Node.js & TypeScript Transactional Email API

Native Node 18+ & Edge Runtime Ready

Built on modern web standards with zero heavy native dependencies. SendPorter runs seamlessly on Node.js (CommonJS & ESM), Cloudflare Workers, Vercel Edge, AWS Lambda, and Bun.

// email.ts
interface SendEmailResponse {
  id: string;
  status: "dispatched" | "queued";
  tracking_url: string;
}

export async function sendSecurityCode(email: string, code: string): Promise<SendEmailResponse> {
  const response = await fetch("https://api.sendporter.com/v1/send", {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.SENDPORTER_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      from: "auth@yourdomain.com",
      to: email,
      subject: "Your Two-Factor Authentication Code",
      html: `<p>Your verification code is: <strong>${code}</strong></p>`,
      text: `Your verification code is: ${code}`,
      tags: ["security", "auth-2fa"],
      track_opens: true,
      track_clicks: true,
    }),
  });

  if (!response.ok) {
    const errorData = await response.json();
    throw new Error(`SendPorter API Error: ${JSON.stringify(errorData)}`);
  }

  return response.json();
}

import nodemailer from "nodemailer";

const transporter = nodemailer.createTransport({
  host: "smtp.sendporter.com",
  port: 587,
  secure: false, // TLS via STARTTLS
  auth: {
    user: process.env.SENDPORTER_API_KEY,      // sp_live_...
    pass: process.env.SENDPORTER_SECRET_KEY,  // sp_sec_...
  },
});

await transporter.sendMail({
  from: '"Operations" <ops@yourdomain.com>',
  to: "client@example.com",
  subject: "Monthly Statement Ready",
  text: "Your statement has been generated.",
  html: "<b>Your statement has been generated.</b>",
});

import crypto from "node:crypto";

export function verifySendPorterWebhook(
  payload: string,
  signatureHeader: string,
  signingSecret: string
): boolean {
  const expectedSignature = crypto
    .createHmac("sha256", signingSecret)
    .update(payload)
    .digest("hex");

  return crypto.timingSafeEqual(
    Buffer.from(signatureHeader),
    Buffer.from(expectedSignature)
  );
}

Production Best Practices in Node.js

When running SendPorter in mission-critical Node.js services (e.g. user authentication or billing alerts), keep these patterns in mind:

• Set Request Timeouts: Use an AbortController or SDK timeout option (default 5000ms) to ensure HTTP calls fail gracefully if connectivity is lost.
• Track Parcel IDs in Your DB: Store the returned parcel tracking ID (e.g., id: "sp_msg_...") alongside your user or order record for instant audit lookup.
• Verify Webhook Signatures: Always compute the HMAC-SHA256 signature to prevent unauthorized actors from spoofing delivery callbacks.