fix(security): specific case for domain (#157)

ConduitPlatform · May 13, 2022 · ef1d0db · ef1d0db
1 parent 045419b
commit ef1d0db
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/packages/security/src/admin/routes/CreateSecurityClient.route.ts b/packages/security/src/admin/routes/CreateSecurityClient.route.ts
@@ -44,9 +44,10 @@ export function getCreateSecurityClientRoute() {
         }
         const domainPattern = new RegExp('^(?!-)[A-Za-z0-9-]+([\\-\\.]{1}[a-z0-9]+)*\\.[A-Za-z]{2,6}$');
         let comparedDomain = domain;
-        if (domain.includes('*'))
+        if (domain.includes('*')) {
           comparedDomain = comparedDomain.split('*.')[1];
-        if (!domainPattern.test(comparedDomain)) throw new ConduitError('INVALID_ARGUMENTS', 400, 'Invalid domain argument');
+        }
+        if (!domainPattern.test(comparedDomain) && domain !== '*') throw new ConduitError('INVALID_ARGUMENTS', 400, 'Invalid domain argument');
       }
       let client = await Client.getInstance().create({
         clientId,