From 9b68d908dee45cd4cd5037446e1faca20b3b3def Mon Sep 17 00:00:00 2001
From: Jonathan Barrow <jonbarrow1998@gmail.com>
Date: Sun, 23 Aug 2026 15:27:22 -0400
Subject: [PATCH] feat(NNAS): add user gender sanity check people endpoint

---
 src/services/nnas/routes/people.ts | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/services/nnas/routes/people.ts b/src/services/nnas/routes/people.ts
index eb0367e..b2467c1 100644
--- a/src/services/nnas/routes/people.ts
+++ b/src/services/nnas/routes/people.ts
@@ -411,6 +411,20 @@ router.post('/', deviceRatelimit, deviceCertificateMiddleware, async (request: e
 		return;
 	}
 
+	if (!person.gender || !(['M', 'F'].includes(person.gender))) {
+		response.status(400).send(xmlbuilder.create({
+			errors: {
+				error: {
+					cause: 'gender',
+					code: '0002',
+					message: 'gender format is invalid'
+				}
+			}
+		}).end());
+
+		return;
+	}
+
 	const creationDate = moment().format('YYYY-MM-DDTHH:MM:SS');
 	let pnid: HydratedPNIDDocument;
 	let nexAccount: HydratedNEXAccountDocument;