Release 1.166.7

[odlbot]

Chris Chudzicki

• Scope the CSRF cookie domain by Origin and re-issue it when missing (Scope the CSRF cookie domain by Origin and re-issue it when missing #3978) (b8f3edce)
• Make verified-program discounts an "internal" redemption type (Make verified-program discounts an "internal" redemption type #3972) (a548efa1)

[sentry]

Bug: The new, more restrictive filter for program discounts may fail to find pre-existing, manually-edited discounts, leading to the creation of duplicates.
_{Severity: LOW}

Suggested Fix

To prevent creating duplicates, the lookup for existing program discounts should be less restrictive. Consider only filtering by a unique, immutable identifier for program discounts, such as redemption_type=REDEMPTION_TYPE_INTERNAL. Alternatively, if the discount_type and amount must be fixed, add a data migration to normalize any existing, manually-edited program discounts to match the new expected values.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's
not valid.

Location: ecommerce/api.py#L1454-L1457

Potential issue: The logic to find an existing program discount was changed to filter on
`redemption_type=INTERNAL`, `discount_type=DISCOUNT_TYPE_PERCENT_OFF`, and `amount=100`.
Previously, the lookup was less restrictive. If a program discount was manually edited
in the admin panel to have a different `discount_type` or `amount` before this change,
the new, more restrictive filter will fail to find it. This will cause the system to
create a duplicate discount for the program, which could cause issues in the critical
enrollment flow.

_{Did we get this right? 👍 / 👎 to inform future reviews.}