Skip to content

Conversation

@pzlakowski
Copy link

@pzlakowski pzlakowski commented Jan 14, 2026

References

Fixes Not able to create an account with an email containing uppercase letters from eperson form #4338

Description

I have replaced regex pattern to use built-in one from Angular when we create e-person via form.

I think we should refrain from using our own regex when Angular provides one similar. Unless there is a reason which I do not know about yet.

e.g. issue shows to use pattern from src/app/register-email-form/register-email-form.component.ts

^[a-zA-Z0-9.!#$%&\'*+\/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$

where Angular tries to adhere to WHATWG spec too https://github.com/angular/angular/blob/4755bbd94964f27921ec203fc1a9233a01c84792/packages/forms/src/validators.ts#L151

Angular adds 3 different constraints compared to WHATWG:

  • Disallow local-part to begin or end with a period (.).
  • Disallow local-part length to exceed 64 characters.
  • Disallow total address length to exceed 254 characters.

Instructions for Reviewers

List of changes in this PR:

  • I have replaced pattern to use built-in email validator provided by Angular
  • I have updated test to include uppercased case

Steps test this PR:

  1. Visit http://localhost:4000/access-control/epeople/create
  2. Fill a form with uppercased e-mail e.g. TEST@example.com
  3. Create account and should success

Checklist

This checklist provides a reminder of what we are going to look for when reviewing your PR. You do not need to complete this checklist prior creating your PR (draft PRs are always welcome).
However, reviewers may request that you complete any actions in this list if you have not done so. If you are unsure about an item in the checklist, don't hesitate to ask. We're here to help!

  • My PR is created against the main branch of code (unless it is a backport or is fixing an issue specific to an older branch).
  • My PR is small in size (e.g. less than 1,000 lines of code, not including comments & specs/tests), or I have provided reasons as to why that's not possible.
  • My PR passes ESLint validation using npm run lint
  • My PR doesn't introduce circular dependencies (verified via npm run check-circ-deps)
  • My PR includes TypeDoc comments for all new (or modified) public methods and classes. It also includes TypeDoc for large or complex private methods.
  • My PR passes all specs/tests and includes new/updated specs or tests based on the Code Testing Guide.
  • My PR aligns with Accessibility guidelines if it makes changes to the user interface.
  • My PR uses i18n (internationalization) keys instead of hardcoded English text, to allow for translations.
  • My PR includes details on how to test it. I've provided clear instructions to reviewers on how to successfully test this fix or feature.
  • If my PR includes new libraries/dependencies (in package.json), I've made sure their licenses align with the DSpace BSD License based on the Licensing of Contributions documentation.
  • If my PR includes new features or configurations, I've provided basic technical documentation in the PR itself.
  • If my PR fixes an issue ticket, I've linked them together.

@tdonohue tdonohue added bug authentication: general general authentication issues authentication: password related to built in password authentication 1 APPROVAL pull request only requires a single approval to merge port to dspace-7_x This PR needs to be ported to `dspace-7_x` branch for next bug-fix release port to dspace-8_x This PR needs to be ported to `dspace-8_x` branch for next bug-fix release port to dspace-9_x This PR needs to be ported to `dspace-9_x` branch for next bug-fix release labels Jan 14, 2026
@tdonohue tdonohue moved this to 🙋 Needs Reviewers Assigned in DSpace 10.0 Release Jan 14, 2026
@alanorth
Copy link
Contributor

Thanks @pzlakowski. I agree that we should not be maintaining our own validation logic for something common like emails when Angular provides one that is likely better tested.

Having said that, I tested this on DSpace 8 and noticed that the email TEST@example is valid with this PR. I'm surprised that Angular's validator would consider that valid. Is the behavior different in DSpace 9/main?

@pzlakowski
Copy link
Author

pzlakowski commented Jan 15, 2026

@alanorth this is desired behaviour https://angular.dev/api/forms/Validators#email given WHATWG spec. Angular recommends to use custom regex pattern if business needs are different. There should be no difference.

I think if we wanted to support to require top-level domain we could use regex like this:

^(?=.{1,254}$)(?=.{1,64}@)[-!#$%&'*+/0-9=?A-Z^_`a-z{|}~]+(\.[-!#$%&'*+/0-9=?A-Z^_`a-z{|}~]+)*@[A-Za-z0-9]([A-Za-z0-9-]{0,61}[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]{0,61}[A-Za-z0-9])?)+$

This is derived from Angular regex, simply swapped from * to + at the end to enforce it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1 APPROVAL pull request only requires a single approval to merge authentication: general general authentication issues authentication: password related to built in password authentication bug port to dspace-7_x This PR needs to be ported to `dspace-7_x` branch for next bug-fix release port to dspace-8_x This PR needs to be ported to `dspace-8_x` branch for next bug-fix release port to dspace-9_x This PR needs to be ported to `dspace-9_x` branch for next bug-fix release

Projects

Status: 🙋 Needs Reviewers Assigned

Development

Successfully merging this pull request may close these issues.

Not able to create an account with an email containing uppercase letters from eperson form

4 participants