[Bug]: SMTP authentication using smtp.office365.com (StartTLS port 587)

[adamgriffingit]

Issue Description

There is an undocumented environment variable that is necessary to authenticate using SMTP Auth.

The code in "sendMailv3.js" pulls environment variable "SMTP_USERNAME" as a required value for SMTP Auth. This is not provided in the file built during installation documentation, ".env.prod".

Note that there is an "SMTP_USER_EMAIL" however, it makes sense to have both as the sender's email is not always the username for the account. So, both should exist. Easiest fix is probably just updating the provided environment file? The bit about updating code to handle different from address and username handling in the code might be a separate task.

And, if you are here for the dreaded "530 5.7.57 Client not authenticated", this is your fix. And, make sure you've turned off MFA on the specific account being used to send mail.

This issue HAS been reported before but in a poor fashion without much if any feedback from those who experienced the issue. (Result being abandoned). So, I am bringing it to your attention here with proper description.

Expected Behavior

The default environment file should include "SMTP_USERNAME".

Current Behavior

The default environment file does not have "SMTP_USERNAME". "SMTP_USER_EMAIL" should stay as that's the from address and not necessarily the username (although they are frequently the same).

Steps to reproduce

Try to do SMTP auth without "SMTP_USERNAME". You will get an error.

Screenshots of the issue(optional)

Operating System [e.g. MacOS Sonoma 14.1, Windows 11]

Ubuntu LTS 24.04.4

What browsers are you seeing the problem on?

Chrome

What version of OpenSign™ are you seeing this issue on? [e.g. 1.0.6]

2.36.0

What environment are you seeing the problem on?

Hosted (app.yourdomain.com)

Please check the boxes that apply to this issue report.

• I have searched the existing issues & discussions to make sure that this is not a duplicate.

Code of Conduct

• I agree to follow this project's Code of Conduct
• I have searched the existing issues & discussions to make sure that this is not a duplicate.