yavsc/src
Paul Schneider d2a0c263dd
All checks were successful
Dotnet build and test / build (pull_request) Successful in 9m18s
acl post: reject BlogPostId <= 0 with 400, no 500
The 2026-08-21 prod 500 on POST /api/v1/blogacl was caused by the
PostIt client sending { circleId } only — the server deserialised
into CircleAuthorizationToBlogPost with BlogPostId = default(long) = 0,
and EF Core refused the INSERT with InvalidOperationException.

The PostIt-side fix lives in b82b6722 (enrich the payload with
blogPostId). This commit is the server-side guard: validate
BlogPostId > 0 in the controller and return 400 BadRequest instead
of letting the request reach SaveChangesAsync. The same shape that
crashed on 2026-08-21 now fails fast at the validation layer.

Verified by BlogAclApiTests.PostCircleAuthorization_dosent_return_500:
sentinel that asserts 'never 500' on a payload with BlogPostId = -1.
Previously red (500 from EF Core), now green (400 from the new guard).
2026-08-21 22:08:05 +01:00
..
cli refacto API prefix + nav.back 2026-08-20 20:50:52 +01:00
PostIt Testing circle was authorized 2026-08-21 17:21:54 +01:00
PostIt.Tests workaround on testing the null CloseButton 2026-08-21 18:46:26 +01:00
Yavsc.Abstract A Circle must pre-exist before beeing used by an authorization 2026-08-21 16:40:24 +01:00
Yavsc.Api refacto API prefix + nav.back 2026-08-20 20:50:52 +01:00
Yavsc.Api.Client fixes a 500 in prod and the associated test 2026-08-21 16:58:27 +01:00
Yavsc.Blogs acl post: reject BlogPostId <= 0 with 400, no 500 2026-08-21 22:08:05 +01:00
Yavsc.Blogs.Tests acl post: never 500 regression sentinel + async CheckOwner + fixture seed 2026-08-21 22:00:27 +01:00
Yavsc.Org remove dead 'Comment' field from CircleAuthorizationToBlogPost 2026-08-21 00:27:27 +01:00
Yavsc.Org.Tests warnings 2026-08-21 20:33:15 +01:00
Yavsc.Server A Circle must pre-exist before beeing used by an authorization 2026-08-21 16:40:24 +01:00
Yavsc.Tests.Shared chore(release): bump version via gitversion for 1.0.8-rc1 2026-08-18 19:18:36 +01:00