feat: validate account.tokens.type

hoodiehq · Nov 20, 2016 · f5adbaf · f5adbaf
1 parent e9e4f59
commit f5adbaf
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 0 deletions.
diff --git a/lib/account.js b/lib/account.js
@@ -1,12 +1,18 @@
 module.exports = account
 
 var addTokenToUserDoc = require('./utils/add-token-to-user-doc')
+var errors = require('./utils/errors')
 var findUserDoc = require('./utils/find-user-doc-by-username-or-id-or-token')
+var isValidTokenType = require('./utils/is-valid-token-type')
 
 function account (setupPromise, state, findAccountOptions) {
   return {
     tokens: {
       add: function (tokenOptions) {
+        if (!isValidTokenType(tokenOptions.type)) {
+          return Promise.reject(errors.TOKEN_TYPE_INVALID)
+        }
+
         return setupPromise
 
         .then(function () {

diff --git a/lib/utils/errors.js b/lib/utils/errors.js
@@ -37,3 +37,9 @@ module.exports.USERNAME_EMPTY = hoodieError({
   message: 'username must be set',
   status: 400
 })
+
+module.exports.TOKEN_TYPE_INVALID = hoodieError({
+  name: 'Bad Request',
+  message: 'Token type must consist of lowercase letters (a-z), digits (0-9), _ and - only. Must begin with a letter',
+  status: 400
+})
diff --git a/lib/utils/is-valid-token-type.js b/lib/utils/is-valid-token-type.js
@@ -0,0 +1,12 @@
+module.exports = isValidTokenType
+
+function isValidTokenType (token) {
+  var validPattern = /^[a-z][a-z0-9\-_]*$/
+
+  if (typeof token !== 'string' ||
+  !validPattern.test(token)) {
+    return false
+  }
+
+  return true
+}