036dd8a788
* `PROTOCOL`: can be smtp, smtps, smtp+startls, smtp+unix, sendmail, dummy * `SMTP_ADDR`: domain for SMTP, or path to unix socket * `SMTP_PORT`: port for SMTP; defaults to 25 for `smtp`, 465 for `smtps`, and 587 for `smtp+startls` * `ENABLE_HELO`, `HELO_HOSTNAME`: reverse `DISABLE_HELO` to `ENABLE_HELO`; default to false + system hostname * `FORCE_TRUST_SERVER_CERT`: replace the unclear `SKIP_VERIFY` * `CLIENT_CERT_FILE`, `CLIENT_KEY_FILE`, `USE_CLIENT_CERT`: clarify client certificates here Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
108 lines
2.6 KiB
Go
108 lines
2.6 KiB
Go
// Copyright 2021 The Gitea Authors. All rights reserved.
|
|
// Use of this source code is governed by a MIT-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package smtp
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"errors"
|
|
"fmt"
|
|
"net"
|
|
"net/smtp"
|
|
"os"
|
|
"strconv"
|
|
)
|
|
|
|
// _________ __________________________
|
|
// / _____/ / \__ ___/\______ \
|
|
// \_____ \ / \ / \| | | ___/
|
|
// / \/ Y \ | | |
|
|
// /_______ /\____|__ /____| |____|
|
|
// \/ \/
|
|
|
|
type loginAuthenticator struct {
|
|
username, password string
|
|
}
|
|
|
|
func (auth *loginAuthenticator) Start(server *smtp.ServerInfo) (string, []byte, error) {
|
|
return "LOGIN", []byte(auth.username), nil
|
|
}
|
|
|
|
func (auth *loginAuthenticator) Next(fromServer []byte, more bool) ([]byte, error) {
|
|
if more {
|
|
switch string(fromServer) {
|
|
case "Username:":
|
|
return []byte(auth.username), nil
|
|
case "Password:":
|
|
return []byte(auth.password), nil
|
|
}
|
|
}
|
|
return nil, nil
|
|
}
|
|
|
|
// SMTP authentication type names.
|
|
const (
|
|
PlainAuthentication = "PLAIN"
|
|
LoginAuthentication = "LOGIN"
|
|
CRAMMD5Authentication = "CRAM-MD5"
|
|
)
|
|
|
|
// Authenticators contains available SMTP authentication type names.
|
|
var Authenticators = []string{PlainAuthentication, LoginAuthentication, CRAMMD5Authentication}
|
|
|
|
// ErrUnsupportedLoginType login source is unknown error
|
|
var ErrUnsupportedLoginType = errors.New("Login source is unknown")
|
|
|
|
// Authenticate performs an SMTP authentication.
|
|
func Authenticate(a smtp.Auth, source *Source) error {
|
|
tlsConfig := &tls.Config{
|
|
InsecureSkipVerify: source.SkipVerify,
|
|
ServerName: source.Addr,
|
|
}
|
|
|
|
conn, err := net.Dial("tcp", net.JoinHostPort(source.Addr, strconv.Itoa(source.Port)))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer conn.Close()
|
|
|
|
if source.UseTLS() {
|
|
conn = tls.Client(conn, tlsConfig)
|
|
}
|
|
|
|
client, err := smtp.NewClient(conn, source.Addr)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create NewClient: %w", err)
|
|
}
|
|
defer client.Close()
|
|
|
|
if !source.DisableHelo {
|
|
hostname := source.HeloHostname
|
|
if len(hostname) == 0 {
|
|
hostname, err = os.Hostname()
|
|
if err != nil {
|
|
return fmt.Errorf("failed to find Hostname: %w", err)
|
|
}
|
|
}
|
|
|
|
if err = client.Hello(hostname); err != nil {
|
|
return fmt.Errorf("failed to send Helo: %w", err)
|
|
}
|
|
}
|
|
|
|
// If not using SMTPS, always use STARTTLS if available
|
|
hasStartTLS, _ := client.Extension("STARTTLS")
|
|
if !source.UseTLS() && hasStartTLS {
|
|
if err = client.StartTLS(tlsConfig); err != nil {
|
|
return fmt.Errorf("failed to start StartTLS: %v", err)
|
|
}
|
|
}
|
|
|
|
if ok, _ := client.Extension("AUTH"); ok {
|
|
return client.Auth(a)
|
|
}
|
|
|
|
return ErrUnsupportedLoginType
|
|
}
|