Merge pull request #25 from Amsterdam/feature/whitelist-sender-emails

Feature/whitelist sender emails

services/email.js

@@ -7,6 +7,7 @@ const currencyFilter    = require('../nunjucks/currency');
 const limitTo           = require('../nunjucks/limitTo');
 const jsonFilter        = require('../nunjucks/json');
 const timestampFilter   = require('../nunjucks/timestamp');
+const { isWhitelistedEmail } = require('../utils/emailUtils');
 
 
 const formatTransporter = function ({ host, port, secure, auth }) {
@@ -73,6 +74,13 @@ exports.send = function ({subject, toName, toEmail, templateString, template, va
   fromEmail = fromEmail ? fromEmail : process.env.FROM_EMAIL;
   fromName = fromName ? fromName : process.env.FROM_NAME;
 
+  /**
+   * If from e-mail is not a whitelisted email, replace it with a default email
+   */
+  if (!isWhitelistedEmail(fromEmail)) {
+    fromEmail = 'no-reply@amsterdam.nl';
+  }
+
   /**
    * Format Message object
    */

utils/emailUtils.js

@@ -0,0 +1,11 @@
+const whitelistedEmails = process.env.WHITELISTED_EMAILS 
+  ? process.env.WHITELISTED_EMAILS.split('\n').slice(0, -1) 
+  : [];
+
+function isWhitelistedEmail(from) {
+  return whitelistedEmails.some(whitelistedEmail => from.includes(whitelistedEmail));
+}
+
+module.exports = {
+  isWhitelistedEmail
+};