21094
72%
master: 72%

Ran 13 Jun 2026 09:03PM UTC

Files 444

Run time 10s

Badge

Embed ▾

Committed 13 Jun 2026 08:38PM UTC coverage: 67.487% (+0.1%) from 67.392%

Job # 21094

Build Type

push

circleci

Committed by

web-flow

Commit Message

fix(message): partner-key-only Promise/Renege acts as message owner (#735)

The V2 Go POST /message handler required an email or tnuserid query param
to resolve the acting user for partner-key requests, returning 403 for a
bare partner key. V1 (the migration reference) lets a partner with a valid
key act as a message's owner when the message fromaddr is in the partner
domain (getRolesForMessages -> ROLE_OWNER -> acts as fromuser). Trash
Nothing relies on this for Promise/Renege, so Promise -> Renege -> Promise
failed with 403 on V2.

Add partner-owner mode: when a partner key is valid and no email/tnuserid is
given, act as the message's fromuser, but only when its fromaddr host matches
the partner domain (exact, case-insensitive). Applies per-message in the
tnpostid batch path too.

Adds Go regression tests for the partner Promise / Renege /
Promise-Renege-Promise sequence and wrong-domain rejection.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Coverage Stats

23300 of 34525 relevant lines covered (67.49%)

16.69 hits per line

Freegle / Iznik / 21094 / 21094
72%
master: 72%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job laravel - 21094

Freegle / Iznik / 21094 / 21094 72% master: 72%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job laravel - 21094

Freegle / Iznik / 21094 / 21094
72%
master: 72%

README BADGES
x