Validate usernames on account creation like PSFPortal

This commit is contained in:
Chord 2020-05-09 20:13:26 +02:00
parent ceb58ed39a
commit 52de77a735

View file

@ -34,6 +34,8 @@ class LoginSessionActor extends Actor with MDCContextAware {
import scala.concurrent.ExecutionContext.Implicits.global import scala.concurrent.ExecutionContext.Implicits.global
private case class UpdateServerList() private case class UpdateServerList()
val usernameRegex = """[A-Za-z0-9]{3,}""".r
var sessionId : Long = 0 var sessionId : Long = 0
var leftRef : ActorRef = ActorRef.noSender var leftRef : ActorRef = ActorRef.noSender
var rightRef : ActorRef = ActorRef.noSender var rightRef : ActorRef = ActorRef.noSender
@ -212,6 +214,9 @@ class LoginSessionActor extends Actor with MDCContextAware {
def createNewAccount : Receive = { def createNewAccount : Receive = {
case CreateNewAccount(connection, username, password, newToken) => case CreateNewAccount(connection, username, password, newToken) =>
log.info(s"Account $username does not exist, creating new account...") log.info(s"Account $username does not exist, creating new account...")
username match {
case usernameRegex(_*) => ;
val bcryptPassword : String = password.bcrypt(numBcryptPasses) val bcryptPassword : String = password.bcrypt(numBcryptPasses)
connection.get.inTransaction { connection.get.inTransaction {
@ -252,6 +257,12 @@ class LoginSessionActor extends Actor with MDCContextAware {
case _ => case _ =>
failWithError(s"Something to do?") failWithError(s"Something to do?")
} }
case _ =>
log.warn(s"Account '$username' does not match regex")
context.become(finishAccountLogin)
self ! FinishAccountLogin(connection, username, newToken, false)
}
case default => case default =>
failWithError(s"Invalid message '$default' received in createNewAccount") failWithError(s"Invalid message '$default' received in createNewAccount")
} }