server error when trying to update social links at dev environment

[shootermv]

Describe the Issue

server error when trying to update social links (Internet Presence) at dev environment

Affected Page

settings

Steps to Reproduce

1. start dev server 'pnpm run develop'
2. Click on 'settings'
3. Scroll down to 'Your Internet Presence'
4. fill all the 4 fields with some data
5. Press 'save'
6. you will See error (if you have 'network' tab at developer tool open, you will see the error status is 403 )

Expected behavior

social links data should be saved

Screenshots

System

• Device: [desktop]
• OS: [WSL2, Windows 10, Ubuntu 20.04]
• Browser: [Chrome]
• Version: [e.g. 22]

Additional context

No response

[ShaunSHamilton]

I cannot reproduce any errors here.

Were you signed in with a previous session? Did you recently hard refresh the page and run pnpm run seed?

---

EDIT: I see you can get an error putting in the wrong domains:

freeCodeCamp/api-server/src/server/boot/settings.js

Lines 254 to 296 in 684ce99

	const allowedSocialsAndDomains = {
	githubProfile: 'github.com',
	linkedin: 'linkedin.com',
	twitter: 'twitter.com',
	website: ''
	};
	const socialVals = Object.keys(allowedSocialsAndDomains);
	export function updateMySocials(...args) {
	const buildUpdate = body => _.pick(body, socialVals);
	const validate = update => {
	// Socials should point to their respective domains
	// or be empty strings
	return Object.keys(update).every(key => {
	const val = update[key];
	if (val === '') {
	return true;
	}
	if (key === 'website') {
	return isURL(val, { require_protocol: true });
	}
	const domain = allowedSocialsAndDomains[key];
	try {
	const url = new URL(val);
	const topDomain = url.hostname.split('.').slice(-2);
	if (topDomain.length === 2) {
	return topDomain.join('.') === domain;
	}
	return false;
	} catch (e) {
	return false;
	}
	});
	};
	createUpdateUserProperties(
	buildUpdate,
	validate,
	'flash.updated-socials'
	)(...args);
	}

[shootermv]

I must note that i was able to send and save 'about' data (form located at same page) ...

[huyenltnguyen]

@shootermv What are the values you entered into the inputs?

The UI doesn't validate the domain, but the server does, and:

• The GitHub input only accepts a URL starting with github.com
• The LinkedIn input only accepts a URL starting with linkedin.com
• The Twitter input only accepts a URL starting with twitter.com

[shootermv]

ok, it looks like i had a space between parts of one urls:

[huyenltnguyen]

That would be considered an invalid value then, and the server erroring out is expected.

I'm going to close the issue since there is no further action to make.