commit d80dd0fd807562b31b64e68b2aad8c6626f86e5f · bretton.dev/coves

+32 -4

internal/api/handlers/community/block.go

···

       6
        
       	"encoding/json"

     

       7
        
       	"log"

     

       8
        
       	"net/http"

     

       0
        
       
     

       9
        
       	"strings"

     

       10
        
       )

     

       11
        
       

     
···

       45
        
       		return

     

       46
        
       	}

     

       47
        
       

     

       48
       -
       	// Validate format (DID or handle)

     

       49
       -
       	if !strings.HasPrefix(req.Community, "did:") && !strings.HasPrefix(req.Community, "!") {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       50
        
       		writeError(w, http.StatusBadRequest, "InvalidRequest",

     

       51
        
       			"community must be a DID (did:plc:...) or handle (!name@instance.com)")

     

       52
        
       		return

     
···

       111
        
       		return

     

       112
        
       	}

     

       113
        
       

     

       114
       -
       	// Validate format (DID or handle)

     

       115
       -
       	if !strings.HasPrefix(req.Community, "did:") && !strings.HasPrefix(req.Community, "!") {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       116
        
       		writeError(w, http.StatusBadRequest, "InvalidRequest",

     

       117
        
       			"community must be a DID (did:plc:...) or handle (!name@instance.com)")

     

       118
        
       		return

···

       6
        
       	"encoding/json"

     

       7
        
       	"log"

     

       8
        
       	"net/http"

     

       9
       +
       	"regexp"

     

       10
        
       	"strings"

     

       11
        
       )

     

       12
        
       

     
···

       46
        
       		return

     

       47
        
       	}

     

       48
        
       

     

       49
       +
       	// Validate format (DID or handle) with proper regex patterns

     

       50
       +
       	if strings.HasPrefix(req.Community, "did:") {

     

       51
       +
       		// Validate DID format: did:method:identifier

     

       52
       +
       		// atProto supports did:plc and did:web

     

       53
       +
       		didRegex := regexp.MustCompile(`^did:(plc|web):[a-zA-Z0-9._:%-]+$`)

     

       54
       +
       		if !didRegex.MatchString(req.Community) {

     

       55
       +
       			writeError(w, http.StatusBadRequest, "InvalidRequest", "invalid DID format")

     

       56
       +
       			return

     

       57
       +
       		}

     

       58
       +
       	} else if strings.HasPrefix(req.Community, "!") {

     

       59
       +
       		// Validate handle format: !name@domain.tld

     

       60
       +
       		if !strings.Contains(req.Community, "@") {

     

       61
       +
       			writeError(w, http.StatusBadRequest, "InvalidRequest", "handle must contain @domain")

     

       62
       +
       			return

     

       63
       +
       		}

     

       64
       +
       	} else {

     

       65
        
       		writeError(w, http.StatusBadRequest, "InvalidRequest",

     

       66
        
       			"community must be a DID (did:plc:...) or handle (!name@instance.com)")

     

       67
        
       		return

     
···

       126
        
       		return

     

       127
        
       	}

     

       128
        
       

     

       129
       +
       	// Validate format (DID or handle) with proper regex patterns

     

       130
       +
       	if strings.HasPrefix(req.Community, "did:") {

     

       131
       +
       		// Validate DID format: did:method:identifier

     

       132
       +
       		didRegex := regexp.MustCompile(`^did:(plc|web):[a-zA-Z0-9._:%-]+$`)

     

       133
       +
       		if !didRegex.MatchString(req.Community) {

     

       134
       +
       			writeError(w, http.StatusBadRequest, "InvalidRequest", "invalid DID format")

     

       135
       +
       			return

     

       136
       +
       		}

     

       137
       +
       	} else if strings.HasPrefix(req.Community, "!") {

     

       138
       +
       		// Validate handle format: !name@domain.tld

     

       139
       +
       		if !strings.Contains(req.Community, "@") {

     

       140
       +
       			writeError(w, http.StatusBadRequest, "InvalidRequest", "handle must contain @domain")

     

       141
       +
       			return

     

       142
       +
       		}

     

       143
       +
       	} else {

     

       144
        
       		writeError(w, http.StatusBadRequest, "InvalidRequest",

     

       145
        
       			"community must be a DID (did:plc:...) or handle (!name@instance.com)")

     

       146
        
       		return