import { BadRequestException } from '@nestjs/common';

import { isDefined } from 'class-validator';

const INPUT_REGEX = /^([A-Za-z0-9\-_.@]+)$/;

export const validateObjectAgainstInjections = (input: object) => {
  for (const [key, value] of Object.entries(input)) {
    // Password are encrypted so we don't need to validate them
    if (key === 'password') {
      continue;
    }

    if (!isDefined(value)) {
      continue;
    }

    validateStringAgainstInjections(value.toString());
  }
};

export const validateStringAgainstInjections = (input: string) => {
  if (!INPUT_REGEX.test(input)) {
    throw new BadRequestException('Invalid remote server input');
  }
};