@lenne.tech/nest-server 9.2.6 → 9.2.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nest-server",
-  "version": "9.2.6",
+  "version": "9.2.7",
   "description": "Modern, fast, powerful Node.js web framework in TypeScript based on Nest with a GraphQL API and a connection to MongoDB (or other databases).",
   "keywords": [
     "node",

package/src/config.env.ts

@@ -56,6 +56,7 @@ const config: { [env: string]: IServerOptions } = {
       },
       maxComplexity: 20,
     },
+    ignoreSelectionsForPopulate: true,
     jwt: {
       secret: 'SECRET_OR_PRIVATE_KEY_LOCAL',
       signInOptions: {
@@ -129,6 +130,7 @@ const config: { [env: string]: IServerOptions } = {
       },
       maxComplexity: 20,
     },
+    ignoreSelectionsForPopulate: true,
     jwt: {
       secret: 'SECRET_OR_PRIVATE_KEY_DEV',
       signInOptions: {
@@ -202,6 +204,7 @@ const config: { [env: string]: IServerOptions } = {
       },
       maxComplexity: 20,
     },
+    ignoreSelectionsForPopulate: true,
     jwt: {
       secret: 'SECRET_OR_PRIVATE_KEY_PROD',
       signInOptions: {

package/src/core/common/interfaces/server-options.interface.ts

@@ -173,8 +173,11 @@ export interface IServerOptions {
   /**
    * Ignore selections in fieldSelection
    * [ConfigService must be integrated in ModuleService]
-   * If falsy (default): select and populate information in fieldSelection will be respected
-   * If truly: select fields will be ignored and only populate fields in fieldSelection will be respected
+   * If truly (default): select fields will be ignored and only populate fields in fieldSelection will be respected
+   * If falsy: select and populate information in fieldSelection will be respected
+   *
+   * Hint: falsy may cause problems with CheckSecurityInterceptor
+   * because the checks may miss fields that were not explicitly requested
    */
   ignoreSelectionsForPopulate?: boolean;
 

package/src/core/common/services/module.service.ts

@@ -99,7 +99,7 @@ export abstract class ModuleService<T extends CoreModel = any> {
     };
 
     // Set default for ignoreSelections if not set
-    const ignoreSelections = this.configService?.getFastButReadOnly('ignoreSelectionsForPopulate', false);
+    const ignoreSelections = this.configService?.getFastButReadOnly('ignoreSelectionsForPopulate', true);
     if (ignoreSelections) {
       if (config.processFieldSelection.ignoreSelections === undefined) {
         config.processFieldSelection.ignoreSelections = ignoreSelections;