- ส่งแล้ว
- 29 มีนาคม 2569 เวลา 20:20 UTC
- ผู้เขียน
- kamo
- ตั้งค่า
- 9e920c9
Root cause: the sender profile showed 'Your colleague' because the session fetch called a non-existent SecurityService endpoint. Signature was malformed because direct fetch to EmailService lacked OTK auth. Fixes: - Session: reads *** cookie → Redis directly (same as /api/user-info) - Member/org lookup: uses forwardToApi (generates fresh OTK per call) - Template fetch: uses forwardToApi through email proxy route - Email send: still goes directly to EmailService (proven working)