input validation

Author: ImShyMike

api/v1/auth/main.py

@@ -325,7 +325,7 @@ async def validate_otp(
             hackatime_data = None
             try:
                 hackatime_data = get_account(otp_client_response.email)
-            except Exception as e:  # type: ignore # pylint: disable=broad-exception-caught
+            except Exception:  # type: ignore # pylint: disable=broad-exception-caught
                 pass  # unable to fetch hackatime data, continue anyway
             user = User(
                 email=otp_client_response.email,

api/v1/projects/main.py

@@ -219,6 +219,11 @@ async def link_hackatime_project(
     """Link a Hackatime project to a user project"""
     user_email = request.state.user["sub"]
 
+    if hackatime_project.name == "":
+        raise HTTPException(
+            status_code=400, detail="Hackatime project name cannot be empty"
+        )
+
     project_raw = await session.execute(
         sqlalchemy.select(UserProject).where(
             UserProject.id == project_id, UserProject.user_email == user_email
@@ -285,6 +290,11 @@ async def unlink_hackatime_project(
     """Unlink a Hackatime project from a user project"""
     user_email = request.state.user["sub"]
 
+    if hackatime_project.name == "":
+        raise HTTPException(
+            status_code=400, detail="Hackatime project name cannot be empty"
+        )
+
     project_raw = await session.execute(
         sqlalchemy.select(UserProject).where(
             UserProject.id == project_id, UserProject.user_email == user_email