@depup/hapi 18.1.0-depup.0

package/lib/validation.js

@@ -0,0 +1,198 @@
+'use strict';
+
+const Boom = require('boom');
+const Hoek = require('hoek');
+const Joi = require('joi');
+
+
+const internals = {};
+
+
+exports.compile = function (rule) {
+
+    // null, undefined, true - anything allowed
+    // false - nothing allowed
+    // {...} - ... allowed
+
+    return (rule === false) ?
+        Joi.object({}).allow(null) :
+        (typeof rule === 'function' ?
+            rule :
+            !rule || rule === true ? null : Joi.compile(rule));     // false tested earlier
+
+};
+
+
+exports.headers = function (request) {
+
+    return internals.input('headers', request);
+};
+
+
+exports.params = function (request) {
+
+    return internals.input('params', request);
+};
+
+
+exports.payload = function (request) {
+
+    if (request.method === 'get' ||
+        request.method === 'head') {                // When route.method is '*'
+
+        return;
+    }
+
+    return internals.input('payload', request);
+};
+
+
+exports.query = function (request) {
+
+    return internals.input('query', request);
+};
+
+
+exports.state = function (request) {
+
+    return internals.input('state', request);
+};
+
+
+internals.input = async function (source, request) {
+
+    const localOptions = {
+        context: {
+            headers: request.headers,
+            params: request.params,
+            query: request.query,
+            payload: request.payload,
+            state: request.state,
+            auth: request.auth,
+            app: {
+                route: request.route.settings.app,
+                request: request.app
+            }
+        }
+    };
+
+    delete localOptions.context[source];
+    Hoek.merge(localOptions, request.route.settings.validate.options);
+
+    try {
+        const schema = request.route.settings.validate[source];
+        const bind = request.route.settings.bind;
+
+        var value = await (typeof schema !== 'function' ? Joi.validate(request[source], schema, localOptions) : schema.call(bind, request[source], localOptions));
+        return;
+    }
+    catch (err) {
+        var validationError = err;
+    }
+    finally {
+        request.orig[source] = request[source];
+        if (value !== undefined) {
+            request[source] = value;
+        }
+    }
+
+    if (request.route.settings.validate.failAction === 'ignore') {
+        return;
+    }
+
+    // Prepare error
+
+    const defaultError = validationError.isBoom ? validationError : Boom.badRequest(`Invalid request ${source} input`);
+    const detailedError = Boom.boomify(validationError, { statusCode: 400, override: false });
+    detailedError.output.payload.validation = { source, keys: [] };
+    if (validationError.details) {
+        for (const details of validationError.details) {
+            const path = details.path;
+            detailedError.output.payload.validation.keys.push(Hoek.escapeHtml(path.join('.')));
+        }
+    }
+
+    if (request.route.settings.validate.errorFields) {
+        for (const field in request.route.settings.validate.errorFields) {
+            detailedError.output.payload[field] = request.route.settings.validate.errorFields[field];
+        }
+    }
+
+    return request._core.toolkit.failAction(request, request.route.settings.validate.failAction, defaultError, { details: detailedError, tags: ['validation', 'error', source] });
+};
+
+
+exports.response = async function (request) {
+
+    if (request.route.settings.response.sample) {
+        const currentSample = Math.ceil((Math.random() * 100));
+        if (currentSample > request.route.settings.response.sample) {
+            return;
+        }
+    }
+
+    const response = request.response;
+    const statusCode = response.isBoom ? response.output.statusCode : response.statusCode;
+
+    const statusSchema = request.route.settings.response.status[statusCode];
+    if (statusCode >= 400 &&
+        !statusSchema) {
+
+        return;                 // Do not validate errors by default
+    }
+
+    const schema = statusSchema !== undefined ? statusSchema : request.route.settings.response.schema;
+    if (schema === null) {
+        return;                 // No rules
+    }
+
+    if (!response.isBoom &&
+        request.response.variety !== 'plain') {
+
+        throw Boom.badImplementation('Cannot validate non-object response');
+    }
+
+    const localOptions = {
+        context: {
+            headers: request.headers,
+            params: request.params,
+            query: request.query,
+            payload: request.payload,
+            state: request.state,
+            auth: request.auth,
+            app: {
+                route: request.route.settings.app,
+                request: request.app
+            }
+        }
+    };
+
+    const source = response.isBoom ? response.output.payload : response.source;
+    Hoek.merge(localOptions, request.route.settings.response.options);
+
+    try {
+        let value;
+
+        if (typeof schema !== 'function') {
+            value = await Joi.validate(source, schema, localOptions);
+        }
+        else {
+            value = await schema(source, localOptions);
+        }
+
+        if (value !== undefined &&
+            request.route.settings.response.modify) {
+
+            if (response.isBoom) {
+                response.output.payload = value;
+            }
+            else {
+                response.source = value;
+            }
+        }
+    }
+    catch (err) {
+
+        return request._core.toolkit.failAction(request, request.route.settings.response.failAction, err, { tags: ['validation', 'response', 'error'] });
+    }
+};