Skip to content

fix(owner): make spritz ownership id-only#44

Merged
onutc merged 1 commit intomainfrom
codex/owner-id-only-contract
Mar 2, 2026
Merged

fix(owner): make spritz ownership id-only#44
onutc merged 1 commit intomainfrom
codex/owner-id-only-contract

Conversation

@onutc
Copy link
Contributor

@onutc onutc commented Mar 2, 2026

Summary

  • remove spec.owner.email from the Spritz owner type/schema
  • stop auto-populating owner email from auth headers in create flow
  • add API regression tests for owner ID resolution and non-admin mismatch checks
  • regenerate and sync CRDs (crd/ and Helm copy)

Why

Spritz ownership is ID-based. Persisting email from auth headers can inject non-email identifiers (for example UUID subjects) into spec.owner.email, which fails CRD validation and blocks create requests.

Testing

  • cd api && go test ./...
  • cd operator && go test ./...
  • cd /Users/onur/repos/spritz && ./scripts/sync-crd.sh --check

@onutc onutc merged commit f61430d into main Mar 2, 2026
1 check passed
@onutc onutc deleted the codex/owner-id-only-contract branch March 2, 2026 22:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant