@lenne.tech/nest-server 10.3.4 → 10.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nest-server",
-  "version": "10.3.4",
+  "version": "10.4.1",
   "description": "Modern, fast, powerful Node.js web framework in TypeScript based on Nest with a GraphQL API and a connection to MongoDB (or other databases).",
   "keywords": [
     "node",
@@ -63,19 +63,19 @@
     "node": ">= 20"
   },
   "dependencies": {
-    "@apollo/gateway": "2.8.4",
+    "@apollo/gateway": "2.9.2",
     "@getbrevo/brevo": "1.0.1",
     "@lenne.tech/mongoose-gridfs": "1.4.2",
     "@lenne.tech/multer-gridfs-storage": "5.0.6",
     "@nestjs/apollo": "12.2.0",
-    "@nestjs/common": "10.4.1",
-    "@nestjs/core": "10.4.1",
+    "@nestjs/common": "10.4.4",
+    "@nestjs/core": "10.4.4",
     "@nestjs/graphql": "12.2.0",
     "@nestjs/jwt": "10.2.0",
     "@nestjs/mongoose": "10.0.10",
     "@nestjs/passport": "10.0.3",
-    "@nestjs/platform-express": "10.4.1",
-    "@nestjs/schedule": "4.1.0",
+    "@nestjs/platform-express": "10.4.4",
+    "@nestjs/schedule": "4.1.1",
     "@nestjs/terminus": "10.2.3",
     "apollo-server-core": "3.13.0",
     "apollo-server-express": "3.13.0",
@@ -90,15 +90,15 @@
     "graphql-subscriptions": "2.0.0",
     "graphql-upload": "15.0.2",
     "js-sha256": "0.11.0",
-    "json-to-graphql-query": "2.2.5",
-    "light-my-request": "5.13.0",
+    "json-to-graphql-query": "2.3.0",
+    "light-my-request": "6.0.0",
     "lodash": "4.17.21",
-    "mongodb": "6.8.0",
-    "mongoose": "7.8.1",
+    "mongodb": "6.9.0",
+    "mongoose": "7.8.2",
     "multer": "1.4.5-lts.1",
-    "node-mailjet": "4.0.1",
-    "nodemailer": "6.9.14",
-    "nodemon": "3.1.4",
+    "node-mailjet": "6.0.6",
+    "nodemailer": "6.9.15",
+    "nodemon": "3.1.7",
     "passport": "0.7.0",
     "passport-jwt": "4.0.1",
     "reflect-metadata": "0.2.2",
@@ -111,43 +111,43 @@
     "@babel/plugin-proposal-private-methods": "7.18.6",
     "@compodoc/compodoc": "1.1.25",
     "@lenne.tech/eslint-config-ts": "0.0.16",
-    "@nestjs/cli": "10.4.4",
+    "@nestjs/cli": "10.4.5",
     "@nestjs/schematics": "10.1.4",
-    "@nestjs/testing": "10.4.1",
+    "@nestjs/testing": "10.4.4",
     "@swc/cli": "0.4.0",
-    "@swc/core": "1.7.14",
+    "@swc/core": "1.7.28",
     "@swc/jest": "0.2.36",
     "@types/compression": "1.7.5",
     "@types/cookie-parser": "1.4.7",
     "@types/ejs": "3.1.5",
     "@types/express": "4.17.21",
-    "@types/jest": "29.5.12",
-    "@types/lodash": "4.17.7",
-    "@types/multer": "1.4.11",
-    "@types/node": "20.16.1",
-    "@types/nodemailer": "6.4.15",
+    "@types/jest": "29.5.13",
+    "@types/lodash": "4.17.9",
+    "@types/multer": "1.4.12",
+    "@types/node": "20.16.9",
+    "@types/nodemailer": "6.4.16",
     "@types/passport": "1.0.16",
     "@types/supertest": "6.0.2",
     "@typescript-eslint/eslint-plugin": "6.21.0",
     "@typescript-eslint/parser": "6.21.0",
     "coffeescript": "2.7.0",
-    "eslint": "8.57.0",
+    "eslint": "8.57.1",
     "eslint-config-prettier": "9.1.0",
-    "eslint-plugin-unused-imports": "4.1.3",
+    "eslint-plugin-unused-imports": "4.1.4",
     "find-file-up": "2.0.1",
     "grunt": "1.6.1",
     "grunt-bg-shell": "2.3.3",
     "grunt-contrib-clean": "2.0.1",
     "grunt-contrib-watch": "1.1.0",
     "grunt-sync": "0.8.2",
-    "husky": "9.1.5",
+    "husky": "9.1.6",
     "jest": "29.7.0",
     "npm-watch": "0.13.0",
     "pm2": "5.4.2",
     "prettier": "3.3.3",
     "pretty-quick": "4.0.0",
     "supertest": "7.0.0",
-    "ts-jest": "29.2.4",
+    "ts-jest": "29.2.5",
     "ts-loader": "9.5.1",
     "ts-morph": "21.0.1",
     "ts-node": "10.9.2",

package/src/core/common/helpers/input.helper.ts

@@ -793,7 +793,7 @@ export function prepareServiceOptionsForCreate(serviceOptions: any) {
     serviceOptions.prepareInput = {};
   }
   if (serviceOptions.prepareInput.create === undefined) {
-    serviceOptions.prepareInput.create;
+    serviceOptions.prepareInput.create = true;
   }
   return serviceOptions;
 }

package/src/core/common/interceptors/check-security.interceptor.ts

@@ -25,61 +25,54 @@ export class CheckSecurityInterceptor implements NestInterceptor {
       }
     }
 
-    // Check response
-    return next.handle().pipe(
-      map((data) => {
-        // Check data
-        if (data && typeof data === 'object' && typeof data.securityCheck === 'function') {
-          const dataJson = JSON.stringify(data);
-          const response = data.securityCheck(user, force);
-          new Promise(() => {
-            if (dataJson !== JSON.stringify(response)) {
-              const id = getStringIds(data);
-              console.debug(
-                'CheckSecurityInterceptor: securityCheck changed data of type',
-                data.constructor.name,
-                id && !Array.isArray(id) ? `with ID: ${id}` : '',
-              );
-            }
-          });
-          return response;
+    const check = (data) => {
+      // Check data
+      if (data && typeof data === 'object' && typeof data.securityCheck === 'function') {
+        const dataJson = JSON.stringify(data);
+        const response = data.securityCheck(user, force);
+        new Promise(() => {
+          if (dataJson !== JSON.stringify(response)) {
+            const id = getStringIds(data);
+            console.debug(
+              'CheckSecurityInterceptor: securityCheck changed data of type',
+              data.constructor.name,
+              id && !Array.isArray(id) ? `with ID: ${id}` : '',
+            );
+          }
+        });
+        if (response && !data._doNotCheckSecurityDeep) {
+          for (const key of Object.keys(response)) {
+            response[key] = check(response[key]);
+          }
         }
+        return response;
+      }
 
-        // Check if data is writeable (e.g. objects from direct access to json files via http are not writable)
-        if (data && typeof data === 'object') {
-          const writeable = !Object.keys(data).find(key => !Object.getOwnPropertyDescriptor(data, key).writable);
-          if (!writeable) {
-            return data;
-          }
+      // Check if data is writeable (e.g. objects from direct access to json files via http are not writable)
+      if (data && typeof data === 'object') {
+        const writeable = !Object.keys(data).find(key => !Object.getOwnPropertyDescriptor(data, key).writable);
+        if (!writeable) {
+          return data;
         }
+      }
 
-        // Check deep
-        return processDeep(
-          data,
-          (item) => {
-            if (!item || typeof item !== 'object' || typeof item.securityCheck !== 'function') {
-              if (Array.isArray(item)) {
-                return item.filter(i => i !== undefined);
-              }
-              return item;
+      // Check deep
+      return processDeep(
+        data,
+        (item) => {
+          if (!item || typeof item !== 'object' || typeof item.securityCheck !== 'function') {
+            if (Array.isArray(item)) {
+              return item.filter(i => i !== undefined);
             }
-            const itemJson = JSON.stringify(item);
-            const response = item.securityCheck(user, force);
-            new Promise(() => {
-              if (itemJson !== JSON.stringify(response)) {
-                const id = getStringIds(item);
-                console.debug(
-                  'CheckSecurityInterceptor: securityCheck changed item of type',
-                  item.constructor.name,
-                  id && !Array.isArray(id) ? `with ID: ${id}` : '',
-                );
-              }
-            });
-            return response;
-          },
-          { specialFunctions: ['securityCheck'] },
-        );
-      }),
-    );
+            return item;
+          }
+          return check(item);
+        },
+        { specialFunctions: ['securityCheck'] },
+      );
+    };
+
+    // Check response
+    return next.handle().pipe(map(check));
   }
 }

package/src/core/common/services/module.service.ts

@@ -97,7 +97,7 @@ export abstract class ModuleService<T extends CoreModel = any> {
       processFieldSelection: {},
       pubSub: true,
       setCreateOrUpdateUserId: true,
-      ...options?.serviceOptions,
+      ...(options?.serviceOptions || {}),
     };
 
     // Note raw configuration

package/src/test/test.helper.ts

@@ -204,15 +204,19 @@ export class TestHelper {
 
     // Init
     let query = '';
+    let name: string = undefined;
 
     // Convert string to TestGraphQLConfig
-    if ((typeof graphql === 'string' || graphql instanceof String) && /^[a-zA-Z]+$/.test(graphql as string)) {
+    if (
+      (typeof graphql === 'string' || graphql instanceof String)
+      && /^(?![a-zA-Z]+$).*$/.test((graphql as string).trim())
+    ) {
       // Use input as query
-      query = graphql as string;
+      query = (graphql as string).trim();
     } else {
       // Use input as name
       if (typeof graphql === 'string' || graphql instanceof String) {
-        graphql = { name: graphql } as any;
+        graphql = { name: (graphql as string).trim() } as any;
       }
 
       // Prepare config
@@ -225,6 +229,7 @@ export class TestHelper {
         },
         graphql,
       ) as TestGraphQLConfig;
+      name = graphql.name;
 
       // Init request
       const queryObj = {};
@@ -248,7 +253,11 @@ export class TestHelper {
       }
 
       // Create request payload query
-      query = jsonToGraphQLQuery(queryObj, { pretty: true });
+      if (!graphql.fields?.length && !graphql.arguments) {
+        query = `${graphql.type} { ${graphql.name} }`;
+      } else {
+        query = jsonToGraphQLQuery(queryObj, { pretty: true });
+      }
     }
 
     if ((graphql as TestGraphQLConfig).type === TestGraphQLType.SUBSCRIPTION) {
@@ -298,7 +307,21 @@ export class TestHelper {
     expect(response.headers['content-type']).toMatch('application/json');
 
     // return data
-    return response.body.data ? response.body.data[(graphql as TestGraphQLConfig).name] : response.body;
+    if (response.body) {
+      if (response.body.data) {
+        return name ? response.body.data[(graphql as TestGraphQLConfig).name] : response.body.data;
+      }
+      return response.body;
+    }
+    if (response.text) {
+      if (JSON.parse(response.text).data) {
+        return name
+          ? JSON.parse(response.text).data[(graphql as TestGraphQLConfig).name]
+          : JSON.parse(response.text).data;
+      }
+      return JSON.parse(response.text);
+    }
+    return undefined;
   }
 
   /**