aboutsummaryrefslogtreecommitdiffstats
path: root/adenosine-pds/src/lib.rs
diff options
context:
space:
mode:
Diffstat (limited to 'adenosine-pds/src/lib.rs')
-rw-r--r--adenosine-pds/src/lib.rs17
1 files changed, 16 insertions, 1 deletions
diff --git a/adenosine-pds/src/lib.rs b/adenosine-pds/src/lib.rs
index 5794b95..6c6b1c5 100644
--- a/adenosine-pds/src/lib.rs
+++ b/adenosine-pds/src/lib.rs
@@ -551,8 +551,23 @@ fn xrpc_post_handler(
.map_err(|e| XrpcError::BadRequest(format!("failed to parse JSON body: {}", e)))?;
// TODO: validate handle, email, recoverykey
let mut srv = srv.lock().unwrap();
+ if let Some(ref domain) = srv.config.registration_domain {
+ // TODO: better matching, should not allow arbitrary sub-domains
+ if !req.handle.ends_with(domain) {
+ Err(XrpcError::BadRequest(format!(
+ "handle is not under registration domain ({})",
+ domain
+ )))?;
+ }
+ } else {
+ Err(XrpcError::BadRequest(
+ "account registration is disabled on this PDS".to_string(),
+ ))?;
+ };
if srv.config.invite_code.is_some() && srv.config.invite_code != req.inviteCode {
- Err(XrpcError::Forbidden("a valid invite code is required".to_string()))?;
+ Err(XrpcError::Forbidden(
+ "a valid invite code is required".to_string(),
+ ))?;
};
let sess = create_account(&mut srv, &req, true)?;
Ok(json!(sess))