Conversation
What was broken Completed point challenges generated finance winnings, but winning member profiles retained an empty challengePoints summary, so Profiles hid the Points section. Root cause Autopilot calls the member challenge-points endpoint with its refresh:member_stats M2M scope. The endpoint accepted only update:user_profiles or all:user_profiles, so automatic synchronization was rejected before point rows could be stored. What was changed Allowed refresh:member_stats on the challenge-points update route while preserving the existing profile scopes. Restricted user-token access to administrators and updated the README and Swagger authorization contract. Any added/updated tests Added a route contract regression test for the accepted M2M scopes and admin-only user access. Focused route and challenge-point persistence tests, lint, and build pass. The full suite reports 205 passing tests and 28 unrelated existing failures caused by missing bus credentials and outdated Joi error-message expectations.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What was broken
Completed point challenges generated finance winnings, but winning member profiles retained an empty
challengePointssummary. Profiles therefore hid the Points section, including for the reported member.Root cause
Autopilot uses its existing
refresh:member_statsM2M scope when it calls the member challenge-points endpoint after challenge completion. The endpoint accepted onlyupdate:user_profilesorall:user_profiles, so the automatic sync was rejected before member point rows could be stored.What was changed
refresh:member_statsonPUT /members/challenge-points/:challengeIdwhile preserving the existing profile scopes.Any added/updated tests
pnpm lint: passed.pnpm build: passed.pnpm test: 205 passing and 28 unrelated existing failures. Those failures require bus Auth0 credentials or update stale Joi error-message expectations; none exercise the changed route or challenge-point persistence.