TASK22057: phase17 closeout hash/input consistency hardening

pages/api/file/createappealcompletemessageproxy_api.js

@@ -2,10 +2,6 @@ import { hashAPIPath } from "../../../actions/core/hash";
 import { getToken } from "../../../actions/core/token";
 import { azureHeaders } from "../../../actions/core/headers";
 import { consoleLogger } from "../../../actions/core/logger";
-import {
-    getBlobs,
-    createCaseCompleteMessage
-} from "../../../actions/azurestorage";
 import axios from "axios";
 
 import nextConnect from "next-connect";
@@ -14,32 +10,32 @@ import middleware from "../middleware/middleware";
 const ApiProxy = nextConnect();
 ApiProxy.use(middleware);
 
+const BASE_URL = process.env.API_ROOT || `http://localhost:${port}`;
+
+const hasValue = (value) =>
+    typeof value === "string" && value.trim().length > 0;
+
 ApiProxy.get(async (req, res) => {
     var containerName = req.query.container;
     var tempCaseRef = req.query.tempcaseref;
 
-    console.log("/////Create Case Message:\n", tempCaseRef, "\n//////////////");
-
-    //console.log(hashAPIPath(checkquerypath), checkHash);
-    //console.log(hashAPIPath(checkquerypath) == "&hash=" + checkHash);
+    if (!hasValue(containerName) || !hasValue(tempCaseRef)) {
+        return res.status(400).json();
+    }
 
     var token = await getToken();
 
     var queryUrl =
-        "/api/file/createappealcompletemessageproxy_api?container=" +
-        containerID +
+        "/api/file/createappealcompletemessage_api?container=" +
+        containerName +
         "&tempcaseref=" +
-        caseReference;
+        tempCaseRef;
 
-    var config = {
-        method: "get",
-        url: WEBAPI_URL + queryUrl + hashAPIPath(queryUrl)
-    };
-
-    return axios(config)
-        .then((res) => {
-            return res.data;
-        })
+    return axios
+        .get(
+            BASE_URL + queryUrl + hashAPIPath(queryUrl),
+            azureHeaders(token.access_token)
+        )
         .then(({ data }) => {
             res.status(200).json(data);
         })