X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=server%2Fmiddlewares%2Fvalidators%2Fvideos%2Fvideo-watch.ts;h=d6ca1d3412064371c13bd41ca0b09f64355055f0;hb=610d0be13b3d01f653ef269271dd667a57c85ef2;hp=c38ad8a10d284d18a1e9c3eb288007530ff6fe4f;hpb=73471b1a52f242e86364ffb077ea6cadb3b07ae2;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server/middlewares/validators/videos/video-watch.ts b/server/middlewares/validators/videos/video-watch.ts index c38ad8a10..d6ca1d341 100644 --- a/server/middlewares/validators/videos/video-watch.ts +++ b/server/middlewares/validators/videos/video-watch.ts @@ -1,24 +1,23 @@ -import { body, param } from 'express-validator/check' +import { body, param } from 'express-validator' import * as express from 'express' -import { isIdOrUUIDValid } from '../../../helpers/custom-validators/misc' -import { isVideoExist } from '../../../helpers/custom-validators/videos' +import { isIdOrUUIDValid, toIntOrNull } from '../../../helpers/custom-validators/misc' import { areValidationErrors } from '../utils' import { logger } from '../../../helpers/logger' -import { UserModel } from '../../../models/account/user' +import { doesVideoExist } from '../../../helpers/middlewares' const videoWatchingValidator = [ param('videoId').custom(isIdOrUUIDValid).not().isEmpty().withMessage('Should have a valid id'), body('currentTime') - .toInt() + .customSanitizer(toIntOrNull) .isInt().withMessage('Should have correct current time'), async (req: express.Request, res: express.Response, next: express.NextFunction) => { logger.debug('Checking videoWatching parameters', { parameters: req.body }) if (areValidationErrors(req, res)) return - if (!await isVideoExist(req.params.videoId, res, 'id')) return + if (!await doesVideoExist(req.params.videoId, res, 'id')) return - const user = res.locals.oauth.token.User as UserModel + const user = res.locals.oauth.token.User if (user.videosHistoryEnabled === false) { logger.warn('Cannot set videos to watch by user %d: videos history is disabled.', user.id) return res.status(409).end()