not-node 6.2.12 → 6.2.14

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "not-node",
-	"version": "6.2.12",
+	"version": "6.2.14",
 	"description": "node complimentary part for client side notFramework.",
 	"main": "index.js",
 	"scripts": {
@@ -35,6 +35,7 @@
 		"url": "https://github.com/interrupter/not-node/issues"
 	},
 	"dependencies": {
+		"xss": "*",
 		"body-parser": "^1.20.1",
 		"commander": "^9.5.0",
 		"compression": "^1.7.4",

package/src/form/form.js

@@ -327,9 +327,10 @@ class Form {
     }
 
     #extractByInstructionPipe({ results, instructions, fieldName, req }) {
-        if (instructions.length === 0) {
+        if (!instructions || instructions.length === 0) {
             throw new FormExceptionExtractorForFieldIsUndefined(fieldName);
         }
+        //
         this.#extractByInstruction({
             results,
             instruction: instructions[0],
@@ -380,7 +381,7 @@ class Form {
 
     createInstructionFromRouteActionFields(
         req,
-        mainInstruction = "fromBody",
+        mainInstruction = ["fromBody", "xss"],
         exceptions = {}
     ) {
         const result = {};
@@ -397,7 +398,7 @@ class Form {
 
     extractByInstructionsFromRouteActionFields(
         req,
-        mainInstruction = "fromBody",
+        mainInstruction = ["fromBody", "xss"],
         exceptions = {}
     ) {
         const instructions = this.createInstructionFromRouteActionFields(

package/src/form/transformers/index.js

@@ -4,4 +4,5 @@
 
 module.exports = {
     stringToJSON: require("./stringToJSON.js"),
+    xss: require("./xss.js"),
 };

package/src/form/transformers/xss.js

@@ -0,0 +1,2 @@
+const xss = require("xss");
+module.exports = (val) => xss(val);

package/src/generic/form.authorizedAction.js

@@ -0,0 +1,28 @@
+//DB related validation tools
+const Form = require("../form/form");
+const { firstLetterToUpper } = require("../common");
+//not-node
+const { getIP } = require("../auth");
+//form
+const FIELDS = [
+    ["activeUserId", { required: true }, "not-node//objectId"],
+    ["activeUser", "not-node//requiredObject"],
+    ["ip", "not-node//ip"],
+];
+
+module.exports = ({ MODULE_NAME, actionName }) => {
+    const FORM_NAME = `${MODULE_NAME}:${firstLetterToUpper(actionName)}Form`;
+    return class extends Form {
+        constructor({ app }) {
+            super({ FIELDS, FORM_NAME, app });
+        }
+
+        extract(req) {
+            return {
+                activeUser: req?.user,
+                activeUserId: req?.user._id,
+                ip: getIP(req),
+            };
+        }
+    };
+};

package/src/generic/index.js

@@ -2,6 +2,7 @@ module.exports.GenericLogic = require("./logic.js");
 module.exports.GenericRoute = require("./route.js");
 module.exports.GenericGetByIdForm = require("./form.getById.js");
 module.exports.GenericGetByIDForm = require("./form.getByID.js");
+module.exports.GenericAuthorizedActionForm = require("./form.authorizedAction.js");
 module.exports.GenericListAndCountForm = require("./form.listAndCount.js");
 
 const FORMS = {};