Spaces:
Paused
Paused
File size: 4,044 Bytes
a38005e ad9e5dd a38005e ad9e5dd a38005e 5f0e2ae a38005e 5f0e2ae a38005e dd7a3f0 ad9e5dd dd7a3f0 5f0e2ae ad9e5dd dd7a3f0 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 | use crate::error::AppError;
pub fn validate_username(username: &str) -> Result<(), AppError> {
if username.is_empty()
|| username.len() > 128
|| username.chars().any(char::is_whitespace)
|| username.chars().any(char::is_control)
{
return Err(AppError::BadRequest(
"Invalid username: must be 1-128 characters and not contain whitespace/control characters".into(),
));
}
Ok(())
}
pub fn validate_api_key_name(name: &str) -> Result<(), AppError> {
if name.is_empty() || name.len() > 128 || name.chars().any(char::is_control) {
return Err(AppError::BadRequest(
"Invalid API key name: must be 1-128 characters and not contain control characters"
.into(),
));
}
Ok(())
}
pub fn validate_password(password: &str) -> Result<(), AppError> {
if password.is_empty()
|| password.len() < 8
|| password.len() > 256
|| password.chars().any(char::is_control)
{
return Err(AppError::BadRequest(
"Invalid password: must be 8-256 characters and not contain control characters".into(),
));
}
Ok(())
}
#[cfg(test)]
mod tests {
use super::*;
#[test]
fn validate_username_empty() {
assert!(validate_username("").is_err());
}
#[test]
fn validate_username_whitespace() {
assert!(validate_username("hello world").is_err());
}
#[test]
fn validate_username_tab() {
assert!(validate_username("hello\tworld").is_err());
}
#[test]
fn validate_username_control_chars() {
assert!(validate_username("hello\x00world").is_err());
}
#[test]
fn validate_username_too_long() {
let name = "a".repeat(129);
assert!(validate_username(&name).is_err());
}
#[test]
fn validate_username_exactly_128() {
let name = "a".repeat(128);
assert!(validate_username(&name).is_ok());
}
#[test]
fn validate_username_valid() {
assert!(validate_username("admin").is_ok());
}
#[test]
fn validate_username_valid_with_special_chars() {
assert!(validate_username("admin-user_1").is_ok());
}
#[test]
fn validate_password_empty() {
assert!(validate_password("").is_err());
}
#[test]
fn validate_password_too_short() {
assert!(validate_password("short").is_err());
}
#[test]
fn validate_password_seven_chars() {
assert!(validate_password("1234567").is_err());
}
#[test]
fn validate_password_control_chars() {
assert!(validate_password("password\x01long_enough").is_err());
}
#[test]
fn validate_password_valid() {
assert!(validate_password("password123").is_ok());
}
#[test]
fn validate_password_exactly_8_chars() {
assert!(validate_password("12345678").is_ok());
}
#[test]
fn validate_password_exactly_256_chars() {
let pw = "a".repeat(256);
assert!(validate_password(&pw).is_ok());
}
#[test]
fn validate_password_257_chars_rejected() {
let pw = "a".repeat(257);
assert!(validate_password(&pw).is_err());
}
// --- API key name validation ---
#[test]
fn validate_api_key_name_empty() {
assert!(validate_api_key_name("").is_err());
}
#[test]
fn validate_api_key_name_valid() {
assert!(validate_api_key_name("my-key").is_ok());
}
#[test]
fn validate_api_key_name_with_spaces() {
assert!(validate_api_key_name("my key name").is_ok());
}
#[test]
fn validate_api_key_name_control_chars() {
assert!(validate_api_key_name("key\x00name").is_err());
}
#[test]
fn validate_api_key_name_exactly_128() {
let name = "a".repeat(128);
assert!(validate_api_key_name(&name).is_ok());
}
#[test]
fn validate_api_key_name_too_long() {
let name = "a".repeat(129);
assert!(validate_api_key_name(&name).is_err());
}
}
|