MM_22682_Centralize_ID_Validation (#14237)

Co-authored-by: mattermod <mattermod@users.noreply.github.com>

api4/channel.go

@@ -428,7 +428,7 @@ func createDirectChannel(c *Context, w http.ResponseWriter, r *http.Request) {
 	}
 
 	for _, id := range userIds {
-		if len(id) != 26 {
+		if !model.IsValidId(id) {
 			c.SetInvalidParam("user_id")
 			return
 		}
@@ -507,7 +507,7 @@ func createGroupChannel(c *Context, w http.ResponseWriter, r *http.Request) {
 
 	found := false
 	for _, id := range userIds {
-		if len(id) != 26 {
+		if !model.IsValidId(id) {
 			c.SetInvalidParam("user_id")
 			return
 		}
@@ -774,7 +774,7 @@ func getPublicChannelsByIdsForTeam(c *Context, w http.ResponseWriter, r *http.Re
 	}
 
 	for _, cid := range channelIds {
-		if len(cid) != 26 {
+		if !model.IsValidId(cid) {
 			c.SetInvalidParam("channel_id")
 			return
 		}
@@ -1359,7 +1359,7 @@ func addChannelMember(c *Context, w http.ResponseWriter, r *http.Request) {
 
 	props := model.StringInterfaceFromJson(r.Body)
 	userId, ok := props["user_id"].(string)
-	if !ok || len(userId) != 26 {
+	if !ok || !model.IsValidId(userId) {
 		c.SetInvalidParam("user_id")
 		return
 	}
@@ -1370,7 +1370,7 @@ func addChannelMember(c *Context, w http.ResponseWriter, r *http.Request) {
 	}
 
 	postRootId, ok := props["post_root_id"].(string)
-	if ok && len(postRootId) != 0 && len(postRootId) != 26 {
+	if ok && len(postRootId) != 0 && !model.IsValidId(postRootId) {
 		c.SetInvalidParam("post_root_id")
 		return
 	}
@@ -1539,7 +1539,7 @@ func updateChannelScheme(c *Context, w http.ResponseWriter, r *http.Request) {
 	}
 
 	schemeID := model.SchemeIDFromJson(r.Body)
-	if schemeID == nil || len(*schemeID) != 26 {
+	if schemeID == nil || !model.IsValidId(*schemeID) {
 		c.SetInvalidParam("scheme_id")
 		return
 	}
@@ -1606,7 +1606,7 @@ func channelMembersMinusGroupMembers(c *Context, w http.ResponseWriter, r *http.
 
 	groupIDs := []string{}
 	for _, gid := range strings.Split(c.Params.GroupIDs, ",") {
-		if len(gid) != 26 {
+		if !model.IsValidId(gid) {
 			c.SetInvalidParam("group_ids")
 			return
 		}

api4/command.go

@@ -296,7 +296,7 @@ func executeCommand(c *Context, w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	if len(commandArgs.Command) <= 1 || strings.Index(commandArgs.Command, "/") != 0 || len(commandArgs.ChannelId) != 26 {
+	if len(commandArgs.Command) <= 1 || strings.Index(commandArgs.Command, "/") != 0 || !model.IsValidId(commandArgs.ChannelId) {
 		c.Err = model.NewAppError("executeCommand", "api.command.execute_command.start.app_error", nil, "", http.StatusBadRequest)
 		return
 	}

api4/reaction.go

@@ -23,7 +23,7 @@ func saveReaction(c *Context, w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	if len(reaction.UserId) != 26 || len(reaction.PostId) != 26 || len(reaction.EmojiName) == 0 || len(reaction.EmojiName) > model.EMOJI_NAME_MAX_LENGTH {
+	if !model.IsValidId(reaction.UserId) || !model.IsValidId(reaction.PostId) || len(reaction.EmojiName) == 0 || len(reaction.EmojiName) > model.EMOJI_NAME_MAX_LENGTH {
 		c.Err = model.NewAppError("saveReaction", "api.reaction.save_reaction.invalid.app_error", nil, "", http.StatusBadRequest)
 		return
 	}

api4/team.go

@@ -570,7 +570,7 @@ func addTeamMember(c *Context, w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	if len(member.UserId) != 26 {
+	if !model.IsValidId(member.UserId) {
 		c.SetInvalidParam("user_id")
 		return
 	}
@@ -737,7 +737,7 @@ func addTeamMembers(c *Context, w http.ResponseWriter, r *http.Request) {
 			return
 		}
 
-		if len(member.UserId) != 26 {
+		if !model.IsValidId(member.UserId) {
 			c.SetInvalidParam("user_id")
 			return
 		}
@@ -1447,7 +1447,7 @@ func updateTeamScheme(c *Context, w http.ResponseWriter, r *http.Request) {
 	}
 
 	schemeID := model.SchemeIDFromJson(r.Body)
-	if schemeID == nil || (len(*schemeID) != 26 && *schemeID != "") {
+	if schemeID == nil || (!model.IsValidId(*schemeID) && *schemeID != "") {
 		c.SetInvalidParam("scheme_id")
 		return
 	}
@@ -1513,7 +1513,7 @@ func teamMembersMinusGroupMembers(c *Context, w http.ResponseWriter, r *http.Req
 
 	groupIDs := []string{}
 	for _, gid := range strings.Split(c.Params.GroupIDs, ",") {
-		if len(gid) != 26 {
+		if !model.IsValidId(gid) {
 			c.SetInvalidParam("group_ids")
 			return
 		}

app/license.go

@@ -19,7 +19,7 @@ func (a *App) LoadLicense() {
 		licenseId = props[model.SYSTEM_ACTIVE_LICENSE_ID]
 	}
 
-	if len(licenseId) != 26 {
+	if !model.IsValidId(licenseId) {
 		// Lets attempt to load the file from disk since it was missing from the DB
 		license, licenseBytes := utils.GetAndValidateLicenseFileFromDisk(*a.Config().ServiceSettings.LicenseFileLocation)
 

migrations/advanced_permissions_phase_2.go

@@ -31,15 +31,15 @@ func AdvancedPermissionsPhase2ProgressFromJson(data io.Reader) *AdvancedPermissi
 }
 
 func (p *AdvancedPermissionsPhase2Progress) IsValid() bool {
-	if len(p.LastChannelId) != 26 {
+	if !model.IsValidId(p.LastChannelId) {
 		return false
 	}
 
-	if len(p.LastTeamId) != 26 {
+	if !model.IsValidId(p.LastTeamId) {
 		return false
 	}
 
-	if len(p.LastUserId) != 26 {
+	if !model.IsValidId(p.LastUserId) {
 		return false
 	}
 

model/authorize.go

@@ -39,11 +39,11 @@ type AuthorizeRequest struct {
 // correctly.
 func (ad *AuthData) IsValid() *AppError {
 
-	if len(ad.ClientId) != 26 {
+	if !IsValidId(ad.ClientId) {
 		return NewAppError("AuthData.IsValid", "model.authorize.is_valid.client_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(ad.UserId) != 26 {
+	if !IsValidId(ad.UserId) {
 		return NewAppError("AuthData.IsValid", "model.authorize.is_valid.user_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
@@ -78,7 +78,7 @@ func (ad *AuthData) IsValid() *AppError {
 // correctly.
 func (ar *AuthorizeRequest) IsValid() *AppError {
 
-	if len(ar.ClientId) != 26 {
+	if !IsValidId(ar.ClientId) {
 		return NewAppError("AuthData.IsValid", "model.authorize.is_valid.client_id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/channel.go

@@ -198,7 +198,7 @@ func (o *Channel) Etag() string {
 }
 
 func (o *Channel) IsValid() *AppError {
-	if len(o.Id) != 26 {
+	if !IsValidId(o.Id) {
 		return NewAppError("Channel.IsValid", "model.channel.is_valid.id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/channel_member.go

@@ -113,11 +113,11 @@ func ChannelMemberFromJson(data io.Reader) *ChannelMember {
 
 func (o *ChannelMember) IsValid() *AppError {
 
-	if len(o.ChannelId) != 26 {
+	if !IsValidId(o.ChannelId) {
 		return NewAppError("ChannelMember.IsValid", "model.channel_member.is_valid.channel_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.UserId) != 26 {
+	if !IsValidId(o.UserId) {
 		return NewAppError("ChannelMember.IsValid", "model.channel_member.is_valid.user_id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/client4.go

@@ -2708,7 +2708,7 @@ func (c *Client4) GetFlaggedPostsForUser(userId string, page int, perPage int) (
 
 // GetFlaggedPostsForUserInTeam returns flagged posts in team of a user based on user id string.
 func (c *Client4) GetFlaggedPostsForUserInTeam(userId string, teamId string, page int, perPage int) (*PostList, *Response) {
-	if len(teamId) == 0 || len(teamId) != 26 {
+	if !IsValidId(teamId) {
 		return nil, &Response{StatusCode: http.StatusBadRequest, Error: NewAppError("GetFlaggedPostsForUserInTeam", "model.client.get_flagged_posts_in_team.missing_parameter.app_error", nil, "", http.StatusBadRequest)}
 	}
 
@@ -2723,7 +2723,7 @@ func (c *Client4) GetFlaggedPostsForUserInTeam(userId string, teamId string, pag
 
 // GetFlaggedPostsForUserInChannel returns flagged posts in channel of a user based on user id string.
 func (c *Client4) GetFlaggedPostsForUserInChannel(userId string, channelId string, page int, perPage int) (*PostList, *Response) {
-	if len(channelId) == 0 || len(channelId) != 26 {
+	if !IsValidId(channelId) {
 		return nil, &Response{StatusCode: http.StatusBadRequest, Error: NewAppError("GetFlaggedPostsForUserInChannel", "model.client.get_flagged_posts_in_channel.missing_parameter.app_error", nil, "", http.StatusBadRequest)}
 	}
 

model/cluster_discovery.go

@@ -89,7 +89,7 @@ func FilterClusterDiscovery(vs []*ClusterDiscovery, f func(*ClusterDiscovery) bo
 }
 
 func (o *ClusterDiscovery) IsValid() *AppError {
-	if len(o.Id) != 26 {
+	if !IsValidId(o.Id) {
 		return NewAppError("ClusterDiscovery.IsValid", "model.cluster.is_valid.id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/command.go

@@ -61,7 +61,7 @@ func CommandListFromJson(data io.Reader) []*Command {
 
 func (o *Command) IsValid() *AppError {
 
-	if len(o.Id) != 26 {
+	if !IsValidId(o.Id) {
 		return NewAppError("Command.IsValid", "model.command.is_valid.id.app_error", nil, "", http.StatusBadRequest)
 	}
 
@@ -77,11 +77,11 @@ func (o *Command) IsValid() *AppError {
 		return NewAppError("Command.IsValid", "model.command.is_valid.update_at.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.CreatorId) != 26 {
+	if !IsValidId(o.CreatorId) {
 		return NewAppError("Command.IsValid", "model.command.is_valid.user_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.TeamId) != 26 {
+	if !IsValidId(o.TeamId) {
 		return NewAppError("Command.IsValid", "model.command.is_valid.team_id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/command_webhook.go

@@ -33,7 +33,7 @@ func (o *CommandWebhook) PreSave() {
 }
 
 func (o *CommandWebhook) IsValid() *AppError {
-	if len(o.Id) != 26 {
+	if !IsValidId(o.Id) {
 		return NewAppError("CommandWebhook.IsValid", "model.command_hook.id.app_error", nil, "", http.StatusBadRequest)
 	}
 
@@ -41,23 +41,23 @@ func (o *CommandWebhook) IsValid() *AppError {
 		return NewAppError("CommandWebhook.IsValid", "model.command_hook.create_at.app_error", nil, "id="+o.Id, http.StatusBadRequest)
 	}
 
-	if len(o.CommandId) != 26 {
+	if !IsValidId(o.CommandId) {
 		return NewAppError("CommandWebhook.IsValid", "model.command_hook.command_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.UserId) != 26 {
+	if !IsValidId(o.UserId) {
 		return NewAppError("CommandWebhook.IsValid", "model.command_hook.user_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.ChannelId) != 26 {
+	if !IsValidId(o.ChannelId) {
 		return NewAppError("CommandWebhook.IsValid", "model.command_hook.channel_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.RootId) != 0 && len(o.RootId) != 26 {
+	if len(o.RootId) != 0 && !IsValidId(o.RootId) {
 		return NewAppError("CommandWebhook.IsValid", "model.command_hook.root_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.ParentId) != 0 && len(o.ParentId) != 26 {
+	if len(o.ParentId) != 0 && !IsValidId(o.ParentId) {
 		return NewAppError("CommandWebhook.IsValid", "model.command_hook.parent_id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/compliance.go

@@ -71,7 +71,7 @@ func (c *Compliance) JobName() string {
 
 func (c *Compliance) IsValid() *AppError {
 
-	if len(c.Id) != 26 {
+	if !IsValidId(c.Id) {
 		return NewAppError("Compliance.IsValid", "model.compliance.is_valid.id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/emoji.go

@@ -37,7 +37,7 @@ func GetSystemEmojiId(emojiName string) (string, bool) {
 }
 
 func (emoji *Emoji) IsValid() *AppError {
-	if len(emoji.Id) != 26 {
+	if !IsValidId(emoji.Id) {
 		return NewAppError("Emoji.IsValid", "model.emoji.id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/file_info.go

@@ -102,15 +102,15 @@ func (fi *FileInfo) PreSave() {
 }
 
 func (fi *FileInfo) IsValid() *AppError {
-	if len(fi.Id) != 26 {
+	if !IsValidId(fi.Id) {
 		return NewAppError("FileInfo.IsValid", "model.file_info.is_valid.id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(fi.CreatorId) != 26 && fi.CreatorId != "nouser" {
+	if !IsValidId(fi.CreatorId) && fi.CreatorId != "nouser" {
 		return NewAppError("FileInfo.IsValid", "model.file_info.is_valid.user_id.app_error", nil, "id="+fi.Id, http.StatusBadRequest)
 	}
 
-	if len(fi.PostId) != 0 && len(fi.PostId) != 26 {
+	if len(fi.PostId) != 0 && !IsValidId(fi.PostId) {
 		return NewAppError("FileInfo.IsValid", "model.file_info.is_valid.post_id.app_error", nil, "id="+fi.Id, http.StatusBadRequest)
 	}
 

model/group.go

@@ -142,7 +142,7 @@ func (group *Group) requiresRemoteId() bool {
 }
 
 func (group *Group) IsValidForUpdate() *AppError {
-	if len(group.Id) != 26 {
+	if !IsValidId(group.Id) {
 		return NewAppError("Group.IsValidForUpdate", "model.group.id.app_error", nil, "", http.StatusBadRequest)
 	}
 	if group.CreateAt == 0 {

model/incoming_webhook.go

@@ -65,7 +65,7 @@ func IncomingWebhookListFromJson(data io.Reader) []*IncomingWebhook {
 
 func (o *IncomingWebhook) IsValid() *AppError {
 
-	if len(o.Id) != 26 {
+	if !IsValidId(o.Id) {
 		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.id.app_error", nil, "", http.StatusBadRequest)
 
 	}
@@ -78,15 +78,15 @@ func (o *IncomingWebhook) IsValid() *AppError {
 		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.update_at.app_error", nil, "id="+o.Id, http.StatusBadRequest)
 	}
 
-	if len(o.UserId) != 26 {
+	if !IsValidId(o.UserId) {
 		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.user_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.ChannelId) != 26 {
+	if !IsValidId(o.ChannelId) {
 		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.channel_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.TeamId) != 26 {
+	if !IsValidId(o.TeamId) {
 		return NewAppError("IncomingWebhook.IsValid", "model.incoming_hook.team_id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/job.go

@@ -40,7 +40,7 @@ type Job struct {
 }
 
 func (j *Job) IsValid() *AppError {
-	if len(j.Id) != 26 {
+	if !IsValidId(j.Id) {
 		return NewAppError("Job.IsValid", "model.job.is_valid.id.app_error", nil, "id="+j.Id, http.StatusBadRequest)
 	}
 

model/license.go

@@ -236,7 +236,7 @@ func LicenseFromJson(data io.Reader) *License {
 }
 
 func (lr *LicenseRecord) IsValid() *AppError {
-	if len(lr.Id) != 26 {
+	if !IsValidId(lr.Id) {
 		return NewAppError("LicenseRecord.IsValid", "model.license_record.is_valid.id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/oauth.go

@@ -37,7 +37,7 @@ type OAuthApp struct {
 // correctly.
 func (a *OAuthApp) IsValid() *AppError {
 
-	if len(a.Id) != 26 {
+	if !IsValidId(a.Id) {
 		return NewAppError("OAuthApp.IsValid", "model.oauth.is_valid.app_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
@@ -49,7 +49,7 @@ func (a *OAuthApp) IsValid() *AppError {
 		return NewAppError("OAuthApp.IsValid", "model.oauth.is_valid.update_at.app_error", nil, "app_id="+a.Id, http.StatusBadRequest)
 	}
 
-	if len(a.CreatorId) != 26 {
+	if !IsValidId(a.CreatorId) {
 		return NewAppError("OAuthApp.IsValid", "model.oauth.is_valid.creator_id.app_error", nil, "app_id="+a.Id, http.StatusBadRequest)
 	}
 

model/outgoing_webhook.go

@@ -117,7 +117,7 @@ func OutgoingWebhookResponseFromJson(data io.Reader) (*OutgoingWebhookResponse,
 
 func (o *OutgoingWebhook) IsValid() *AppError {
 
-	if len(o.Id) != 26 {
+	if !IsValidId(o.Id) {
 		return NewAppError("OutgoingWebhook.IsValid", "model.outgoing_hook.is_valid.id.app_error", nil, "", http.StatusBadRequest)
 	}
 
@@ -133,15 +133,15 @@ func (o *OutgoingWebhook) IsValid() *AppError {
 		return NewAppError("OutgoingWebhook.IsValid", "model.outgoing_hook.is_valid.update_at.app_error", nil, "id="+o.Id, http.StatusBadRequest)
 	}
 
-	if len(o.CreatorId) != 26 {
+	if !IsValidId(o.CreatorId) {
 		return NewAppError("OutgoingWebhook.IsValid", "model.outgoing_hook.is_valid.user_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.ChannelId) != 0 && len(o.ChannelId) != 26 {
+	if len(o.ChannelId) != 0 && !IsValidId(o.ChannelId) {
 		return NewAppError("OutgoingWebhook.IsValid", "model.outgoing_hook.is_valid.channel_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.TeamId) != 26 {
+	if !IsValidId(o.TeamId) {
 		return NewAppError("OutgoingWebhook.IsValid", "model.outgoing_hook.is_valid.team_id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/post.go

@@ -241,7 +241,7 @@ func (o *Post) Etag() string {
 }
 
 func (o *Post) IsValid(maxPostSize int) *AppError {
-	if len(o.Id) != 26 {
+	if !IsValidId(o.Id) {
 		return NewAppError("Post.IsValid", "model.post.is_valid.id.app_error", nil, "", http.StatusBadRequest)
 	}
 
@@ -253,19 +253,19 @@ func (o *Post) IsValid(maxPostSize int) *AppError {
 		return NewAppError("Post.IsValid", "model.post.is_valid.update_at.app_error", nil, "id="+o.Id, http.StatusBadRequest)
 	}
 
-	if len(o.UserId) != 26 {
+	if !IsValidId(o.UserId) {
 		return NewAppError("Post.IsValid", "model.post.is_valid.user_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.ChannelId) != 26 {
+	if !IsValidId(o.ChannelId) {
 		return NewAppError("Post.IsValid", "model.post.is_valid.channel_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if !(len(o.RootId) == 26 || len(o.RootId) == 0) {
+	if !(IsValidId(o.RootId) || len(o.RootId) == 0) {
 		return NewAppError("Post.IsValid", "model.post.is_valid.root_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if !(len(o.ParentId) == 26 || len(o.ParentId) == 0) {
+	if !(IsValidId(o.ParentId) || len(o.ParentId) == 0) {
 		return NewAppError("Post.IsValid", "model.post.is_valid.parent_id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/preference.go

@@ -68,7 +68,7 @@ func PreferenceFromJson(data io.Reader) *Preference {
 }
 
 func (o *Preference) IsValid() *AppError {
-	if len(o.UserId) != 26 {
+	if !IsValidId(o.UserId) {
 		return NewAppError("Preference.IsValid", "model.preference.is_valid.id.app_error", nil, "user_id="+o.UserId, http.StatusBadRequest)
 	}
 

model/reaction.go

@@ -64,11 +64,11 @@ func ReactionsFromJson(data io.Reader) []*Reaction {
 }
 
 func (o *Reaction) IsValid() *AppError {
-	if len(o.UserId) != 26 {
+	if !IsValidId(o.UserId) {
 		return NewAppError("Reaction.IsValid", "model.reaction.is_valid.user_id.app_error", nil, "user_id="+o.UserId, http.StatusBadRequest)
 	}
 
-	if len(o.PostId) != 26 {
+	if !IsValidId(o.PostId) {
 		return NewAppError("Reaction.IsValid", "model.reaction.is_valid.post_id.app_error", nil, "post_id="+o.PostId, http.StatusBadRequest)
 	}
 

model/role.go

@@ -327,7 +327,7 @@ func (r *Role) RolePatchFromChannelModerationsPatch(channelModerationsPatch []*C
 }
 
 func (r *Role) IsValid() bool {
-	if len(r.Id) != 26 {
+	if !IsValidId(r.Id) {
 		return false
 	}
 

model/scheme.go

@@ -107,7 +107,7 @@ func SchemesFromJson(data io.Reader) []*Scheme {
 }
 
 func (scheme *Scheme) IsValid() bool {
-	if len(scheme.Id) != 26 {
+	if !IsValidId(scheme.Id) {
 		return false
 	}
 

model/team.go

@@ -136,7 +136,7 @@ func (o *Team) Etag() string {
 
 func (o *Team) IsValid() *AppError {
 
-	if len(o.Id) != 26 {
+	if !IsValidId(o.Id) {
 		return NewAppError("Team.IsValid", "model.team.is_valid.id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/team_member.go

@@ -167,11 +167,11 @@ func TeamsUnreadFromJson(data io.Reader) []*TeamUnread {
 
 func (o *TeamMember) IsValid() *AppError {
 
-	if len(o.TeamId) != 26 {
+	if !IsValidId(o.TeamId) {
 		return NewAppError("TeamMember.IsValid", "model.team_member.is_valid.team_id.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(o.UserId) != 26 {
+	if !IsValidId(o.UserId) {
 		return NewAppError("TeamMember.IsValid", "model.team_member.is_valid.user_id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/terms_of_service.go

@@ -21,7 +21,7 @@ type TermsOfService struct {
 }
 
 func (t *TermsOfService) IsValid() *AppError {
-	if len(t.Id) != 26 {
+	if !IsValidId(t.Id) {
 		return InvalidTermsOfServiceError("id", "")
 	}
 
@@ -29,7 +29,7 @@ func (t *TermsOfService) IsValid() *AppError {
 		return InvalidTermsOfServiceError("create_at", t.Id)
 	}
 
-	if len(t.UserId) != 26 {
+	if !IsValidId(t.UserId) {
 		return InvalidTermsOfServiceError("user_id", t.Id)
 	}
 

model/user.go

@@ -237,7 +237,7 @@ func (u *User) DeepCopy() *User {
 // correctly.
 func (u *User) IsValid() *AppError {
 
-	if len(u.Id) != 26 {
+	if !IsValidId(u.Id) {
 		return InvalidUserError("id", "")
 	}
 

model/user_access_token.go

@@ -18,7 +18,7 @@ type UserAccessToken struct {
 }
 
 func (t *UserAccessToken) IsValid() *AppError {
-	if len(t.Id) != 26 {
+	if !IsValidId(t.Id) {
 		return NewAppError("UserAccessToken.IsValid", "model.user_access_token.is_valid.id.app_error", nil, "", http.StatusBadRequest)
 	}
 
@@ -26,7 +26,7 @@ func (t *UserAccessToken) IsValid() *AppError {
 		return NewAppError("UserAccessToken.IsValid", "model.user_access_token.is_valid.token.app_error", nil, "", http.StatusBadRequest)
 	}
 
-	if len(t.UserId) != 26 {
+	if !IsValidId(t.UserId) {
 		return NewAppError("UserAccessToken.IsValid", "model.user_access_token.is_valid.user_id.app_error", nil, "", http.StatusBadRequest)
 	}
 

model/user_terms_of_service.go

@@ -17,11 +17,11 @@ type UserTermsOfService struct {
 }
 
 func (ut *UserTermsOfService) IsValid() *AppError {
-	if len(ut.UserId) != 26 {
+	if !IsValidId(ut.UserId) {
 		return InvalidUserTermsOfServiceError("user_id", ut.UserId)
 	}
 
-	if len(ut.TermsOfServiceId) != 26 {
+	if !IsValidId(ut.TermsOfServiceId) {
 		return InvalidUserTermsOfServiceError("terms_of_service_id", ut.UserId)
 	}
 

web/context.go

@@ -274,7 +274,7 @@ func (c *Context) RequireUserId() *Context {
 		c.Params.UserId = c.App.Session().UserId
 	}
 
-	if len(c.Params.UserId) != 26 {
+	if !model.IsValidId(c.Params.UserId) {
 		c.SetInvalidUrlParam("user_id")
 	}
 	return c
@@ -285,7 +285,7 @@ func (c *Context) RequireTeamId() *Context {
 		return c
 	}
 
-	if len(c.Params.TeamId) != 26 {
+	if !model.IsValidId(c.Params.TeamId) {
 		c.SetInvalidUrlParam("team_id")
 	}
 	return c
@@ -307,7 +307,7 @@ func (c *Context) RequireTokenId() *Context {
 		return c
 	}
 
-	if len(c.Params.TokenId) != 26 {
+	if !model.IsValidId(c.Params.TokenId) {
 		c.SetInvalidUrlParam("token_id")
 	}
 	return c
@@ -318,7 +318,7 @@ func (c *Context) RequireChannelId() *Context {
 		return c
 	}
 
-	if len(c.Params.ChannelId) != 26 {
+	if !model.IsValidId(c.Params.ChannelId) {
 		c.SetInvalidUrlParam("channel_id")
 	}
 	return c
@@ -341,7 +341,7 @@ func (c *Context) RequirePostId() *Context {
 		return c
 	}
 
-	if len(c.Params.PostId) != 26 {
+	if !model.IsValidId(c.Params.PostId) {
 		c.SetInvalidUrlParam("post_id")
 	}
 	return c
@@ -352,7 +352,7 @@ func (c *Context) RequireAppId() *Context {
 		return c
 	}
 
-	if len(c.Params.AppId) != 26 {
+	if !model.IsValidId(c.Params.AppId) {
 		c.SetInvalidUrlParam("app_id")
 	}
 	return c
@@ -363,7 +363,7 @@ func (c *Context) RequireFileId() *Context {
 		return c
 	}
 
-	if len(c.Params.FileId) != 26 {
+	if !model.IsValidId(c.Params.FileId) {
 		c.SetInvalidUrlParam("file_id")
 	}
 
@@ -399,7 +399,7 @@ func (c *Context) RequireReportId() *Context {
 		return c
 	}
 
-	if len(c.Params.ReportId) != 26 {
+	if !model.IsValidId(c.Params.ReportId) {
 		c.SetInvalidUrlParam("report_id")
 	}
 	return c
@@ -410,7 +410,7 @@ func (c *Context) RequireEmojiId() *Context {
 		return c
 	}
 
-	if len(c.Params.EmojiId) != 26 {
+	if !model.IsValidId(c.Params.EmojiId) {
 		c.SetInvalidUrlParam("emoji_id")
 	}
 	return c
@@ -507,7 +507,7 @@ func (c *Context) RequireHookId() *Context {
 		return c
 	}
 
-	if len(c.Params.HookId) != 26 {
+	if !model.IsValidId(c.Params.HookId) {
 		c.SetInvalidUrlParam("hook_id")
 	}
 
@@ -519,7 +519,7 @@ func (c *Context) RequireCommandId() *Context {
 		return c
 	}
 
-	if len(c.Params.CommandId) != 26 {
+	if !model.IsValidId(c.Params.CommandId) {
 		c.SetInvalidUrlParam("command_id")
 	}
 	return c
@@ -530,7 +530,7 @@ func (c *Context) RequireJobId() *Context {
 		return c
 	}
 
-	if len(c.Params.JobId) != 26 {
+	if !model.IsValidId(c.Params.JobId) {
 		c.SetInvalidUrlParam("job_id")
 	}
 	return c
@@ -552,7 +552,7 @@ func (c *Context) RequireRoleId() *Context {
 		return c
 	}
 
-	if len(c.Params.RoleId) != 26 {
+	if !model.IsValidId(c.Params.RoleId) {
 		c.SetInvalidUrlParam("role_id")
 	}
 	return c
@@ -563,7 +563,7 @@ func (c *Context) RequireSchemeId() *Context {
 		return c
 	}
 
-	if len(c.Params.SchemeId) != 26 {
+	if !model.IsValidId(c.Params.SchemeId) {
 		c.SetInvalidUrlParam("scheme_id")
 	}
 	return c
@@ -586,7 +586,7 @@ func (c *Context) RequireGroupId() *Context {
 		return c
 	}
 
-	if len(c.Params.GroupId) != 26 {
+	if !model.IsValidId(c.Params.GroupId) {
 		c.SetInvalidUrlParam("group_id")
 	}
 	return c
@@ -608,7 +608,7 @@ func (c *Context) RequireSyncableId() *Context {
 		return c
 	}
 
-	if len(c.Params.SyncableId) != 26 {
+	if !model.IsValidId(c.Params.SyncableId) {
 		c.SetInvalidUrlParam("syncable_id")
 	}
 	return c
@@ -630,7 +630,7 @@ func (c *Context) RequireBotUserId() *Context {
 		return c
 	}
 
-	if len(c.Params.BotUserId) != 26 {
+	if !model.IsValidId(c.Params.BotUserId) {
 		c.SetInvalidUrlParam("bot_user_id")
 	}
 	return c

web/oauth.go

@@ -79,7 +79,7 @@ func deauthorizeOAuthApp(c *Context, w http.ResponseWriter, r *http.Request) {
 	requestData := model.MapFromJson(r.Body)
 	clientId := requestData["client_id"]
 
-	if len(clientId) != 26 {
+	if !model.IsValidId(clientId) {
 		c.SetInvalidParam("client_id")
 		return
 	}
@@ -200,7 +200,7 @@ func getAccessToken(c *Context, w http.ResponseWriter, r *http.Request) {
 	}
 
 	clientId := r.FormValue("client_id")
-	if len(clientId) != 26 {
+	if !model.IsValidId(clientId) {
 		c.Err = model.NewAppError("getAccessToken", "api.oauth.get_access_token.bad_client_id.app_error", nil, "", http.StatusBadRequest)
 		return
 	}

wsapi/user.go

@@ -22,7 +22,7 @@ func (api *API) userTyping(req *model.WebSocketRequest) (map[string]interface{},
 
 	var ok bool
 	var channelId string
-	if channelId, ok = req.Data["channel_id"].(string); !ok || len(channelId) != 26 {
+	if channelId, ok = req.Data["channel_id"].(string); !ok || !model.IsValidId(channelId) {
 		return nil, NewInvalidWebSocketParamError(req.Action, "channel_id")
 	}