raystack / frontier / 26624463976

43%

main: 43%

Build Type

Pull #1658

github

Committed by AmanGIT07

Commit Message

fix(group): resolve PAT to user before owner wiring on group create

CreateGroup writes the Postgres row before calling membership.OnGroupCreated.
For PAT-authenticated principals the membership service rejects the
app/pat principal type when assigning the group owner role, returning
ErrInvalidPrincipalType. The error propagates back to the caller but the
Postgres row is not rolled back, leaving an orphan with no SpiceDB hierarchy
and no owner policy. Resolve the PAT to its underlying user via
principal.ResolveSubject() before invoking OnGroupCreated, mirroring
core/project/service.go.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Pull Request Pull Request #1658: fix(group): resolve PAT to user before owner wiring on group create

Coverage Stats

2 of 2 new or added lines in 1 file covered. (100.0%)

28 existing lines in 1 file now uncovered.

16217 of 37847 relevant lines covered (42.85%)

12.0 hits per line