mirror of https://github.com/pelias/api.git
Julian Simioni
9 years ago
8 changed files with 267 additions and 207 deletions
@ -1,88 +0,0 @@
|
||||
|
||||
var _ = require('lodash'), |
||||
check = require('check-types'), |
||||
types = require('../query/types'); |
||||
|
||||
var ID_DELIM = ':'; |
||||
|
||||
// validate inputs, convert types and apply defaults
|
||||
// id generally looks like 'geoname:4163334' (type:id)
|
||||
// so, both type and id are required fields.
|
||||
|
||||
function errorMessage(fieldname, message) { |
||||
return message || 'invalid param \''+ fieldname + '\': text length, must be >0'; |
||||
} |
||||
|
||||
function sanitize( raw, clean ){ |
||||
|
||||
// error & warning messages
|
||||
var messages = { errors: [], warnings: [] }; |
||||
|
||||
// 'raw.id' can be an array
|
||||
var rawIds = check.array( raw.id ) ? _.unique( raw.id ) : []; |
||||
|
||||
// 'raw.id' can be a string
|
||||
if( check.unemptyString( raw.id ) ){ |
||||
rawIds.push( raw.id ); |
||||
} |
||||
|
||||
// no ids provided
|
||||
if( !rawIds.length ){ |
||||
messages.errors.push( errorMessage('id') ); |
||||
} |
||||
|
||||
// ensure all elements are valid non-empty strings
|
||||
rawIds = rawIds.filter( function( uc ){ |
||||
if( !check.unemptyString( uc ) ){ |
||||
messages.errors.push( errorMessage('id') ); |
||||
return false; |
||||
} |
||||
return true; |
||||
}); |
||||
|
||||
// init 'clean.ids'
|
||||
clean.ids = []; |
||||
|
||||
// cycle through raw ids and set those which are valid
|
||||
rawIds.forEach( function( rawId ){ |
||||
|
||||
var param_index = rawId.indexOf(ID_DELIM); |
||||
var type = rawId.substring(0, param_index ); |
||||
var id = rawId.substring(param_index + 1); |
||||
|
||||
// basic format/ presence of ':'
|
||||
if(param_index === -1) { |
||||
messages.errors.push( |
||||
errorMessage(null, 'invalid: must be of the format type:id for ex: \'geoname:4163334\'') |
||||
); |
||||
} |
||||
|
||||
// id text
|
||||
else if( !check.unemptyString( id ) ){ |
||||
messages.errors.push( errorMessage( rawId ) ); |
||||
} |
||||
// type text
|
||||
else if( !check.unemptyString( type ) ){ |
||||
messages.errors.push( errorMessage( rawId ) ); |
||||
} |
||||
// type text must be one of the types
|
||||
else if( !_.contains( types, type ) ){ |
||||
messages.errors.push( |
||||
errorMessage('type', type + ' is invalid. It must be one of these values - [' + types.join(', ') + ']') |
||||
); |
||||
} |
||||
// add valid id to 'clean.ids' array
|
||||
else { |
||||
clean.ids.push({ |
||||
id: id, |
||||
type: type |
||||
}); |
||||
} |
||||
|
||||
}); |
||||
|
||||
return messages; |
||||
} |
||||
|
||||
// export function
|
||||
module.exports = sanitize; |
@ -0,0 +1,74 @@
|
||||
var _ = require('lodash'), |
||||
check = require('check-types'), |
||||
types = require('../query/types'); |
||||
|
||||
var ID_DELIM = ':'; |
||||
|
||||
// validate inputs, convert types and apply defaults
|
||||
// id generally looks like 'geoname:4163334' (type:id)
|
||||
// so, both type and id are required fields.
|
||||
|
||||
var lengthError = 'invalid param \'ids\': length must be >0'; |
||||
|
||||
var formatError = function(input) { |
||||
return 'id `' + input + 'is invalid: must be of the format type:id for ex: \'geoname:4163334\''; |
||||
}; |
||||
|
||||
function sanitize( raw, clean ){ |
||||
// error & warning messages
|
||||
var messages = { errors: [], warnings: [] }; |
||||
|
||||
// 'raw.ids' can be an array if ids is specified multiple times
|
||||
// see https://github.com/pelias/api/issues/272
|
||||
if (check.array( raw.ids )) { |
||||
messages.errors.push( '`ids` parameter specified multiple times.' ); |
||||
return messages; |
||||
} |
||||
|
||||
if (!check.unemptyString( raw.ids )) { |
||||
messages.errors.push( lengthError); |
||||
return messages; |
||||
} |
||||
|
||||
// split string into array of values
|
||||
var rawIds = raw.ids.split(','); |
||||
|
||||
// deduplicate
|
||||
rawIds = _.unique(rawIds); |
||||
|
||||
// ensure all elements are valid non-empty strings
|
||||
if (!rawIds.every(check.unemptyString)) { |
||||
messages.errors.push( lengthError ); |
||||
} |
||||
|
||||
// cycle through raw ids and set those which are valid
|
||||
var validIds = rawIds.map( function( rawId ){ |
||||
var param_index = rawId.indexOf(ID_DELIM); |
||||
var type = rawId.substring(0, param_index ); |
||||
var id = rawId.substring(param_index + 1); |
||||
|
||||
// check id format
|
||||
if(!check.contains(rawId, ID_DELIM) || !check.unemptyString( id ) || !check.unemptyString( type )) { |
||||
messages.errors.push( formatError(rawId) ); |
||||
} |
||||
// type text must be one of the types
|
||||
else if( !_.contains( types, type ) ){ |
||||
messages.errors.push( type + ' is invalid. It must be one of these values - [' + types.join(', ') + ']' ); |
||||
} |
||||
else { |
||||
return { |
||||
id: id, |
||||
type: type |
||||
}; |
||||
} |
||||
}); |
||||
|
||||
if (validIds.every(check.object)) { |
||||
clean.ids = validIds; |
||||
} |
||||
|
||||
return messages; |
||||
} |
||||
|
||||
// export function
|
||||
module.exports = sanitize; |
@ -0,0 +1,177 @@
|
||||
var sanitize = require('../../../sanitiser/_ids'); |
||||
|
||||
var delimiter = ':'; |
||||
var types = require('../../../query/types'); |
||||
var inputs = { |
||||
valid: [ 'geoname:1', 'osmnode:2', 'admin0:53', 'osmway:44', 'geoname:5' ], |
||||
invalid: [ ':', '', '::', 'geoname:', ':234', 'gibberish:23' ] |
||||
}; |
||||
|
||||
var formatError = function(input) { |
||||
return 'id `' + input + 'is invalid: must be of the format type:id for ex: \'geoname:4163334\''; |
||||
}; |
||||
var lengthError = 'invalid param \'ids\': length must be >0'; |
||||
var defaultMissingTypeError = function(input) { |
||||
var type = input.split(delimiter)[0]; |
||||
return type + ' is invalid. It must be one of these values - [' + types.join(', ') + ']'; |
||||
}; |
||||
|
||||
module.exports.tests = {}; |
||||
|
||||
module.exports.tests.invalid_ids = function(test, common) { |
||||
test('invalid id: empty string', function(t) { |
||||
var raw = { ids: '' }; |
||||
var clean = {}; |
||||
|
||||
var messages = sanitize(raw, clean); |
||||
|
||||
t.equal(messages.errors[0], lengthError, 'ids length error returned'); |
||||
t.equal(clean.ids, undefined, 'ids unset in clean object'); |
||||
t.end(); |
||||
}); |
||||
|
||||
test('invalid id: single colon', function(t) { |
||||
var raw = { ids: ':' }; |
||||
var clean = {}; |
||||
|
||||
var messages = sanitize(raw, clean); |
||||
|
||||
t.equal(messages.errors[0], formatError(':'), 'format error returned'); |
||||
t.equal(clean.ids, undefined, 'ids unset in clean object'); |
||||
t.end(); |
||||
}); |
||||
|
||||
test('invalid id: double colon', function(t) { |
||||
var raw = { ids: '::' }; |
||||
var clean = {}; |
||||
|
||||
var messages = sanitize(raw, clean); |
||||
|
||||
t.equal(messages.errors[0], formatError('::'), 'format error returned'); |
||||
t.equal(clean.ids, undefined, 'ids unset in clean object'); |
||||
t.end(); |
||||
}); |
||||
|
||||
test('invalid id: only type section present', function(t) { |
||||
var raw = { ids: 'geoname:' }; |
||||
var clean = {}; |
||||
|
||||
var messages = sanitize(raw, clean); |
||||
|
||||
t.equal(messages.errors[0], formatError('geoname:'), 'format error returned'); |
||||
t.equal(clean.ids, undefined, 'ids unset in clean object'); |
||||
t.end(); |
||||
}); |
||||
|
||||
test('invalid id: only type id section present', function(t) { |
||||
var raw = { ids: ':234' }; |
||||
var clean = {}; |
||||
|
||||
var messages = sanitize(raw, clean); |
||||
|
||||
t.equal(messages.errors[0], formatError(':234'), 'format error returned'); |
||||
t.equal(clean.ids, undefined, 'ids unset in clean object'); |
||||
t.end(); |
||||
}); |
||||
|
||||
test('invalid id: type name invalid', function(t) { |
||||
var raw = { ids: 'gibberish:23' }; |
||||
var clean = {}; |
||||
|
||||
var messages = sanitize(raw, clean); |
||||
|
||||
t.equal(messages.errors[0], defaultMissingTypeError('gibberish:23'), 'format error returned'); |
||||
t.equal(clean.ids, undefined, 'ids unset in clean object'); |
||||
t.end(); |
||||
}); |
||||
}; |
||||
|
||||
module.exports.tests.valid_ids = function(test, common) { |
||||
test('ids: valid input', function(t) { |
||||
inputs.valid.forEach( function( input ){ |
||||
var input_parts = input.split(delimiter); |
||||
var expected_clean = { ids: [ { id: input_parts[1], type: input_parts[0] } ]}; |
||||
var raw = { ids: input }; |
||||
var clean = {}; |
||||
|
||||
var messages = sanitize( raw, clean ); |
||||
|
||||
t.deepEqual( messages.errors, [], 'no error (' + input + ')' ); |
||||
t.deepEqual( clean, expected_clean, 'clean set correctly (' + input + ')'); |
||||
}); |
||||
t.end(); |
||||
}); |
||||
|
||||
test('ids: valid input with multiple values' , function(t) { |
||||
var raw = { ids: inputs.valid.join(',') }; |
||||
var clean = {}; |
||||
var expected_clean={ |
||||
ids: [], |
||||
}; |
||||
// construct the expected id and type for each valid input
|
||||
inputs.valid.forEach( function( input ){ |
||||
var input_parts = input.split(delimiter); |
||||
expected_clean.ids.push({ id: input_parts[1], type: input_parts[0] }); |
||||
}); |
||||
|
||||
var messages = sanitize( raw, clean ); |
||||
|
||||
t.deepEqual( messages.errors, [], 'no errors' ); |
||||
t.deepEqual( clean, expected_clean, 'clean set correctly' ); |
||||
t.end(); |
||||
}); |
||||
}; |
||||
|
||||
module.exports.tests.array_of_ids = function(test, common) { |
||||
// see https://github.com/pelias/api/issues/272
|
||||
test('array of ids sent by queryparser', function(t) { |
||||
var raw = { ids: ['geoname:2', 'oswmay:4'] }; |
||||
var clean = {}; |
||||
|
||||
var messages = sanitize( raw, clean); |
||||
|
||||
t.deepEqual( messages.errors, ['`ids` parameter specified multiple times.'], 'error sent' ); |
||||
t.deepEqual( clean.ids, undefined, 'response is empty due to error' ); |
||||
t.end(); |
||||
}); |
||||
}; |
||||
|
||||
module.exports.tests.multiple_ids = function(test, common) { |
||||
test('duplicate ids', function(t) { |
||||
var expected_clean = { ids: [ { id: '1', type: 'geoname' }, { id: '2', type: 'osmnode' } ] }; |
||||
var raw = { ids: 'geoname:1,osmnode:2' }; |
||||
var clean = {}; |
||||
|
||||
var messages = sanitize( raw, clean); |
||||
|
||||
t.deepEqual( messages.errors, [], 'no errors' ); |
||||
t.deepEqual( messages.warnings, [], 'no warnings' ); |
||||
t.deepEqual(clean, expected_clean, 'clean set correctly'); |
||||
t.end(); |
||||
}); |
||||
}; |
||||
|
||||
module.exports.tests.de_dupe = function(test, common) { |
||||
test('duplicate ids', function(t) { |
||||
var expected_clean = { ids: [ { id: '1', type: 'geoname' }, { id: '2', type: 'osmnode' } ]}; |
||||
var raw = { ids: 'geoname:1,osmnode:2,geoname:1' }; |
||||
var clean = {}; |
||||
|
||||
var messages = sanitize( raw, clean ); |
||||
|
||||
t.deepEqual( messages.errors, [], 'no errors' ); |
||||
t.deepEqual( messages.warnings, [], 'no warnings' ); |
||||
t.deepEqual(clean, expected_clean, 'clean set correctly'); |
||||
t.end(); |
||||
}); |
||||
}; |
||||
|
||||
module.exports.all = function (tape, common) { |
||||
function test(name, testFunction) { |
||||
return tape('SANTIZE _ids ' + name, testFunction); |
||||
} |
||||
|
||||
for( var testCase in module.exports.tests ){ |
||||
module.exports.tests[testCase](test, common); |
||||
} |
||||
}; |
Loading…
Reference in new issue