fix: omit invalid username characters in oidc registration

2024-09-26 21:50:23 +02:00
parent 61edc4f4f6
commit adc4af996d
1 changed files with 4 additions and 2 deletions
--- a/backend/src/oauth/oauth.service.ts
+++ b/backend/src/oauth/oauth.service.ts
@@ -108,8 +108,10 @@ export class OAuthService {
  }

  private async getAvailableUsername(preferredUsername: string) {
-    // only remove + and - from preferred username for now (maybe not enough)
-    let username = preferredUsername.replace(/[+-]/g, "").substring(0, 20);
+    // Only keep letters, numbers, dots, and underscores. Truncate to 20 characters.
+    let username = preferredUsername
+      .replace(/[^a-zA-Z0-9._]/g, "")
+      .substring(0, 20);
    while (true) {
      const user = await this.prisma.user.findFirst({
        where: {