[cristim]

Closes #586

With a purchase delay configured, approveViaToken called approveWithDelay without checking the emailed token; only the immediate path (ApproveExecution) did. A contact-email session with token WRONG got 200 "scheduled".

• Export purchase.ValidateApprovalToken and call it before approveWithDelay, mapped via tokenActionError (403 invalid, 410 expired).
• Replay of an already scheduled execution with a valid token still answers 409 from the existing status CAS.
• Cancel (CancelExecution), revoke (validateRevokeToken) and SQS approve (ApproveExecution) already validate; session-mode approve is fix(purchase): approve and direct-execute map every failure to 409, partial runs mint no revocation token, and approved-row claim races #532.
• openapi 403/410 text no longer says the delayed path is unvalidated.

Tests through HandleRequest (delay 1h): wrong token 403, expired 410, no stored token 403, valid token schedules 200, scheduled replay 409. The three rejection cases returned 200 before the fix.

🤖 Generated with Claude Code

[coderabbitai]

Warning

Review limit reached

• Run on-demand review

_{This review includes 4 billable files and costs up to $1.00.}

• Ask an admin to make reviews automatic

Open in CodeRabbit

Reviews can continue after your included limit without a manual trigger. An admin must approve usage-based billing.

Or wait 38 minutes for your next included review.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available. Your 64 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Configuration used: Repository: LeanerCloud/cloud-commitments-platform/.coderabbit.yaml
• Review profile: CHILL
• Plan: Essentials
• Run ID: f3aa5366-e960-4063-a8e9-4f0f8e355d45

📥 Commits

Reviewing files that changed from the base of the PR and between bbd5297 and f3be5c9.

📒 Files selected for processing (4)

• internal/api/handler_purchases.go
• internal/api/handler_purchases_delay_token_test.go
• internal/api/openapi.yaml
• internal/purchase/approvals.go

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}