Freegle / Iznik / 21094

71%

Build Type

push

circleci

Committed by web-flow

Commit Message

fix(message): partner-key-only Promise/Renege acts as message owner (#735)

The V2 Go POST /message handler required an email or tnuserid query param
to resolve the acting user for partner-key requests, returning 403 for a
bare partner key. V1 (the migration reference) lets a partner with a valid
key act as a message's owner when the message fromaddr is in the partner
domain (getRolesForMessages -> ROLE_OWNER -> acts as fromuser). Trash
Nothing relies on this for Promise/Renege, so Promise -> Renege -> Promise
failed with 403 on V2.

Add partner-owner mode: when a partner key is valid and no email/tnuserid is
given, act as the message's fromuser, but only when its fromaddr host matches
the partner domain (exact, case-insensitive). Applies per-message in the
tnpostid batch path too.

Adds Go regression tests for the partner Promise / Renege /
Promise-Renege-Promise sequence and wrong-domain rejection.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Coverage Stats

10712 of 14279 branches covered (75.02%)

Branch coverage included in aggregate %.

37 of 53 new or added lines in 2 files covered. (69.81%)

79 existing lines in 3 files now uncovered.

117074 of 165527 relevant lines covered (70.73%)

35.89 hits per line