@bepalo/spine 1.5.17 → 2.7.19

package/dist/cjs/middlewares.js

@@ -1,4 +1,5 @@
 "use strict";
+// src/middlewares.ts
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -9,23 +10,123 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.cors = exports.limitRate = void 0;
+exports.validate = exports.cors = exports.limitRate = exports.securityHeaders = exports.forceHttps = void 0;
 const helpers_ts_1 = require("./helpers.js");
+const parsers_ts_1 = require("./parsers.js");
+const status_ts_1 = require("./status.js");
 const types_ts_1 = require("./types.js");
+/**
+ * Force http into https
+ *
+ * @returns {Handler<ExtendContext>} Middleware function
+ *
+ */
+const forceHttps = (config) => {
+    var _a;
+    const toPort = (_a = config === null || config === void 0 ? void 0 : config.toPort) !== null && _a !== void 0 ? _a : 443;
+    return function ({ url }) {
+        if (url.protocol === "http:") {
+            const newUrl = new URL(url);
+            newUrl.protocol = "https:";
+            newUrl.port = toPort === 443 ? "" : String(toPort);
+            return (0, helpers_ts_1.redirectPermanentPreserve)(newUrl.toString());
+        }
+    };
+};
+exports.forceHttps = forceHttps;
+/**
+ * Set security headers.
+ *   - "X-Content-Type-Options": always "nosniff"
+ *   - "X-Frame-Options": default "DENY"
+ *   - "Referrer-Policy": from parameters
+ *   - "Strict-Transport-Security": from parameters
+ *   - "Content-Security-Policy": from parameters
+ *
+ * @returns {Handler<ExtendContext>} Middleware function
+ *
+ */
+const securityHeaders = (config) => {
+    const { crossOriginOpenerPolicy, crossOriginEmbedderPolicy, crossOriginResourcePolicy, referrerPolicy, xFrameOptions = "DENY", strictTransportSecurity: hsts_, contentSecurityPolicy: csp_, headers, } = config !== null && config !== void 0 ? config : {};
+    const hsts = hsts_ == null
+        ? undefined
+        : typeof hsts_ === "string"
+            ? hsts_
+            : typeof hsts_ === "boolean"
+                ? hsts_
+                    ? (0, helpers_ts_1.buildStrictTransportSecurity)({})
+                    : undefined
+                : (0, helpers_ts_1.buildStrictTransportSecurity)(hsts_);
+    const contentSecurityPolicy = csp_ == null ? undefined : (0, helpers_ts_1.buildContentSecurityPolicy)(csp_);
+    /////////////////////////////////////////////
+    const preparedHeaders = [];
+    if (headers != null) {
+        if (Array.isArray(headers)) {
+            for (const [key, value] of headers) {
+                preparedHeaders.push([key, value]);
+            }
+        }
+        else {
+            for (const key of Object.keys(headers)) {
+                preparedHeaders.push([key, headers[key]]);
+            }
+        }
+    }
+    /////////////////////////////////////////////
+    preparedHeaders.push(["X-Content-Type-Options", "nosniff"]);
+    if (xFrameOptions != null) {
+        preparedHeaders.push(["X-Frame-Options", xFrameOptions]);
+    }
+    if (referrerPolicy != undefined) {
+        preparedHeaders.push(["Referrer-Policy", referrerPolicy]);
+    }
+    if (hsts != null) {
+        preparedHeaders.push(["Strict-Transport-Security", hsts]);
+    }
+    if (contentSecurityPolicy != null) {
+        preparedHeaders.push(["Content-Security-Policy", contentSecurityPolicy]);
+    }
+    if (crossOriginOpenerPolicy != null) {
+        preparedHeaders.push([
+            "Cross-Origin-Opener-Policy",
+            crossOriginOpenerPolicy,
+        ]);
+    }
+    if (crossOriginEmbedderPolicy != null) {
+        preparedHeaders.push([
+            "Cross-Origin-Embedder-Policy",
+            crossOriginEmbedderPolicy,
+        ]);
+    }
+    if (crossOriginResourcePolicy != null) {
+        preparedHeaders.push([
+            "Cross-Origin-Resource-Policy",
+            crossOriginResourcePolicy,
+        ]);
+    }
+    /////////////////////////////////////////////
+    return function ({ headers }) {
+        for (const [key, value] of preparedHeaders) {
+            headers.set(key, value);
+        }
+    };
+};
+exports.securityHeaders = securityHeaders;
 /**
  * Creates a rate limiting middleware using token bucket algorithm.
  * Supports both fixed interval refill and continuous rate-based refill.
  *
- * @template {Record<string, unknown>} ExtendContext - Extend Router Context
- * @param {Object} config - Rate limiting configuration
- * @param {Function} [config.key] - Function to generate cache key from request and context
- * @param {number} [config.maxTokens] - Maximum number of tokens in the bucket
- * @param {number} [config.refillInterval] - Fixed interval in seconds for token refill
- * @param {number} [config.refillRate] - Continuous refill rate in tokens per second
- * @param {number} [config.cleanUpInterval] - Interval in seconds for cleanup timer
- * @param {number} [config.cleanUpIdleDelay] - Time in seconds to delay cleanup of filled token buckets
- * @param {boolean} [config.setXRateLimitHeaders=false] - Whether to set X-RateLimit headers in response
- * @returns {Function} Middleware function that enforces rate limits
+ * @template {Record<string, unknown>} ExtendContext Extend Router Context
+ * @property {Object} config Rate limiting configuration
+ * @property {Function} [config.key] Function to generate cache key from request and context
+ * @property {number} [config.maxTokens] Maximum number of tokens in the bucket
+ * @property {number} [config.refillInterval] Fixed interval in seconds for token refill
+ * @property {number} [config.refillRate] Continuous refill rate in tokens per second
+ * @property {number} [config.cleanUpInterval] Interval in seconds for cleanup timer
+ * @property {number} [config.cleanUpIdleDelay] Time in seconds to delay cleanup of filled token buckets
+ * @property {boolean} [config.setXRateLimitHeaders=false] Whether to set X-RateLimit headers in response
+ * @property {boolean} [config.breakPipeline=false] If true, returns Break_Pipeline
+ * @property {"status"|"text"|"json"} [config.responseType="text"] Response type
+ * @returns {Handler<ExtendContext>} Middleware function that enforces rate limits
  *
  * @example
  * // Fixed interval rate limiting (10 requests per minute)
@@ -45,11 +146,16 @@ const types_ts_1 = require("./types.js");
  *   maxTokens: 100,
  * });
  *
- * @throws {RouterError} If neither refillInterval nor refillRate is provided
+ * @throws {Error} If neither refillInterval nor refillRate is provided
  */
 const limitRate = (config) => {
     var _a;
-    const { key, maxTokens, refillInterval, refillRate, cleanUpInterval, setXRateLimitHeaders = false, breakPipeline = false, } = config;
+    const { key, maxTokens, refillInterval, refillRate, cleanUpInterval, setXRateLimitHeaders = false, breakPipeline = false, responseType = "text", } = config;
+    const respond = responseType === "json"
+        ? (code, content, key, tag, init) => (0, helpers_ts_1.json)({ [key]: `${tag}: ${content}`, tag }, Object.assign(Object.assign({}, init), { status: code }))
+        : responseType === "text"
+            ? (code, content, key, tag, init) => (0, helpers_ts_1.text)(`[${key}] ${tag}: ${content}`, Object.assign(Object.assign({}, init), { status: code }))
+            : (code, _content, _key, _tag, init) => (0, helpers_ts_1.status)(code, null, init);
     const cleanUpIdleDelay = -((_a = config.cleanUpIdleDelay) !== null && _a !== void 0 ? _a : 0);
     const rateLimits = new Map();
     const now = () => performance.now() / 1000;
@@ -117,7 +223,7 @@ const limitRate = (config) => {
                 }
                 if (entry.tokens <= 0) {
                     ctx.headers.set("Retry-After", Math.ceil(refillInterval - timeElapsed).toFixed());
-                    return (0, helpers_ts_1.status)(429);
+                    return respond(status_ts_1.Status._429_TooManyRequests, "Rate Limited", "message", "rate-limit");
                 }
                 else {
                     entry.tokens--;
@@ -143,7 +249,7 @@ const limitRate = (config) => {
                 entry.lastRefill = now();
                 if (entry.tokens <= 0) {
                     ctx.headers.set("Retry-After", Math.ceil(1 / refillRate).toFixed());
-                    return (0, helpers_ts_1.status)(429);
+                    return respond(status_ts_1.Status._429_TooManyRequests, "Rate Limited", "message", "rate-limit");
                 }
                 else {
                     entry.tokens--;
@@ -158,24 +264,27 @@ const limitRate = (config) => {
             });
         };
     }
-    throw new types_ts_1.RouterError("LIMIT-RATE: `refillInterval` or `refillRate` or both should be set");
+    throw new Error("LIMIT-RATE: `refillInterval` or `refillRate` or both should be set");
 };
 exports.limitRate = limitRate;
 /**
  * Creates a CORS (Cross-Origin Resource Sharing) middleware.
  * Supports preflight requests and configurable CORS headers.
  *
- * @template {Record<string, unknown>} ExtendContext - Extend Router Context
- * @param {Object} [config] - CORS configuration
- * @param {string|string[]|"*"} [config.origins="*"] - Allowed origins (wildcard "*", single origin, or array)
- * @param {HttpMethod[]} [config.methods=["GET","HEAD","PUT","PATCH","POST","DELETE"]] - Allowed HTTP methods
- * @param {string[]} [config.allowedHeaders=["Content-Type","Authorization"]] - Allowed request headers
- * @param {string[]} [config.exposedHeaders] - Headers exposed to the browser
- * @param {boolean} [config.credentials=false] - Allow credentials (cookies, authorization headers)
- * @param {number} [config.maxAge=86400] - Maximum age for preflight cache in seconds
- * @param {boolean} [config.varyOrigin=false] - Add Vary: Origin header for caching
- * @param {boolean} [options.breakPipeline=false] - If true, stops only pipe flow per handler type after success.
- * @returns {Function} Middleware function that handles CORS headers
+ * @template {Record<string, unknown>} ExtendContext Extend Router Context
+ * @param {Object} [config] CORS configuration
+ * @param {string|string[]|"*"} [config.origins="*"] Allowed origins (wildcard "*", single origin, or array)
+ * @param {(HttpMethod|HttpMethodUpper|HttpMethodLower)[]} [config.methods=["Get","Head","Put","Patch","Post","Delete"]] Allowed HTTP methods
+ * @param {string[]} [config.allowedHeaders=["Content-Type","Authorization"]] Allowed request headers
+ * @param {string[]} [config.exposedHeaders] Headers exposed to the browser
+ * @param {boolean} [config.credentials=false] Allow credentials (cookies, authorization headers)
+ * @param {number} [config.maxAge=86400] Maximum age for preflight cache in seconds
+ * @param {boolean} [config.varyOrigin=true] Add Vary: Origin header for caching
+ * @param {boolean} [config.breakPipeline=false] If true, returns Break_Pipeline
+ * @param {"status"|"text"|"json"} [config.responseType="text"] Response type
+ * @returns {Handler<ExtendContext>} Middleware function that handles CORS headers
+ *
+ * @throws {HttpError} If credentials is enabled with wildcard origin ("*")
  *
  * @example
  * // Basic CORS with all defaults
@@ -186,21 +295,21 @@ exports.limitRate = limitRate;
  * const corsMiddleware = cors({
  *   origins: ["https://example.com", "https://api.example.com"],
  *   credentials: true,
- *   methods: ["GET", "POST", "PUT", "DELETE"],
+ *   methods: ["Get", "Post", "Put", "Delete"],
  *   allowedHeaders: ["Content-Type", "Authorization", "X-Custom-Header"]
  * });
  *
- * @throws {HttpError} If credentials is true with wildcard origin ("*")
  */
 const cors = (config) => {
-    const { origins = "*", methods = ["Get", "Head", "Put", "Patch", "Post", "Delete"], allowedHeaders = ["Content-Type", "Authorization"], exposedHeaders, credentials = false, maxAge = 86400, varyOrigin = false, breakPipeline = false, } = config !== null && config !== void 0 ? config : {};
+    const { origins = "*", methods: methods_ = ["Get", "Head", "Put", "Patch", "Post", "Delete"], allowedHeaders = ["Content-Type", "Authorization"], exposedHeaders, credentials = false, maxAge = 86400, varyOrigin = true, breakPipeline = false, responseType = "text", } = config !== null && config !== void 0 ? config : {};
+    const respond = responseType === "json"
+        ? (code, content, key, tag, init) => (0, helpers_ts_1.json)({ [key]: `${tag}: ${content}`, tag }, Object.assign(Object.assign({}, init), { status: code }))
+        : responseType === "text"
+            ? (code, content, key, tag, init) => (0, helpers_ts_1.text)(`[${key}] ${tag}: ${content}`, Object.assign(Object.assign({}, init), { status: code }))
+            : (code, _content, _key, _tag, init) => (0, helpers_ts_1.status)(code, null, init);
     const globOrigin = origins === "*" ? "*" : null;
-    const originsSet = new Set(typeof origins !== "string" ? origins : origins !== "*" ? [] : [origins]);
-    if (methods != null) {
-        for (let i = 0; i < methods.length; i++) {
-            methods[i] = methods[i].toUpperCase();
-        }
-    }
+    const originsSet = new Set(origins === "*" ? [] : typeof origins === "string" ? [origins] : origins);
+    const methods = methods_ === null || methods_ === void 0 ? void 0 : methods_.map((m) => m.toUpperCase());
     return function (ctx) {
         const { request, headers } = ctx;
         const origin = request.headers.get("origin");
@@ -218,8 +327,9 @@ const cors = (config) => {
             corsOrigin = originsSet.has(origin) ? origin : null;
         }
         if (!corsOrigin) {
-            if (varyOrigin)
-                ctx.headers.append("Vary", "Origin");
+            if (varyOrigin) {
+                headers.append("Vary", "Origin");
+            }
             if (breakPipeline) {
                 return types_ts_1.Break_Pipeline;
             }
@@ -228,30 +338,31 @@ const cors = (config) => {
         headers.set("Access-Control-Allow-Origin", corsOrigin);
         if (credentials) {
             if (corsOrigin === "*")
-                throw new types_ts_1.HttpError(403, "CORS: Cannot use credentials with wildcard origin");
+                throw new types_ts_1.HttpError(status_ts_1.Status._403_Forbidden, "CORS: Cannot use credentials with wildcard origin");
             headers.set("Access-Control-Allow-Credentials", "true");
         }
         if (exposedHeaders && exposedHeaders.length > 0) {
             headers.set("Access-Control-Expose-Headers", exposedHeaders.join(", "));
         }
-        if (varyOrigin) {
+        if (varyOrigin && origins !== "*") {
             headers.append("Vary", "Origin");
         }
         if (request.method === "OPTIONS") {
             if (methods && methods.length > 0) {
                 const requestMethod = request.headers.get("Access-Control-Request-Method");
-                if (requestMethod && !methods.includes(requestMethod)) {
-                    return (0, helpers_ts_1.status)(405, `Method ${requestMethod} not allowed`);
+                if (requestMethod &&
+                    !methods.includes(requestMethod)) {
+                    return respond(status_ts_1.Status._405_MethodNotAllowed, `Method ${requestMethod} not allowed`, "error", "CORS");
                 }
                 headers.set("Access-Control-Allow-Methods", methods.join(", "));
             }
             if (allowedHeaders && allowedHeaders.length > 0) {
                 headers.set("Access-Control-Allow-Headers", allowedHeaders.join(", "));
             }
-            if (maxAge) {
+            if (maxAge != null) {
                 headers.set("Access-Control-Max-Age", maxAge.toString());
             }
-            return (0, helpers_ts_1.status)(204, null);
+            return (0, helpers_ts_1.status)(status_ts_1.Status._204_NoContent, null);
         }
         if (breakPipeline) {
             return types_ts_1.Break_Pipeline;
@@ -259,4 +370,540 @@ const cors = (config) => {
     };
 };
 exports.cors = cors;
+/**
+ * Creates a request params, query and body validator middleware function
+ *
+ * @param {Validator<Record<string, string>,ExtendContext>} [config.params] Parameters validator
+ * @param {CustomErrorType} [config.paramsErrors] Parameters validator's expected error instance types other than Error derivatives
+ * @param {boolean|ValidateQueryParser<ExtendContext>} [config.queryParse] Parse query before validation. 'true' for default parser or provide a custom parser
+ * @param {Validator<Record<string, string>,ExtendContext>} [config.query] Query validator
+ * @param {CustomErrorType} [config.queryErrors] Query validator's expected error instance types other than Error derivatives
+ * @param {boolean|ValidateCookieParser<ExtendContext>} [config.cookieParse] Parse cookie before validation. 'true' for default parser or provide a custom parser
+ * @param {Validator<Record<string, string>,ExtendContext>} [config.cookie] Cookie validator
+ * @param {CustomErrorType} [config.cookieErrors] Cookie validator's expected error instance types other than Error derivatives
+ * @param {ParseBodyOptions} [config.bodyParseOptions] Body parser options
+ * @param {boolean|ValidateBodyParser<ExtendContext>} [config.bodyParse] Parse body before validation. 'true' for default parser or provide a custom parser
+ * @param {ValidatorFnIt<ParsedBody,ExtendContext>|Array<ValidatorIt<ParsedBody,ExtendContext>>} [config.body] Body validator
+ * @param {CustomErrorType} [config.bodyErrors] Body validator's expected error instance types other than Error derivatives
+ * @param {Array<CustomErrorType>} [config.errors] All validator's expected error instance types other than Error derivatives. Can be overridden.
+ * @param {boolean} [config.paramsReassign] Reassign validated return value of the params validator function
+ * @param {boolean} [config.queryReassign] Reassign validated return value of the query validator function
+ * @param {boolean} [config.cookieReassign] Reassign validated return value of the cookie validator function
+ * @param {boolean} [config.bodyReassign] Reassign validated return value of the body validator function
+ * @param {boolean|{<Target extends Record<string, unknown>>(target: Target,key: string,):void|any;}} [config.strangeParams] Handle strange or unexpected properties
+ * @param {boolean|{<Target extends Record<string, unknown>>(target: Target,key: string,):void|any;}} [config.strangeQuery] Handle strange or unexpected properties
+ * @param {boolean|{<Target extends Record<string, unknown>>(target: Target,key: string,):void|any;}} [config.strangeCookie] Handle strange or unexpected properties
+ * @param {boolean|{<Target extends Record<string, unknown>>(target: Target,key: string,):void|any;}} [config.strangeBody] Handle strange or unexpected properties
+ * @param {boolean|{<Target extends Record<string, unknown>>(target: Target,key: string,):void|any;}} [config.strange] A default common option to handle strange or unexpected properties
+ * @param {"status"|"text"|"json"} [config.responseType="text"] Response type.
+ *     - Note: 'status' type will omit content
+ * @param {boolean} [config.breakPipeline=false] If true, returns Break_Pipeline
+ * @returns {HandlerReturn}
+ */
+const validate = ({ responseType = "text", errors, paramsReassign = false, params: paramsValidator, paramsErrors, strangeParams, queryParse, queryReassign = false, query: queryValidator, queryErrors, strangeQuery, cookieParse, cookieReassign = false, cookie: cookieValidator, cookieErrors, strangeCookie, bodyParse, bodyParseOptions, bodyReassign = false, body: bodyValidator, bodyErrors, strangeBody, strange, breakPipeline = false, }) => {
+    paramsErrors = paramsErrors !== null && paramsErrors !== void 0 ? paramsErrors : errors;
+    queryErrors = queryErrors !== null && queryErrors !== void 0 ? queryErrors : errors;
+    cookieErrors = cookieErrors !== null && cookieErrors !== void 0 ? cookieErrors : errors;
+    bodyErrors = bodyErrors !== null && bodyErrors !== void 0 ? bodyErrors : errors;
+    const errorMatches = (target, errors) => {
+        for (const error of errors) {
+            if (target instanceof error) {
+                return true;
+            }
+        }
+        return false;
+    };
+    // Validate error instance types
+    if (errors) {
+        for (let i = 0; i < errors.length; i++) {
+            const error = errors[i];
+            if (!(typeof error === "function")) {
+                throw new TypeError(`Validator errors type at index ${i} is invalid`);
+            }
+        }
+    }
+    if (paramsErrors) {
+        for (let i = 0; i < paramsErrors.length; i++) {
+            const error = paramsErrors[i];
+            if (!(typeof error === "function")) {
+                throw new TypeError(`Validator paramsErrors type at index ${i} is invalid`);
+            }
+        }
+    }
+    if (queryErrors) {
+        for (let i = 0; i < queryErrors.length; i++) {
+            const error = queryErrors[i];
+            if (!(typeof error === "function")) {
+                throw new TypeError(`Validator queryErrors type at index ${i} is invalid`);
+            }
+        }
+    }
+    if (cookieErrors) {
+        for (let i = 0; i < cookieErrors.length; i++) {
+            const error = cookieErrors[i];
+            if (!(typeof error === "function")) {
+                throw new TypeError(`Validator cookieErrors type at index ${i} is invalid`);
+            }
+        }
+    }
+    if (bodyErrors) {
+        for (let i = 0; i < bodyErrors.length; i++) {
+            const error = bodyErrors[i];
+            if (!(typeof error === "function")) {
+                throw new TypeError(`Validator bodyErrors type at index ${i} is invalid`);
+            }
+        }
+    }
+    //
+    strangeParams = strangeParams !== null && strangeParams !== void 0 ? strangeParams : strange;
+    strangeQuery = strangeQuery !== null && strangeQuery !== void 0 ? strangeQuery : strange;
+    strangeCookie = strangeCookie !== null && strangeCookie !== void 0 ? strangeCookie : strange;
+    strangeBody = strangeBody !== null && strangeBody !== void 0 ? strangeBody : strange;
+    // Validate strangeParams
+    if (strangeParams != undefined &&
+        typeof strangeParams !== "boolean" &&
+        typeof strangeParams !== "function") {
+        throw new TypeError("Validator strangeParams type must be either boolean, undefined or a function");
+    }
+    // Validate strangeQuery
+    if (strangeQuery != undefined &&
+        typeof strangeQuery !== "boolean" &&
+        typeof strangeQuery !== "function") {
+        throw new TypeError("Validator strangeQuery type must be either boolean, undefined or a function");
+    }
+    // Validate strangeCookie
+    if (strangeCookie != undefined &&
+        typeof strangeCookie !== "boolean" &&
+        typeof strangeCookie !== "function") {
+        throw new TypeError("Validator strangeCookie type must be either boolean, undefined or a function");
+    }
+    // Validate strangeBody
+    if (strangeBody != undefined &&
+        typeof strangeBody !== "boolean" &&
+        typeof strangeBody !== "function") {
+        throw new TypeError("Validator strangeBody type must be either boolean, undefined or a function");
+    }
+    // Validate query parser
+    if (queryParse != undefined &&
+        typeof queryParse !== "boolean" &&
+        typeof queryParse !== "function") {
+        throw new TypeError("Validator queryParse type must be either boolean, undefined or a function");
+    }
+    // Validate cookie parser
+    if (cookieParse != undefined &&
+        typeof cookieParse !== "boolean" &&
+        typeof cookieParse !== "function") {
+        throw new TypeError("Validator cookieParse type must be either boolean, undefined or a function");
+    }
+    // Validate body parser
+    if (parsers_ts_1.parseBody != undefined &&
+        typeof parsers_ts_1.parseBody !== "boolean" &&
+        typeof parsers_ts_1.parseBody !== "function") {
+        throw new TypeError("Validator parseBody type must be either boolean, undefined or a function");
+    }
+    const respond = responseType === "json"
+        ? (code, content, key, tag, init) => (0, helpers_ts_1.json)({ [key]: `${tag}: ${content}`, tag }, Object.assign(Object.assign({}, init), { status: code }))
+        : responseType === "text"
+            ? (code, content, key, tag, init) => (0, helpers_ts_1.text)(`[${key}] ${tag}: ${content}`, Object.assign(Object.assign({}, init), { status: code }))
+            : (code, _content, _key, _tag, init) => (0, helpers_ts_1.status)(code, null, init);
+    //
+    // Prepare parsers
+    //
+    const queryParser = queryParse === true
+        ? ((ctx) => {
+            if (ctx.query == null) {
+                ctx.query = {};
+            }
+            const searchParams = ctx.url.searchParams;
+            for (const key of searchParams.keys()) {
+                const values = searchParams.getAll(key);
+                ctx.query[key] =
+                    values.length > 1 ? values[values.length - 1] : values[0];
+            }
+        })
+        : queryParse || undefined;
+    const cookieParser = cookieParse === true
+        ? ((ctx) => {
+            if (ctx.cookie == null) {
+                ctx.cookie = {};
+            }
+            (0, parsers_ts_1.parseCookieFromRequest)(ctx.request, ctx.cookie);
+        })
+        : cookieParse || undefined;
+    const bodyParser = bodyParse === true
+        ? (0, parsers_ts_1.parseBody)(bodyParseOptions)
+        : bodyParse || undefined;
+    ///////////////////////////////////////////////////////////////////////////
+    // Validate params validators
+    const paramsValidatorIsFunction = typeof paramsValidator === "function";
+    const paramsValidatorIsObject = typeof paramsValidator === "object" && !Array.isArray(paramsValidator);
+    if (paramsValidator) {
+        if (!paramsValidatorIsFunction && !paramsValidatorIsObject) {
+            throw new TypeError("Params validator type must be function or object");
+        }
+        else if (paramsValidatorIsObject) {
+            for (const key of Object.keys(paramsValidator)) {
+                if (typeof paramsValidator[key] !== "function") {
+                    throw new TypeError(`Params validator property type must be function at '${key}'`);
+                }
+            }
+        }
+    }
+    // Validate query validators
+    const queryValidatorIsFunction = typeof queryValidator === "function";
+    const queryValidatorIsObject = typeof queryValidator === "object" && !Array.isArray(queryValidator);
+    if (queryValidator) {
+        if (!queryValidatorIsFunction && !queryValidatorIsObject) {
+            throw new TypeError("Query validator type must be function or object");
+        }
+        else if (queryValidatorIsObject) {
+            for (const key of Object.keys(queryValidator)) {
+                if (typeof queryValidator[key] !== "function") {
+                    throw new TypeError(`Query validator property type must be function at '${key}'`);
+                }
+            }
+        }
+    }
+    // Validate cookie validators
+    const cookieValidatorIsFunction = typeof cookieValidator === "function";
+    const cookieValidatorIsObject = typeof cookieValidator === "object" && !Array.isArray(cookieValidator);
+    if (cookieValidator) {
+        if (!cookieValidatorIsFunction && !cookieValidatorIsObject) {
+            throw new TypeError("Cookie validator type must be function or object");
+        }
+        else if (cookieValidatorIsObject) {
+            for (const key of Object.keys(cookieValidator)) {
+                if (typeof cookieValidator[key] !== "function") {
+                    throw new TypeError(`Cookie validator property type must be function at '${key}'`);
+                }
+            }
+        }
+    }
+    // Validate body validators
+    const bodyValidatorIsFunction = typeof bodyValidator === "function";
+    const bodyValidatorIsArray = Array.isArray(bodyValidator);
+    const bodyValidatorIsObject = typeof bodyValidator === "object" && !bodyValidatorIsArray;
+    const bodyValidators = bodyValidator
+        ? Array.isArray(bodyValidator)
+            ? bodyValidator
+            : [bodyValidator]
+        : undefined;
+    if (bodyValidators) {
+        if (!bodyValidatorIsFunction &&
+            !bodyValidatorIsObject &&
+            !bodyValidatorIsArray) {
+            throw new TypeError("Body validator type must be function or object or array of objects");
+        }
+        else if (bodyValidatorIsArray && bodyValidators.length === 0) {
+            throw new TypeError("Body validator must not be an empty array");
+        }
+        for (let i = 0; i < bodyValidators.length; i++) {
+            const validator = bodyValidators[i];
+            const bodyValidatorIsFunction = typeof validator === "function";
+            const validatorIsObject = typeof validator === "object" && !Array.isArray(validator);
+            if (!bodyValidatorIsFunction && !validatorIsObject) {
+                throw new TypeError(bodyValidators.length > 0
+                    ? `Body validator must be a valid function or object at ${i}`
+                    : "Body validator must be a valid function or object");
+            }
+            else if (validatorIsObject) {
+                for (const key of Object.keys(validator)) {
+                    if (typeof validator[key] !== "function") {
+                        throw new TypeError(bodyValidatorIsArray
+                            ? `Body validator property type must be function at index ${i} '${key}'`
+                            : `Body validator property type must be function at '${key}'`);
+                    }
+                }
+            }
+        }
+    }
+    ////////////////////////////////////////////////////////////////////////
+    return (ctx) => __awaiter(void 0, void 0, void 0, function* () {
+        const params = ctx.params;
+        // Validate Params
+        if (paramsValidatorIsFunction) {
+            const result = paramsValidator.apply
+                ? paramsValidator.apply(ctx, params)
+                : paramsValidator(params);
+            if (result instanceof Error) {
+                return respond(result.status || status_ts_1.Status._400_BadRequest, result.message, "params", "error");
+            }
+            else if (paramsErrors && errorMatches(result, paramsErrors)) {
+                return respond(result.status || status_ts_1.Status._400_BadRequest, String(result), "error", "params");
+            }
+            else if (result instanceof Response ||
+                result === types_ts_1.Break_Pipe ||
+                result === types_ts_1.Break_Pipeline) {
+                return result;
+            }
+            else if (paramsReassign) {
+                ctx.params = result;
+            }
+        }
+        else if (paramsValidatorIsObject) {
+            for (const key of Object.keys(params)) {
+                const validator = paramsValidator[key];
+                if (validator == null && !strangeParams) {
+                    continue;
+                }
+                const result = validator == null
+                    ? typeof strangeParams === "function"
+                        ? strangeParams(params, key)
+                        : params[key]
+                    : validator.apply
+                        ? validator.apply(ctx, params[key])
+                        : validator(params[key]);
+                if (result instanceof Error) {
+                    return respond(result.status || status_ts_1.Status._400_BadRequest, result.message, "error", "params");
+                }
+                else if (paramsErrors && errorMatches(result, paramsErrors)) {
+                    return respond(result.status || status_ts_1.Status._400_BadRequest, String(result), "error", "params");
+                }
+                else if (result instanceof Response ||
+                    result === types_ts_1.Break_Pipe ||
+                    result === types_ts_1.Break_Pipeline) {
+                    return result;
+                }
+                else if (paramsReassign) {
+                    params[key] = result;
+                }
+            }
+        }
+        // Parse query
+        if (queryParser) {
+            yield queryParser(ctx);
+        }
+        const query = ctx.query;
+        // Validate Query
+        if (queryValidatorIsFunction) {
+            const result = queryValidator.apply
+                ? queryValidator.apply(ctx, query)
+                : queryValidator(query);
+            if (result instanceof Error) {
+                return respond(result.status || status_ts_1.Status._400_BadRequest, result.message, "error", "query");
+            }
+            else if (queryErrors && errorMatches(result, queryErrors)) {
+                return respond(result.status || status_ts_1.Status._400_BadRequest, String(result), "error", "query");
+            }
+            else if (result instanceof Response ||
+                result === types_ts_1.Break_Pipe ||
+                result === types_ts_1.Break_Pipeline) {
+                return result;
+            }
+            else if (queryReassign) {
+                ctx.query = result;
+            }
+        }
+        else if (queryValidatorIsObject) {
+            for (const key of Object.keys(query)) {
+                const validator = queryValidator[key];
+                if (validator == null && !strangeQuery) {
+                    continue;
+                }
+                const result = validator == null
+                    ? typeof strangeQuery === "function"
+                        ? strangeQuery(query, key)
+                        : query[key]
+                    : validator.apply
+                        ? validator.apply(ctx, query[key])
+                        : validator(query[key]);
+                if (result instanceof Error) {
+                    return respond(result.status || status_ts_1.Status._400_BadRequest, result.message, "error", "query");
+                }
+                else if (queryErrors && errorMatches(result, queryErrors)) {
+                    return respond(result.status || status_ts_1.Status._400_BadRequest, String(result), "error", "query");
+                }
+                else if (result instanceof Response ||
+                    result === types_ts_1.Break_Pipe ||
+                    result === types_ts_1.Break_Pipeline) {
+                    return result;
+                }
+                else if (queryReassign) {
+                    query[key] = result;
+                }
+            }
+        }
+        // Parse cookie
+        if (cookieParser) {
+            yield cookieParser(ctx);
+        }
+        const cookie = ctx.cookie;
+        // Validate Cookie
+        if (cookieValidatorIsFunction) {
+            const result = cookieValidator.apply
+                ? cookieValidator.apply(ctx, cookie)
+                : cookieValidator(cookie);
+            if (result instanceof Error) {
+                return respond(result.status || status_ts_1.Status._400_BadRequest, result.message, "error", "cookie");
+            }
+            else if (cookieErrors && errorMatches(result, cookieErrors)) {
+                return respond(result.status || status_ts_1.Status._400_BadRequest, String(result), "error", "cookie");
+            }
+            else if (result instanceof Response ||
+                result === types_ts_1.Break_Pipe ||
+                result === types_ts_1.Break_Pipeline) {
+                return result;
+            }
+            else if (cookieReassign) {
+                ctx.cookie = result;
+            }
+        }
+        else if (cookieValidatorIsObject) {
+            for (const key of Object.keys(cookie)) {
+                const validator = cookieValidator[key];
+                if (validator == null && !strangeCookie) {
+                    continue;
+                }
+                const result = validator == null
+                    ? typeof strangeCookie === "function"
+                        ? strangeCookie(cookie, key)
+                        : cookie[key]
+                    : validator.apply
+                        ? validator.apply(ctx, cookie[key])
+                        : validator(cookie[key]);
+                if (result instanceof Error) {
+                    return respond(result.status || status_ts_1.Status._400_BadRequest, result.message, "error", "cookie");
+                }
+                else if (cookieErrors && errorMatches(result, cookieErrors)) {
+                    return respond(result.status || status_ts_1.Status._400_BadRequest, String(result), "error", "cookie");
+                }
+                else if (result instanceof Response ||
+                    result === types_ts_1.Break_Pipe ||
+                    result === types_ts_1.Break_Pipeline) {
+                    return result;
+                }
+                else if (cookieReassign) {
+                    cookie[key] = result;
+                }
+            }
+        }
+        // Parse body
+        if (bodyParser) {
+            yield bodyParser(ctx);
+        }
+        const body = ctx.body;
+        // Validate Body
+        if (bodyValidators) {
+            if (Array.isArray(body)) {
+                for (let i = 0; i < body.length; i++) {
+                    const validator = bodyValidators[i % bodyValidators.length];
+                    const activeBody = body[i];
+                    if (typeof validator === "function") {
+                        const result = validator.apply(ctx, activeBody);
+                        if (result instanceof Error) {
+                            return respond(result.status || status_ts_1.Status._400_BadRequest, result.message, "error", "body");
+                        }
+                        else if (bodyErrors && errorMatches(result, bodyErrors)) {
+                            return respond(result.status || status_ts_1.Status._400_BadRequest, String(result), "error", "body");
+                        }
+                        else if (result instanceof Response ||
+                            result === types_ts_1.Break_Pipe ||
+                            result === types_ts_1.Break_Pipeline) {
+                            return result;
+                        }
+                        else if (bodyReassign) {
+                            body[i] = result;
+                        }
+                    }
+                    else if (validator) {
+                        if (activeBody &&
+                            typeof activeBody === "object" &&
+                            !Array.isArray(activeBody)) {
+                            for (const key of Object.keys(activeBody)) {
+                                const propValidator = validator[key];
+                                if (propValidator == null && !strangeBody) {
+                                    continue;
+                                }
+                                const result = propValidator == null
+                                    ? typeof strangeBody === "function"
+                                        ? strangeBody(activeBody, key)
+                                        : activeBody[key]
+                                    : propValidator.apply
+                                        ? propValidator.apply(ctx, activeBody[key])
+                                        : propValidator(activeBody[key]);
+                                if (result instanceof Error) {
+                                    return respond(result.status || status_ts_1.Status._400_BadRequest, result.message, "error", "body");
+                                }
+                                else if (bodyErrors && errorMatches(result, bodyErrors)) {
+                                    return respond(result.status || status_ts_1.Status._400_BadRequest, String(result), "error", "body");
+                                }
+                                else if (result instanceof Response ||
+                                    result === types_ts_1.Break_Pipe ||
+                                    result === types_ts_1.Break_Pipeline) {
+                                    return result;
+                                }
+                                else if (bodyReassign) {
+                                    activeBody[key] = result;
+                                }
+                            }
+                        }
+                        else {
+                            return respond(status_ts_1.Status._400_BadRequest, `Invalid body type at index ${i}`, "error", "body");
+                        }
+                    }
+                }
+            }
+            else {
+                const validator = bodyValidators[0];
+                if (typeof validator === "function") {
+                    const result = validator.apply
+                        ? validator.apply(ctx, body)
+                        : validator(body);
+                    if (result instanceof Error) {
+                        return respond(result.status || status_ts_1.Status._400_BadRequest, result.message, "error", "body");
+                    }
+                    else if (bodyErrors && errorMatches(result, bodyErrors)) {
+                        return respond(result.status || status_ts_1.Status._400_BadRequest, String(result), "error", "body");
+                    }
+                    else if (result instanceof Response ||
+                        result === types_ts_1.Break_Pipe ||
+                        result === types_ts_1.Break_Pipeline) {
+                        return result;
+                    }
+                    else if (bodyReassign) {
+                        ctx.body = result;
+                    }
+                }
+                else if (validator) {
+                    if (body && typeof body === "object" && !Array.isArray(body)) {
+                        for (const key of Object.keys(body)) {
+                            const propValidator = validator[key];
+                            if (propValidator == null && !strangeBody) {
+                                continue;
+                            }
+                            const result = propValidator == null
+                                ? typeof strangeBody === "function"
+                                    ? strangeBody(body, key)
+                                    : body
+                                : propValidator.apply
+                                    ? propValidator.apply(ctx, body[key])
+                                    : propValidator(body[key]);
+                            if (result instanceof Error) {
+                                return respond(result.status || status_ts_1.Status._400_BadRequest, result.message, "error", "body");
+                            }
+                            else if (bodyErrors && errorMatches(result, bodyErrors)) {
+                                return respond(result.status || status_ts_1.Status._400_BadRequest, String(result), "error", "body");
+                            }
+                            else if (result instanceof Response ||
+                                result === types_ts_1.Break_Pipe ||
+                                result === types_ts_1.Break_Pipeline) {
+                                return result;
+                            }
+                            else if (bodyReassign) {
+                                body[key] = result;
+                            }
+                        }
+                    }
+                    else {
+                        return respond(status_ts_1.Status._400_BadRequest, "Invalid body type", "error", "body");
+                    }
+                }
+            }
+        }
+        if (breakPipeline) {
+            return types_ts_1.Break_Pipeline;
+        }
+    });
+};
+exports.validate = validate;
 //# sourceMappingURL=middlewares.js.map