ported SubscriptionBeforeSaveInterceptor

notify-bc-lb/src/interceptors/subscription-before-save.interceptor.ts

@@ -12,6 +12,7 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
+// file ported
 import {
   injectable,
   Interceptor,
@@ -70,6 +71,7 @@ export class SubscriptionBeforeSaveInterceptor
       case 'replaceById':
         argIdx = 1;
     }
+
     const data = invocationCtx.args[argIdx];
     if (!data) {
       return next();

package.json

@@ -41,6 +41,7 @@
     "class-validator": "^0.14.0",
     "crypto-random-string": "^3.3.0",
     "ip-range-check": "^0.2.0",
+    "jmespath": "f-w/jmespath.js#semver:^1.0",
     "lodash": "^4.17.21",
     "mongodb-memory-server": "^8.15.1",
     "mongoose": "^7.4.5",

src/api/subscriptions/broadcast-push-notification-filter.pipe.ts

@@ -0,0 +1,34 @@
+import {
+  ArgumentMetadata,
+  HttpException,
+  HttpStatus,
+  Injectable,
+  PipeTransform,
+} from '@nestjs/common';
+import jmespath from 'jmespath';
+
+@Injectable()
+export class BroadcastPushNotificationFilterPipe implements PipeTransform {
+  transform(value: any, metadata: ArgumentMetadata) {
+    let filter = value.broadcastPushNotificationFilter;
+    if (!filter) {
+      return value;
+    }
+    if (typeof filter !== 'string') {
+      throw new HttpException(
+        'invalid broadcastPushNotificationFilter',
+        HttpStatus.BAD_REQUEST,
+      );
+    }
+    filter = '[?' + filter + ']';
+    try {
+      jmespath.compile(filter);
+    } catch (ex) {
+      throw new HttpException(
+        'invalid broadcastPushNotificationFilter',
+        HttpStatus.BAD_REQUEST,
+      );
+    }
+    return value;
+  }
+}

src/api/subscriptions/subscriptions.controller.ts

@@ -44,6 +44,7 @@ import {
   JsonQuery,
 } from '../common/json-query.decorator';
 import { ConfigurationsService } from '../configurations/configurations.service';
+import { BroadcastPushNotificationFilterPipe } from './broadcast-push-notification-filter.pipe';
 import { CreateSubscriptionDto } from './dto/create-subscription.dto';
 import { UpdateSubscriptionDto } from './dto/update-subscription.dto';
 import { Subscription } from './entities/subscription.entity';
@@ -430,7 +431,8 @@ export class SubscriptionsController extends BaseController {
   async replaceById(
     @Req() req: Request & { user: UserProfile },
     @Param('id') id: string,
-    @Body() subscription: CreateSubscriptionDto,
+    @Body(BroadcastPushNotificationFilterPipe)
+    subscription: CreateSubscriptionDto,
   ): Promise<Subscription> {
     return this.subscriptionsService.replaceById(id, subscription, req);
   }
@@ -445,7 +447,8 @@ export class SubscriptionsController extends BaseController {
   async updateById(
     @Req() req: Request & { user: UserProfile },
     @Param('id') id: string,
-    @Body() subscription: UpdateSubscriptionDto,
+    @Body(BroadcastPushNotificationFilterPipe)
+    subscription: UpdateSubscriptionDto,
   ): Promise<Subscription> {
     const instance = await this.subscriptionsService.findOne(req, {
       where: { id },
@@ -730,7 +733,8 @@ export class SubscriptionsController extends BaseController {
   @HttpCode(200)
   async create(
     @Req() req: Request & { user: UserProfile },
-    @Body() subscription: CreateSubscriptionDto,
+    @Body(BroadcastPushNotificationFilterPipe)
+    subscription: CreateSubscriptionDto,
   ): Promise<Subscription> {
     if (![Role.SuperAdmin, Role.Admin].includes(req.user?.role)) {
       delete subscription.state;

yarn.lock

@@ -4225,6 +4225,10 @@ jest@^29.5.0:
     import-local "^3.0.2"
     jest-cli "^29.6.2"
 
+"jmespath@f-w/jmespath.js#semver:^1.0":
+  version "1.0.0"
+  resolved "https://codeload.github.com/f-w/jmespath.js/tar.gz/8782ba3794272d278704c9945126fd6f9b61022d"
+
 js-tokens@^4.0.0:
   version "4.0.0"
   resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"