From 891169e87b09775c2cdd29bd5a3fdfcf4e85b5fd Mon Sep 17 00:00:00 2001
From: Girish Ramakrishnan <girish@cloudron.io>
Date: Fri, 17 Jan 2020 11:09:14 -0800
Subject: [PATCH] add some basic key validation

---
 minio-credentials | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/minio-credentials b/minio-credentials
index 0152b97..c807c97 100755
--- a/minio-credentials
+++ b/minio-credentials
@@ -24,6 +24,10 @@ if (process.argv[2] === 'get') {
 } else if (process.argv[2] === 'set') {
     if (process.argv.length !== 5) return usage();
 
+    // https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateAccessKey.html
+    if (process.argv[4].length < 5) return console.log('secret key must be atleast 5 characters');
+    if (!/^[\w+=,.@-]+$/.test(process.argv[3])) return console.log('access key has invalid characters');
+
     accessKey.value = process.argv[3];
     if (process.argv[4].length < 8) return console.log('secret key must be atleast 8 characters');