feat: validate request shape against Zod schema

Author: danieljtrowbridge

package.json

@@ -17,7 +17,8 @@
     "axios": "^1.7.9",
     "cors": "^2.8.5",
     "dotenv": "^16.4.7",
-    "express": "^4.21.2"
+    "express": "^4.21.2",
+    "zod": "^3.24.1"
   },
   "devDependencies": {
     "@types/cors": "^2.8.17",

src/index.ts

@@ -3,6 +3,8 @@ import cors from 'cors'
 import express from 'express'
 import dotenv from 'dotenv'
 
+import * as schema from './schema'
+
 dotenv.config()
 
 const app = express()
@@ -12,8 +14,9 @@ app.use(express.json())
 
 app.post('/', async (req, res) => {
   console.log(`Received POST request:`, req.body)
-  const { url, ...params } = req.body
-  const response = await axios.post(url, params)
+  const { url, ...evaluationFunctionRequestData } =
+    schema.TestServerRequestData.parse(req.body)
+  const response = await axios.post(url, evaluationFunctionRequestData)
   res.send(response.data)
 })
 

src/schema.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod'
+
+export const EvaluationFunctionRequestData = z
+  .object({
+    answer: z.string(),
+    response: z.string(),
+    params: z.record(z.string(), z.any()),
+  })
+  .strict()
+export type EvaluationFunctionRequestData = z.infer<
+  typeof EvaluationFunctionRequestData
+>
+
+export const TestServerRequestData = EvaluationFunctionRequestData.extend({
+  url: z.string(),
+}).strict()
+export type TestServerRequestData = z.infer<typeof TestServerRequestData>

yarn.lock

@@ -1222,3 +1222,8 @@ yocto-queue@^0.1.0:
   version "0.1.0"
   resolved "https://registry.yarnpkg.com/yocto-queue/-/yocto-queue-0.1.0.tgz#0294eb3dee05028d31ee1a5fa2c556a6aaf10a1b"
   integrity sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==
+
+zod@^3.24.1:
+  version "3.24.1"
+  resolved "https://registry.yarnpkg.com/zod/-/zod-3.24.1.tgz#27445c912738c8ad1e9de1bea0359fa44d9d35ee"
+  integrity sha512-muH7gBL9sI1nciMZV67X5fTKKBLtwpZ5VBp1vsOQzj1MhrBZ4wlVCm3gedKZWLp0Oyel8sIGfeiz54Su+OVT+A==