notfire/Iceshrimp.NET
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[backend/api] Reject signups with password length of under 8 chars (ISH-1)

Browse source
This commit is contained in:
Laura Hausmann 2024-02-16 02:47:49 +01:00
parent 2eb9482538
commit aff1f6e788
No known key found for this signature in database
GPG key ID: D044E84C5BE01605
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
Iceshrimp.Backend/Core/Services/UserService.cs
View file

@ -213,6 +213,8 @@ public class UserService(
throw new GracefulException(HttpStatusCode.BadRequest, "User already exists"); throw new GracefulException(HttpStatusCode.BadRequest, "User already exists");
if (await db.UsedUsernames.AnyAsync(p => p.Username.ToLower() == username.ToLowerInvariant())) if (await db.UsedUsernames.AnyAsync(p => p.Username.ToLower() == username.ToLowerInvariant()))
throw new GracefulException(HttpStatusCode.BadRequest, "Username was already used"); throw new GracefulException(HttpStatusCode.BadRequest, "Username was already used");
if (password.Length < 8)
throw GracefulException.BadRequest("Password must be at least 8 characters long");
var keypair = RSA.Create(4096); var keypair = RSA.Create(4096);
var user = new User { var user = new User {