vs. a success
|
|
29
|
+
* response) depending on whether the requested address belongs to a real `Mailbox`, which makes each one a
|
|
30
|
+
* mailbox-existence oracle for anyone who can reach them. Both are `@RateLimit()`-decorated - the same bare
|
|
31
|
+
* usage `BaseKeyDiscoveryRoute`'s own public key lookup uses - so a caller can't enumerate real mailboxes at a
|
|
32
|
+
* domain just by hammering either endpoint. `pox()` uses that bare form unmodified: its address is read from
|
|
33
|
+
* the POST body, never the URL, so `RouteUtils.getRateLimitPath()`'s route-pattern-with-`:param`-substituted
|
|
34
|
+
* identifier is already the same value (IP + method + static path) no matter which address is queried. `v2()`
|
|
35
|
+
* can't rely on the same default: its address is the `:email` URL parameter, which `getRateLimitPath()`
|
|
36
|
+
* substitutes into the auto-derived identifier verbatim - meaning, left undecorated-further, every distinct
|
|
37
|
+
* queried address would land in its own always-fresh, never-exceeded bucket, and an anonymous caller could
|
|
38
|
+
* enumerate any number of candidate addresses from one IP with no throttling beyond the coarse, generic,
|
|
39
|
+
* shared-across-every-route per-IP layer (`RateLimiter`'s own always-on secondary counter). `v2()` therefore
|
|
40
|
+
* passes a fixed `id` (`V2_LOOKUP_RATE_LIMIT_ID`) so its identifier-layer bucket is one shared, per-endpoint
|
|
41
|
+
* budget instead of one per queried address - the same budget is now spent regardless of which (or how many
|
|
42
|
+
* different) addresses a caller tries.
|
|
43
|
+
*
|
|
28
44
|
* **Known gap, deliberately out of scope**: `Action.Redirect` (for multi-tenant hosted providers whose mailbox
|
|
29
45
|
* moved to a different domain) is not implemented - this library serves exactly one EAS URL for its whole
|
|
30
46
|
* deployment, so there's never a different domain to redirect to. The client-side well-known-URL discovery
|
|
@@ -49,6 +65,8 @@ export declare abstract class BaseAutodiscoverRoute<M extends Mailbox> {
|
|
|
49
65
|
/** The MAPI/HTTP `emsmdb` endpoint URL to report to a real Outlook desktop client, or `undefined` when MAPI
|
|
50
66
|
* isn't available here. Only used by `pox()`'s Outlook/EXCH response branch. */
|
|
51
67
|
protected get mapiUrl(): string | undefined;
|
|
68
|
+
/** The MAPI/HTTP `nspi` (address book) endpoint URL, reported beside `mapiUrl`: available exactly when it is. */
|
|
69
|
+
protected get nspiUrl(): string | undefined;
|
|
52
70
|
private _objectFactory?;
|
|
53
71
|
private mailboxRepo?;
|
|
54
72
|
private logger;
|
package/package.json
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@rapidmx/autodiscover-plugin",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.2.1",
|
|
4
4
|
"description": "A RapidMX plugin that provides Autodiscover protocol support.",
|
|
5
|
-
"repository": "https://github.com/
|
|
5
|
+
"repository": "https://github.com/rapidmx/autodiscover-plugin.git",
|
|
6
6
|
"author": "RapidREST <rapidrests@gmail.com>",
|
|
7
7
|
"license": "MPL-2.0",
|
|
8
8
|
"contributors": [
|
|
@@ -27,9 +27,9 @@
|
|
|
27
27
|
"@rapidrest/service-core": "^2.x"
|
|
28
28
|
},
|
|
29
29
|
"devDependencies": {
|
|
30
|
-
"@rapidmx/restapi": "^0.
|
|
31
|
-
"@rapidrest/core": "^
|
|
32
|
-
"@rapidrest/service-core": "^2.
|
|
30
|
+
"@rapidmx/restapi": "^0.22.1",
|
|
31
|
+
"@rapidrest/core": "^6.0.0",
|
|
32
|
+
"@rapidrest/service-core": "^2.3.0",
|
|
33
33
|
"@swc/core": "^1.16.2",
|
|
34
34
|
"@types/nconf": "^0.10.7",
|
|
35
35
|
"@types/node": "^26.5.0",
|
|
@@ -97,8 +97,8 @@
|
|
|
97
97
|
"key": "mail:autodiscover:public_url",
|
|
98
98
|
"label": "Public server URL",
|
|
99
99
|
"type": "string",
|
|
100
|
-
"default": "",
|
|
101
|
-
"help": "The address clients reach this server at
|
|
100
|
+
"default": "https://<host>",
|
|
101
|
+
"help": "The address clients reach this server at - the same host your DNS/MX setup already points at. Filled in with this server's address when the plugin is installed. Nothing is advertised until this is set. Also add a CNAME (autodiscover.<domain> -> this host) or, to avoid needing a second TLS certificate, a DNS SRV record (_autodiscover._tcp.<domain> -> this host) so mail clients can find this server automatically - see this deployment's Domain DNS setup checklist."
|
|
102
102
|
}
|
|
103
103
|
],
|
|
104
104
|
"requires": {
|