@loopback/rest 4.0.0-alpha.8 → 5.0.1

package/dist/validation/request-body.validator.js

@@ -0,0 +1,161 @@
+"use strict";
+// Copyright IBM Corp. 2018,2020. All Rights Reserved.
+// Node module: @loopback/rest
+// This file is licensed under the MIT License.
+// License text available at https://opensource.org/licenses/MIT
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateRequestBody = void 0;
+const tslib_1 = require("tslib");
+const openapi_v3_1 = require("@loopback/openapi-v3");
+const debug_1 = tslib_1.__importDefault(require("debug"));
+const lodash_1 = tslib_1.__importDefault(require("lodash"));
+const util_1 = tslib_1.__importDefault(require("util"));
+const __1 = require("..");
+const ajv_factory_provider_1 = require("./ajv-factory.provider");
+const toJsonSchema = require('@openapi-contrib/openapi-schema-to-json-schema');
+const debug = debug_1.default('loopback:rest:validation');
+/**
+ * Check whether the request body is valid according to the provided OpenAPI schema.
+ * The JSON schema is generated from the OpenAPI schema which is typically defined
+ * by `@requestBody()`.
+ * The validation leverages AJV schema validator.
+ * @param body - The request body parsed from an HTTP request.
+ * @param requestBodySpec - The OpenAPI requestBody specification defined in `@requestBody()`.
+ * @param globalSchemas - The referenced schemas generated from `OpenAPISpec.components.schemas`.
+ * @param options - Request body validation options for AJV
+ */
+async function validateRequestBody(body, requestBodySpec, globalSchemas = {}, options = {}) {
+    const required = requestBodySpec === null || requestBodySpec === void 0 ? void 0 : requestBodySpec.required;
+    if (required && body.value == null) {
+        const err = Object.assign(new __1.HttpErrors.BadRequest('Request body is required'), {
+            code: 'MISSING_REQUIRED_PARAMETER',
+            parameterName: 'request body',
+        });
+        throw err;
+    }
+    const schema = body.schema;
+    /* istanbul ignore if */
+    if (debug.enabled) {
+        debug('Request body schema:', util_1.default.inspect(schema, { depth: null }));
+        if (schema &&
+            openapi_v3_1.isReferenceObject(schema) &&
+            schema.$ref.startsWith('#/components/schemas/')) {
+            const ref = schema.$ref.slice('#/components/schemas/'.length);
+            debug('  referencing:', util_1.default.inspect(globalSchemas[ref], { depth: null }));
+        }
+    }
+    if (!schema)
+        return;
+    options = { coerceTypes: !!body.coercionRequired, ...options };
+    await validateValueAgainstSchema(body.value, schema, globalSchemas, options);
+}
+exports.validateRequestBody = validateRequestBody;
+/**
+ * Convert an OpenAPI schema to the corresponding JSON schema.
+ * @param openapiSchema - The OpenAPI schema to convert.
+ */
+function convertToJsonSchema(openapiSchema) {
+    const jsonSchema = toJsonSchema(openapiSchema);
+    delete jsonSchema['$schema'];
+    /* istanbul ignore if */
+    if (debug.enabled) {
+        debug('Converted OpenAPI schema to JSON schema: %s', util_1.default.inspect(jsonSchema, { depth: null }));
+    }
+    return jsonSchema;
+}
+/**
+ * Built-in cache for complied schemas by AJV
+ */
+const DEFAULT_COMPILED_SCHEMA_CACHE = new WeakMap();
+/**
+ * Build a cache key for AJV options
+ * @param options - Request body validation options
+ */
+function getKeyForOptions(options) {
+    const ajvOptions = {};
+    // Sort keys for options
+    const keys = Object.keys(options).sort();
+    for (const k of keys) {
+        if (k === 'compiledSchemaCache')
+            continue;
+        ajvOptions[k] = options[k];
+    }
+    return JSON.stringify(ajvOptions);
+}
+/**
+ * Validate the request body data against JSON schema.
+ * @param body - The request body data.
+ * @param schema - The JSON schema used to perform the validation.
+ * @param globalSchemas - Schema references.
+ * @param options - Request body validation options.
+ */
+async function validateValueAgainstSchema(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+body, schema, globalSchemas = {}, options = {}) {
+    var _a, _b;
+    let validate;
+    const cache = (_a = options.compiledSchemaCache) !== null && _a !== void 0 ? _a : DEFAULT_COMPILED_SCHEMA_CACHE;
+    const key = getKeyForOptions(options);
+    let validatorMap;
+    if (cache.has(schema)) {
+        validatorMap = cache.get(schema);
+        validate = validatorMap.get(key);
+    }
+    if (!validate) {
+        const ajvFactory = (_b = options.ajvFactory) !== null && _b !== void 0 ? _b : new ajv_factory_provider_1.AjvFactoryProvider(options).value();
+        const ajvInst = ajvFactory(options);
+        validate = createValidator(schema, globalSchemas, ajvInst);
+        validatorMap = validatorMap !== null && validatorMap !== void 0 ? validatorMap : new Map();
+        validatorMap.set(key, validate);
+        cache.set(schema, validatorMap);
+    }
+    let validationErrors = [];
+    try {
+        const validationResult = await validate(body);
+        // When body is optional & values is empty / null, ajv returns null
+        if (validationResult || validationResult === null) {
+            debug('Request body passed AJV validation.');
+            return;
+        }
+    }
+    catch (error) {
+        validationErrors = error.errors;
+    }
+    /* istanbul ignore if */
+    if (debug.enabled) {
+        debug('Invalid request body: %s. Errors: %s', util_1.default.inspect(body, { depth: null }), util_1.default.inspect(validationErrors));
+    }
+    if (typeof options.ajvErrorTransformer === 'function') {
+        validationErrors = options.ajvErrorTransformer(validationErrors);
+    }
+    const error = __1.RestHttpErrors.invalidRequestBody();
+    error.details = lodash_1.default.map(validationErrors, e => {
+        return {
+            path: e.dataPath,
+            code: e.keyword,
+            message: e.message,
+            info: e.params,
+        };
+    });
+    throw error;
+}
+/**
+ * Create a validate function for the given schema
+ * @param schema - JSON schema for the target
+ * @param globalSchemas - Global schemas
+ * @param ajvInst - An instance of Ajv
+ */
+function createValidator(schema, globalSchemas = {}, ajvInst) {
+    const jsonSchema = convertToJsonSchema(schema);
+    // Clone global schemas to set `$async: true` flag
+    const schemas = {};
+    for (const name in globalSchemas) {
+        // See https://github.com/strongloop/loopback-next/issues/4939
+        schemas[name] = { ...globalSchemas[name], $async: true };
+    }
+    const schemaWithRef = { components: { schemas }, ...jsonSchema };
+    // See https://ajv.js.org/#asynchronous-validation for async validation
+    schemaWithRef.$async = true;
+    return ajvInst.compile(schemaWithRef);
+}
+//# sourceMappingURL=request-body.validator.js.map

package/dist/validation/request-body.validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-body.validator.js","sourceRoot":"","sources":["../../src/validation/request-body.validator.ts"],"names":[],"mappings":";AAAA,sDAAsD;AACtD,8BAA8B;AAC9B,+CAA+C;AAC/C,gEAAgE;;;;AAEhE,qDAM8B;AAE9B,0DAAgC;AAChC,4DAAuB;AACvB,wDAAwB;AACxB,0BAA2D;AAE3D,iEAA0D;AAE1D,MAAM,YAAY,GAAG,OAAO,CAAC,gDAAgD,CAAC,CAAC;AAC/E,MAAM,KAAK,GAAG,eAAW,CAAC,0BAA0B,CAAC,CAAC;AAEtD;;;;;;;;;GASG;AACI,KAAK,UAAU,mBAAmB,CACvC,IAAiB,EACjB,eAAmC,EACnC,gBAA+B,EAAE,EACjC,UAAwC,EAAE;IAE1C,MAAM,QAAQ,GAAG,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,QAAQ,CAAC;IAE3C,IAAI,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CACvB,IAAI,cAAU,CAAC,UAAU,CAAC,0BAA0B,CAAC,EACrD;YACE,IAAI,EAAE,4BAA4B;YAClC,aAAa,EAAE,cAAc;SAC9B,CACF,CAAC;QACF,MAAM,GAAG,CAAC;KACX;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,wBAAwB;IACxB,IAAI,KAAK,CAAC,OAAO,EAAE;QACjB,KAAK,CAAC,sBAAsB,EAAE,cAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAC,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;QACnE,IACE,MAAM;YACN,8BAAiB,CAAC,MAAM,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAC/C;YACA,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;YAC9D,KAAK,CAAC,gBAAgB,EAAE,cAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAC,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;SAC1E;KACF;IACD,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,OAAO,GAAG,EAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,OAAO,EAAC,CAAC;IAC7D,MAAM,0BAA0B,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;AAC/E,CAAC;AApCD,kDAoCC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,aAA2B;IACtD,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAC/C,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;IAC7B,wBAAwB;IACxB,IAAI,KAAK,CAAC,OAAO,EAAE;QACjB,KAAK,CACH,6CAA6C,EAC7C,cAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAC,KAAK,EAAE,IAAI,EAAC,CAAC,CACxC,CAAC;KACH;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,6BAA6B,GAAyB,IAAI,OAAO,EAAE,CAAC;AAE1E;;;GAGG;AACH,SAAS,gBAAgB,CAAC,OAAqC;IAC7D,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,wBAAwB;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CACtB,OAAO,CACR,CAAC,IAAI,EAA4C,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;QACpB,IAAI,CAAC,KAAK,qBAAqB;YAAE,SAAS;QAC1C,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;KAC5B;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,0BAA0B;AACvC,8DAA8D;AAC9D,IAAS,EACT,MAAsC,EACtC,gBAA+B,EAAE,EACjC,UAAwC,EAAE;;IAE1C,IAAI,QAA0C,CAAC;IAE/C,MAAM,KAAK,SAAG,OAAO,CAAC,mBAAmB,mCAAI,6BAA6B,CAAC;IAC3E,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEtC,IAAI,YAA2D,CAAC;IAChE,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACrB,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;QAClC,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;KAClC;IAED,IAAI,CAAC,QAAQ,EAAE;QACb,MAAM,UAAU,SACd,OAAO,CAAC,UAAU,mCAAI,IAAI,yCAAkB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACpC,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QAC3D,YAAY,GAAG,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,IAAI,GAAG,EAAE,CAAC;QACzC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAChC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;KACjC;IAED,IAAI,gBAAgB,GAAsB,EAAE,CAAC;IAC7C,IAAI;QACF,MAAM,gBAAgB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,mEAAmE;QACnE,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,IAAI,EAAE;YACjD,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC7C,OAAO;SACR;KACF;IAAC,OAAO,KAAK,EAAE;QACd,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC;KACjC;IAED,wBAAwB;IACxB,IAAI,KAAK,CAAC,OAAO,EAAE;QACjB,KAAK,CACH,sCAAsC,EACtC,cAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAC,KAAK,EAAE,IAAI,EAAC,CAAC,EACjC,cAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAC/B,CAAC;KACH;IAED,IAAI,OAAO,OAAO,CAAC,mBAAmB,KAAK,UAAU,EAAE;QACrD,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;KAClE;IAED,MAAM,KAAK,GAAG,kBAAc,CAAC,kBAAkB,EAAE,CAAC;IAClD,KAAK,CAAC,OAAO,GAAG,gBAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE;QAC1C,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,QAAQ;YAChB,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,MAAM;SACf,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACtB,MAAoB,EACpB,gBAA+B,EAAE,EACjC,OAAY;IAEZ,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAE/C,kDAAkD;IAClD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE;QAChC,8DAA8D;QAC9D,OAAO,CAAC,IAAI,CAAC,GAAG,EAAC,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAC,CAAC;KACxD;IACD,MAAM,aAAa,GAAG,EAAC,UAAU,EAAE,EAAC,OAAO,EAAC,EAAE,GAAG,UAAU,EAAC,CAAC;IAE7D,uEAAuE;IACvE,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC;IAE5B,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC"}

package/dist/writer.d.ts

@@ -0,0 +1,9 @@
+import { OperationRetval, Response } from './types';
+/**
+ * Writes the result from Application controller method
+ * into the HTTP response
+ *
+ * @param response - HTTP Response
+ * @param result - Result from the API to write into HTTP Response
+ */
+export declare function writeResultToResponse(response: Response, result: OperationRetval): void;

package/dist/writer.js

@@ -0,0 +1,62 @@
+"use strict";
+// Copyright IBM Corp. 2017,2020. All Rights Reserved.
+// Node module: @loopback/rest
+// This file is licensed under the MIT License.
+// License text available at https://opensource.org/licenses/MIT
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeResultToResponse = void 0;
+const stream_1 = require("stream");
+/**
+ * Writes the result from Application controller method
+ * into the HTTP response
+ *
+ * @param response - HTTP Response
+ * @param result - Result from the API to write into HTTP Response
+ */
+function writeResultToResponse(
+// not needed and responsibility should be in the sequence.send
+response, 
+// result returned back from invoking controller method
+result) {
+    // Bypass response writing if the controller method returns `response` itself
+    // or the response headers have been sent
+    if (result === response || response.headersSent) {
+        return;
+    }
+    if (result === undefined) {
+        response.statusCode = 204;
+        response.end();
+        return;
+    }
+    const isStream = result instanceof stream_1.Readable || typeof (result === null || result === void 0 ? void 0 : result.pipe) === 'function';
+    if (isStream) {
+        response.setHeader('Content-Type', 'application/octet-stream');
+        // Stream
+        result.pipe(response);
+        return;
+    }
+    switch (typeof result) {
+        case 'object':
+        case 'boolean':
+        case 'number':
+            if (Buffer.isBuffer(result)) {
+                // Buffer for binary data
+                response.setHeader('Content-Type', 'application/octet-stream');
+            }
+            else {
+                // TODO(ritch) remove this, should be configurable
+                // See https://github.com/strongloop/loopback-next/issues/436
+                response.setHeader('Content-Type', 'application/json');
+                // TODO(bajtos) handle errors - JSON.stringify can throw
+                result = JSON.stringify(result);
+            }
+            break;
+        default:
+            response.setHeader('Content-Type', 'text/plain');
+            result = result.toString();
+            break;
+    }
+    response.end(result);
+}
+exports.writeResultToResponse = writeResultToResponse;
+//# sourceMappingURL=writer.js.map

package/dist/writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../src/writer.ts"],"names":[],"mappings":";AAAA,sDAAsD;AACtD,8BAA8B;AAC9B,+CAA+C;AAC/C,gEAAgE;;;AAGhE,mCAAgC;AAEhC;;;;;;GAMG;AACH,SAAgB,qBAAqB;AACnC,+DAA+D;AAC/D,QAAkB;AAClB,uDAAuD;AACvD,MAAuB;IAEvB,6EAA6E;IAC7E,yCAAyC;IACzC,IAAI,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,WAAW,EAAE;QAC/C,OAAO;KACR;IACD,IAAI,MAAM,KAAK,SAAS,EAAE;QACxB,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;QAC1B,QAAQ,CAAC,GAAG,EAAE,CAAC;QACf,OAAO;KACR;IAED,MAAM,QAAQ,GACZ,MAAM,YAAY,iBAAQ,IAAI,QAAO,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,IAAI,CAAA,KAAK,UAAU,CAAC;IAEnE,IAAI,QAAQ,EAAE;QACZ,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QAC/D,SAAS;QACT,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtB,OAAO;KACR;IACD,QAAQ,OAAO,MAAM,EAAE;QACrB,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACX,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;gBAC3B,yBAAyB;gBACzB,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;aAChE;iBAAM;gBACL,kDAAkD;gBAClD,6DAA6D;gBAC7D,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBACvD,wDAAwD;gBACxD,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;aACjC;YACD,MAAM;QACR;YACE,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;YACjD,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM;KACT;IACD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACvB,CAAC;AA/CD,sDA+CC"}

package/package.json

@@ -1,57 +1,85 @@
 {
   "name": "@loopback/rest",
-  "version": "4.0.0-alpha.8",
+  "version": "5.0.1",
   "description": "",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
   "engines": {
-    "node": ">=6"
+    "node": ">=10"
   },
   "scripts": {
-    "acceptance": "lb-dist mocha --opts ../../test/mocha.opts 'DIST/test/acceptance/**/*.js'",
-    "build": "npm run build:dist && npm run build:dist6",
-    "build:current": "lb-tsc",
-    "build:dist": "lb-tsc es2017",
-    "build:dist6": "lb-tsc es2015",
-    "build:apidocs": "lb-apidocs",
-    "clean": "rm -rf loopback-rest*.tgz dist* package",
-    "prepare": "npm run build && npm run build:apidocs",
-    "pretest": "npm run build:current",
-    "integration": "lb-dist mocha --opts ../../test/mocha.opts 'DIST/test/integration/**/*.js'",
-    "test": "lb-dist mocha --opts ../../test/mocha.opts 'DIST/test/unit/**/*.js' 'DIST/test/integration/**/*.js' 'DIST/test/acceptance/**/*.js'",
-    "unit": "lb-dist mocha --opts ../../test/mocha.opts 'DIST/test/unit/**/*.js'",
+    "acceptance": "lb-mocha \"dist/__tests__/acceptance/**/*.js\"",
+    "build": "lb-tsc",
+    "clean": "lb-clean loopback-rest*.tgz dist *.tsbuildinfo package",
+    "pretest": "npm run build",
+    "integration": "lb-mocha \"dist/__tests__/integration/**/*.js\"",
+    "test": "lb-mocha \"dist/__tests__/**/*.js\"",
+    "unit": "lb-mocha \"dist/__tests__/unit/**/*.js\"",
     "verify": "npm pack && tar xf loopback-rest*.tgz && tree package && npm run clean"
   },
-  "author": "IBM",
+  "author": "IBM Corp.",
+  "copyright.owner": "IBM Corp.",
   "license": "MIT",
   "dependencies": {
-    "@loopback/context": "^4.0.0-alpha.19",
-    "@loopback/core": "^4.0.0-alpha.21",
-    "@loopback/openapi-spec": "^4.0.0-alpha.15",
-    "@types/http-errors": "^1.5.34",
-    "@types/js-yaml": "^3.9.1",
-    "body": "^5.1.0",
-    "debug": "^3.1.0",
-    "http-errors": "^1.6.1",
-    "js-yaml": "^3.9.1",
-    "lodash": "^4.17.4",
-    "path-to-regexp": "^2.0.0",
-    "swagger2openapi": "^2.10.7"
+    "@loopback/context": "^3.8.1",
+    "@loopback/core": "^2.7.0",
+    "@loopback/express": "^1.2.1",
+    "@loopback/http-server": "^2.1.5",
+    "@loopback/openapi-v3": "^3.4.1",
+    "@openapi-contrib/openapi-schema-to-json-schema": "^3.0.0",
+    "@types/body-parser": "^1.19.0",
+    "@types/cors": "^2.8.6",
+    "@types/express": "^4.17.6",
+    "@types/express-serve-static-core": "^4.17.6",
+    "@types/http-errors": "^1.6.3",
+    "@types/on-finished": "^2.3.1",
+    "@types/serve-static": "1.13.4",
+    "@types/type-is": "^1.6.3",
+    "ajv": "^6.12.2",
+    "ajv-errors": "^1.0.1",
+    "ajv-keywords": "^3.4.1",
+    "body-parser": "^1.19.0",
+    "cors": "^2.8.5",
+    "debug": "^4.1.1",
+    "express": "^4.17.1",
+    "http-errors": "^1.7.3",
+    "js-yaml": "^3.13.1",
+    "json-schema-compare": "^0.2.2",
+    "lodash": "^4.17.15",
+    "on-finished": "^2.3.0",
+    "path-to-regexp": "^6.1.0",
+    "qs": "^6.9.4",
+    "strong-error-handler": "^3.4.0",
+    "tslib": "^2.0.0",
+    "type-is": "^1.6.18",
+    "validator": "^13.0.0"
   },
   "devDependencies": {
-    "@loopback/build": "^4.0.0-alpha.5",
-    "@loopback/openapi-spec-builder": "^4.0.0-alpha.12",
-    "@loopback/testlab": "^4.0.0-alpha.14"
+    "@loopback/build": "^5.4.1",
+    "@loopback/eslint-config": "^7.0.1",
+    "@loopback/openapi-spec-builder": "^2.1.5",
+    "@loopback/repository": "^2.5.1",
+    "@loopback/testlab": "^3.1.5",
+    "@types/debug": "^4.1.5",
+    "@types/js-yaml": "^3.12.4",
+    "@types/json-schema-compare": "^0.2.0",
+    "@types/lodash": "^4.14.152",
+    "@types/multer": "^1.4.3",
+    "@types/node": "^10.17.24",
+    "@types/on-finished": "^2.3.1",
+    "@types/qs": "^6.9.3",
+    "multer": "^1.4.2"
   },
   "files": [
     "README.md",
-    "index.js",
-    "index.d.ts",
-    "dist/src",
-    "dist6/src",
-    "api-docs",
-    "src"
+    "dist",
+    "src",
+    "!*/__tests__"
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/strongloop/loopback-next.git"
-  }
+    "url": "https://github.com/strongloop/loopback-next.git",
+    "directory": "packages/rest"
+  },
+  "gitHead": "62aea854bf85c5a5995b59e6908fe5409f7eea96"
 }

package/src/body-parsers/body-parser.helpers.ts

@@ -0,0 +1,148 @@
+// Copyright IBM Corp. 2018,2019. All Rights Reserved.
+// Node module: @loopback/rest
+// This file is licensed under the MIT License.
+// License text available at https://opensource.org/licenses/MIT
+
+import {
+  Options,
+  OptionsJson,
+  OptionsText,
+  OptionsUrlencoded,
+} from 'body-parser';
+import debugModule from 'debug';
+import {HttpError} from 'http-errors';
+import {Request, RequestBodyParserOptions, Response} from '../types';
+
+const debug = debugModule('loopback:rest:body-parser');
+
+/**
+ * Get the content-type header value from the request
+ * @param req - Http request
+ */
+export function getContentType(req: Request): string | undefined {
+  return req.get('content-type');
+}
+
+/**
+ * Express body parser function type
+ */
+export type BodyParserMiddleware = (
+  request: Request,
+  response: Response,
+  next: (err: HttpError) => void,
+) => void;
+
+/**
+ * Normalize parsing errors as `4xx`
+ * @param err
+ */
+export function normalizeParsingError(err: HttpError) {
+  debug('Cannot parse request body %j', err);
+  if (!err.statusCode || err.statusCode >= 500) {
+    err.statusCode = 400;
+  }
+  return err;
+}
+
+/* eslint-disable @typescript-eslint/no-explicit-any */
+
+/**
+ * Parse the request body asynchronously
+ * @param handle - The express middleware handler
+ * @param request - Http request
+ */
+export function invokeBodyParserMiddleware(
+  handle: BodyParserMiddleware,
+  request: Request,
+): Promise<any> {
+  // A hack to fool TypeScript as we don't need `response`
+  const response = ({} as any) as Response;
+  return new Promise<void>((resolve, reject) => {
+    handle(request, response, err => {
+      if (err) {
+        reject(err);
+        return;
+      }
+      resolve(request.body);
+    });
+  });
+}
+
+// Default limit of the body length
+export const DEFAULT_LIMIT = '1mb';
+
+/**
+ * Extract parser options based on the parser type
+ * @param type - json|urlencoded|text
+ * @param options
+ */
+export function getParserOptions(
+  type: 'json',
+  options: RequestBodyParserOptions,
+): OptionsJson;
+export function getParserOptions(
+  type: 'urlencoded',
+  options: RequestBodyParserOptions,
+): OptionsUrlencoded;
+export function getParserOptions(
+  type: 'text',
+  options: RequestBodyParserOptions,
+): OptionsText;
+export function getParserOptions(
+  type: 'raw',
+  options: RequestBodyParserOptions,
+): Options;
+
+export function getParserOptions(
+  type: 'json' | 'urlencoded' | 'text' | 'raw',
+  options: RequestBodyParserOptions,
+) {
+  const opts: {[name: string]: any} = {limit: DEFAULT_LIMIT};
+  switch (type) {
+    case 'json':
+      // Allow */json and */*+json
+      opts.type = ['*/json', '*/*+json'];
+      opts.strict = false;
+      break;
+    case 'urlencoded':
+      opts.type = type;
+      opts.extended = true;
+      break;
+    case 'text':
+      // Set media type to `text/*` to match `text/plain` or `text/html`
+      opts.type = 'text/*';
+      break;
+    case 'raw':
+      opts.type = ['application/octet-stream', '*/*'];
+      break;
+  }
+  Object.assign(opts, options[type], options);
+  for (const k of ['json', 'urlencoded', 'text', 'raw']) {
+    delete opts[k];
+  }
+  return opts;
+}
+
+export namespace builtinParsers {
+  export const json = Symbol('json');
+  export const urlencoded = Symbol('urlencoded');
+  export const text = Symbol('text');
+  export const raw = Symbol('raw');
+  export const stream = Symbol('stream');
+
+  export const names: (string | symbol)[] = [
+    json,
+    urlencoded,
+    text,
+    raw,
+    stream,
+  ];
+
+  export const mapping: {[name: string]: symbol} = {
+    json,
+    urlencoded,
+    text,
+    raw,
+    stream,
+  };
+}

package/src/body-parsers/body-parser.json.ts

@@ -0,0 +1,46 @@
+// Copyright IBM Corp. 2018,2019. All Rights Reserved.
+// Node module: @loopback/rest
+// This file is licensed under the MIT License.
+// License text available at https://opensource.org/licenses/MIT
+
+import {inject} from '@loopback/context';
+import {json} from 'body-parser';
+import {is} from 'type-is';
+import {RestBindings} from '../keys';
+import {Request, RequestBodyParserOptions} from '../types';
+import {
+  BodyParserMiddleware,
+  getParserOptions,
+  invokeBodyParserMiddleware,
+  builtinParsers,
+} from './body-parser.helpers';
+import {BodyParser, RequestBody} from './types';
+import {sanitizeJsonParse} from '../parse-json';
+
+export class JsonBodyParser implements BodyParser {
+  name = builtinParsers.json;
+  private jsonParser: BodyParserMiddleware;
+
+  constructor(
+    @inject(RestBindings.REQUEST_BODY_PARSER_OPTIONS, {optional: true})
+    options: RequestBodyParserOptions = {},
+  ) {
+    const jsonOptions = getParserOptions('json', options);
+    jsonOptions.reviver = sanitizeJsonParse(jsonOptions.reviver);
+    this.jsonParser = json(jsonOptions);
+  }
+
+  supports(mediaType: string) {
+    return !!is(mediaType, '*/json', '*/*+json');
+  }
+
+  async parse(request: Request): Promise<RequestBody> {
+    let body = await invokeBodyParserMiddleware(this.jsonParser, request);
+    // https://github.com/expressjs/body-parser/blob/master/lib/types/json.js#L71-L76
+    const contentLength = request.get('content-length');
+    if (contentLength != null && +contentLength === 0) {
+      body = undefined;
+    }
+    return {value: body};
+  }
+}

package/src/body-parsers/body-parser.raw.ts

@@ -0,0 +1,42 @@
+// Copyright IBM Corp. 2018. All Rights Reserved.
+// Node module: @loopback/rest
+// This file is licensed under the MIT License.
+// License text available at https://opensource.org/licenses/MIT
+
+import {inject} from '@loopback/context';
+import {raw} from 'body-parser';
+import {is} from 'type-is';
+import {RestBindings} from '../keys';
+import {Request, RequestBodyParserOptions} from '../types';
+import {
+  BodyParserMiddleware,
+  getParserOptions,
+  invokeBodyParserMiddleware,
+  builtinParsers,
+} from './body-parser.helpers';
+import {BodyParser, RequestBody} from './types';
+
+/**
+ * Parsing the request body into Buffer
+ */
+export class RawBodyParser implements BodyParser {
+  name = builtinParsers.raw;
+  private rawParser: BodyParserMiddleware;
+
+  constructor(
+    @inject(RestBindings.REQUEST_BODY_PARSER_OPTIONS, {optional: true})
+    options: RequestBodyParserOptions = {},
+  ) {
+    const rawOptions = getParserOptions('raw', options);
+    this.rawParser = raw(rawOptions);
+  }
+
+  supports(mediaType: string) {
+    return !!is(mediaType, 'application/octet-stream');
+  }
+
+  async parse(request: Request): Promise<RequestBody> {
+    const body = await invokeBodyParserMiddleware(this.rawParser, request);
+    return {value: body};
+  }
+}

package/src/body-parsers/body-parser.stream.ts

@@ -0,0 +1,27 @@
+// Copyright IBM Corp. 2018. All Rights Reserved.
+// Node module: @loopback/rest
+// This file is licensed under the MIT License.
+// License text available at https://opensource.org/licenses/MIT
+
+import {Request} from '../types';
+import {BodyParser, RequestBody} from './types';
+import {builtinParsers} from './body-parser.helpers';
+
+/**
+ * A special body parser to retain request stream as is.
+ * It will be used by explicitly setting `x-parser` to `'stream'` in the request
+ * body spec.
+ */
+export class StreamBodyParser implements BodyParser {
+  name = builtinParsers.stream;
+
+  supports(mediaType: string) {
+    // Return `false` so that this parser can only be trigged by the
+    // `{x-parser: 'stream'}` extension in the request body spec
+    return false;
+  }
+
+  async parse(request: Request): Promise<RequestBody> {
+    return {value: request};
+  }
+}