iio/pingvin-share
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: omit invalid username characters in oidc registration

Browse Source
This commit is contained in:
Elias Schneider
2024-09-26 21:50:23 +02:00
parent 61edc4f4f6
commit adc4af996d
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
backend/src/oauth/oauth.service.ts
View File

@@ -108,8 +108,10 @@ export class OAuthService {
} }
private async getAvailableUsername(preferredUsername: string) { private async getAvailableUsername(preferredUsername: string) {
// only remove + and - from preferred username for now (maybe not enough) // Only keep letters, numbers, dots, and underscores. Truncate to 20 characters.
let username = preferredUsername.replace(/[+-]/g, "").substring(0, 20); let username = preferredUsername
.replace(/[^a-zA-Z0-9._]/g, "")
.substring(0, 20);
while (true) { while (true) {
const user = await this.prisma.user.findFirst({ const user = await this.prisma.user.findFirst({
where: { where: {