fix(config): ensure strict SMTP password environment variable precedence

Author: utkarsh232005

src/__tests__/config-utils.test.ts

@@ -83,5 +83,10 @@ describe('config utils', () => {
     process.env.KDM_SMTP_PASSWORD = 'env-password';
     settings = getSMTPSettings();
     expect(settings.auth.pass).toBe('env-password');
+
+    // Case 3: Env variable set to empty string, should be honored instead of falling back to config password
+    process.env.KDM_SMTP_PASSWORD = '';
+    settings = getSMTPSettings();
+    expect(settings.auth.pass).toBe('');
   });
 });

src/utils/config.ts

@@ -36,7 +36,10 @@ export const getSMTPSettings = () => {
     port: config.get('email_port') || 587,
     auth: {
       user: config.get('email_user'),
-      pass: process.env.KDM_SMTP_PASSWORD || config.get('email_password'),
+      pass:
+        process.env.KDM_SMTP_PASSWORD !== undefined
+          ? process.env.KDM_SMTP_PASSWORD
+          : config.get('email_password'),
     },
     to: config.get('email_to'),
   };