test(api validation): check query validation boundaries for ?user= parameter (Variation 1)

[souravjhahind]

🧩 Background

Input validation prevents arbitrary code and path traversal sequences from reaching the application core logic.

🎯 Objective

Write a schema-level validation test targeting the ?user= parameter under maxLength check.

📁 Files to touch

• app/api/streak/route.test.ts
• lib/validations.test.ts

🛠️ Implementation steps

• Mock a request passing the invalid value: 'a'.repeat(40).
• Assert that the validation handler returns a 400 Bad Request with 'cannot exceed 39 characters'.

✅ Definition of done

• 1 new test case targeting the query input parameter.
• All endpoint test suites pass successfully.

[ThePriyanuj]

/claim

Hi @JhaSourav07,

I would love to claim this query validation boundary testing task for the ?user= parameter! Since my local environment is fully calibrated from my previous merged PR in this repository, I can implement and verify this boundary rule immediately.

🔬 My Planned Testing Implementation Strategy:

1. Validations Schema Triage: I will isolate the schema definition validation in lib/validations.test.ts to test the parameter constraint directly at the parser boundary layer.
2. Boundary Overflow Injection: I will update app/api/streak/route.test.ts to mock an API request passing an explicitly invalid query payload by executing 'a'.repeat(40). This intentionally overflows the maximum GitHub handle threshold.
3. HTTP Status and Message Assertion: I will configure the test assertion matrix to expect an explicit 400 Bad Request API response payload, validating that the underlying validation block accurately maps to the exact error message: 'cannot exceed 39 characters'.

I have the codebase pulled up locally and can deliver a clean, passing test suite PR within an hour of assignment. Thank you!

[github-actions]

🎉 Assigned! Welcome to the project, @ThePriyanuj.

⏳ Reminder: You have 2 days to submit a Pull Request. After 2 days of inactivity, you will be automatically unassigned to give others a chance (as per our GSSoC anti-hoarding policy).

💡 Please read CONTRIBUTING.md if you haven't already.

Happy coding! 🚀