import nodemailer from 'nodemailer' interface ContactBody { name: string countryCode?: string phone?: string email: string subject: string message: string } const SUBJECT_LABELS: Record = { programs: 'Learn About Programs', partner: 'Partnership', volunteer: 'Volunteering', other: 'Other', } function escapeHtml(value: string): string { return value .replace(/&/g, '&') .replace(//g, '>') .replace(/"/g, '"') } function renderEmailHtml(name: string, subjectLabel: string, phone: string, message: string): string { const safeName = escapeHtml(name) const safeSubject = escapeHtml(subjectLabel) const safePhone = escapeHtml(phone) const safeMessage = escapeHtml(message).replace(/\n/g, '
') const year = new Date().getFullYear() return `

Hi ${safeName},

Thank you for contacting DLEAG (Developing Leaders through Equity in Athletics for Girls)! Your message has been received, and we truly appreciate your interest in supporting equal opportunities for girls in sports.

Here's a copy of your message for reference:

SUBJECT: ${safeSubject}

PHONE: ${safePhone}

MESSAGE: ${safeMessage}

We'll be in touch soon! In the meantime, feel free to explore more about what we do and how you can support girls at https://www.dleag.org/

With gratitude,

The DLEAG Team

501(c)(3) Nonprofit Organization | EIN: 99-3346999

This email was sent from https://www.dleag.org/

` } export default defineEventHandler(async (event) => { const body = await readBody(event) if (!body?.name || !body.email || !body.subject || !body.message) { throw createError({ statusCode: 400, statusMessage: 'Missing required fields' }) } const config = useRuntimeConfig() const transporter = nodemailer.createTransport({ host: config.smtpHost, port: Number(config.smtpPort), secure: String(config.smtpSecure) === 'true', auth: { user: config.smtpUser, pass: config.smtpPass }, tls: String(config.smtpAllowInsecureTls) === 'true' ? { rejectUnauthorized: false } : undefined, }) const subjectLabel = SUBJECT_LABELS[body.subject] ?? body.subject const phone = body.phone ? `${body.countryCode ?? ''} ${body.phone}`.trim() : 'N/A' const bcc = config.contactBccEmail ?.split(',') .map((address: string) => address.trim()) .filter(Boolean) await transporter.sendMail({ from: { address: config.contactFromEmail, name: 'DLEAG Notifications' }, to: body.email, bcc: bcc?.length ? bcc : undefined, replyTo: config.contactFromEmail, subject: "Thanks for contacting DLEAG – We'll be in touch soon!", text: 'To view the message, please use an HTML compatible email viewer!', html: renderEmailHtml(body.name, subjectLabel, phone, body.message), }) return { ok: true } })