From f15b7dd75c588abc0904b0da45856e40a3c4e184 Mon Sep 17 00:00:00 2001
From: Girish Ramakrishnan <girish@cloudron.io>
Date: Sat, 25 Jan 2025 16:03:10 +0100
Subject: [PATCH] username: only ending with .app is reserved

(cherry picked from commit b43fa38350adeaa05941c3d90bec4e92cfb73abb)
---
 src/users.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/users.js b/src/users.js
index 863c70bb8..87588d83d 100644
--- a/src/users.js
+++ b/src/users.js
@@ -142,7 +142,7 @@ function validateUsername(username) {
     if (/[^a-zA-Z0-9.-]/.test(username)) return new BoxError(BoxError.BAD_FIELD, 'Username can only contain alphanumerals, dot and -');
 
     // app emails are sent using the .app suffix
-    if (username.indexOf('.app') !== -1) return new BoxError(BoxError.BAD_FIELD, 'Username pattern is reserved for apps');
+    if (username.endsWith('.app')) return new BoxError(BoxError.BAD_FIELD, 'Username pattern is reserved for apps');
 
     return null;
 }