supabase / auth / 20440822233

69%

master: 69%

Build Type

Pull #2304

github

Committed by Chris Stockton

Commit Message

fix: tighten email validation rules

The goal here is to limit the conditions which resolver implementations can
affect the determinism of our DNS checks, without allowing transient DNS
failures to block signups:

* Reject single label email domains (`a@a`, `a@gmail`)
* Use absolute FQDN for DNS lookups to avoid implicit search behavior
* Preserves the RFC 5321 fallback, but narrows when it is called
* Add a whitelist for major email providers to lower latency
* Reject mutated display name address that the mail parser might accept
* Add test coverage for some corner cases

Pull Request Pull Request #2304: fix: tighten email validation rules

Run Details

14 of 16 new or added lines in 1 file covered. (87.5%)

24 existing lines in 1 file now uncovered.

14668 of 21349 relevant lines covered (68.71%)

78.65 hits per line