') : ''; + const signature = includeSignature ? ` +
+
+
+ ${contactLines ? contactLines + '
' : ''} + ${sig.email || email} +
+
+
+
` : '';
+
+ // Convert plain text body to HTML with line breaks
+ const htmlBody = emailBody.replace(/\n/g, '${sig.name || defaultName}
+ ${sig.title || 'Sales & Marketing Director'}
+ +
${sig.company || 'Port Nimara'}
+ + ${contactLines ? contactLines + '
' : ''} + ${sig.email || email} +
+
+ +
+ The information in this message is confidential and may be privileged.
+ It is intended for the addressee alone.
+ If you are not the intended recipient it is prohibited to disclose, use or copy this information.
+ Please contact the Sender immediately should this message have been transmitted incorrectly. +
++ It is intended for the addressee alone.
+ If you are not the intended recipient it is prohibited to disclose, use or copy this information.
+ Please contact the Sender immediately should this message have been transmitted incorrectly. +
') + signature; + + // Configure SMTP transport + const transporter = nodemailer.createTransport({ + host: process.env.NUXT_EMAIL_SMTP_HOST || 'mail.portnimara.com', + port: parseInt(process.env.NUXT_EMAIL_SMTP_PORT || '587'), + secure: false, // false for STARTTLS + auth: { + user: email, + pass: password + }, + tls: { + rejectUnauthorized: false // Allow self-signed certificates + } + }); + + // Send email + const fromName = sig.name || defaultName; + const info = await transporter.sendMail({ + from: `"${fromName}" <${email}>`, + to: to, + subject: subject, + text: emailBody, // Plain text version + html: htmlBody // HTML version with signature + }); + + // Store email in MinIO for thread history + if (interestId) { + try { + const emailData = { + id: info.messageId, + from: email, + to: to, + subject: subject, + body: emailBody, + html: htmlBody, + timestamp: new Date().toISOString(), + direction: 'sent', + interestId: interestId + }; + + const objectName = `client-emails/interest-${interestId}/${Date.now()}-sent.json`; + const buffer = Buffer.from(JSON.stringify(emailData, null, 2)); + + await uploadFile( + objectName, + buffer, + 'application/json' + ); + } catch (storageError) { + console.error('Failed to store email in MinIO:', storageError); + // Continue even if storage fails + } + } + + return { + success: true, + message: "Email sent successfully", + messageId: info.messageId + }; + } catch (error) { + console.error('Failed to send email:', error); + if (error instanceof Error) { + throw createError({ + statusCode: 500, + statusMessage: `Failed to send email: ${error.message}` + }); + } else { + throw createError({ + statusCode: 500, + statusMessage: "An unexpected error occurred", + }); + } + } +}); diff --git a/server/api/email/test-connection.ts b/server/api/email/test-connection.ts new file mode 100644 index 0000000..8dc17e9 --- /dev/null +++ b/server/api/email/test-connection.ts @@ -0,0 +1,106 @@ +import nodemailer from 'nodemailer'; +import Imap from 'imap'; +import { encryptCredentials, storeCredentialsInSession } from '~/server/utils/encryption'; + +export default defineEventHandler(async (event) => { + const xTagHeader = getRequestHeader(event, "x-tag"); + + if (!xTagHeader || (xTagHeader !== "094ut234" && xTagHeader !== "pjnvü1230")) { + throw createError({ statusCode: 401, statusMessage: "unauthenticated" }); + } + + try { + const body = await readBody(event); + const { email, password, imapHost, smtpHost, sessionId } = body; + + if (!email || !password || !sessionId) { + throw createError({ + statusCode: 400, + statusMessage: "Email, password, and sessionId are required" + }); + } + + // Use provided hosts or defaults from environment + const imapHostToUse = imapHost || process.env.NUXT_EMAIL_IMAP_HOST || 'mail.portnimara.com'; + const smtpHostToUse = smtpHost || process.env.NUXT_EMAIL_SMTP_HOST || 'mail.portnimara.com'; + const imapPort = parseInt(process.env.NUXT_EMAIL_IMAP_PORT || '993'); + const smtpPort = parseInt(process.env.NUXT_EMAIL_SMTP_PORT || '587'); + + // Test SMTP connection + const transporter = nodemailer.createTransport({ + host: smtpHostToUse, + port: smtpPort, + secure: false, // false for STARTTLS + auth: { + user: email, + pass: password + }, + tls: { + rejectUnauthorized: false // Allow self-signed certificates + } + }); + + await transporter.verify(); + + // Test IMAP connection + const imapConfig = { + user: email, + password: password, + host: imapHostToUse, + port: imapPort, + tls: true, + tlsOptions: { + rejectUnauthorized: false // Allow self-signed certificates + } + }; + + const testImapConnection = () => { + return new Promise((resolve, reject) => { + const imap = new Imap(imapConfig); + + imap.once('ready', () => { + imap.end(); + resolve(true); + }); + + imap.once('error', (err: Error) => { + reject(err); + }); + + imap.connect(); + }); + }; + + await testImapConnection(); + + // If both connections successful, encrypt and store credentials + const encryptedCredentials = encryptCredentials(email, password); + storeCredentialsInSession(sessionId, encryptedCredentials); + + return { + success: true, + message: "Email connection tested successfully", + email: email + }; + } catch (error) { + console.error('Email connection test failed:', error); + if (error instanceof Error) { + // Check for common authentication errors + if (error.message.includes('Authentication') || error.message.includes('AUTHENTICATIONFAILED')) { + throw createError({ + statusCode: 401, + statusMessage: "Invalid email or password" + }); + } + throw createError({ + statusCode: 500, + statusMessage: `Connection failed: ${error.message}` + }); + } else { + throw createError({ + statusCode: 500, + statusMessage: "An unexpected error occurred", + }); + } + } +}); diff --git a/server/utils/encryption.ts b/server/utils/encryption.ts new file mode 100644 index 0000000..bb440e9 --- /dev/null +++ b/server/utils/encryption.ts @@ -0,0 +1,117 @@ +import crypto from 'crypto'; + +const algorithm = 'aes-256-gcm'; +const saltLength = 64; +const tagLength = 16; +const ivLength = 16; +const iterations = 100000; +const keyLength = 32; + +function getKey(): Buffer { + const key = process.env.NUXT_EMAIL_ENCRYPTION_KEY; + if (!key || key.length < 32) { + throw new Error('NUXT_EMAIL_ENCRYPTION_KEY must be at least 32 characters long'); + } + // Ensure key is exactly 32 bytes + return Buffer.from(key.substring(0, 32).padEnd(32, '0')); +} + +export function encryptCredentials(email: string, password: string): string { + try { + const key = getKey(); + const iv = crypto.randomBytes(ivLength); + const salt = crypto.randomBytes(saltLength); + + const derivedKey = crypto.pbkdf2Sync(key, salt, iterations, keyLength, 'sha256'); + const cipher = crypto.createCipheriv(algorithm, derivedKey, iv); + + const data = JSON.stringify({ email, password }); + const encrypted = Buffer.concat([ + cipher.update(data, 'utf8'), + cipher.final() + ]); + + const tag = cipher.getAuthTag(); + + // Combine salt, iv, tag, and encrypted data + const combined = Buffer.concat([salt, iv, tag, encrypted]); + + return combined.toString('base64'); + } catch (error) { + throw new Error('Failed to encrypt credentials'); + } +} + +export function decryptCredentials(encryptedData: string): { email: string; password: string } { + try { + const key = getKey(); + const combined = Buffer.from(encryptedData, 'base64'); + + // Extract components + const salt = combined.slice(0, saltLength); + const iv = combined.slice(saltLength, saltLength + ivLength); + const tag = combined.slice(saltLength + ivLength, saltLength + ivLength + tagLength); + const encrypted = combined.slice(saltLength + ivLength + tagLength); + + const derivedKey = crypto.pbkdf2Sync(key, salt, iterations, keyLength, 'sha256'); + const decipher = crypto.createDecipheriv(algorithm, derivedKey, iv); + decipher.setAuthTag(tag); + + const decrypted = Buffer.concat([ + decipher.update(encrypted), + decipher.final() + ]); + + return JSON.parse(decrypted.toString('utf8')); + } catch (error) { + throw new Error('Failed to decrypt credentials'); + } +} + +// In-memory session storage for credentials (cleared on server restart) +const credentialCache = new Map