21094
72%
master: 72%

Ran 13 Jun 2026 09:03PM UTC

Files 128

Run time 3s

Badge

Embed ▾

Committed 13 Jun 2026 08:38PM UTC coverage: 83.421% (-0.02%) from 83.437%

Job # 21094

Build Type

push

circleci

Committed by

web-flow

Commit Message

fix(message): partner-key-only Promise/Renege acts as message owner (#735)

The V2 Go POST /message handler required an email or tnuserid query param
to resolve the acting user for partner-key requests, returning 403 for a
bare partner key. V1 (the migration reference) lets a partner with a valid
key act as a message's owner when the message fromaddr is in the partner
domain (getRolesForMessages -> ROLE_OWNER -> acts as fromuser). Trash
Nothing relies on this for Promise/Renege, so Promise -> Renege -> Promise
failed with 403 on V2.

Add partner-owner mode: when a partner key is valid and no email/tnuserid is
given, act as the message's fromuser, but only when its fromaddr host matches
the partner domain (exact, case-insensitive). Applies per-message in the
tnpostid batch path too.

Adds Go regression tests for the partner Promise / Renege /
Promise-Renege-Promise sequence and wrong-domain rejection.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Coverage Stats

26698 of 32004 relevant lines covered (83.42%)

64.43 hits per line

Freegle / Iznik / 21094 / 21094
72%
master: 72%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job go - 21094

Freegle / Iznik / 21094 / 21094 72% master: 72%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job go - 21094

Freegle / Iznik / 21094 / 21094
72%
master: 72%

README BADGES
x