Files
Matthew Meszaros ae0c433084 feat: seal mailbox validation credentials with the organization DEK
SMTP/IMAP passwords on the validation round-trip are now encrypted and
decrypted under the organization DEK, carried as OrgID on
EventWorkerEmailValidation. Onboarding requires an organization before
a mailbox can be validated.

This fixes a latent key mismatch: the payload never set UserID, so the
worker decrypted with the zero-UUID platform key while the backend had
encrypted with the user key.
2026-06-10 17:16:56 +02:00
..
2026-01-17 14:11:14 +00:00
2026-01-17 14:11:14 +00:00
2026-01-29 05:59:04 +01:00
2026-05-27 16:40:23 +00:00
2026-01-17 14:11:14 +00:00
2026-01-17 14:11:14 +00:00