Public mail endpoints – attachment token and unsubscribe
Token download of attachments above the size cap, verification of the signed unsubscribe link and the block list, and the mail sending background entry points.
Endpoints
| Endpoint | Behaviour |
|---|---|
mail/download | dlbtmail->resolveLinkToken(token) (exists, not expired, not revoked) → doc_id; document/document::getDocById() (status=1, no binned document); dlbtdocstore->fetch() → download as attachment; the temporary file is deleted in a finally block. Every error gives the same neutral 404. |
mail/unsubscribe | parameters e (e-mail), c (client), s (scope, default newsletter), t (signed token); after verifyUnsubscribe() blockAddress(email, scope, client, 'user', 'unsubscribe link'). The same neutral page on success and failure; invalid attempts are logged. |
mail/batch background entry points | processForCronqueue, processMessageForCronqueue, processSweepForCronqueue — called by the mail sending background jobs. |
Permissions
Both public endpoints work without sign-in or function permission; protection comes from the token or the signature. The neutral response prevents the endpoint from revealing whether an address or document exists.