Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/alphagov/pay-js-commons
Reusable js scripts for GOV.UK Pay Node.js projects
https://github.com/alphagov/pay-js-commons
govuk-pay portfolio
Last synced: 15 days ago
JSON representation
Reusable js scripts for GOV.UK Pay Node.js projects
- Host: GitHub
- URL: https://github.com/alphagov/pay-js-commons
- Owner: alphagov
- License: mit
- Created: 2018-04-04T09:29:09.000Z (almost 7 years ago)
- Default Branch: master
- Last Pushed: 2024-03-28T18:03:07.000Z (10 months ago)
- Last Synced: 2024-04-09T21:58:59.100Z (10 months ago)
- Topics: govuk-pay, portfolio
- Language: SCSS
- Homepage:
- Size: 13.5 MB
- Stars: 4
- Watchers: 17
- Forks: 3
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# GOV.UK Pay JS Commons
Reusable js scripts for GOV.UK Pay Node.js projects
- [Browsered scripts](#browsered-scripts)
- [Utilities](#utilities)
- [Nunjucks filters](#nunjucks-filters)
- [HTTPS base client](#https-base-client)
- [Releasing a new version](#releasing-a-new-version)
## Browsered scripts
This is a collection of client side scripts we use throughout GOV.UK
Pay in the browser. We call it `browsered` because they are written in
Node.js and _browsered_ by Browserify to make them safe for all our
browsers. We browserify [within the microservice when it’s compiled](https://github.com/alphagov/pay-selfservice/blob/master/Gruntfile.js#L128).
#### List of scripts
- [Field validation](#field-validation)
### Field Validation
This is a collection of validators that can be applied to inputs that
will check the values and display errors using the [GOV.UK elements styling](https://govuk-elements.herokuapp.com/errors/#summarise-errors).
Validators:
- [required](#required)
- [currency](#currency)
- [email](#email)
- [phone](#phone)
- [https](#https)
- [belowMaxAmount](#number-is-less-than-maximum-value)
- [passwordLessThanTenChars](#password)
- [isFieldGreaterThanMaxLengthChars](#maximum-character-limit)
- [isNaxsiSafe](#naxsi)
#### Required
This requires a value from a given input
```html
Your name
```
#### Currency
This requires the value is a valid currency amount i.e. “10” or ”9.99”.
```html
Amount
```
#### Email
This requires the value is a valid email address with a [TLD](https://en.wikipedia.org/wiki/Top-level_domain) on the end (as [technically](https://www.ietf.org/rfc/rfc822.txt) an email doesn’t need one).
```html
Your email address
```
#### Phone
This requires the value is a 11 digit phone number, it isn’t concerned
with spacing, so `077 777 777 77` and `07777777777` are both valid.
```html
Phone number
```
#### HTTPS
This requires a link to begin with https://
```html
Return URL
```
#### Number is less than maximum value
This requires the value is less than £100,000 as that has been deemed sensible…
```html
Amount
```
#### Password
This requires a password be at least 10 chars
```html
Password
```
#### Maximum character limit
This requires a value be less than a certain number of characters. This limit
is set within a `data-attribute`
```html
Title
```
#### NAXSI
This checks whether a field contains characters than would cause NAXSI to get upset,
meaning characters that look like code injection
i.e. ``< > ; : ` ( ) " \' = | , ~ [ ]``
```html
Title
```
## Utilities
### Nunjucks filters
These are small functions that power the nunjucks filters but can also be used for server side stuff too.
These get loaded in to the Nunjucks environment and then can apply changes to variables in templates.
For example if a country comes in as ISO code `EN` it can be converted to it’s name like so
```html
{{ countryCode | countryISOtoName }}
```
Or a pence value can be converted to GBP
```html
- Amount:
- {{ amount | penceToPounds }}
```
## Axios base client
Used in our Node.js apps to call APIs such as connector or ledger.
Uses the NPM [Axios](https://www.npmjs.com/package/axios) library.
The base client provides the following configuration options:
* onRequestStart - Callback function before starting a API request. Mainly used for logging.
* onSuccessResponse - Callback function when request has completed successfully.
* onFailureResponse - Callback function when request has failed.
* acceptAllStatusCodes - `boolean`
* By default all non 2xx responses are considered failed requests.
* Set this to `true` and all status codes are considered a successful request. You code will then need to handle the response appropriately. Currently, only `pay-frontend` requires this to be set to `true`.
### Built in in retry functionality
If a `GET` request provides a response with the error message `ECONNRESET` - the the Axios base client will automatically try that request another 2 times - 3 times in total.
By default, on each failed request, it will call the `onFailureResponse` callback.
If `acceptAllStatusCodes=true`, then it will call the `onSuccessResponse` callback.
## Releasing
After a pull request is merged, Concourse will automatically create a new release pull request that increments the package version.
This pull request must be reviewed and merged by a developer.
Once the release pull request is merged, GitHub Actions will publish the new versioned package to NPM.
__IMPORTANT__: Other pull requests will be blocked from merging until the release pull request is merged or closed.
## Licence
[MIT License](https://github.com/alphagov/pay-js-commons/blob/master/LICENSE)
## Vulnerability Disclosure
GOV.UK Pay aims to stay secure for everyone.
If you are a security researcher and have discovered a security vulnerability in this code, we appreciate your help in disclosing it to us in a responsible manner.
Please refer to our [vulnerability disclosure policy](https://www.gov.uk/help/report-vulnerability) and our [security.txt](https://vdp.cabinetoffice.gov.uk/.well-known/security.txt) file for details.