add min length validator on api key

lemarche/users/migrations/0040_alter_user_api_key.py

@@ -0,0 +1,25 @@
+# Generated by Django 4.2.15 on 2024-10-29 13:28
+
+import django.core.validators
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("users", "0039_remove_user_user_email_ci_uniqueness_and_more"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="user",
+            name="api_key",
+            field=models.CharField(
+                blank=True,
+                max_length=128,
+                null=True,
+                unique=True,
+                validators=[django.core.validators.MinLengthValidator(64)],
+                verbose_name="Clé API",
+            ),
+        ),
+    ]

lemarche/users/models.py

@@ -2,6 +2,7 @@
 from django.contrib.auth.base_user import BaseUserManager
 from django.contrib.auth.models import AbstractUser
 from django.contrib.contenttypes.fields import GenericRelation
+from django.core.validators import MinLengthValidator
 from django.db import models
 from django.db.models import Count
 from django.db.models.functions import Greatest, Lower
@@ -230,7 +231,9 @@ class User(AbstractUser):
         max_length=20, choices=user_constants.SOURCE_CHOICES, default=user_constants.SOURCE_SIGNUP_FORM
     )
 
-    api_key = models.CharField(verbose_name="Clé API", max_length=128, unique=True, blank=True, null=True)
+    api_key = models.CharField(
+        verbose_name="Clé API", max_length=128, unique=True, blank=True, null=True, validators=[MinLengthValidator(64)]
+    )
     api_key_last_updated = models.DateTimeField(
         verbose_name="Date de dernière mise à jour de la clé API", blank=True, null=True
     )