Replace OTK auth with trusted session headers for internal K8s calls

Shipped

April 12, 2026 at 12:28 AM UTC

Author

Kamo

Commit

a423a37

ESigService is internal — the Next.js backend reads the session from Redis and passes orgId/memberId/userId as X-Org-Id, X-Member-Id, X-User-Id headers. No OTK round-trip needed for service-to-service communication.