From 71cb2ca7f8191bf1c9b8e097cce89693ba0773f2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Gerg=C5=91=20M=C3=B3ricz?= Date: Tue, 2 Dec 2025 16:52:14 +0100 Subject: [PATCH] fix(api/admin/integration/validate-api-key): complain if api key format invalid --- apps/api/src/controllers/v0/admin/validate-api-key.ts | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/apps/api/src/controllers/v0/admin/validate-api-key.ts b/apps/api/src/controllers/v0/admin/validate-api-key.ts index 709337876..83d08cc69 100644 --- a/apps/api/src/controllers/v0/admin/validate-api-key.ts +++ b/apps/api/src/controllers/v0/admin/validate-api-key.ts @@ -3,6 +3,7 @@ import { Request, Response } from "express"; import { supabase_service } from "../../../services/supabase"; import crypto from "crypto"; import { z } from "zod"; +import { validate as isUuid } from "uuid"; export async function integValidateApiKeyController( req: Request, @@ -54,6 +55,10 @@ export async function integValidateApiKeyController( const normalizedApiKey = body.apiKey.replace(/^fc-/, ""); + if (!isUuid(normalizedApiKey)) { + return res.status(400).json({ error: "API key is invalid" }); + } + const { data: apiKeyData, error: apiKeyError } = await supabase_service .from("api_keys") .select("*")