raystack / frontier / 26394725569

43%

main: 43%

Build Type

Pull #1648

github

Committed by AmanGIT07

Commit Message

fix(api): reject empty id on ListProjectsByUser and ListServiceUserProjects

Both handlers previously built a project.Filter without a Principal when the
request id was empty, falling through to a plain repository.List that returned
every project in the system. ListProjectsByUser is parameterized by a specific
user id, not a generic filtered listing — empty id is malformed input, not "no
filter". AdminService/ListProjects is the dedicated all-projects endpoint.

Reject empty id upfront with InvalidArgument. ListServiceUserProjects had the
same shape; currently masked by the auth interceptor erroring on
GetServiceUser(""), but the unsafe pattern is removed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Pull Request Pull Request #1648: refactor(project): migrate ListByUser callers to membership, delete legacy method

Coverage Stats

44 of 49 new or added lines in 9 files covered. (89.8%)

2 existing lines in 1 file now uncovered.

16205 of 37852 relevant lines covered (42.81%)

11.98 hits per line