bark, server: require mailbox authorization to post recovery vtxo ids

AcidBunny21requested to merge
authenticated-recovery-post into master
  • check or remove this line after you've added a CHANGELOG entry or if your PR doesn't need one (they should go into CHANGELOG/unreleased/)

Summary by CodeRabbit

  • New Features

    • Recovery mailbox requests now include signed authorization when available, strengthening ownership verification.

  • Bug Fixes

    • Recovery mailbox processing now supports both authorized and legacy requests for backward compatibility.
    • Added validation for mailbox ownership, signature, and expiration when authorization is present.
Edited by coderabbit

Merge request reports