Do not assume that mail w/o auth status is encrypted

tutao · Sep 2, 2024 · ce5cf5a · ce5cf5a
1 parent 78a3d2a
commit ce5cf5a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/common/api/worker/crypto/CryptoFacade.ts b/src/common/api/worker/crypto/CryptoFacade.ts
@@ -581,7 +581,9 @@ export class CryptoFacade {
 				if (!pqMessageSenderKey) {
 					encryptionAuthStatus = EncryptionAuthStatus.RSA_NO_AUTHENTICATION
 				} else {
-					const mail = (await this.instanceMapper.decryptAndMapToInstance(typeModel, instance, resolvedSessionKeyForInstance)) as Mail
+					const mail = this.isLiteralInstance(instance)
+						? ((await this.instanceMapper.decryptAndMapToInstance(typeModel, instance, resolvedSessionKeyForInstance)) as Mail)
+						: (instance as Mail)
 					const senderMailAddress = mail.confidential ? mail.sender.address : SYSTEM_GROUP_MAIL_ADDRESS
 					encryptionAuthStatus = await this.authenticateSender(senderMailAddress, pqMessageSenderKey, assertNotNull(pqMessageSenderKeyVersion))
 				}