mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7andWill Pfleger
6dda6fd7c3
D2: rewrite test_draft_not_returned_in_kindless_channel_http_query. The HTTP bridge runs sensitive-kind gates unconditionally, so a kindless h-tag filter triggers p_gated_filters_authorized and returns 403 for any non-owner caller — this is fail-closed, pre-existing main behavior. The test now asserts 403 for the kindless case (i), then uses a mixed kinds:[9,31234] h-tag filter as the attacker (passes all three HTTP gates) and asserts kind:9 appears while the draft is absent (ii), proving reader_can_receive_event is live on the bridge per-event path. D3: add #h ch_id tag to subscription filter in test_draft_live_fanout_reaches_author_own_subscription. Drafts are channel-bound events; fan_out_scoped's symmetric scoping invariant means a global (no #h) sub never sees channel-scoped events by design. Channel-scoping the filter routes the sub through channel_kind_index so fan-out can match and filter_fanout_by_access passes the author through. Co-authored-by: Will Pfleger <pfleger.will@gmail.com> Signed-off-by: Will Pfleger <pfleger.will@gmail.com>