Add InternalAuthFilter for service-to-service endpoints

Dikirim

18 April 2026 pukul 15.48 UTC

Penulis

Kamo

Berkomitmen

657fe33

Validates X-Internal-Auth header on /api/email/templates/send and /api/email/templates/seed-org/* paths. Other paths bypass this filter (user session auth handles them). Secret comes from INTERNAL_AUTH_SECRET env var. Also adds transactional.smtp.user / transactional.smtp.pass config stubs consumed by EmailTemplateService — all three are sourced from the k8s configmap in production. Part of SP1.