🐛 Validate domain name

src/errors/errors.constants.ts

@@ -44,6 +44,7 @@ export const CURSOR_PIPE_FORMAT = '400015: Invalid cursor format';
 export const EMAIL_DELETE_PRIMARY = '400016: Cannot delete primary email';
 export const CANNOT_UPDATE_ROLE_SOLE_OWNER =
   '400017: Cannot change the role of the only owner';
+export const INVALID_DOMAIN = '400018: Invalid domain';
 
 export const EMAIL_USER_CONFLICT =
   '409001: User with this email already exists';

src/modules/domains/domains.service.ts

@@ -13,12 +13,13 @@ import {
   domainsWhereUniqueInput,
 } from '@prisma/client';
 import got from 'got';
+import { URL } from 'url';
 import {
   DOMAIN_NOT_FOUND,
   DOMAIN_NOT_VERIFIED,
+  INVALID_DOMAIN,
   UNAUTHORIZED_RESOURCE,
 } from '../../errors/errors.constants';
-import { URL } from 'url';
 import { DnsService } from '../../providers/dns/dns.service';
 import { Expose } from '../../providers/prisma/prisma.interface';
 import { PrismaService } from '../../providers/prisma/prisma.service';
@@ -39,8 +40,16 @@ export class DomainsService {
     groupId: number,
     data: Omit<Omit<domainsCreateInput, 'group'>, 'verificationCode'>,
   ): Promise<domains> {
-    const fullUrl = new URL(data.domain);
-    data.domain = fullUrl.hostname;
+    try {
+      const fullUrl = new URL(data.domain);
+      data.domain = fullUrl.hostname;
+    } catch (error) {}
+    if (
+      !/(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9][a-z0-9-]{0,61}[a-z0-9]$/.test(
+        data.domain,
+      )
+    )
+      throw new BadRequestException(INVALID_DOMAIN);
     const verificationCode = this.tokensService.generateUuid();
     const currentProfilePicture = await this.prisma.groups.findOne({
       where: { id: groupId },