feat(validator): check for json subtypes in validator (#2634)

* check for json subtypes in validator

* formatting and deno_dist added

* review fix, string#match -> regexp#test

* format & lint

deno_dist/validator/validator.ts

@@ -67,7 +67,7 @@ export const validator = <
 
     switch (target) {
       case 'json':
-        if (!contentType || !contentType.startsWith('application/json')) {
+        if (!contentType || !/^application\/([a-z-]+\+)?json/.test(contentType)) {
           const message = `Invalid HTTP header: Content-Type=${contentType}`
           throw new HTTPException(400, { message })
         }

src/validator/validator.test.ts

@@ -117,6 +117,19 @@ describe('Malformed JSON', () => {
     expect(res.status).toBe(400)
   })
 
+  it('Should return 200 response, for request with Content-Type which is a subtype like application/merge-patch+json', async () => {
+    const res = await app.request('http://localhost/post', {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/merge-patch+json',
+      },
+      body: JSON.stringify({
+        any: 'thing',
+      }),
+    })
+    expect(res.status).toBe(200)
+  })
+
   it('Should return 400 response, if Content-Type header does not start with application/json', async () => {
     const res = await app.request('http://localhost/post', {
       method: 'POST',

src/validator/validator.ts

@@ -67,7 +67,7 @@ export const validator = <
 
     switch (target) {
       case 'json':
-        if (!contentType || !contentType.startsWith('application/json')) {
+        if (!contentType || !/^application\/([a-z-]+\+)?json/.test(contentType)) {
           const message = `Invalid HTTP header: Content-Type=${contentType}`
           throw new HTTPException(400, { message })
         }