Merge pull request #18924 from ashanthamara/bug-fixing

Update default userstore username regex to restrict *, ? and %
wso2 · Jan 16, 2024 · 4d57247 · 4d57247
2 parents 5b415e4 + 30ec87d
commit 4d57247
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/modules/distribution/src/repository/resources/conf/default.json b/modules/distribution/src/repository/resources/conf/default.json
@@ -48,7 +48,7 @@
   "authorization_manager.properties.GroupAndRoleSeparationEnabled": "true",
   "authorization_manager.properties.GroupAndRoleSeparationImprovementsEnabled": "true",
 
-  "user_store.properties.UsernameJavaScriptRegEx": "^[\\S]{3,50}$",
+  "user_store.properties.UsernameJavaScriptRegEx": "^[^\\s*?%]{3,50}$",
 
   "default_management_ui.path": "console",
   "legacy_authz_runtime.enable": false

diff --git a/modules/distribution/src/repository/resources/conf/infer.json b/modules/distribution/src/repository/resources/conf/infer.json
@@ -1,10 +1,10 @@
 {
   "user_store.type": {
     "database": {
-      "user_store.properties.UsernameJavaRegEx": "^[\\S]{3,50}$"
+      "user_store.properties.UsernameJavaRegEx": "^[^\\s*?%]{3,50}$"
     },
     "database_unique_id": {
-      "user_store.properties.UsernameJavaRegEx": "^[\\S]{3,50}$"
+      "user_store.properties.UsernameJavaRegEx": "^[^\\s*?%]{3,50}$"
     },
     "read_only_ldap": {
       "user_store.properties.UsernameJavaRegEx": "[a-zA-Z0-9._\\-|//]{3,50}$"