fastify-txstate 3.2.5 → 3.2.7

package/lib/error.d.ts

@@ -1,3 +1,4 @@
+import { type FastifySchemaValidationError } from 'fastify/types/schema';
 export declare class HttpError extends Error {
     statusCode: number;
     constructor(statusCode: number, message?: string);
@@ -7,4 +8,9 @@ export declare class FailedValidationError extends HttpError {
     errors: ValidationErrors;
     constructor(errors: ValidationErrors);
 }
+export declare function fstValidationToMessage(v: FastifySchemaValidationError): {
+    message: string | undefined;
+    path: string;
+    type: string;
+};
 export {};

package/lib/error.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FailedValidationError = exports.HttpError = void 0;
+exports.fstValidationToMessage = exports.FailedValidationError = exports.HttpError = void 0;
 const http_status_codes_1 = require("http-status-codes");
 class HttpError extends Error {
     constructor(statusCode, message) {
@@ -24,3 +24,8 @@ class FailedValidationError extends HttpError {
     }
 }
 exports.FailedValidationError = FailedValidationError;
+function fstValidationToMessage(v) {
+    const instancePath = v.keyword === 'required' ? v.instancePath + '/' + v.params.missingProperty : v.instancePath;
+    return { message: v.message, path: instancePath.substring(1).replace(/\//g, '.'), type: 'error' };
+}
+exports.fstValidationToMessage = fstValidationToMessage;

package/lib/index.js

@@ -20,6 +20,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.prodLogger = exports.devLogger = void 0;
 const swagger_1 = __importDefault(require("@fastify/swagger"));
 const swagger_ui_1 = __importDefault(require("@fastify/swagger-ui"));
+const fastify_shared_1 = require("@txstate-mws/fastify-shared");
 const ajv_errors_1 = __importDefault(require("ajv-errors"));
 const ajv_formats_1 = __importDefault(require("ajv-formats"));
 const fastify_1 = require("fastify");
@@ -108,25 +109,10 @@ class Server {
             if (!((_a = route.schema) === null || _a === void 0 ? void 0 : _a.body))
                 return;
             const missingResponse = ((_b = route.schema) === null || _b === void 0 ? void 0 : _b.response) == null;
-            const newSchema = (0, txstate_utils_1.set)((_c = route.schema) !== null && _c !== void 0 ? _c : {}, 'response.422', {
-                description: 'Validation failure.',
-                type: 'object',
-                properties: {
-                    errors: {
-                        type: 'array',
-                        items: {
-                            type: 'object',
-                            properties: {
-                                type: { type: 'string', enum: ['error', 'warning', 'success', 'system'], example: 'error' },
-                                message: { type: 'string', example: 'must be an integer' },
-                                path: { type: 'string', example: 'cart.item.0.quantity', description: 'Dot-separated path to the field in the request body that caused the validation error.' }
-                            },
-                            required: ['type', 'message'],
-                            additionalProperties: false
-                        }
-                    }
-                }
-            });
+            const response400 = (0, txstate_utils_1.set)(fastify_shared_1.validatedResponse.properties.messages, 'description', 'Basic validation failure. This means that the UI provided input that failed validation as defined in the openapi specification published by the API. The UI is at fault and should be re-coded to avoid sending invalid data.');
+            let newSchema = (0, txstate_utils_1.set)((_c = route.schema) !== null && _c !== void 0 ? _c : {}, 'response.400', response400);
+            const response422 = (0, txstate_utils_1.set)(fastify_shared_1.validatedResponse, 'description', 'Validation failure. This means that the user provided an invalid object. The user should be shown their error so that they can correct it.');
+            newSchema = (0, txstate_utils_1.set)(newSchema, 'response.422', response422);
             if (missingResponse) {
                 newSchema.response['200'] = {
                     description: 'Success. Return type has not been specified.',
@@ -213,7 +199,7 @@ class Server {
             });
         this.app.setNotFoundHandler((req, res) => { void res.status(404).send('Not Found.'); });
         this.app.setErrorHandler(async (err, req, res) => {
-            var _a, _b;
+            var _a;
             req.log.warn(err);
             for (const errorHandler of this.errorHandlers) {
                 if (!res.sent)
@@ -227,7 +213,28 @@ class Server {
                     await res.status(err.statusCode).send(err.message);
                 }
                 else if (err.code === 'FST_ERR_VALIDATION') {
-                    await res.status(422).send({ errors: (_b = (_a = err.validation) === null || _a === void 0 ? void 0 : _a.map(err => ({ message: err.message, path: err.instancePath.substring(1).replace(/\//g, '.'), type: 'error' }))) !== null && _b !== void 0 ? _b : [] });
+                    const developerErrors = [];
+                    const userErrors = [];
+                    for (const v of (_a = err.validation) !== null && _a !== void 0 ? _a : []) {
+                        if (v.keyword === 'errorMessage') {
+                            for (const ov of v.params.errors) {
+                                if (['type', 'additionalProperties'].includes(ov.keyword))
+                                    developerErrors.push({ ...ov, message: v.message });
+                                else
+                                    userErrors.push({ ...ov, message: v.message });
+                            }
+                        }
+                        else {
+                            if (['type', 'additionalProperties'].includes(v.keyword))
+                                developerErrors.push(v);
+                            else
+                                userErrors.push(v);
+                        }
+                    }
+                    if (userErrors.length)
+                        await res.status(422).send({ success: false, messages: userErrors.map(error_1.fstValidationToMessage) });
+                    else
+                        await res.status(400).send(developerErrors.map(error_1.fstValidationToMessage));
                 }
                 else if (err.statusCode) {
                     await res.status(err.statusCode).send(new error_1.HttpError(err.statusCode).message);

package/lib/unified-auth.d.ts

@@ -29,6 +29,7 @@ declare class Context<AuthType extends FastifyTxStateAuthInfo = FastifyTxStateAu
     }>;
     constructor(req?: FastifyRequest);
     waitForAuth(): Promise<AuthType | undefined>;
+    protected static hasInitialized: boolean;
     static init(): void;
     /**
      * If implemented, this method will be called on startup, once per configured issuer. It receives
@@ -58,5 +59,5 @@ declare class TxStateUAuthContext extends Context {
     authFromPayload(payload: JWTPayload): Promise<FastifyTxStateAuthInfo>;
 }
 export declare function unifiedAuthenticate(req: FastifyRequest, ContextClass?: typeof TxStateUAuthContext): Promise<FastifyTxStateAuthInfo | undefined>;
-export declare function unifiedAuthenticateAll(req: FastifyRequest, ContextClass?: typeof TxStateUAuthContext): Promise<FastifyTxStateAuthInfo>;
+export declare function unifiedAuthenticateAll(req: FastifyRequest, ContextClass?: typeof TxStateUAuthContext): Promise<FastifyTxStateAuthInfo | undefined>;
 export {};

package/lib/unified-auth.js

@@ -28,6 +28,9 @@ class Context extends MockContext {
     }
     static init() {
         var _b;
+        if (this.hasInitialized)
+            return;
+        this.hasInitialized = true;
         let secret = cleanPem(process.env.JWT_SECRET_VERIFY);
         if (secret != null) {
             _a.jwtVerifyKey = (0, crypto_1.createPublicKey)(secret);
@@ -102,6 +105,7 @@ Context.tokenCache = new txstate_utils_1.Cache(async (token, { req, ctx }) => {
         return undefined;
     }
 }, { freshseconds: 10 });
+Context.hasInitialized = false;
 class TxStateUAuthContext extends Context {
     static processIssuerConfig(config) {
         var _b;
@@ -132,14 +136,17 @@ class TxStateUAuthContext extends Context {
     }
 }
 async function unifiedAuthenticate(req, ContextClass = TxStateUAuthContext) {
+    ContextClass.init();
     const ctx = new ContextClass(req);
     return ctx.waitForAuth();
 }
 exports.unifiedAuthenticate = unifiedAuthenticate;
 async function unifiedAuthenticateAll(req, ContextClass = TxStateUAuthContext) {
+    var _b;
+    ContextClass.init();
     const ctx = new ContextClass(req);
     const auth = await ctx.waitForAuth();
-    if (!(auth === null || auth === void 0 ? void 0 : auth.username.length))
+    if (!(auth === null || auth === void 0 ? void 0 : auth.username.length) && !((_b = req.routeOptions.url) === null || _b === void 0 ? void 0 : _b.startsWith('/docs')))
         throw new Error('All requests require authentication.');
     return auth;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fastify-txstate",
-  "version": "3.2.5",
+  "version": "3.2.7",
   "description": "A small wrapper for fastify providing a set of common conventions & utility functions we use.",
   "exports": {
     ".": {
@@ -22,7 +22,7 @@
     "@fastify/swagger": "^8.14.0",
     "@fastify/swagger-ui": "^3.0.0",
     "@fastify/type-provider-json-schema-to-ts": "^3.0.0",
-    "@txstate-mws/fastify-shared": "^1.0.4",
+    "@txstate-mws/fastify-shared": "^1.0.9",
     "ajv-errors": "^3.0.0",
     "ajv-formats": "^2.1.1",
     "fastify": "^4.9.2",