Add Data validation on server, several cleanups on client

apps/api/src/app/account-balance/account-balance.controller.ts

@@ -19,6 +19,7 @@ import { AccountBalance } from '@prisma/client';
 import { StatusCodes, getReasonPhrase } from 'http-status-codes';
 
 import { AccountBalanceService } from './account-balance.service';
+import { CreateAccountBalanceDto } from './create-account-balance.dto';
 
 @Controller('account-balance')
 export class AccountBalanceController {
@@ -53,21 +54,21 @@ export class AccountBalanceController {
   @Post()
   @UseGuards(AuthGuard('jwt'), HasPermissionGuard)
   public async createAccountBalance(
-    @Body() body: any
+    @Body() data: CreateAccountBalanceDto
   ): Promise<AccountBalance> {
-    const account = body.Account.connect.id_userId;
+    const account = data.Account.connect.id_userId;
-    const data = {
+    const body = {
       Account: {
         connect: {
           id_userId: {
             id: account.id,
-            userId: account.userId
+            userId: this.request.user.id
           }
         }
       },
-      value: body.balance,
+      value: data.balance,
-      date: body.date
+      date: data.date
     };
-    return this.accountBalanceService.createAccountBalance(data);
+    return this.accountBalanceService.createAccountBalance(body);
   }
 }

apps/api/src/app/account-balance/create-account-balance.dto.ts

@@ -0,0 +1,44 @@
+import { Type } from 'class-transformer';
+import {
+  IsISO8601,
+  IsNotEmptyObject,
+  IsNumber,
+  IsObject,
+  IsString,
+  ValidateNested
+} from 'class-validator';
+
+export class Id_UserId {
+  @IsString()
+  id: string;
+}
+
+export class Connect {
+  @IsNotEmptyObject()
+  @IsObject()
+  @ValidateNested()
+  @Type(() => Id_UserId)
+  id_userId: Id_UserId;
+}
+
+export class Account {
+  @IsNotEmptyObject()
+  @IsObject()
+  @ValidateNested()
+  @Type(() => Connect)
+  connect: Connect;
+}
+
+export class CreateAccountBalanceDto {
+  @IsNotEmptyObject()
+  @IsObject()
+  @ValidateNested()
+  @Type(() => Account)
+  Account: Account;
+
+  @IsNumber()
+  balance: number;
+
+  @IsISO8601()
+  date: string;
+}

apps/client/src/app/components/account-detail-dialog/account-detail-dialog.component.ts

@@ -150,10 +150,8 @@ export class AccountDetailDialog implements OnDestroy, OnInit {
     const formattedDate = new Date(date);
     this.dataService
       .postAccountBalance({
-        userId: this.user.id,
         accountId: this.data.accountId,
-        balance: balance,
+        balance,
-        currency: this.currency,
         date: formattedDate
       })
       .pipe(takeUntil(this.unsubscribeSubject))

apps/client/src/app/services/data.service.ts

@@ -614,26 +614,20 @@ export class DataService {
   public postAccountBalance({
     date,
     accountId,
-    balance,
+    balance
-    currency,
-    userId
   }: {
     date: Date;
     accountId: string;
     balance: number;
-    currency: string;
-    userId: string;
   }) {
     return this.http.post<any>(`/api/v1/account-balance`, {
       Account: {
         connect: {
           id_userId: {
-            id: accountId,
+            id: accountId
-            userId
           }
         }
       },
-      currency,
       date,
       balance: balance
     });

libs/ui/src/lib/account-balances/account-balances.component.ts

@@ -79,13 +79,13 @@ export class GfAccountBalancesComponent
 
   private unsubscribeSubject = new Subject<void>();
 
-  public constructor(private dateAdapter: DateAdapter<any>) {}
-
   public accountBalanceForm = new FormGroup({
     balance: new FormControl(0, Validators.required),
     date: new FormControl(new Date().toISOString(), Validators.required)
   });
 
+  public constructor(private dateAdapter: DateAdapter<any>) {}
+
   public ngOnInit() {
     this.dateAdapter.setLocale(this.locale);
   }