]> git.immae.eu Git - github/Chocobozzz/PeerTube.git/blob - server/middlewares/validators/shared/users.ts
Don't inject untrusted input
[github/Chocobozzz/PeerTube.git] / server / middlewares / validators / shared / users.ts
1 import express from 'express'
2 import { ActorModel } from '@server/models/actor/actor'
3 import { UserModel } from '@server/models/user/user'
4 import { MUserDefault } from '@server/types/models'
5 import { forceNumber } from '@shared/core-utils'
6 import { HttpStatusCode } from '@shared/models'
7
8 function checkUserIdExist (idArg: number | string, res: express.Response, withStats = false) {
9 const id = forceNumber(idArg)
10 return checkUserExist(() => UserModel.loadByIdWithChannels(id, withStats), res)
11 }
12
13 function checkUserEmailExist (email: string, res: express.Response, abortResponse = true) {
14 return checkUserExist(() => UserModel.loadByEmail(email), res, abortResponse)
15 }
16
17 async function checkUserNameOrEmailDoesNotAlreadyExist (username: string, email: string, res: express.Response) {
18 const user = await UserModel.loadByUsernameOrEmail(username, email)
19
20 if (user) {
21 res.fail({
22 status: HttpStatusCode.CONFLICT_409,
23 message: 'User with this username or email already exists.'
24 })
25 return false
26 }
27
28 const actor = await ActorModel.loadLocalByName(username)
29 if (actor) {
30 res.fail({
31 status: HttpStatusCode.CONFLICT_409,
32 message: 'Another actor (account/channel) with this name on this instance already exists or has already existed.'
33 })
34 return false
35 }
36
37 return true
38 }
39
40 async function checkUserExist (finder: () => Promise<MUserDefault>, res: express.Response, abortResponse = true) {
41 const user = await finder()
42
43 if (!user) {
44 if (abortResponse === true) {
45 res.fail({
46 status: HttpStatusCode.NOT_FOUND_404,
47 message: 'User not found'
48 })
49 }
50
51 return false
52 }
53
54 res.locals.user = user
55 return true
56 }
57
58 export {
59 checkUserIdExist,
60 checkUserEmailExist,
61 checkUserNameOrEmailDoesNotAlreadyExist,
62 checkUserExist
63 }