From a66d6f00861dafbd87f139a7ec0a7e018cd3faa1 Mon Sep 17 00:00:00 2001
From: Rory& <root@rory.gay>
Date: Fri, 30 Jan 2026 23:45:17 +0100
Subject: [PATCH] Enforce numeric-only discriminators in PATCH /users/@me

---
 src/api/routes/users/@me/index.ts | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/api/routes/users/@me/index.ts b/src/api/routes/users/@me/index.ts
index bd1fa0773..187862f10 100644
--- a/src/api/routes/users/@me/index.ts
+++ b/src/api/routes/users/@me/index.ts
@@ -152,6 +152,16 @@ router.patch(
         }
 
         if (body.discriminator) {
+            // TODO: HACK - maybe make this optional?
+            if (!/^\d{4}$/.test(body.discriminator)) {
+                throw FieldErrors({
+                    discriminator: {
+                        code: "INVALID_DISCRIMINATOR",
+                        message: "Discriminator must be 4 digits.",
+                    },
+                });
+            }
+
             if (
                 await User.findOne({
                     where: {