SMTP submission: send as a shared mailbox with send-as #199

Merged

jcoffey-dev merged 1 commits from feat/smtp-send-as-delegation into main

2026-10-15 13:30:16 +00:00

Author	SHA1	Message	Date
jcoffey-dev	19108441b8	SMTP submission: send as a shared mailbox with send-as ci / fork-checks (pull_request) Skipped Details ci / build (pull_request) Skipped Details github/ci (branch) GitHub Actions Details ci / github (pull_request) Successful in 9m5s Details A delegate allowed to send as a shared mailbox (or a locked account handed to it) could do so only through JMAP; over SMTP the sender check knew only the login's own addresses and masks, so a service signed in as a person got 501 5.5.4 for the mailbox's address. - MAIL FROM also accepts an address whose owner the login holds a current delegation with sendAs into (exact address, no catch-all). - MA-S3 over SMTP: a send as a shared mailbox is refused at DATA when a From or Reply-To address isn't the mailbox's own, as JMAP refuses it. - MA-D0a / AL-9: a queued message sent as another account is audited (QueuedMessage target, "Sent as X, from <login>"); a locked account's delegate gets the AL-9 record. SMTP sends as a group, unrecorded before, are recorded the same way. - The SMTP session keeps the signed-in AccessToken for this. Tests: account_lock_tests' shared mailbox part sends as support@ over SMTP (delivered, audited), is refused a foreign Reply-To, and a desk without sendAs still gets 501.	2026-10-14 19:23:38 -07:00

Author

SHA1

Message

Date

jcoffey-dev

19108441b8

SMTP submission: send as a shared mailbox with send-as

ci / fork-checks (pull_request) Skipped

Details

ci / build (pull_request) Skipped

Details

github/ci (branch) GitHub Actions

Details

ci / github (pull_request) Successful in 9m5s

Details

A delegate allowed to send as a shared mailbox (or a locked account
handed to it) could do so only through JMAP; over SMTP the sender check
knew only the login's own addresses and masks, so a service signed in
as a person got 501 5.5.4 for the mailbox's address.

- MAIL FROM also accepts an address whose owner the login holds a
  current delegation with sendAs into (exact address, no catch-all).
- MA-S3 over SMTP: a send as a shared mailbox is refused at DATA when a
  From or Reply-To address isn't the mailbox's own, as JMAP refuses it.
- MA-D0a / AL-9: a queued message sent as another account is audited
  (QueuedMessage target, "Sent as X, from <login>"); a locked account's
  delegate gets the AL-9 record. SMTP sends as a group, unrecorded
  before, are recorded the same way.
- The SMTP session keeps the signed-in AccessToken for this.

Tests: account_lock_tests' shared mailbox part sends as support@ over
SMTP (delivered, audited), is refused a foreign Reply-To, and a desk
without sendAs still gets 501.

2026-10-14 19:23:38 -07:00