@remit/smtp-worker 0.0.21 → 0.0.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remit/smtp-worker",
-  "version": "0.0.21",
+  "version": "0.0.23",
   "type": "module",
   "main": "dist/index.js",
   "exports": {

package/src/handlers/send-message-core.ts

@@ -7,6 +7,7 @@ import type {
 import { AccountAuthType, OutboxMessageStatus } from "@remit/domain-enums";
 import { type Logger, recordSmtpFailure } from "@remit/logger-lambda";
 import { RefreshTokenError } from "@remit/mail-oauth-service";
+import type { CredentialResolution } from "@remit/mailbox-service/account-credentials";
 import type { SecretsService } from "@remit/secrets-service";
 import {
 	buildMailMessage,
@@ -72,10 +73,11 @@ export interface SendMessageDeps {
 	 * Resolve credentials for the account. Called after fetching the account.
 	 * For password accounts this may resolve immediately from the stored hash.
 	 * For OAuth accounts this mints an access token via the token service.
+	 * Returns `{ status: "missing" }` when the account stores no credential.
 	 * Throws RefreshTokenError on OAuth failures — callers should not need to
 	 * handle this here; the caller of sendMessage handles it.
 	 */
-	resolveCredentials: (account: AccountItem) => Promise<SmtpCredentials>;
+	resolveCredentials: (account: AccountItem) => Promise<CredentialResolution>;
 	/**
 	 * Persist the account's connectionState. Called when a terminal OAuth/SMTP
 	 * auth failure is detected so the account is fenced off until the user
@@ -203,9 +205,26 @@ export const sendMessage = async (
 	// Resolve credentials. On a terminal OAuth auth failure (token revoked),
 	// flip the account to reauth_required and ACK — do not retry. Transient /
 	// config failures rethrow for SQS retry/backoff.
-	let credentials: SmtpCredentials;
+	let credentials: SmtpCredentials | undefined;
 	try {
-		credentials = await deps.resolveCredentials(account);
+		const resolution = await deps.resolveCredentials(account);
+		if (resolution.status === "missing") {
+			// Terminal, never a retry (issue #1120). The account still sends if it
+			// carries an SMTP-specific credential of its own, so this hands
+			// resolveSmtpConfig no credential and lets it decide; where there is
+			// none either, the send settles `blocked` below.
+			log.warn(
+				{
+					accountId,
+					reason: resolution.reason,
+					connectionState: resolution.terminalState,
+				},
+				"Account stores no credential",
+			);
+			await deps.updateConnectionState(accountId, resolution.terminalState);
+		} else {
+			credentials = resolution.credentials;
+		}
 	} catch (err) {
 		if (err instanceof RefreshTokenError) {
 			if (err.error.kind === "reauth-required") {

package/src/handlers/send-message.test.ts

@@ -145,10 +145,13 @@ const buildDeps = (
 			(async (_account) => {
 				recorded.resolveCalls += 1;
 				return {
-					kind: "password" as const,
-					password: _account.passwordHash
-						? "resolved-password"
-						: "no-password-configured",
+					status: "resolved" as const,
+					credentials: {
+						kind: "password" as const,
+						password: _account.passwordHash
+							? "resolved-password"
+							: "no-password-configured",
+					},
 				};
 			}),
 		updateConnectionState: async (accountId, state) => {
@@ -329,6 +332,24 @@ describe("sendMessage handler", () => {
 		assert.equal(recorded.updates.length, 0);
 	});
 
+	it("drops the event for a row the enqueue settled at `failed`", async () => {
+		// The other half of #936. An error from SQS `SendMessage` says the response
+		// was lost, not that the broker refused the event, so the row is settled
+		// outside this fence and the event that landed anyway dies here. Settling
+		// it at `draft` instead would send it — and leave the user a row they can
+		// send a second time.
+		const { deps, recorded } = buildDeps({
+			outbox: buildOutbox({ status: "failed" }),
+		});
+
+		await sendMessage(event, silentLogger, deps);
+
+		assert.equal(recorded.sendCalls, 0, "must not send");
+		assert.equal(recorded.marked.length, 0);
+		assert.equal(recorded.updates.length, 0);
+		assert.equal(recorded.statuses.length, 0);
+	});
+
 	it("settles the row as unfiled when the append event cannot be queued", async () => {
 		const { deps, recorded } = buildDeps({
 			account: buildAccount({ smtpHost: "smtp.example.com", smtpPort: 587 }),
@@ -550,6 +571,25 @@ describe("sendMessage OAuth reauth/ACK contract", () => {
 		});
 	});
 
+	it("account storing no credential: settles `blocked` and never retries (issue #1120)", async () => {
+		const { deps, recorded } = buildDeps({
+			account: buildAccount({ passwordHash: undefined }),
+			resolveCredentials: async () => ({
+				status: "missing" as const,
+				terminalState: "credentials_missing" as const,
+				reason: "authType=password but no passwordHash",
+			}),
+		});
+
+		await sendMessage(event, silentLogger, deps);
+
+		assert.equal(recorded.sendCalls, 0, "must not send");
+		assert.deepEqual(recorded.connectionStateUpdates, [
+			{ accountId: "acc-1", state: "credentials_missing" },
+		]);
+		assert.equal(recorded.updates[0]?.patch.status, "blocked");
+	});
+
 	it("on transient credential error: rethrows", async () => {
 		const { deps, recorded } = buildDeps({
 			account: buildAccount({ smtpHost: "smtp.example.com", smtpPort: 587 }),