feat: complete register validation

* add password policy in frontend

server/src/api/validators/authValidator.js

@@ -1,10 +1,11 @@
-import { query } from 'express-validator'
+import { check } from 'express-validator'
 
 import { isValidUsername } from '@linux-odyssey/utils'
 import { User } from '@linux-odyssey/models'
+import { passwordPolicy } from '@linux-odyssey/constants'
 
 export const checkUsername = () =>
-  query('username')
+  check('username')
     .notEmpty()
     .isString()
     .custom((username) => {
@@ -23,7 +24,7 @@ export const checkNewUsername = () =>
     return true
   })
 
-export const checkEmail = () => query('email').notEmpty().isEmail().trim()
+export const checkEmail = () => check('email').notEmpty().isEmail().trim()
 
 export const checkNewEmail = () =>
   checkEmail().custom(async (email) => {
@@ -34,10 +35,4 @@ export const checkNewEmail = () =>
   })
 
 export const checkPassword = () =>
-  query('password').notEmpty().isStrongPassword({
-    minLength: 8,
-    minNumbers: 1,
-    minLowercase: 1,
-    minUppercase: 1,
-    minSymbols: 0,
-  })
+  check('password').notEmpty().isStrongPassword(passwordPolicy)

server/src/config.js

@@ -1,4 +1,4 @@
-import { get, genSecret } from './utils/env.js'
+import { get } from './utils/env.js'
 
 const config = {
   host: get('HOST', 'localhost'),
@@ -23,10 +23,11 @@ const config = {
 config.baseUrl = get('BASE_URL', `http://${config.host}:${config.port}`)
 
 if (!config.secret) {
-  config.secret = genSecret()
   console.warn(
-    'No SECRET_KEY found in .env! A temporary secret key has been generated. To set up a persistent key, please run the setup script.'
+    'No SECRET_KEY found in .env! To set up a persistent key, please run the setup script:'
   )
+  console.warn('yarn setup')
+  process.exit(1)
 }
 
 export default config