Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
express-contracts
Advanced tools
Express.js plugin for checking request and response with rho-contracts
Express.js plugin for checking request and response with rho-contracts
var c = require('rho-contracts'),
ec = require('express-contracts');
var cc = {};
cc.request = c.object({
body: c.object({
foo: c.value('bar'),
}).strict(),
}).rename('request');
cc.responseBody = c.object({
baz: c.value('barbar'),
}).strict().rename('responseBody');
var exampleApplicationMiddleware = function (req, res, next) {
res.status(200).checkedJson({ baz: req.body.foo + req.body.foo });
};
var exampleErrorHandlingMiddleware = function (err, req, res, next) {
if (err) {
if (err instanceof ec.ValidationError) {
res.status(400).json({ error: err.message });
} else if (err instanceof c.ContractError) {
res.status(500).json({ error: 'Internal Contract Violation' });
} else {
res.status(500).json({ error: 'Internal Server Error' });
}
}
};
app.use(
require('body-parser').json(), // populates req.body
ec.useContracts(cc.request, cc.responseBody),
exampleApplicationMiddleware,
exampleErrorHandlingMiddleware
);
Note the middleware useContracts(requestContract, responseBodyContract)
distinguishes between ValidationError
(for failures of requestContract
) and
ContractError
(for failures of responseBodyContract
), which callers will
likely wish to handle differently.
Furthermore, note that the middleware works by extending res
with a method
checkedJson
which checks responseBodyContract
before calling res.json
,
thus it is easy to "jump out" of the contract e.g. to send an error.
Finally, there is an asymmetry between the requestContract
, which is run over
the whole request (but only body
and query
actually checked), and the
responseBodyContract
, which is only run over the payload that eventually
becomes the res.body
.
npm install rho-contracts express-contracts
Pull requests welcome!
If you are having issues, please let us know.
The project is licensed under the two-clause BSD license.
FAQs
Express.js plugin for checking request and response with rho-contracts
We found that express-contracts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.