AuthController doesn't seem to validate that input is a string

[cxcorp]

user-service/src/controllers/AuthController.ts

Line 31 in c90b875

if (!req.body.serviceIdentifier || !req.body.username || !req.body.password) {

Try: GET /?serviceIdentifier=7e100baf-f4b1-4956-9b65-231bc29fe079&serviceIdentifier=7e100baf-f4b1-4956-9b65-231bc29fe079

select * from serviceswhereservice_identifier = '7e100baf-f4b1-4956-9b65-231bc29fe079', '7e100baf-f4b1-4956-9b65-231bc29fe079' limit 1 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ' '7e100baf-f4b1-4956-9b65-231bc29fe079' limit 1' at line 1

Sentry issue: https://tko-aly-ry.sentry.io/issues/3918528895/

Should check typeof req.body.serviceIdentifier === 'string' and for the other fields as well. Probably in all other controllers and methods too.

[MergHQ]

We should just use Zod for example