mailTo in OpenFin

mailTo links are anchor tags that are leveraged to redirect the link to the default email client instead of a web page URL. Once a mailTo link is clicked, a message draft will open based on the fields in the anchor tag. 

In OpenFin 20.91.61.14+, tighter measures were implemented to Secured APIs which address feedback OpenFin received from IT Security teams. Prior to this version, no configurations were needed to use mailTo links. With OpenFin 20.91.61.14+, application providers are required to add the "webAPIs": ["openExternal"] parameter to the permissions object of the application manifest.

The permissions object should look something like this: 

    "permissions": {
            "System": {
                "launchExternalProcess": true
            },
            "webAPIs": [
              "openExternal"
          ]
        }

If you are using the mailTo link in a platform application you should be aware that the permissions should also be added at level the mailTo link is in. If you have a mailTo link inside the window contents you should add the permissions to the defaultWindowOptions of the manifest. If it is in the views contents you also need to add the permission to the defaultViewOptions. An example of this is:

    "platform": {
        "uuid": "example",
        "permissions": {
            "System": {
                "launchExternalProcess": true
            },
            "webAPIs": [
                "openExternal"
            ]
        },
        "defaultWindowOptions": {
            "permissions": {
                "System": {
                    "launchExternalProcess": true
                },
                "webAPIs": [
                    "openExternal"
                ]
            }
        },
        "defaultViewOptions": {
            "permissions": {
                "System": {
                    "launchExternalProcess": true
                },
                "webAPIs": [
                    "openExternal"
                ]
            }
        }
    }

Note: If your email provider is not the one you want you can always refer to this article to change your default email accessed when you click on mailTo links.