feat: validate pipe uuid

Author: Mateus Garcia

libs/json-api-nestjs/src/lib/mixin/pipes/index.ts

@@ -10,8 +10,9 @@ import { BodyInputPatchPipe } from './body-input-patch/body-input-patch.pipe';
 import { ParseRelationshipNamePipe } from './parse-relationship-name/parse-relationship-name.pipe';
 import { BodyRelationshipPipe } from './body-relationship/body-relationship.pipe';
 import { BodyRelationshipPatchPipe } from './body-relationship-patch/body-relationship-patch.pipe';
-import { ConfigParam, Entity, PipeMixin } from '../../types';
+import { Entity, PipeMixin } from '../../types';
 import { nameIt } from '../../helper';
+import { IdSchemaPipe } from './query-schema/id-schema.pipe';
 
 function factoryMixin(entity: Entity, connectionName: string, pipe: PipeMixin) {
   const entityName =
@@ -95,10 +96,6 @@ export function bodyRelationshipPatchPipeMixin(): PipeMixin {
   return BodyRelationshipPatchPipe;
 }
 
-export function idPipeMixin(
-  entity: Entity,
-  connectionName: string,
-  config: ConfigParam
-): PipeMixin {
-  return config.pipeForId;
+export function idPipeMixin(entity: Entity, connectionName: string): PipeMixin {
+  return factoryMixin(entity, connectionName, IdSchemaPipe);
 }

libs/json-api-nestjs/src/lib/mixin/pipes/query-schema/id-schema.pipe.ts

@@ -0,0 +1,51 @@
+import { BadRequestException, Inject, PipeTransform } from '@nestjs/common';
+import { Repository } from 'typeorm';
+import AjvCall, { ValidateFunction } from 'ajv';
+
+import { getEntityName } from '../../../helper';
+import {
+  Entity,
+  PipeMixin,
+  QuerySchemaTypes,
+  ValidationError,
+} from '../../../types';
+import { isNumberString, isUUID } from 'class-validator';
+
+export class IdSchemaPipe implements PipeTransform {
+  protected validateFunction: ValidateFunction<QuerySchemaTypes>;
+  static inject(pip: PipeMixin): void {
+    Inject(AjvCall)(pip, 'ajvCall', 1);
+  }
+
+  constructor(
+    protected repository: Repository<Entity>,
+    protected ajvCall: AjvCall
+  ) {
+    const schemaName = getEntityName(this.repository.target);
+    this.validateFunction = this.ajvCall.getSchema(
+      `inputQuerySchema-${schemaName}`
+    );
+  }
+
+  async transform(value: unknown): Promise<QuerySchemaTypes> {
+    const resource = getEntityName(this.repository.target);
+    const columns = this.repository.metadata.columns;
+
+    for (const column of columns) {
+      if (column.propertyName === 'id') {
+        const isUuuidColumn = column.generationStrategy === 'uuid';
+
+        const valid = isUuuidColumn ? isUUID(value) : isNumberString(value);
+
+        if (!valid) {
+          const message = isUuuidColumn
+            ? `Id of resource ${resource} should be uuid`
+            : `Id of resource ${resource} should be numeric string`;
+          throw new BadRequestException(message);
+        }
+      }
+    }
+
+    return value as QuerySchemaTypes;
+  }
+}