TalexDreamSoul/teatea-pension
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: use real settings data boundaries

Browse Source
This commit is contained in:
admin
2026-07-02 19:53:41 -07:00
parent 1cdf89c608
commit 5412bbb143
14 changed files with 414 additions and 170 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
app/api/organizations/[id]/route.ts
View File

@@ -37,6 +37,10 @@ function readStatus(value: unknown): OrganizationStatus | null {
return ORGANIZATION_STATUSES.find((status) => status === value) ?? null;
}
function isValidSlug(value: string): boolean {
return /^[a-z0-9][a-z0-9-]{1,47}$/.test(value) && !value.endsWith("-");
}
export async function PATCH(request: Request, context: RouteContext): Promise<Response> {
const { id } = await context.params;
const auth = await requirePermission("organization:manage", {
@@ -55,7 +59,7 @@ export async function PATCH(request: Request, context: RouteContext): Promise<Re
}
const name = readString(body, "name");
const slug = readString(body, "slug");
const slug = readString(body, "slug").toLowerCase();
const oidcIssuerUrl = readString(body, "oidcIssuerUrl");
const oidcClientId = readString(body, "oidcClientId");
const oidcClientSecret = readString(body, "oidcClientSecret");
@@ -66,6 +70,12 @@ export async function PATCH(request: Request, context: RouteContext): Promise<Re
if ("status" in body && !status) {
return jsonFailure("机构状态无效");
}
if ("slug" in body && !slug) {
return jsonFailure("机构标识不能为空");
}
if (slug && !isValidSlug(slug)) {
return jsonFailure("机构标识仅支持小写字母、数字和连字符，长度 2-48 位，且不能以连字符结尾");
}
const registrationEnabled = "registrationEnabled" in body ? readBoolean(body, "registrationEnabled") : null;
const oidcEnabled = "oidcEnabled" in body ? readBoolean(body, "oidcEnabled") : null;
const oidcAutoProvision = "oidcAutoProvision" in body ? readBoolean(body, "oidcAutoProvision") : null;