fix(api): let authors and owners delete unfinished uploads

server/tests/WebDrop.Core.Tests/ChannelCryptoTests.cs

@@ -98,6 +98,22 @@ public sealed class ChannelCryptoTests
         Assert.Single((await env.Service.ReadLogAsync(space.Id, member, 0, 100)).Records);
     }
 
+    [Fact]
+    public async Task AnUnfinishedUploadCanBeDeletedWithoutASignedEvent()
+    {
+        using var env = new TestEnv(); var ownerEndpoint = TestEnv.Endpoint(); var memberEndpoint = TestEnv.Endpoint();
+        var space = env.Create(ownerEndpoint, ChannelMode.Raw); var owner = space.Owner(ownerEndpoint) with { RequireSignedContent = true };
+        var channelId = env.Service.GetWorkspace(space.Id, owner).Channels.Single().Id;
+        var member = space.Member(memberEndpoint) with { AccountName = "member", RequireSignedContent = true }; env.Service.Join(space.Id, member);
+        var file = TestEnv.NewId();
+        env.Service.DeclareObject(space.Id, member, new ObjectEnvelope { ItemId = file.ToBase64Url(), ChannelId = channelId, Domain = CryptoDomain.Files, Epoch = 0, KeyEnvelope = "" });
+        // 只传了第 0 帧,没有末帧:上传被打断
+        await env.Service.AppendFrameAsync(space.Id, member, TestEnv.Frame(file, 0, FrameFlags.Gated, 16), null);
+        Assert.Throws<WebDropException>(() => env.Service.DeleteItem(space.Id, space.Member(TestEnv.Endpoint()) with { AccountName = "stranger", RequireSignedContent = true }, file));
+        env.Service.DeleteItem(space.Id, owner, file);
+        Assert.Null(env.Service.ReadCrypto(space.Id, owner).Objects.Find(o => o.ItemId == file.ToBase64Url())?.Event);
+    }
+
     private static void Bootstrap(TestEnv env, TestChannel space, Credentials owner, string channelId)
     {
         foreach (var domain in new[] { CryptoDomain.Chat, CryptoDomain.Files }) env.Service.PublishDomain(space.Id, owner, new DomainPublishRequest