definma-api/src/routes/validate/user.ts

import Joi from 'joi';
import globals from '../../globals';

import IdValidate from './id';

export default class UserValidate {  // validate input for user
  private static user = {
    name: Joi.string()
      .lowercase()
      .pattern(new RegExp('^[a-z0-9-_.]+$'))
      .max(128)
      .messages({'string.pattern.base': 'name must only contain a-z0-9_.'}),

    email: Joi.string()
      .email({minDomainSegments: 2})
      .lowercase()
      .max(128),

    pass: Joi.string()
      .pattern(/^(?=.*[0-9])(?=.*[a-z])(?=.*[A-Z])(?=.*[!"#%&'()*+,-.\/:;<=>?@[\]^_`{|}~])(?=\S+$)[a-zA-Z0-9!"#%&'()*+,\-.\/:;<=>?@[\]^_`{|}~]{8,}$/)
      .max(128)
      .messages({'string.pattern.base': 'password must have at least 8 characters, one uppercase and one lowercase character, one number and at least one of the following characters:  !"\\#%&\'()*+,-.\\/:;<=>?@[]^_`\\{|}~'}),

    level: Joi.string()
      .valid(...globals.levels),

    location: Joi.string()
      .alphanum()
      .max(128),

    devices: Joi.array()
      .items(Joi.string()
        .allow('')
        .max(128)
      )
  };

  private static specialUsernames: string[] = ['admin', 'user', 'key', 'new', 'passreset'];  // names a user cannot take

  static input (data, param) {  // validate input, set param to 'new' to make all attributes required
    if (param === 'new') {
      return Joi.object({
        name: this.user.name.required(),
        email: this.user.email.required(),
        pass: this.user.pass.required(),
        level: this.user.level.required(),
        location: this.user.location.required(),
        devices: this.user.devices.required()
      }).validate(data);
    }
    else if (param === 'change') {
      return Joi.object({
        name: this.user.name,
        email: this.user.email,
        pass: this.user.pass,
        location: this.user.location,
        devices: this.user.devices
      }).validate(data);
    }
    else if (param === 'changeadmin') {
      return Joi.object({
        name: this.user.name,
        email: this.user.email,
        pass: this.user.pass,
        level: this.user.level,
        location: this.user.location,
        devices: this.user.devices
      }).validate(data);
    }
    else {
      return{error: 'No parameter specified!', value: {}};
    }
  }

  static output (data) {  // validate output and strip unwanted properties, returns null if not valid
    data = IdValidate.stringify(data);
    const {value, error} = Joi.object({
      _id: IdValidate.get(),
      name: this.user.name,
      email: this.user.email,
      level: this.user.level,
      location: this.user.location,
      devices: this.user.devices
    }).validate(data, {stripUnknown: true});
    return error !== undefined? null : value;
  }

  static isSpecialName (name) {  // true if name belongs to special names
    return this.specialUsernames.indexOf(name) > -1;
  }

  static username() {
    return this.user.name;
  }
}