updated handlers to only use permitted params

EventLedger · Aug 30, 2024 · df68555 · df68555
1 parent 7fef705
commit df68555
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 7 deletions.
diff --git a/src/handlers/createAccount.ts b/src/handlers/createAccount.ts
@@ -12,8 +12,13 @@ const createAccountHandler = async (
   await connectToDatabase()
   const accountsService = new AccountsService()
 
-  const createAccountDto: CreateAccountDto = JSON.parse(event.body || '{}')
-  const account = await accountsService.createAccount(createAccountDto)
+  const { accountNumber, customerId, currencies }: CreateAccountDto =
+    JSON.parse(event.body || '{}')
+  const account = await accountsService.createAccount({
+    accountNumber,
+    customerId,
+    currencies,
+  })
 
   return {
     statusCode: 201,

diff --git a/src/handlers/updateAccount.ts b/src/handlers/updateAccount.ts
@@ -13,12 +13,14 @@ const updateAccountHandler = async (
 
   const accountsService = new AccountsService()
   const accountId = event.pathParameters?.accountId
-  const updateAccountDto: UpdateAccountDto = JSON.parse(event.body || '{}')
+  const { customerId, accountNumber, currencies }: UpdateAccountDto =
+    JSON.parse(event.body || '{}')
 
-  const updatedAccount = await accountsService.updateAccount(
-    accountId!,
-    updateAccountDto,
-  )
+  const updatedAccount = await accountsService.updateAccount(accountId!, {
+    customerId,
+    accountNumber,
+    currencies,
+  })
   return {
     statusCode: 200,
     body: JSON.stringify(updatedAccount),