import nodemailer from "nodemailer"; type SectorTestMailInput = { sectorName: string; recipients: string[]; }; function isValidEmail(value: string) { return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value); } function escapeHtml(value: string) { return value .replaceAll("&", "&") .replaceAll("<", "<") .replaceAll(">", ">") .replaceAll('"', """) .replaceAll("'", "'"); } function getAllowedRecipients() { return new Set( (process.env.SECTOR_MAIL_TEST_ALLOWED_RECIPIENTS ?? "") .split(/[;,]/) .map((email) => email.trim().toLowerCase()) .filter((email) => isValidEmail(email)), ); } function validateRecipients(recipients: string[]) { if (recipients.length === 0) { throw new Error("SECTOR_TEST_MAIL_NO_RECIPIENT"); } const allowedRecipients = getAllowedRecipients(); if (allowedRecipients.size === 0) { throw new Error("SECTOR_TEST_MAIL_EMPTY_ALLOWLIST"); } const normalizedRecipients = [ ...new Set( recipients.map((email) => email.trim().toLowerCase()), ), ]; const invalidRecipient = normalizedRecipients.find( (email) => !isValidEmail(email) || !allowedRecipients.has(email), ); if (invalidRecipient) { throw new Error( `SECTOR_TEST_MAIL_RECIPIENT_NOT_ALLOWED:${invalidRecipient}`, ); } return normalizedRecipients; } function buildSectorTestMail(sectorName: string) { const subject = `[TEST] RH Connect - Alertes secteur - ${sectorName}`; const formattedDate = new Intl.DateTimeFormat("fr-FR", { dateStyle: "full", timeStyle: "medium", timeZone: "Europe/Paris", }).format(new Date()); const html = ` ${escapeHtml(subject)}
TEST ANONYMISÉ — AUCUNE DONNÉE RH RÉELLE

Test des alertes par secteur

Secteur testé : ${escapeHtml(sectorName)}

Exemple d’alerte fictive

  • SALARIÉ TEST : document fictif à renouveler le 31/12/2030

Mail de test généré par RH Connect le ${escapeHtml(formattedDate)}. Aucun nom de salarié ni aucune donnée RH réelle n’ont été utilisés.

`; const text = [ "TEST ANONYMISÉ — AUCUNE DONNÉE RH RÉELLE", "", "Test des alertes par secteur", `Secteur testé : ${sectorName}`, "", "Exemple d’alerte fictive :", "SALARIÉ TEST : document fictif à renouveler le 31/12/2030", "", `Mail de test généré par RH Connect le ${formattedDate}.`, ].join("\n"); return { subject, html, text, }; } export async function sendAnonymizedSectorTestMail( input: SectorTestMailInput, ) { if ( process.env.SECTOR_MAIL_TEST_ENABLED?.toLowerCase() !== "true" ) { throw new Error("SECTOR_TEST_MAIL_DISABLED"); } const smtpUser = process.env.MAIL_TEST_SMTP_USER ?.trim() .toLowerCase(); const smtpAppPassword = process.env.MAIL_TEST_SMTP_APP_PASSWORD ?.replace(/\s+/g, "") .trim(); if (!smtpUser || !isValidEmail(smtpUser) || !smtpAppPassword) { throw new Error("SECTOR_TEST_MAIL_INVALID_SMTP_CONFIGURATION"); } const recipients = validateRecipients(input.recipients); const mail = buildSectorTestMail(input.sectorName); const transporter = nodemailer.createTransport({ host: "smtp.gmail.com", port: 465, secure: true, auth: { user: smtpUser, pass: smtpAppPassword, }, connectionTimeout: 15_000, greetingTimeout: 10_000, socketTimeout: 20_000, }); const result = await transporter.sendMail({ from: `"RH Connect - Test" <${smtpUser}>`, bcc: recipients, subject: mail.subject, text: mail.text, html: mail.html, disableFileAccess: true, disableUrlAccess: true, }); return { messageId: result.messageId, recipients, subject: mail.subject, accepted: result.accepted.map(String), rejected: result.rejected.map(String), sentAt: new Date().toISOString(), anonymized: true, }; }