Guard against prepaid maxRedeemer properties being strings
This commit is contained in:
parent
0c5b39e029
commit
b63daf5a18
2 changed files with 6 additions and 3 deletions
server/prepaids
|
@ -19,4 +19,7 @@ PrepaidSchema.pre('save', (next) ->
|
||||||
next()
|
next()
|
||||||
)
|
)
|
||||||
|
|
||||||
|
PrepaidSchema.post 'init', (doc) ->
|
||||||
|
doc.set('maxRedeemers', parseInt(doc.get('maxRedeemers')))
|
||||||
|
|
||||||
module.exports = Prepaid = mongoose.model('prepaid', PrepaidSchema)
|
module.exports = Prepaid = mongoose.model('prepaid', PrepaidSchema)
|
||||||
|
|
|
@ -47,7 +47,7 @@ PrepaidHandler = class PrepaidHandler extends Handler
|
||||||
createPrepaidAPI: (req, res) ->
|
createPrepaidAPI: (req, res) ->
|
||||||
return @sendForbiddenError(res) unless @hasAccess(req)
|
return @sendForbiddenError(res) unless @hasAccess(req)
|
||||||
return @sendForbiddenError(res) unless req.body.type in ['course', 'subscription','terminal_subscription']
|
return @sendForbiddenError(res) unless req.body.type in ['course', 'subscription','terminal_subscription']
|
||||||
return @sendForbiddenError(res) unless req.body.maxRedeemers > 0
|
return @sendForbiddenError(res) unless parseInt(req.body.maxRedeemers) > 0
|
||||||
|
|
||||||
properties = {}
|
properties = {}
|
||||||
type = req.body.type
|
type = req.body.type
|
||||||
|
@ -107,7 +107,7 @@ PrepaidHandler = class PrepaidHandler extends Handler
|
||||||
creator: user._id
|
creator: user._id
|
||||||
type: type
|
type: type
|
||||||
code: code
|
code: code
|
||||||
maxRedeemers: maxRedeemers
|
maxRedeemers: parseInt(maxRedeemers)
|
||||||
properties: properties
|
properties: properties
|
||||||
redeemers: []
|
redeemers: []
|
||||||
|
|
||||||
|
@ -222,7 +222,7 @@ PrepaidHandler = class PrepaidHandler extends Handler
|
||||||
creator: user._id
|
creator: user._id
|
||||||
type: type
|
type: type
|
||||||
code: code
|
code: code
|
||||||
maxRedeemers: maxRedeemers
|
maxRedeemers: parseInt(maxRedeemers)
|
||||||
redeemers: []
|
redeemers: []
|
||||||
properties:
|
properties:
|
||||||
months: months
|
months: months
|
||||||
|
|
Reference in a new issue