discourse/app/controllers/webhooks_controller.rb

149 lines
4.4 KiB
Ruby
Raw Normal View History

2016-05-30 11:11:17 -04:00
require "openssl"
class WebhooksController < ActionController::Base
def mailgun
# can't verify data without an API key
return mailgun_failure if SiteSetting.mailgun_api_key.blank?
# token is a random string of 50 characters
2016-06-08 18:33:13 -04:00
token = params["token"]
2016-05-30 11:11:17 -04:00
return mailgun_failure if token.blank? || token.size != 50
# prevent replay attack
key = "mailgun_token_#{token}"
return mailgun_failure unless $redis.setnx(key, 1)
$redis.expire(key, 10.minutes)
2016-05-30 11:11:17 -04:00
# ensure timestamp isn't too far from current time
2016-06-08 18:33:13 -04:00
timestamp = params["timestamp"]
return mailgun_failure if (Time.at(timestamp.to_i) - Time.now).abs > 24.hours.to_i
2016-05-30 11:11:17 -04:00
# check the signature
return mailgun_failure unless mailgun_verify(timestamp, token, params["signature"])
2016-06-08 18:33:13 -04:00
event = params["event"]
message_id = params["Message-Id"].tr("<>", "")
to_address = params["recipient"]
2016-05-30 11:11:17 -04:00
# only handle soft bounces, because hard bounces are also handled
# by the "dropped" event and we don't want to increase bounce score twice
# for the same message
if event == "bounced".freeze && params["error"]["4."]
process_bounce(message_id, to_address, SiteSetting.soft_bounce_score)
2016-05-30 11:11:17 -04:00
elsif event == "dropped".freeze
process_bounce(message_id, to_address, SiteSetting.hard_bounce_score)
2016-05-30 11:11:17 -04:00
end
mailgun_success
2016-05-30 11:11:17 -04:00
end
2016-06-01 15:48:06 -04:00
def sendgrid
2016-06-06 13:47:45 -04:00
events = params["_json"] || [params]
events.each do |event|
message_id = (event["smtp-id"] || "").tr("<>", "")
to_address = event["email"]
2016-06-01 15:48:06 -04:00
if event["event"] == "bounce".freeze
if event["status"]["4."]
process_bounce(message_id, to_address, SiteSetting.soft_bounce_score)
2016-06-01 15:48:06 -04:00
else
process_bounce(message_id, to_address, SiteSetting.hard_bounce_score)
2016-06-01 15:48:06 -04:00
end
elsif event["event"] == "dropped".freeze
process_bounce(message_id, to_address, SiteSetting.hard_bounce_score)
2016-06-01 15:48:06 -04:00
end
end
render body: nil, status: 200
2016-06-01 15:48:06 -04:00
end
2016-06-06 13:47:45 -04:00
def mailjet
events = params["_json"] || [params]
events.each do |event|
message_id = event["CustomID"]
to_address = event["email"]
2016-06-06 13:47:45 -04:00
if event["event"] == "bounce".freeze
if event["hard_bounce"]
process_bounce(message_id, to_address, SiteSetting.hard_bounce_score)
2016-06-06 13:47:45 -04:00
else
process_bounce(message_id, to_address, SiteSetting.soft_bounce_score)
2016-06-06 13:47:45 -04:00
end
end
end
render body: nil, status: 200
2016-06-06 13:47:45 -04:00
end
2016-06-13 06:31:01 -04:00
def mandrill
events = params["mandrill_events"]
events.each do |event|
message_id = event.dig("msg", "metadata", "message_id")
to_address = event.dig("msg", "email")
2016-06-13 06:31:01 -04:00
case event["event"]
when "hard_bounce"
process_bounce(message_id, to_address, SiteSetting.hard_bounce_score)
2016-06-13 06:31:01 -04:00
when "soft_bounce"
process_bounce(message_id, to_address, SiteSetting.soft_bounce_score)
2016-06-13 06:31:01 -04:00
end
end
render body: nil, status: 200
2016-06-13 06:31:01 -04:00
end
2016-09-27 01:13:34 -04:00
def sparkpost
events = params["_json"] || [params]
events.each do |event|
message_event = event.dig("msys", "message_event")
next unless message_event
message_id = message_event.dig("rcpt_meta", "message_id")
to_address = message_event["rcpt_to"]
bounce_class = message_event["bounce_class"]
next unless bounce_class
2016-09-27 01:13:34 -04:00
bounce_class = bounce_class.to_i
# bounce class definitions: https://support.sparkpost.com/customer/portal/articles/1929896
if bounce_class < 80
if bounce_class == 10 || bounce_class == 25 || bounce_class == 30
process_bounce(message_id, to_address, SiteSetting.hard_bounce_score)
2016-09-27 01:13:34 -04:00
else
process_bounce(message_id, to_address, SiteSetting.soft_bounce_score)
2016-09-27 01:13:34 -04:00
end
end
end
render body: nil, status: 200
2016-09-27 01:13:34 -04:00
end
2016-05-30 11:11:17 -04:00
private
2018-06-07 01:28:18 -04:00
def mailgun_failure
render body: nil, status: 406
end
2016-05-30 11:11:17 -04:00
2018-06-07 01:28:18 -04:00
def mailgun_success
render body: nil, status: 200
end
2016-05-30 11:11:17 -04:00
2018-06-07 01:28:18 -04:00
def mailgun_verify(timestamp, token, signature)
digest = OpenSSL::Digest::SHA256.new
data = "#{timestamp}#{token}"
signature == OpenSSL::HMAC.hexdigest(digest, SiteSetting.mailgun_api_key, data)
end
2016-05-30 11:11:17 -04:00
2018-06-07 01:28:18 -04:00
def process_bounce(message_id, to_address, bounce_score)
return if message_id.blank? || to_address.blank?
2016-06-06 13:47:45 -04:00
2018-06-07 01:28:18 -04:00
email_log = EmailLog.find_by(message_id: message_id, to_address: to_address)
return if email_log.nil?
2016-06-06 13:47:45 -04:00
2018-06-07 01:28:18 -04:00
email_log.update_columns(bounced: true)
return if email_log.user.nil? || email_log.user.email.blank?
2018-06-07 01:28:18 -04:00
Email::Receiver.update_bounce_score(email_log.user.email, bounce_score)
end
2016-06-06 13:47:45 -04:00
2016-05-30 11:11:17 -04:00
end