fix(auth): align frontend password validation with production policy
This commit is contained in:
@@ -397,6 +397,16 @@ export const registerAdminRoutes = (deps: RegisterAdminRoutesDeps) => {
|
||||
|
||||
const parsed = adminCreateUserSchema.safeParse(req.body);
|
||||
if (!parsed.success) {
|
||||
const summarizedIssues = parsed.error.issues.map((issue) => ({
|
||||
code: issue.code,
|
||||
path: issue.path.join("."),
|
||||
message: issue.message,
|
||||
}));
|
||||
console.warn("[auth/users] validation failed", {
|
||||
issues: summarizedIssues,
|
||||
requestId: req.headers["x-request-id"],
|
||||
ip: req.ip || req.connection.remoteAddress || "unknown",
|
||||
});
|
||||
return res.status(400).json({
|
||||
error: "Validation error",
|
||||
message: "Invalid user payload",
|
||||
|
||||
Reference in New Issue
Block a user