swagger-route-validator/bin/middleware.js

The fastest openapi validation middleware

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.expressRequestValidation = expressRequestValidation;
exports.expressResponseValidation = expressResponseValidation;
const request_1 = require("./request");
const response_1 = require("./response");
function expressError(message, statusCode, title) {
    this.message = message;
    this.statusCode = statusCode;
    this.status = statusCode;
    this.title = title;
}
function expressRequestValidation(routeSpec, spec) {
    return function SRVRequestValidation(req, res, next) {
        if (!req.route)
            throw new Error('Request validation was added to a non-route middleware.');
        const errors = (0, request_1.validateRequest)(routeSpec, req, spec);
        if (errors.length > 0) {
            const errorObj = new expressError(`Request object does not match the specification for this route: ${JSON.stringify(errors)}`, 400, 'Bad Request');
            Object.setPrototypeOf(errorObj, Error.prototype);
            throw errorObj;
        }
        next();
    };
}
function expressResponseValidation(routeSpec, options, spec) {
    if (Object.keys(routeSpec.responses).length < 1)
        throw new Error('Body cannot be validated because it does not have any defined responses');
    if (!options.behavior)
        options.behavior = 'error';
    if (options.behavior !== 'error' && options.behavior !== 'warn')
        throw new Error(`Unknown value "${options.behavior}" for behavior option`);
    return function SRVResponseValidation(req, res, next) {
        var oldSend = res.send;
        res.send = function (data) {
            if (!res._validated) {
                res._validated = true;
                let errors;
                try {
                    errors = (0, response_1.validateResponse)(routeSpec, JSON.parse(data), res, spec);
                }
                catch (e) {
                    const errorObj = new expressError(`Response could not be parsed as JSON: ${JSON.stringify(e)}`, 422, 'Unprocessable Content');
                    Object.setPrototypeOf(errorObj, Error.prototype);
                    throw errorObj;
                }
                if (errors.length > 0) {
                    const errorMessage = `Response body does not match the specification for this route: ${JSON.stringify(errors)}`;
                    if (options.behavior === 'warn')
                        console.log(errorMessage);
                    else {
                        const errorObj = new expressError(errorMessage, 422, 'Unprocessable Content');
                        Object.setPrototypeOf(errorObj, Error.prototype);
                        throw errorObj;
                    }
                }
            }
            oldSend.apply(res, arguments);
        };
        next();
    };
}