Skip to content

fix(auth): reject blank anonymous public keys - #211

Merged
ralyodio merged 1 commit into
profullstack:masterfrom
aiirvizionz:clientkit/register-anon-public-key-trim-guard
Jul 30, 2026
Merged

fix(auth): reject blank anonymous public keys#211
ralyodio merged 1 commit into
profullstack:masterfrom
aiirvizionz:clientkit/register-anon-public-key-trim-guard

Conversation

@aiirvizionz

Copy link
Copy Markdown
Contributor

Summary

  • reject whitespace-only publicKey payloads during anonymous invite registration
  • trim valid public keys before storing them
  • add regression coverage that stops blank keys before session or invite validation

Test

  • node node_modules\vitest\vitest.mjs run --config %TEMP%\qryptchat-vitest-minimal.config.mjs "src/app/api/auth/register-anon/route.test.js"
  • git diff --check

uGig billing

  • Expected invoice: 0.50 USD if accepted/merged
  • Counted as revenue now: no, pending review/payment

return NextResponse.json({ error: 'Public key is required' }, { status: 400 });
}
const normalizedPublicKey = publicKey.trim();
if (!normalizedPublicKey) {
@ralyodio
ralyodio merged commit 1b10c18 into profullstack:master Jul 30, 2026
7 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants