mirror of
https://github.com/warmbly/warmbly.git
synced 2026-08-19 08:01:16 +00:00
ae0c433084
SMTP/IMAP passwords on the validation round-trip are now encrypted and decrypted under the organization DEK, carried as OrgID on EventWorkerEmailValidation. Onboarding requires an organization before a mailbox can be validated. This fixes a latent key mismatch: the payload never set UserID, so the worker decrypted with the zero-UUID platform key while the backend had encrypted with the user key.