File size: 3,610 Bytes
97ee7cb | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 | import { isValid as mailcheckerIsValid } from "mailchecker";
// Free / consumer email providers. A "corporate" domain is, by definition, NOT
// one of these. Kept as the single convex-side source of truth for the
// business-seat invite gate (isCorporateDomain below).
//
// The set is intentionally a copy of the list the enterprise-contact edge
// handler already enforces (`server/worldmonitor/leads/v1/submit-contact.ts`,
// FREE_EMAIL_DOMAINS). The two are NOT wired to a single import on purpose:
// that handler is bundled for the edge/gateway (esbuild via
// scripts/build-sidecar-sebuf.mjs) and must NOT pull in `mailchecker`'s ~1MB
// disposable-domain list, which this module depends on. See the U1 report note.
export const FREE_EMAIL_DOMAINS = new Set<string>([
"gmail.com", "googlemail.com", "yahoo.com", "yahoo.fr", "yahoo.co.uk", "yahoo.co.jp",
"hotmail.com", "hotmail.fr", "hotmail.co.uk", "outlook.com", "outlook.fr",
"live.com", "live.fr", "msn.com", "aol.com", "icloud.com", "me.com", "mac.com",
"protonmail.com", "proton.me", "mail.com", "zoho.com", "yandex.com", "yandex.ru",
"gmx.com", "gmx.net", "gmx.de", "web.de", "mail.ru", "inbox.com",
"fastmail.com", "tutanota.com", "tuta.io", "hey.com",
"qq.com", "163.com", "126.com", "sina.com", "foxmail.com",
"rediffmail.com", "ymail.com", "rocketmail.com",
"wanadoo.fr", "free.fr", "laposte.net", "orange.fr", "sfr.fr",
"t-online.de", "libero.it", "virgilio.it",
]);
/**
* Return the lowercased domain part of an email address, or `null` when the
* address is malformed. "Malformed" here means: not a string, no `@`, an empty
* local part, more than one `@`, an empty domain, or whitespace in the domain.
* Does NOT require a dot in the domain — that is only enforced by
* {@link isCorporateDomain}.
*/
export function extractDomain(email: string): string | null {
if (typeof email !== "string") return null;
const trimmed = email.trim();
const at = trimmed.indexOf("@");
// `at <= 0` rejects both "no @" (-1) and an empty local part ("@b.com" -> 0).
if (at <= 0) return null;
// Reject a second `@` — "a@b@c" is not a single address.
if (trimmed.indexOf("@", at + 1) !== -1) return null;
const domain = trimmed.slice(at + 1).toLowerCase();
if (domain.length === 0) return null;
if (/\s/.test(domain)) return null;
return domain;
}
/**
* Case-insensitive equality of the two addresses' domains. Returns `false` if
* either address is malformed (no domain to compare).
*/
export function sameDomain(a: string, b: string): boolean {
const da = extractDomain(a);
const db = extractDomain(b);
return da !== null && db !== null && da === db;
}
/**
* True only when `email` is well-formed AND its domain is a real corporate
* domain: not a free/consumer provider, not disposable/temporary, and it
* contains a dot. This is the gate that makes "same company email" mean a
* company — used to decide whether a Business owner may invite teammates and
* whether an invitee's address is acceptable.
*/
export function isCorporateDomain(email: string): boolean {
const domain = extractDomain(email);
if (domain === null) return false;
// A corporate domain must have a TLD (a dot). Bare hostnames ("a@b") fail.
if (!domain.includes(".")) return false;
// Free/consumer provider -> not corporate.
if (FREE_EMAIL_DOMAINS.has(domain)) return false;
// Disposable / throwaway (or otherwise invalid) -> not corporate.
// mailchecker.isValid() returns false for disposable and malformed addresses.
if (!mailcheckerIsValid(email.trim())) return false;
return true;
}
|