body length

api/src/framework/express/middleware.ts

@@ -35,36 +35,34 @@ export function CheckPermissions(): RequestHandler {
 
   return (req, res, next) => {
     if (!req.session.user) {
-      next({ status: 401, messsage: 'Unauthorized' });
-      return;
+      return next({ status: 401, messsage: 'Unauthorized' });
     }
 
     if (req.session.user.role === UserRoles.ADMIN) {
-      next();
-      return;
+      return next();
     }
 
     const ressourceId = getResourceId(req);
     if (!ressourceId) {
-      next({ status: 403, messsage: 'Forbidden' });
-      return;
+      return next({ status: 403, messsage: 'Forbidden' });
     }
 
     if (canAccessRessource(req.session.user, ressourceId)) {
-      next();
-      return;
-    } else {
-      next({ status: 403, messsage: 'Forbidden' });
-      return;
+      return next();
     }
 
-    // Should be unreachable
     next({ status: 403, messsage: 'Forbidden' });
   };
 }
 
-export function SchemaValidator(): RequestHandler {
+export function SchemaValidator(keys: number = 0): RequestHandler {
   return (req, res, next) => {
+    if (Object.keys(req.body).length > keys)
+      return next({
+        status: 400,
+        message: `Found ${Object.keys(req.body).length} keys expected ${keys}`,
+      });
+
     const error = validationResult(req);
     error.isEmpty()
       ? next()