@social-mail/social-mail-web-server 1.8.372 → 1.8.374

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@social-mail/social-mail-web-server",
-  "version": "1.8.372",
+  "version": "1.8.374",
   "description": "## Phase 1",
   "main": "index.js",
   "type": "module",

package/src/common/globalEnv.ts

@@ -45,6 +45,10 @@ export const globalEnv = {
     senderEmailForNotification: process.env.SOCIAL_MAIL_SENDER_EMAIL_FOR_NOTIFICATION,
     cdn,
     cdnOrHost: cdn ?? host,
+    emailContentProxy: {
+        host: process.env.SOCIAL_MAIL_HOSTS_EMAIL_CONTENT || null,
+        encryptionKey: process.env.SOCIAL_MAIL_HOSTS_EMAIL_CONTENT_PUBLIC_KEY || process.env.SOCIAL_MAIL_PUBLIC_KEY
+    },
     path: process.env.SOCIAL_MAIL_PATH || "/",
     links: {
         login: process.env.SOCIAL_MAIL_LINKS_LOGIN || process.env.SOCIAL_MAIL_EXTERNAL_LOGIN,

package/src/server/services/encryption/EncryptionService.ts

@@ -7,6 +7,11 @@ const cache = new Map<string, { key, encryptionIV }>();
 @RegisterSingleton
 export default class EncryptionService {
 
+    global = {
+        encrypt: (text: string, publicKey, host: string) => this.encrypt(text, publicKey, "base64url", host),
+        decrypt: (text: string, publicKey,  host: string) => this.decrypt(text, publicKey, "base64url", host)
+    };
+
     general = {
         encrypt: (text: string) => this.encrypt(text, globalEnv.publicKey, "base64url"),
         decrypt: (text: string) => this.decrypt(text, globalEnv.publicKey, "base64url")
@@ -17,23 +22,24 @@ export default class EncryptionService {
         decrypt: (text: string) => this.decrypt(text, globalEnv.secretKey)
     };
 
-    private encrypt(text: string, secretKey = globalEnv.secretKey, encoding: Encoding = "hex") {
-        const { key, encryptionIV}  = this.createKey(secretKey);
+    private encrypt(text: string, secretKey = globalEnv.secretKey, encoding: Encoding = "hex", host = globalEnv.host) {
+        const { key, encryptionIV}  = this.createKey(secretKey, host);
         const cipher = crypto.createCipheriv("aes-256-cbc", key, encryptionIV);
         return (cipher.update(text, "utf-8", encoding)
                 + cipher.final(encoding)).replaceAll("=", "*");
     }
 
-    private decrypt(text: string, secretKey = globalEnv.secretKey, encoding: Encoding = "hex") {
-        const { key, encryptionIV}  = this.createKey(secretKey);
+    private decrypt(text: string, secretKey = globalEnv.secretKey, encoding: Encoding = "hex", host = globalEnv.host) {
+        const { key, encryptionIV}  = this.createKey(secretKey, host);
         text = text.replaceAll("*" , "=");
         const decipher = crypto.createDecipheriv("aes-256-cbc", key, encryptionIV);
         return decipher.update(text, encoding, "utf-8") + decipher.final("utf-8");
     }
 
-    private createKey(secretKey: string) {
+    private createKey(secretKey: string, host) {
 
-        let result = cache.get(secretKey);
+        const cacheKey = `${host}:${secretKey}`;
+        let result = cache.get(cacheKey);
         if(!result) {
             const key = crypto.createHash("sha512")
                 .update(secretKey)
@@ -41,12 +47,12 @@ export default class EncryptionService {
                 .substring(0, 32);
 
             const encryptionIV = crypto.createHash("sha512")
-                .update(globalEnv.host)
+                .update(host)
                 .digest("hex")
                 .substring(0, 16);
             result = { key, encryptionIV };
-            cache.set(secretKey, result);
-            setTimeout(() => cache.delete(secretKey), 60000);
+            cache.set(cacheKey, result);
+            setTimeout(() => cache.delete(cacheKey), 60000);
         }
         return result;
     }

package/src/server/smtp/services/CachedEmailService.ts

@@ -10,6 +10,7 @@ import EmailLogService from "../../services/email-logs/EmailLogService.js";
 import EncryptionService from "../../services/encryption/EncryptionService.js";
 import { LocalFile } from "@entity-access/server-pages/dist/core/LocalFile.js";
 import BlogContentTransformer from "../../services/dom/BlogContentTransformer.js";
+import { globalEnv } from "../../../common/globalEnv.js";
 
 @RegisterScoped
 export default class CachedEmailService {
@@ -33,7 +34,6 @@ export default class CachedEmailService {
 
         const factory = async () => {
 
-            const ei = this.encryptionService.general.encrypt(emailID.toString());
 
             let logFile: EmailLog;
 
@@ -69,12 +69,22 @@ export default class CachedEmailService {
             }
             const htmlService = ServiceProvider.resolve(this, BlogContentTransformer);
             if (status !== "draft") {
+                let ei;
+                let prefix;
+                const { host, encryptionKey } = globalEnv.emailContentProxy;
+                if (host) {
+                    ei = this.encryptionService.global.encrypt(emailID.toString(), encryptionKey, host);
+                    prefix = `https://${host}/api/emails/d/${ei}/${emailID}/`;
+                } else {
+                    ei = this.encryptionService.general.encrypt(emailID.toString());
+                    prefix = `/api/emails/d/${ei}/${emailID}/`;
+                }
                 html = await htmlService.sanitizeExternalResources({
                     html,
                     emailID,
                     messageID: void 0,
                     senderDomain,
-                    prefix: `/api/emails/d/${ei}/${emailID}/`,
+                    prefix,
                     blog
                 });
             }