Function enforceBodyLimit

apps/api/src/middleware/body-limit.ts:30–60

(input: {
  method: string;
  contentLength: string | null;
  maxBytes?: number;
})

 * this global cap.
 */
export const enforceBodyLimit = (input: {
  method: string;
  contentLength: string | null;
  maxBytes?: number;
}): void => {
  if (!BODIED_METHODS.has(input.method)) {
    return;
  }

  const cap = input.maxBytes ?? MAX_BODY_SIZE_BYTES;

  if (input.contentLength === null) {
    throw ApiErrors.validation(
      "Content-Length header is required for requests with a body",
      "body"
    );
  }

  const size = Number.parseInt(input.contentLength, 10);

  if (Number.isNaN(size)) {
    throw ApiErrors.validation(
      "Content-Length header must be a number",
      "body"
    );
  }

  if (size > cap) {
    throw ApiErrors.validation("Request body exceeds 1 MB limit", "body");
  }
};

export const bodyLimit = new Elysia().onParse(({ request }) => {
  enforceBodyLimit({