Ocelot-Social/backend/src/middleware/validation/validationMiddleware.js

import { UserInputError } from 'apollo-server'

const COMMENT_MIN_LENGTH = 1
const NO_POST_ERR_MESSAGE = 'Comment cannot be created without a post!'
const NO_CATEGORIES_ERR_MESSAGE =
  'You cannot save a post without at least one category or more than three'

const validateCommentCreation = async (resolve, root, args, context, info) => {
  const content = args.content.replace(/<(?:.|\n)*?>/gm, '').trim()
  const { postId } = args

  if (!args.content || content.length < COMMENT_MIN_LENGTH) {
    throw new UserInputError(`Comment must be at least ${COMMENT_MIN_LENGTH} character long!`)
  }
  const session = context.driver.session()
  const postQueryRes = await session.run(
    `
    MATCH (post:Post {id: $postId})
    RETURN post`,
    {
      postId,
    },
  )
  session.close()
  const [post] = postQueryRes.records.map(record => {
    return record.get('post')
  })

  if (!post) {
    throw new UserInputError(NO_POST_ERR_MESSAGE)
  } else {
    return resolve(root, args, context, info)
  }
}

const validateUpdateComment = async (resolve, root, args, context, info) => {
  const COMMENT_MIN_LENGTH = 1
  const content = args.content.replace(/<(?:.|\n)*?>/gm, '').trim()
  if (!args.content || content.length < COMMENT_MIN_LENGTH) {
    throw new UserInputError(`Comment must be at least ${COMMENT_MIN_LENGTH} character long!`)
  }

  return resolve(root, args, context, info)
}

const validatePost = async (resolve, root, args, context, info) => {
  const { categoryIds } = args
  if (!Array.isArray(categoryIds) || !categoryIds.length || categoryIds.length > 3) {
    throw new UserInputError(NO_CATEGORIES_ERR_MESSAGE)
  }
  return resolve(root, args, context, info)
}

const validateUpdatePost = async (resolve, root, args, context, info) => {
  const { categoryIds } = args
  if (typeof categoryIds === 'undefined') return resolve(root, args, context, info)
  return validatePost(resolve, root, args, context, info)
}

const validateReport = async (resolve, root, args, context, info) => {
  const { resourceId } = args
  const { user } = context
  if (resourceId === user.id) throw new Error('You cannot report yourself!')
  return resolve(root, args, context, info)
}

const validateReview = async (resolve, root, args, context, info) => {
  const { resourceId } = args
  const { user, driver } = context
  if (resourceId === user.id) throw new Error('You cannot review yourself!')
  const session = driver.session()
  const reportQueryRes = await session.run(
    `
      MATCH (resource {id: $resourceId})
      WHERE resource:User OR resource:Post OR resource:Comment
      OPTIONAL MATCH (:User)-[filed:FILED]->(:Report {closed: false})-[:BELONGS_TO]->(resource)
      OPTIONAL MATCH (resource)<-[:WROTE]-(author:User)
      RETURN labels(resource)[0] AS label, author, filed
    `,
    {
      resourceId,
      submitterId: user.id,
    },
  )
  session.close()
  const [existingReportedResource] = reportQueryRes.records.map(record => {
    return {
      label: record.get('label'),
      author: record.get('author'),
      filed: record.get('filed'),
    }
  })

  if (!existingReportedResource)
    throw new Error(`Resource not found or is not a Post|Comment|User!`)
  if (!existingReportedResource.filed)
    throw new Error(
      `Before starting the review process, please report the ${existingReportedResource.label}!`,
    )
  const authorId =
    existingReportedResource.label !== 'User' && existingReportedResource.author
      ? existingReportedResource.author.properties.id
      : null
  if (authorId && authorId === user.id)
    throw new Error(`You cannot review your own ${existingReportedResource.label}!`)
  return resolve(root, args, context, info)
}

export default {
  Mutation: {
    CreateComment: validateCommentCreation,
    UpdateComment: validateUpdateComment,
    CreatePost: validatePost,
    UpdatePost: validateUpdatePost,
    fileReport: validateReport,
    review: validateReview,
  },
}