verdaccio/test/unit/validate_all.spec.js

// ensure that all arguments are validated
const assert = require('assert');
const path = require('path');

/**
 * Validate.
 app.param('package', validate_pkg);
 app.param('filename', validate_name);
 app.param('tag', validate_name);
 app.param('version', validate_name);
 app.param('revision', validate_name);
 app.param('token', validate_name);
 */
describe('api endpoint app.param()', runTest('../endpoint/index.js'));

function runTest(file) {
  return function() {

    let requirePath = path.normalize(path.join(__dirname + '/../../src/api/web/', file));
    let source = require('fs').readFileSync(requirePath, 'utf8');

    let very_scary_regexp = /\n\s*app\.(\w+)\s*\(\s*(("[^"]*")|('[^']*'))\s*,/g;
    let m;
    let appParams = {};

    // look up for matches in the source code
    while ((m = very_scary_regexp.exec(source)) != null) {
      if (m[1] === 'set') continue;

      let inner = m[2].slice(1, m[2].length-1);
      var t;

      inner.split('/').forEach(function(x) {
        t = x.match(/^:([^?:]*)\??$/);
        if (m[1] === 'param') {
          appParams[x] = 'ok';
        } else if (t) {
          appParams[t[1]] = appParams[t[1]] || m[0].trim();
        }
      });
    }


      Object.keys(appParams).forEach(function(param) {
        test('should validate ":'+param+'"', () => {
            assert.equal(appParams[param], 'ok');
          });
      });
  };
}