- Shipped
- 24 ஆகஸ்ட், 2026 அன்று 10:02 PM UTC
- Author
- Kamo
- Commit
- 9bd73a1
The meet sidecar looks up an org's meet config to decide whether a guest needs a meeting password. It asked by hostname, which on the shared meet host resolves to the platform organization -- so a tenant that requires a password would have had that requirement silently dropped for every guest joining by link. A guest has no session, so the only thing naming their tenant is the room, which now carries an org token. Both public endpoints therefore accept an explicit orgId and fall back to the domain lookup when none is given, so nothing that asks by host today changes. Ids arrive as digits and are parsed as a long: they are past 2^53, so one routed through a double names a different organization. 200 tests pass.