Add InternalAuthFilter for service-to-service endpoints

Navios

18 de abril de 2026 às 15:48 UTC

Autor

Kamo

Enviar

657fe33

Validates X-Internal-Auth header on /api/email/templates/send and /api/email/templates/seed-org/* paths. Other paths bypass this filter (user session auth handles them). Secret comes from INTERNAL_AUTH_SECRET env var. Also adds transactional.smtp.user / transactional.smtp.pass config stubs consumed by EmailTemplateService — all three are sourced from the k8s configmap in production. Part of SP1.