server/middlewares/validators/server.ts

   1 import express from 'express'
   2 import { body } from 'express-validator'
   3 import { HttpStatusCode } from '../../../shared/models/http/http-error-codes'
   4 import { isHostValid, isValidContactBody } from '../../helpers/custom-validators/servers'
   5 import { isUserDisplayNameValid } from '../../helpers/custom-validators/users'
   6 import { logger } from '../../helpers/logger'
   7 import { CONFIG, isEmailEnabled } from '../../initializers/config'
   8 import { Redis } from '../../lib/redis'
   9 import { ServerModel } from '../../models/server/server'
  10 import { areValidationErrors } from './shared'
  11
  12 const serverGetValidator = [
  13   body('host').custom(isHostValid).withMessage('Should have a valid host'),
  14
  15   async (req: express.Request, res: express.Response, next: express.NextFunction) => {
  16     if (areValidationErrors(req, res)) return
  17
  18     const server = await ServerModel.loadByHost(req.body.host)
  19     if (!server) {
  20       return res.fail({
  21         status: HttpStatusCode.NOT_FOUND_404,
  22         message: 'Server host not found.'
  23       })
  24     }
  25
  26     res.locals.server = server
  27
  28     return next()
  29   }
  30 ]
  31
  32 const contactAdministratorValidator = [
  33   body('fromName')
  34     .custom(isUserDisplayNameValid),
  35   body('fromEmail')
  36     .isEmail(),
  37   body('body')
  38     .custom(isValidContactBody),
  39
  40   async (req: express.Request, res: express.Response, next: express.NextFunction) => {
  41     if (areValidationErrors(req, res)) return
  42
  43     if (CONFIG.CONTACT_FORM.ENABLED === false) {
  44       return res.fail({
  45         status: HttpStatusCode.CONFLICT_409,
  46         message: 'Contact form is not enabled on this instance.'
  47       })
  48     }
  49
  50     if (isEmailEnabled() === false) {
  51       return res.fail({
  52         status: HttpStatusCode.CONFLICT_409,
  53         message: 'Emailer is not enabled on this instance.'
  54       })
  55     }
  56
  57     if (await Redis.Instance.doesContactFormIpExist(req.ip)) {
  58       logger.info('Refusing a contact form by %s: already sent one recently.', req.ip)
  59
  60       return res.fail({
  61         status: HttpStatusCode.FORBIDDEN_403,
  62         message: 'You already sent a contact form recently.'
  63       })
  64     }
  65
  66     return next()
  67   }
  68 ]
  69
  70 // ---------------------------------------------------------------------------
  71
  72 export {
  73   serverGetValidator,
  74   contactAdministratorValidator
  75 }