login web endpoint fastify body schema validation (#2653)

* feat: add body schema validation to login endpoint

#2623

When a request is made, the following error is displayed on log
error--- Promise may not be fulfilled with 'undefined' when statusCode is not 204

https://github.com/fastify/fastify/pull/2702

* feat: add body schema validation to resetPassword endpoint

Co-authored-by: Juan Picado <juanpicado19@gmail.com>

packages/core/server/src/routes/web/api/login.ts

@@ -6,9 +6,36 @@ import { JWTSignOptions } from '@verdaccio/types';
 import { validatePassword } from '@verdaccio/utils';
 
 const debug = buildDebug('verdaccio:api:login');
+const loginBodySchema = {
+  body: {
+    type: 'object',
+    required: ['username', 'password'],
+    additionalProperties: false,
+    properties: {
+      username: { type: 'string' },
+      password: { type: 'string' },
+    },
+  },
+};
+
+const resetPasswordSchema = {
+  body: {
+    type: 'object',
+    required: ['password'],
+    additionalProperties: false,
+    properties: {
+      password: { type: 'string' },
+    },
+  },
+};
 
 async function loginRoute(fastify: FastifyInstance) {
-  fastify.post('/login', async (request, reply) => {
+  fastify.post(
+    '/login',
+    {
+      schema: loginBodySchema,
+    },
+    async (request, reply) => {
       // @ts-expect-error
       const { username, password } = request.body;
       debug('authenticate %o', username);
@@ -29,9 +56,15 @@ async function loginRoute(fastify: FastifyInstance) {
           }
         }
       );
-  });
+    }
+  );
 
-  fastify.put('/reset_password', async (request, reply) => {
+  fastify.put(
+    '/reset_password',
+    {
+      schema: resetPasswordSchema,
+    },
+    async (request, reply) => {
       if (_.isNil(request.userRemote.name)) {
         reply.send(
           fastify.errorUtils.getCode(
@@ -69,7 +102,8 @@ async function loginRoute(fastify: FastifyInstance) {
           )
         );
       }
-  });
+    }
+  );
   // });
 }
 export default loginRoute;