Merge pull request #4 from 2bit-hack/master

Implement Form Validation at Backend Register

Author: hyperloo

routes/api/users.js

@@ -5,13 +5,23 @@ const jwt = require("jsonwebtoken");
 
 const User = require("../../models/user");
 
+const { validatePassword, validateEmail } = require("../../validators/validators");
+
 router.post("/", async (req, res) => {
   const { name, email, password } = req.body;
 
   if (!name || !email || !password) {
     return res.status(400).send({ msg: "Please enter all fields" });
   }
 
+  if (!validateEmail(email)) {
+    return res.status(400).send({ msg: "Invalid email address format specified" });
+  }
+
+  if (!validatePassword(password)) {
+    return res.status(400).send({ msg: "Password must be at least 8 characters in length and must contain at least 1 lowercase letter, 1 uppercase letter, 1 numeric digit, and 1 special character" });
+  }
+
   const existingUser = await User.findOne({ email });
   if (existingUser) {
     res.status(400).send({ msg: "Already registered user with this email" });

validators/validators.js

@@ -0,0 +1,22 @@
+const validatePassword = (password) => {
+    // 1 special character
+    // 1 digit
+    // 1 lowercase character
+    // 1 uppercase character
+    const passwordRegex = /^(?=.*[^A-Za-z0-9])(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).{8,}$/;
+
+    return passwordRegex.test(password);
+};
+
+const validateEmail = (email) => {
+    // from https://emailregex.com/
+    // claims to match 99.99% of all email addresses
+    const emailRegex = /^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/;
+
+    return emailRegex.test(email);
+};
+
+module.exports = {
+    validatePassword,
+    validateEmail,
+};