snapshot of https://github.com/mattermost/mattermost.git (master, 2026-09-16; blobs > 131072B omitted)

server/public/model/member_invite.go

@@ -0,0 +1,114 @@
+// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
+// See LICENSE.txt for license information.
+
+package model
+
+import (
+	"encoding/json"
+	"net/http"
+	"unicode/utf8"
+)
+
+type MemberInvite struct {
+	Emails     []string               `json:"emails"`
+	ChannelIds []string               `json:"channelIds,omitempty"`
+	Message    string                 `json:"message"`
+	Profiles   []*MemberInviteProfile `json:"profiles,omitempty"`
+}
+
+// MemberInviteProfile carries admin-chosen profile fields for a single invited email,
+// applied to the account created from that invitation.
+type MemberInviteProfile struct {
+	Email     string `json:"email"`
+	Username  string `json:"username"`
+	FirstName string `json:"first_name"`
+	LastName  string `json:"last_name"`
+}
+
+func (i *MemberInvite) Auditable() map[string]any {
+	return map[string]any{
+		"emails":        i.Emails,
+		"channel_ids":   i.ChannelIds,
+		"profile_count": len(i.Profiles),
+	}
+}
+
+// IsValid validates that the invitation info is loaded correctly and with the correct structure
+func (i *MemberInvite) IsValid() *AppError {
+	if len(i.Emails) == 0 {
+		return NewAppError("MemberInvite.IsValid", "model.member.is_valid.emails.app_error", nil, "", http.StatusBadRequest)
+	}
+
+	if len(i.ChannelIds) > 0 {
+		for _, channel := range i.ChannelIds {
+			if len(channel) != 26 {
+				return NewAppError("MemberInvite.IsValid", "model.member.is_valid.channel.app_error", nil, "channel="+channel, http.StatusBadRequest)
+			}
+		}
+	}
+
+	// Profiles must reference distinct invited emails and use unique usernames, case-insensitively.
+	invitedEmails := make(map[string]struct{}, len(i.Emails))
+	for _, email := range i.Emails {
+		invitedEmails[NormalizeEmail(email)] = struct{}{}
+	}
+
+	seenProfileEmails := make(map[string]struct{}, len(i.Profiles))
+	seenUsernames := make(map[string]struct{}, len(i.Profiles))
+	for _, profile := range i.Profiles {
+		if profile == nil {
+			return NewAppError("MemberInvite.IsValid", "model.member.is_valid.profile_nil.app_error", nil, "", http.StatusBadRequest)
+		}
+
+		email := NormalizeEmail(profile.Email)
+		if _, exists := invitedEmails[email]; !exists {
+			return NewAppError("MemberInvite.IsValid", "model.member.is_valid.profile_email.app_error", nil, "email="+profile.Email, http.StatusBadRequest)
+		}
+		if _, exists := seenProfileEmails[email]; exists {
+			return NewAppError("MemberInvite.IsValid", "model.member.is_valid.profile_email_duplicate.app_error", nil, "email="+profile.Email, http.StatusBadRequest)
+		}
+		seenProfileEmails[email] = struct{}{}
+
+		username := NormalizeUsername(profile.Username)
+		if !IsValidUsername(username) {
+			return NewAppError("MemberInvite.IsValid", "model.member.is_valid.profile_username.app_error", nil, "username="+profile.Username, http.StatusBadRequest)
+		}
+		if _, exists := seenUsernames[username]; exists {
+			return NewAppError("MemberInvite.IsValid", "model.member.is_valid.profile_username_duplicate.app_error", nil, "username="+profile.Username, http.StatusBadRequest)
+		}
+		seenUsernames[username] = struct{}{}
+
+		if appErr := validateMemberInviteProfileNames(profile); appErr != nil {
+			return appErr
+		}
+	}
+
+	return nil
+}
+
+func validateMemberInviteProfileNames(profile *MemberInviteProfile) *AppError {
+	if utf8.RuneCountInString(profile.FirstName) > UserFirstNameMaxRunes {
+		return NewAppError("MemberInvite.IsValid", "model.member.is_valid.profile_first_name.app_error", nil, "email="+profile.Email, http.StatusBadRequest)
+	}
+	if utf8.RuneCountInString(profile.LastName) > UserLastNameMaxRunes {
+		return NewAppError("MemberInvite.IsValid", "model.member.is_valid.profile_last_name.app_error", nil, "email="+profile.Email, http.StatusBadRequest)
+	}
+	return nil
+}
+
+func (i *MemberInvite) UnmarshalJSON(b []byte) error {
+	var emails []string
+	if err := json.Unmarshal(b, &emails); err == nil {
+		*i = MemberInvite{}
+		i.Emails = emails
+		return nil
+	}
+
+	type TempMemberInvite MemberInvite
+	var o2 TempMemberInvite
+	if err := json.Unmarshal(b, &o2); err != nil {
+		return err
+	}
+	*i = MemberInvite(o2)
+	return nil
+}