aKinderWellness Testing and Quality analysis

The /api/admin/add-role endpoint does not enforce proper input length validation on the name field.
An attacker (or authenticated admin user) can submit extremely long strings (well beyond expected limits such as 50 characters), and the server accepts and processes the request successfully.
This indicates Lack of server-side validation

Steps to Reproduce

1. Send a POST request to: https://api.akinderwellness.com:4001/api/admin/add-role
2. Use a valid admin authorization token
3. Provide an excessively long string in name field:

{
  "name": "NEW ROLE WITH MORE THAN FIFTY CHARACTERS LETS CHECK ITNEW ROLE WITH MORE THAN FIFTY CHARACTERS LETS CHECK ITNEW ROLE WITH MORE THAN FIFTY CHARACTERS LETS CHECK IT..."
}

5. Observe the response

Actual Result
Server accepts the request
Role is created successfully with oversized name

Expected Result
Server should reject input exceeding allowed length (e.g., 50 chars)
Return validation error like:

{
  "error": "Role name must not exceed 50 characters"
}