@rpcbase/api 0.149.0 → 0.151.0

package/dist/index.js

@@ -27497,6 +27497,28 @@ var createApiErrorMiddleware = (options = {}) => (error, req, res, next) => {
 };
 var apiErrorMiddleware = createApiErrorMiddleware();
 //#endregion
+//#region src/requestValidation.ts
+var getErrorFields = (issues) => {
+	const fields = {};
+	for (const issue of issues) {
+		const path = issue.path.map(String).join(".");
+		if (!path) continue;
+		const messages = fields[path] ?? [];
+		messages.push(issue.message);
+		fields[path] = messages;
+	}
+	return Object.keys(fields).length > 0 ? fields : void 0;
+};
+var parseApiRequest = (schema, input) => {
+	const result = schema.safeParse(input);
+	if (result.success) return result.data;
+	throw new ApiHttpError(400, "invalid_request", {
+		message: "Invalid request payload.",
+		fields: getErrorFields(result.error.issues),
+		cause: result.error
+	});
+};
+//#endregion
 //#region src/initApi.ts
 var loadInitApiClient = async () => {
 	return (await import("@rpcbase/client")).initApiClient;
@@ -27517,12 +27539,12 @@ var withApiRequestIdExposed = (options) => {
 };
 var initApi = async ({ app, routes, cors: corsOptions, errors }) => {
 	await (await loadInitApiClient())({ app });
-	const registerHandler = (method, path, handler) => {
-		assert(path.startsWith("/api"), "API routes must start with /api");
+	const registerHandler = (method, path, requestSchema, handler) => {
+		assert(typeof path === "string" && path.startsWith("/api"), "API routes must be explicit string paths starting with /api");
 		app[method](path, async (req, res, next) => {
-			const payload = method === "get" ? req.query : req.body ?? {};
+			const requestPayload = method === "get" ? req.query : req.body ?? {};
 			try {
-				const result = await handler(payload, {
+				const result = await handler(requestSchema ? parseApiRequest(requestSchema, requestPayload) : requestPayload, {
 					req,
 					res
 				});
@@ -27534,22 +27556,21 @@ var initApi = async ({ app, routes, cors: corsOptions, errors }) => {
 			}
 		});
 	};
+	const createApiMethod = (method) => ((path, requestSchemaOrHandler, validatedHandler) => {
+		if (validatedHandler === void 0) {
+			registerHandler(method, path, void 0, requestSchemaOrHandler);
+			return;
+		}
+		registerHandler(method, path, requestSchemaOrHandler, validatedHandler);
+	});
 	const api = {
 		use: (path, middleware) => {
 			app.use(path, middleware);
 		},
-		get: (path, handler) => {
-			registerHandler("get", path, handler);
-		},
-		post: (path, handler) => {
-			registerHandler("post", path, handler);
-		},
-		put: (path, handler) => {
-			registerHandler("put", path, handler);
-		},
-		delete: (path, handler) => {
-			registerHandler("delete", path, handler);
-		}
+		get: createApiMethod("get"),
+		post: createApiMethod("post"),
+		put: createApiMethod("put"),
+		delete: createApiMethod("delete")
 	};
 	app.use("/api", (0, import_lib.default)(withApiRequestIdExposed(corsOptions)));
 	app.use("/api", (0, import_express.json)({ limit: "8mb" }));