Remove redundant workflow filters for .forgejo/workflows/**.

.forgejo/workflows/ci.yml

@@ -13,51 +13,21 @@ jobs:
   changes:
     runs-on: docker
     steps:
-      - uses: actions/checkout@v4
+      - uses: https://github.com/actions/checkout@v4
         with:
-          fetch-depth: 2
+          fetch-depth: 0
 
       - id: filter
-        name: Detect changes
+        uses: https://github.com/dorny/paths-filter@v3
-        run: |
+        with:
-          set -euo pipefail
+          list-files: shell
-          git fetch --quiet --depth=1 origin "${GITHUB_BASE_REF:-}" || true
+          filters: |
-
+            backend:
-          files=""
+              - 'back001/**'
-          if [ "${GITHUB_EVENT_NAME:-}" = "pull_request" ] && [ -n "${GITHUB_BASE_REF:-}" ]; then
+              - 'ci/**'
-            base_ref="origin/${GITHUB_BASE_REF}"
+            frontend:
-            if git rev-parse --verify "$base_ref" >/dev/null 2>&1; then
+              - 'front001/**'
-              files="$(git diff --name-only "$base_ref"...HEAD)" || true
+              - 'ci/**'
-            else
-              files=""
-            fi
-          fi
-
-          if [ -z "$files" ]; then
-            if [ -n "${GITHUB_SHA:-}" ]; then
-              files="$(git show --name-only --pretty= "${GITHUB_SHA}")"
-            else
-              files="$(git show --name-only --pretty= HEAD)"
-            fi
-          fi
-
-          backend=false
-          frontend=false
-          while IFS= read -r path; do
-            case "$path" in
-              back001/*|.forgejo/workflows/*|ci/*) backend=true ;;
-            esac
-            case "$path" in
-              front001/*|.forgejo/workflows/*|ci/*) frontend=true ;;
-            esac
-          done <<EOF
-          $files
-          EOF
-
-          {
-            echo "backend=$backend"
-            echo "frontend=$frontend"
-          } >> "$GITHUB_OUTPUT"
     outputs:
       backend: ${{ steps.filter.outputs.backend }}
       frontend: ${{ steps.filter.outputs.frontend }}
@@ -69,9 +39,9 @@ jobs:
     container:
       image: forgejo.okit.pl/oskar/ci-gradle-node:8.7-jdk17
     steps:
-      - uses: actions/checkout@v4
+      - uses: https://github.com/actions/checkout@v4
 
-      - uses: actions/cache@v4
+      - uses: https://github.com/actions/cache@v4
         with:
           path: |
             /home/gradle/.gradle/caches
@@ -91,9 +61,9 @@ jobs:
     container:
       image: forgejo.okit.pl/oskar/ci-flutter-node:stable
     steps:
-      - uses: actions/checkout@v4
+      - uses: https://github.com/actions/checkout@v4
 
-      - uses: actions/cache@v4
+      - uses: https://github.com/actions/cache@v4
         with:
           path: |
             /root/.pub-cache

back001/modules/identity/src/main/kotlin/com/mosenioring/identity/service/InvitationService.kt

@@ -40,13 +40,15 @@ class InvitationService(
     @Transactional
     @PreAuthorize("hasRole('ADMIN')")
     fun createPatientInvite(email: String, createdByAdmin: String?): InviteCreationResult {
-        requireNotNull(TenantContext.getTenantId()) { "Missing tenant" }
+        val tenantId = TenantContext.getTenantId() ?: throw IllegalArgumentException("Missing tenant")
 
         val patient = Patient(UUID.randomUUID().toString(), generatePatientPlaceholderName())
+        patient.tenantId = tenantId
         val savedPatient = patientRepository.save(patient)
 
         keycloakProvisioningService.provisionUser(email, Invitation.ROLE_PATIENT)?.let { userId ->
             val user = User(userId, email, Invitation.ROLE_PATIENT, "INVITED")
+            user.tenantId = tenantId
             userRepository.save(user)
         }
         keycloakProvisioningService.sendSetPasswordEmail(email)
@@ -64,6 +66,7 @@ class InvitationService(
             acceptedBy = null,
             createdByAdmin = createdByAdmin
         )
+        invitation.tenantId = tenantId
         invitationRepository.save(invitation)
         return InviteCreationResult(token, invitation.expiresAt)
     }
@@ -103,6 +106,7 @@ class InvitationService(
                 throw IllegalArgumentException("Invitation email mismatch")
             }
             val newUser = User(authenticatedUserId, authenticatedEmail, invitation.role, "ACTIVE")
+            newUser.tenantId = TenantContext.getTenantId() ?: throw IllegalStateException("Missing tenant")
             userRepository.save(newUser)
         }
 
@@ -140,6 +144,7 @@ class InvitationService(
         val tenantId = TenantContext.getTenantId() ?: throw IllegalStateException("Missing tenant")
         if (!subjectRepository.existsByTenantIdAndPatientIdAndUserId(tenantId, patientId, userId)) {
             val link = PatientSubject(UUID.randomUUID().toString(), patientId, userId)
+            link.tenantId = tenantId
             subjectRepository.save(link)
         }
     }

back001/modules/identity/src/test/kotlin/com/mosenioring/identity/service/InvitationServiceTest.kt

@@ -79,6 +79,28 @@ class InvitationServiceTest {
         assertEquals(Invitation.STATUS_ACCEPTED, invitation.status)
         assertNotNull(invitation.acceptedAt)
         assertEquals(user, invitation.acceptedBy)
+        org.mockito.kotlin.verify(subjectRepository).save(org.mockito.kotlin.check {
+            assertEquals("t1", it.tenantId)
+        })
+    }
+
+    @Test
+    fun `creates patient invite with tenantId`() {
+        val email = "new@example.com"
+        whenever(patientRepository.save(any<Patient>())).thenAnswer { it.arguments[0] as Patient }
+        whenever(userRepository.save(any<User>())).thenAnswer { it.arguments[0] as User }
+        whenever(invitationRepository.save(any<Invitation>())).thenAnswer { it.arguments[0] as Invitation }
+
+        val result = service.createPatientInvite(email, "admin-1")
+
+        assertNotNull(result.token)
+        org.mockito.kotlin.verify(patientRepository).save(org.mockito.kotlin.check<Patient> {
+            assertEquals("t1", it.tenantId)
+        })
+        org.mockito.kotlin.verify(invitationRepository).save(org.mockito.kotlin.check<Invitation> {
+            assertEquals("t1", it.tenantId)
+            assertEquals(email, it.email)
+        })
     }
 
     @Test