Registration - Username validation not working

[kulbon]

Describe the bug
Ability to register new account on frontend with empty username. Username validation is not working.

extensions/users-permissions/models/users.settings.json

"attributes": {
    "username": {
      "type": "string",
      "minLength": 3,
      "unique": true,
      "configurable": false,
      "required": true
    },

Steps to reproduce the behavior

await axios.post(`${process.env.REACT_APP_STRAPI_URL}/auth/local/register`, {
      email: email,
      password: password,
      confirmPassword: confirmPassword,
      username: username
    });

Screenshots

System

• Node.js version: v11.15.0
• NPM version: 6.7.0
• Strapi version: https://github.com/strapi/strapi/releases/tag/v3.0.0-beta.19.3
• Database: mysql, 10.3.7-MariaDB-1:10.3.7+maria
• Operating system: debian 9
  ere.

[lauriejim]

Thank you for reporting this issue.
This will help us if you can investigate this issue and provide a PR to fix it.
Thank you.

[kbariotis]

@kulbon adding a custom user.settings.json shouldn't be needed in this case as the users-permissions plugin has the username field required by default.

But I cannot see where this file is being loaded. @lauriejim would you be able to guide me in the codebase a little bit regarding this? I would love to help.

I've found where these .settings.json files are being generated but now where are being loaded. Validation for the users-permissions happens in the controller directly atm. Are these .settings.json files being loaded at all or is it possible that this functionality is not implemented yet?