Repository navigation
Recipients see a message only once it is sent - #54
Merged
Merged
Conversation
A draft's recipients could list it in GET /fmsg and read it, its data, attachments and thread, mark it read, react to it and add recipients to it. Clients that save drafts as their user types (fmsg.ai's web app does) showed recipients empty and half-written messages that could never be marked read. A draft is now its sender's alone: GET /fmsg lists sent messages only, and every recipient route answers 404 for someone else's draft. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A draft's recipients could see it before it was sent:
GET /fmsglisted it;Clients that save drafts while their user types, as fmsg.ai's web app does, showed recipients empty and half-written messages that never stayed read (reported by users today).
A draft is now its sender's alone.
GET /fmsglists sent messages only, and every recipient route answers404for someone else's draft: get, data, attachment download, thread, thread/messages, read, react and add-to. The sender's own views are unchanged.Tested:
TestRecipientsCannotSeeDrafts(integration, Postgres) checks each route before and after send; the full suite passes.🤖 Generated with Claude Code