Forward /api/email/oauth/callback to EmailService

Shipped

August 25, 2026 at 1:13 AM UTC

Author

Kamo

Commit

cc38586

Google's OAuth redirect target. Same shape as the email and meet provider callbacks beside it: public and sessionless, because the popup lands on this gateway origin with no tenant session and the org travels in ?state. The exact path outranks the /api/email/** wildcard on pattern specificity, so the auth-stripping callback forward runs rather than the ordinary one.