Internet-Draft JMAP Sieve September 2020
Murchison Expires 26 March 2021 [Page]
Workgroup:
JMAP
Internet-Draft:
draft-ietf-jmap-sieve-01
Published:
Intended Status:
Standards Track
Expires:
Author:
K. Murchison
Fastmail

JMAP for Sieve Scripts

Abstract

This document specifies a data model for managing Sieve scripts on a server using JMAP.

Open Issues

Status of This Memo

This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.

Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.

Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."

This Internet-Draft will expire on 26 March 2021.

Table of Contents

1. Introduction

JMAP ([RFC8620] - JSON Meta Application Protocol) is a generic protocol for synchronizing data, such as mail, calendars or contacts, between a client and a server. It is optimized for mobile and web environments, and aims to provide a consistent interface to different data types.

This specification defines a data model for managing Sieve [RFC5228] scripts on a server using JMAP. The data model is designed to allow a server to provide consistent access to the same scripts via ManageSieve [RFC5804] as well as JMAP, however the functionality offered over the two protocols may differ.

1.1. Notational Conventions

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here.

Type signatures, examples, and property descriptions in this document follow the conventions established in Section 1.1 of [RFC8620]. Data types defined in the core specification are also used in this document.

1.2. Terminology

The same terminology is used in this document as in the core JMAP specification, see [RFC8620], Section 1.6.

The term SieveScript (with this specific capitalization) is used to refer to the data type defined in this document and instances of those data types.

1.3. Addition to the Capabilities Object

The capabilities object is returned as part of the JMAP Session object; see [RFC8620], Section 2. This document defines one additional capability URI.

1.3.1. urn:ietf:params:jmap:sieve

This represents support for the SieveScript data type and associated API methods. The value of this property in the JMAP Session capabilities property is an empty object.

The value of this property in an account's accountCapabilities property is an object that MUST contain the following information on server capabilities:

  • supportsTest: Boolean

    If true, the server supports the SieveScript/test (Section 2.5) method.

  • maxNumberRedirects: UnsignedInt|null

    The maximum number of Sieve "redirect" actions a script can perform during a single evaluation (see [RFC5804], Section 1.7), or null for no limit.

  • maxNumberScripts: UnsignedInt|null

    The maximum number of Sieve scripts the server is willing to store for the user, or null for no limit.

  • maxSizeScript: UnsignedInt|null

    The maximum size (in octets) of a Sieve script the server is willing to store for the user, or null for no limit.

  • sieveExtensions: String[]

    A list of case-sensitive Sieve capability strings (as listed in Sieve "require" action [RFC5228], Section 3.2) indicating the extensions supported by the Sieve engine.

  • notificationMethods: String[]|null

    A list of URI schema parts [RFC3986] for notification methods supported by the Sieve "enotify" extension [RFC5435], or null if the extension is not supported by the Sieve engine.

  • externalLists: String[]|null

    A list of URI schema parts [RFC3986] for externally stored list types supported by the Sieve "extlists" extension [RFC6134], or null if the extension is not supported by the Sieve engine.

2. Sieve Scripts

A SieveScript object represents a single Sieve [RFC5228] script. A user may have multiple SieveScripts on the server, yet only one script may be used for filtering of incoming messages. This is the active script. Users may have zero or one active script. The SieveScript/set (Section 2.2) method described below is used for changing the active script or disabling Sieve processing.

A SieveScript object has the following properties:

Example (using the Imap4Flags [RFC5232] Extension):

{
  "id": "Sabc",
  "blobId": "Bxyz",
  "name": "example.siv",
  "content":
     "require [ \"imap4flags\" ];\r\nkeep :flags \"\\\\flagged\";",
  "isActive": false
}

2.1. SieveScript/get

This is a standard "/get" method as described in [RFC8620], Section 5.1. The ids argument may be null to fetch all at once.

This method provides similar functionality to the GETSCRIPT and LISTSCRIPTS commands in [RFC5804].

2.2. SieveScript/set

This is a standard "/set" method as described in [RFC8620], Section 5.3 but with the following additional request arguments, either of which may be omitted:

  • replaceOnCreate: Boolean (default: false)

    If false, any attempt to create a SieveScript having the same "name" property as an existing SieveScript MUST be rejected with a "scriptNameExists" SetError. If true, the existing SieveScript will be destroyed and the new SieveScript created as a single atomic action. The id of the replaced SieveScript MUST be reported in the "destroyed" argument in the response.

  • onSuccessActivateScript: Id|null

    The id of the SieveScript to activate if the create/update/destroy succeeds. (For references to SieveScript creations, this is equivalent to a creation-reference, so the id will be the creation id prefixed with a "#".) If null, the currently active script (if any) will be deactivated. If this argument is not present in the request, the currently active script (if any) will remain as such. The id of the activated acript MUST be reported in the "created" or "updated" argument in the response as appropriate. The id of the deactivated script, if any, MUST be reported in the "updated" argument in the response unless the script was also destroyed.

This method provides similar functionality to the PUTSCRIPT, DELETESCRIPT, RENAMESCRIPT, and SETACTIVE commands in [RFC5804].

When creating or updating a script, a client MUST include either a content or a blobId property. A request that includes neither or both properties MUST be rejected with an "invalidProperties" SetError. The server MUST check the script content for syntactic validity, which includes checking that all Sieve extensions mentioned in Sieve script "require" statement(s) are supported by the Sieve interpreter. (Note that if the Sieve interpreter supports the Sieve "ihave" extension [RFC5463], any unrecognized/unsupported extension mentioned in the "ihave" test MUST NOT cause the syntactic validation failure.) A script of zero length SHOULD be considered invalid. If the script content is invalid the request MUST be rejected with a "invalidScript" SetError.

Note that simply activating or deactivating a script without changing any script content is accomplished via a request containing an "onSuccessActivateScript" argument and null "create", "update", and "delete" arguments.

The following extra SetError types are defined:

For "create":

  • scriptNameExists:

    A SieveScript already exists with the given name property, and the "replaceOnCreate" argument was false. An existingId property of type Id MUST be included on the SetError object with the id of the existing SieveScript.

  • tooManyScripts:

    Creating the SieveScript would exceed the maxNumberScripts limit (see Section 1.3.1).

For "create" and "update":

  • invalidScript:

    The SieveScript violates the Sieve grammar [RFC5228] and/or one or more extensions mentioned in the script's "require" statement(s) are not supported by the Sieve interpreter. The description property on the SetError object SHOULD contain a specific error message giving the line number of the first error.

For "destroy":

  • scriptIsActive:

    The SieveScript is active and the "onSuccessActivateScript" argument was not present.

2.3. SieveScript/query

This is a standard "/query" method as described in [RFC8620], Section 5.5. A FilterCondition object has the following properties, any of which may be omitted:

  • name: String

    The SieveScript "name" property contains the given string.

  • isActive: Boolean

    The "isActive" property of the SieveScript must be identical to the value given to match the condition.

The following SieveScript properties MUST be supported for sorting:

2.4. SieveScript/validate

This method is used by the client to verify Sieve script validity without storing the script on the server.

The method provides similar functionality to the CHECKSCRIPT command in [RFC5804].

The SieveScript/validate method takes the following arguments:

  • accountId: Id

    The id of the account to use.

  • content: String

    The raw octets of the script [RFC5228].

  • blobId: Id (immutable)

    The id of the blob containing the raw octets of the script [RFC5228].

A client MUST include either a content or a blobId property. A request that includes neither or both properties MUST be rejected with an "invalidProperties" SetError. The content property, if used, MUST be encoded following the same procedure as for the content property in the SieveScript (Section 2) object. The server MUST check the script content for syntactic validity, which includes checking that all Sieve extensions mentioned in Sieve script "require" statement(s) are supported by the Sieve interpreter. (Note that if the Sieve interpreter supports the Sieve "ihave" extension [RFC5463], any unrecognized/unsupported extension mentioned in the "ihave" test MUST NOT cause the syntactic validation failure.)

The response has the following arguments:

  • accountId: Id

    The id of the account used for this call.

  • error: SetError|null

    A SetError object if the request or the script content invalid, or null if the script content is valid.

2.5. SieveScript/test

This method is used by the client to ask the Sieve interpreter to evaluate a Sieve script against a set of emails and report what actions would be performed for each.

The SieveScript/test method takes the following arguments:

  • accountId: Id

    The id of the account to use.

  • scriptBlobId: Id

    The id of the blob containing the SieveScript to test against.

  • emailBlobIds: Id[]

    The ids of the blobs containing the Emails [RFC8621] to test against.

  • envelope: Envelope|null

    Information that the Sieve interpreter should assume was present in the SMTP transaction that delivered the email when evaluating "envelope" tests. If null, all "envelope" tests MUST eveluate to false. See Section 7 of Email [RFC8621] for the contents of the Envelope object.

  • lastVacationResponse: Date|null

    The date-time at which the Sieve interpreter should assume that it last auto-replied to the sender of the email, or null if the Sieve interpreter should assume that it has not auto-replied to the sender.

The response has the following arguments:

  • accountId: Id

    The id of the account used for this call.

  • completed: Id[Action[]]|null

    A map of the blob id to a set of Action types for each Email successfully processed by the script, or null if none. The Action data type is a tuple, represented as a JSON array containing two elements:

    1. A String name of the Sieve action (e.g., "keep").

    2. A String[*] object containing named arguments for that action (e.g., ":flags" or "mailbox").

  • notCompleted: Id[SetError]|null

    A map of the blob id to a SetError object for each Email that was not successfully processed by the script, or null if none. A "serverFail" SetError (see Section 3.6.2 of [RFC8620]) MUST be used to indicate a Sieve interpreter run-time error.

The following additional errors may be returned instead of the "SieveScript/test" response:

  • "blobNotFound": The script referenced by the blob id could not be found.
  • "invalidScript": The referenced script is invalid (see Section 2.2).
  • "serverFail": The referenced script failed preparation to be executed for some other reason.

The name to use for each argument is a direct mapping of the argument names as given in the specification of each action. Tagged and optional arguments MUST use the name of the tag, minus the leading ":". Positional arguments MUST use the name of the argument inside of the angle brackets ("<" and ">") in the "Usage" line in the specification for the action.

The JSON data type to use for each argument value is a direct mapping from its Sieve data type, per the following table:

Table 1
Sieve Type JSON Type
Number Number
String String
String List String[]
no value Boolean (true)

Recommendations for constructing the list of arguments are as follows:

  • Tagged arguments SHOULD procede positional arguments.
  • Optional arguments in which the value is supplied by the Sieve interpreter SHOULD be included (e.g., ":from" and ":subject" arguments to the "vacation" [RFC5230] action).
  • Optional arguments in which the value is supplied by a Sieve variable SHOULD be included (e.g., "keep" or "fileinto" actions without an explicit ":flags" argument, but "imap4flags" [RFC5232] have been set on the internal variable).
  • Optional arguments in which the value is the specfied default MAY be omitted.
  • Tagged arguments that are only used to determine whether the action will be executed and have no impact on the result of the action MAY be omitted (e.g., ":days" and ":addresses" arguments to the vacation action).

2.5.1. Example

Assume that the following script has been uploaded and assigned blob id "B123".

require [ "imapflags", "editheader", "vacation", "fcc" ];
setflag "$SieveFiltered";
addheader :last "X-Sieve-Filtered" "yes";
vacation :days 3 :fcc "INBOX.Sent" :flags "\\Answered" text:
Gone fishing.
.
;

Assume that the following email has been uploaded and assigned blob id "B456".

From: "Some Example Sender" <example@example.net>
To: test@example.com
Subject: test email
Date: Wed, 23 Sep 2020 12:11:11 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"

This is a test email.

The following request executes the script against the email and provides envelope information for use by the "vacation" action.

{
  "using": [
    "urn:ietf:params:jmap:core",
    "urn:ietf:params:jmap:sieve",
    "urn:ietf:params:jmap:mail"
  ],
  "methodCalls": [
    [
      "SieveScript/test",
      {
        "scriptBlobId": "B123",
        "emailBlobIds": [
          "B456"
        ],
        "envelope": {
          "mailFrom": {
            "email": "example@example.net",
            "parameters": null
          },
          "rcptTo": [
            {
              "email": "test@example.com",
              "parameters": null
            }
          ]
        },
        "lastVacationResponse": null
      },
      "R1"
    ]
  ]
}

The following response lists the actions that would be performed by the script.

{
  "methodResponses": [
    [
      "SieveScript/test",
      {
        "accountId": "test",
        "completed": {
          "B456": [
            [
              "addheader",
              {
                "last": true,
                "field-name": "X-Sieve-Filtered",
                "value": "yes"
              }
            ],
            [
              "vacation",
              {
                "fcc": "INBOX.Sent",
                "flags": [
                  "\\answered"
                ],
                "subject": "Auto: test email",
                "from": "test@example.com",
                "reason": "Gone fishing."
              }
            ],
            [
              "keep",
              {
                "flags": [
                  "$SieveFiltered"
                ]
              }
            ]
          ]
        },
        "notCompleted": null
      },
      "R1"
    ]
  ],
  "sessionState": "0"
}

3. Security Considerations

All security considerations of JMAP [RFC8620] apply to this specification.

4. IANA Considerations

4.1. JMAP Capability Registration for "sieve"

IANA will register the "sieve" JMAP Capability as follows:

Capability Name: urn:ietf:params:jmap:sieve

Specification document: this document

Intended use: common

Change Controller: IETF

Security and privacy considerations: this document, Section 3

4.2. JMAP Error Codes Registry

The following sub-section register several new error codes in the JMAP Error Codes registry, as defined in [RFC8620].

4.2.1. scriptNameExists

JMAP Error Code: scriptNameExists

Intended use: common

Change controller: IETF

Reference: This document, Section 2.2

Description: The client tried to create a SieveScript with the same "name" property as an existing SieveScript and the "replaceOnCreate" argument was false. present.

4.2.2. tooManyScripts

JMAP Error Code: tooManyScripts

Intended use: common

Change controller: IETF

Reference: This document, Section 2.2

Description: Creating the SieveScript would exceed the "maxNumberScripts" limit.

4.2.3. invalidScript

JMAP Error Code: invalidScript

Intended use: common

Change controller: IETF

Reference: This document, Section 2.2

Description: The SieveScript violates the Sieve grammar [RFC5228] and/or one or more extensions mentioned in the script's "require" statement(s) are not supported by the Sieve interpreter.

4.2.4. scriptIsActive

JMAP Error Code: scriptIsActive

Intended use: common

Change controller: IETF

Reference: This document, Section 2.2

Description: The client tried to destroy the active SieveScript, but the "OnSuccessActivateScript" argument was not present.

5. Acknowledgments

The concepts in this document are based largely on those in [RFC5804]. The author would like to thank the authors of that document for providing both inspiration and some borrowed text for this document.

The author would also like to thank the following individuals for contributing their ideas and support for writing this specification: Bron Gondwana, Alexey Melnikov, and Ricardo Signes.

6. References

6.1. Normative References

[RFC2119]
Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, , <https://www.rfc-editor.org/info/rfc2119>.
[RFC3986]
Berners-Lee, T., Fielding, R., and L. Masinter, "Uniform Resource Identifier (URI): Generic Syntax", STD 66, RFC 3986, DOI 10.17487/RFC3986, , <https://www.rfc-editor.org/info/rfc3986>.
[RFC5228]
Guenther, P., Ed. and T. Showalter, Ed., "Sieve: An Email Filtering Language", RFC 5228, DOI 10.17487/RFC5228, , <https://www.rfc-editor.org/info/rfc5228>.
[RFC5435]
Melnikov, A., Ed., Leiba, B., Ed., Segmuller, W., and T. Martin, "Sieve Email Filtering: Extension for Notifications", RFC 5435, DOI 10.17487/RFC5435, , <https://www.rfc-editor.org/info/rfc5435>.
[RFC5804]
Melnikov, A., Ed. and T. Martin, "A Protocol for Remotely Managing Sieve Scripts", RFC 5804, DOI 10.17487/RFC5804, , <https://www.rfc-editor.org/info/rfc5804>.
[RFC6134]
Melnikov, A. and B. Leiba, "Sieve Extension: Externally Stored Lists", RFC 6134, DOI 10.17487/RFC6134, , <https://www.rfc-editor.org/info/rfc6134>.
[RFC8174]
Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, , <https://www.rfc-editor.org/info/rfc8174>.
[RFC8259]
Bray, T., Ed., "The JavaScript Object Notation (JSON) Data Interchange Format", STD 90, RFC 8259, DOI 10.17487/RFC8259, , <https://www.rfc-editor.org/info/rfc8259>.
[RFC8620]
Jenkins, N. and C. Newman, "The JSON Meta Application Protocol (JMAP)", RFC 8620, DOI 10.17487/RFC8620, , <https://www.rfc-editor.org/info/rfc8620>.
[RFC8621]
Jenkins, N. and C. Newman, "The JSON Meta Application Protocol (JMAP) for Mail", RFC 8621, DOI 10.17487/RFC8621, , <https://www.rfc-editor.org/info/rfc8621>.

6.2. Informative References

[RFC5230]
Showalter, T. and N. Freed, Ed., "Sieve Email Filtering: Vacation Extension", RFC 5230, DOI 10.17487/RFC5230, , <https://www.rfc-editor.org/info/rfc5230>.
[RFC5232]
Melnikov, A., "Sieve Email Filtering: Imap4flags Extension", RFC 5232, DOI 10.17487/RFC5232, , <https://www.rfc-editor.org/info/rfc5232>.
[RFC5463]
Freed, N., "Sieve Email Filtering: Ihave Extension", RFC 5463, DOI 10.17487/RFC5463, , <https://www.rfc-editor.org/info/rfc5463>.

Appendix A. Change History (To be removed by RFC Editor before publication)

Changes since ietf-00:

Changes since murchison-01:

Changes since murchison-00:

Author's Address

Kenneth Murchison
Fastmail US LLC
1429 Walnut Street - Suite 1201
Philadelphia, PA 19102
United States of America