linagora-rse/backend/webserver/middleware/request.js

Linagora RSE

'use strict';

var ObjectId = require('mongoose').Types.ObjectId;

module.exports.requireQueryParams = function(/* ...params */) {
  var params = arguments;
  return function(req, res, next) {
    for (var i = 0; i < params.length; i++) {
      var param = params[i];
      if (!(param in req.query)) {
        return res.status(400).json({ error: 400, message: 'Parameter missing', details: param });
      }
    }
    return next();
  };
};

module.exports.requireRouteParams = function(/* ...params */) {
  var params = arguments;
  return function(req, res, next) {
    for (var i = 0; i < params.length; i++) {
      var param = params[i];
      if (!(param in req.params)) {
        return res.status(400).json({ error: 400, message: 'Route Parameter missing', details: param });
      }
    }
    return next();
  };
};

module.exports.requireBody = function(req, res, next) {
  if (!req.body) {
    return res.status(400).json({ error: 400, message: 'Bad Request', details: 'Missing data in body' });
  }
  return next();
};

module.exports.castParamToObjectId = function(/* ...params */) {
  var params = arguments;
  return function(req, res, next) {
    for (var i = 0; i < params.length; i++) {
      var param = params[i];
      if (!(param in req.params)) {
        return res.status(400).json({ error: 400, message: 'Parameter missing', details: param });
      }

      var id;
      try {
        id = new ObjectId(req.params[param]);
      } catch (err) {
        return res.status(400).json({error: {code: 400, message: 'Bad request', details: 'not a valid ObjectId (' + param + ')'}});
      }
      req.params[param] = id;
    }
    return next();
  };
};

module.exports.assertRequestElementNotNull = function(elementName) {
  return function(req, res, next) {
    if (!req[elementName]) {
      return res.status(404).json({error: {code: 404, message: 'Not found', details: elementName + ' can not be found'}});
    }
    next();
  };
};

module.exports.assertRequestElementArrayAndNotEmpty = function(elementName) {
  return function(req, res, next) {
    if (!req[elementName] || req[elementName].length === 0) {
      return res.status(400).json({error: {code: 400, message: 'Bad request', details: 'Request element ' + elementName + ' can not be null or empty'}});
    }
    next();
  };
};