solution

[yaroslav-na]

No description provided.

[anastasiiavorobiova]

Great work! Added a few comments to fix

[anastasiiavorobiova]

Consider creating a middleware folder and placing middleware here for checking and validating the user input from the request before passing it to the controller. The user data from the request should be sanitized. Also, you will be able to send 400 errors with additional information about errors.

[anastasiiavorobiova]

Also, it would be better to wrap this bunch of code inside the try-catch block to handle errors related to the DB connection, etc. In this case, we should provide a client with a proper error code and avoid throwing an error object directly to the client.

[anastasiiavorobiova]

Suggested change

	const expenses = await expenseService.getAllFiltered({
	userId: numberUserId,
	categories,
	from,
	to,
	});
	res.status(200).send(expenses.map(expenseService.format));
	try {
	const expenses = await expenseService.getAllFiltered({
	userId: numberUserId,
	categories,
	from,
	to,
	});
	res.status(200).send(expenses.map(expenseService.format));
	} catch(err) {
	res.statusCode = 500;
	res.send('Something went wrong);
	}

[anastasiiavorobiova]

Suggested change

	router.post('/', expenseController.create);
	router.post('/', yourMiddlewareToCheckAndSanitizeTheRequest, expenseController.create);

Middlewares should be placed here

[lerastarynets]

lgtm 🚀