system

Author: pierre-b

internal/service/email_service.go

@@ -295,8 +295,8 @@ func (s *EmailService) SendEmailForTemplate(ctx context.Context, request domain.
 		TrackingSettings: trackingSettings,
 	}
 
-	// Compile the template with the message data
-	compiledTemplate, err := s.templateService.CompileTemplate(ctx, compileTemplateRequest)
+	// Compile the template with the message data (use system context to bypass authentication)
+	compiledTemplate, err := s.templateService.CompileTemplate(systemCtx, compileTemplateRequest)
 	if err != nil {
 		s.logger.WithFields(map[string]interface{}{
 			"error":       err.Error(),

internal/service/template_service.go

@@ -203,19 +203,22 @@ func (s *TemplateService) DeleteTemplate(ctx context.Context, workspaceID string
 }
 
 func (s *TemplateService) CompileTemplate(ctx context.Context, payload domain.CompileTemplateRequest) (*domain.CompileTemplateResponse, error) {
-	// Check if user is already authenticated in context
-	if user := ctx.Value("authenticated_user"); user == nil {
-		// Authenticate user for workspace
-		var user *domain.User
-		var err error
-		ctx, user, err = s.authService.AuthenticateUserForWorkspace(ctx, payload.WorkspaceID)
-		if err != nil {
-			// Return standard Go error for non-compilation issues
-			return nil, fmt.Errorf("failed to authenticate user: %w", err)
+	// Check if this is a system call that should bypass authentication
+	if ctx.Value("system_call") == nil {
+		// Check if user is already authenticated in context
+		if user := ctx.Value("authenticated_user"); user == nil {
+			// Authenticate user for workspace
+			var user *domain.User
+			var err error
+			ctx, user, err = s.authService.AuthenticateUserForWorkspace(ctx, payload.WorkspaceID)
+			if err != nil {
+				// Return standard Go error for non-compilation issues
+				return nil, fmt.Errorf("failed to authenticate user: %w", err)
+			}
+
+			// Store user in context for future use
+			ctx = context.WithValue(ctx, "authenticated_user", user)
 		}
-
-		// Store user in context for future use
-		ctx = context.WithValue(ctx, "authenticated_user", user)
 	}
 
 	payload.TrackingSettings.Endpoint = s.apiEndpoint

internal/service/template_service_test.go

@@ -780,6 +780,37 @@ func TestCompileTemplate_AuthError(t *testing.T) {
 	assert.ErrorIs(t, err, authErr, "Original auth error should be wrapped")
 }
 
+func TestCompileTemplate_SystemCallBypassesAuth(t *testing.T) {
+	ctrl := gomock.NewController(t)
+	defer ctrl.Finish()
+
+	mockAuthService := domainmocks.NewMockAuthService(ctrl)
+	mockRepo := domainmocks.NewMockTemplateRepository(ctrl)
+	mockLogger := &MockLogger{}
+
+	svc := service.NewTemplateService(mockRepo, mockAuthService, mockLogger, "https://api.example.com")
+
+	// Create a system context that should bypass authentication
+	ctx := context.WithValue(context.Background(), "system_call", true)
+	workspaceID := "ws_123"
+	testTree := createValidTestTree(createTestTextBlock("txt1", "Test"))
+
+	// No auth service call expected since this is a system call
+
+	// --- Act ---
+	resp, err := svc.CompileTemplate(ctx, domain.CompileTemplateRequest{
+		WorkspaceID:      workspaceID,
+		VisualEditorTree: testTree,
+		TemplateData:     nil,
+		TrackingSettings: notifuse_mjml.TrackingSettings{},
+	})
+
+	// --- Assert ---
+	require.NoError(t, err)
+	require.NotNil(t, resp)
+	assert.True(t, resp.Success)
+}
+
 func TestCompileTemplate_InvalidTreeData(t *testing.T) {
 	ctrl := gomock.NewController(t)
 	defer ctrl.Finish()