- 两阶段接收:POST /internal/email/authorize(accept/reject/temporary_error)+ POST /internal/email/ingest(raw MIME 直传) - Worker-Console 协议:Authorization: WmailHub-Worker + timestamp/nonce/body-hash/HMAC,nonce 防重放,凭据撤销即时生效 - 数据模型:nodes/node_credentials -> cloudflare_accounts/worker_credentials(迁移 0003),emails/domains 归属 account_id - 接入流程 Connect Cloudflare Account:OAuth 自动同步域名 + 部署账号级 Email Worker + 签发 Worker 凭据;rotate 自动重部署 - 动态邮箱:创建/删除/禁用下一封邮件立即生效;拒绝码 DOMAIN_*/MAILBOX_*;超时/5xx 不伪装成邮箱不存在 - 删除 node/ 目录、旧 /api/internal/nodes 协议、ingress/enrollment 概念;dev.ts 简化为 console + email worker 双进程 - 前端:账号页 Email Worker/凭据管理,设置窗口移除默认 Ingress,仪表盘/文案同步;版本 2.0.0 - 测试 62 项全过(新增 authorize 决策矩阵 + Worker 两阶段临时错误语义);本机虚拟 E2E 12 场景全通 - docs 00-10 同步改写;README 更新
33 lines
1.2 KiB
TypeScript
33 lines
1.2 KiB
TypeScript
/** E2E 临时接收器:18790,打印签名/Authorization 校验结果 */
|
|
const KEY = "wmh_e2e_key_12345";
|
|
Bun.serve({
|
|
port: 18790,
|
|
async fetch(req) {
|
|
if (req.method === "GET" && new URL(req.url).pathname === "/__stats") {
|
|
return Response.json({ ok: true, note: "see stdout for deliveries" });
|
|
}
|
|
if (req.method !== "POST" || new URL(req.url).pathname !== "/hook") {
|
|
return Response.json({ error: "not found" }, { status: 404 });
|
|
}
|
|
const body = await req.text();
|
|
const ts = req.headers.get("X-WmailHub-Timestamp") ?? "";
|
|
const sig = req.headers.get("X-WmailHub-Signature") ?? "";
|
|
const { hmacSha256Hex } = await import("../../shared/src/index.ts");
|
|
const expect = await hmacSha256Hex(KEY, `${ts}.${body}`);
|
|
const payload = JSON.parse(body) as Record<string, unknown>;
|
|
console.log(
|
|
JSON.stringify({
|
|
got: "webhook",
|
|
auth: req.headers.get("Authorization"),
|
|
signature_valid: sig === expect,
|
|
event: payload.event,
|
|
subject: payload.subject,
|
|
mailbox: payload.mailbox,
|
|
custom_header: req.headers.get("X-Custom"),
|
|
}),
|
|
);
|
|
return Response.json({ ok: true });
|
|
},
|
|
});
|
|
console.log("receiver on :18790");
|