From 5eb15c5191705f7e143f0347dcc9d8cc53a6a5bb Mon Sep 17 00:00:00 2001
From: Charmunks <isaac@jedfonner.com>
Date: Sun, 9 Nov 2025 23:02:07 -0500
Subject: [PATCH 1/2] password type checking

---
 client/src/config.js            | 2 +-
 client/src/lib/Dashboard.svelte | 4 ++--
 src/utils/spaces.js             | 2 ++
 3 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/client/src/config.js b/client/src/config.js
index 6157f31..bfce848 100644
--- a/client/src/config.js
+++ b/client/src/config.js
@@ -1,4 +1,4 @@
-export const API_BASE = 'https://t0080w08wcockgs44ws8w880.b.selfhosted.hackclub.com/api/v1';
+export const API_BASE = 'http://localhost:2593/api/v1';
 
 export const ERROR_MESSAGES = {
   NETWORK_ERROR: 'Network error. Please try again.',
diff --git a/client/src/lib/Dashboard.svelte b/client/src/lib/Dashboard.svelte
index 2f2114c..3c20aa6 100644
--- a/client/src/lib/Dashboard.svelte
+++ b/client/src/lib/Dashboard.svelte
@@ -301,7 +301,7 @@
 
         {#if newSpaceType !== 'kicad' && newSpaceType !== 'blender'}
           <div class="form-group">
-            <label class="form-label" for="password">Password</label>
+            <label class="form-label" for="password">Password (min. 8 characters)</label>
             <p class="password-info">This password will be needed to access the space. Please pick a secure password, you cannot change it later.</p>
             <div class="password-input-wrapper">
               {#if showPassword}
@@ -353,7 +353,7 @@
         <button
           class="btn-primary"
           on:click={createSpace}
-          disabled={loading || (newSpaceType !== 'kicad' && newSpaceType !== 'blender' && !newSpacePassword)}
+          disabled={loading || (newSpaceType !== 'kicad' && newSpaceType !== 'blender' && (!newSpacePassword || newSpacePassword.length < 8))}
         >
           {loading ? 'Creating...' : 'Create Space'}
         </button>
diff --git a/src/utils/spaces.js b/src/utils/spaces.js
index 3cf8fdd..fdaef5c 100644
--- a/src/utils/spaces.js
+++ b/src/utils/spaces.js
@@ -64,6 +64,8 @@ export const createContainer = async (password, type, authorization) => {
     password = crypto.randomBytes(16).toString('hex');
   } else if (!password) {
     throw new Error("Missing container password");
+  } else if (password.length < 8) {
+    throw new Error("Password must be at least 8 characters long");
   }
 
   try {

From 7ae4d6c16a9e0ab0af4090a52f5d7709bd504814 Mon Sep 17 00:00:00 2001
From: Charmunk <ivie@hackclub.com>
Date: Sun, 9 Nov 2025 23:03:30 -0500
Subject: [PATCH 2/2] Update API_BASE to new production URL

---
 client/src/config.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/src/config.js b/client/src/config.js
index bfce848..6157f31 100644
--- a/client/src/config.js
+++ b/client/src/config.js
@@ -1,4 +1,4 @@
-export const API_BASE = 'http://localhost:2593/api/v1';
+export const API_BASE = 'https://t0080w08wcockgs44ws8w880.b.selfhosted.hackclub.com/api/v1';
 
 export const ERROR_MESSAGES = {
   NETWORK_ERROR: 'Network error. Please try again.',