Enforce KamoMail domain restriction on mailbox, alias, and shared mailbox creation

Shipped

April 20, 2026 at 3:21 AM UTC

Author

kamo

Commit

589fca6

When KamoMail is the email provider, members can only create mailboxes, aliases, and shared mailboxes using the org's verified default domain. Enforcement at three independent layers: frontend UI (prefix+locked domain input with disabled state when no domain), Next.js proxy (parallel provider + security domain check before forwarding), and Java service layer.