From c78d30f363eecee9f695a2e84e0274ffa5880f44 Mon Sep 17 00:00:00 2001 From: David Buchanan Date: Wed, 12 Jul 2023 07:00:26 +0100 Subject: [PATCH] hotfix: prevent user-supplied rkey on posts with createRecord (#1313) * prevent user-supplied rkey on posts with createRecord * allow empty-string rkey parameter Co-authored-by: devin ivy --------- Co-authored-by: devin ivy --- packages/pds/src/api/com/atproto/repo/createRecord.ts | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/packages/pds/src/api/com/atproto/repo/createRecord.ts b/packages/pds/src/api/com/atproto/repo/createRecord.ts index 978a3945253..0f28f8cbb4f 100644 --- a/packages/pds/src/api/com/atproto/repo/createRecord.ts +++ b/packages/pds/src/api/com/atproto/repo/createRecord.ts @@ -33,6 +33,11 @@ export default function (server: Server, ctx: AppContext) { 'Unvalidated writes are not yet supported.', ) } + if (collection === ids.AppBskyFeedPost && rkey) { + throw new InvalidRequestError( + 'Custom rkeys for post records are not currently supported.', + ) + } const swapCommitCid = swapCommit ? CID.parse(swapCommit) : undefined