147 lines
3.6 KiB
JavaScript
147 lines
3.6 KiB
JavaScript
'use strict';
|
|
|
|
/*!
|
|
* Connect - bodyParser
|
|
* Copyright(c) 2010 Sencha Inc.
|
|
* Copyright(c) 2011 TJ Holowaychuk
|
|
* MIT Licensed
|
|
*/
|
|
|
|
/**
|
|
* Module dependencies.
|
|
*/
|
|
|
|
var qs = require('qs');
|
|
var multer = require('multer');
|
|
|
|
/**
|
|
* Extract the mime type from the given request's
|
|
* _Content-Type_ header.
|
|
*
|
|
* @param {IncomingMessage} req
|
|
* @return {String}
|
|
* @api private
|
|
*/
|
|
|
|
function mime(req) {
|
|
var str = req.headers['content-type'] || '';
|
|
return str.split(';')[0];
|
|
}
|
|
|
|
/**
|
|
* Parse request bodies.
|
|
*
|
|
* By default _application/json_, _application/x-www-form-urlencoded_,
|
|
* and _multipart/form-data_ are supported, however you may map `connect.bodyParser.parse[contentType]`
|
|
* to a function receiving `(req, options, callback)`.
|
|
*
|
|
* Examples:
|
|
*
|
|
* connect.createServer(
|
|
* connect.bodyParser()
|
|
* , function(req, res) {
|
|
* res.end('viewing user ' + req.body.user.name);
|
|
* }
|
|
* );
|
|
*
|
|
* $ curl -d 'user[name]=tj' http://localhost/
|
|
* $ curl -d '{"user":{"name":"tj"}}' -H "Content-Type: application/json" http://localhost/
|
|
*
|
|
* Multipart req.files:
|
|
*
|
|
* As a security measure files are stored in a separate object, stored
|
|
* as `req.files`. This prevents attacks that may potentially alter
|
|
* filenames, and depending on the application gain access to restricted files.
|
|
*
|
|
* Multipart configuration:
|
|
*
|
|
* The `options` passed are provided to each parser function.
|
|
* The _multipart/form-data_ parser merges these with formidable's
|
|
* IncomingForm object, allowing you to tweak the upload directory,
|
|
* size limits, etc. For example you may wish to retain the file extension
|
|
* and change the upload directory:
|
|
*
|
|
* server.use(bodyParser({ uploadDir: '/www/mysite.com/uploads' }));
|
|
*
|
|
* View [node-formidable](https://github.com/felixge/node-formidable) for more information.
|
|
*
|
|
* If you wish to use formidable directly within your app, and do not
|
|
* desire this behaviour for multipart requests simply remove the
|
|
* parser:
|
|
*
|
|
* delete connect.bodyParser.parse['multipart/form-data'];
|
|
*
|
|
* Or
|
|
*
|
|
* delete express.bodyParser.parse['multipart/form-data'];
|
|
*
|
|
* @param {Object} options
|
|
* @return {Function}
|
|
* @api public
|
|
*/
|
|
|
|
exports = module.exports = function bodyParser(options){
|
|
options = options || {};
|
|
return function bodyParser(req, res, next) {
|
|
if (req.body) {
|
|
return next();
|
|
}
|
|
req.body = {};
|
|
|
|
if ('GET' === req.method || 'HEAD' === req.method) {
|
|
return next();
|
|
}
|
|
var parser = exports.parse[mime(req)];
|
|
if (parser) {
|
|
parser(req, options, next);
|
|
} else {
|
|
next();
|
|
}
|
|
};
|
|
};
|
|
|
|
/**
|
|
* Parsers.
|
|
*/
|
|
|
|
exports.parse = {};
|
|
|
|
/**
|
|
* Parse application/x-www-form-urlencoded.
|
|
*/
|
|
|
|
exports.parse['application/x-www-form-urlencoded'] = function(req, options, fn){
|
|
var buf = '';
|
|
req.setEncoding('utf8');
|
|
req.on('data', function(chunk){ buf += chunk; });
|
|
req.on('end', function(){
|
|
try {
|
|
req.body = buf.length ? qs.parse(buf) : {};
|
|
fn();
|
|
} catch (err){
|
|
fn(err);
|
|
}
|
|
});
|
|
};
|
|
|
|
/**
|
|
* Parse application/json.
|
|
*/
|
|
|
|
exports.parse['application/json'] = function(req, options, fn){
|
|
var buf = '';
|
|
req.setEncoding('utf8');
|
|
req.on('data', function(chunk){ buf += chunk; });
|
|
req.on('end', function(){
|
|
try {
|
|
req.body = buf.length ? JSON.parse(buf) : {};
|
|
fn();
|
|
} catch (err){
|
|
fn(err);
|
|
}
|
|
});
|
|
};
|
|
|
|
var multipartMiddleware = multer({ limits: { fieldSize: Infinity } });
|
|
exports.parse['multipart/form-data'] = multipartMiddleware.none();
|