system call

Author: pierre-b

internal/service/email_service.go

@@ -245,8 +245,9 @@ func (s *EmailService) SendEmailForTemplate(ctx context.Context, request domain.
 		"template_id": request.TemplateConfig.TemplateID,
 	}).Debug("Preparing to send email notification")
 
-	// Get the template
-	template, err := s.templateService.GetTemplateByID(ctx, request.WorkspaceID, request.TemplateConfig.TemplateID, int64(0))
+	// Get the template (mark as system call to bypass authentication)
+	systemCtx := context.WithValue(ctx, "system_call", true)
+	template, err := s.templateService.GetTemplateByID(systemCtx, request.WorkspaceID, request.TemplateConfig.TemplateID, int64(0))
 	if err != nil {
 		s.logger.WithFields(map[string]interface{}{
 			"error":       err.Error(),

internal/service/template_service.go

@@ -99,11 +99,14 @@ func (s *TemplateService) CreateTemplate(ctx context.Context, workspaceID string
 }
 
 func (s *TemplateService) GetTemplateByID(ctx context.Context, workspaceID string, id string, version int64) (*domain.Template, error) {
-	// Authenticate user for workspace
-	var err error
-	ctx, _, err = s.authService.AuthenticateUserForWorkspace(ctx, workspaceID)
-	if err != nil {
-		return nil, fmt.Errorf("failed to authenticate user: %w", err)
+	// Check if this is a system call that should bypass authentication
+	if ctx.Value("system_call") == nil {
+		// Authenticate user for workspace for regular calls
+		var err error
+		ctx, _, err = s.authService.AuthenticateUserForWorkspace(ctx, workspaceID)
+		if err != nil {
+			return nil, fmt.Errorf("failed to authenticate user: %w", err)
+		}
 	}
 
 	// Get template by ID

internal/service/template_service_test.go

@@ -227,6 +227,23 @@ func TestTemplateService_GetTemplateByID(t *testing.T) {
 		assert.ErrorIs(t, err, authErr)
 	})
 
+	t.Run("System Call Bypasses Authentication", func(t *testing.T) {
+		ctrl := gomock.NewController(t)
+		defer ctrl.Finish()
+		templateService, mockRepo, _, _ := setupTemplateServiceTest(ctrl)
+
+		// Create a system context that should bypass authentication
+		systemCtx := context.WithValue(ctx, "system_call", true)
+
+		// No auth service call expected since this is a system call
+		mockRepo.EXPECT().GetTemplateByID(systemCtx, workspaceID, templateID, version).Return(expectedTemplate, nil)
+
+		template, err := templateService.GetTemplateByID(systemCtx, workspaceID, templateID, version)
+
+		assert.NoError(t, err)
+		assert.Equal(t, expectedTemplate, template)
+	})
+
 	t.Run("Not Found", func(t *testing.T) {
 		ctrl := gomock.NewController(t)
 		defer ctrl.Finish()