Validate API request query (#4642)
* fix: refactor to accommodate authentication, transaction and pagination together into ctx.state * feat: allow passing response type to APIContext * feat: preliminary work for initial review * fix: use unknown for base types * fix: api/attachments * fix: api/documents * fix: jsdoc comment for input * fix: replace at() with index access for compatibility * fix: validation err message * fix: error handling * fix: remove unnecessary extend
This commit is contained in:
@@ -1,28 +1,49 @@
|
||||
import { isEmpty } from "lodash";
|
||||
import { z } from "zod";
|
||||
import { AttachmentPreset } from "@shared/types";
|
||||
import BaseSchema from "@server/routes/api/BaseSchema";
|
||||
|
||||
export const AttachmentsCreateSchema = z.object({
|
||||
/** Attachment name */
|
||||
name: z.string(),
|
||||
export const AttachmentsCreateSchema = BaseSchema.extend({
|
||||
body: z.object({
|
||||
/** Attachment name */
|
||||
name: z.string(),
|
||||
|
||||
/** Id of the document to which the Attachment belongs */
|
||||
documentId: z.string().uuid().optional(),
|
||||
/** Id of the document to which the Attachment belongs */
|
||||
documentId: z.string().uuid().optional(),
|
||||
|
||||
/** File size of the Attachment */
|
||||
size: z.number(),
|
||||
/** File size of the Attachment */
|
||||
size: z.number(),
|
||||
|
||||
/** Content-Type of the Attachment */
|
||||
contentType: z.string().optional().default("application/octet-stream"),
|
||||
/** Content-Type of the Attachment */
|
||||
contentType: z.string().optional().default("application/octet-stream"),
|
||||
|
||||
/** Attachment type */
|
||||
preset: z.nativeEnum(AttachmentPreset),
|
||||
/** Attachment type */
|
||||
preset: z.nativeEnum(AttachmentPreset),
|
||||
}),
|
||||
});
|
||||
|
||||
export type AttachmentCreateReq = z.infer<typeof AttachmentsCreateSchema>;
|
||||
|
||||
export const AttachmentDeleteSchema = z.object({
|
||||
/** Id of the attachment to be deleted */
|
||||
id: z.string().uuid(),
|
||||
export const AttachmentDeleteSchema = BaseSchema.extend({
|
||||
body: z.object({
|
||||
/** Id of the attachment to be deleted */
|
||||
id: z.string().uuid(),
|
||||
}),
|
||||
});
|
||||
|
||||
export type AttachmentDeleteReq = z.infer<typeof AttachmentDeleteSchema>;
|
||||
|
||||
export const AttachmentsRedirectSchema = BaseSchema.extend({
|
||||
body: z.object({
|
||||
/** Id of the attachment to be deleted */
|
||||
id: z.string().uuid().optional(),
|
||||
}),
|
||||
query: z.object({
|
||||
/** Id of the attachment to be deleted */
|
||||
id: z.string().uuid().optional(),
|
||||
}),
|
||||
}).refine((req) => !(isEmpty(req.body.id) && isEmpty(req.query.id)), {
|
||||
message: "id is required",
|
||||
});
|
||||
|
||||
export type AttachmentsRedirectReq = z.infer<typeof AttachmentsRedirectSchema>;
|
||||
|
||||
Reference in New Issue
Block a user