Merge branch 'develop' into OP-1189

intesys · Aug 20, 2024 · 741f9c8 · 741f9c8
2 parents 2f1f089 + 79e00e4
commit 741f9c8
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 2 deletions.
diff --git a/src/main/java/org/isf/menu/manager/UserBrowsingManager.java b/src/main/java/org/isf/menu/manager/UserBrowsingManager.java
@@ -43,6 +43,8 @@
 @Component
 public class UserBrowsingManager {
 
+	private static final String VALID_USERID_PATTERN = "^[a-z0-9-._]+$";
+
 	private MenuIoOperations ioOperations;
 
 	public UserBrowsingManager(MenuIoOperations menuIoOperations) {
@@ -97,9 +99,13 @@ public User getUserByName(String userName) throws OHServiceException {
 	 */
 	public User newUser(User user) throws OHServiceException {
 		String username = user.getUserName();
+		if (!username.matches(VALID_USERID_PATTERN)) {
+			throw new OHDataValidationException(
+							new OHExceptionMessage(MessageBundle.getMessage("angal.userbrowser.theusernamecontainsinvalidcharacters.msg")));
+		}
 		if (ioOperations.isUserNamePresent(username)) {
 			throw new OHDataIntegrityViolationException(
-					new OHExceptionMessage(MessageBundle.formatMessage("angal.userbrowser.theuseralreadyexists.fmt.msg", username)));
+							new OHExceptionMessage(MessageBundle.formatMessage("angal.userbrowser.theuseralreadyexists.fmt.msg", username)));
 		}
 		return ioOperations.newUser(user);
 	}

diff --git a/src/test/java/org/isf/menu/TestUser.java b/src/test/java/org/isf/menu/TestUser.java
@@ -29,7 +29,7 @@
 
 public class TestUser {
 
-	private String name = "TestName";
+	private String name = "testname";
 	private String passwd = "TestPaswd";
 	private String desc = "TestDesc";
 

diff --git a/src/test/java/org/isf/menu/TestUserBrowsingManager.java b/src/test/java/org/isf/menu/TestUserBrowsingManager.java
@@ -22,6 +22,7 @@
 package org.isf.menu;
 
 import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
 
 import java.util.List;
 
@@ -35,6 +36,7 @@
 import org.isf.menu.service.UserGroupIoOperationRepository;
 import org.isf.menu.service.UserIoOperationRepository;
 import org.isf.menu.service.UserMenuItemIoOperationRepository;
+import org.isf.utils.exception.OHDataValidationException;
 import org.isf.utils.exception.OHException;
 import org.isf.utils.time.TimeTools;
 import org.junit.jupiter.api.BeforeAll;
@@ -214,6 +216,17 @@ void testGetUserGroups() throws Exception {
 		assertThat(userGroupList.get(0).getCode()).isEqualTo("Z");
 	}
 
+	@Test
+	void testInvalidUserName() throws Exception {
+		assertThatThrownBy(() -> {
+			UserGroup userGroup = testUserGroup.setup(true);
+			User user = testUser.setup(userGroup, true);
+			user.setUserName("A@!");
+			userBrowsingManager.newUser(user);
+		})
+						.isInstanceOf(OHDataValidationException.class);
+	}
+
 	private String setupTestUser(boolean usingSet) throws OHException {
 		UserGroup userGroup = testUserGroup.setup(usingSet);
 		User user = testUser.setup(userGroup, usingSet);