Enforce KamoMail domain restriction on mailbox, alias, and shared mailbox creation

Shipped

20 ஏப்ரல், 2026 அன்று 3:21 AM UTC

Author

kamo

Commit

589fca6

When KamoMail is the email provider, members can only create mailboxes, aliases, and shared mailboxes using the org's verified default domain. Enforcement at three independent layers: frontend UI (prefix+locked domain input with disabled state when no domain), Next.js proxy (parallel provider + security domain check before forwarding), and Java service layer.