Symbol Code parameter verification against dynamic enum

pinax-network · Nov 9, 2023 · 003918b · 003918b
1 parent ac9196f
commit 003918b
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 3 deletions.
diff --git a/src/fetch/aggregate.ts b/src/fetch/aggregate.ts
@@ -1,7 +1,7 @@
 import { makeQuery } from "../clickhouse/makeQuery.js";
 import { logger } from "../logger.js";
 import { store } from "../clickhouse/stores.js";
-import { parseCollectionName } from "../utils.js";
+import { parseCollectionName, parseListingPriceSymcode } from "../utils.js";
 import { getAggregate } from "../queries.js";
 import * as prometheus from "../prometheus.js";
 import { BadRequest, toJSON, toText } from "./cors.js";
@@ -28,10 +28,19 @@ export default async function (req: Request) {
 async function verifyParameters(req: Request) {
   const url = new URL(req.url);
   const collection_name = url.searchParams.get("collection_name");
+  const symbol_code = url.searchParams.get("listing_price_symcode");
+
   if (collection_name && (parseCollectionName(collection_name) == undefined)) {
     return toText("Invalid EOSIO name type: collection_name=" + collection_name, 400);
   }
   else if (collection_name && !(await store.collection_names).includes(collection_name)) {
     return toText("Collection not found: " + collection_name, 404);
   }
-}
+
+  if (symbol_code && (parseListingPriceSymcode(symbol_code) == undefined)) {
+    return toText("Invalid EOSIO Symbol code: listing_price_symcode=" + symbol_code, 400);
+  }
+  else if (symbol_code && !(await store.symbol_codes).includes(symbol_code)) {
+    return toText("Symbol code not found: " + symbol_code, 404);
+  }
+}
diff --git a/src/fetch/sales.ts b/src/fetch/sales.ts
@@ -4,7 +4,7 @@ import { store } from "../clickhouse/stores.js";
 import { Sale, getSale } from "../queries.js";
 import * as prometheus from "../prometheus.js";
 import { BadRequest, toJSON, toText } from "./cors.js";
-import { parseCollectionName } from "../utils.js";
+import { parseCollectionName, parseListingPriceSymcode } from "../utils.js";
 
 export default async function (req: Request) {
   const parametersResult = await verifyParameters(req);
@@ -27,10 +27,19 @@ export default async function (req: Request) {
 async function verifyParameters(req: Request) {
   const url = new URL(req.url);
   const collection_name = url.searchParams.get("collection_name");
+  const symbol_code = url.searchParams.get("listing_price_symcode");
+
   if (collection_name && (parseCollectionName(collection_name) == undefined)) {
     return toText("Invalid EOSIO name type: collection_name=" + collection_name, 400);
   }
   else if (collection_name && !(await store.collection_names).includes(collection_name)) {
     return toText("Collection not found: " + collection_name, 404);
   }
+
+  if (symbol_code && (parseListingPriceSymcode(symbol_code) == undefined)) {
+    return toText("Invalid EOSIO Symbol code: listing_price_symcode=" + symbol_code, 400);
+  }
+  else if (symbol_code && !(await store.symbol_codes).includes(symbol_code)) {
+    return toText("Symbol code not found: " + symbol_code, 404);
+  }
 }