Function IsValidPrincipalName

auth/role.go:134–160

IsValidPrincipalName checks if the given user/role name would be valid. Valid names must be valid UTF-8, containing at least one alphanumeric (except for the guest user), and no colons, commas, backticks, or slashes.

(name string)

// IsValidPrincipalName checks if the given user/role name would be valid. Valid names must be valid UTF-8, containing
// at least one alphanumeric (except for the guest user), and no colons, commas, backticks, or slashes.
func IsValidPrincipalName(name string) bool {
	namelen := len(name)
	if namelen == 0 {
		return true // guest user
	}
	if namelen > base.MaxPrincipalNameLen {
		return false
	}
	if !utf8.ValidString(name) {
		return false
	}
	seenAnAlphanum := false
	for _, char := range name {
		// Reasons for forbidding each of these:
		// colons: basic authentication uses them to separate usernames from passwords
		// commas: fails channels.IsValidChannel, which channels.compileAccessMap uses via SetFromArray
		// slashes: would need to make many (possibly breaking) changes to routing
		// backticks: MB-50619
		if char == '/' || char == ':' || char == ',' || char == '`' {
			return false
		}
		if !seenAnAlphanum && (unicode.IsLetter(char) || unicode.IsNumber(char)) {
			seenAnAlphanum = true
		}
	}
	return seenAnAlphanum
}

// ValidatePrincipalName performs the same checks as IsValidPrincipalName, but adds length check and returns a more
// verbose error message.  This function is slower than IsValidPrincipalName, and should be used only for user