init

worklenz-backend/src/middlewares/session-middleware.ts

@@ -1,12 +1,13 @@
 import session from "express-session";
 import db from "../config/db";
+import { isProduction } from "../shared/utils";
 
 // eslint-disable-next-line @typescript-eslint/no-var-requires
 const pgSession = require("connect-pg-simple")(session);
 
 export default session({
   name: process.env.SESSION_NAME,
-  secret: process.env.SESSION_SECRET || [], // session secret
+  secret: process.env.SESSION_SECRET || "development-secret-key",
   proxy: false,
   resave: false,
   saveUninitialized: true,
@@ -17,10 +18,10 @@ export default session({
   }),
   cookie: {
     path: "/",
-    // secure: true,
-    // httpOnly: true,
-    // sameSite: true,
-    // domain: process.env.HOSTNAME,
+    // secure: isProduction(),
+    // httpOnly: isProduction(),
+    // sameSite: "none",
+    // domain: isProduction() ? ".worklenz.com" : undefined,
     maxAge: 30 * 24 * 60 * 60 * 1000 // 30 days
   }
-});
+});

worklenz-backend/src/middlewares/validators/sign-up-validator.ts

@@ -5,9 +5,11 @@ import {isValidateEmail} from "../../shared/utils";
 
 export default function (req: Request, res: Response, next: NextFunction) {
   const {name, email} = req.body;
+
   if (!name) return res.status(200).send(new ServerResponse(false, null, "Name is required"));
   if (!email) return res.status(200).send(new ServerResponse(false, null, "Email is required"));
   if (!isValidateEmail(email)) return res.status(200).send(new ServerResponse(false, null, "Invalid email address"));
+  req.body.team_name = name.trim();
 
   return next();
 }

worklenz-backend/src/middlewares/validators/task-attachments-validator.ts

@@ -1,11 +1,13 @@
-import {NextFunction} from "express";
+import { NextFunction } from "express";
 
-import {IWorkLenzRequest} from "../../interfaces/worklenz-request";
-import {IWorkLenzResponse} from "../../interfaces/worklenz-response";
-import {ServerResponse} from "../../models/server-response";
+import { IWorkLenzRequest } from "../../interfaces/worklenz-request";
+import { IWorkLenzResponse } from "../../interfaces/worklenz-response";
+import { ServerResponse } from "../../models/server-response";
+import { getFreePlanSettings, getUsedStorage } from "../../shared/paddle-utils";
+import { megabytesToBytes } from "../../shared/utils";
 
-export default function (req: IWorkLenzRequest, res: IWorkLenzResponse, next: NextFunction): IWorkLenzResponse | void {
-  const {file, file_name, project_id, size} = req.body;
+export default async function (req: IWorkLenzRequest, res: IWorkLenzResponse, next: NextFunction): Promise<IWorkLenzResponse | void> {
+  const { file, file_name, project_id, size } = req.body;
 
   if (!file || !file_name || !project_id || !size)
     return res.status(200).send(new ServerResponse(false, null, "Upload failed"));
@@ -13,6 +15,15 @@ export default function (req: IWorkLenzRequest, res: IWorkLenzResponse, next: Ne
   if (size > 5.243e+7)
     return res.status(200).send(new ServerResponse(false, null, "Max file size for attachments is 50 MB.").withTitle("Upload failed!"));
 
+  if (req.user?.subscription_status === "free" && req.user?.owner_id) {
+    const limits = await getFreePlanSettings();
+
+    const usedStorage = await getUsedStorage(req.user?.owner_id);
+    if ((parseInt(usedStorage) + size) > megabytesToBytes(parseInt(limits.free_tier_storage))) {
+      return res.status(200).send(new ServerResponse(false, [], `Sorry, the free plan cannot exceed ${limits.free_tier_storage}MB of storage.`));
+    }
+  }
+
   req.body.type = file_name.split(".").pop();
 
   req.body.task_id = req.body.task_id || null;

worklenz-backend/src/middlewares/validators/task-comment-attachment-validator.ts

@@ -0,0 +1,17 @@
+import { NextFunction } from "express";
+
+import { IWorkLenzRequest } from "../../interfaces/worklenz-request";
+import { IWorkLenzResponse } from "../../interfaces/worklenz-response";
+import { ServerResponse } from "../../models/server-response";
+
+export default function (req: IWorkLenzRequest, res: IWorkLenzResponse, next: NextFunction): IWorkLenzResponse | void {
+  const { attachments, task_id } = req.body;
+
+  if (attachments.length === 0)
+    return res.status(200).send(new ServerResponse(false, null, "Attachments are required!"));
+
+  if (!task_id)
+    return res.status(200).send(new ServerResponse(false, null, "Task ID is required!"));
+  
+  return next();
+}

worklenz-backend/src/middlewares/validators/task-comment-body-validator.ts

@@ -6,11 +6,11 @@ import {ServerResponse} from "../../models/server-response";
 
 export default function (req: IWorkLenzRequest, res: IWorkLenzResponse, next: NextFunction): IWorkLenzResponse | void {
   const {content, task_id} = req.body;
-  if (!content)
-    return res.status(200).send(new ServerResponse(false, null, "Comment message is required"));
+  // if (!content)
+  //   return res.status(200).send(new ServerResponse(false, null, "Comment message is required"));
   if (!task_id)
     return res.status(200).send(new ServerResponse(false, null, "Unable to create comment"));
-  if (content.length > 2000)
+  if (content.length > 5000)
     return res.status(200).send(new ServerResponse(false, null, "Message length exceeded"));
 
   req.body.mentions = Array.isArray(req.body.mentions)

worklenz-backend/src/middlewares/validators/task-create-body--validator.ts

@@ -0,0 +1,48 @@
+import {NextFunction} from "express";
+
+import {IWorkLenzRequest} from "../../interfaces/worklenz-request";
+import {IWorkLenzResponse} from "../../interfaces/worklenz-response";
+import {ServerResponse} from "../../models/server-response";
+import {getRandomColorCode, sanitize, toMinutes, toRound} from "../../shared/utils";
+
+export default function (req: IWorkLenzRequest, res: IWorkLenzResponse, next: NextFunction): IWorkLenzResponse | void {
+  const {name, assignees, project_id, labels} = req.body;
+  if (!name?.trim()?.length)
+    return res.status(200).send(new ServerResponse(false, null, "Name is required"));
+
+  if (!project_id)
+    return res.status(200).send(new ServerResponse(false, null, "Project is required"));
+
+  req.body.total_hours = isNaN(+req.body.total_hours) || req.body.total_hours > 1000 ? 0 : toRound(req.body.total_hours);
+  req.body.total_minutes = isNaN(+req.body.total_minutes) || req.body.total_minutes > 1000 ? 0 : toRound(req.body.total_minutes);
+
+  req.body.assignees = Array.isArray(assignees) ? assignees : [];
+  req.body.labels = Array.isArray(labels) ? labels : [];
+
+  req.body.reporter_id = req.user?.id || null;
+  req.body.total_minutes = toMinutes(req.body.total_hours, req.body.total_minutes);
+  req.body.team_id = req.user?.team_id || null;
+
+  req.body.inline = req.query.inline || false;
+
+  const labelsJson = [];
+  for (const label of req.body.labels) {
+    labelsJson.push({
+      name: label,
+      color: getRandomColorCode()
+    });
+  }
+
+  req.body.labels = labelsJson;
+
+  if (req.body.description) {
+    if (req.body.description.length > 4000)
+      return res.status(200).send(new ServerResponse(false, null, "Task description length exceeded!"));
+    req.body.description = sanitize(req.body.description);
+  }
+
+  if (req.body.name.length > 100)
+    return res.status(200).send(new ServerResponse(false, null, "Task name length exceeded!"));
+
+  return next();
+}

worklenz-backend/src/middlewares/validators/task-dependencies-validator.ts

@@ -0,0 +1,12 @@
+import { NextFunction } from "express";
+
+import { IWorkLenzRequest } from "../../interfaces/worklenz-request";
+import { IWorkLenzResponse } from "../../interfaces/worklenz-response";
+import { ServerResponse } from "../../models/server-response";
+
+export default function (req: IWorkLenzRequest, res: IWorkLenzResponse, next: NextFunction): IWorkLenzResponse | void {
+  const { example_name } = req.body;
+  if (!example_name)
+    return res.status(200).send(new ServerResponse(false, null, "Name is required"));
+  return next();
+}

worklenz-backend/src/middlewares/validators/team-members-body-validator.ts

@@ -12,7 +12,7 @@ export default function (req: IWorkLenzRequest, res: IWorkLenzResponse, next: Ne
     return res.status(200).send(new ServerResponse(false, null, "Email addresses cannot be empty"));
 
   for (const email of emails) {
-    if (!isValidateEmail(email))
+    if (!isValidateEmail(email.trim()))
       return res.status(200).send(new ServerResponse(false, null, "Invalid email address"));
   }