Harden request validation and admin UX cues

2026-06-30 08:45:28 +02:00
parent 1191abc914
commit 33ba00a682
11 changed files with 248 additions and 70 deletions
@@ -15,16 +15,21 @@ public static partial class AuthEndpoints

    private static async Task<IResult> TeamLogin(
        HttpContext context,
-        TeamLoginRequest request,
+        TeamLoginRequest? request,
        AwardsDbContext db,
        IUserSessionService userSessionService)
    {
-        var login = NormalizeTeamLogin(request.Login);
+        if (request is null)
+        {
+            return Results.BadRequest(new { message = "Login und Passwort sind erforderlich." });
+        }
+
+        var login = NormalizeTeamLogin(request.Login ?? string.Empty);
        var password = request.Password ?? string.Empty;

        if (string.IsNullOrWhiteSpace(login) || string.IsNullOrWhiteSpace(password))
        {
-            return Results.Unauthorized();
+            return Results.BadRequest(new { message = "Login und Passwort sind erforderlich." });
        }

        var member = await db.TeamMembers.FirstOrDefaultAsync(item => item.Login == login, context.RequestAborted);
@@ -120,8 +125,8 @@ public static partial class AuthEndpoints
            : await db.TeamMembers.FirstOrDefaultAsync(item => item.BoundTwitchUserId == twitchUserId, cancellationToken);
    }

-    private static string NormalizeTeamLogin(string value) =>
-        value.Trim().TrimStart('@').ToLowerInvariant();
+    private static string NormalizeTeamLogin(string? value) =>
+        (value ?? string.Empty).Trim().TrimStart('@').ToLowerInvariant();

    private static string NormalizeTwitchUserId(string? value) =>
        (value ?? string.Empty).Trim().TrimStart('@').ToLowerInvariant();