From 32e6600272b885c595c094f0bc69459250220dcb Mon Sep 17 00:00:00 2001
From: ElfFlu <228066338+ElfFlu@users.noreply.github.com>
Date: Sat, 23 Aug 2025 19:05:32 +0200
Subject: [PATCH] fix: remove authentication tag bytes from attachment download

Signed-off-by: ElfFlu <228066338+ElfFlu@users.noreply.github.com>
---
 crates/core/files/src/lib.rs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/crates/core/files/src/lib.rs b/crates/core/files/src/lib.rs
index dacc988e..f9db7810 100644
--- a/crates/core/files/src/lib.rs
+++ b/crates/core/files/src/lib.rs
@@ -80,6 +80,9 @@ pub async fn fetch_from_s3(bucket_id: &str, path: &str, nonce: &str) -> Result<V
         .decrypt_in_place(nonce, b"", &mut buf)
         .map_err(|_| create_error!(InternalError))?;
 
+    // Remove the authentication tag bytes that were added during encryption
+    buf.truncate(buf.len() - AUTHENTICATION_TAG_SIZE_BYTES);
+
     Ok(buf)
 }