@modular-rest/server 1.11.13 → 1.11.14

package/src/services/data_provider/router.js

@@ -1,552 +0,0 @@
-let { AccessTypes } = require("./../../class/security");
-let Router = require("koa-router");
-let validateObject = require("../../class/validator");
-let reply = require("../../class/reply").create;
-var nestedProperty = require("nested-property");
-
-//let Types = require('./types.js');
-
-let name = "data-provider";
-
-let service = require("./service");
-let middleware = require("./../../middlewares");
-
-let dataProvider = new Router();
-
-dataProvider.use("/", middleware.auth, async (ctx, next) => {
-  let body = ctx.request.body;
-  let bodyValidated = validateObject(body, "database collection");
-
-  // fields validation
-  if (!bodyValidated.isValid) {
-    ctx.throw(
-      412,
-      JSON.stringify(reply("e", { error: bodyValidated.requires }))
-    );
-  }
-
-  // type caster
-  if (body.types && body.hasOwnProperty(body.bodyKey || ".")) {
-    let bodyKey = body.bodyKey;
-    for (const key in body.types) {
-      if (
-        body.types.hasOwnProperty(key) &&
-        typeof body.types[key] == "object"
-      ) {
-        let typeDetail = body.types[key];
-
-        try {
-          let value = nestedProperty.get(body[bodyKey], typeDetail.path);
-          let newProperty = service.TypeCasters[typeDetail.type](value);
-          nestedProperty.set(body[bodyKey], typeDetail.path, newProperty);
-          console.log(
-            "newProperty",
-            newProperty,
-            JSON.stringify(body[bodyKey])
-          );
-        } catch (e) {
-          console.log("type caster error", e);
-        }
-      }
-    }
-  }
-
-  await next();
-});
-
-dataProvider.post("/find", async (ctx) => {
-  let body = ctx.request.body;
-  let bodyValidate = validateObject(body, "database collection query");
-
-  // fields validation
-  if (!bodyValidate.isValid) {
-    ctx.throw(
-      412,
-      JSON.stringify(reply("e", { error: bodyValidate.requires }))
-    );
-  }
-
-  // access validation
-  let hasAccess = service.checkAccess(
-    body.database,
-    body.collection,
-    AccessTypes.read,
-    body.query,
-    ctx.state.user
-  );
-  if (!hasAccess) {
-    console.log(body);
-    console.log(ctx.state.user.permission);
-    ctx.throw(403, "access denied");
-  }
-
-  // collection validation
-  let collection = service.getCollection(body.database, body.collection);
-  if (collection == null) {
-    ctx.throw(
-      412,
-      JSON.stringify(reply("e", { error: "wrong database or collection" }))
-    );
-  }
-
-  // operate on db
-  let queryRequest = collection.find(body.query, body.projection);
-
-  if (body.options) {
-    queryRequest = service.performAdditionalOptionsToQueryObject(
-      queryRequest,
-      body.options
-    );
-  }
-
-  if (body.populates) {
-    try {
-      req = service.performPopulateToQueryObject(queryRequest, body.populates);
-    } catch (err) {
-      ctx.status = 412;
-      ctx.body = err;
-    }
-  }
-
-  await queryRequest
-    .exec()
-    .then(async (docs) => {
-      // Call trigger
-      service.triggers.call("find", body.database, body.collection, {
-        query: body.query,
-        queryResult: docs,
-      });
-
-      ctx.body = { data: docs };
-    })
-    .catch((err) => {
-      ctx.status = err.status || 500;
-      ctx.body = err.message;
-    });
-});
-
-dataProvider.post("/find-one", async (ctx) => {
-  let body = ctx.request.body;
-  let bodyValidate = validateObject(body, "database collection query");
-
-  // fields validation
-  if (!bodyValidate.isValid) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: bodyValidate.requires })),
-      412
-    );
-  }
-
-  // access validation
-  let hasAccess = service.checkAccess(
-    body.database,
-    body.collection,
-    AccessTypes.read,
-    body.query,
-    ctx.state.user
-  );
-  if (!hasAccess) ctx.throw(403, "access denied");
-
-  // collection validation
-  let collection = service.getCollection(body.database, body.collection);
-  if (collection == null) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: "wrong database or collection" })),
-      412
-    );
-  }
-
-  // operate on db
-  let queryRequest = collection.findOne(
-    body.query,
-    body.projection,
-    body.options
-  );
-
-  if (body.options) {
-    queryRequest = service.performAdditionalOptionsToQueryObject(
-      queryRequest,
-      body.options
-    );
-  }
-
-  if (body.populates) {
-    try {
-      req = service.performPopulateToQueryObject(queryRequest, body.populates);
-    } catch (err) {
-      ctx.status = 412;
-      ctx.body = err;
-    }
-  }
-
-  // operate on db
-  await queryRequest
-    .exec()
-    .then(async (doc) => {
-      // Call trigger
-      service.triggers.call("find-one", body.database, body.collection, {
-        query: body.query,
-        queryResult: doc,
-      });
-
-      ctx.body = { data: doc };
-    })
-    .catch((err) => {
-      ctx.status = err.status || 500;
-      ctx.body = err.message;
-    });
-});
-
-dataProvider.post("/count", async (ctx) => {
-  let body = ctx.request.body;
-  let bodyValidate = validateObject(body, "database collection query");
-
-  // fields validation
-  if (!bodyValidate.isValid) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: bodyValidate.requires })),
-      412
-    );
-  }
-
-  // access validation
-  let hasAccess = service.checkAccess(
-    body.database,
-    body.collection,
-    AccessTypes.read,
-    body.query,
-    ctx.state.user
-  );
-  if (!hasAccess) ctx.throw(403, "access denied");
-
-  // collection validation
-  let collection = service.getCollection(body.database, body.collection);
-  if (collection == null) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: "wrong database or collection" })),
-      412
-    );
-  }
-
-  // operate on db
-  await collection
-    .countDocuments(body.query)
-    .exec()
-    .then((count) => {
-      // Call trigger
-      service.triggers.call("count", body.database, body.collection, {
-        query: body.query,
-        queryResult: count,
-      });
-
-      ctx.body = { data: count };
-    })
-    .catch((err) => {
-      ctx.status = err.status || 500;
-      ctx.body = err.message;
-    });
-});
-
-dataProvider.post("/update-one", async (ctx) => {
-  let body = ctx.request.body;
-  let bodyValidate = validateObject(body, "database collection query update");
-
-  // fields validation
-  if (!bodyValidate.isValid) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: bodyValidate.requires })),
-      412
-    );
-  }
-
-  // access validation
-  let hasAccess = service.checkAccess(
-    body.database,
-    body.collection,
-    AccessTypes.write,
-    body.query,
-    ctx.state.user
-  );
-  if (!hasAccess) ctx.throw(403, "access denied");
-
-  // collection validation
-  let collection = service.getCollection(body.database, body.collection);
-  if (collection == null) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: "wrong database or collection" })),
-      412
-    );
-  }
-
-  // get removing doc as output for triggers
-  let output = await collection.findOne(body.query).exec().then();
-
-  // operate on db
-  await collection
-    .updateOne(body.query, body.update, body.options)
-    .exec()
-    .then((writeOpResult) => {
-      // Call trigger
-      service.triggers.call("update-one", body.database, body.collection, {
-        query: body.query,
-        queryResult: writeOpResult,
-      });
-
-      ctx.body = { data: writeOpResult };
-    })
-    .catch((err) => {
-      ctx.status = err.status || 500;
-      ctx.body = err.message;
-    });
-});
-
-dataProvider.post("/insert-one", async (ctx) => {
-  let body = ctx.request.body;
-  let bodyValidate = validateObject(body, "database collection doc");
-
-  // fields validation
-  if (!bodyValidate.isValid) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: bodyValidate.requires })),
-      412
-    );
-  }
-
-  // access validation
-  let hasAccess = service.checkAccess(
-    body.database,
-    body.collection,
-    AccessTypes.write,
-    body.doc,
-    ctx.state.user
-  );
-  if (!hasAccess) {
-    console.log(body);
-    console.log(ctx.state.user.permission);
-    ctx.throw(403, "access denied");
-  }
-
-  // collection validation
-  let collection = service.getCollection(body.database, body.collection);
-  if (collection == null) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: "wrong database or collection" })),
-      412
-    );
-  }
-
-  // operate on db
-  await new collection(body.doc)
-    .save()
-    .then(async (newDoc) => {
-      // Call trigger
-      service.triggers.call("insert-one", body.database, body.collection, {
-        query: body.query,
-        queryResult: newDoc,
-      });
-
-      ctx.body = { data: newDoc };
-    })
-    .catch((err) => {
-      ctx.status = err.status || 500;
-      ctx.body = err.message;
-    });
-});
-
-dataProvider.post("/remove-one", async (ctx) => {
-  let body = ctx.request.body;
-  let bodyValidate = validateObject(body, "database collection query");
-
-  // fields validation
-  if (!bodyValidate.isValid) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: bodyValidate.requires })),
-      412
-    );
-  }
-
-  // access validation
-  let hasAccess = service.checkAccess(
-    body.database,
-    body.collection,
-    AccessTypes.write,
-    body.query,
-    ctx.state.user
-  );
-  if (!hasAccess) ctx.throw(403, "access denied");
-
-  // collection validation
-  let collection = service.getCollection(body.database, body.collection);
-  if (collection == null) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: "wrong database or collection" })),
-      412
-    );
-  }
-
-  // get removing doc as output for triggers
-  let output = await collection.findOne(body.query).exec().then();
-
-  // operate on db
-  await collection
-    .deleteOne(body.query)
-    .exec()
-    .then(async (result) => {
-      // Call trigger
-      service.triggers.call("remove-one", body.database, body.collection, {
-        query: body.query,
-        queryResult: result,
-      });
-
-      ctx.body = { data: result };
-    })
-    .catch((err) => {
-      ctx.status = err.status || 500;
-      ctx.body = err.message;
-    });
-});
-
-dataProvider.post("/aggregate", async (ctx) => {
-  let body = ctx.request.body;
-  let bodyValidate = validateObject(body, "database collection accessQuery");
-
-  // fields validation
-  if (!bodyValidate.isValid) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: bodyValidate.requires })),
-      412
-    );
-  }
-
-  // access validation
-  let hasAccess = service.checkAccess(
-    body.database,
-    body.collection,
-    AccessTypes.read,
-    body.accessQuery,
-    ctx.state.user
-  );
-  if (!hasAccess) ctx.throw(403, "access denied");
-
-  // collection validation
-  let collection = service.getCollection(body.database, body.collection);
-  if (collection == null) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: "wrong database or collection" })),
-      412
-    );
-  }
-
-  // operate on db
-  await collection
-    .aggregate(body.pipelines)
-    .exec()
-    .then(async (result) => {
-      // Call trigger
-      service.triggers.call("aggregate", body.database, body.collection, {
-        query: body.query,
-        queryResult: result,
-      });
-
-      ctx.body = { data: result };
-    })
-    .catch((err) => {
-      ctx.status = err.status || 500;
-      ctx.body = err.message;
-    });
-});
-
-dataProvider.post("/findByIds", async (ctx, next) => {
-  let body = ctx.request.body;
-  let bodyValidate = validateObject(body, "database collection ids");
-
-  // fields validation
-  if (!bodyValidate.isValid) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: bodyValidate.requires })),
-      412
-    );
-  }
-
-  // access validation
-  let hasAccess = service.checkAccess(
-    body.database,
-    body.collection,
-    AccessTypes.read,
-    body.accessQuery || {},
-    ctx.state.user
-  );
-  if (!hasAccess) ctx.throw(403, "access denied");
-
-  // collection validation
-  let collection = service.getCollection(body.database, body.collection);
-  if (collection == null) {
-    ctx.throw(
-      JSON.stringify(reply("e", { error: "wrong database or collection" })),
-      412
-    );
-  }
-
-  let or = [];
-
-  try {
-    body.ids.forEach((id) => {
-      let castedid = service.getAsID(id);
-      or.push({ _id: castedid });
-    });
-  } catch (e) {
-    console.log("ids.forEach", e);
-  }
-
-  let pipelines = [
-    {
-      $match: { $or: or },
-    },
-    // {
-    //     $sort: body.sort || { _id: 1 }
-    // }
-  ];
-
-  // operate on db
-  await collection
-    .aggregate(pipelines)
-    .exec()
-    .then(async (result) => {
-      ctx.state = { data: result };
-      await next();
-    })
-    .catch((err) => {
-      ctx.status = err.status || 500;
-      ctx.body = err.message;
-    });
-});
-
-dataProvider.use("/", async (ctx, next) => {
-  // this event is responsible to covert whole mongoose doc to json form
-  // inclouding getters, public propertise
-  // each mongoose doc must have a "toJson" method being defined on its own Schema.
-
-  let state = ctx.state;
-  //     let result;
-
-  //     // array
-  //     if(!isNaN(state.length)) {
-  //         result = [];
-
-  //         for (let index = 0; index < state.length; index++) {
-  //             const element = state[index];
-  //             if(element.hasOwnProperty('toJson'))
-  //                 result.push(element.toJson());
-  //             else result.push(element);
-  //         }
-  //     }
-  //     // object
-  //     else {
-  //         result = state.toJson();
-  //     }
-
-  ctx.body = state;
-});
-
-module.exports.name = name;
-module.exports.main = dataProvider;