feat: support on templating env for route inputs

README.md

@@ -9,6 +9,10 @@
 
 ## Changelog
 
+### latest
+
+* feat: support on templating env for route inputs
+
 ### 1.4.2
 
 * chore: bump fast-xml-parser from 4.0.11 to 4.2.4

functions/ldap.js

@@ -5,6 +5,7 @@ const LDAP = require('ldapjs');
 const Logger = require('../lib/logger.js');
 const Utils = require('../lib/utils.js');
 const Qs = require('qs');
+const helpers = require("../lib/helpers.js")
 
 /**
  *
@@ -14,6 +15,8 @@ exports.plugin = {
   name: 'ldap',
   register: async function (server) {
     server.ext('onRequest', (request, h) => {
+      helpers.setQueryParameterTemplateValues(request.query);
+
       let { tlsOptions, attributes } = request.query;
 
       if (tlsOptions) {

lib/helpers.js

@@ -0,0 +1,16 @@
+'use strict';
+
+require("dotenv").config();
+
+const Handlebars = require("handlebars");
+
+Handlebars.registerHelper('ENV', (value) => {
+    return new Handlebars.SafeString(value);
+});
+
+exports.setQueryParameterTemplateValues = (query) => {
+    for (const key of Object.keys(query)) {
+        const template = Handlebars.compile(query[key]);
+        query[key] = template(process.env);
+    }
+}

nodemon.json

@@ -0,0 +1,8 @@
+{
+  "ignore": ["tmp/", "node_modules/", "logs/", "test/"],
+  "ext": "js json env",
+  "watch": [
+    "*",
+    ".env"
+  ]
+}

package.json

@@ -25,7 +25,9 @@
     "@hapi/inert": "^7.0.0",
     "@hapi/vision": "^7.0.0",
     "activedirectory2": "^2.1.0",
+    "dotenv": "^16.3.1",
     "fast-xml-parser": "^4.2.4",
+    "handlebars": "^4.7.7",
     "hapi-swagger": "^15.0.0",
     "joi": "^17.6.3",
     "ldapjs": "^3.0.2",

test/functions/ldap.js

@@ -128,4 +128,28 @@ describe('ldap:', () => {
     expect(res.statusCode).to.equal(200);
     expect(res.result.length === 5).to.equal(true);
   });
+
+  it(`GET ${FUNCTION_ENDPOINT}/search - search result for query with environment variable placeholder in parameters - returns 200`, async () => {
+    const username = '%7B%7BENV databaseUser%7D%7D';
+    const password = '%7B%7BENV databasePassword%7D%7D';
+
+    const res = await server.inject({
+      method: 'GET',
+      url: `${FUNCTION_ENDPOINT}/search?url=${url}&username=${username}&password=${password}&base=${base}&filter=${filter}&scope=${scope}&paged=true&pageSize=5`,
+    });
+
+    expect(res.statusCode).to.equal(200);
+  });
+
+  it(`GET ${FUNCTION_ENDPOINT}/search - search result for query without using helper function on environment variable placeholder in parameters - returns 401`, async () => {
+    const username = '%7B%7BdatabaseUser%7D%7D';
+    const password = '%7B%7BdatabasePassword%7D%7D';
+
+    const res = await server.inject({
+      method: 'GET',
+      url: `${FUNCTION_ENDPOINT}/search?url=${url}&username=${username}&password=${password}&base=${base}&filter=${filter}&scope=${scope}&paged=true&pageSize=5`,
+    });
+
+    expect(res.statusCode).to.equal(401);
+  });
 });