Add InternalAuthFilter for service-to-service endpoints

ส่งแล้ว

18 เมษายน 2569 เวลา 15:48 UTC

ผู้เขียน

Kamo

ตั้งค่า

657fe33

Validates X-Internal-Auth header on /api/email/templates/send and /api/email/templates/seed-org/* paths. Other paths bypass this filter (user session auth handles them). Secret comes from INTERNAL_AUTH_SECRET env var. Also adds transactional.smtp.user / transactional.smtp.pass config stubs consumed by EmailTemplateService — all three are sourced from the k8s configmap in production. Part of SP1.