fastify-txstate 3.2.13 → 3.2.15

package/lib/index.js

@@ -18,6 +18,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.prodLogger = exports.devLogger = void 0;
+const ajv_1 = __importDefault(require("ajv"));
 const swagger_1 = __importDefault(require("@fastify/swagger"));
 const swagger_ui_1 = __importDefault(require("@fastify/swagger-ui"));
 const fastify_shared_1 = require("@txstate-mws/fastify-shared");
@@ -103,7 +104,7 @@ class Server {
             else
                 config.trustProxy = process.env.TRUST_PROXY;
         }
-        config.ajv = { ...config.ajv, plugins: [...(config.ajv?.plugins ?? []), ajv_errors_1.default, [ajv_formats_1.default, { mode: 'fast' }]], customOptions: { ...config.ajv?.customOptions, allErrors: true, strictSchema: false } };
+        config.ajv = { ...config.ajv, plugins: [...(config.ajv?.plugins ?? []), ajv_errors_1.default, [ajv_formats_1.default, { mode: 'fast' }]], customOptions: { ...config.ajv?.customOptions, allErrors: true, strictSchema: false, coerceTypes: true } };
         this.healthCallback = config.checkHealth;
         this.app = (0, fastify_1.fastify)(config);
         this.app.addHook('onRoute', route => {
@@ -117,21 +118,40 @@ class Server {
             if (missingResponse) {
                 newSchema.response['200'] = {
                     description: 'Success. Return type has not been specified.',
-                    type: 'null'
+                    type: 'object'
                 };
             }
             route.schema = newSchema;
         });
-        /**
-         * Fastify validates response schema while serializing the response
-         *
-         * This is great, but because Ajv treats optional properties as non-nullable, optional
-         * properties that are set to `null` instead of `undefined` will fail validation (or with `coerceTypes`,
-         * be converted to empty string or 0 or false). This is silly behavior, so we're adding a hook to
-         * convert all nulls to undefined before fastify validates.
-         */
-        this.app.addHook('preSerialization', async (req, res, payload) => {
-            return req.routeOptions.schema?.response ? (0, txstate_utils_1.destroyNulls)(payload) : payload;
+        this.app.addHook('preValidation', (req, res, done) => {
+            if (req.body != null && req.routeOptions.schema?.body)
+                (0, txstate_utils_1.destroyNulls)(req.body);
+            done();
+        });
+        // use Ajv to validate responses instead of @fastify/json-fast-stringify since ajv does
+        // a better job with recursive types and we don't want to have different behavior between
+        // input and output validation
+        const ajv = new ajv_1.default(config.ajv.customOptions);
+        for (const pluginConfig of config.ajv.plugins ?? []) {
+            const [plugin, opts] = (0, txstate_utils_1.toArray)(pluginConfig);
+            plugin(ajv, opts);
+        }
+        this.app.setSerializerCompiler((route) => {
+            const schema = route.schema;
+            const validate = schema == null ? ajv.compile({ type: 'object' }) : ajv.compile(schema);
+            return data => {
+                /**
+                 * Ajv unfortunately treats optional properties as non-nullable, so they're allowed to
+                 * be undefined but not allowed to be null. Worse, with `coerceTypes`, null will be converted
+                 * to empty string or 0 or false. This is silly behavior, so we're converting all nulls to
+                 * undefined before we validate.
+                 */
+                if (schema != null)
+                    (0, txstate_utils_1.destroyNulls)(data);
+                if (!validate(data))
+                    throw new Error('Output validation failed. ' + validate.errors?.[0].instancePath + ': ' + validate.errors?.[0].message);
+                return JSON.stringify(data);
+            };
         });
         if (!config.skipOriginCheck && !process.env.SKIP_ORIGIN_CHECK) {
             this.setValidOrigins([...(config.validOrigins ?? []), ...(process.env.VALID_ORIGINS?.split(',') ?? [])]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fastify-txstate",
-  "version": "3.2.13",
+  "version": "3.2.15",
   "description": "A small wrapper for fastify providing a set of common conventions & utility functions we use.",
   "exports": {
     ".": {
@@ -18,7 +18,7 @@
     "testserver": "node -r ts-node/register --no-warnings testserver/index.ts"
   },
   "dependencies": {
-    "@elastic/elasticsearch": "^8.12.2",
+    "@elastic/elasticsearch": "^8.13.0",
     "@fastify/swagger": "^8.14.0",
     "@fastify/swagger-ui": "^3.0.0",
     "@fastify/type-provider-json-schema-to-ts": "^3.0.0",