Add OTK auth, org-branded WOPI, cached MinIO client

Shipped

March 16, 2026 at 2:48 AM UTC

Author

Kamo

Commit

404638c

- WopiController: look up org title from JWT orgId claim for dynamic BrandName ("{orgTitle} Docs") in CheckFileInfo response - DocumentController: require OTK authentication, extract orgId/memberId from session instead of trusting request body - Add OTKPreAuthFilter and KSessionService for *** session validation (matches MediaService pattern) - Cache MinioClient as a Spring bean instead of rebuilding per request