Move input validation logic to routes

2018-04-28 18:02:01 -07:00
parent 82207c3ccd
commit 6c8c206e89
2 changed files with 3 additions and 3 deletions
@@ -28,6 +28,9 @@ function add(req, res, next) {
    if (typeof data.scope !== 'string' || !data.scope) return next(new HttpError(400, 'scope is required'));
    if (!validUrl.isWebUri(data.redirectURI)) return next(new HttpError(400, 'redirectURI must be a valid uri'));

+    // allow whitespace
+    data.scope = data.scope.split(',').map(function (s) { return s.trim(); }).join(',');
+
    clients.add(data.appId, clients.TYPE_EXTERNAL, data.redirectURI, data.scope, function (error, result) {
        if (error && error.reason === ClientsError.INVALID_SCOPE) return next(new HttpError(400, error.message));
        if (error && error.reason === ClientsError.BAD_FIELD) return next(new HttpError(400, error.message));