@dwp/govuk-casa 8.0.0-alpha1 → 8.0.0

package/dist/lib/utils.js

@@ -1,6 +1,15 @@
 "use strict";
+/**
+ * @typedef {import('./configuration-ingestor').GlobalHook} GlobalHook
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isEmpty = exports.stringifyInput = exports.isStringable = void 0;
+exports.validateHookPath = exports.validateHookName = exports.validateView = exports.validateWaypoint = exports.resolveMiddlewareHooks = exports.isEmpty = exports.stringifyInput = exports.isStringable = void 0;
+/**
+ * @typedef {import('./configuration-ingestor').PageHook} PageHook
+ */
+/**
+ * @typedef {GlobalHook | PageHook} Hook
+ */
 /**
  * Test is a value can be stringifed (numbers or strings)
  *
@@ -37,8 +46,68 @@ function isEmpty(val) {
         return true;
     }
     if (Array.isArray(val) || typeof val === 'object') {
+        // ESLint disabled as `k` is an "own property" (thanks to `Object.keys()`)
+        /* eslint-disable-next-line security/detect-object-injection */
         return Object.keys(val).filter((k) => !isEmpty(val[k])).length === 0;
     }
     return false;
 }
 exports.isEmpty = isEmpty;
+/**
+ * Extract the middleware functions that are relevant for the given hook and
+ * path.
+ *
+ * @param {string} hookName Hook name (including scope prefix)
+ * @param {string} path URL path to match (relative to mountUrl)
+ * @param {Hook[]} hooks Hooks to be applied at the page level
+ * @returns {Function[]} An array of middleware that should be applied
+ */
+function resolveMiddlewareHooks(hookName, path, hooks = []) {
+    /* eslint-disable-next-line max-len */
+    const pathMatch = (h) => h.path === undefined || (h.path instanceof RegExp && h.path.test(path)) || h.path === path;
+    return hooks.filter((h) => h.hook === hookName).filter(pathMatch).map((h) => h.middleware);
+}
+exports.resolveMiddlewareHooks = resolveMiddlewareHooks;
+/* ------------------------------------------------ validation / sanitisation */
+function validateWaypoint(waypoint) {
+    if (typeof waypoint !== 'string') {
+        throw new TypeError('Waypoint must be a string');
+    }
+    if (!waypoint.length) {
+        throw new SyntaxError('Waypoint must not be empty');
+    }
+    if (waypoint.match(/[^/a-z0-9_-]/)) {
+        throw new SyntaxError('Waypoint must contain only a-z, 0-9, -, _ and / characters');
+    }
+}
+exports.validateWaypoint = validateWaypoint;
+function validateView(view) {
+    if (typeof view !== 'string') {
+        throw new TypeError('View must be a string');
+    }
+    if (!view.length) {
+        throw new SyntaxError('View must not be empty');
+    }
+    if (!view.match(/^[a-z0-9/_-]+\.njk$/i)) {
+        throw new SyntaxError('View must contain only a-z, 0-9, -, _ and / characters, and end in .njk');
+    }
+}
+exports.validateView = validateView;
+function validateHookName(hookName) {
+    if (typeof hookName !== 'string') {
+        throw new TypeError('Hook name must be a string');
+    }
+    if (!hookName.length) {
+        throw new SyntaxError('Hook name must not be empty');
+    }
+    if (!hookName.match(/^([a-z]+\.|)[a-z]+$/i)) {
+        throw new SyntaxError('Hook name must match either <scope>.<hookname> or <hookname> formats');
+    }
+}
+exports.validateHookName = validateHookName;
+function validateHookPath(path) {
+    if (typeof path !== 'string' && !(path instanceof RegExp)) {
+        throw new TypeError('Hook path must be a string or RegExp');
+    }
+}
+exports.validateHookPath = validateHookPath;

package/dist/lib/validators/dateObject.js

@@ -27,10 +27,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
  *   luxon.DateTime now = Override the notion of "now" (useful for testing)
  */
 const luxon_1 = require("luxon");
+const lodash_1 = __importDefault(require("lodash"));
 const ValidationError_js_1 = __importDefault(require("../ValidationError.js"));
 const ValidatorFactory_js_1 = __importDefault(require("../ValidatorFactory.js"));
 const utils_js_1 = require("../utils.js");
-const lodash_1 = __importDefault(require("lodash"));
 const { isPlainObject } = lodash_1.default;
 class DateObject extends ValidatorFactory_js_1.default {
     constructor() {

package/dist/lib/validators/email.js

@@ -12,10 +12,10 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+const validator_1 = __importDefault(require("validator"));
 const ValidationError_js_1 = __importDefault(require("../ValidationError.js"));
 const ValidatorFactory_js_1 = __importDefault(require("../ValidatorFactory.js"));
 const utils_js_1 = require("../utils.js");
-const validator_1 = __importDefault(require("validator"));
 const { isEmail } = validator_1.default; // CommonJS
 class Email extends ValidatorFactory_js_1.default {
     constructor() {

package/dist/lib/validators/inArray.js

@@ -31,7 +31,7 @@ class InArray extends ValidatorFactory_js_1.default {
         if (value !== null && typeof value !== 'undefined') {
             const search = Array.isArray(value) ? value : [value];
             for (let i = 0, l = search.length; i < l; i += 1) {
-                if (source.indexOf(search[i]) > -1) {
+                if (source.indexOf(search[parseInt(i, 10)]) > -1) {
                     valid = true;
                 }
                 else {

package/dist/lib/validators/index.js

@@ -23,25 +23,3 @@ exports.default = {
     strlen: strlen_js_1.default,
     wordCount: wordCount_js_1.default,
 };
-// const dateObject = require('./dateObject.js');
-// const email = require('./email.js');
-// const inArray = require('./inArray.js');
-// const nino = require('./nino.js');
-// const optional = require('./optional.js');
-// const postalAddressObject = require('./postalAddressObject.js');
-// const regex = require('./regex.js');
-// const required = require('./required.js');
-// const strlen = require('./strlen.js');
-// const wordCount = require('./wordCount.js');
-// module.exports = {
-//   dateObject,
-//   email,
-//   inArray,
-//   nino,
-//   optional,
-//   postalAddressObject,
-//   regex,
-//   required,
-//   strlen,
-//   wordCount,
-// };

package/dist/lib/validators/postalAddressObject.js

@@ -21,10 +21,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
  *   int strlenmax = Max. String length for each of the inputs appress[1-4]
  *   array requiredFields = Field parts required (others become optional)
  */
+const lodash_1 = __importDefault(require("lodash"));
 const ValidationError_js_1 = __importDefault(require("../ValidationError.js"));
 const ValidatorFactory_js_1 = __importDefault(require("../ValidatorFactory.js"));
 const utils_js_1 = require("../utils.js");
-const lodash_1 = __importDefault(require("lodash"));
 const { isPlainObject } = lodash_1.default; // CommonjS
 class PostalAddressObject extends ValidatorFactory_js_1.default {
     constructor() {
@@ -66,6 +66,8 @@ class PostalAddressObject extends ValidatorFactory_js_1.default {
         const reqF = Object.create(null);
         const reqC = cfg.requiredFields;
         ['address1', 'address2', 'address3', 'address4', 'postcode'].forEach((k) => {
+            // ESLint disabled as `k` is a known value from a constant list
+            /* eslint-disable-next-line security/detect-object-injection */
             reqF[k] = reqC.indexOf(k) > -1;
         });
         let valid = true;
@@ -75,8 +77,7 @@ class PostalAddressObject extends ValidatorFactory_js_1.default {
             const reAddrLine1 = /^\d+|[^\s]+[a-z0-9\-,.&#()/\\:;'" ]+$/i;
             // UK Postcode regex taken from the dwp java pc checker
             // https://github.com/dwp/postcode-format-validation
-            const pc = /^(?![QVX])[A-Z]((?![IJZ])[A-Z][0-9](([0-9]?)|([ABEHMNPRVWXY]?))|([0-9]([0-9]?|[ABCDEFGHJKPSTUW]?))) ?[0-9]((?![CIKMOV])[A-Z]){2}$|^(BFPO)[ ]?[0-9]{1,4}$/i;
-            const rePostcode = new RegExp(pc, 'i');
+            const rePostcode = new RegExp(/^(?![QVX])[A-Z]((?![IJZ])[A-Z][0-9](([0-9]?)|([ABEHMNPRVWXY]?))|([0-9]([0-9]?|[ABCDEFGHJKPSTUW]?))) ?[0-9]((?![CIKMOV])[A-Z]){2}$|^(BFPO)[ ]?[0-9]{1,4}$/i, 'i');
             // [required, regex, strlenmax, error message]
             const attributes = {
                 address1: [reqF.address1, reAddrLine1, cfg.strlenmax, cfg.errorMsgAddress1],
@@ -85,6 +86,8 @@ class PostalAddressObject extends ValidatorFactory_js_1.default {
                 address4: [reqF.address4, reAddr, cfg.strlenmax, cfg.errorMsgAddress4],
                 postcode: [reqF.postcode, rePostcode, null, cfg.errorMsgPostcode],
             };
+            // ESLint disabled as `k` is a known value from the constant list above
+            /* eslint-disable security/detect-object-injection */
             Object.keys(attributes).forEach((k) => {
                 const attr = attributes[k];
                 const hasProperty = Object.prototype.hasOwnProperty.call(value, k);
@@ -100,6 +103,7 @@ class PostalAddressObject extends ValidatorFactory_js_1.default {
                     }));
                 }
             });
+            /* eslint-enable security/detect-object-injection */
         }
         else {
             valid = false;

package/dist/lib/validators/required.js

@@ -10,10 +10,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
  * Value is required. The following values will fail this rule:
  *  (all values that satisify `isEmpty()`) plus '\s'
  */
+const lodash_1 = __importDefault(require("lodash"));
 const utils_js_1 = require("../utils.js");
 const ValidatorFactory_js_1 = __importDefault(require("../ValidatorFactory.js"));
 const ValidationError_js_1 = __importDefault(require("../ValidationError.js"));
-const lodash_1 = __importDefault(require("lodash"));
 const { isPlainObject } = lodash_1.default; // CommonJS
 class Required extends ValidatorFactory_js_1.default {
     constructor() {

package/dist/lib/waypoint-url.d.ts

@@ -1,17 +1,23 @@
 /**
+ * Generate a URL pointing at a particular waypoint.
  *
- * @param {Object} obj
- * @param {string} obj.waypoint
- * @param {string} obj.mountUrl
+ * @param {object} obj Options
+ * @param {string} obj.waypoint Waypoint
+ * @param {string} obj.mountUrl Mount URL
  * @param {JourneyContext} obj.journeyContext JourneyContext
- * @param {boolean} obj.edit
- * @param {string} obj.editOrigin
- * @returns
+ * @param {boolean} obj.edit Turn edit mode on or off
+ * @param {string} obj.editOrigin Edit mode original URL
+ * @param {boolean} obj.skipTo Skip to this waypoint from the current one
+ * @param {string} obj.routeName Plan route name; next | prev
+ * @returns {string} URL
  */
 export default function waypointUrl({ waypoint, mountUrl, journeyContext, edit, editOrigin, skipTo, routeName, }?: {
     waypoint: string;
     mountUrl: string;
-    journeyContext: any;
+    journeyContext: JourneyContext;
     edit: boolean;
     editOrigin: string;
+    skipTo: boolean;
+    routeName: string;
 }): string;
+export type JourneyContext = import('./index').JourneyContext;

package/dist/lib/waypoint-url.js

@@ -1,16 +1,22 @@
 "use strict";
+/**
+ * @typedef {import('./index').JourneyContext} JourneyContext
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 const reUrlProtocolExtract = /^url:\/\/(.+)$/i;
-const sanitiseWaypoint = (w) => w.replace(/[^\/a-z0-9_-]/ig, '').replace(/\/+/g, '/');
+const sanitiseWaypoint = (w) => w.replace(/[^/a-z0-9_-]/ig, '').replace(/\/+/g, '/');
 /**
+ * Generate a URL pointing at a particular waypoint.
  *
- * @param {Object} obj
- * @param {string} obj.waypoint
- * @param {string} obj.mountUrl
+ * @param {object} obj Options
+ * @param {string} obj.waypoint Waypoint
+ * @param {string} obj.mountUrl Mount URL
  * @param {JourneyContext} obj.journeyContext JourneyContext
- * @param {boolean} obj.edit
- * @param {string} obj.editOrigin
- * @returns
+ * @param {boolean} obj.edit Turn edit mode on or off
+ * @param {string} obj.editOrigin Edit mode original URL
+ * @param {boolean} obj.skipTo Skip to this waypoint from the current one
+ * @param {string} obj.routeName Plan route name; next | prev
+ * @returns {string} URL
  */
 function waypointUrl({ waypoint = '', mountUrl = '/', journeyContext, edit = false, editOrigin, skipTo, routeName = 'next', } = Object.create(null)) {
     const url = new URL('https://placeholder.test');

package/dist/middleware/body-parser.d.ts

@@ -1 +1,2 @@
-export default function _default(): import("connect").NextHandleFunction[];
+export function verifyBody(req: any, res: any, buf: any, encoding: any): void;
+export default function bodyParserMiddleware(): import("connect").NextHandleFunction[];

package/dist/middleware/body-parser.js

@@ -1,10 +1,24 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyBody = void 0;
 const express_1 = require("express");
-function default_1() {
-    const rProto = /__proto__/i;
-    const rPrototype = /prototype[=[\]]/i;
-    const rConstructor = /constructor[=[\]]/i;
+const rProto = /__proto__/i;
+const rPrototype = /prototype[='"[\]]/i;
+const rConstructor = /constructor[='"[\]]/i;
+function verifyBody(req, res, buf, encoding) {
+    const body = decodeURI(buf.toString(encoding));
+    if (rProto.test(body)) {
+        throw new Error('Request body verification failed (__proto__)');
+    }
+    if (rPrototype.test(body)) {
+        throw new Error('Request body verification failed (prototype)');
+    }
+    if (rConstructor.test(body)) {
+        throw new Error('Request body verification failed (constructor)');
+    }
+}
+exports.verifyBody = verifyBody;
+function bodyParserMiddleware() {
     return [
         (0, express_1.urlencoded)({
             extended: true,
@@ -12,13 +26,8 @@ function default_1() {
             inflate: true,
             parameterLimit: 25,
             limit: 1024 * 50,
-            verify: (req, res, buf, encoding) => {
-                const body = decodeURI(buf.toString(encoding));
-                if (rProto.test(body) || rPrototype.test(body) || rConstructor.test(body)) {
-                    throw new Error('Request body verification failed');
-                }
-            },
+            verify: verifyBody,
         }),
     ];
 }
-exports.default = default_1;
+exports.default = bodyParserMiddleware;

package/dist/middleware/csrf.d.ts

@@ -1 +1 @@
-export default function _default(): any[];
+export default function csrfMiddleware(): any[];

package/dist/middleware/csrf.js

@@ -7,7 +7,7 @@ const csurf_1 = __importDefault(require("csurf"));
 // 2 middleware: one to generate the csrf token and check its validity (POST
 // only), and one to provide that token to templates via the `casa.csrfToken`
 // variable.
-function default_1() {
+function csrfMiddleware() {
     return [
         (0, csurf_1.default)({
             cookie: false,
@@ -28,4 +28,4 @@ function default_1() {
         },
     ];
 }
-exports.default = default_1;
+exports.default = csrfMiddleware;

package/dist/middleware/data.d.ts

@@ -1,6 +1,5 @@
-export default function _default({ plan, mountUrl, serviceName, events, }: {
+export default function dataMiddleware({ plan, mountUrl, events, }: {
     plan: any;
     mountUrl: any;
-    serviceName: any;
     events: any;
 }): ((req: any, res: any, next: any) => void)[];

package/dist/middleware/data.js

@@ -5,18 +5,20 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const lodash_1 = require("lodash");
+const lodash_1 = __importDefault(require("lodash"));
 const JourneyContext_js_1 = __importDefault(require("../lib/JourneyContext.js"));
 const waypoint_url_js_1 = __importDefault(require("../lib/waypoint-url.js"));
+const { has } = lodash_1.default;
 const editOrigin = (req) => {
-    if ((0, lodash_1.has)(req.query, 'editorigin')) {
+    if (has(req.query, 'editorigin')) {
         return (0, waypoint_url_js_1.default)({ waypoint: req.query.editorigin });
     }
-    else if ((0, lodash_1.has)(req === null || req === void 0 ? void 0 : req.body, 'editorigin')) {
+    if (has(req === null || req === void 0 ? void 0 : req.body, 'editorigin')) {
         return (0, waypoint_url_js_1.default)({ waypoint: req.body.editorigin });
     }
+    return '';
 };
-function default_1({ plan, mountUrl, serviceName, events, }) {
+function dataMiddleware({ plan, mountUrl, events, }) {
     return [
         (req, res, next) => {
             /* ------------------------------------------------ Request decorations */
@@ -27,27 +29,29 @@ function default_1({ plan, mountUrl, serviceName, events, }) {
                 // Current journey context, loaded from session, specified by
                 // `contextid` request parameter
                 journeyContext: JourneyContext_js_1.default.extractContextFromRequest(req).addEventListeners(events), 
-                // Edit mode attributes
-                editMode: (0, lodash_1.has)(req.query, 'edit') || (0, lodash_1.has)(req === null || req === void 0 ? void 0 : req.body, 'edit'), editOrigin: editOrigin(req) });
+                // Edit mode
+                editMode: (has(req === null || req === void 0 ? void 0 : req.query, 'edit') && has(req === null || req === void 0 ? void 0 : req.query, 'editorigin')) || (has(req === null || req === void 0 ? void 0 : req.body, 'edit') && has(req === null || req === void 0 ? void 0 : req.body, 'editorigin')), editOrigin: editOrigin(req) });
+            // Grab chosen language from session
+            req.casa.journeyContext.nav.language = req.session.language;
             /* ------------------------------------------------- Template variables */
             // CASA and userland templates
             res.locals.casa = {
                 mountUrl,
-                serviceName,
+                editMode: req.casa.editMode,
+                editOrigin: req.casa.editOrigin,
             };
             res.locals.locale = req.language;
             // Used by govuk-frontend template
             // - req.language is provided by i18n-http-middleware
             res.locals.htmlLang = req.language;
-            // res.locals.makeLink
-            // res.locals.casa.journeyPreviousUrl 
-            // req.session.journeyContext
-            // req.session.language
-            // req.editOriginUrl
-            // req.inEditMode 
-            // req.editSearchParams
+            // Function for building URLs. This will be curried with the `mountUrl`,
+            // `journeyContext`, `edit` and `editOrigin` for convenience. This means
+            // the template author does not have to be concerned about the current
+            // "state" when generating URLs, but still has the ability to override
+            // these curried defaults if needs be.
+            res.locals.waypointUrl = (args) => (0, waypoint_url_js_1.default)(Object.assign({ mountUrl, journeyContext: req.casa.journeyContext, edit: req.casa.editMode, editOrigin: req.casa.editOrigin }, args));
             next();
         },
     ];
 }
-exports.default = default_1;
+exports.default = dataMiddleware;

package/dist/middleware/dirname.cjs

@@ -1 +1 @@
-module.exports = __dirname;
+module.exports = __dirname;

package/dist/middleware/dirname.d.cts

@@ -0,0 +1,2 @@
+declare const _exports: string;
+export = _exports;

package/dist/middleware/gather-fields.d.ts

@@ -1,5 +1,6 @@
 declare function _default({ waypoint, fields, }: {
     waypoint: string;
-    fields?: any[] | undefined;
-}): ((req: any, res: any, next: any) => void)[];
+    fields?: import("../lib/field").PageField[] | undefined;
+}): any[];
 export default _default;
+export type PageField = import('../lib/field').PageField;

package/dist/middleware/gather-fields.js

@@ -9,9 +9,18 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 const JourneyContext_js_1 = __importDefault(require("../lib/JourneyContext.js"));
 /**
- * @param {Object} obj
+ * @typedef {import('../lib/field').PageField} PageField
+ */
+/**
+ * Gather the field data from `req.body` into the current JourneyContext
+ * - Store in the current session
+ * - Update the user's journey context with the new data
+ * - Remove validation date of JourneyContext so it can re-evaluted
+ *
+ * @param {object} obj Options
  * @param {string} obj.waypoint Waypoint
  * @param {PageField[]} [obj.fields=[]] Fields
+ * @returns {Array} Array of middleware
  */
 exports.default = ({ waypoint, fields = [], }) => [
     (req, res, next) => {
@@ -19,21 +28,19 @@ exports.default = ({ waypoint, fields = [], }) => [
         // for any comparison work that may be done in subseqent middleware.
         req.casa.archivedJourneyContext = JourneyContext_js_1.default.fromContext(req.casa.journeyContext);
         // Ignore data for any non-persistent fields
+        // ESLint disabled as `fields`, `i` and `name` are dev-controlled
+        /* eslint-disable security/detect-object-injection */
         const persistentBody = Object.create(null);
         for (let i = 0, l = fields.length; i < l; i++) {
             if (fields[i].meta.persist && fields[i].getValue(req.body) !== undefined) {
                 persistentBody[fields[i].name] = fields[i].getValue(req.body);
             }
         }
+        /* eslint-enable security/detect-object-injection */
         // Update data and validation context in the current request, and store
         req.casa.journeyContext.setDataForPage(waypoint, persistentBody);
         req.casa.journeyContext.removeValidationStateForPage(waypoint);
         JourneyContext_js_1.default.putContext(req.session, req.casa.journeyContext);
-        // TODO: Once feature we might like here is to invalidate specific pages
-        // based on the change that has just happened, to force those pages to be
-        // visited again. The main use case is to cater for a change in content on
-        // those pages that fundamentally alter the context of the question being asked,
-        // and so should be asked again. For example, "Your address" vs "You and your partner's address"
         next();
-    }
+    },
 ];

package/dist/middleware/i18n.d.ts

@@ -1,4 +1,4 @@
-export default function _default({ languages, directories, }: {
+export default function i18nMiddleware({ languages, directories, }: {
     languages?: string[] | undefined;
     directories?: any[] | undefined;
 }): import("express-serve-static-core").Handler[];

package/dist/middleware/i18n.js

@@ -10,16 +10,14 @@ const fs_1 = require("fs");
 const deepmerge_1 = __importDefault(require("deepmerge"));
 const js_yaml_1 = __importDefault(require("js-yaml"));
 const logger_js_1 = __importDefault(require("../lib/logger.js"));
-const log = (0, logger_js_1.default)('middleware.i18n');
+const log = (0, logger_js_1.default)('middleware:i18n');
 const loadJson = (file) => {
     // Strip out newlines (this is a legacy feature which we're keeping for
     // backwards compatibility).
-    let json = (0, fs_1.readFileSync)(file, 'utf8');
+    const json = (0, fs_1.readFileSync)(file, 'utf8');
     return JSON.parse(json.replace(/[\r\n]/g, ''));
 };
-const loadYaml = (file) => {
-    return js_yaml_1.default.load((0, fs_1.readFileSync)(file, 'utf8'));
-};
+const loadYaml = (file) => js_yaml_1.default.load((0, fs_1.readFileSync)(file, 'utf8'));
 const extract = (file) => {
     const ext = /.yaml$/i.test(file) ? '.yaml' : '.json';
     const data = ext === '.yaml' ? loadYaml(file) : loadJson(file);
@@ -31,11 +29,15 @@ const extract = (file) => {
 const loadResources = (languages, directories) => {
     const store = Object.create(null);
     languages.forEach((language) => {
+        // ESLint disabled as `store`, `language` and `ns` are all dev-controlled,
+        // and this function is only called once, at boot-time.
+        /* eslint-disable security/detect-object-injection */
         store[language] = Object.create(null);
-        directories.forEach((dir) => {
-            dir = (0, path_1.resolve)(dir, language);
-            if (!(0, fs_1.existsSync)(dir))
+        directories.forEach((basedir) => {
+            const dir = (0, path_1.resolve)(basedir, language);
+            if (!(0, fs_1.existsSync)(dir)) {
                 return;
+            }
             log.info('Loading %s language from %s ...', language, dir);
             (0, fs_1.readdirSync)(dir).forEach((file) => {
                 const { ns, data } = extract((0, path_1.resolve)(dir, file));
@@ -45,10 +47,11 @@ const loadResources = (languages, directories) => {
                 store[language][ns] = (0, deepmerge_1.default)(store[language][ns], data);
             });
         });
+        /* eslint-enable security/detect-object-injection */
     });
     return store;
 };
-function default_1({ languages = ['en', 'cy'], directories = [], }) {
+function i18nMiddleware({ languages = ['en', 'cy'], directories = [], }) {
     // Load _all_ translations, from all directories into memory.
     const resources = loadResources(languages, directories);
     // Configure i18next
@@ -70,10 +73,12 @@ function default_1({ languages = ['en', 'cy'], directories = [], }) {
             order: ['querystring', 'session'],
         },
     });
-    // 2 middleware: one to read/set the session language, and one to enhance the req/res objects with i18n features
+    // 2 middleware: one to read/set the session language, and one to enhance the
+    // req/res objects with i18n features
     return [
         (req, res, next) => {
             if (!req.session.language) {
+                /* eslint-disable-next-line prefer-destructuring */
                 req.session.language = languages[0];
             }
             if ((req === null || req === void 0 ? void 0 : req.query.lang) && languages.includes(req.query.lang)) {
@@ -84,4 +89,4 @@ function default_1({ languages = ['en', 'cy'], directories = [], }) {
         (0, i18next_http_middleware_1.handle)(i18nInstance),
     ];
 }
-exports.default = default_1;
+exports.default = i18nMiddleware;

package/dist/middleware/post.d.ts

@@ -1 +1,3 @@
-export default function _default(): ((err: any, req: any, res: any, next: any) => any)[];
+export default function postMiddleware({ mountUrl, }: {
+    mountUrl: any;
+}): ((err: any, req: any, res: any, next: any) => any)[];

package/dist/middleware/post.js

@@ -6,37 +6,52 @@ Object.defineProperty(exports, "__esModule", { value: true });
 // 2 middleware: one as a fallback 404 handler, one to handle thrown errors
 const logger_js_1 = __importDefault(require("../lib/logger.js"));
 const log = (0, logger_js_1.default)('middleware:post');
-function default_1() {
+function postMiddleware({ mountUrl, }) {
     return [
-        (req, res, next) => {
+        (req, res) => {
             res.render('casa/errors/404.njk');
         },
+        /* eslint-disable-next-line no-unused-vars */
         (err, req, res, next) => {
+            var _a;
+            // In some cases, an error may have been thrown before the template assets
+            // have had a chance to initialise. So we use a hardcoded template in
+            // these cases to ensure the user sees an appropriate message.
+            let TEMPLATE = 'casa/errors/500.njk';
+            if (!res.locals.t) {
+                res.locals.t = () => ('');
+                res.locals.casa = Object.assign(Object.assign({}, (_a = res.locals) === null || _a === void 0 ? void 0 : _a.casa), { mountUrl });
+                TEMPLATE = 'casa/errors/static.njk';
+            }
             // CSRF token is invalid in some way
             if ((err === null || err === void 0 ? void 0 : err.code) === 'EBADCSRFTOKEN') {
                 log.info('CSRF validation has failed. This may be caused by the user submitting a stale form from a previous session [EBADCSRFTOKEN]');
-                return res.status(403).render('casa/errors/500.njk');
+                return res.status(403).render(TEMPLATE, { errorCode: 'bad_csrf_token' });
             }
             // Body parsing verification check failed
             if ((err === null || err === void 0 ? void 0 : err.type) === 'entity.verify.failed') {
                 log.info('Body parser verification has failed. This has been caused by the user submitting a payload containing invalid data [entity.verify.failed]');
-                return res.status(403).render('casa/errors/500.njk');
+                return res.status(403).render(TEMPLATE, { errorCode: 'invalid_payload' });
             }
             // Too many parameters submitted
             if ((err === null || err === void 0 ? void 0 : err.type) === 'parameters.too.many') {
                 log.info('The request contains more parameters than is currently allowed [parameters.too.many]');
-                return res.status(413).render('casa/errors/500.njk');
+                return res.status(413).render(TEMPLATE, { errorCode: 'parameter_limit_exceeded' });
             }
             // Overall payload too large
             if ((err === null || err === void 0 ? void 0 : err.type) === 'entity.too.large') {
                 log.info(`The request payload is too large. Received ${err.length}b with a maximum of ${err.limit}b [parameters.too.many]`);
-                return res.status(413).render('casa/errors/500.njk');
+                return res.status(413).render(TEMPLATE, { errorCode: 'payload_size_exceeded' });
+            }
+            // Unaccept request method
+            if ((err === null || err === void 0 ? void 0 : err.code) === 'unaccepted_request_method') {
+                log.info(err.message);
+                return res.status(400).render(TEMPLATE, { errorCode: 'unaccepted_request_method' });
             }
             // Unknown error
             log.error(`Unknown error: ${err.message}; stacktrace: ${err.stack}`);
-            res.render('casa/errors/500.njk');
+            return res.status(200).render(TEMPLATE);
         },
     ];
 }
-exports.default = default_1;
-;
+exports.default = postMiddleware;