@opengis/fastify-table 1.0.8 → 1.0.9

package/test/api/crud.test.js

@@ -1,48 +1,50 @@
-import { test } from 'node:test';
-import assert from 'node:assert';
-
-import build from '../../helper.js';
-import pgClients from '../../pg/pgClients.js';
-
-test('api crud', async (t) => {
-  const app = await build(t);
-
-  await t.test('POST /insert', async () => {
-    const res = await app.inject({
-      method: 'POST',
-      url: '/api/crud/gis.dataset',
-      body: { dataset_name: '111', dataset_id: '5400000' },
-    });
-
-    const rep = JSON.parse(res?.body);
-    // rep.dataset_id
-    // console.log(rep);
-    // pgClients.client.query('delete from gis.dataset where dataset_id=$1', [rep.dataset_id]);
-    assert.ok(rep.dataset_id);
-  });
-
-  await t.test('PUT /update', async () => {
-    const res = await app.inject({
-      method: 'PUT',
-      url: '/api/crud/gis.dataset/5400000',
-      body: { editor_id: '11' },
-    });
-
-    const rep = JSON.parse(res?.body);
-    // rep.dataset_id
-    // console.log(rep);
-    assert.equal(rep.editor_id, '11')
-  });
-
-  await t.test('DELETE /delete', async () => {
-    const res = await app.inject({
-      method: 'DELETE',
-      url: '/api/crud/gis.dataset/5400000',
-    });
-
-    const rep = JSON.parse(res?.body);
-    // rep.dataset_id
-    // console.log(rep);
-    assert.ok(rep);
-  });
-});
+import { test } from 'node:test';
+import assert from 'node:assert';
+
+import build from '../../helper.js';
+
+import config from '../config.js';
+
+test('api crud', async (t) => {
+  const app = await build(t);
+  const prefix = config.prefix || '/api';
+
+  await t.test('POST /insert', async () => {
+    const res = await app.inject({
+      method: 'POST',
+      url: `${prefix}/crud/gis.dataset`,
+      body: { dataset_name: '111', dataset_id: '5400000' },
+    });
+
+    const rep = JSON.parse(res?.body);
+    // rep.dataset_id
+    // console.log(rep);
+    // pgClients.client.query('delete from gis.dataset where dataset_id=$1', [rep.dataset_id]);
+    assert.ok(rep.dataset_id);
+  });
+
+  await t.test('PUT /update', async () => {
+    const res = await app.inject({
+      method: 'PUT',
+      url: `${prefix}/crud/gis.dataset/5400000`,
+      body: { editor_id: '11' },
+    });
+
+    const rep = JSON.parse(res?.body);
+    // rep.dataset_id
+    // console.log(rep);
+    assert.equal(rep.editor_id, '11');
+  });
+
+  await t.test('DELETE /delete', async () => {
+    const res = await app.inject({
+      method: 'DELETE',
+      url: `${prefix}/crud/gis.dataset/5400000`,
+    });
+
+    const rep = JSON.parse(res?.body);
+    // rep.dataset_id
+    // console.log(rep);
+    assert.ok(rep);
+  });
+});

package/test/api/crud.xss.test.js

@@ -0,0 +1,70 @@
+import { test } from 'node:test';
+import assert from 'node:assert';
+
+import build from '../../helper.js';
+
+import setTokenById from '../../crud/funcs/setTokenById.js';
+import config from '../config.js';
+
+test('api crud xss', async (t) => {
+  const app = await build(t);
+  const session = { passport: { user: { uid: '1' } } };
+  app.decorateRequest('session', session);
+
+  const prefix = config.prefix || '/api';
+
+  let addTokens;
+  let editTokens;
+
+  // before
+  t.test('setTokenById', async () => {
+    addTokens = setTokenById({
+      funcs: { config },
+      ids: [JSON.stringify({ add: 'gis.dataset', form: 'test.dataset.form' })],
+      mode: 'a',
+      session,
+      array: 1,
+    });
+    editTokens = setTokenById({
+      funcs: { config },
+      ids: [JSON.stringify({ id: '5400000', table: 'gis.dataset', form: 'test.dataset.form' })],
+      mode: 'w',
+      session,
+      array: 1,
+    });
+    assert.ok(addTokens.length === 1 && editTokens.length === 1, 'invalid token');
+  });
+
+  await t.test('POST /insert', async () => {
+    const res = await app.inject({
+      method: 'POST',
+      url: `${prefix}/crud/${addTokens[0]}`,
+      body: { dataset_name: '<a onClick="alert("XSS Injection")">xss injection</a>', dataset_id: '5400000' },
+    });
+
+    const rep = JSON.parse(res?.body);
+
+    assert.ok(rep.status, 409);
+  });
+
+  await t.test('PUT /update', async () => {
+    const res = await app.inject({
+      method: 'PUT',
+      url: `${prefix}/crud/${editTokens[0]}/${editTokens[0]}`,
+      body: { editor_id: '11', dataset_name: '<a onClick="alert("XSS Injection")">xss injection</a>' },
+    });
+
+    const rep = JSON.parse(res?.body);
+
+    assert.equal(rep.status, 409);
+  });
+  await t.test('DELETE /delete', async () => {
+    const res = await app.inject({
+      method: 'DELETE',
+      url: `${prefix}/crud/gis.dataset/5400000`,
+    });
+
+    const rep = JSON.parse(res?.body);
+    assert.ok(rep);
+  });
+});

package/test/api/table.test.js

@@ -1,49 +1,49 @@
-import { test } from 'node:test';
-import assert from 'node:assert';
-
-import build from '../../helper.js';
-
-test('api table', async (t) => {
-  const app = await build(t);
-  // assert.ok(1);
-  await t.test('GET /suggest', async () => {
-    const res = await app.inject({
-      method: 'GET',
-      url: '/api/suggest/storage.data',
-    });
-    // console.log(res?.body);
-    const rep = JSON.parse(res?.body);
-    // console.log(rep.total);
-    assert.ok(rep.total);
-  });
-  await t.test('GET /data', async () => {
-    const res = await app.inject({
-      method: 'GET',
-      url: '/api/data/gis.dataset.table',
-    });
-    // console.log(res);
-    const rep = JSON.parse(res?.body);
-    // console.log(rep.total);
-    assert.ok(rep.total);
-  });
-  await t.test('GET /form', async () => {
-    const res = await app.inject({
-      method: 'GET',
-      url: '/api/form/cp_building.form',
-    });
-    // console.log(res);
-    const rep = JSON.parse(res?.body);
-    // console.log(rep.total);
-    assert.ok(rep);
-  });
-  await t.test('GET /filter', async () => {
-    const res = await app.inject({
-      method: 'GET',
-      url: '/api/filter/gis.dataset.table',
-    });
-    // console.log(res);
-    const rep = JSON.parse(res?.body);
-    // console.log(rep.total);
-    assert.ok(rep);
-  });
-});
+import { test } from 'node:test';
+import assert from 'node:assert';
+
+import build from '../../helper.js';
+
+test('api table', async (t) => {
+  const app = await build(t);
+  // assert.ok(1);
+  await t.test('GET /suggest', async () => {
+    const res = await app.inject({
+      method: 'GET',
+      url: '/api/suggest/storage.data',
+    });
+    // console.log(res?.body);
+    const rep = JSON.parse(res?.body);
+    // console.log(rep.total);
+    assert.ok(rep.total);
+  });
+  await t.test('GET /data', async () => {
+    const res = await app.inject({
+      method: 'GET',
+      url: '/api/data/gis.dataset.table',
+    });
+    // console.log(res);
+    const rep = JSON.parse(res?.body);
+    // console.log(rep.total);
+    assert.ok(rep.total);
+  });
+  await t.test('GET /form', async () => {
+    const res = await app.inject({
+      method: 'GET',
+      url: '/api/form/cp_building.form',
+    });
+    // console.log(res);
+    const rep = JSON.parse(res?.body);
+    // console.log(rep.total);
+    assert.ok(rep);
+  });
+  await t.test('GET /filter', async () => {
+    const res = await app.inject({
+      method: 'GET',
+      url: '/api/filter/gis.dataset.table',
+    });
+    // console.log(res);
+    const rep = JSON.parse(res?.body);
+    // console.log(rep.total);
+    assert.ok(rep);
+  });
+});

package/test/config.example

@@ -1,18 +1,18 @@
-import config from '../config.js';
-
-Object.assign(config, {
-  templateDir: 'test/templates',
-  pg: {
-    host: '192.168.3.160',
-    port: 5434,
-    database: 'mbk_rivne_dma',
-    user: 'postgres',
-    password: 'postgres',
-  },
-  redis: {
-    host: '192.168.3.160',
-    port: 6379,
-    family: 4,
-  },
-});
-export default config;
+import config from '../config.js';
+
+Object.assign(config, {
+  templateDir: 'test/templates',
+  pg: {
+    host: '192.168.3.160',
+    port: 5434,
+    database: 'mbk_rivne_dma',
+    user: 'postgres',
+    password: 'postgres',
+  },
+  redis: {
+    host: '192.168.3.160',
+    port: 6379,
+    family: 4,
+  },
+});
+export default config;

package/test/funcs/crud.test.js

@@ -1,51 +1,77 @@
-import { test } from 'node:test';
-import assert from 'node:assert';
-import '../config.js';
-
-import pgClients from '../../pg/pgClients.js';
-import rclient from '../../redis/client.js';
-
-import dataInsert from '../../crud/funcs/dataInsert.js';
-import dataUpdate from '../../crud/funcs/dataUpdate.js';
-import dataDelete from '../../crud/funcs/dataDelete.js';
-import isFileExists from '../../crud/funcs/isFileExists.js';
-
-import getOpt from '../../crud/funcs/getOpt.js';
-import setOpt from '../../crud/funcs/setOpt.js';
-
-test('funcs crud', async (t) => {
-
-  await t.test('getOpt/setOpt', async () => {
-    const opt = await setOpt({ table: 'gis.dataset' });
-    const data = await getOpt(opt);
-    // console.log(data);
-    assert.equal(data.table, 'gis.dataset');
-  });
-  
-  const id = (Math.random() * 10000).toFixed();
-  await t.test('dataInsert', async () => {
-    const data = await dataInsert({ table: 'gis.dataset', data: { dataset_id: id, dataset_name: '222' } });
-    assert.equal(data.dataset_id, id);
-  });
-
-  await t.test('dataUpdate', async () => {
-    const data = await dataUpdate({ table: 'gis.dataset', id, data: { dataset_name: '22211' } });
-    assert.equal(data.dataset_name, '22211');
-  });
-
-  await t.test('dataDelete', async () => {
-    const data = await dataDelete({ table: 'gis.dataset', id });
-    assert.ok(data);
-  });
-
-  await t.test('isFileExists', async () => {
-    const data = await isFileExists({filepath: '../../crud/funcs/isFileExists.js'});
-    assert.equal(data, false);
-  });
-
-  // pgClients.client.query('delete from gis.dataset where dataset_id=$1', [id]);
-  t.after(() => {
-    pgClients.client?.end();
-    rclient.quit();
-  });
-});
+import { test } from 'node:test';
+import assert from 'node:assert';
+
+import pgClients from '../../pg/pgClients.js';
+import rclient from '../../redis/client.js';
+
+import dataInsert from '../../crud/funcs/dataInsert.js';
+import dataUpdate from '../../crud/funcs/dataUpdate.js';
+import dataDelete from '../../crud/funcs/dataDelete.js';
+import isFileExists from '../../crud/funcs/isFileExists.js';
+
+import getOpt from '../../crud/funcs/getOpt.js';
+import setOpt from '../../crud/funcs/setOpt.js';
+
+import getIdByToken from '../../crud/funcs/getIdByToken.js';
+import setTokenById from '../../crud/funcs/setTokenById.js';
+import config from '../config.js';
+
+test('funcs crud', async (t) => {
+  await t.test('getOpt/setOpt', async () => {
+    const opt = await setOpt({ table: 'gis.dataset' });
+    const data = await getOpt(opt);
+    // console.log(data);
+    assert.equal(data.table, 'gis.dataset');
+  });
+
+  const id = (Math.random() * 10000).toFixed();
+  await t.test('dataInsert', async () => {
+    const data = await dataInsert({ table: 'gis.dataset', data: { dataset_id: id, dataset_name: '222' } });
+    assert.equal(data.dataset_id, id);
+  });
+
+  await t.test('dataUpdate', async () => {
+    const data = await dataUpdate({ table: 'gis.dataset', id, data: { dataset_name: '22211' } });
+    assert.equal(data.dataset_name, '22211');
+  });
+
+  await t.test('dataDelete', async () => {
+    const data = await dataDelete({ table: 'gis.dataset', id });
+    assert.ok(data);
+  });
+
+  await t.test('isFileExists', async () => {
+    const data = await isFileExists({ filepath: '../../crud/funcs/isFileExists.js' });
+    assert.equal(data, false);
+  });
+
+  let tokens;
+  const session = { passport: { user: { uid: '1' } } };
+  const tokenData = JSON.stringify({ add: 'gis.dataset', form: 'test.dataset.form' });
+
+  await t.test('setTokenById', async () => {
+    tokens = setTokenById({
+      funcs: { config },
+      ids: [tokenData],
+      mode: 'a',
+      session,
+      array: 1,
+    });
+    assert.equal(tokens.length, 1);
+  });
+  await t.test('getIdByToken', async () => {
+    const data = await getIdByToken({
+      funcs: { config },
+      session,
+      token: tokens[0],
+      mode: 'a',
+    });
+    assert.equal(data, tokenData);
+  });
+
+  // pgClients.client.query('delete from gis.dataset where dataset_id=$1', [id]);
+  t.after(() => {
+    pgClients.client?.end();
+    rclient.quit();
+  });
+});

package/test/funcs/pg.test.js

@@ -1,32 +1,32 @@
-import { test } from 'node:test';
-import assert from 'node:assert';
-
-import '../config.js';
-
-import getMeta from '../../pg/funcs/getMeta.js';
-import autoIndex from '../../pg/funcs/autoIndex.js';
-import pgClients from '../../pg/pgClients.js';
-import rclient from '../../redis/client.js';
-import getPG from '../../pg/funcs/getPG.js'
-
-test('funcs pg', async (t) => {
-  await t.test('getMeta', async () => {
-    const { columns } = await getMeta({ table: 'gis.dataset' });
-    // console.log(columns)
-    assert.ok(columns);
-  });
-
-  await t.test('getPG', async (t) => {
-    const data = await getPG({});
-    assert.ok(data);
-  });
-
-  await t.test('autoIndex', async () => {
-    await autoIndex({ table: 'gis.dataset', columns: ['service_type'] });
-    assert.ok(1);
-  });
-  t.after(() => {
-    pgClients.client.end();
-    rclient.quit();
-  });
-});
+import { test } from 'node:test';
+import assert from 'node:assert';
+
+import '../config.js';
+
+import getMeta from '../../pg/funcs/getMeta.js';
+import autoIndex from '../../pg/funcs/autoIndex.js';
+import pgClients from '../../pg/pgClients.js';
+import rclient from '../../redis/client.js';
+import getPG from '../../pg/funcs/getPG.js'
+
+test('funcs pg', async (t) => {
+  await t.test('getMeta', async () => {
+    const { columns } = await getMeta({ table: 'gis.dataset' });
+    // console.log(columns)
+    assert.ok(columns);
+  });
+
+  await t.test('getPG', async (t) => {
+    const data = await getPG({});
+    assert.ok(data);
+  });
+
+  await t.test('autoIndex', async () => {
+    await autoIndex({ table: 'gis.dataset', columns: ['service_type'] });
+    assert.ok(1);
+  });
+  t.after(() => {
+    pgClients.client.end();
+    rclient.quit();
+  });
+});

package/test/funcs/redis.test.js

@@ -1,19 +1,19 @@
-import { test } from 'node:test';
-import assert from 'node:assert';
-
-import '../config.js';
-
-import rclient from '../../redis/client.js';
-
-test('funcs redis', async (t) => {
-  await t.test('get/set', async () => {
-    await rclient.set('test', '1');
-    const d = await rclient.get('test');
-    // console.log(columns)
-    assert.equal(d, '1');
-  });
-
-  t.after(() => {
-    rclient.quit();
-  });
-});
+import { test } from 'node:test';
+import assert from 'node:assert';
+
+import '../config.js';
+
+import rclient from '../../redis/client.js';
+
+test('funcs redis', async (t) => {
+  await t.test('get/set', async () => {
+    await rclient.set('test', '1');
+    const d = await rclient.get('test');
+    // console.log(columns)
+    assert.equal(d, '1');
+  });
+
+  t.after(() => {
+    rclient.quit();
+  });
+});

package/test/funcs/table.test.js

@@ -1,48 +1,48 @@
-import { test } from 'node:test';
-import assert from 'node:assert';
-import '../config.js';
-import pgClients from '../../pg/pgClients.js';
-import rclient from '../../redis/client.js';
-import getFilterSQL from '../../table/funcs/getFilterSQL/index.js';
-import getTableSql from '../../table/funcs/getFilterSQL/index.js';
-import getCustomQuery from '../../table/funcs/getFilterSQL/index.js';
-import getFilterQuery from '../../table/funcs/getFilterSQL/index.js';
-import formatValue from '../../table/funcs/getFilterSQL/index.js';
-import getOptimizedQuery from '../../table/funcs/getFilterSQL/index.js';
-
-test('fucns table', async (t) => {
-  await t.test('getMeta', async () => {
-    const data = await getFilterSQL({ table: 'gis.dataset', filter: 'service_type=1' });
-    // console.log(data);
-    assert.ok(data.q);
-  });
-  
-  await t.test('formatValue', async (t) => {
-    const data = await formatValue( {table: 'gis.dataset'} );
-    assert.ok(data);
-  });
-  
-  await t.test('getCustomQuery', async (t) => {
-    const data = await getCustomQuery( {table: 'gis.dataset'} );
-    assert.ok(data);
-  });
-  
-  await t.test('getFilterQuery', async (t) => {
-    const data = await getFilterQuery( {table: 'gis.dataset'} );
-    assert.ok(data);
-  });
-  
-  await t.test('getOptimizedQuery', async (t) => {
-    const data = await getOptimizedQuery( {table: 'gis.dataset'} );
-    assert.ok(data);
-  });
-  
-  await t.test('getTableSql', async (t) => {
-    const data = await getTableSql( {table: 'gis.dataset'} );
-    assert.ok(data);
-  });
-  t.after(() => {
-    pgClients.client.end();
-    rclient.quit();
-  });
-});
+import { test } from 'node:test';
+import assert from 'node:assert';
+import '../config.js';
+import pgClients from '../../pg/pgClients.js';
+import rclient from '../../redis/client.js';
+import getFilterSQL from '../../table/funcs/getFilterSQL/index.js';
+import getTableSql from '../../table/funcs/getFilterSQL/index.js';
+import getCustomQuery from '../../table/funcs/getFilterSQL/index.js';
+import getFilterQuery from '../../table/funcs/getFilterSQL/index.js';
+import formatValue from '../../table/funcs/getFilterSQL/index.js';
+import getOptimizedQuery from '../../table/funcs/getFilterSQL/index.js';
+
+test('fucns table', async (t) => {
+  await t.test('getMeta', async () => {
+    const data = await getFilterSQL({ table: 'gis.dataset', filter: 'service_type=1' });
+    // console.log(data);
+    assert.ok(data.q);
+  });
+  
+  await t.test('formatValue', async (t) => {
+    const data = await formatValue( {table: 'gis.dataset'} );
+    assert.ok(data);
+  });
+  
+  await t.test('getCustomQuery', async (t) => {
+    const data = await getCustomQuery( {table: 'gis.dataset'} );
+    assert.ok(data);
+  });
+  
+  await t.test('getFilterQuery', async (t) => {
+    const data = await getFilterQuery( {table: 'gis.dataset'} );
+    assert.ok(data);
+  });
+  
+  await t.test('getOptimizedQuery', async (t) => {
+    const data = await getOptimizedQuery( {table: 'gis.dataset'} );
+    assert.ok(data);
+  });
+  
+  await t.test('getTableSql', async (t) => {
+    const data = await getTableSql( {table: 'gis.dataset'} );
+    assert.ok(data);
+  });
+  t.after(() => {
+    pgClients.client.end();
+    rclient.quit();
+  });
+});

package/test/templates/cls/test.json

@@ -1,10 +1,10 @@
-[
-    {
-        "id": 1,
-        "text": "test"
-    },
-    {
-        "id": 2,
-        "text": "test2"
-    }
+[
+    {
+        "id": 1,
+        "text": "test"
+    },
+    {
+        "id": 2,
+        "text": "test2"
+    }
 ]