Vishnu Narayanan and GitHub
00ed074d72
fix: disable email transcript for free plans ( #13509 )
...
- Block email transcript functionality for accounts without a paid plan
to prevent SES abuse.
2026-02-11 21:21:36 +05:30
Vishnu Narayanan and GitHub
c884cdefde
feat: add per-account daily rate limit for outbound emails ( #13411 )
...
Introduce a daily cap on non-channel outbound emails to prevent abuse.
Fixes https://linear.app/chatwoot/issue/CW-6418/ses-incident-jan-28
## Type of change
- [x] New feature (non-breaking change which adds functionality)
- [x] Breaking change (fix or feature that would cause existing
functionality not to work as expected)
## Summary
- Adds a Redis-based daily counter to rate limit outbound emails per
account, preventing email abuse
- Covers continuity emails (WebWidget/API), conversation transcripts,
and agent notifications
- Email channel replies are excluded (paid feature, not abusable)
- Adds account suspension check in `ConversationReplyMailer` to block
already-queued emails for suspended accounts
## Limit Resolution Hierarchy
1. Per-account override (`account.limits['emails']`) — SuperAdmin
configurable
2. Enterprise plan-based (`ACCOUNT_EMAILS_PLAN_LIMITS`
InstallationConfig)
3. Global default (`ACCOUNT_EMAILS_LIMIT` InstallationConfig, default:
100)
4. Fallback (`ChatwootApp.max_limit` — effectively unlimited)
## Enforcement Points
| Path | Where | Behavior |
|------|-------|----------|
| WebWidget/API continuity |
`SendEmailNotificationService#should_send_email_notification?` |
Silently skipped |
| Widget transcript | `Widget::ConversationsController#transcript` |
Returns 429 |
| API transcript | `ConversationsController#transcript` | Returns 429 |
| Agent notifications | `Notification::EmailNotificationService#perform`
| Silently skipped |
| Email channel replies | Not rate limited | Paid feature |
| Suspended accounts | `ConversationReplyMailer` | Blocked at mailer
level |
2026-02-03 02:06:51 +05:30
Muhsin Keloth and GitHub
467700499b
fix: message_type in widget conversation create end point ( #10120 )
...
The `before_type_cast` method sometimes returns a string for
`message_type`, creating inconsistencies in conversation create API
response.
2024-09-16 22:34:09 +05:30
bce2a07d03
feat: do not send contact details to the widget ( #9223 )
...
* refactor: use has_email instead of email
* feat: remove usage of details directly in forms
* test: update payload
* test: fix transcript test
* refactor: use computed hasEmail
---------
Co-authored-by: Muhsin Keloth <muhsinkeramam@gmail.com >
2024-04-12 15:30:07 +05:30
Muhsin Keloth and GitHub
af7631d9f1
chore: Update MarkMessagesAsReadJob to accept delivered status ( #8319 )
2023-11-08 13:44:57 -08:00
Muhsin Keloth and GitHub
24fbab94c3
chore: Refactor MarkMessagesAsReadJob based on conversation id and time stamp ( #8217 )
...
- Mark all messages as read by providing the conversation ID and timestamp.
- For Instagram, ensure all previous messages that weren't marked as failed are now marked as read. This is because the read events are only triggered for the most recent message and not for any previous ones.
2023-10-27 15:21:39 -07:00
Muhsin Keloth and GitHub
980013abae
feat: Add delivery reports for live chat ( #8092 )
2023-10-12 20:48:20 +05:30
Pranav Raj S and GitHub
9e173fca3c
fix: Return 404 if conversation is nil ( #8098 )
2023-10-12 17:00:51 +05:30
a040aee96b
feat: allow adding custom attributes to conversations from the SDK ( #6782 )
...
* feat: add conversation attributes method to sdk and widget app
* feat: add endpoints to update custom attributes
* refactor: update SDK api
* feat: add api and actions for conversation updates
* fix: error message
* test: custom attributes on conversations controller
---------
Co-authored-by: Muhsin Keloth <muhsinkeramam@gmail.com >
2023-04-04 08:57:55 +05:30
Muhsin Keloth and GitHub
2e7ab484bd
fix: Discard invalid contact attributes in widget conversation end point ( #5664 )
...
Fixes : chatwoot/product#601
2022-10-18 13:16:29 -07:00
Jordan Brough and GitHub
59b31615ed
chore: Use "create!" and "save!" bang methods when not checking the result ( #5358 )
...
* Use "create!" when not checking for errors on the result
* Use "save!" when not checking the result
2022-09-13 17:40:06 +05:30
f71980bd95
chore: Enhance contact merge action for identified users ( #4886 )
...
- Discard conflicting keys
- Do not merge if there is already an identified contact
Co-authored-by: Pranav Raj S <pranav@chatwoot.com >
2022-06-23 15:48:56 +05:30
Pranav Raj S and GitHub
7434b60f71
fix: Revert changes to fix name updation from pre-chat form ( #4741 )
2022-05-25 12:38:23 +05:30
Muhsin Keloth and GitHub
b082b0e58c
fix: Dig params in widget contact end point ( #4516 )
2022-04-21 20:39:45 +05:30
Muhsin Keloth and GitHub
7e5ec7925c
feat: Add phone_number & custom_attributes in create conversation end point ( #4421 )
2022-04-08 14:53:37 +05:30
Pranav Raj S and GitHub
0b03e4b296
feat: Add an option to disable endConversation button ( #4352 )
2022-04-06 13:54:55 +05:30
b77fad52fb
fix: Add missing contact information to fix invalid activity messages ( #4195 )
...
Co-authored-by: Tejaswini <tejaswini@chatwoot.com >
2022-03-18 13:43:02 +05:30
c4837cd7ac
feat: End conversation from widget ( #3660 )
...
Co-authored-by: Sivin Varghese <64252451+iamsivin@users.noreply.github.com >
Co-authored-by: Fayaz Ahmed <15716057+fayazara@users.noreply.github.com >
Co-authored-by: Muhsin Keloth <muhsinkeramam@gmail.com >
Co-authored-by: Nithin David Thomas <1277421+nithindavid@users.noreply.github.com >
Co-authored-by: Pranav Raj S <pranav@chatwoot.com >
2022-03-15 22:07:30 +05:30
Muhsin Keloth and GitHub
f405572e5c
Revert "feat: Custom fields in pre-chat form ( #4135 )" ( #4182 )
...
This reverts commit e730804b48
2022-03-15 16:54:33 +05:30
Muhsin Keloth and GitHub
e730804b48
feat: Custom fields in pre-chat form ( #4135 )
...
Fixes : #2744
2022-03-14 15:06:56 +05:30
1bf7227843
chore: Fix emails being sent with the wrong translations ( #2236 )
...
Co-authored-by: Pranav Raj S <pranav@chatwoot.com >
2021-06-08 22:45:01 +05:30
Pranav Raj S and GitHub
ec557205f4
fix: Add validations dynamically for pre-chat form ( #1779 )
2021-02-16 15:15:37 +05:30
Pranav Raj S and GitHub
037ffc7419
feat: Add a pre-chat form on widget ( #1769 )
2021-02-16 00:14:13 +05:30
31c07771e8
feat: Notification on new messages in conversation ( #1204 )
...
fixes : #895
fixes : #1118
fixes : #1075
Co-authored-by: Pranav Raj S <pranav@thoughtwoot.com >
2020-09-10 19:19:15 +05:30
Sojan Jose and GitHub
ac5d755545
chore: Update dependencies ( #1173 )
2020-09-08 11:24:08 +05:30
22880df429
Feature: Send chat transcript via email ( #1152 )
...
Co-authored-by: Pranav Raj Sreepuram <pranavrajs@gmail.com >
2020-08-17 11:25:13 +05:30
49db9c5d8a
Adds unread message bubbles for widget ( #943 )
...
Co-authored-by: Sojan <sojan@pepalo.com >
Co-authored-by: Pranav Raj S <pranav@thoughtwoot.com >
2020-07-08 00:04:44 +05:30
Sojan Jose and GitHub
051871a3cd
Chore: Code Cleanup in API controllers ( #932 )
...
* Chore: Code Cleanup in API controllers
* Remove unnecessary scoping for accounts controller
2020-06-07 13:58:05 +05:30
Pranav Raj S and GitHub
f28ec29b8c
Feature: Customise widget for bot conversations ( #834 )
...
* Feature: Customise widget for bot conversations
2020-05-09 22:02:43 +05:30
e9131ea558
Feature: Add web push notification permission in frontend ( #766 )
...
Add webpush notification permission in frontend
Co-authored-by: Sojan <sojan@pepalo.com >
2020-05-06 00:10:56 +05:30
5bc8219db5
Feature: Typing Indicator on widget and dashboard ( #811 )
...
* Adds typing indicator for widget
* typing indicator for agents in dashboard
Co-authored-by: Pranav Raj Sreepuram <pranavrajs@gmail.com >
2020-05-04 23:07:56 +05:30
