feat: added checkRequired middleware for API calls

NodeBB · Oct 8, 2020 · 7b6d43b · 7b6d43b
1 parent fd67355
commit 7b6d43b
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 6 deletions.
diff --git a/src/middleware/index.js b/src/middleware/index.js
@@ -237,3 +237,14 @@ middleware.validateAuth = helpers.try(async function validateAuth(req, res, next
 		next(err);
 	}
 });
+
+middleware.checkRequired = function (fields, req, res, next) {
+	// Used in API calls to ensure that necessary parameters/data values are present
+	const missing = fields.filter(field => !req.body.hasOwnProperty(field));
+
+	if (!missing.length) {
+		next();
+	}
+
+	controllers.helpers.formatApiResponse(400, res, new Error('Required parameters were missing from this API call: ' + missing.join(', ')));
+};
diff --git a/src/routes/write/users.js b/src/routes/write/users.js
@@ -15,12 +15,7 @@ const helpers = require('../../controllers/helpers');
 module.exports = function () {
 	var app = require('express').Router();
 
-	app.post('/', middleware.authenticate, middleware.isAdmin, async (req, res) => {
-		helpers.checkRequired(['username'], req, res);
-		// if (!utils.checkRequired(['username'], req, res)) {
-		// 	return false;
-		// }
-
+	app.post('/', middleware.checkRequired.bind(null, ['username']), middleware.authenticate, middleware.isAdmin, async (req, res) => {
 		const uid = await users.create(req.body);
 		helpers.formatApiResponse(200, res, {
 			uid: uid,