Merge pull request #5166 from ViacheslavKlimov/fields-validation

[3.3.2] Fields length validation

application/src/main/java/org/thingsboard/server/controller/TelemetryController.java

@@ -76,6 +76,7 @@ import org.thingsboard.server.common.data.kv.StringDataEntry;
 import org.thingsboard.server.common.data.kv.TsKvEntry;
 import org.thingsboard.server.common.data.tenant.profile.DefaultTenantProfileConfiguration;
 import org.thingsboard.server.common.transport.adaptor.JsonConverter;
+import org.thingsboard.server.dao.service.ConstraintValidator;
 import org.thingsboard.server.dao.timeseries.TimeseriesService;
 import org.thingsboard.server.queue.util.TbCoreComponent;
 import org.thingsboard.server.service.security.AccessValidator;
@@ -184,7 +185,11 @@ public class TelemetryController extends BaseController {
     public DeferredResult<ResponseEntity> getAttributeKeys(
             @ApiParam(value = ENTITY_TYPE_PARAM_DESCRIPTION, required = true, defaultValue = "DEVICE") @PathVariable("entityType") String entityType,
             @ApiParam(value = ENTITY_ID_PARAM_DESCRIPTION, required = true) @PathVariable("entityId") String entityIdStr) throws ThingsboardException {
-        return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_ATTRIBUTES, entityType, entityIdStr, this::getAttributeKeysCallback);
+        try {
+            return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_ATTRIBUTES, entityType, entityIdStr, this::getAttributeKeysCallback);
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     @ApiOperation(value = "Get all attribute keys by scope (getAttributeKeysByScope)",
@@ -201,8 +206,12 @@ public class TelemetryController extends BaseController {
             @ApiParam(value = ENTITY_TYPE_PARAM_DESCRIPTION, required = true, defaultValue = "DEVICE") @PathVariable("entityType") String entityType,
             @ApiParam(value = ENTITY_ID_PARAM_DESCRIPTION, required = true) @PathVariable("entityId") String entityIdStr,
             @ApiParam(value = ATTRIBUTES_SCOPE_DESCRIPTION, required = true, allowableValues = ATTRIBUTES_SCOPE_ALLOWED_VALUES) @PathVariable("scope") String scope) throws ThingsboardException {
-        return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_ATTRIBUTES, entityType, entityIdStr,
-                (result, tenantId, entityId) -> getAttributeKeysCallback(result, tenantId, entityId, scope));
+        try {
+            return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_ATTRIBUTES, entityType, entityIdStr,
+                    (result, tenantId, entityId) -> getAttributeKeysCallback(result, tenantId, entityId, scope));
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     @ApiOperation(value = "Get attributes (getAttributes)",
@@ -220,9 +229,13 @@ public class TelemetryController extends BaseController {
             @ApiParam(value = ENTITY_TYPE_PARAM_DESCRIPTION, required = true, defaultValue = "DEVICE") @PathVariable("entityType") String entityType,
             @ApiParam(value = ENTITY_ID_PARAM_DESCRIPTION, required = true) @PathVariable("entityId") String entityIdStr,
             @ApiParam(value = ATTRIBUTES_KEYS_DESCRIPTION) @RequestParam(name = "keys", required = false) String keysStr) throws ThingsboardException {
-        SecurityUser user = getCurrentUser();
-        return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_ATTRIBUTES, entityType, entityIdStr,
-                (result, tenantId, entityId) -> getAttributeValuesCallback(result, user, entityId, null, keysStr));
+        try {
+            SecurityUser user = getCurrentUser();
+            return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_ATTRIBUTES, entityType, entityIdStr,
+                    (result, tenantId, entityId) -> getAttributeValuesCallback(result, user, entityId, null, keysStr));
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
 
@@ -244,9 +257,13 @@ public class TelemetryController extends BaseController {
             @ApiParam(value = ENTITY_ID_PARAM_DESCRIPTION, required = true) @PathVariable("entityId") String entityIdStr,
             @ApiParam(value = ATTRIBUTES_SCOPE_DESCRIPTION, allowableValues = ATTRIBUTES_SCOPE_ALLOWED_VALUES, required = true) @PathVariable("scope") String scope,
             @ApiParam(value = ATTRIBUTES_KEYS_DESCRIPTION) @RequestParam(name = "keys", required = false) String keysStr) throws ThingsboardException {
-        SecurityUser user = getCurrentUser();
-        return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_ATTRIBUTES, entityType, entityIdStr,
-                (result, tenantId, entityId) -> getAttributeValuesCallback(result, user, entityId, scope, keysStr));
+        try {
+            SecurityUser user = getCurrentUser();
+            return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_ATTRIBUTES, entityType, entityIdStr,
+                    (result, tenantId, entityId) -> getAttributeValuesCallback(result, user, entityId, scope, keysStr));
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     @ApiOperation(value = "Get time-series keys (getTimeseriesKeys)",
@@ -259,8 +276,12 @@ public class TelemetryController extends BaseController {
     public DeferredResult<ResponseEntity> getTimeseriesKeys(
             @ApiParam(value = ENTITY_TYPE_PARAM_DESCRIPTION, required = true, defaultValue = "DEVICE") @PathVariable("entityType") String entityType,
             @ApiParam(value = ENTITY_ID_PARAM_DESCRIPTION, required = true) @PathVariable("entityId") String entityIdStr) throws ThingsboardException {
-        return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_TELEMETRY, entityType, entityIdStr,
-                (result, tenantId, entityId) -> Futures.addCallback(tsService.findAllLatest(tenantId, entityId), getTsKeysToResponseCallback(result), MoreExecutors.directExecutor()));
+        try {
+            return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_TELEMETRY, entityType, entityIdStr,
+                    (result, tenantId, entityId) -> Futures.addCallback(tsService.findAllLatest(tenantId, entityId), getTsKeysToResponseCallback(result), MoreExecutors.directExecutor()));
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     @ApiOperation(value = "Get latest time-series value (getLatestTimeseries)",
@@ -285,9 +306,13 @@ public class TelemetryController extends BaseController {
             @ApiParam(value = TELEMETRY_KEYS_DESCRIPTION) @RequestParam(name = "keys", required = false) String keysStr,
             @ApiParam(value = STRICT_DATA_TYPES_DESCRIPTION)
             @RequestParam(name = "useStrictDataTypes", required = false, defaultValue = "false") Boolean useStrictDataTypes) throws ThingsboardException {
-        SecurityUser user = getCurrentUser();
-        return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_TELEMETRY, entityType, entityIdStr,
-                (result, tenantId, entityId) -> getLatestTimeseriesValuesCallback(result, user, entityId, keysStr, useStrictDataTypes));
+        try {
+            SecurityUser user = getCurrentUser();
+            return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_TELEMETRY, entityType, entityIdStr,
+                    (result, tenantId, entityId) -> getLatestTimeseriesValuesCallback(result, user, entityId, keysStr, useStrictDataTypes));
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     @ApiOperation(value = "Get time-series data (getTimeseries)",
@@ -324,15 +349,19 @@ public class TelemetryController extends BaseController {
             @RequestParam(name = "orderBy", defaultValue = "DESC") String orderBy,
             @ApiParam(value = STRICT_DATA_TYPES_DESCRIPTION)
             @RequestParam(name = "useStrictDataTypes", required = false, defaultValue = "false") Boolean useStrictDataTypes) throws ThingsboardException {
-        return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_TELEMETRY, entityType, entityIdStr,
-                (result, tenantId, entityId) -> {
-                    // If interval is 0, convert this to a NONE aggregation, which is probably what the user really wanted
-                    Aggregation agg = interval == 0L ? Aggregation.valueOf(Aggregation.NONE.name()) : Aggregation.valueOf(aggStr);
-                    List<ReadTsKvQuery> queries = toKeysList(keys).stream().map(key -> new BaseReadTsKvQuery(key, startTs, endTs, interval, limit, agg, orderBy))
-                            .collect(Collectors.toList());
-
-                    Futures.addCallback(tsService.findAll(tenantId, entityId, queries), getTsKvListCallback(result, useStrictDataTypes), MoreExecutors.directExecutor());
-                });
+        try {
+            return accessValidator.validateEntityAndCallback(getCurrentUser(), Operation.READ_TELEMETRY, entityType, entityIdStr,
+                    (result, tenantId, entityId) -> {
+                        // If interval is 0, convert this to a NONE aggregation, which is probably what the user really wanted
+                        Aggregation agg = interval == 0L ? Aggregation.valueOf(Aggregation.NONE.name()) : Aggregation.valueOf(aggStr);
+                        List<ReadTsKvQuery> queries = toKeysList(keys).stream().map(key -> new BaseReadTsKvQuery(key, startTs, endTs, interval, limit, agg, orderBy))
+                                .collect(Collectors.toList());
+
+                        Futures.addCallback(tsService.findAll(tenantId, entityId, queries), getTsKvListCallback(result, useStrictDataTypes), MoreExecutors.directExecutor());
+                    });
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     @ApiOperation(value = "Save device attributes (saveDeviceAttributes)",
@@ -356,8 +385,12 @@ public class TelemetryController extends BaseController {
             @ApiParam(value = DEVICE_ID_PARAM_DESCRIPTION, required = true) @PathVariable("deviceId") String deviceIdStr,
             @ApiParam(value = ATTRIBUTES_SCOPE_DESCRIPTION, allowableValues = ATTRIBUTES_SCOPE_ALLOWED_VALUES, required = true) @PathVariable("scope") String scope,
             @ApiParam(value = ATTRIBUTES_JSON_REQUEST_DESCRIPTION, required = true) @RequestBody JsonNode request) throws ThingsboardException {
-        EntityId entityId = EntityIdFactory.getByTypeAndUuid(EntityType.DEVICE, deviceIdStr);
-        return saveAttributes(getTenantId(), entityId, scope, request);
+        try {
+            EntityId entityId = EntityIdFactory.getByTypeAndUuid(EntityType.DEVICE, deviceIdStr);
+            return saveAttributes(getTenantId(), entityId, scope, request);
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     @ApiOperation(value = "Save entity attributes (saveEntityAttributesV1)",
@@ -380,8 +413,12 @@ public class TelemetryController extends BaseController {
             @ApiParam(value = ENTITY_ID_PARAM_DESCRIPTION, required = true) @PathVariable("entityId") String entityIdStr,
             @ApiParam(value = ATTRIBUTES_SCOPE_DESCRIPTION, allowableValues = ATTRIBUTES_SCOPE_ALLOWED_VALUES) @PathVariable("scope") String scope,
             @ApiParam(value = ATTRIBUTES_JSON_REQUEST_DESCRIPTION, required = true) @RequestBody JsonNode request) throws ThingsboardException {
-        EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
-        return saveAttributes(getTenantId(), entityId, scope, request);
+        try {
+            EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
+            return saveAttributes(getTenantId(), entityId, scope, request);
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     @ApiOperation(value = "Save entity attributes (saveEntityAttributesV2)",
@@ -404,8 +441,12 @@ public class TelemetryController extends BaseController {
             @ApiParam(value = ENTITY_ID_PARAM_DESCRIPTION, required = true) @PathVariable("entityId") String entityIdStr,
             @ApiParam(value = ATTRIBUTES_SCOPE_DESCRIPTION, allowableValues = ATTRIBUTES_SCOPE_ALLOWED_VALUES, required = true) @PathVariable("scope") String scope,
             @ApiParam(value = ATTRIBUTES_JSON_REQUEST_DESCRIPTION, required = true) @RequestBody JsonNode request) throws ThingsboardException {
-        EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
-        return saveAttributes(getTenantId(), entityId, scope, request);
+        try {
+            EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
+            return saveAttributes(getTenantId(), entityId, scope, request);
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
 
@@ -429,8 +470,12 @@ public class TelemetryController extends BaseController {
             @ApiParam(value = ENTITY_ID_PARAM_DESCRIPTION, required = true) @PathVariable("entityId") String entityIdStr,
             @ApiParam(value = TELEMETRY_SCOPE_DESCRIPTION, required = true, allowableValues = "ANY") @PathVariable("scope") String scope,
             @ApiParam(value = TELEMETRY_JSON_REQUEST_DESCRIPTION, required = true) @RequestBody String requestBody) throws ThingsboardException {
-        EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
-        return saveTelemetry(getTenantId(), entityId, requestBody, 0L);
+        try {
+            EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
+            return saveTelemetry(getTenantId(), entityId, requestBody, 0L);
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     @ApiOperation(value = "Save or update time-series data with TTL (saveEntityTelemetryWithTTL)",
@@ -455,8 +500,12 @@ public class TelemetryController extends BaseController {
             @ApiParam(value = TELEMETRY_SCOPE_DESCRIPTION, required = true, allowableValues = "ANY") @PathVariable("scope") String scope,
             @ApiParam(value = "A long value representing TTL (Time to Live) parameter.", required = true) @PathVariable("ttl") Long ttl,
             @ApiParam(value = TELEMETRY_JSON_REQUEST_DESCRIPTION, required = true) @RequestBody String requestBody) throws ThingsboardException {
-        EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
-        return saveTelemetry(getTenantId(), entityId, requestBody, ttl);
+        try {
+            EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
+            return saveTelemetry(getTenantId(), entityId, requestBody, ttl);
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     @ApiOperation(value = "Delete entity time-series data (deleteEntityTimeseries)",
@@ -489,8 +538,12 @@ public class TelemetryController extends BaseController {
             @RequestParam(name = "endTs", required = false) Long endTs,
             @ApiParam(value = "If the parameter is set to true, the latest telemetry will be rewritten in case that current latest value was removed, otherwise, in case that parameter is set to false the new latest value will not set.")
             @RequestParam(name = "rewriteLatestIfDeleted", defaultValue = "false") boolean rewriteLatestIfDeleted) throws ThingsboardException {
-        EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
-        return deleteTimeseries(entityId, keysStr, deleteAllDataForKeys, startTs, endTs, rewriteLatestIfDeleted);
+        try {
+            EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
+            return deleteTimeseries(entityId, keysStr, deleteAllDataForKeys, startTs, endTs, rewriteLatestIfDeleted);
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     private DeferredResult<ResponseEntity> deleteTimeseries(EntityId entityIdStr, String keysStr, boolean deleteAllDataForKeys,
@@ -556,8 +609,12 @@ public class TelemetryController extends BaseController {
             @ApiParam(value = DEVICE_ID_PARAM_DESCRIPTION, required = true) @PathVariable(DEVICE_ID) String deviceIdStr,
             @ApiParam(value = ATTRIBUTES_SCOPE_DESCRIPTION, allowableValues = ATTRIBUTES_SCOPE_ALLOWED_VALUES, required = true) @PathVariable("scope") String scope,
             @ApiParam(value = ATTRIBUTES_KEYS_DESCRIPTION, required = true) @RequestParam(name = "keys") String keysStr) throws ThingsboardException {
-        EntityId entityId = EntityIdFactory.getByTypeAndUuid(EntityType.DEVICE, deviceIdStr);
-        return deleteAttributes(entityId, scope, keysStr);
+        try {
+            EntityId entityId = EntityIdFactory.getByTypeAndUuid(EntityType.DEVICE, deviceIdStr);
+            return deleteAttributes(entityId, scope, keysStr);
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     @ApiOperation(value = "Delete entity attributes (deleteEntityAttributes)",
@@ -580,8 +637,12 @@ public class TelemetryController extends BaseController {
             @ApiParam(value = ENTITY_ID_PARAM_DESCRIPTION, required = true) @PathVariable("entityId") String entityIdStr,
             @ApiParam(value = ATTRIBUTES_SCOPE_DESCRIPTION, required = true, allowableValues = ATTRIBUTES_SCOPE_ALLOWED_VALUES) @PathVariable("scope") String scope,
             @ApiParam(value = ATTRIBUTES_KEYS_DESCRIPTION, required = true) @RequestParam(name = "keys") String keysStr) throws ThingsboardException {
-        EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
-        return deleteAttributes(entityId, scope, keysStr);
+        try {
+            EntityId entityId = EntityIdFactory.getByTypeAndId(entityType, entityIdStr);
+            return deleteAttributes(entityId, scope, keysStr);
+        } catch (Exception e) {
+            throw handleException(e);
+        }
     }
 
     private DeferredResult<ResponseEntity> deleteAttributes(EntityId entityIdSrc, String scope, String keysStr) throws ThingsboardException {
@@ -627,6 +688,7 @@ public class TelemetryController extends BaseController {
         }
         if (json.isObject()) {
             List<AttributeKvEntry> attributes = extractRequestAttributes(json);
+            attributes.forEach(ConstraintValidator::validateFields);
             if (attributes.isEmpty()) {
                 return getImmediateDeferredResult("No attributes data found in request body!", HttpStatus.BAD_REQUEST);
             }

application/src/test/java/org/thingsboard/server/controller/BaseAssetControllerTest.java

@@ -99,6 +99,20 @@ public abstract class BaseAssetControllerTest extends AbstractControllerTest {
         Assert.assertEquals(foundAsset.getName(), savedAsset.getName());
     }
 
+    @Test
+    public void testSaveAssetWithViolationOfLengthValidation() throws Exception {
+        Asset asset = new Asset();
+        asset.setName(RandomStringUtils.randomAlphabetic(300));
+        asset.setType("default");
+        doPost("/api/asset", asset).andExpect(statusReason(containsString("length of name must be equal or less than 255")));
+        asset.setName("Normal name");
+        asset.setType(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/asset", asset).andExpect(statusReason(containsString("length of type must be equal or less than 255")));
+        asset.setType("default");
+        asset.setLabel(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/asset", asset).andExpect(statusReason(containsString("length of label must be equal or less than 255")));
+    }
+
     @Test
     public void testUpdateAssetFromDifferentTenant() throws Exception {
         Asset asset = new Asset();

application/src/test/java/org/thingsboard/server/controller/BaseCustomerControllerTest.java

@@ -90,6 +90,28 @@ public abstract class BaseCustomerControllerTest extends AbstractControllerTest
         .andExpect(status().isOk());
     }
 
+    @Test
+    public void testSaveCustomerWithViolationOfValidation() throws Exception {
+        Customer customer = new Customer();
+        customer.setTitle(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/customer", customer).andExpect(statusReason(containsString("length of title must be equal or less than 255")));
+        customer.setTitle("Normal title");
+        customer.setCity(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/customer", customer).andExpect(statusReason(containsString("length of city must be equal or less than 255")));
+        customer.setCity("Normal city");
+        customer.setCountry(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/customer", customer).andExpect(statusReason(containsString("length of country must be equal or less than 255")));
+        customer.setCountry("Ukraine");
+        customer.setPhone(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/customer", customer).andExpect(statusReason(containsString("length of phone must be equal or less than 255")));
+        customer.setPhone("+3892555554512");
+        customer.setState(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/customer", customer).andExpect(statusReason(containsString("length of state must be equal or less than 255")));
+        customer.setState("Normal state");
+        customer.setZip(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/customer", customer).andExpect(statusReason(containsString("length of zip or postal code must be equal or less than 255")));
+    }
+
     @Test
     public void testUpdateCustomerFromDifferentTenant() throws Exception {
         Customer customer = new Customer();

application/src/test/java/org/thingsboard/server/controller/BaseDashboardControllerTest.java

@@ -93,6 +93,13 @@ public abstract class BaseDashboardControllerTest extends AbstractControllerTest
         Assert.assertEquals(foundDashboard.getTitle(), savedDashboard.getTitle());
     }
 
+    @Test
+    public void testSaveDashboardInfoWithViolationOfValidation() throws Exception {
+        Dashboard dashboard = new Dashboard();
+        dashboard.setTitle(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/dashboard", dashboard).andExpect(statusReason(containsString("length of title must be equal or less than 255")));
+    }
+
     @Test
     public void testUpdateDashboardFromDifferentTenant() throws Exception {
         Dashboard dashboard = new Dashboard();

application/src/test/java/org/thingsboard/server/controller/BaseDeviceControllerTest.java

@@ -114,6 +114,20 @@ public abstract class BaseDeviceControllerTest extends AbstractControllerTest {
         Assert.assertEquals(foundDevice.getName(), savedDevice.getName());
     }
 
+    @Test
+    public void saveDeviceWithViolationOfValidation() throws Exception {
+        Device device = new Device();
+        device.setName(RandomStringUtils.randomAlphabetic(300));
+        device.setType("default");
+        doPost("/api/device", device).andExpect(statusReason(containsString("length of name must be equal or less than 255")));
+        device.setName("Normal Name");
+        device.setType(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/device", device).andExpect(statusReason(containsString("length of type must be equal or less than 255")));
+        device.setType("Normal type");
+        device.setLabel(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/device", device).andExpect(statusReason(containsString("length of label must be equal or less than 255")));
+    }
+
     @Test
     public void testUpdateDeviceFromDifferentTenant() throws Exception {
         Device device = new Device();

application/src/test/java/org/thingsboard/server/controller/BaseDeviceProfileControllerTest.java

@@ -22,6 +22,7 @@ import com.google.protobuf.DynamicMessage;
 import com.google.protobuf.InvalidProtocolBufferException;
 import com.google.protobuf.util.JsonFormat;
 import com.squareup.wire.schema.internal.parser.ProtoFileElement;
+import org.apache.commons.lang3.RandomStringUtils;
 import org.junit.After;
 import org.junit.Assert;
 import org.junit.Before;
@@ -109,6 +110,12 @@ public abstract class BaseDeviceProfileControllerTest extends AbstractController
         Assert.assertEquals(savedDeviceProfile.getName(), foundDeviceProfile.getName());
     }
 
+    @Test
+    public void saveDeviceProfileWithViolationOfValidation() throws Exception {
+        doPost("/api/deviceProfile", this.createDeviceProfile(RandomStringUtils.randomAlphabetic(300), null))
+                .andExpect(statusReason(containsString("length of name must be equal or less than 255")));
+    }
+
     @Test
     public void testFindDeviceProfileById() throws Exception {
         DeviceProfile deviceProfile = this.createDeviceProfile("Device Profile", null);

application/src/test/java/org/thingsboard/server/controller/BaseEdgeControllerTest.java

@@ -48,6 +48,7 @@ import org.thingsboard.server.gen.edge.v1.UserUpdateMsg;
 import java.util.ArrayList;
 import java.util.Collections;
 import java.util.List;
+import java.util.Random;
 
 import static org.hamcrest.Matchers.containsString;
 import static org.hamcrest.Matchers.nullValue;
@@ -112,6 +113,18 @@ public abstract class BaseEdgeControllerTest extends AbstractControllerTest {
         Assert.assertEquals(foundEdge.getName(), savedEdge.getName());
     }
 
+    @Test
+    public void testSaveEdgeWithViolationOfLengthValidation() throws Exception {
+        Edge edge = constructEdge(RandomStringUtils.randomAlphabetic(300), "default");
+        doPost("/api/edge", edge).andExpect(statusReason(containsString("length of name must be equal or less than 255")));
+        edge.setName("normal name");
+        edge.setType(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/edge", edge).andExpect(statusReason(containsString("length of type must be equal or less than 255")));
+        edge.setType("normal type");
+        edge.setLabel(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/edge", edge).andExpect(statusReason(containsString("length of label must be equal or less than 255")));
+    }
+
     @Test
     public void testFindEdgeById() throws Exception {
         Edge edge = constructEdge("My edge", "default");

application/src/test/java/org/thingsboard/server/controller/BaseEntityViewControllerTest.java

@@ -133,6 +133,14 @@ public abstract class BaseEntityViewControllerTest extends AbstractControllerTes
         assertEquals(foundEntityView.getKeys(), telemetry);
     }
 
+    @Test
+    public void testSaveEntityViewWithViolationOfValidation() throws Exception {
+        EntityView entityView = createEntityView(RandomStringUtils.randomAlphabetic(300), 0, 0);
+        doPost("/api/entityView", entityView).andExpect(statusReason(containsString("length of name must be equal or less than 255")));
+        entityView.setName("Normal name");
+        entityView.setType(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/entityView", entityView).andExpect(statusReason(containsString("length of type must be equal or less than 255")));
+    }
 
     @Test
     public void testUpdateEntityViewFromDifferentTenant() throws Exception {

application/src/test/java/org/thingsboard/server/controller/BaseOtaPackageControllerTest.java

@@ -16,6 +16,7 @@
 package org.thingsboard.server.controller;
 
 import com.fasterxml.jackson.core.type.TypeReference;
+import org.apache.commons.lang3.RandomStringUtils;
 import org.junit.After;
 import org.junit.Assert;
 import org.junit.Before;
@@ -40,6 +41,7 @@ import java.util.ArrayList;
 import java.util.Collections;
 import java.util.List;
 
+import static org.hamcrest.Matchers.containsString;
 import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
 import static org.thingsboard.server.common.data.ota.OtaPackageType.FIRMWARE;
 
@@ -117,6 +119,24 @@ public abstract class BaseOtaPackageControllerTest extends AbstractControllerTes
         Assert.assertEquals(foundFirmwareInfo.getTitle(), savedFirmwareInfo.getTitle());
     }
 
+    @Test
+    public void saveOtaPackageInfoWithViolationOfLengthValidation() throws Exception {
+        SaveOtaPackageInfoRequest firmwareInfo = new SaveOtaPackageInfoRequest();
+        firmwareInfo.setDeviceProfileId(deviceProfileId);
+        firmwareInfo.setType(FIRMWARE);
+        firmwareInfo.setTitle(RandomStringUtils.randomAlphabetic(300));
+        firmwareInfo.setVersion(VERSION);
+        firmwareInfo.setUsesUrl(false);
+        doPost("/api/otaPackage", firmwareInfo).andExpect(statusReason(containsString("length of title must be equal or less than 255")));
+        firmwareInfo.setTitle(TITLE);
+        firmwareInfo.setVersion(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/otaPackage", firmwareInfo).andExpect(statusReason(containsString("length of version must be equal or less than 255")));
+        firmwareInfo.setVersion(VERSION);
+        firmwareInfo.setUsesUrl(true);
+        firmwareInfo.setUrl(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/otaPackage", firmwareInfo).andExpect(statusReason(containsString("length of url must be equal or less than 255")));
+    }
+
     @Test
     public void testSaveFirmwareData() throws Exception {
         SaveOtaPackageInfoRequest firmwareInfo = new SaveOtaPackageInfoRequest();

application/src/test/java/org/thingsboard/server/controller/BaseRuleChainControllerTest.java

@@ -16,6 +16,7 @@
 package org.thingsboard.server.controller;
 
 import com.fasterxml.jackson.core.type.TypeReference;
+import org.apache.commons.lang3.RandomStringUtils;
 import org.junit.After;
 import org.junit.Assert;
 import org.junit.Before;
@@ -33,6 +34,7 @@ import java.util.ArrayList;
 import java.util.Collections;
 import java.util.List;
 
+import static org.hamcrest.Matchers.containsString;
 import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
 
 public abstract class BaseRuleChainControllerTest extends AbstractControllerTest {
@@ -84,6 +86,13 @@ public abstract class BaseRuleChainControllerTest extends AbstractControllerTest
         Assert.assertEquals(savedRuleChain.getName(), foundRuleChain.getName());
     }
 
+    @Test
+    public void testSaveRuleChainWithViolationOfLengthValidation() throws Exception {
+        RuleChain ruleChain = new RuleChain();
+        ruleChain.setName(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/ruleChain", ruleChain).andExpect(statusReason(containsString("length of name must be equal or less than 255")));
+    }
+
     @Test
     public void testFindRuleChainById() throws Exception {
         RuleChain ruleChain = new RuleChain();

application/src/test/java/org/thingsboard/server/controller/BaseTbResourceControllerTest.java

@@ -16,6 +16,7 @@
 package org.thingsboard.server.controller;
 
 import com.fasterxml.jackson.core.type.TypeReference;
+import org.apache.commons.lang3.RandomStringUtils;
 import org.junit.After;
 import org.junit.Assert;
 import org.junit.Before;
@@ -33,6 +34,7 @@ import java.util.ArrayList;
 import java.util.Collections;
 import java.util.List;
 
+import static org.hamcrest.Matchers.containsString;
 import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
 
 public abstract class BaseTbResourceControllerTest extends AbstractControllerTest {
@@ -98,6 +100,16 @@ public abstract class BaseTbResourceControllerTest extends AbstractControllerTes
         Assert.assertEquals(foundResource.getTitle(), savedResource.getTitle());
     }
 
+    @Test
+    public void saveResourceInfoWithViolationOfLengthValidation() throws Exception {
+        TbResource resource = new TbResource();
+        resource.setResourceType(ResourceType.JKS);
+        resource.setTitle(RandomStringUtils.randomAlphabetic(300));
+        resource.setFileName(DEFAULT_FILE_NAME);
+        resource.setData("Test Data");
+        doPost("/api/resource", resource).andExpect(statusReason(containsString("length of title must be equal or less than 255")));
+    }
+
     @Test
     public void testUpdateTbResourceFromDifferentTenant() throws Exception {
         TbResource resource = new TbResource();

application/src/test/java/org/thingsboard/server/controller/BaseTenantControllerTest.java

@@ -52,6 +52,14 @@ public abstract class BaseTenantControllerTest extends AbstractControllerTest {
         doDelete("/api/tenant/"+savedTenant.getId().getId().toString())
         .andExpect(status().isOk());
     }
+
+    @Test
+    public void testSaveTenantWithViolationOfValidation() throws Exception {
+        loginSysAdmin();
+        Tenant tenant = new Tenant();
+        tenant.setTitle(RandomStringUtils.randomAlphanumeric(300));
+        doPost("/api/tenant", tenant).andExpect(statusReason(containsString("length of title must be equal or less than 255")));
+    }
     
     @Test
     public void testFindTenantById() throws Exception {

application/src/test/java/org/thingsboard/server/controller/BaseTenantProfileControllerTest.java

@@ -16,6 +16,7 @@
 package org.thingsboard.server.controller;
 
 import com.fasterxml.jackson.core.type.TypeReference;
+import org.apache.commons.lang3.RandomStringUtils;
 import org.junit.After;
 import org.junit.Assert;
 import org.junit.Test;
@@ -74,6 +75,13 @@ public abstract class BaseTenantProfileControllerTest extends AbstractController
         Assert.assertEquals(foundTenantProfile.getName(), savedTenantProfile.getName());
     }
 
+    @Test
+    public void testSaveTenantProfileWithViolationOfLengthValidation() throws Exception {
+        loginSysAdmin();
+        TenantProfile tenantProfile = this.createTenantProfile(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/tenantProfile", tenantProfile).andExpect(statusReason(containsString("length of name must be equal or less than 255")));
+    }
+
     @Test
     public void testFindTenantProfileById() throws Exception {
         loginSysAdmin();

application/src/test/java/org/thingsboard/server/controller/BaseUserControllerTest.java

@@ -105,6 +105,28 @@ public abstract class BaseUserControllerTest extends AbstractControllerTest {
                 .andExpect(status().isOk());
     }
 
+    @Test
+    public void testSaveUserWithViolationOfFiledValidation() throws Exception {
+        loginSysAdmin();
+
+        Tenant tenant = new Tenant();
+        tenant.setTitle("My tenant");
+        Tenant savedTenant = doPost("/api/tenant", tenant, Tenant.class);
+        Assert.assertNotNull(savedTenant);
+
+        String email = "tenant2@thingsboard.org";
+        User user = new User();
+        user.setAuthority(Authority.TENANT_ADMIN);
+        user.setTenantId(savedTenant.getId());
+        user.setEmail(email);
+        user.setFirstName(RandomStringUtils.randomAlphabetic(300));
+        user.setLastName("Downs");
+        doPost("/api/user", user).andExpect(statusReason(containsString("Validation error: length of first name must be equal or less than 255")));
+        user.setFirstName("Normal name");
+        user.setLastName(RandomStringUtils.randomAlphabetic(300));
+        doPost("/api/user", user).andExpect(statusReason(containsString("length of last name must be equal or less than 255")));
+    }
+
     @Test
     public void testUpdateUserFromDifferentTenant() throws Exception {
         loginSysAdmin();

application/src/test/java/org/thingsboard/server/controller/BaseWidgetsBundleControllerTest.java

@@ -16,6 +16,7 @@
 package org.thingsboard.server.controller;
 
 import com.fasterxml.jackson.core.type.TypeReference;
+import org.apache.commons.lang3.RandomStringUtils;
 import org.junit.After;
 import org.junit.Assert;
 import org.junit.Before;
@@ -88,6 +89,13 @@ public abstract class BaseWidgetsBundleControllerTest extends AbstractController
         Assert.assertEquals(foundWidgetsBundle.getTitle(), savedWidgetsBundle.getTitle());
     }
 
+     @Test
+     public void testSaveWidgetBundleWithViolationOfLengthValidation() throws Exception {
+         WidgetsBundle widgetsBundle = new WidgetsBundle();
+         widgetsBundle.setTitle(RandomStringUtils.randomAlphabetic(300));
+         doPost("/api/widgetsBundle", widgetsBundle).andExpect(statusReason(containsString("length of title must be equal or less than 255")));
+     }
+
     @Test
     public void testUpdateWidgetsBundleFromDifferentTenant() throws Exception {
         WidgetsBundle widgetsBundle = new WidgetsBundle();

common/data/src/main/java/org/thingsboard/server/common/data/ContactBased.java

@@ -17,30 +17,36 @@ package org.thingsboard.server.common.data;
 
 import lombok.EqualsAndHashCode;
 import org.thingsboard.server.common.data.id.UUIDBased;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 @EqualsAndHashCode(callSuper = true)
 public abstract class ContactBased<I extends UUIDBased> extends SearchTextBasedWithAdditionalInfo<I> implements HasName {
-    
+
     private static final long serialVersionUID = 5047448057830660988L;
 
+    @Length(fieldName = "country")
     @NoXss
     protected String country;
+    @Length(fieldName = "state")
     @NoXss
     protected String state;
+    @Length(fieldName = "city")
     @NoXss
     protected String city;
     @NoXss
     protected String address;
     @NoXss
     protected String address2;
+    @Length(fieldName = "zip or postal code")
     @NoXss
     protected String zip;
+    @Length(fieldName = "phone")
     @NoXss
     protected String phone;
     @NoXss
     protected String email;
-    
+
     public ContactBased() {
         super();
     }
@@ -48,7 +54,7 @@ public abstract class ContactBased<I extends UUIDBased> extends SearchTextBasedW
     public ContactBased(I id) {
         super(id);
     }
-    
+
     public ContactBased(ContactBased<I> contact) {
         super(contact);
         this.country = contact.getCountry();

common/data/src/main/java/org/thingsboard/server/common/data/Customer.java

@@ -22,13 +22,15 @@ import com.fasterxml.jackson.databind.JsonNode;
 import io.swagger.annotations.ApiModelProperty;
 import org.thingsboard.server.common.data.id.CustomerId;
 import org.thingsboard.server.common.data.id.TenantId;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 public class Customer extends ContactBased<CustomerId> implements HasTenantId {
-    
+
     private static final long serialVersionUID = -1599722990298929275L;
 
     @NoXss
+    @Length(fieldName = "title")
     @ApiModelProperty(position = 3, value = "Title of the customer", example = "Company A")
     private String title;
     @ApiModelProperty(position = 5, required = true, value = "JSON object with Tenant Id")
@@ -41,7 +43,7 @@ public class Customer extends ContactBased<CustomerId> implements HasTenantId {
     public Customer(CustomerId id) {
         super(id);
     }
-    
+
     public Customer(Customer customer) {
         super(customer);
         this.tenantId = customer.getTenantId();

common/data/src/main/java/org/thingsboard/server/common/data/DashboardInfo.java

@@ -21,6 +21,7 @@ import io.swagger.annotations.ApiModelProperty;
 import org.thingsboard.server.common.data.id.CustomerId;
 import org.thingsboard.server.common.data.id.DashboardId;
 import org.thingsboard.server.common.data.id.TenantId;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 import javax.validation.Valid;
@@ -32,6 +33,7 @@ public class DashboardInfo extends SearchTextBased<DashboardId> implements HasNa
 
     private TenantId tenantId;
     @NoXss
+    @Length(fieldName = "title")
     private String title;
     private String image;
     @Valid

common/data/src/main/java/org/thingsboard/server/common/data/Device.java

@@ -28,6 +28,7 @@ import org.thingsboard.server.common.data.id.DeviceId;
 import org.thingsboard.server.common.data.id.DeviceProfileId;
 import org.thingsboard.server.common.data.id.OtaPackageId;
 import org.thingsboard.server.common.data.id.TenantId;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 import java.io.ByteArrayInputStream;
@@ -44,10 +45,13 @@ public class Device extends SearchTextBasedWithAdditionalInfo<DeviceId> implemen
     private TenantId tenantId;
     private CustomerId customerId;
     @NoXss
+    @Length(fieldName = "name")
     private String name;
     @NoXss
+    @Length(fieldName = "type")
     private String type;
     @NoXss
+    @Length(fieldName = "label")
     private String label;
     private DeviceProfileId deviceProfileId;
     private transient DeviceData deviceData;

common/data/src/main/java/org/thingsboard/server/common/data/DeviceProfile.java

@@ -28,6 +28,7 @@ import org.thingsboard.server.common.data.id.DeviceProfileId;
 import org.thingsboard.server.common.data.id.OtaPackageId;
 import org.thingsboard.server.common.data.id.RuleChainId;
 import org.thingsboard.server.common.data.id.TenantId;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 import javax.validation.Valid;
@@ -47,6 +48,7 @@ public class DeviceProfile extends SearchTextBased<DeviceProfileId> implements H
     @ApiModelProperty(position = 3, value = "JSON object with Tenant Id that owns the profile.", readOnly = true)
     private TenantId tenantId;
     @NoXss
+    @Length(fieldName = "name")
     @ApiModelProperty(position = 4, value = "Unique Device Profile Name in scope of Tenant.", example = "Moisture Sensor")
     private String name;
     @NoXss

common/data/src/main/java/org/thingsboard/server/common/data/EntityView.java

@@ -25,6 +25,7 @@ import org.thingsboard.server.common.data.id.EntityId;
 import org.thingsboard.server.common.data.id.EntityViewId;
 import org.thingsboard.server.common.data.id.TenantId;
 import org.thingsboard.server.common.data.objects.TelemetryEntityView;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 /**
@@ -44,9 +45,11 @@ public class EntityView extends SearchTextBasedWithAdditionalInfo<EntityViewId>
     private TenantId tenantId;
     private CustomerId customerId;
     @NoXss
+    @Length(fieldName = "name")
     @ApiModelProperty(position = 5, required = true, value = "Entity View name", example = "A4B72CCDFF33")
     private String name;
     @NoXss
+    @Length(fieldName = "type")
     @ApiModelProperty(position = 6, required = true, value = "Device Profile Name", example = "Temperature Sensor")
     private String type;
     @ApiModelProperty(position = 8, required = true, value = "Set of telemetry and attribute keys to expose via Entity View.")

common/data/src/main/java/org/thingsboard/server/common/data/OtaPackageInfo.java

@@ -27,6 +27,10 @@ import org.thingsboard.server.common.data.id.OtaPackageId;
 import org.thingsboard.server.common.data.id.TenantId;
 import org.thingsboard.server.common.data.ota.ChecksumAlgorithm;
 import org.thingsboard.server.common.data.ota.OtaPackageType;
+import org.thingsboard.server.common.data.validation.Length;
+import org.thingsboard.server.common.data.validation.NoXss;
+import org.thingsboard.server.common.data.ota.ChecksumAlgorithm;
+import org.thingsboard.server.common.data.ota.OtaPackageType;
 
 @ApiModel
 @Slf4j
@@ -42,16 +46,26 @@ public class OtaPackageInfo extends SearchTextBasedWithAdditionalInfo<OtaPackage
     private DeviceProfileId deviceProfileId;
     @ApiModelProperty(position = 5, value = "OTA Package type.", example = "FIRMWARE", readOnly = true)
     private OtaPackageType type;
+    @Length(fieldName = "title")
+    @NoXss
     @ApiModelProperty(position = 6, value = "OTA Package title.", example = "fw", readOnly = true)
     private String title;
+    @Length(fieldName = "version")
+    @NoXss
     @ApiModelProperty(position = 7, value = "OTA Package version.", example = "1.0", readOnly = true)
     private String version;
+    @Length(fieldName = "tag")
+    @NoXss
     @ApiModelProperty(position = 8, value = "OTA Package tag.", example = "fw_1.0", readOnly = true)
     private String tag;
+    @Length(fieldName = "url")
+    @NoXss
     @ApiModelProperty(position = 9, value = "OTA Package url.", example = "http://thingsboard.org/fw/1", readOnly = true)
     private String url;
     @ApiModelProperty(position = 10, value = "Indicates OTA Package 'has data'. Field is returned from DB ('true' if data exists or url is set).  If OTA Package 'has data' is 'false' we can not assign the OTA Package to the Device or Device Profile.", example = "true", readOnly = true)
     private boolean hasData;
+    @Length(fieldName = "file name")
+    @NoXss
     @ApiModelProperty(position = 11, value = "OTA Package file name.", example = "fw_1.0", readOnly = true)
     private String fileName;
     @ApiModelProperty(position = 12, value = "OTA Package content type.", example = "APPLICATION_OCTET_STREAM", readOnly = true)

common/data/src/main/java/org/thingsboard/server/common/data/TbResource.java

@@ -20,6 +20,7 @@ import lombok.Data;
 import lombok.EqualsAndHashCode;
 import lombok.extern.slf4j.Slf4j;
 import org.thingsboard.server.common.data.id.TbResourceId;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 @Slf4j
@@ -30,6 +31,7 @@ public class TbResource extends TbResourceInfo {
     private static final long serialVersionUID = 7379609705527272306L;
 
     @NoXss
+    @Length(fieldName = "file name")
     @ApiModelProperty(position = 8, value = "Resource file name.", example = "19.xml", readOnly = true)
     private String fileName;
 

common/data/src/main/java/org/thingsboard/server/common/data/TbResourceInfo.java

@@ -23,6 +23,7 @@ import lombok.EqualsAndHashCode;
 import lombok.extern.slf4j.Slf4j;
 import org.thingsboard.server.common.data.id.TbResourceId;
 import org.thingsboard.server.common.data.id.TenantId;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 @ApiModel
@@ -36,6 +37,7 @@ public class TbResourceInfo extends SearchTextBased<TbResourceId> implements Has
     @ApiModelProperty(position = 3, value = "JSON object with Tenant Id. Tenant Id of the resource can't be changed.", readOnly = true)
     private TenantId tenantId;
     @NoXss
+    @Length(fieldName = "title")
     @ApiModelProperty(position = 4, value = "Resource title.", example = "BinaryAppDataContainer id=19 v1.0")
     private String title;
     @ApiModelProperty(position = 5, value = "Resource type.", example = "LWM2M_MODEL", readOnly = true)

common/data/src/main/java/org/thingsboard/server/common/data/Tenant.java

@@ -23,6 +23,7 @@ import io.swagger.annotations.ApiModelProperty;
 import lombok.EqualsAndHashCode;
 import org.thingsboard.server.common.data.id.TenantId;
 import org.thingsboard.server.common.data.id.TenantProfileId;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 @ApiModel
@@ -31,6 +32,7 @@ public class Tenant extends ContactBased<TenantId> implements HasTenantId {
 
     private static final long serialVersionUID = 8057243243859922101L;
 
+    @Length(fieldName = "title")
     @NoXss
     @ApiModelProperty(position = 3, value = "Title of the tenant", example = "Company A")
     private String title;
@@ -48,7 +50,7 @@ public class Tenant extends ContactBased<TenantId> implements HasTenantId {
     public Tenant(TenantId id) {
         super(id);
     }
-    
+
     public Tenant(Tenant tenant) {
         super(tenant);
         this.title = tenant.getTitle();

common/data/src/main/java/org/thingsboard/server/common/data/TenantProfile.java

@@ -25,6 +25,7 @@ import lombok.extern.slf4j.Slf4j;
 import org.thingsboard.server.common.data.id.TenantProfileId;
 import org.thingsboard.server.common.data.tenant.profile.DefaultTenantProfileConfiguration;
 import org.thingsboard.server.common.data.tenant.profile.TenantProfileData;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 import java.io.ByteArrayInputStream;
@@ -42,6 +43,7 @@ public class TenantProfile extends SearchTextBased<TenantProfileId> implements H
     private static final long serialVersionUID = 3021989561267192281L;
 
     @NoXss
+    @Length(fieldName = "name")
     @ApiModelProperty(position = 3, value = "Name of the tenant profile", example = "High Priority Tenants")
     private String name;
     @NoXss

common/data/src/main/java/org/thingsboard/server/common/data/User.java

@@ -26,7 +26,7 @@ import org.thingsboard.server.common.data.id.EntityId;
 import org.thingsboard.server.common.data.id.TenantId;
 import org.thingsboard.server.common.data.id.UserId;
 import org.thingsboard.server.common.data.security.Authority;
-
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 @ApiModel
@@ -40,8 +40,10 @@ public class User extends SearchTextBasedWithAdditionalInfo<UserId> implements H
     private String email;
     private Authority authority;
     @NoXss
+    @Length(fieldName = "first name")
     private String firstName;
     @NoXss
+    @Length(fieldName = "last name")
     private String lastName;
 
     public User() {

common/data/src/main/java/org/thingsboard/server/common/data/alarm/Alarm.java

@@ -30,6 +30,7 @@ import org.thingsboard.server.common.data.id.AlarmId;
 import org.thingsboard.server.common.data.id.CustomerId;
 import org.thingsboard.server.common.data.id.EntityId;
 import org.thingsboard.server.common.data.id.TenantId;
+import org.thingsboard.server.common.data.validation.Length;
 
 import java.util.List;
 
@@ -49,6 +50,7 @@ public class Alarm extends BaseData<AlarmId> implements HasName, HasTenantId, Ha
     private CustomerId customerId;
 
     @ApiModelProperty(position = 6, required = true, value = "representing type of the Alarm", example = "High Temperature Alarm")
+    @Length(fieldName = "type")
     private String type;
     @ApiModelProperty(position = 7, required = true, value = "JSON object with alarm originator id")
     private EntityId originator;

common/data/src/main/java/org/thingsboard/server/common/data/asset/Asset.java

@@ -26,6 +26,7 @@ import org.thingsboard.server.common.data.SearchTextBasedWithAdditionalInfo;
 import org.thingsboard.server.common.data.id.AssetId;
 import org.thingsboard.server.common.data.id.CustomerId;
 import org.thingsboard.server.common.data.id.TenantId;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 import java.util.Optional;
@@ -39,10 +40,13 @@ public class Asset extends SearchTextBasedWithAdditionalInfo<AssetId> implements
     private TenantId tenantId;
     private CustomerId customerId;
     @NoXss
+    @Length(fieldName = "name")
     private String name;
     @NoXss
+    @Length(fieldName = "type")
     private String type;
     @NoXss
+    @Length(fieldName = "label")
     private String label;
 
     public Asset() {

common/data/src/main/java/org/thingsboard/server/common/data/edge/Edge.java

@@ -28,6 +28,7 @@ import org.thingsboard.server.common.data.id.CustomerId;
 import org.thingsboard.server.common.data.id.EdgeId;
 import org.thingsboard.server.common.data.id.RuleChainId;
 import org.thingsboard.server.common.data.id.TenantId;
+import org.thingsboard.server.common.data.validation.Length;
 
 @ApiModel
 @EqualsAndHashCode(callSuper = true)
@@ -40,8 +41,11 @@ public class Edge extends SearchTextBasedWithAdditionalInfo<EdgeId> implements H
     private TenantId tenantId;
     private CustomerId customerId;
     private RuleChainId rootRuleChainId;
+    @Length(fieldName = "name")
     private String name;
+    @Length(fieldName = "type")
     private String type;
+    @Length(fieldName = "label")
     private String label;
     private String routingKey;
     private String secret;

common/data/src/main/java/org/thingsboard/server/common/data/kv/BaseAttributeKvEntry.java

@@ -15,8 +15,7 @@
  */
 package org.thingsboard.server.common.data.kv;
 
-import com.fasterxml.jackson.databind.JsonNode;
-
+import javax.validation.Valid;
 import java.util.Optional;
 
 /**
@@ -27,6 +26,7 @@ public class BaseAttributeKvEntry implements AttributeKvEntry {
     private static final long serialVersionUID = -6460767583563159407L;
 
     private final long lastUpdateTs;
+    @Valid
     private final KvEntry kv;
 
     public BaseAttributeKvEntry(KvEntry kv, long lastUpdateTs) {

common/data/src/main/java/org/thingsboard/server/common/data/kv/BasicKvEntry.java

@@ -15,11 +15,14 @@
  */
 package org.thingsboard.server.common.data.kv;
 
+import org.thingsboard.server.common.data.validation.Length;
+
 import java.util.Objects;
 import java.util.Optional;
 
 public abstract class BasicKvEntry implements KvEntry {
 
+    @Length(fieldName = "attribute key")
     private final String key;
 
     protected BasicKvEntry(String key) {

common/data/src/main/java/org/thingsboard/server/common/data/kv/StringDataEntry.java

@@ -21,6 +21,7 @@ import java.util.Optional;
 public class StringDataEntry extends BasicKvEntry {
 
     private static final long serialVersionUID = 1L;
+
     private final String value;
 
     public StringDataEntry(String key, String value) {

common/data/src/main/java/org/thingsboard/server/common/data/relation/EntityRelation.java

@@ -22,6 +22,7 @@ import io.swagger.annotations.ApiModelProperty;
 import lombok.extern.slf4j.Slf4j;
 import org.thingsboard.server.common.data.SearchTextBasedWithAdditionalInfo;
 import org.thingsboard.server.common.data.id.EntityId;
+import org.thingsboard.server.common.data.validation.Length;
 
 import java.io.Serializable;
 
@@ -37,6 +38,7 @@ public class EntityRelation implements Serializable {
 
     private EntityId from;
     private EntityId to;
+    @Length(fieldName = "type")
     private String type;
     private RelationTypeGroup typeGroup;
     private transient JsonNode additionalInfo;

common/data/src/main/java/org/thingsboard/server/common/data/rule/RuleChain.java

@@ -28,6 +28,7 @@ import org.thingsboard.server.common.data.SearchTextBasedWithAdditionalInfo;
 import org.thingsboard.server.common.data.id.RuleChainId;
 import org.thingsboard.server.common.data.id.RuleNodeId;
 import org.thingsboard.server.common.data.id.TenantId;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
 @ApiModel
@@ -41,6 +42,7 @@ public class RuleChain extends SearchTextBasedWithAdditionalInfo<RuleChainId> im
     @ApiModelProperty(position = 3, required = true, value = "JSON object with Tenant Id.", readOnly = true)
     private TenantId tenantId;
     @NoXss
+    @Length(fieldName = "name")
     @ApiModelProperty(position = 4, required = true, value = "Rule Chain name", example = "Humidity data processing")
     private String name;
     @ApiModelProperty(position = 5, value = "Rule Chain type. 'EDGE' rule chains are processing messages on the edge devices only.", example = "A4B72CCDFF33")

common/data/src/main/java/org/thingsboard/server/common/data/rule/RuleNode.java

@@ -26,6 +26,7 @@ import org.thingsboard.server.common.data.HasName;
 import org.thingsboard.server.common.data.SearchTextBasedWithAdditionalInfo;
 import org.thingsboard.server.common.data.id.RuleChainId;
 import org.thingsboard.server.common.data.id.RuleNodeId;
+import org.thingsboard.server.common.data.validation.Length;
 
 @ApiModel
 @Data
@@ -37,8 +38,10 @@ public class RuleNode extends SearchTextBasedWithAdditionalInfo<RuleNodeId> impl
 
     @ApiModelProperty(position = 3, value = "JSON object with the Rule Chain Id. ", readOnly = true)
     private RuleChainId ruleChainId;
+    @Length(fieldName = "type")
     @ApiModelProperty(position = 4, value = "Full Java Class Name of the rule node implementation. ", example = "com.mycompany.iot.rule.engine.ProcessingNode")
     private String type;
+    @Length(fieldName = "name")
     @ApiModelProperty(position = 5, value = "User defined name of the rule node. Used on UI and for logging. ", example = "Process sensor reading")
     private String name;
     @ApiModelProperty(position = 6, value = "Enable/disable debug. ", example = "false")

common/data/src/main/java/org/thingsboard/server/common/data/validation/Length.java

@@ -0,0 +1,38 @@
+/**
+ * Copyright © 2016-2021 The Thingsboard Authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.thingsboard.server.common.data.validation;
+
+import javax.validation.Constraint;
+import javax.validation.Payload;
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+@Retention(RetentionPolicy.RUNTIME)
+@Target(ElementType.FIELD)
+@Constraint(validatedBy = {})
+public @interface Length {
+    String message() default "length of {fieldName} must be equal or less than {max}";
+
+    String fieldName();
+
+    int max() default 255;
+
+    Class<?>[] groups() default {};
+
+    Class<? extends Payload>[] payload() default {};
+}

common/data/src/main/java/org/thingsboard/server/common/data/widget/WidgetsBundle.java

@@ -23,10 +23,9 @@ import org.thingsboard.server.common.data.HasTenantId;
 import org.thingsboard.server.common.data.SearchTextBased;
 import org.thingsboard.server.common.data.id.TenantId;
 import org.thingsboard.server.common.data.id.WidgetsBundleId;
+import org.thingsboard.server.common.data.validation.Length;
 import org.thingsboard.server.common.data.validation.NoXss;
 
-import java.util.Arrays;
-
 @ApiModel
 public class WidgetsBundle extends SearchTextBased<WidgetsBundleId> implements HasTenantId {
 
@@ -38,12 +37,14 @@ public class WidgetsBundle extends SearchTextBased<WidgetsBundleId> implements H
     private TenantId tenantId;
 
     @NoXss
+    @Length(fieldName = "alias")
     @Getter
     @Setter
     @ApiModelProperty(position = 4, value = "Unique alias that is used in widget types as a reference widget bundle", readOnly = true)
     private String alias;
 
     @NoXss
+    @Length(fieldName = "title")
     @Getter
     @Setter
     @ApiModelProperty(position = 5, value = "Title used in search and UI", readOnly = true)
@@ -55,6 +56,7 @@ public class WidgetsBundle extends SearchTextBased<WidgetsBundleId> implements H
     private String image;
 
     @NoXss
+    @Length(fieldName = "description")
     @Getter
     @Setter
     @ApiModelProperty(position = 7, value = "Description", readOnly = true)

dao/src/main/java/org/thingsboard/server/dao/relation/BaseRelationService.java

@@ -41,6 +41,7 @@ import org.thingsboard.server.common.data.relation.RelationTypeGroup;
 import org.thingsboard.server.common.data.relation.RelationsSearchParameters;
 import org.thingsboard.server.dao.entity.EntityService;
 import org.thingsboard.server.dao.exception.DataValidationException;
+import org.thingsboard.server.dao.service.ConstraintValidator;
 
 import javax.annotation.Nullable;
 import java.util.ArrayList;
@@ -559,6 +560,7 @@ public class BaseRelationService implements RelationService {
         if (relation == null) {
             throw new DataValidationException("Relation type should be specified!");
         }
+        ConstraintValidator.validateFields(relation);
         validate(relation.getFrom(), relation.getTo(), relation.getType(), relation.getTypeGroup());
     }
 

dao/src/main/java/org/thingsboard/server/dao/service/ConstraintValidator.java

@@ -0,0 +1,63 @@
+/**
+ * Copyright © 2016-2021 The Thingsboard Authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.thingsboard.server.dao.service;
+
+import lombok.extern.slf4j.Slf4j;
+import org.hibernate.validator.HibernateValidator;
+import org.hibernate.validator.HibernateValidatorConfiguration;
+import org.hibernate.validator.cfg.ConstraintMapping;
+import org.thingsboard.server.common.data.validation.Length;
+import org.thingsboard.server.common.data.validation.NoXss;
+
+import javax.validation.ConstraintViolation;
+import javax.validation.Validation;
+import javax.validation.ValidationException;
+import javax.validation.Validator;
+import java.util.List;
+import java.util.Set;
+import java.util.stream.Collectors;
+
+@Slf4j
+public class ConstraintValidator {
+
+    private static Validator fieldsValidator;
+
+    static {
+        initializeValidators();
+    }
+
+    public static void validateFields(Object data) {
+        Set<ConstraintViolation<Object>> constraintsViolations = fieldsValidator.validate(data);
+        List<String> validationErrors = constraintsViolations.stream()
+                .map(ConstraintViolation::getMessage)
+                .distinct()
+                .collect(Collectors.toList());
+        if (!validationErrors.isEmpty()) {
+            throw new ValidationException("Validation error: " + String.join(", ", validationErrors));
+        }
+    }
+
+    private static void initializeValidators() {
+        HibernateValidatorConfiguration validatorConfiguration = Validation.byProvider(HibernateValidator.class).configure();
+
+        ConstraintMapping constraintMapping = validatorConfiguration.createConstraintMapping();
+        constraintMapping.constraintDefinition(NoXss.class).validatedBy(NoXssValidator.class);
+        constraintMapping.constraintDefinition(Length.class).validatedBy(StringLengthValidator.class);
+        validatorConfiguration.addMapping(constraintMapping);
+
+        fieldsValidator = validatorConfiguration.buildValidatorFactory().getValidator();
+    }
+}

dao/src/main/java/org/thingsboard/server/dao/service/DataValidator.java

@@ -17,51 +17,32 @@ package org.thingsboard.server.dao.service;
 
 import com.fasterxml.jackson.databind.JsonNode;
 import lombok.extern.slf4j.Slf4j;
-import org.hibernate.validator.HibernateValidator;
-import org.hibernate.validator.HibernateValidatorConfiguration;
-import org.hibernate.validator.cfg.ConstraintMapping;
 import org.thingsboard.server.common.data.BaseData;
 import org.thingsboard.server.common.data.EntityType;
 import org.thingsboard.server.common.data.id.TenantId;
-import org.thingsboard.server.common.data.tenant.profile.DefaultTenantProfileConfiguration;
-import org.thingsboard.server.common.data.validation.NoXss;
 import org.thingsboard.server.dao.TenantEntityDao;
 import org.thingsboard.server.dao.TenantEntityWithDataDao;
 import org.thingsboard.server.dao.exception.DataValidationException;
 
-import javax.validation.ConstraintViolation;
-import javax.validation.Validation;
-import javax.validation.Validator;
 import java.util.HashSet;
 import java.util.Iterator;
-import java.util.List;
 import java.util.Set;
 import java.util.function.Function;
 import java.util.regex.Matcher;
 import java.util.regex.Pattern;
-import java.util.stream.Collectors;
 
 @Slf4j
 public abstract class DataValidator<D extends BaseData<?>> {
     private static final Pattern EMAIL_PATTERN =
             Pattern.compile("^[A-Z0-9._%+-]+@[A-Z0-9.-]+\\.[A-Z]{2,}$", Pattern.CASE_INSENSITIVE);
 
-    private static Validator fieldsValidator;
-
-    static {
-        initializeFieldsValidator();
-    }
-
     public void validate(D data, Function<D, TenantId> tenantIdFunction) {
         try {
             if (data == null) {
                 throw new DataValidationException("Data object can't be null!");
             }
 
-            List<String> validationErrors = validateFields(data);
-            if (!validationErrors.isEmpty()) {
-                throw new IllegalArgumentException("Validation error: " + String.join(", ", validationErrors));
-            }
+            ConstraintValidator.validateFields(data);
 
             TenantId tenantId = tenantIdFunction.apply(data);
             validateDataImpl(tenantId, data);
@@ -104,14 +85,6 @@ public abstract class DataValidator<D extends BaseData<?>> {
         return emailMatcher.matches();
     }
 
-    private List<String> validateFields(D data) {
-        Set<ConstraintViolation<D>> constraintsViolations = fieldsValidator.validate(data);
-        return constraintsViolations.stream()
-                .map(ConstraintViolation::getMessage)
-                .distinct()
-                .collect(Collectors.toList());
-    }
-
     protected void validateNumberOfEntitiesPerTenant(TenantId tenantId,
                                                      TenantEntityDao tenantEntityDao,
                                                      long maxEntities,
@@ -126,10 +99,10 @@ public abstract class DataValidator<D extends BaseData<?>> {
     }
 
     protected void validateMaxSumDataSizePerTenant(TenantId tenantId,
-                                                     TenantEntityWithDataDao dataDao,
-                                                     long maxSumDataSize,
-                                                     long currentDataSize,
-                                                     EntityType entityType) {
+                                                   TenantEntityWithDataDao dataDao,
+                                                   long maxSumDataSize,
+                                                   long currentDataSize,
+                                                   EntityType entityType) {
         if (maxSumDataSize > 0) {
             if (dataDao.sumDataSizeByTenantId(tenantId) + currentDataSize > maxSumDataSize) {
                 throw new DataValidationException(String.format("Failed to create the %s, files size limit is exhausted %d bytes!",
@@ -156,12 +129,4 @@ public abstract class DataValidator<D extends BaseData<?>> {
         }
     }
 
-    private static void initializeFieldsValidator() {
-        HibernateValidatorConfiguration validatorConfiguration = Validation.byProvider(HibernateValidator.class).configure();
-        ConstraintMapping constraintMapping = validatorConfiguration.createConstraintMapping();
-        constraintMapping.constraintDefinition(NoXss.class).validatedBy(NoXssValidator.class);
-        validatorConfiguration.addMapping(constraintMapping);
-
-        fieldsValidator = validatorConfiguration.buildValidatorFactory().getValidator();
-    }
 }

dao/src/main/java/org/thingsboard/server/dao/service/StringLengthValidator.java

@@ -0,0 +1,41 @@
+/**
+ * Copyright © 2016-2021 The Thingsboard Authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.thingsboard.server.dao.service;
+
+import lombok.extern.slf4j.Slf4j;
+import org.thingsboard.server.common.data.StringUtils;
+import org.thingsboard.server.common.data.validation.Length;
+
+import javax.validation.ConstraintValidator;
+import javax.validation.ConstraintValidatorContext;
+
+@Slf4j
+public class StringLengthValidator implements ConstraintValidator<Length, String> {
+    private int max;
+
+    @Override
+    public boolean isValid(String value, ConstraintValidatorContext context) {
+        if (StringUtils.isEmpty(value)) {
+            return true;
+        }
+        return value.length() <= max;
+    }
+
+    @Override
+    public void initialize(Length constraintAnnotation) {
+        this.max = constraintAnnotation.max();
+    }
+}

dao/src/test/java/org/thingsboard/server/dao/service/BaseOtaPackageServiceTest.java

@@ -38,6 +38,7 @@ import org.thingsboard.server.common.data.page.PageLink;
 import org.thingsboard.server.common.data.tenant.profile.DefaultTenantProfileConfiguration;
 import org.thingsboard.server.dao.exception.DataValidationException;
 
+import javax.validation.ValidationException;
 import java.nio.ByteBuffer;
 import java.util.ArrayList;
 import java.util.Collections;
@@ -673,8 +674,8 @@ public abstract class BaseOtaPackageServiceTest extends AbstractServiceTest {
         firmwareInfo.setUrl(URL);
         firmwareInfo.setTenantId(tenantId);
 
-        thrown.expect(DataValidationException.class);
-        thrown.expectMessage("The length of title should be equal or shorter than 255");
+        thrown.expect(ValidationException.class);
+        thrown.expectMessage("length of title must be equal or less than 255");
 
         otaPackageService.saveOtaPackageInfo(firmwareInfo, true);
     }
@@ -689,7 +690,7 @@ public abstract class BaseOtaPackageServiceTest extends AbstractServiceTest {
         firmwareInfo.setTitle(TITLE);
 
         firmwareInfo.setVersion(RandomStringUtils.random(257));
-        thrown.expectMessage("The length of version should be equal or shorter than 255");
+        thrown.expectMessage("length of version must be equal or less than 255");
 
         otaPackageService.saveOtaPackageInfo(firmwareInfo, true);
     }

ui-ngx/src/app/modules/home/components/attribute/add-attribute-dialog.component.html

@@ -36,6 +36,9 @@
         <mat-error *ngIf="attributeFormGroup.get('key').hasError('required')">
           {{ 'attribute.key-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="attributeFormGroup.get('key').hasError('maxlength')">
+          {{ 'attribute.key-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <tb-value-input
         formControlName="value"

ui-ngx/src/app/modules/home/components/attribute/add-attribute-dialog.component.ts

@@ -56,7 +56,7 @@ export class AddAttributeDialogComponent extends DialogComponent<AddAttributeDia
 
   ngOnInit(): void {
     this.attributeFormGroup = this.fb.group({
-      key: ['', [Validators.required]],
+      key: ['', [Validators.required, Validators.maxLength(255)]],
       value: [null, [Validators.required]]
     });
   }

ui-ngx/src/app/modules/home/components/entity/contact-based.component.ts

@@ -37,15 +37,15 @@ export abstract class ContactBasedComponent<T extends ContactBased<HasId>> exten
 
   buildForm(entity: T): FormGroup {
     const entityForm = this.buildEntityForm(entity);
-    entityForm.addControl('country', this.fb.control(entity ? entity.country : '', []));
-    entityForm.addControl('city', this.fb.control(entity ? entity.city : '', []));
-    entityForm.addControl('state', this.fb.control(entity ? entity.state : '', []));
+    entityForm.addControl('country', this.fb.control(entity ? entity.country : '', [Validators.maxLength(255)]));
+    entityForm.addControl('city', this.fb.control(entity ? entity.city : '', [Validators.maxLength(255)]));
+    entityForm.addControl('state', this.fb.control(entity ? entity.state : '', [Validators.maxLength(255)]));
     entityForm.addControl('zip', this.fb.control(entity ? entity.zip : '',
       this.zipValidators(entity ? entity.country : '')
     ));
     entityForm.addControl('address', this.fb.control(entity ? entity.address : '', []));
     entityForm.addControl('address2', this.fb.control(entity ? entity.address2 : '', []));
-    entityForm.addControl('phone', this.fb.control(entity ? entity.phone : '', []));
+    entityForm.addControl('phone', this.fb.control(entity ? entity.phone : '', [Validators.maxLength(255)]));
     entityForm.addControl('email', this.fb.control(entity ? entity.email : '', [Validators.email]));
     return entityForm;
   }

ui-ngx/src/app/modules/home/components/profile/add-device-profile-dialog.component.html

@@ -41,6 +41,9 @@
               <mat-error *ngIf="deviceProfileDetailsFormGroup.get('name').hasError('required')">
                 {{ 'device-profile.name-required' | translate }}
               </mat-error>
+              <mat-error *ngIf="deviceProfileDetailsFormGroup.get('name').hasError('maxlength')">
+                {{ 'device-profile.name-max-length' | translate }}
+              </mat-error>
             </mat-form-field>
             <tb-rule-chain-autocomplete
               labelText="device-profile.default-rule-chain"

ui-ngx/src/app/modules/home/components/profile/add-device-profile-dialog.component.ts

@@ -105,7 +105,7 @@ export class AddDeviceProfileDialogComponent extends
     super(store, router, dialogRef);
     this.deviceProfileDetailsFormGroup = this.fb.group(
       {
-        name: [data.deviceProfileName, [Validators.required]],
+        name: [data.deviceProfileName, [Validators.required, Validators.maxLength(255)]],
         type: [DeviceProfileType.DEFAULT, [Validators.required]],
         image: [null, []],
         defaultRuleChainId: [null, []],

ui-ngx/src/app/modules/home/components/profile/device-profile.component.html

@@ -54,6 +54,9 @@
         <mat-error *ngIf="entityForm.get('name').hasError('required')">
           {{ 'device-profile.name-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('name').hasError('maxlength')">
+          {{ 'device-profile.name-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <tb-rule-chain-autocomplete
         labelText="device-profile.default-rule-chain"

ui-ngx/src/app/modules/home/components/profile/device-profile.component.ts

@@ -103,7 +103,7 @@ export class DeviceProfileComponent extends EntityComponent<DeviceProfile> {
     };
     const form = this.fb.group(
       {
-        name: [entity ? entity.name : '', [Validators.required]],
+        name: [entity ? entity.name : '', [Validators.required, Validators.maxLength(255)]],
         type: [entity ? entity.type : null, [Validators.required]],
         image: [entity ? entity.image : null],
         transportType: [entity ? entity.transportType : null, [Validators.required]],

ui-ngx/src/app/modules/home/components/profile/tenant-profile.component.html

@@ -48,6 +48,9 @@
         <mat-error *ngIf="entityForm.get('name').hasError('required')">
           {{ 'tenant-profile.name-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('name').hasError('maxlength')">
+          {{ 'tenant-profile.name-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <div fxLayout="column">
         <mat-checkbox class="hinted-checkbox" formControlName="isolatedTbCore">

ui-ngx/src/app/modules/home/components/profile/tenant-profile.component.ts

@@ -59,7 +59,7 @@ export class TenantProfileComponent extends EntityComponent<TenantProfile> {
   buildForm(entity: TenantProfile): FormGroup {
     return this.fb.group(
       {
-        name: [entity ? entity.name : '', [Validators.required]],
+        name: [entity ? entity.name : '', [Validators.required, Validators.maxLength(255)]],
         isolatedTbCore: [entity ? entity.isolatedTbCore : false, []],
         isolatedTbRuleEngine: [entity ? entity.isolatedTbRuleEngine : false, []],
         profileData: [entity && !this.isAdd ? entity.profileData : {

ui-ngx/src/app/modules/home/components/wizard/device-wizard-dialog.component.html

@@ -44,10 +44,16 @@
               <mat-error *ngIf="deviceWizardFormGroup.get('name').hasError('required')">
                 {{ 'device.name-required' | translate }}
               </mat-error>
+              <mat-error *ngIf="deviceWizardFormGroup.get('name').hasError('maxlength')">
+                {{ 'device.name-max-length' | translate }}
+              </mat-error>
             </mat-form-field>
             <mat-form-field class="mat-block">
               <mat-label translate>device.label</mat-label>
               <input matInput formControlName="label">
+              <mat-error *ngIf="deviceWizardFormGroup.get('label').hasError('maxlength')">
+                {{ 'device.label-max-length' | translate }}
+              </mat-error>
             </mat-form-field>
             <div fxLayout="row" fxLayoutGap="16px">
               <mat-radio-group fxLayout="column" formControlName="addProfileType" fxLayoutAlign="space-around">

ui-ngx/src/app/modules/home/components/wizard/device-wizard-dialog.component.ts

@@ -105,8 +105,8 @@ export class DeviceWizardDialogComponent extends
               private fb: FormBuilder) {
     super(store, router, dialogRef);
     this.deviceWizardFormGroup = this.fb.group({
-        name: ['', Validators.required],
-        label: [''],
+        name: ['', [Validators.required, Validators.maxLength(255)]],
+        label: ['', Validators.maxLength(255)],
         gateway: [false],
         overwriteActivityTime: [false],
         addProfileType: [0],

ui-ngx/src/app/modules/home/pages/admin/resource/resources-library.component.html

@@ -56,6 +56,9 @@
         <mat-error *ngIf="entityForm.get('title').hasError('required')">
           {{ 'resource.title-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('title').hasError('maxlength')">
+          {{ 'resource.title-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <tb-file-input *ngIf="isAdd"
         formControlName="data"

ui-ngx/src/app/modules/home/pages/admin/resource/resources-library.component.ts

@@ -29,7 +29,7 @@ import {
   ResourceTypeMIMETypes,
   ResourceTypeTranslationMap
 } from '@shared/models/resource.models';
-import { pairwise, startWith, takeUntil } from 'rxjs/operators';
+import {filter, pairwise, startWith, takeUntil} from 'rxjs/operators';
 import { ActionNotificationShow } from '@core/notification/notification.actions';
 
 @Component({
@@ -57,16 +57,14 @@ export class ResourcesLibraryComponent extends EntityComponent<Resource> impleme
     super.ngOnInit();
     this.entityForm.get('resourceType').valueChanges.pipe(
       startWith(ResourceType.LWM2M_MODEL),
-      pairwise(),
+      filter(() => this.isAdd),
       takeUntil(this.destroy$)
-    ).subscribe(([previousType, type]) => {
-      if (previousType === this.resourceType.LWM2M_MODEL) {
-        this.entityForm.get('title').setValidators(Validators.required);
-        this.entityForm.get('title').updateValueAndValidity({emitEvent: false});
-      }
+    ).subscribe((type) => {
       if (type === this.resourceType.LWM2M_MODEL) {
-        this.entityForm.get('title').clearValidators();
-        this.entityForm.get('title').updateValueAndValidity({emitEvent: false});
+        this.entityForm.get('title').disable({emitEvent: false});
+        this.entityForm.patchValue({title: ''}, {emitEvent: false});
+      } else {
+        this.entityForm.get('title').enable({emitEvent: false})
       }
       this.entityForm.patchValue({
         data: null,
@@ -92,11 +90,8 @@ export class ResourcesLibraryComponent extends EntityComponent<Resource> impleme
   buildForm(entity: Resource): FormGroup {
     const form = this.fb.group(
       {
-        title: [entity ? entity.title : '', []],
-        resourceType: [{
-          value: entity?.resourceType ? entity.resourceType : ResourceType.LWM2M_MODEL,
-          disabled: !this.isAdd
-        }, [Validators.required]],
+        title: [entity ? entity.title : "", [Validators.required, Validators.maxLength(255)]],
+        resourceType: [entity?.resourceType ? entity.resourceType : ResourceType.LWM2M_MODEL, [Validators.required]],
         fileName: [entity ? entity.fileName : null, [Validators.required]],
       }
     );

ui-ngx/src/app/modules/home/pages/asset/asset.component.html

@@ -76,6 +76,9 @@
         <mat-error *ngIf="entityForm.get('name').hasError('required')">
           {{ 'asset.name-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('name').hasError('maxlength')">
+          {{ 'asset.name-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <tb-entity-subtype-autocomplete
         formControlName="type"
@@ -86,6 +89,9 @@
       <mat-form-field class="mat-block">
         <mat-label translate>asset.label</mat-label>
         <input matInput formControlName="label">
+        <mat-error *ngIf="entityForm.get('label').hasError('maxlength')">
+          {{ 'asset.label-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <div formGroupName="additionalInfo">
         <mat-form-field class="mat-block">

ui-ngx/src/app/modules/home/pages/asset/asset.component.ts

@@ -66,9 +66,9 @@ export class AssetComponent extends EntityComponent<AssetInfo> {
   buildForm(entity: AssetInfo): FormGroup {
     return this.fb.group(
       {
-        name: [entity ? entity.name : '', [Validators.required]],
-        type: [entity ? entity.type : null, [Validators.required]],
-        label: [entity ? entity.label : ''],
+        name: [entity ? entity.name : '', [Validators.required, Validators.maxLength(255)]],
+        type: [entity ? entity.type : null, [Validators.required, Validators.maxLength(255)]],
+        label: [entity ? entity.label : '', Validators.maxLength(255)],
         additionalInfo: this.fb.group(
           {
             description: [entity && entity.additionalInfo ? entity.additionalInfo.description : ''],

ui-ngx/src/app/modules/home/pages/customer/customer.component.html

@@ -73,6 +73,9 @@
         <mat-error *ngIf="entityForm.get('title').hasError('required')">
           {{ 'customer.title-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('title').hasError('maxlength')">
+          {{ 'customer.title-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <div formGroupName="additionalInfo" fxLayout="column">
         <mat-form-field class="mat-block">

ui-ngx/src/app/modules/home/pages/customer/customer.component.ts

@@ -58,7 +58,7 @@ export class CustomerComponent extends ContactBasedComponent<Customer> {
   buildEntityForm(entity: Customer): FormGroup {
     return this.fb.group(
       {
-        title: [entity ? entity.title : '', [Validators.required]],
+        title: [entity ? entity.title : '', [Validators.required, Validators.maxLength(255)]],
         additionalInfo: this.fb.group(
           {
             description: [entity && entity.additionalInfo ? entity.additionalInfo.description : ''],

ui-ngx/src/app/modules/home/pages/dashboard/dashboard-form.component.html

@@ -104,6 +104,9 @@
         <mat-error *ngIf="entityForm.get('title').hasError('required')">
           {{ 'dashboard.title-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('title').hasError('maxlength')">
+          {{ 'dashboard.title-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <div formGroupName="configuration" fxLayout="column">
         <mat-form-field class="mat-block">

ui-ngx/src/app/modules/home/pages/dashboard/dashboard-form.component.ts

@@ -80,7 +80,7 @@ export class DashboardFormComponent extends EntityComponent<Dashboard> {
     this.updateFields(entity);
     return this.fb.group(
       {
-        title: [entity ? entity.title : '', [Validators.required]],
+        title: [entity ? entity.title : '', [Validators.required, Validators.maxLength(255)]],
         image: [entity ? entity.image : null],
         mobileHide: [entity ? entity.mobileHide : false],
         mobileOrder: [entity ? entity.mobileOrder : null, [Validators.pattern(/^-?[0-9]+$/)]],

ui-ngx/src/app/modules/home/pages/device/device.component.html

@@ -89,6 +89,9 @@
         <mat-error *ngIf="entityForm.get('name').hasError('required')">
           {{ 'device.name-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('name').hasError('maxlength')">
+          {{ 'device.name-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <tb-device-profile-autocomplete
         [selectDefaultProfile]="isAdd"
@@ -100,6 +103,9 @@
       <mat-form-field class="mat-block">
         <mat-label translate>device.label</mat-label>
         <input matInput formControlName="label">
+        <mat-error *ngIf="entityForm.get('label').hasError('maxlength')">
+          {{ 'device.label-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <tb-ota-package-autocomplete
         [useFullEntityId]="true"

ui-ngx/src/app/modules/home/pages/device/device.component.ts

@@ -82,11 +82,11 @@ export class DeviceComponent extends EntityComponent<DeviceInfo> {
   buildForm(entity: DeviceInfo): FormGroup {
     const form = this.fb.group(
       {
-        name: [entity ? entity.name : '', [Validators.required]],
+        name: [entity ? entity.name : '', [Validators.required, Validators.maxLength(255)]],
         deviceProfileId: [entity ? entity.deviceProfileId : null, [Validators.required]],
         firmwareId: [entity ? entity.firmwareId : null],
         softwareId: [entity ? entity.softwareId : null],
-        label: [entity ? entity.label : ''],
+        label: [entity ? entity.label : '', [Validators.maxLength(255)]],
         deviceData: [entity ? entity.deviceData : null, [Validators.required]],
         additionalInfo: this.fb.group(
           {

ui-ngx/src/app/modules/home/pages/edge/edge.component.html

@@ -126,6 +126,9 @@
         <mat-error *ngIf="entityForm.get('name').hasError('required')">
           {{ 'edge.name-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('name').hasError('maxlength')">
+          {{ 'edge.name-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <tb-entity-subtype-autocomplete
         formControlName="type"
@@ -140,6 +143,9 @@
           <mat-error *ngIf="entityForm.get('edgeLicenseKey').hasError('required')">
             {{ 'edge.edge-license-key-required' | translate }}
           </mat-error>
+          <mat-error *ngIf="entityForm.get('type').hasError('maxlength')">
+            {{ 'edge.type-max-length' | translate }}
+          </mat-error>
         </mat-form-field>
       </div>
       <div [fxShow]="edgeScope !== 'customer_user'">
@@ -179,6 +185,9 @@
       <mat-form-field class="mat-block">
         <mat-label translate>edge.label</mat-label>
         <input matInput formControlName="label">
+        <mat-error *ngIf="entityForm.get('label').hasError('maxlength')">
+          {{ 'edge.label-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <div formGroupName="additionalInfo" fxLayout="column">
         <mat-form-field class="mat-block">

ui-ngx/src/app/modules/home/pages/edge/edge.component.ts

@@ -70,9 +70,9 @@ export class EdgeComponent extends EntityComponent<EdgeInfo> {
   buildForm(entity: EdgeInfo): FormGroup {
     const form = this.fb.group(
       {
-        name: [entity ? entity.name : '', [Validators.required]],
-        type: [entity?.type ? entity.type : 'default', [Validators.required]],
-        label: [entity ? entity.label : ''],
+        name: [entity ? entity.name : '', [Validators.required, Validators.maxLength(255)]],
+        type: [entity?.type ? entity.type : 'default', [Validators.required, Validators.maxLength(255)]],
+        label: [entity ? entity.label : '', Validators.maxLength(255)],
         cloudEndpoint: [null, [Validators.required]],
         edgeLicenseKey: ['', [Validators.required]],
         routingKey: this.fb.control({value: entity ? entity.routingKey : null, disabled: true}),

ui-ngx/src/app/modules/home/pages/entity-view/entity-view.component.html

@@ -76,6 +76,9 @@
         <mat-error *ngIf="entityForm.get('name').hasError('required')">
           {{ 'entity-view.name-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('name').hasError('maxlength')">
+          {{ 'entity-view.name-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <tb-entity-subtype-autocomplete
         formControlName="type"

ui-ngx/src/app/modules/home/pages/entity-view/entity-view.component.ts

@@ -81,8 +81,8 @@ export class EntityViewComponent extends EntityComponent<EntityViewInfo> {
   buildForm(entity: EntityViewInfo): FormGroup {
     return this.fb.group(
       {
-        name: [entity ? entity.name : '', [Validators.required]],
-        type: [entity ? entity.type : null, [Validators.required]],
+        name: [entity ? entity.name : '', [Validators.required, Validators.maxLength(255)]],
+        type: [entity ? entity.type : null, Validators.required],
         entityId: [entity ? entity.entityId : null, [Validators.required]],
         startTimeMs: [entity ? entity.startTimeMs : null],
         endTimeMs: [entity ? entity.endTimeMs : null],

ui-ngx/src/app/modules/home/pages/ota-update/ota-update.component.html

@@ -65,6 +65,9 @@
           <mat-error *ngIf="entityForm.get('title').hasError('required')">
             {{ 'ota-update.title-required' | translate }}
           </mat-error>
+          <mat-error *ngIf="entityForm.get('title').hasError('maxlength')">
+            {{ 'ota-update.title-max-length' | translate }}
+          </mat-error>
         </mat-form-field>
         <mat-form-field class="mat-block" fxFlex>
           <mat-label translate>ota-update.version</mat-label>
@@ -72,6 +75,9 @@
           <mat-error *ngIf="entityForm.get('version').hasError('required')">
             {{ 'ota-update.version-required' | translate }}
           </mat-error>
+          <mat-error *ngIf="entityForm.get('version').hasError('maxlength')">
+            {{ 'ota-update.version-max-length' | translate }}
+          </mat-error>
         </mat-form-field>
       </div>
       <mat-form-field class="mat-block" fxFlex style="margin-bottom: 8px">
@@ -116,7 +122,8 @@
           </mat-checkbox>
         </section>
         <div fxLayout="row" fxLayoutGap.gt-xs="8px" fxLayoutGap.sm="8px"
-             fxLayout.xs="column" fxLayout.md="column" *ngIf="!(isAdd && this.entityForm.get('generateChecksum').value)">
+             fxLayout.xs="column" fxLayout.md="column"
+             *ngIf="!(isAdd && this.entityForm.get('generateChecksum').value)">
           <mat-form-field class="mat-block" fxFlex="33">
             <mat-label translate>ota-update.checksum-algorithm</mat-label>
             <mat-select formControlName="checksumAlgorithm">
@@ -154,7 +161,8 @@
           <input matInput formControlName="url"
                  type="text"
                  [required]="entityForm.get('isURL').value">
-          <mat-error *ngIf="entityForm.get('url').hasError('required') || entityForm.get('url').hasError('pattern')" translate>
+          <mat-error *ngIf="entityForm.get('url').hasError('required') || entityForm.get('url').hasError('pattern')"
+                     translate>
             ota-update.direct-url-required
           </mat-error>
         </mat-form-field>

ui-ngx/src/app/modules/home/pages/rulechain/rulechain.component.html

@@ -84,6 +84,9 @@
         <mat-error *ngIf="entityForm.get('name').hasError('required')">
           {{ 'rulechain.name-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('name').hasError('maxlength')">
+          {{ 'rulechain.name-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <mat-checkbox fxFlex formControlName="debugMode" style="padding-bottom: 16px;">
         {{ 'rulechain.debug-mode' | translate }}

ui-ngx/src/app/modules/home/pages/rulechain/rulechain.component.ts

@@ -58,7 +58,7 @@ export class RuleChainComponent extends EntityComponent<RuleChain> {
   buildForm(entity: RuleChain): FormGroup {
     return this.fb.group(
       {
-        name: [entity ? entity.name : '', [Validators.required]],
+        name: [entity ? entity.name : '', [Validators.required, Validators.maxLength(255)]],
         debugMode: [entity ? entity.debugMode : false],
         additionalInfo: this.fb.group(
           {

ui-ngx/src/app/modules/home/pages/tenant/tenant.component.html

@@ -48,6 +48,9 @@
         <mat-error *ngIf="entityForm.get('title').hasError('required')">
           {{ 'tenant.title-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('title').hasError('maxlength')">
+          {{ 'tenant.title-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <tb-tenant-profile-autocomplete
         [selectDefaultProfile]="isAdd"

ui-ngx/src/app/modules/home/pages/tenant/tenant.component.ts

@@ -52,7 +52,7 @@ export class TenantComponent extends ContactBasedComponent<TenantInfo> {
   buildEntityForm(entity: TenantInfo): FormGroup {
     return this.fb.group(
       {
-        title: [entity ? entity.title : '', [Validators.required]],
+        title: [entity ? entity.title : '', [Validators.required, Validators.maxLength(255)]],
         tenantProfileId: [entity ? entity.tenantProfileId : null, [Validators.required]],
         additionalInfo: this.fb.group(
           {

ui-ngx/src/app/modules/home/pages/widget/widgets-bundle.component.html

@@ -44,6 +44,9 @@
         <mat-error *ngIf="entityForm.get('title').hasError('required')">
           {{ 'widgets-bundle.title-required' | translate }}
         </mat-error>
+        <mat-error *ngIf="entityForm.get('title').hasError('maxlength')">
+          {{ 'widgets-bundle.title-max-length' | translate }}
+        </mat-error>
       </mat-form-field>
       <tb-image-input fxFlex
                       label="{{'widgets-bundle.image-preview' | translate}}"

ui-ngx/src/app/modules/home/pages/widget/widgets-bundle.component.ts

@@ -48,7 +48,7 @@ export class WidgetsBundleComponent extends EntityComponent<WidgetsBundle> {
   buildForm(entity: WidgetsBundle): FormGroup {
     return this.fb.group(
       {
-        title: [entity ? entity.title : '', [Validators.required]],
+        title: [entity ? entity.title : '', [Validators.required, Validators.maxLength(255)]],
         image: [entity ? entity.image : ''],
         description: [entity  ? entity.description : '', Validators.maxLength(255)]
       }

ui-ngx/src/app/shared/components/contact.component.html

@@ -28,10 +28,16 @@
     <mat-form-field class="mat-block">
       <mat-label translate>contact.city</mat-label>
       <input matInput formControlName="city">
+      <mat-error *ngIf="parentForm.get('city').hasError('maxlength')">
+        {{ 'contact.city-max-length' | translate }}
+      </mat-error>
     </mat-form-field>
     <mat-form-field class="mat-block">
       <mat-label translate>contact.state</mat-label>
       <input matInput formControlName="state">
+      <mat-error *ngIf="parentForm.get('state').hasError('maxlength')">
+        {{ 'contact.state-max-length' | translate }}
+      </mat-error>
     </mat-form-field>
     <mat-form-field class="mat-block">
       <mat-label translate>contact.postal-code</mat-label>
@@ -52,6 +58,9 @@
   <mat-form-field class="mat-block">
     <mat-label translate>contact.phone</mat-label>
     <input matInput formControlName="phone">
+    <mat-error *ngIf="parentForm.get('phone').hasError('maxlength')">
+      {{ 'contact.phone-max-length' | translate }}
+    </mat-error>
   </mat-form-field>
   <mat-form-field class="mat-block">
     <mat-label translate>contact.email</mat-label>

ui-ngx/src/app/shared/components/entity/entity-subtype-autocomplete.component.html

@@ -40,4 +40,7 @@
   <mat-error *ngIf="subTypeFormGroup.get('subType').hasError('required')">
     {{ entitySubtypeRequiredText | translate }}
   </mat-error>
+  <mat-error *ngIf="subTypeFormGroup.get('subType').hasError('maxlength')">
+    {{ entitySubtypeMaxLength | translate }}
+  </mat-error>
 </mat-form-field>

ui-ngx/src/app/shared/components/entity/entity-subtype-autocomplete.component.ts

@@ -15,7 +15,7 @@
 ///
 
 import { AfterViewInit, Component, ElementRef, forwardRef, Input, OnDestroy, OnInit, ViewChild } from '@angular/core';
-import { ControlValueAccessor, FormBuilder, FormGroup, NG_VALUE_ACCESSOR } from '@angular/forms';
+import { ControlValueAccessor, FormBuilder, FormGroup, NG_VALUE_ACCESSOR, Validators } from '@angular/forms';
 import { Observable, of, Subscription, throwError } from 'rxjs';
 import {
   catchError,
@@ -58,9 +58,11 @@ export class EntitySubTypeAutocompleteComponent implements ControlValueAccessor,
   entityType: EntityType;
 
   private requiredValue: boolean;
+
   get required(): boolean {
     return this.requiredValue;
   }
+
   @Input()
   set required(value: boolean) {
     this.requiredValue = coerceBooleanProperty(value);
@@ -74,6 +76,7 @@ export class EntitySubTypeAutocompleteComponent implements ControlValueAccessor,
   selectEntitySubtypeText: string;
   entitySubtypeText: string;
   entitySubtypeRequiredText: string;
+  entitySubtypeMaxLength: string;
 
   filteredSubTypes: Observable<Array<string>>;
 
@@ -96,7 +99,7 @@ export class EntitySubTypeAutocompleteComponent implements ControlValueAccessor,
               private entityViewService: EntityViewService,
               private fb: FormBuilder) {
     this.subTypeFormGroup = this.fb.group({
-      subType: [null]
+      subType: [null, Validators.maxLength(255)]
     });
   }
 
@@ -114,6 +117,7 @@ export class EntitySubTypeAutocompleteComponent implements ControlValueAccessor,
         this.selectEntitySubtypeText = 'asset.select-asset-type';
         this.entitySubtypeText = 'asset.asset-type';
         this.entitySubtypeRequiredText = 'asset.asset-type-required';
+        this.entitySubtypeMaxLength = 'asset.asset-type-max-length';
         this.broadcastSubscription = this.broadcast.on('assetSaved', () => {
           this.subTypes = null;
         });
@@ -122,6 +126,7 @@ export class EntitySubTypeAutocompleteComponent implements ControlValueAccessor,
         this.selectEntitySubtypeText = 'device.select-device-type';
         this.entitySubtypeText = 'device.device-type';
         this.entitySubtypeRequiredText = 'device.device-type-required';
+        this.entitySubtypeMaxLength = 'device.device-type-max-length';
         this.broadcastSubscription = this.broadcast.on('deviceSaved', () => {
           this.subTypes = null;
         });
@@ -130,6 +135,7 @@ export class EntitySubTypeAutocompleteComponent implements ControlValueAccessor,
         this.selectEntitySubtypeText = 'edge.select-edge-type';
         this.entitySubtypeText = 'edge.edge-type';
         this.entitySubtypeRequiredText = 'edge.edge-type-required';
+        this.entitySubtypeMaxLength = 'edge.type-max-length';
         this.broadcastSubscription = this.broadcast.on('edgeSaved', () => {
           this.subTypes = null;
         });
@@ -138,6 +144,7 @@ export class EntitySubTypeAutocompleteComponent implements ControlValueAccessor,
         this.selectEntitySubtypeText = 'entity-view.select-entity-view-type';
         this.entitySubtypeText = 'entity-view.entity-view-type';
         this.entitySubtypeRequiredText = 'entity-view.entity-view-type-required';
+        this.entitySubtypeMaxLength = 'entity-view.type-max-length'
         this.broadcastSubscription = this.broadcast.on('entityViewSaved', () => {
           this.subTypes = null;
         });
@@ -149,7 +156,7 @@ export class EntitySubTypeAutocompleteComponent implements ControlValueAccessor,
         debounceTime(150),
         distinctUntilChanged(),
         tap(value => {
-            this.updateView(value);
+          this.updateView(value);
         }),
         // startWith<string | EntitySubtype>(''),
         map(value => value ? value : ''),
@@ -203,7 +210,7 @@ export class EntitySubTypeAutocompleteComponent implements ControlValueAccessor,
   fetchSubTypes(searchText?: string, strictMatch: boolean = false): Observable<Array<string>> {
     this.searchText = searchText;
     return this.getSubTypes().pipe(
-      map(subTypes => subTypes.filter( subType => {
+      map(subTypes => subTypes.filter(subType => {
         if (strictMatch) {
           return searchText ? subType === searchText : false;
         } else {

ui-ngx/src/app/shared/components/relation/relation-type-autocomplete.component.html

@@ -39,4 +39,7 @@
   <mat-error *ngIf="relationTypeFormGroup.get('relationType').hasError('required')">
     {{ 'relation.relation-type-required' | translate }}
   </mat-error>
+  <mat-error *ngIf="relationTypeFormGroup.get('relationType').hasError('maxlength')">
+    {{ 'relation.relation-type-max-length' | translate }}
+  </mat-error>
 </mat-form-field>

ui-ngx/src/app/shared/components/relation/relation-type-autocomplete.component.ts

@@ -68,7 +68,7 @@ export class RelationTypeAutocompleteComponent implements ControlValueAccessor,
               public translate: TranslateService,
               private fb: FormBuilder) {
     this.relationTypeFormGroup = this.fb.group({
-      relationType: [null, this.required ? [Validators.required] : []]
+      relationType: [null, this.required ? [Validators.required, Validators.maxLength(255)] : [Validators.maxLength(255)]]
     });
   }
 

ui-ngx/src/assets/locale/locale.constant-en_US.json

@@ -370,6 +370,7 @@
         "management": "Asset management",
         "view-assets": "View Assets",
         "add": "Add Asset",
+        "asset-type-max-length": "Asset type should be less than 256",
         "assign-to-customer": "Assign to customer",
         "assign-asset-to-customer": "Assign Asset(s) To Customer",
         "assign-asset-to-customer-text": "Please select the assets to assign to the customer",
@@ -392,6 +393,8 @@
         "asset-types": "Asset types",
         "name": "Name",
         "name-required": "Name is required.",
+        "name-max-length": "Name should be less than 256",
+        "label-max-length": "Label should be less than 256",
         "description": "Description",
         "type": "Type",
         "type-required": "Type is required.",
@@ -451,6 +454,7 @@
         "scope-shared": "Shared attributes",
         "add": "Add attribute",
         "key": "Key",
+        "key-max-length": "Key should be less than 256",
         "last-update-time": "Last update time",
         "key-required": "Attribute key is required.",
         "value": "Value",
@@ -592,7 +596,10 @@
         "address2": "Address 2",
         "phone": "Phone",
         "email": "Email",
-        "no-address": "No address"
+        "no-address": "No address",
+        "state-max-length": "State length should be less than 256",
+        "phone-max-length": "Phone number should be less than 256",
+        "city-max-length": "Specified city should be less than 256"
     },
     "common": {
         "username": "Username",
@@ -648,6 +655,7 @@
         "manage-dashboards": "Manage dashboards",
         "title": "Title",
         "title-required": "Title is required.",
+        "title-max-length": "Title should be less than 256",
         "description": "Description",
         "details": "Details",
         "events": "Events",
@@ -705,6 +713,7 @@
         "select-widget-subtitle": "List of available widget types",
         "delete": "Delete dashboard",
         "title-required": "Title is required.",
+        "title-max-length": "Title should be less than 256",
         "description": "Description",
         "details": "Details",
         "dashboard-details": "Dashboard details",
@@ -891,6 +900,7 @@
         "management": "Device management",
         "view-devices": "View Devices",
         "device-alias": "Device alias",
+        "device-type-max-length": "Device type should be less than 256",
         "aliases": "Device aliases",
         "no-alias-matching": "'{{alias}}' not found.",
         "no-aliases-found": "No aliases found.",
@@ -1003,6 +1013,8 @@
         "device-types": "Device types",
         "name": "Name",
         "name-required": "Name is required.",
+        "name-max-length": "Name should be less than 256",
+        "label-max-length": "Label should be less than 256",
         "description": "Description",
         "label": "Label",
         "events": "Events",
@@ -1055,6 +1067,7 @@
         "set-default": "Make device profile default",
         "delete": "Delete device profile",
         "copyId": "Copy device profile Id",
+        "name-max-length": "Name should be less than 256",
         "new-device-profile-name": "Device profile name",
         "new-device-profile-name-required": "Device profile name is required.",
         "name": "Name",
@@ -1416,6 +1429,9 @@
         "edge": "Edge",
         "edge-instances": "Edge instances",
         "edge-file": "Edge file",
+        "name-max-length": "Name should be less than 256",
+        "label-max-length": "Label should be less than 256",
+        "type-max-length": "Type should be less than 256",
         "management": "Edge management",
         "no-edges-matching": "No edges matching '{{entity}}' were found.",
         "add": "Add Edge",
@@ -1750,6 +1766,8 @@
         "created-time": "Created time",
         "name": "Name",
         "name-required": "Name is required.",
+        "name-max-length": "Name should be less than 256",
+        "type-max-length": "Entity view type should be less than 256",
         "description": "Description",
         "events": "Events",
         "details": "Details",
@@ -2374,6 +2392,7 @@
       "selected-package": "{ count, plural, 1 {1 package} other {# packages} } selected",
       "title": "Title",
       "title-required": "Title is required.",
+      "title-max-length": "Title should be less than 256",
       "types": {
         "firmware": "Firmware",
         "software": "Software"
@@ -2384,6 +2403,7 @@
       "version-required": "Version is required.",
       "version-tag": "Version Tag",
       "version-tag-hint": "Custom tag should match the package version reported by your device.",
+      "version-max-length": "Version should be less than 256",
       "warning-after-save-no-edit": "Once the package is uploaded, you will not be able to modify title, version, device profile and package type."
     },
     "position": {
@@ -2426,6 +2446,7 @@
         "delete": "Delete relation",
         "relation-type": "Relation type",
         "relation-type-required": "Relation type is required.",
+        "relation-type-max-length": "Relation type should be less than 256",
         "any-relation-type": "Any type",
         "add": "Add relation",
         "edit": "Edit relation",
@@ -2470,7 +2491,8 @@
         "selected-resources": "{ count, plural, 1 {1 resource} other {# resources} } selected",
         "system": "System",
         "title": "Title",
-        "title-required": "Title is required."
+        "title-required": "Title is required.",
+        "title-max-length": "Title should be less than 256"
     },
     "rulechain": {
         "rulechain": "Rule chain",
@@ -2479,6 +2501,7 @@
         "delete": "Delete rule chain",
         "name": "Name",
         "name-required": "Name is required.",
+        "name-max-length": "Name should be less than 256",
         "description": "Description",
         "add": "Add Rule Chain",
         "set-root": "Make rule chain root",
@@ -2621,6 +2644,7 @@
         "add-tenant-text": "Add new tenant",
         "no-tenants-text": "No tenants found",
         "tenant-details": "Tenant details",
+        "title-max-length": "Title should be less than 256",
         "delete-tenant-title": "Are you sure you want to delete the tenant '{{tenantTitle}}'?",
         "delete-tenant-text": "Be careful, after the confirmation the tenant and all related data will become unrecoverable.",
         "delete-tenants-title": "Are you sure you want to delete { count, plural, 1 {1 tenant} other {# tenants} }?",
@@ -2650,6 +2674,7 @@
         "edit": "Edit tenant profile",
         "tenant-profile-details": "Tenant profile details",
         "no-tenant-profiles-text": "No tenant profiles found",
+        "name-max-length": "Name should be less than 256",
         "search": "Search tenant profiles",
         "selected-tenant-profiles": "{ count, plural, 1 {1 tenant profile} other {# tenant profiles} } selected",
         "no-tenant-profiles-matching": "No tenant profile matching '{{entity}}' were found.",
@@ -2997,6 +3022,7 @@
         "delete": "Delete widgets bundle",
         "title": "Title",
         "title-required": "Title is required.",
+        "title-max-length": "Title should be less than 256",
         "description": "Description",
         "image-preview": "Image preview",
         "add-widgets-bundle-text": "Add new widgets bundle",