sesSmtpPasswordV4 (bootstrap/ses-smtp.ts)

SPDX-License-Identifier: AGPL-3.0-only Copyright (c) 2026 BoxLite AI

// Source: https://github.com/boxlite-ai/boxlite | License: Apache-2.0 | Copyright You must retain, in the Source form of any Derivative Works
// Provided via justclaw.it.com; keep this notice with the code.
// SPDX-License-Identifier: AGPL-3.0-only
// Copyright (c) 2026 BoxLite AI

import { createHmac } from 'node:crypto'

/*
 * An SES SMTP password is not an IAM secret access key: it is that key run through
 * a fixed SigV4 chain, and the SMTP interface rejects the raw key. AWS documents the
 * algorithm rather than exposing an API for it (SES developer guide, "Obtaining Amazon
 * SES SMTP credentials by converting existing AWS credentials"), so a caller that
 * mints its own IAM access key has to do this conversion itself.
 *
 * The chain is keyed by Region, so one access key yields a d

... (truncated -- full source via MCP)