@dwp/govuk-casa 8.2.1 → 8.2.4

package/dist/lib/ValidatorFactory.d.ts

@@ -1,83 +1,73 @@
 /**
- * @typedef {import('./index').ProcessorFunction} ProcessorFunction
+ * @access private
+ * @typedef {import('../casa').ErrorMessageConfig} ErrorMessageConfig
  */
 /**
+ * @access private
  * @typedef {import('./index').JourneyContext} JourneyContext
  */
 /**
+ * @access private
  * @typedef {import('./index').ValidationError} ValidationError
  */
 /**
- * @typedef {object} Validator
- * @property {ValidateFunction} validate Validation function
- * @property {ProcessorFunction} sanitise Sanitise a given value prior to validation
- * @property {object} config Configuration
- * @property {string} name Validator name
+ * @access private
+ * @typedef {import('../casa').ValidateContext} ValidateContext
  */
 /**
- * @callback ValidateFunction
- * @param {any} value
- * @param {ValidateContext} context
- * @returns {ValidationError[]}
+ * @access private
+ * @typedef {import('../casa').Validator} Validator
  */
 /**
- * @typedef {object} ValidateContext Context passed to validate function
- * @property {JourneyContext} journeyContext Journey context
- * @property {string} waypoint Waypoint
- * @property {string} fieldName Name of field being processed
+ * @typedef {object} ValidatorFactoryOptions
+ * @property {ErrorMessageConfig} errorMsg Error message
+ */
+/**
+ * @class
+ * @memberof module:@dwp/govuk-casa
  */
 export default class ValidatorFactory {
     /**
      * This is a convenience method that will return a consistently object
      * structure containing validation and sanitisation methods.
      *
-     * @param {object} config Validator config (custom to the validator being created)
+     * @param {ValidatorFactoryOptions} config Validator config (custom to each validator)
      * @returns {Validator} Validator object
      * @throws {TypeError} When configurarion is invalid.
      */
-    static make(config?: object): Validator;
-    static coerceToValidatorObject(input: any): any;
-    constructor(config?: {});
-    config: {};
-    validate(fieldValue: any, context: any): void;
-    sanitise(fieldValue: any): any;
-}
-export type ProcessorFunction = import('./index').ProcessorFunction;
-export type JourneyContext = import('./index').JourneyContext;
-export type ValidationError = import('./index').ValidationError;
-export type Validator = {
-    /**
-     * Validation function
-     */
-    validate: ValidateFunction;
-    /**
-     * Sanitise a given value prior to validation
-     */
-    sanitise: any;
-    /**
-     * Configuration
-     */
-    config: object;
+    static make(config?: ValidatorFactoryOptions): Validator;
     /**
-     * Validator name
+     * NEVER CALL THIS DIRECTLY. USE `make()`.
+     *
+     * @param {ValidatorFactoryOptions} config Validator config (custom to each validator)
      */
-    name: string;
-};
-export type ValidateFunction = (value: any, context: ValidateContext) => ValidationError[];
-/**
- * Context passed to validate function
- */
-export type ValidateContext = {
+    constructor(config?: ValidatorFactoryOptions);
+    config: ValidatorFactoryOptions;
     /**
-     * Journey context
+     * Validate the given value.
+     *
+     * @param {any} fieldValue Value to validate
+     * @param {ValidateContext} context Contextual information
+     * @returns {ValidationError[]} A list of errors (empty if no errors found)
+     * @throws {Error}
      */
-    journeyContext: JourneyContext;
+    validate(fieldValue: any, context: ValidateContext): ValidationError[];
     /**
-     * Waypoint
+     * Sanitise the given value.
+     *
+     * @param {any} fieldValue Value to validate
+     * @returns {any} The sanitised value
      */
-    waypoint: string;
+    sanitise(fieldValue: any): any;
+}
+export type ErrorMessageConfig = import('../casa').ErrorMessageConfig;
+export type JourneyContext = import('./index').JourneyContext;
+export type ValidationError = import('./index').ValidationError;
+export type ValidateContext = import('../casa').ValidateContext;
+export type Validator = import('../casa').Validator;
+export type ValidatorFactoryOptions = {
     /**
-     * Name of field being processed
+     * Error message
      */
-    fieldName: string;
+    errorMsg: ErrorMessageConfig;
 };

package/dist/lib/ValidatorFactory.js

@@ -7,39 +7,39 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const lodash_1 = __importDefault(require("lodash"));
 const { isPlainObject } = lodash_1.default; // CommonJS
 /**
- * @typedef {import('./index').ProcessorFunction} ProcessorFunction
+ * @access private
+ * @typedef {import('../casa').ErrorMessageConfig} ErrorMessageConfig
  */
 /**
+ * @access private
  * @typedef {import('./index').JourneyContext} JourneyContext
  */
 /**
+ * @access private
  * @typedef {import('./index').ValidationError} ValidationError
  */
 /**
- * @typedef {object} Validator
- * @property {ValidateFunction} validate Validation function
- * @property {ProcessorFunction} sanitise Sanitise a given value prior to validation
- * @property {object} config Configuration
- * @property {string} name Validator name
+ * @access private
+ * @typedef {import('../casa').ValidateContext} ValidateContext
  */
 /**
- * @callback ValidateFunction
- * @param {any} value
- * @param {ValidateContext} context
- * @returns {ValidationError[]}
+ * @access private
+ * @typedef {import('../casa').Validator} Validator
  */
 /**
- * @typedef {object} ValidateContext Context passed to validate function
- * @property {JourneyContext} journeyContext Journey context
- * @property {string} waypoint Waypoint
- * @property {string} fieldName Name of field being processed
+ * @typedef {object} ValidatorFactoryOptions
+ * @property {ErrorMessageConfig} errorMsg Error message
+ */
+/**
+ * @class
+ * @memberof module:@dwp/govuk-casa
  */
 class ValidatorFactory {
     /**
      * This is a convenience method that will return a consistently object
      * structure containing validation and sanitisation methods.
      *
-     * @param {object} config Validator config (custom to the validator being created)
+     * @param {ValidatorFactoryOptions} config Validator config (custom to each validator)
      * @returns {Validator} Validator object
      * @throws {TypeError} When configurarion is invalid.
      */
@@ -57,48 +57,37 @@ class ValidatorFactory {
         Object.freeze(instance);
         return instance;
     }
-    static coerceToValidatorObject(input) {
-        let validator = Object.create(null);
-        validator.validate = () => (Promise.reject(new Error('validate() method has not been defined')));
-        validator.sanitise = (val) => (val);
-        validator.config = Object.create(null);
-        // An uninstantied Validator subclass
-        if (typeof input === 'function' && Reflect.getPrototypeOf(input) === ValidatorFactory) {
-            validator = input.make();
-        }
-        else if (typeof input === 'function') {
-            // A plain function is assumed to be just the validation logic. We do not
-            // bind the function to `validator` here because it may already be bound to
-            // another context in userland.
-            validator.name = input.name || input.constructor.name || 'unknown';
-            validator.validate = input;
-        }
-        else if (isPlainObject(input)) {
-            // A plain object
-            validator = {
-                validate: input.validate || validator.validate,
-                sanitise: input.sanitise || validator.sanitise,
-                config: input.config || validator.config,
-                name: input.name || validator.name,
-            };
-        }
-        else {
-            // An unsupported scenario
-            throw new TypeError(`Cannot coerce input to a validator object (typeof = ${typeof input})`);
-        }
-        return validator;
-    }
+    /**
+     * NEVER CALL THIS DIRECTLY. USE `make()`.
+     *
+     * @param {ValidatorFactoryOptions} config Validator config (custom to each validator)
+     */
     constructor(config = {}) {
         if (new.target === ValidatorFactory) {
             throw new TypeError('Cannot instantiate the abstract class, ValidatorFactory');
         }
         this.config = config;
     }
-    /* eslint-disable-next-line no-unused-vars */
+    /* eslint-disable no-unused-vars */
+    /* eslint-disable-next-line jsdoc/require-returns-check */
+    /**
+     * Validate the given value.
+     *
+     * @param {any} fieldValue Value to validate
+     * @param {ValidateContext} context Contextual information
+     * @returns {ValidationError[]} A list of errors (empty if no errors found)
+     * @throws {Error}
+     */
     validate(fieldValue, context) {
         throw new Error('validate() method has not been implemented');
     }
-    /* eslint-disable-next-line no-unused-vars */
+    /* eslint-disable-next-line jsdoc/require-returns-check */
+    /**
+     * Sanitise the given value.
+     *
+     * @param {any} fieldValue Value to validate
+     * @returns {any} The sanitised value
+     */
     sanitise(fieldValue) {
         return fieldValue;
     }

package/dist/lib/configuration-ingestor.d.ts

@@ -1,6 +1,7 @@
 /**
  * Validates and sanitises i18n obejct.
  *
+ * @access private
  * @param {object} i18n Object to validate.
  * @param {Function} cb Callback function that receives the validated value.
  * @throws {TypeError} For invalid object.
@@ -10,6 +11,7 @@ export function validateI18nObject(i18n?: object, cb?: Function): object;
 /**
  * Validates and sanitises i18n directory.
  *
+ * @access private
  * @param {Array} dirs Array of directories.
  * @throws {SyntaxError} For invalid directories.
  * @throws {TypeError} For invalid type.
@@ -19,6 +21,7 @@ export function validateI18nDirs(dirs?: any[]): any[];
 /**
  * Validates and sanitises i18n locales.
  *
+ * @access private
  * @param {Array} locales Array of locales.
  * @throws {SyntaxError} For invalid locales.
  * @throws {TypeError} For invalid type.
@@ -28,15 +31,16 @@ export function validateI18nLocales(locales?: any[]): any[];
 /**
  * Validates and sanitises mount url.
  *
- * @param {string} mountUrl URL from which Express app will be served.
- * @param {string} name Name of the URL type (Mount URL, or Proxy Mount URL).
+ * @access private
+ * @param {string} mountUrl Prefix for all URLs in the browser address bar
  * @throws {SyntaxError} For invalid URL.
- * @returns {string} Sanitised URL.
+ * @returns {string|undefined} Sanitised URL.
  */
-export function validateMountUrl(mountUrl: string, name?: string): string;
+export function validateMountUrl(mountUrl: string): string | undefined;
 /**
  * Validates and sanitises sessions object.
  *
+ * @access private
  * @param {object} session Object to validate.
  * @param {Function} cb Callback function that receives the validated value.
  * @throws {TypeError} For invalid object.
@@ -46,6 +50,7 @@ export function validateSessionObject(session?: object, cb?: Function): object;
 /**
  * Validates and sanitises view directory.
  *
+ * @access private
  * @param {Array} dirs Array of directories.
  * @throws {SyntaxError} For invalid directories.
  * @throws {TypeError} For invalid type.
@@ -55,6 +60,7 @@ export function validateViews(dirs?: any[]): any[];
 /**
  * Validates and sanitises sessions secret.
  *
+ * @access private
  * @param {string} secret Session secret.
  * @throws {ReferenceError} For missing value type.
  * @throws {TypeError} For invalid value.
@@ -64,6 +70,7 @@ export function validateSessionSecret(secret: string): string;
 /**
  * Validates and sanitises sessions ttl.
  *
+ * @access private
  * @param {number} ttl Session ttl (seconds).
  * @throws {ReferenceError} For missing value type.
  * @throws {TypeError} For invalid value.
@@ -73,6 +80,7 @@ export function validateSessionTtl(ttl?: number): number;
 /**
  * Validates and sanitises sessions name.
  *
+ * @access private
  * @param {string} [name=casa-session] Session name.
  * @throws {ReferenceError} For missing value type.
  * @throws {TypeError} For invalid value.
@@ -82,6 +90,7 @@ export function validateSessionName(name?: string | undefined): string;
 /**
  * Validates and sanitises sessions secure flag.
  *
+ * @access private
  * @param {boolean} [secure=false] Session secure flag.
  * @throws {ReferenceError} For missing value type.
  * @throws {TypeError} For invalid value.
@@ -91,6 +100,7 @@ export function validateSessionSecure(secure?: boolean | undefined): string;
 /**
  * Validates and sanitises sessions store.
  *
+ * @access private
  * @param {Function} store Session store.
  * @returns {Function} Store.
  */
@@ -98,6 +108,7 @@ export function validateSessionStore(store: Function): Function;
 /**
  * Validates and sanitises sessions cookie url path.
  *
+ * @access private
  * @param {string} cookiePath Session cookie url path.
  * @param {string} defaultPath Default path if none specified.
  * @returns {string} Cookie path.
@@ -111,6 +122,7 @@ export function validateSessionCookiePath(cookiePath: string, defaultPath?: stri
  * Lax
  * None
  *
+ * @access private
  * @param {any} cookieSameSite Session cookie "sameSite" flag
  * @param {any} defaultFlag Default path if none specified
  * @returns {boolean} cookie path
@@ -127,6 +139,7 @@ export function validateEvents(events: any): any;
 /**
  * Validates helmet configuration function.
  *
+ * @access private
  * @param {HelmetConfigurator} helmetConfigurator Configuration function
  * @returns {HelmetConfigurator} Validated configuration function
  * @throws {TypeError} when passed a non-function
@@ -135,6 +148,7 @@ export function validateHelmetConfigurator(helmetConfigurator: HelmetConfigurato
 /**
  * Ingest, validate, sanitise and manipulate configuration parameters.
  *
+ * @access private
  * @param {ConfigurationOptions} config Config to ingest.
  * @throws {Error|SyntaxError|TypeError} For invalid config values.
  * @returns {object} Immutable config object.

package/dist/lib/configuration-ingestor.js

@@ -10,9 +10,11 @@ const Plan_js_1 = __importDefault(require("./Plan.js"));
 const logger_js_1 = __importDefault(require("./logger.js"));
 const utils_js_1 = require("./utils.js");
 /**
+ * @access private
  * @typedef {import('../casa').ConfigurationOptions} ConfigurationOptions
  */
 /**
+ * @access private
  * @typedef {import('../casa').HelmetConfigurator} HelmetConfigurator
  */
 const log = (0, logger_js_1.default)('lib:configuration-ingestor');
@@ -20,6 +22,7 @@ const echo = (a) => (a);
 /**
  * Validates and sanitises i18n obejct.
  *
+ * @access private
  * @param {object} i18n Object to validate.
  * @param {Function} cb Callback function that receives the validated value.
  * @throws {TypeError} For invalid object.
@@ -35,6 +38,7 @@ exports.validateI18nObject = validateI18nObject;
 /**
  * Validates and sanitises i18n directory.
  *
+ * @access private
  * @param {Array} dirs Array of directories.
  * @throws {SyntaxError} For invalid directories.
  * @throws {TypeError} For invalid type.
@@ -55,6 +59,7 @@ exports.validateI18nDirs = validateI18nDirs;
 /**
  * Validates and sanitises i18n locales.
  *
+ * @access private
  * @param {Array} locales Array of locales.
  * @throws {SyntaxError} For invalid locales.
  * @throws {TypeError} For invalid type.
@@ -75,17 +80,17 @@ exports.validateI18nLocales = validateI18nLocales;
 /**
  * Validates and sanitises mount url.
  *
- * @param {string} mountUrl URL from which Express app will be served.
- * @param {string} name Name of the URL type (Mount URL, or Proxy Mount URL).
+ * @access private
+ * @param {string} mountUrl Prefix for all URLs in the browser address bar
  * @throws {SyntaxError} For invalid URL.
- * @returns {string} Sanitised URL.
+ * @returns {string|undefined} Sanitised URL.
  */
-function validateMountUrl(mountUrl, name = 'Mount URL') {
+function validateMountUrl(mountUrl) {
     if (typeof mountUrl === 'undefined') {
-        return '/';
+        return undefined;
     }
     if (!mountUrl.match(/\/$/)) {
-        throw new SyntaxError(`${name} must include a trailing slash (/)`);
+        throw new SyntaxError('mountUrl must include a trailing slash (/)');
     }
     return mountUrl;
 }
@@ -93,6 +98,7 @@ exports.validateMountUrl = validateMountUrl;
 /**
  * Validates and sanitises sessions object.
  *
+ * @access private
  * @param {object} session Object to validate.
  * @param {Function} cb Callback function that receives the validated value.
  * @throws {TypeError} For invalid object.
@@ -111,6 +117,7 @@ exports.validateSessionObject = validateSessionObject;
 /**
  * Validates and sanitises view directory.
  *
+ * @access private
  * @param {Array} dirs Array of directories.
  * @throws {SyntaxError} For invalid directories.
  * @throws {TypeError} For invalid type.
@@ -131,6 +138,7 @@ exports.validateViews = validateViews;
 /**
  * Validates and sanitises sessions secret.
  *
+ * @access private
  * @param {string} secret Session secret.
  * @throws {ReferenceError} For missing value type.
  * @throws {TypeError} For invalid value.
@@ -149,6 +157,7 @@ exports.validateSessionSecret = validateSessionSecret;
 /**
  * Validates and sanitises sessions ttl.
  *
+ * @access private
  * @param {number} ttl Session ttl (seconds).
  * @throws {ReferenceError} For missing value type.
  * @throws {TypeError} For invalid value.
@@ -164,6 +173,7 @@ exports.validateSessionTtl = validateSessionTtl;
 /**
  * Validates and sanitises sessions name.
  *
+ * @access private
  * @param {string} [name=casa-session] Session name.
  * @throws {ReferenceError} For missing value type.
  * @throws {TypeError} For invalid value.
@@ -179,6 +189,7 @@ exports.validateSessionName = validateSessionName;
 /**
  * Validates and sanitises sessions secure flag.
  *
+ * @access private
  * @param {boolean} [secure=false] Session secure flag.
  * @throws {ReferenceError} For missing value type.
  * @throws {TypeError} For invalid value.
@@ -194,6 +205,7 @@ exports.validateSessionSecure = validateSessionSecure;
 /**
  * Validates and sanitises sessions store.
  *
+ * @access private
  * @param {Function} store Session store.
  * @returns {Function} Store.
  */
@@ -208,6 +220,7 @@ exports.validateSessionStore = validateSessionStore;
 /**
  * Validates and sanitises sessions cookie url path.
  *
+ * @access private
  * @param {string} cookiePath Session cookie url path.
  * @param {string} defaultPath Default path if none specified.
  * @returns {string} Cookie path.
@@ -227,6 +240,7 @@ exports.validateSessionCookiePath = validateSessionCookiePath;
  * Lax
  * None
  *
+ * @access private
  * @param {any} cookieSameSite Session cookie "sameSite" flag
  * @param {any} defaultFlag Default path if none specified
  * @returns {boolean} cookie path
@@ -357,6 +371,7 @@ exports.validateEvents = validateEvents;
 /**
  * Validates helmet configuration function.
  *
+ * @access private
  * @param {HelmetConfigurator} helmetConfigurator Configuration function
  * @returns {HelmetConfigurator} Validated configuration function
  * @throws {TypeError} when passed a non-function
@@ -371,6 +386,7 @@ exports.validateHelmetConfigurator = validateHelmetConfigurator;
 /**
  * Ingest, validate, sanitise and manipulate configuration parameters.
  *
+ * @access private
  * @param {ConfigurationOptions} config Config to ingest.
  * @throws {Error|SyntaxError|TypeError} For invalid config values.
  * @returns {object} Immutable config object.
@@ -382,10 +398,7 @@ function ingest(config = {}) {
             dirs: validateI18nDirs(i18n.dirs),
             locales: validateI18nLocales(i18n.locales),
         })),
-        // !!! DEPRECATION NOTICE !!!
-        // This will be removed in next major version
-        //
-        // Public URL from which the app will be served
+        // URL that will prefix all URLs in the browser address bar
         mountUrl: validateMountUrl(config.mountUrl),
         // Session
         session: validateSessionObject(config.session, (session) => ({

package/dist/lib/configure.d.ts

@@ -1,15 +1,19 @@
 /**
+ * @access private
  * @typedef {import('../casa').ConfigurationOptions} ConfigurationOptions
  */
 /**
+ * @access private
  * @typedef {import('../casa').ConfigurationOptions} ConfigureResult
  */
 /**
+ * @access private
  * @typedef {import('../casa').Mounter} Mounter
  */
 /**
  * Configure some middleware for use in creating a new CASA app.
  *
+ * @memberof module:@dwp/govuk-casa
  * @param {ConfigurationOptions} config Configuration options
  * @returns {ConfigureResult} Result
  */

package/dist/lib/configure.js

@@ -16,6 +16,7 @@ const nunjucks_js_1 = __importDefault(require("./nunjucks.js"));
 const static_js_1 = __importDefault(require("../routes/static.js"));
 const ancillary_js_1 = __importDefault(require("../routes/ancillary.js"));
 const journey_js_1 = __importDefault(require("../routes/journey.js"));
+const strip_proxy_path_js_1 = __importDefault(require("../middleware/strip-proxy-path.js"));
 const pre_js_1 = __importDefault(require("../middleware/pre.js"));
 const post_js_1 = __importDefault(require("../middleware/post.js"));
 const session_js_1 = __importDefault(require("../middleware/session.js"));
@@ -23,20 +24,22 @@ const i18n_js_1 = __importDefault(require("../middleware/i18n.js"));
 const data_js_1 = __importDefault(require("../middleware/data.js"));
 const body_parser_js_1 = __importDefault(require("../middleware/body-parser.js"));
 const csrf_js_1 = __importDefault(require("../middleware/csrf.js"));
-const logger_js_1 = __importDefault(require("./logger.js"));
-const log = (0, logger_js_1.default)('lib:configure');
 /**
+ * @access private
  * @typedef {import('../casa').ConfigurationOptions} ConfigurationOptions
  */
 /**
+ * @access private
  * @typedef {import('../casa').ConfigurationOptions} ConfigureResult
  */
 /**
+ * @access private
  * @typedef {import('../casa').Mounter} Mounter
  */
 /**
  * Configure some middleware for use in creating a new CASA app.
  *
+ * @memberof module:@dwp/govuk-casa
  * @param {ConfigurationOptions} config Configuration options
  * @returns {ConfigureResult} Result
  */
@@ -48,7 +51,7 @@ function configure(config = {}) {
         plugin.configure(config);
     });
     // Extract config
-    const { mountUrl = '/', views = [], session = {
+    const { mountUrl, views = [], session = {
         secret: 'secret',
         name: 'casasession',
         secure: false,
@@ -134,54 +137,10 @@ function configure(config = {}) {
     const mount = (app, { route = '/' } = {}) => {
         nunjucksEnv.express(app);
         app.set('view engine', 'njk');
-        // !!! DEPRECATION NOTICE !!!
-        // This provides a non-breaking pathway to replacing `mountUrl` with
-        // `req.baseUrl` in all internal route handlers/middleware for services
-        // that use a proxy path in their mount point.
-        //
-        // In some cases, the URL on which `app` instance is mounted might include a
-        // proxy path so that it can handle incoming requests that have had a path
-        // prepended to it by an intermediary, such as nginx. This would be common
-        // in a hosting environment that serves several separate applications.
-        //
-        // This bit of middleware removes that proxy path segment from the request
-        // so that all subsequent middleware behave as if it was never present.
-        //
-        // e.g. Where the proxy path is `my-proxy`, then a request to
-        // `/my-proxy/app` will be seen as `/app` in all subsequent middleware, and
-        // all URLs generated for the browser will use `/app`.
-        //
-        // Using `config.mountUrl` rather than `mountUrl` here to test whether the
-        // consumer explicitly set a `mountUrl`, in which case we're dealing with
-        // backwards-compatibility mode.
-        //
-        // This intervention would not be needed for apps that omit `mountUrl` as if
-        // so, it's assumed they're following the guidance for setting up a proxy
-        // as described in `docs/guides/setup-behind-a-proxy.md`.
-        if (config.mountUrl) {
-            log.warn('[DEPRECATION WARNING] Using configuration attribute, mountUrl. This will be removed in an upcoming major version');
-            app.use((req, res, next) => {
-                // Mimic what the `docs/guides/setup-behind-a-proxy.md` guidance
-                // recommends for stripping off any proxy prefixes to leave just the
-                // "mountUrl" remaining.
-                const originalBaseUrl = req.baseUrl;
-                req.baseUrl = mountUrl.replace(/\/$/, '');
-                // If the app has been mounted directly on the specific `mountUrl`, then
-                // there's nothing we need to do and can let this request pass-through.
-                if (req.baseUrl === originalBaseUrl) {
-                    next();
-                }
-                else if (req.__CASA_BASE_URL_REWRITTEN__) {
-                    delete req.__CASA_BASE_URL_REWRITTEN__;
-                    next();
-                }
-                else {
-                    // Issuing this call will re-run this same middleware, so we use this
-                    // `__CASA_BASE_URL_REWRITTEN__` flag to prevent recursion.
-                    req.__CASA_BASE_URL_REWRITTEN__ = true;
-                    req.app.handle(req, res, next);
-                }
-            });
+        // If a `mountUrl` has been defined, then we're potentially in "proxy mode",
+        // in which we strip the proxy path prefix from the incoming request URLs.
+        if (mountUrl) {
+            app.use((0, strip_proxy_path_js_1.default)({ mountUrl }));
         }
         // Attach a handler to redirect requests for `/` to the first waypoint in
         // the plan
@@ -195,7 +154,16 @@ function configure(config = {}) {
                 res.redirect(302, `${reqPath}${reqParams}`);
             });
         }
-        // Service static assets from the `app` rather than the `router`. The router
+        // Capture the mount path of this CASA app, before any parameterised path
+        // segments exert influence over `req.baseUrl` in the `router` further below.
+        // This can later be used by middleware that wants to use the
+        // "unparameterised" version of the request's `baseUrl`, such as the static
+        // router's middleware.
+        app.use((req, res, next) => {
+            req.unparameterisedBaseUrl = req.baseUrl;
+            next();
+        });
+        // Serve static assets from the `app` rather than the `router`. The router
         // may contain paramaterised path segments which would mean serving static
         // assets over a dynamic URL each time, thus causing lots of cache misses on
         // the browser.

package/dist/lib/end-session.d.ts

@@ -6,8 +6,9 @@
  * Note: this will not remove the session from server-side storage, which will
  * instead be left up to the storage mechanism to clean up.
  *
- * @param {object} req HTTP request
+ * @memberof module:@dwp/govuk-casa
+ * @param {import('express').Request} req HTTP request
  * @param {Function} next Chain
  * @returns {void}
  */
-export default function endSession(req: object, next: Function): void;
+export default function endSession(req: import('express').Request, next: Function): void;