SMAM (short for Send Me A Mail) is a free (as in freedom) contact form embedding software.

server.js 6.7KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238
  1. var pug = require('pug');
  2. var nodemailer = require('nodemailer');
  3. var crypto = require('crypto');
  4. var settings = require('./settings');
  5. // Web server
  6. var bodyParser = require('body-parser');
  7. var express = require('express');
  8. var app = express();
  9. // Logging
  10. var printit = require('printit');
  11. var log = printit({
  12. prefix: 'SMAM',
  13. date: true
  14. });
  15. // nodemailer initial configuration
  16. var transporter = nodemailer.createTransport(settings.mailserver);
  17. // Verification tokens
  18. var tokens = {};
  19. // Serve static (JS + HTML) files
  20. app.use(express.static('front'));
  21. // Body parsing
  22. app.use(bodyParser.urlencoded({ extended: true }));
  23. app.use(bodyParser.json());
  24. // Allow cross-origin requests. Wildcard for now, we'll see if we can improve
  25. // that.
  26. app.all('/*', function(req, res, next) {
  27. res.header('Access-Control-Allow-Origin', '*');
  28. next();
  29. });
  30. // A request on /register generates a token and store it, along the user's
  31. // address, on the tokens object
  32. app.get('/register', function(req, res, next) {
  33. // Get IP from express
  34. let ip = req.headers['x-forwarded-for'] || req.connection.remoteAddress;
  35. if(tokens[ip] === undefined) {
  36. tokens[ip] = [];
  37. }
  38. // Generate token
  39. crypto.randomBytes(10, (err, buf) => {
  40. let token = buf.toString('hex');
  41. // Store and send the token
  42. tokens[ip].push({
  43. token: token,
  44. // A token expires after 12h
  45. expire: new Date().getTime() + 12 * 3600 * 1000
  46. });
  47. res.status(200).send(token);
  48. });
  49. });
  50. // A request on /send with user input = mail to be sent
  51. app.post('/send', function(req, res, next) {
  52. if(!checkBody(req.body)) {
  53. return res.status(400).send();
  54. }
  55. let ip = req.headers['x-forwarded-for'] || req.connection.remoteAddress;
  56. if(!checkToken(ip, req.body.token)) {
  57. return res.status(403).send();
  58. }
  59. // Count the failures
  60. let status = {
  61. failed: 0,
  62. total: settings.recipients.length
  63. };
  64. // params will be used as:
  65. // - values for html generation from the pug template
  66. // - parameters for sending the mail(s)
  67. let params = {
  68. subject: req.body.subj,
  69. from: req.body.name + ' <' + req.body.addr + '>',
  70. html: req.body.text
  71. };
  72. // Replacing the mail's content with HTML from the pug template
  73. // Commenting the line below will bypass the generation and only user the
  74. // text entered by the user
  75. params.html = pug.renderFile('template.pug', params);
  76. log.info('Sending message from ' + params.from);
  77. // Send the email to all users
  78. sendMails(params, function(err, infos) {
  79. if(err) {
  80. log.error(err);
  81. }
  82. logStatus(infos);
  83. }, function() {
  84. if(status.failed === status.total) {
  85. res.status(500).send();
  86. } else {
  87. res.status(200).send();
  88. }
  89. })
  90. });
  91. // Use either the default port or the one chosen by the user (PORT env variable)
  92. var port = process.env.PORT || 1970;
  93. // Same for the host (using the HOST env variable)
  94. var host = process.env.HOST || '0.0.0.0';
  95. // Start the server
  96. app.listen(port, host, function() {
  97. log.info('Server started on ' + host + ':' + port);
  98. });
  99. // Run the clean every hour
  100. var tokensChecks = setTimeout(cleanTokens, 3600 * 1000);
  101. // Send mails to the recipients specified in the JSON settings file
  102. // content: object containing mail params
  103. // {
  104. // subject: String
  105. // from: String (following RFC 1036 (https://tools.ietf.org/html/rfc1036#section-2.1.1))
  106. // html: String
  107. // }
  108. // update(next, infos): Called each time a mail is sent with the infos provided
  109. // by nodemailer
  110. // done(): Called once each mail has been sent
  111. function sendMails(params, update, done) {
  112. let mails = settings.recipients.map((recipient) => {
  113. // Promise for each recipient to send each mail asynchronously
  114. return new Promise((sent) => {
  115. params.to = recipient;
  116. // Send the email
  117. transporter.sendMail(params, (err, infos) => {
  118. if(err) {
  119. return update(err, recipient);
  120. }
  121. update(null, infos);
  122. // Promise callback
  123. sent();
  124. });
  125. });
  126. });
  127. // Run all the promises (= send all the mails)
  128. Promise.all(mails).then(done);
  129. }
  130. // Produces log from the infos provided by nodemailer
  131. // infos: infos provided by nodemailer
  132. // return: nothing
  133. function logStatus(infos) {
  134. if(infos.accepted.length !== 0) {
  135. log.info('Message sent to ' + infos.accepted[0]);
  136. }
  137. if(infos.rejected.length !== 0) {
  138. status.failed++;
  139. log.info('Message failed to send to ' + infos.rejected[0]);
  140. }
  141. }
  142. // Checks if the request's sender has been registered (and unregister it if not)
  143. // ip: sender's IP address
  144. // token: token used by the sender
  145. // return: true if the user was registered, false else
  146. function checkToken(ip, token) {
  147. let verified = false;
  148. // Check if there's at least one token for this IP
  149. if(tokens[ip] !== undefined) {
  150. if(tokens[ip].length !== 0) {
  151. // There's at least one element for this IP, let's check the tokens
  152. for(var i = 0; i < tokens[ip].length; i++) {
  153. if(!tokens[ip][i].token.localeCompare(token)) {
  154. // We found the right token
  155. verified = true;
  156. // Removing the token
  157. tokens[ip].pop(tokens[ip][i]);
  158. break;
  159. }
  160. }
  161. }
  162. }
  163. if(!verified) {
  164. log.warn(ip + ' just tried to send a message with an invalid token');
  165. }
  166. return verified;
  167. }
  168. // Checks if all the required fields are in the request body
  169. // body: body taken from express's request object
  170. // return: true if the body is valid, false else
  171. function checkBody(body) {
  172. let valid = false;
  173. if(body.token !== undefined && body.subj !== undefined
  174. && body.name !== undefined && body.addr !== undefined
  175. && body.text !== undefined) {
  176. valid = true;
  177. }
  178. return valid;
  179. }
  180. // Checks the tokens object to see if no token has expired
  181. // return: nothing
  182. function cleanTokens() {
  183. // Get current time for comparison
  184. let now = new Date().getTime();
  185. for(let ip in tokens) { // Check for each IP in the object
  186. for(let token of tokens[ip]) { // Check for each token of an IP
  187. if(token.expire < now) { // Token has expired
  188. tokens[ip].pop(token);
  189. }
  190. }
  191. if(tokens[ip].length === 0) { // No more element for this IP
  192. delete tokens[ip];
  193. }
  194. }
  195. log.info('Cleared expired tokens');
  196. }