api/sanitiser/sanitise.js

var logger = require('../src/logger'),
    indeces = require('../query/indeces');

// validate inputs, convert types and apply defaults
function sanitize( params, cb ){

  var clean = {};

  // ensure the input params are a valid object
  if( Object.prototype.toString.call( params ) !== '[object Object]' ){
    params = {};
  }

  // input text
  if('string' !== typeof params.input || !params.input.length){
    return cb( 'invalid param \'input\': text length, must be >0' );
  }
  clean.input = params.input;

  // total results
  var size = parseInt( params.size, 10 );
  if( !isNaN( size ) ){
    clean.size = Math.min( Math.max( size, 1 ), 40 ); // max
  } else {
    clean.size = 10; // default
  }

  // which layers to query
  if('string' === typeof params.layers && params.layers.length){
    var layers = params.layers.split(',').map( function( layer ){
      return layer.toLowerCase(); // lowercase inputs
    });
    for( var x=0; x<layers.length; x++ ){
      if( -1 === indeces.indexOf( layers[x] ) ){
        return cb( 'invalid param \'layer\': must be one or more of ' + indeces.join(',') );
      }
    }
    clean.layers = layers;
  }
  else {
    clean.layers = indeces; // default (all layers)
  }

  // lat
  var lat = parseFloat( params.lat, 10 );
  if( isNaN( lat ) || lat < 0 || lat > 90 ){
    return cb( 'invalid param \'lat\': must be >0 and <90' );
  }
  clean.lat = lat;

  // lon
  var lon = parseFloat( params.lon, 10 );
  if( isNaN( lon ) || lon < -180 || lon > 180 ){
    return cb( 'invalid param \'lon\': must be >-180 and <180' );
  }
  clean.lon = lon;

  // zoom level
  var zoom = parseInt( params.zoom, 10 );
  if( !isNaN( zoom ) ){
    clean.zoom = Math.min( Math.max( zoom, 1 ), 18 ); // max
  } else {
    clean.zoom = 10; // default
  }

  return cb( undefined, clean );

}

// export function
module.exports = sanitize;

// middleware
module.exports.middleware = function( req, res, next ){
  sanitize( req.query, function( err, clean ){
    if( err ){
      res.status(400); // 400 Bad Request
      return next(err);
    }
    req.clean = clean;
    next();
  });
};