1
0
mirror of synced 2025-12-23 11:54:18 -05:00
Files
docs/middleware/api/events.js
Kevin Heis 688a274f1f Remove CSRF check (#29910)
* Use color_mode for gating "sign up" button

* Remove csrf check

* Add `res.removeHeader('set-cookie')` to cache-control

* Update static-assets.js

* Remove package

* Remove tough-cookie

* Update cache-control.js

* Update cache-control.js

* Update cache-control.js
2022-08-15 19:28:42 +00:00

38 lines
1019 B
JavaScript

import express from 'express'
import { omit } from 'lodash-es'
import Ajv from 'ajv'
import addFormats from 'ajv-formats'
import { eventSchema, hydroNames } from '../../lib/schema-event.js'
import catchMiddlewareError from '../catch-middleware-error.js'
import { cacheControlFactory } from '../cache-control.js'
const router = express.Router()
const noCacheControl = cacheControlFactory(0)
const ajv = new Ajv()
addFormats(ajv)
const OMIT_FIELDS = ['type']
router.post(
'/',
catchMiddlewareError(async function postEvents(req, res) {
const isDev = process.env.NODE_ENV === 'development'
noCacheControl(res)
if (!ajv.validate(eventSchema, req.body)) {
return res.status(400).json(isDev ? ajv.errorsText() : {})
}
res.json({})
if (req.hydro.maySend()) {
try {
await req.hydro.publish(hydroNames[req.body.type], omit(req.body, OMIT_FIELDS))
} catch (err) {
console.error('Failed to submit event to Hydro', err)
}
}
})
)
export default router