hotfix: prevent user-supplied rkey on posts with createRecord (#1313)

* prevent user-supplied rkey on posts with createRecord * allow empty-string rkey parameter Co-authored-by: devin ivy <[email protected]> --------- Co-authored-by: devin ivy <[email protected]>
bluesky-social · Jul 12, 2023 · c78d30f · c78d30f
1 parent 5e34a8b
commit c78d30f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/packages/pds/src/api/com/atproto/repo/createRecord.ts b/packages/pds/src/api/com/atproto/repo/createRecord.ts
@@ -33,6 +33,11 @@ export default function (server: Server, ctx: AppContext) {
           'Unvalidated writes are not yet supported.',
         )
       }
+      if (collection === ids.AppBskyFeedPost && rkey) {
+        throw new InvalidRequestError(
+          'Custom rkeys for post records are not currently supported.',
+        )
+      }
 
       const swapCommitCid = swapCommit ? CID.parse(swapCommit) : undefined