versia-pub/server
2
0
Fork 0
mirror of https://github.com/versia-pub/server.git synced 2025-12-06 08:28:19 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(api): 🐛 Automatically trim every relevant API request field to remove extra whitespace

Browse source
This commit is contained in:
Jesse Wierzbinski 2024-04-28 14:05:07 -10:00
parent aee47e6df4
commit 065b37f091
No known key found for this signature in database
13 changed files with 32 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
server/api/api/auth/login/index.ts
View file

@ -21,7 +21,7 @@ export const meta = applyConfig({
});
export const schema = z.object({
email: z.string().email(),
email: z.string().email().toLowerCase(),
password: z.string().min(2).max(100),
scope: z.string().optional(),
redirect_uri: z.string().url().optional(),

2
server/api/api/auth/mastodon-login/index.ts
View file

@ -22,7 +22,7 @@ export const meta = applyConfig({
export const schema = z.object({
user: z.object({
email: z.string().email(),
email: z.string().email().toLowerCase(),
password: z.string().max(100).min(3),
}),
});

2
server/api/api/v1/accounts/[id]/note.ts
View file

@ -22,7 +22,7 @@ export const meta = applyConfig({
});
export const schema = z.object({
comment: z.string().min(0).max(5000).optional(),
comment: z.string().min(0).max(5000).trim().optional(),
});
/**

2
server/api/api/v1/accounts/index.ts
View file

@ -23,7 +23,7 @@ export const meta = applyConfig({
// No validation on the Zod side as we need to do custom validation
export const schema = z.object({
username: z.string().toLowerCase(),
email: z.string(),
email: z.string().toLowerCase(),
password: z.string(),
agreement: z.boolean(),
locale: z.string(),

18
server/api/api/v1/accounts/update_credentials/index.ts
View file

@ -32,9 +32,15 @@ export const schema = z.object({
display_name: z
.string()
.min(3)
.trim()
.max(config.validation.max_displayname_size)
.optional(),
note: z.string().min(0).max(config.validation.max_bio_size).optional(),
note: z
.string()
.min(0)
.max(config.validation.max_bio_size)
.trim()
.optional(),
avatar: z.instanceof(File).optional(),
header: z.instanceof(File).optional(),
locked: z.boolean().optional(),
@ -54,8 +60,14 @@ export const schema = z.object({
fields_attributes: z
.array(
z.object({
name: z.string().max(config.validation.max_field_name_size),
value: z.string().max(config.validation.max_field_value_size),
name: z
.string()
.trim()
.max(config.validation.max_field_name_size),
value: z
.string()
.trim()
.max(config.validation.max_field_value_size),
}),
)
.max(config.validation.max_field_count)

4
server/api/api/v1/apps/index.ts
View file

@ -1,6 +1,6 @@
import { randomBytes } from "node:crypto";
import { apiRoute, applyConfig } from "@api";
import { errorResponse, jsonResponse } from "@response";
import { jsonResponse } from "@response";
import { z } from "zod";
import { db } from "~drizzle/db";
import { Applications } from "~drizzle/schema";
@ -18,7 +18,7 @@ export const meta = applyConfig({
});
export const schema = z.object({
client_name: z.string().min(1).max(100),
client_name: z.string().trim().min(1).max(100),
redirect_uris: z.string().min(0).max(2000).url(),
scopes: z.string().min(1).max(200),
website: z.string().min(0).max(2000).url().optional(),

2
server/api/api/v1/statuses/[id]/index.ts
View file

@ -20,7 +20,7 @@ export const meta = applyConfig({
});
export const schema = z.object({
status: z.string().max(config.validation.max_note_size).optional(),
status: z.string().trim().max(config.validation.max_note_size).optional(),
// TODO: Add regex to validate
content_type: z.string().optional().default("text/plain"),
media_ids: z

4
server/api/api/v1/statuses/index.ts
View file

@ -20,14 +20,14 @@ export const meta = applyConfig({
});
export const schema = z.object({
status: z.string().max(config.validation.max_note_size).optional(),
status: z.string().max(config.validation.max_note_size).trim().optional(),
// TODO: Add regex to validate
content_type: z.string().optional().default("text/plain"),
media_ids: z
.array(z.string().regex(idValidator))
.max(config.validation.max_media_attachments)
.optional(),
spoiler_text: z.string().max(255).optional(),
spoiler_text: z.string().max(255).trim().optional(),
sensitive: z.boolean().optional(),
language: z.enum(ISO6391.getAllCodes() as [string, ...string[]]).optional(),
"poll[options]": z

4
server/api/api/v2/filters/[id]/index.ts
View file

@ -18,7 +18,7 @@ export const meta = applyConfig({
});
export const schema = z.object({
title: z.string().min(1).max(100).optional(),
title: z.string().trim().min(1).max(100).optional(),
context: z
.array(z.enum(["home", "notifications", "public", "thread", "account"]))
.optional(),
@ -32,7 +32,7 @@ export const schema = z.object({
keywords_attributes: z
.array(
z.object({
keyword: z.string().min(1).max(100).optional(),
keyword: z.string().trim().min(1).max(100).optional(),
id: z.string().regex(idValidator).optional(),
whole_word: z.boolean().optional(),
_destroy: z.boolean().optional(),

4
server/api/api/v2/filters/index.ts
View file

@ -18,7 +18,7 @@ export const meta = applyConfig({
});
export const schema = z.object({
title: z.string().min(1).max(100).optional(),
title: z.string().trim().min(1).max(100).optional(),
context: z
.array(z.enum(["home", "notifications", "public", "thread", "account"]))
.optional(),
@ -32,7 +32,7 @@ export const schema = z.object({
keywords_attributes: z
.array(
z.object({
keyword: z.string().min(1).max(100),
keyword: z.string().trim().min(1).max(100),
whole_word: z.boolean().optional(),
}),
)

2
server/api/api/v2/search/index.ts
View file

@ -25,7 +25,7 @@ export const meta = applyConfig({
});
export const schema = z.object({
q: z.string().optional(),
q: z.string().trim().optional(),
type: z.string().optional(),
resolve: z.coerce.boolean().optional(),
following: z.coerce.boolean().optional(),

4
server/api/oauth/token/index.ts
View file

@ -33,8 +33,8 @@ export const schema = z.object({
]),
client_id: z.string().optional(),
client_secret: z.string().optional(),
username: z.string().optional(),
password: z.string().optional(),
username: z.string().trim().optional(),
password: z.string().trim().optional(),
redirect_uri: z.string().url().optional(),
refresh_token: z.string().optional(),
scope: z.string().optional(),

2
server/api/well-known/webfinger/index.ts
View file

@ -19,7 +19,7 @@ export const meta = applyConfig({
});
export const schema = z.object({
resource: z.string().min(1).max(512),
resource: z.string().trim().min(1).max(512),
});
export default apiRoute<typeof meta, typeof schema>(