emailengine-app 2.61.3 → 2.61.5

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## [2.61.5](https://github.com/postalsys/emailengine/compare/v2.61.4...v2.61.5) (2026-01-15)
+
+
+### Bug Fixes
+
+* use base64url encoding for OAuth state nonce in /v1/authentication/form ([1f2cecf](https://github.com/postalsys/emailengine/commit/1f2cecf9efbee8a12c3a0d27c9879bfbbf7dfa39))
+* use base64url encoding for OAuth state nonce in /v1/authentication/form ([dead38c](https://github.com/postalsys/emailengine/commit/dead38c348f1c0204f2bfba09997090cb86c348b))
+* use base64url encoding for OAuth state nonce in remaining locations ([961b710](https://github.com/postalsys/emailengine/commit/961b710357d836782c9bbce329178aa96e08ee20))
+
+## [2.61.4](https://github.com/postalsys/emailengine/compare/v2.61.3...v2.61.4) (2026-01-14)
+
+
+### Bug Fixes
+
+* handle delegation errors in loadAccountData, isApiClient, and UI listing ([c306618](https://github.com/postalsys/emailengine/commit/c306618a37428bbf088ed1289bf832e778f14b9c))
+* show Failed status for accounts with IMAP disabled due to auth errors ([e6b687d](https://github.com/postalsys/emailengine/commit/e6b687d458cfd080795f7176f862109e2c299fff))
+
 ## [2.61.3](https://github.com/postalsys/emailengine/compare/v2.61.2...v2.61.3) (2026-01-14)
 
 

package/data/google-crawlers.json

@@ -1,5 +1,5 @@
 {
-    "creationTime": "2026-01-13T15:46:00.000000",
+    "creationTime": "2026-01-14T15:45:48.000000",
     "prefixes": [
         {
             "ipv6Prefix": "2001:4860:4801:2008::/64"

package/lib/account.js

@@ -697,20 +697,30 @@ class Account {
                 accountData._app = app;
             }
         } else if (accountData.oauth2 && accountData.oauth2.auth && accountData.oauth2.auth.delegatedAccount) {
-            let delegatedAccount = await resolveDelegatedAccount(this.redis, accountData.account);
-            if (delegatedAccount) {
-                accountData.delegatedAccount = delegatedAccount;
-                let delegatedAccountRow = await this.redis.hgetall(`${REDIS_PREFIX}iad:${delegatedAccount}`);
-                let delegatedAccountData = this.unserializeAccountData(delegatedAccountRow);
-                if (delegatedAccountData.oauth2 && delegatedAccountData.oauth2.provider) {
-                    let app = await oauth2Apps.get(delegatedAccountData.oauth2.provider);
-                    if (app) {
-                        accountData._app = app;
-                        if (app.baseScopes === 'api') {
-                            accountData.isApi = true;
+            try {
+                let delegatedAccount = await resolveDelegatedAccount(this.redis, accountData.account);
+                if (delegatedAccount) {
+                    accountData.delegatedAccount = delegatedAccount;
+                    let delegatedAccountRow = await this.redis.hgetall(`${REDIS_PREFIX}iad:${delegatedAccount}`);
+                    let delegatedAccountData = this.unserializeAccountData(delegatedAccountRow);
+                    if (delegatedAccountData.oauth2 && delegatedAccountData.oauth2.provider) {
+                        let app = await oauth2Apps.get(delegatedAccountData.oauth2.provider);
+                        if (app) {
+                            accountData._app = app;
+                            if (app.baseScopes === 'api') {
+                                accountData.isApi = true;
+                            }
                         }
                     }
                 }
+            } catch (err) {
+                this.logger.warn({
+                    msg: 'Failed to resolve delegated account',
+                    account: accountData.account,
+                    delegatedAccount: accountData.oauth2.auth.delegatedAccount,
+                    err
+                });
+                accountData.delegationError = err.message;
             }
         }
 
@@ -2545,17 +2555,22 @@ class Account {
 
     async isApiClient(accountData) {
         if (accountData.oauth2?.auth?.delegatedAccount) {
-            let delegatedAccount = await resolveDelegatedAccount(this.redis, accountData.account);
-            if (delegatedAccount) {
-                accountData.delegatedAccount = delegatedAccount;
-                let delegatedAccountRow = await this.redis.hgetall(`${REDIS_PREFIX}iad:${delegatedAccount}`);
-                let delegatedAccountData = this.unserializeAccountData(delegatedAccountRow);
-                if (delegatedAccountData?.oauth2?.provider) {
-                    let app = await oauth2Apps.get(delegatedAccountData.oauth2.provider);
-                    return app?.baseScopes === 'api';
-                } else {
-                    return false;
+            try {
+                let delegatedAccount = await resolveDelegatedAccount(this.redis, accountData.account);
+                if (delegatedAccount) {
+                    accountData.delegatedAccount = delegatedAccount;
+                    let delegatedAccountRow = await this.redis.hgetall(`${REDIS_PREFIX}iad:${delegatedAccount}`);
+                    let delegatedAccountData = this.unserializeAccountData(delegatedAccountRow);
+                    if (delegatedAccountData?.oauth2?.provider) {
+                        let app = await oauth2Apps.get(delegatedAccountData.oauth2.provider);
+                        return app?.baseScopes === 'api';
+                    } else {
+                        return false;
+                    }
                 }
+            } catch (err) {
+                // Invalid delegation config - treat as non-API client
+                return false;
             }
         }
 

package/lib/routes-ui.js

@@ -618,6 +618,15 @@ function formatAccountData(account, gt) {
             break;
     }
 
+    // Check if IMAP was disabled due to errors - override state label to show error
+    if (account.imap && account.imap.disabled && account.lastErrorState) {
+        account.stateLabel = {
+            type: 'danger',
+            name: 'Failed',
+            error: account.lastErrorState.description || account.lastErrorState.response
+        };
+    }
+
     if (account.oauth2) {
         account.oauth2.scopes = []
             .concat(account.oauth2.scope || [])
@@ -4157,13 +4166,20 @@ ${Buffer.from(data.content, 'base64url').toString('base64')}
 
             for (let account of accounts.accounts) {
                 let accountObject = new Account({ redis, account: account.account });
-                account.data = await accountObject.loadAccountData(null, null, runIndex);
+                try {
+                    account.data = await accountObject.loadAccountData(null, null, runIndex);
 
-                if (account.data && account.data.oauth2 && account.data.oauth2.provider) {
-                    let oauth2App = await oauth2Apps.get(account.data.oauth2.provider);
-                    if (oauth2App) {
-                        account.data.oauth2.app = oauth2App;
+                    if (account.data && account.data.oauth2 && account.data.oauth2.provider) {
+                        let oauth2App = await oauth2Apps.get(account.data.oauth2.provider);
+                        if (oauth2App) {
+                            account.data.oauth2.app = oauth2App;
+                        }
                     }
+                } catch (err) {
+                    // Account has invalid config (e.g., broken delegation)
+                    account.data = {
+                        delegationError: err.message
+                    };
                 }
             }
 
@@ -4325,7 +4341,7 @@ ${Buffer.from(data.content, 'base64url').toString('base64')}
                 name: request.payload.name,
 
                 // identify request
-                n: crypto.randomBytes(NONCE_BYTES).toString('base64'),
+                n: crypto.randomBytes(NONCE_BYTES).toString('base64url'),
                 t: Date.now()
             });
 

package/lib/ui-routes/account-routes.js

@@ -159,6 +159,15 @@ function formatAccountData(account, gt) {
             break;
     }
 
+    // Check if IMAP was disabled due to errors - override state label to show error
+    if (account.imap && account.imap.disabled && account.lastErrorState) {
+        account.stateLabel = {
+            type: 'danger',
+            name: 'Failed',
+            error: account.lastErrorState.description || account.lastErrorState.response
+        };
+    }
+
     if (account.oauth2) {
         account.oauth2.scopes = []
             .concat(account.oauth2.scope || [])
@@ -417,7 +426,7 @@ function init(args) {
                 name: request.payload.name,
 
                 // identify request
-                n: crypto.randomBytes(NONCE_BYTES).toString('base64'),
+                n: crypto.randomBytes(NONCE_BYTES).toString('base64url'),
                 t: Date.now()
             });
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "emailengine-app",
-    "version": "2.61.3",
+    "version": "2.61.5",
     "private": false,
     "productTitle": "EmailEngine",
     "description": "Email Sync Engine",
@@ -59,8 +59,8 @@
         "@postalsys/bounce-classifier": "^2.0.0",
         "@postalsys/certs": "1.0.12",
         "@postalsys/ee-client": "1.3.0",
-        "@postalsys/email-ai-tools": "1.11.1",
-        "@postalsys/email-text-tools": "2.4.0",
+        "@postalsys/email-ai-tools": "1.11.2",
+        "@postalsys/email-text-tools": "2.4.1",
         "@postalsys/gettext": "4.1.1",
         "@postalsys/joi-messages": "1.0.5",
         "@postalsys/templates": "2.0.0",
@@ -99,7 +99,7 @@
         "murmurhash": "2.0.1",
         "nanoid": "3.3.8",
         "nodemailer": "7.0.12",
-        "pino": "10.1.1",
+        "pino": "10.2.0",
         "popper.js": "1.16.1",
         "prom-client": "15.1.3",
         "psl": "1.15.0",
@@ -125,7 +125,7 @@
         "grunt-wait": "0.3.0",
         "jsxgettext": "0.11.0",
         "pino-pretty": "13.0.0",
-        "prettier": "3.7.4",
+        "prettier": "3.8.0",
         "resedit": "3.0.1",
         "spdx-satisfies": "6.0.0",
         "supertest": "7.2.2",