From 3b345881c697d16ddeb1e960bcbfc2b8490748bb Mon Sep 17 00:00:00 2001
From: hsiegeln <37154749+hsiegeln@users.noreply.github.com>
Date: Fri, 10 Apr 2026 07:44:59 +0200
Subject: [PATCH] fix: strip non-alphanumeric chars from admin username input

Logto usernames must match alphanumeric regex. The form now strips
invalid characters on input and shows a hint about the constraint.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 ui/src/pages/vendor/CreateTenantPage.tsx | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ui/src/pages/vendor/CreateTenantPage.tsx b/ui/src/pages/vendor/CreateTenantPage.tsx
index d015548..5c1bad7 100644
--- a/ui/src/pages/vendor/CreateTenantPage.tsx
+++ b/ui/src/pages/vendor/CreateTenantPage.tsx
@@ -91,11 +91,11 @@ export function CreateTenantPage() {
             </select>
           </FormField>
 
-          <FormField label="Admin Username" htmlFor="admin-user" hint="Initial tenant admin (owner role)">
+          <FormField label="Admin Username" htmlFor="admin-user" hint="Initial tenant admin (owner role). Alphanumeric only, no hyphens.">
             <Input
               id="admin-user"
               value={adminUsername}
-              onChange={(e) => setAdminUsername(e.target.value)}
+              onChange={(e) => setAdminUsername(e.target.value.replace(/[^a-zA-Z0-9]/g, ''))}
               placeholder="admin"
             />
           </FormField>