fix(auth): add 401 response to member invite

[mifu67]

In the event that a user is logged into Sentry with an account that is different than the account invited to join an organization, we wish to prompt them to log out and try again. To do this, we introduce a 401 UNAUTHORIZED response if the requesting user's email does not match the email in the invite context.

This does not result in any changes on the user side, because the same warning message is rendered for all errors. Frontend changes will come in a subsequent PR.

[codecov]

❌ 22 Tests Failed:

Tests completed	Failed	Passed	Skipped
23084	22	23062	215

View the top 3 failed tests by shortest run time

tests.sentry.api.endpoints.test_accept_organization_invite.AcceptInviteTest::test_not_needs_authentication

Stack Traces | 2.93s run time

#x1B[1m#x1B[.../api/endpoints/test_accept_organization_invite.py#x1B[0m:132: in test_not_needs_authentication
    assert resp.status_code == 200
#x1B[1m#x1B[31mE   assert 401 == 200#x1B[0m
#x1B[1m#x1B[31mE    +  where 401 = <Response status_code=401, "application/json">.status_code#x1B[0m

tests.sentry.api.endpoints.test_accept_organization_invite.AcceptInviteTest::test_multi_region_organizationmember_id

Stack Traces | 2.98s run time

#x1B[1m#x1B[.../api/endpoints/test_accept_organization_invite.py#x1B[0m:190: in test_multi_region_organizationmember_id
    assert resp.status_code == 200
#x1B[1m#x1B[31mE   assert 401 == 200#x1B[0m
#x1B[1m#x1B[31mE    +  where 401 = <Response status_code=401, "application/json">.status_code#x1B[0m

tests.sentry.users.api.endpoints.test_user_authenticator_enroll.AcceptOrganizationInviteTest::test_accept_pending_invite__totp_enroll

Stack Traces | 3.15s run time

#x1B[1m#x1B[.../api/endpoints/test_user_authenticator_enroll.py#x1B[0m:452: in test_accept_pending_invite__totp_enroll
    om = self.get_om_and_init_invite()
#x1B[1m#x1B[.../api/endpoints/test_user_authenticator_enroll.py#x1B[0m:354: in get_om_and_init_invite
    assert resp.status_code == 200
#x1B[1m#x1B[31mE   assert 401 == 200#x1B[0m
#x1B[1m#x1B[31mE    +  where 401 = <Response status_code=401, "application/json">.status_code#x1B[0m

To view more test analytics, go to the Test Analytics Dashboard
Got feedback? Let us know on Github

[cathteng]

chatted in slack, but i think we should make sure we are properly fetching the invite context for the org member being invited before adding the new 401 response

[cathteng]

very elegant. test pls

[cathteng]

can we test returning this 401?