OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change

2026-06-03 18:14:48 +02:00
parent 68946d4f98
commit 838a839290
42 changed files with 506 additions and 298 deletions
--- a/crates/services/Cargo.toml
+++ b/crates/services/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "services"
-version = "0.16.7"
+version = "0.16.8"
 edition = "2024"

 [dependencies]
--- a/crates/services/src/task_manager/imip.rs
+++ b/crates/services/src/task_manager/imip.rs
@@ -482,7 +482,9 @@ pub async fn build_itip_template(

    // Add RSVP buttons
    if matches!(summary, ItipSummary::Invite(_) | ItipSummary::Update { .. })
-        && let Some(rsvp_url) = server.http_rsvp_url(account_id, document_id, to).await
+        && let Some(rsvp_url) = server
+            .http_rsvp_url(account_id, account_info.name(), document_id, to)
+            .await
    {
        variables.insert_single(
            CalendarTemplateVariable::Rsvp,