feat: verifyQuery

lib/util/base.js

@@ -29,9 +29,13 @@ const verifyKey = req => {
  * @param {any} req The request to retrieve the query params.
  */
 const verifyQuery = req => {
-    if (!req.query.brand) return;
-    if (config.conf.WHITELIST.includes(req.query.brand)) return;
-    throw new Error(`Invalid '${req.query.brand}' brand`);
+    const WHITELIST = config.conf.WHITELIST;
+    Object.keys(req.query).forEach(key => {
+        const param = req.query[key];
+        if (key in WHITELIST && !WHITELIST[key].includes(param)) {
+            throw new Error(`Restricted value '${param}' for param '${key}'`);
+        }
+    });
 };
 
 module.exports = {