Method validateDomain

server/src/brand-manager.ts:137–276

* Validates a domain's brand.json file

(domain: string, options?: { skipCache?: boolean })

   * Validates a domain's brand.json file
   */
  async validateDomain(domain: string, options?: { skipCache?: boolean }): Promise<BrandValidationResult> {
    const normalizedDomain = domain.replace(/^https?:\/\//, '').replace(/\/$/, '');
    const cacheKey = normalizedDomain;

    // Check caches unless explicitly skipped
    if (!options?.skipCache) {
      // Check successful validation cache first
      const cachedValid = this.validationCache.get(cacheKey);
      if (cachedValid) {
        return cachedValid;
      }

      // Check failed lookup cache
      const cachedFailed = this.failedLookupCache.get(cacheKey);
      if (cachedFailed) {
        return cachedFailed;
      }
    }

    const url = `https://${normalizedDomain}/.well-known/brand.json`;

    const result: BrandValidationResult = {
      valid: false,
      errors: [],
      warnings: [],
      domain: normalizedDomain,
      url,
    };

    try {
      // CodeQL: URL is constructed as https://{domain}/.well-known/brand.json
      const response = await axios.get(url, { // lgtm[js/request-forgery]
        timeout: 10000,
        headers: {
          Accept: 'application/json',
          'User-Agent': AAO_UA_VALIDATOR,
        },
        validateStatus: () => true,
        responseType: 'arraybuffer',
      });

      result.status_code = response.status;

      if (response.status !== 200) {
        const statusMessage =
          response.status === 404
            ? `File not found at ${url}`
            : `HTTP ${response.status} error fetching ${url}`;
        result.errors.push({
          field: 'http_status',
          message: statusMessage,
          severity: 'error',
        });
        // Cache failed lookups for 1 hour
        this.failedLookupCache.set(cacheKey, result);
        return result;
      }