Run Event API Validation fixes...

- Ensure that `params` is a plain object (not an array).
- Populate default event field values if params is sparse (do this in api_magic as well).

Author: jhuckaby

lib/api/events.js

@@ -389,7 +389,7 @@ class Events {
 			delete params.json;
 		}
 
-		if (!params.params) params.params = {};
+		if (!params.params || (typeof(params.params) != 'object') || Array.isArray(params.params)) params.params = {};
 
 		// allow user to specify event by id or title
 		var criteria = {};
@@ -438,12 +438,16 @@ class Events {
 				}
 			}
 
-			// allow sparsely populated event params in request
+			// allow sparsely populated event params and fields in request
 			if (event.params) {
 				for (var key in event.params) {
 					if (!(key in params.params)) params.params[key] = event.params[key];
 				}
 			}
+			if (event.fields) event.fields.forEach( function(field) {
+				var key = field.id;
+				if (!(key in params.params)) params.params[key] = field.value;
+			});
 
 			// apply defaults for locked plugin params, if user is not an admin
 			var privs = self.getComputedPrivileges(user);
@@ -580,12 +584,16 @@ class Events {
 			return this.doError('api', "Malformed event parameter: input (must be object)", callback);
 		}
 
-		// allow sparsely populated event params in request
+		// allow sparsely populated event params and fields in request
 		if (event.params) {
 			for (var key in event.params) {
 				if (!(key in params)) params[key] = event.params[key];
 			}
 		}
+		if (event.fields) event.fields.forEach( function(field) {
+			var key = field.id;
+			if (!(key in params)) params[key] = field.value;
+		});
 
 		if (!is_workflow) {
 			var old_params = event.params || {};