podbox unit tests (#1902)

fixes https://linear.app/0xparc-pcd/issue/0XP-1168/security-focused-testing
proofcarryingdata · Sep 26, 2024 · bcd3a43 · bcd3a43
1 parent 0ac1827
commit bcd3a43
Show file tree

Hide file tree

Showing 2 changed files with 561 additions and 1 deletion.
diff --git a/apps/passport-server/src/database/queries/pipelineUserDB.ts b/apps/passport-server/src/database/queries/pipelineUserDB.ts
@@ -1,4 +1,5 @@
 import { normalizeEmail } from "@pcd/util";
+import { validate } from "email-validator";
 import { Pool, PoolClient } from "postgres-pool";
 import { v4 as uuid } from "uuid";
 import { traceUser } from "../../services/generic-issuance/honeycombQueries";
@@ -56,6 +57,10 @@ export class PipelineUserDB implements IPipelineUserDB {
         this.db,
         "createOrGetUser",
         async (client): Promise<PipelineUser> => {
+          if (!validate(email)) {
+            throw new Error(`Invalid email: ${email}`);
+          }
+
           span?.setAttribute("email", email);
           const existingUser = await this.getUserByEmail(email, client);
           if (existingUser) {