Files
warmbly/internal/models/event_worker_validation.go
Matthew Meszaros ae0c433084 feat: seal mailbox validation credentials with the organization DEK
SMTP/IMAP passwords on the validation round-trip are now encrypted and
decrypted under the organization DEK, carried as OrgID on
EventWorkerEmailValidation. Onboarding requires an organization before
a mailbox can be validated.

This fixes a latent key mismatch: the payload never set UserID, so the
worker decrypted with the zero-UUID platform key while the backend had
encrypted with the user key.
2026-06-10 17:16:56 +02:00

10 lines
218 B
Go

package models
import "github.com/google/uuid"
type EventWorkerEmailValidation struct {
OrgID uuid.UUID `json:"org_id"`
ProcessID uuid.UUID `json:"process_id"`
Credentials *SmtpImap `json:"credentials"`
}