feat(profile): patterns for bsky and mastodon validation

app/Http/Controllers/ProfileController.php

@@ -15,12 +15,10 @@ class ProfileController extends Controller
 
     public function index()
     {
-
     }
 
     public function create(Request $request)
     {
-
     }
 
     public static function createOrUpdate(Request $request, int $applicationId): Profile
@@ -88,12 +86,10 @@ public static function getByApplicationId(int|null $applicationId): Profile|null
 
     public function store(Request $request)
     {
-
     }
 
     public function show(Profile $profile)
     {
-
     }
 
     public function edit(Profile $profile)
@@ -148,13 +144,29 @@ public static function getValidations()
             ],
             "mastodon" => [
                 'nullable',
-                'regex:/^([0-9a-z_]{3,64})@([0-9a-z_]{3,64})\.([0-9a-z_.]{2,64})$/i',
-                // TODO: improve validation
+                // Mastodon user name validation loosely based on
+                // https://docs.joinmastodon.org/spec/webfinger/#intro and
+                // https://datatracker.ietf.org/doc/html/rfc7565#section-7
+                /*
+                 * acctURI     = "acct" ":" userpart "@" host
+                 * userpart    = unreserved / sub-delims 0*( unreserved / pct-encoded / sub-delims )
+                 * host        = IP-literal / IPv4address / reg-name
+                 * IP-literal  = "[" ( IPv6address / IPvFuture  ) "]"
+                 * IPvFuture   = "v" 1*HEXDIG "." 1*( unreserved / sub-delims / ":" )
+                 * reg-name    = *( unreserved / pct-encoded / sub-delims )
+                 * reserved    = gen-delims / sub-delims
+                 * gen-delims  = ":" / "/" / "?" / "#" / "[" / "]" / "@"
+                 * sub-delims  = "!" / "$" / "&" / "'" / "(" / ")"/ "*" / "+" / "," / ";" / "="
+                 * pct-encoded = "%" HEXDIG HEXDIG
+                 * unreserved  = ALPHA / DIGIT / "-" / "." / "_" / "~"
+                 */
+                'regex:/([A-Z0-9\-._~!$&\'\(\)\*,;=][A-Z0-9\-._~%!$&\'\(\)\*,;=]*)@([A-Z0-9\-._~%!$&\'\(\)\*,;=]+\.[A-Z]{2,})/i'
             ],
             "bluesky" => [
                 'nullable',
-                'regex:/^[0-9a-z_.]{3,64}$/i',
-                // TODO: improve validation
+                // Bluesky user name validation:
+                // https://atproto.com/specs/handle
+                'regex:/^([a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?$/',
             ],
             "telegram" => [
                 'nullable',

lang/en/validation.php

@@ -30,10 +30,10 @@
             'regex' => 'Please verify your Twitter handle, it must be between 4 and 15 characters and only contain letters, numbers and underscores (_).'
         ],
         'mastodon' => [
-            'regex' => 'Please verify your Mastodon handle, it must be in the format [email protected]' // TODO: update if needed
+            'regex' => 'Please verify your Mastodon handle, it must be in the format [email protected]'
         ],
         'bluesky' => [
-            'regex' => 'Please verify your Bluesky handle, it must be between 3 and 64 characters and only contain letters, numbers, dots (.) and underscores (_).' // TODO: update if needed
+            'regex' => 'Please verify your Bluesky handle, it may only contain letters, numbers, dots (.) and hyphens (-).'
         ],
         'telegram' => [
             'regex' => 'Please verify your Telegram handle, it must be between 5 and 32 characters and only contain letters, numbers and underscores (_).'