@lobb-js/core 0.21.0 → 0.22.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lobb-js/core",
   "license": "UNLICENSED",
-  "version": "0.21.0",
+  "version": "0.22.0",
   "type": "module",
   "publishConfig": {
     "access": "public"

package/src/api/collections/collectionStore.ts

@@ -9,6 +9,7 @@ import { ZodError } from "zod";
 import { LobbError } from "../../LobbError.ts";
 import { Lobb } from "../../Lobb.ts";
 import { beginTransaction } from "./transactions.ts";
+import { validateFilterFields } from "./utils.ts";
 
 export interface ExposedServiceOutput {
   data: any;
@@ -70,6 +71,10 @@ export class CollectionStore {
         }
 
         if (params?.filter) {
+          if (triggeredBy === "API") {
+            validateFilterFields(params.filter, collectionName);
+          }
+
           params.filter = {
             $and: [params.filter],
           };

package/src/api/collections/utils.ts

@@ -1,6 +1,29 @@
 import { Lobb } from "../../Lobb.ts";
+import { LobbError } from "../../LobbError.ts";
 import { z } from "zod";
 
+export function validateFilterFields(filter: any, collectionName: string) {
+  const collectionFields = Lobb.instance.configManager.getNormalCollection(collectionName)?.fields;
+  if (!collectionFields) return;
+
+  const checkObject = (obj: any) => {
+    for (const key of Object.keys(obj)) {
+      if (key === "$and" || key === "$or") {
+        for (const sub of obj[key]) checkObject(sub);
+      } else if (!key.startsWith("$")) {
+        if (!collectionFields[key]) {
+          throw new LobbError({
+            code: "BAD_REQUEST",
+            message: `Invalid filter: field "${key}" does not exist in collection "${collectionName}"`,
+          });
+        }
+      }
+    }
+  };
+
+  checkObject(filter);
+}
+
 export function getCollectionDocumentSchema(
   collectionName?: string,
 ) {