update: added username check

nmashchenko · Feb 19, 2024 · b788340 · b788340
1 parent 28693d9
commit b788340
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/server/src/modules/auth/base/auth.service.ts b/server/src/modules/auth/base/auth.service.ts
@@ -397,6 +397,18 @@ export class AuthService {
       );
     }
 
+    if (userDto.username && !this.isUsernameAllowed(userDto.username)) {
+      throw new HttpException(
+        {
+          status: HttpStatus.UNPROCESSABLE_ENTITY,
+          errors: {
+            username: 'invalid',
+          },
+        },
+        HttpStatus.UNPROCESSABLE_ENTITY
+      );
+    }
+
     await this.sessionService.softDelete({
       user: {
         id: currentUser.id,
@@ -411,6 +423,10 @@ export class AuthService {
     });
   }
 
+  private isUsernameAllowed(username: string) {
+    return /^[A-Za-z0-9]+$/.test(username);
+  }
+
   async refreshToken(
     data: Pick<JwtRefreshPayloadType, 'sessionId'>
   ): Promise<Omit<LoginResponseType, 'user'>> {