feat: add input validation/sanitization and error handling/logging in real-time gateway endpoints#145
feat: add input validation/sanitization and error handling/logging in real-time gateway endpoints#145slopefields wants to merge 6 commits intodevfrom
Conversation
…dpoint_sanitization
…point_sanitization
| const MAX_BODY_KEYS = 50; | ||
| const MAX_STRING_VALUE_LENGTH = 10000; | ||
| const APP_HEADER_PREFIX = 'x-'; | ||
| const ALLOWED_GAMIFICATION_EVENT_TYPES = new Set([ |
There was a problem hiding this comment.
This is useless, we don't need gamification types
| }; | ||
| }; | ||
|
|
||
| export const validateEmitGamificationBody: BodyValidator = (body: Record<string, unknown>): string | null => { |
| res.json({ success: true }); | ||
| }); | ||
| // Emit based on type | ||
| switch (type) { |
There was a problem hiding this comment.
Factor this out, this is unnecessary
|
@Team-Deepiri/support-team someone test this @slopefields reference your other PRs from other repos into here |
|
@slopefields take out all gamification stuff |
|
@Todd838 This is the main PR related to the one you've been assigned to in the api-gateway repo. Keep this in mind when you're testing that; since they're connected like this, it's generally better if one person handles the lot for consistency, but if you need backup please let me know! |
|
@Todd838 Let's get this wrapped up this week please, if you're having issues just reach out. If I don't hear back from you in a few days I'll be reassigning this and taking you out of rotation until you reach out to me, communication is key! |
Description
Adds input (body, header, query) validation/sanitization and error handling/logging across real-time gateway endpoints
Changes
Related
Related PRs (not dependent):
deepiri-external-bridge-service: Team-Deepiri/deepiri-external-bridge-service#35
deepiri-auth-service: Team-Deepiri/deepiri-auth-service#31
deepiri-api-gateway: Team-Deepiri/deepiri-api-gateway#40
Testing
Workflow Checklist
Review Requests
@Team-Deepiri/support-team