Fix missing constraints causing route failures when usernames with periods are used

Closes #23131

1 files changed, 4 insertions, 1 deletions

diff --git a/config/routes/user.rb b/config/routes/user.rb
index c287039ba26..54bbcb18f6a 100644
--- a/config/routes/user.rb
+++ b/config/routes/user.rb
@@ -15,7 +15,10 @@ devise_scope :user do
 end
 
 constraints(UserUrlConstrainer.new) do
-  scope(path: ':username', as: :user, controller: :users) do
+  scope(path: ':username',
+        as: :user,
+        constraints: { username: /[a-zA-Z.0-9_\-]+(?<!\.atom)/ },
+        controller: :users) do
     get '/', action: :show
   end
 end