From 331c4f64d68b43397e5c97a49a7547f44d45235a Mon Sep 17 00:00:00 2001
From: Trent Larson <trent@trentlarson.com>
Date: Wed, 7 Feb 2024 18:23:13 -0700
Subject: [PATCH] add check for valid "did:" DIDs

---
 src/libs/endorserServer.ts |  4 ++++
 src/views/ContactsView.vue | 17 +++++++++++++++--
 src/views/StartView.vue    |  2 +-
 3 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/src/libs/endorserServer.ts b/src/libs/endorserServer.ts
index 345dd9706..b55981dd7 100644
--- a/src/libs/endorserServer.ts
+++ b/src/libs/endorserServer.ts
@@ -241,6 +241,10 @@ export type CreateAndSubmitClaimResult = SuccessResult | ErrorResult;
 // See https://github.com/trentlarson/endorser-ch/blob/0cb626f803028e7d9c67f095858a9fc8542e3dbd/server/api/services/util.js#L6
 const HIDDEN_DID = "did:none:HIDDEN";
 
+export function isDid(did: string) {
+  return did.startsWith("did:");
+}
+
 export function isHiddenDid(did: string) {
   return did === HIDDEN_DID;
 }
diff --git a/src/views/ContactsView.vue b/src/views/ContactsView.vue
index b10781f7f..a70124c3b 100644
--- a/src/views/ContactsView.vue
+++ b/src/views/ContactsView.vue
@@ -44,14 +44,14 @@
       <div class="w-full text-right">
         Hours to Add:
         <input
-          class="border border rounded border-slate-400 w-24 text-right"
+          class="border rounded border-slate-400 w-24 text-right"
           type="text"
           placeholder="1"
           v-model="hourInput"
         />
         <br />
         <input
-          class="border border rounded border-slate-400 w-48"
+          class="border rounded border-slate-400 w-48"
           type="text"
           placeholder="Description"
           v-model="hourDescriptionInput"
@@ -303,6 +303,7 @@ import {
   CONTACT_URL_PREFIX,
   GiveServerRecord,
   GiveVerifiableCredential,
+  isDid,
   RegisterVerifiableCredential,
   SERVICE_ID,
 } from "@/libs/endorserServer";
@@ -697,6 +698,18 @@ export default class ContactsView extends Vue {
       );
       return;
     }
+    if (!isDid(newContact.did)) {
+      this.$notify(
+        {
+          group: "alert",
+          type: "danger",
+          title: "Invalid DID",
+          text: "The DID is not valid. It must begin with 'did:'",
+        },
+        -1,
+      );
+      return;
+    }
     newContact.seesMe = true; // since we will immediately set that on the server
     return db.contacts
       .add(newContact)
diff --git a/src/views/StartView.vue b/src/views/StartView.vue
index 5700d28c0..a75be471b 100644
--- a/src/views/StartView.vue
+++ b/src/views/StartView.vue
@@ -38,7 +38,7 @@
         @click="onClickYes()"
         class="block w-full text-center text-lg uppercase bg-blue-600 text-white px-2 py-3 rounded-md"
       >
-        Yes
+        Yes, generate one
       </a>
       <a
         @click="onClickNo()"