Real email inboxes

An inbox now has a type, chosen when the user creates it:

One inbox takes one type only. The type can't be changed after creation. Every existing inbox is "smtp", and nothing about it changes.

A real email inbox gets its own domain and one random email id:

Domain:          mxw2in4jeq.zunoyinbox.comFirst email id:  k3x9a7mp@mxw2in4jeq.zunoyinbox.com

The user can add more email ids at that domain, for example rasheed@mxw2in4jeq.zunoyinbox.com. A catch-all setting, off by default, accepts any email id at the domain.

All paths below are under /api/v1/zsb/workspace, with the same auth as the other inbox calls.

Create

POST /{workspaceId}/inbox is the same call as today, with one new field:

{ "name": "Signup tests", "inboxType": "inbound" }

• Leave inboxType out, or send "smtp", to create a fake SMTP inbox. That is today's behaviour, so the current create screen keeps working unchanged.
• An inbox created over the plan's inbox limit is created with status "stop", as today, and refuses mail until it is started.

Inbox fields

Inbox details (GET /{workspaceId}/inbox?id=10) and the create response have these fields:

{  "id": 10,  "name": "Signup tests",  "inboxType": "inbound",  "inboundDomain": "mxw2in4jeq.zunoyinbox.com",  "receivingAddress": "k3x9a7mp@mxw2in4jeq.zunoyinbox.com",  "inboundAliases": ["k3x9a7mp", "rasheed"],  "inboundCatchAll": false,  "userName": "",  "password": ""}

• inboundAliases are the email ids: the parts before the @. The full address is <alias>@<inboundDomain>.
• receivingAddress is the first email id as a full address.
• userName and password are always empty for a real email inbox, because it refuses SMTP login.
• For an "smtp" inbox, the inbound fields are empty ("", [], false), and userName and password are filled as today.

The inbox list (GET /{workspaceId}/inbox/list) has inboxType on every item, which is enough to show a "Real email" badge. Its other inbound fields are empty, so read them from inbox details.

Manage a rea

inbox/reset/receivingAddress{ "id": 10 }

• Gives the inbox a new random domain. Use it when the old domain leaked or gets spam.
• The email ids stay the same and move to the new domain.
• Mail to the old domain is refused from then on.

Errors

Errors come back as HTTP 400 with { "code": <number>, "msg": "..." }.

UI

Create inbox

Ask for the type, for example as two cards:

• Fake SMTP inbox (the default): "Catch the emails your app sends, using SMTP credentials."
• Real email inbox: "Get a real address and receive email from any service."

Real email inbox page

Show these in place of the SMTP credentials:

• Domain: inboundDomain, with a copy button and a New domain action. Ask for confirmation first: "Mail to the old domain will stop being received."
• Email ids:
• One row per alias, showing the full address with copy and remove buttons.
• Hide the remove button when only one is left.
• An "Add email id" input with @<inboundDomain> shown next to it.
• Settings: an "Allow any email id at this domain" toggle, bound to inboundCatchAll and off by default.
• Help text: "Send email from any service to these addresses and it appears here. id+anything@... also arrives, to tell tests apart."
• Stopped inbox: show that mail to its addresses is rejected while the inbox is stopped.

Hide these on a real email inbox, because they do nothing there:

• SMTP credentials and REST API key: a real email inbox refuses SMTP login and the REST API.
• Security tab (allowed or blocked recipients and domains, IP lists): these rules describe what an app sends, so they don't apply to real mail.
• Auto-forward rules: real mail is never auto-forwarded. Manually forwarding a single message still works.

Messages, read and unread, folders, categories, search and chaos settings work the same as for any inbox.

Fake SMTP inbox page

Unchanged.