@opengis/fastify-table 1.0.81 → 1.0.82

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (65) hide show
  1. package/.eslintrc.cjs +42 -42
  2. package/Changelog.md +245 -241
  3. package/README.md +26 -26
  4. package/config.js +10 -10
  5. package/cron/controllers/cronApi.js +22 -22
  6. package/cron/controllers/utils/cronList.js +1 -1
  7. package/cron/funcs/addCron.js +131 -131
  8. package/cron/index.js +10 -10
  9. package/crud/controllers/utils/checkXSS.js +45 -45
  10. package/crud/controllers/utils/xssInjection.js +72 -72
  11. package/crud/funcs/dataDelete.js +15 -15
  12. package/crud/funcs/dataUpdate.js +24 -24
  13. package/crud/funcs/getToken.js +27 -27
  14. package/crud/funcs/isFileExists.js +13 -13
  15. package/crud/funcs/setToken.js +53 -53
  16. package/crud/index.js +36 -36
  17. package/index.js +97 -97
  18. package/migration/exec.migrations.js +75 -75
  19. package/notification/controllers/testEmail.js +49 -49
  20. package/notification/funcs/sendNotification.js +111 -111
  21. package/notification/funcs/utils/sendEmail.js +39 -39
  22. package/notification/index.js +38 -38
  23. package/package.json +26 -26
  24. package/pg/funcs/getPG.js +30 -30
  25. package/redis/funcs/getRedis.js +23 -23
  26. package/server/migrations/crm.sql +150 -150
  27. package/server/migrations/log.sql +43 -43
  28. package/server/templates/select/test.storage.data.json +3 -2
  29. package/server/templates/select/test.storage.data.sql +1 -1
  30. package/server/templates/select/test.suggest.ato_new.json +3 -0
  31. package/server/templates/select/test.suggest.ato_new.sql +26 -0
  32. package/server/templates/select/test.suggest.data.json +5 -0
  33. package/server/templates/select/test.suggest.data.sql +1 -0
  34. package/server/templates/select/test.suggest.parent.sql +3 -0
  35. package/server.js +14 -14
  36. package/table/controllers/card.js +44 -44
  37. package/table/controllers/data.js +6 -5
  38. package/table/controllers/filter.js +37 -37
  39. package/table/controllers/form.js +28 -28
  40. package/table/controllers/search.js +72 -72
  41. package/table/controllers/suggest.js +62 -62
  42. package/table/controllers/utils/getSelectMeta.js +66 -66
  43. package/table/controllers/utils/getTemplate.js +28 -28
  44. package/table/controllers/utils/getTemplates.js +18 -18
  45. package/table/funcs/getFilterSQL/util/getTableSql.js +34 -34
  46. package/table/funcs/metaFormat/index.js +27 -27
  47. package/test/api/crud.xss.test.js +72 -72
  48. package/test/api/notification.test.js +37 -37
  49. package/test/api/suggest.test.js +66 -0
  50. package/test/api/table.test.js +57 -57
  51. package/test/api/widget.test.js +114 -114
  52. package/test/config.example +18 -18
  53. package/test/funcs/crud.test.js +76 -76
  54. package/test/funcs/notification.test.js +31 -31
  55. package/test/funcs/pg.test.js +34 -34
  56. package/test/funcs/redis.test.js +19 -19
  57. package/test/templates/cls/test.json +9 -9
  58. package/test/templates/form/cp_building.form.json +32 -32
  59. package/test/templates/select/account_id.json +3 -3
  60. package/test/templates/select/storage.data.json +2 -2
  61. package/test/templates/table/gis.dataset.table.json +20 -20
  62. package/util/controllers/next.id.js +4 -4
  63. package/util/controllers/properties.add.js +50 -50
  64. package/util/controllers/properties.get.js +19 -19
  65. package/widget/index.js +40 -40
@@ -1,34 +1,34 @@
1
- function getTable(table) {
2
- const result = table?.toLowerCase()?.replace(/[\n\r]+/g, ' ')?.split(' from ')?.filter((el) => /^[a-z0-9_]+\.[a-z0-9_]+/.test(el))
3
- ?.map((el) => el.split(/[ )]/)[0]);
4
- return result;
5
- }
6
-
7
- /**
8
- * @param {Number} opt.json - (1|0) 1 - Результат - Object, 0 - String
9
- * @param {String} opt.query - запит до таблиці
10
- * @param {String} opt.hash - інформація з хешу по запиту
11
- */
12
- const tableSql = {};
13
- async function getTableSql({
14
- pg, body, table, fields,
15
- }) {
16
- if (tableSql[table]) return tableSql[table];
17
-
18
- const fieldList = fields.map((el) => el.name);
19
-
20
- const tableList = body?.sql?.map((el) => getTable(el.sql)).reduce((acc, el) => acc.concat(el), []).filter((el) => fieldList.includes(pg.pk[el]));
21
-
22
- if (!tableList) { tableSql[table] = []; return []; }
23
-
24
- const data = await Promise.all(tableList?.map(async (tableEl) => {
25
- const { fields: fieldsEl } = await pg.query(`select * from ${tableEl} limit 0`);
26
- return fieldsEl.map((el) => ({ name: el.name, table: tableEl, pk: pg.pk[tableEl] }));
27
- }));
28
-
29
- tableSql[table] = data.reduce((acc, el) => acc.concat(el), []);
30
-
31
- return tableSql[table];
32
- }
33
-
34
- export default getTableSql;
1
+ function getTable(table) {
2
+ const result = table?.toLowerCase()?.replace(/[\n\r]+/g, ' ')?.split(' from ')?.filter((el) => /^[a-z0-9_]+\.[a-z0-9_]+/.test(el))
3
+ ?.map((el) => el.split(/[ )]/)[0]);
4
+ return result;
5
+ }
6
+
7
+ /**
8
+ * @param {Number} opt.json - (1|0) 1 - Результат - Object, 0 - String
9
+ * @param {String} opt.query - запит до таблиці
10
+ * @param {String} opt.hash - інформація з хешу по запиту
11
+ */
12
+ const tableSql = {};
13
+ async function getTableSql({
14
+ pg, body, table, fields,
15
+ }) {
16
+ if (tableSql[table]) return tableSql[table];
17
+
18
+ const fieldList = fields.map((el) => el.name);
19
+
20
+ const tableList = body?.sql?.map((el) => getTable(el.sql)).reduce((acc, el) => acc.concat(el), []).filter((el) => fieldList.includes(pg.pk[el]));
21
+
22
+ if (!tableList) { tableSql[table] = []; return []; }
23
+
24
+ const data = await Promise.all(tableList?.map(async (tableEl) => {
25
+ const { fields: fieldsEl } = await pg.query(`select * from ${tableEl} limit 0`);
26
+ return fieldsEl.map((el) => ({ name: el.name, table: tableEl, pk: pg.pk[tableEl] }));
27
+ }));
28
+
29
+ tableSql[table] = data.reduce((acc, el) => acc.concat(el), []);
30
+
31
+ return tableSql[table];
32
+ }
33
+
34
+ export default getTableSql;
@@ -1,27 +1,27 @@
1
- import getTemplate from '../../controllers/utils/getTemplate.js';
2
- import getSelectVal from './getSelectVal.js';
3
-
4
- export default async function metaFormat({ rows, table }) {
5
- const loadTable = await getTemplate('table', table);
6
- const selectCols = loadTable?.columns?.filter((e) => e.data);
7
- if (!selectCols?.length) return rows;
8
-
9
- // cls & select format
10
-
11
- await Promise.all(selectCols?.map(async (attr) => {
12
- const values = [...new Set(rows?.map((el) => el[attr.name]).flat())].filter((el) => el);
13
- if (!values.length) return null;
14
-
15
- const cls = await getSelectVal({ name: attr.data, values });
16
- if (!cls) return null;
17
- rows.forEach(el => {
18
- const val = el[attr.name]?.map?.(c => cls[c] || c) || cls[el[attr.name]] || el[attr.name];
19
- if (!val) return;
20
- Object.assign(el, { [val?.color ? `${attr.name}_data` : `${attr.name}_text`]: (val.color ? val : val.text || val) });
21
- });
22
-
23
- return null;
24
- }));
25
-
26
- return rows;
27
- }
1
+ import getTemplate from '../../controllers/utils/getTemplate.js';
2
+ import getSelectVal from './getSelectVal.js';
3
+
4
+ export default async function metaFormat({ rows, table }) {
5
+ const loadTable = await getTemplate('table', table);
6
+ const selectCols = loadTable?.columns?.filter((e) => e.data);
7
+ if (!selectCols?.length) return rows;
8
+
9
+ // cls & select format
10
+
11
+ await Promise.all(selectCols?.map(async (attr) => {
12
+ const values = [...new Set(rows?.map((el) => el[attr.name]).flat())].filter((el) => el);
13
+ if (!values.length) return null;
14
+
15
+ const cls = await getSelectVal({ name: attr.data, values });
16
+ if (!cls) return null;
17
+ rows.forEach(el => {
18
+ const val = el[attr.name]?.map?.(c => cls[c] || c) || cls[el[attr.name]] || el[attr.name];
19
+ if (!val) return;
20
+ Object.assign(el, { [val?.color ? `${attr.name}_data` : `${attr.name}_text`]: (val.color ? val : val.text || val) });
21
+ });
22
+
23
+ return null;
24
+ }));
25
+
26
+ return rows;
27
+ }
@@ -1,72 +1,72 @@
1
- import { test } from 'node:test';
2
- import assert from 'node:assert';
3
-
4
- import build from '../../helper.js';
5
-
6
- import setToken from '../../crud/funcs/setToken.js';
7
- import config from '../config.js';
8
-
9
- test('api crud xss', async (t) => {
10
- const app = await build(t);
11
- const session = { passport: { user: { uid: '1' } } };
12
- app.addHook('onRequest', async (req) => {
13
- req.session = session;
14
- });
15
- // app.decorateRequest('session', session);
16
-
17
- const prefix = config.prefix || '/api';
18
-
19
- let addTokens;
20
- let editTokens;
21
-
22
- // before
23
- t.test('setToken', async () => {
24
- addTokens = setToken({
25
- ids: [JSON.stringify({ add: 'gis.dataset', form: 'test.dataset.form' })],
26
- mode: 'a',
27
- uid: 1,
28
- array: 1,
29
- });
30
- editTokens = setToken({
31
- ids: [JSON.stringify({ id: '5400000', table: 'gis.dataset', form: 'test.dataset.form' })],
32
- mode: 'w',
33
- uid: 1,
34
- array: 1,
35
- });
36
- assert.ok(addTokens.length === 1 && editTokens.length === 1, 'invalid token');
37
- });
38
-
39
- await t.test('POST /insert', async () => {
40
- const res = await app.inject({
41
- method: 'POST',
42
- url: `${prefix}/table/${addTokens[0]}`,
43
- body: { dataset_name: '<a onClick="alert("XSS Injection")">xss injection</a>', dataset_id: '5400000' },
44
- });
45
-
46
- const rep = JSON.parse(res?.body);
47
- console.log(rep)
48
- assert.ok(rep.status, 409);
49
- });
50
-
51
- await t.test('PUT /update', async () => {
52
- const res = await app.inject({
53
- method: 'PUT',
54
- url: `${prefix}/table/${editTokens[0]}/${editTokens[0]}`,
55
- body: { editor_id: '11', dataset_name: '<a onClick="alert("XSS Injection")">xss injection</a>' },
56
- });
57
-
58
- const rep = JSON.parse(res?.body);
59
- console.log(rep)
60
- assert.equal(rep.status, 409);
61
- });
62
- await t.test('DELETE /delete', async () => {
63
- const res = await app.inject({
64
- method: 'DELETE',
65
- url: `${prefix}/table/gis.dataset/5400000`,
66
- });
67
-
68
- const rep = JSON.parse(res?.body);
69
- console.log(rep)
70
- assert.ok(rep);
71
- });
72
- });
1
+ import { test } from 'node:test';
2
+ import assert from 'node:assert';
3
+
4
+ import build from '../../helper.js';
5
+
6
+ import setToken from '../../crud/funcs/setToken.js';
7
+ import config from '../config.js';
8
+
9
+ test('api crud xss', async (t) => {
10
+ const app = await build(t);
11
+ const session = { passport: { user: { uid: '1' } } };
12
+ app.addHook('onRequest', async (req) => {
13
+ req.session = session;
14
+ });
15
+ // app.decorateRequest('session', session);
16
+
17
+ const prefix = config.prefix || '/api';
18
+
19
+ let addTokens;
20
+ let editTokens;
21
+
22
+ // before
23
+ t.test('setToken', async () => {
24
+ addTokens = setToken({
25
+ ids: [JSON.stringify({ add: 'gis.dataset', form: 'test.dataset.form' })],
26
+ mode: 'a',
27
+ uid: 1,
28
+ array: 1,
29
+ });
30
+ editTokens = setToken({
31
+ ids: [JSON.stringify({ id: '5400000', table: 'gis.dataset', form: 'test.dataset.form' })],
32
+ mode: 'w',
33
+ uid: 1,
34
+ array: 1,
35
+ });
36
+ assert.ok(addTokens.length === 1 && editTokens.length === 1, 'invalid token');
37
+ });
38
+
39
+ await t.test('POST /insert', async () => {
40
+ const res = await app.inject({
41
+ method: 'POST',
42
+ url: `${prefix}/table/${addTokens[0]}`,
43
+ body: { dataset_name: '<a onClick="alert("XSS Injection")">xss injection</a>', dataset_id: '5400000' },
44
+ });
45
+
46
+ const rep = JSON.parse(res?.body);
47
+ console.log(rep)
48
+ assert.ok(rep.status, 409);
49
+ });
50
+
51
+ await t.test('PUT /update', async () => {
52
+ const res = await app.inject({
53
+ method: 'PUT',
54
+ url: `${prefix}/table/${editTokens[0]}/${editTokens[0]}`,
55
+ body: { editor_id: '11', dataset_name: '<a onClick="alert("XSS Injection")">xss injection</a>' },
56
+ });
57
+
58
+ const rep = JSON.parse(res?.body);
59
+ console.log(rep)
60
+ assert.equal(rep.status, 409);
61
+ });
62
+ await t.test('DELETE /delete', async () => {
63
+ const res = await app.inject({
64
+ method: 'DELETE',
65
+ url: `${prefix}/table/gis.dataset/5400000`,
66
+ });
67
+
68
+ const rep = JSON.parse(res?.body);
69
+ console.log(rep)
70
+ assert.ok(rep);
71
+ });
72
+ });
@@ -1,37 +1,37 @@
1
- import { test } from 'node:test';
2
- import assert from 'node:assert';
3
-
4
- import build from '../../helper.js';
5
- import config from '../config.js';
6
-
7
- const session = { passport: { user: { uid: config.testUser?.uid || '1' } } };
8
-
9
- import userNotifications from '../../notification/controllers/userNotifications.js';
10
-
11
- import pgClients from '../../pg/pgClients.js';
12
-
13
- test('api && funcs notification', async (t) => {
14
- const app = await build(t);
15
- const pg = pgClients.client;
16
- /*
17
- // require dependency
18
- await t.test('GET /auth', async () => {
19
- const res = await app.inject({
20
- method: 'GET',
21
- url: `/api/login?username=${config.testUser?.username}&password=${config.testUser?.password}`,
22
- });
23
- assert.ok(res.statusCode);
24
- });
25
- await t.test('GET /notification', async () => {
26
- const res = await app.inject({
27
- method: 'GET',
28
- url: '/api/notification',
29
- });
30
- const rep = JSON.parse(res?.body);
31
- assert.ok(rep.time);
32
- }); */
33
- /* await t.test('GET /notification', async () => {
34
- const rep = await userNotifications({ pg, session });
35
- assert.ok(rep.time);
36
- }); */
37
- });
1
+ import { test } from 'node:test';
2
+ import assert from 'node:assert';
3
+
4
+ import build from '../../helper.js';
5
+ import config from '../config.js';
6
+
7
+ const session = { passport: { user: { uid: config.testUser?.uid || '1' } } };
8
+
9
+ import userNotifications from '../../notification/controllers/userNotifications.js';
10
+
11
+ import pgClients from '../../pg/pgClients.js';
12
+
13
+ test('api && funcs notification', async (t) => {
14
+ const app = await build(t);
15
+ const pg = pgClients.client;
16
+ /*
17
+ // require dependency
18
+ await t.test('GET /auth', async () => {
19
+ const res = await app.inject({
20
+ method: 'GET',
21
+ url: `/api/login?username=${config.testUser?.username}&password=${config.testUser?.password}`,
22
+ });
23
+ assert.ok(res.statusCode);
24
+ });
25
+ await t.test('GET /notification', async () => {
26
+ const res = await app.inject({
27
+ method: 'GET',
28
+ url: '/api/notification',
29
+ });
30
+ const rep = JSON.parse(res?.body);
31
+ assert.ok(rep.time);
32
+ }); */
33
+ /* await t.test('GET /notification', async () => {
34
+ const rep = await userNotifications({ pg, session });
35
+ assert.ok(rep.time);
36
+ }); */
37
+ });
@@ -0,0 +1,66 @@
1
+ import { test } from 'node:test';
2
+ import assert from 'node:assert';
3
+
4
+ import build from '../../helper.js';
5
+
6
+ test('api suggest', async (t) => {
7
+ const app = await build(t);
8
+
9
+ await t.test('GET /suggest', async () => {
10
+ const res = await app.inject({
11
+ method: 'GET',
12
+ url: `/api/suggest/test.storage.data`,
13
+ });
14
+ const rep = JSON.parse(res?.body);
15
+ // console.log(rep);
16
+ assert.equal(res?.statusCode, 200);
17
+ assert.ok(rep?.count);
18
+ });
19
+
20
+ await t.test('GET /suggest key query', async () => {
21
+ const key = 'Новокиївка';
22
+ const res = await app.inject({
23
+ method: 'GET',
24
+ url: `/api/suggest/test.suggest.ato_new?key=${key}`,
25
+ });
26
+ const rep = JSON.parse(res?.body);
27
+ // console.log(rep);
28
+ assert.equal(res?.statusCode, 200);
29
+ assert.ok(rep?.count);
30
+ });
31
+
32
+ await t.test('GET /suggest key searchColumn', async () => {
33
+ const key = 'data_address.addr_city';
34
+ const res = await app.inject({
35
+ method: 'GET',
36
+ url: `/api/suggest/test.storage.data?key=${key}`,
37
+ });
38
+ const rep = JSON.parse(res?.body);
39
+ // console.log(rep);
40
+ assert.equal(res?.statusCode, 200);
41
+ assert.ok(rep?.count);
42
+ });
43
+
44
+ await t.test('GET /suggest інша db', async () => {
45
+ const res = await app.inject({
46
+ method: 'GET',
47
+ url: `/api/suggest/test.suggest.data`,
48
+ });
49
+ const rep = JSON.parse(res?.body);
50
+ // console.log(rep);
51
+ assert.equal(res?.statusCode, 200);
52
+ assert.ok(rep?.count);
53
+ });
54
+
55
+ await t.test('GET /suggest parent', async () => {
56
+ const parent = '3206158274160231699';
57
+ const res = await app.inject({
58
+ method: 'GET',
59
+ url: `/api/suggest/test.suggest.parent?parent=${parent}`,
60
+ });
61
+ const rep = JSON.parse(res?.body);
62
+ // console.log(rep);
63
+ assert.equal(res?.statusCode, 200);
64
+ assert.ok(rep?.count);
65
+ });
66
+ })
@@ -1,57 +1,57 @@
1
- import { test } from 'node:test';
2
- import assert from 'node:assert';
3
-
4
- import build from '../../helper.js';
5
-
6
- test('api table', async (t) => {
7
- const app = await build(t);
8
- // assert.ok(1);
9
- /* await t.test('GET /suggest', async () => {
10
- const res = await app.inject({
11
- method: 'GET',
12
- url: '/api/suggest/test.storage.data',
13
- });
14
- // console.log(res?.body);
15
- const rep = JSON.parse(res?.body);
16
- // console.log(rep.total);
17
- assert.ok(rep.total);
18
- }); */
19
- /* await t.test('GET /data', async () => {
20
- const res = await app.inject({
21
- method: 'GET',
22
- url: '/api/data/test.dataset.table',
23
- });
24
- // console.log(res);
25
- const rep = JSON.parse(res?.body);
26
- // console.log(rep.total);
27
- assert.ok(rep.total);
28
- }); */
29
- /* await t.test('GET /search', async () => {
30
- const res = await app.inject({
31
- method: 'GET',
32
- url: '/api/search?table=test.dataset.table&key=0',
33
- });
34
- const rep = JSON.parse(res?.body);
35
- assert.ok(rep.total);
36
- }); */
37
- await t.test('GET /form', async () => {
38
- const res = await app.inject({
39
- method: 'GET',
40
- url: '/api/form/test.dataset.form',
41
- });
42
- // console.log(res);
43
- const rep = JSON.parse(res?.body);
44
- // console.log(rep.total);
45
- assert.ok(rep);
46
- });
47
- await t.test('GET /filter', async () => {
48
- const res = await app.inject({
49
- method: 'GET',
50
- url: '/api/filter/test.dataset.table',
51
- });
52
- // console.log(res);
53
- const rep = JSON.parse(res?.body);
54
- // console.log(rep.total);
55
- assert.ok(rep);
56
- });
57
- });
1
+ import { test } from 'node:test';
2
+ import assert from 'node:assert';
3
+
4
+ import build from '../../helper.js';
5
+
6
+ test('api table', async (t) => {
7
+ const app = await build(t);
8
+ // assert.ok(1);
9
+ /* await t.test('GET /suggest', async () => {
10
+ const res = await app.inject({
11
+ method: 'GET',
12
+ url: '/api/suggest/test.storage.data',
13
+ });
14
+ // console.log(res?.body);
15
+ const rep = JSON.parse(res?.body);
16
+ // console.log(rep.total);
17
+ assert.ok(rep.total);
18
+ }); */
19
+ /* await t.test('GET /data', async () => {
20
+ const res = await app.inject({
21
+ method: 'GET',
22
+ url: '/api/data/test.dataset.table',
23
+ });
24
+ // console.log(res);
25
+ const rep = JSON.parse(res?.body);
26
+ // console.log(rep.total);
27
+ assert.ok(rep.total);
28
+ }); */
29
+ /* await t.test('GET /search', async () => {
30
+ const res = await app.inject({
31
+ method: 'GET',
32
+ url: '/api/search?table=test.dataset.table&key=0',
33
+ });
34
+ const rep = JSON.parse(res?.body);
35
+ assert.ok(rep.total);
36
+ }); */
37
+ await t.test('GET /form', async () => {
38
+ const res = await app.inject({
39
+ method: 'GET',
40
+ url: '/api/form/test.dataset.form',
41
+ });
42
+ // console.log(res);
43
+ const rep = JSON.parse(res?.body);
44
+ // console.log(rep.total);
45
+ assert.ok(rep);
46
+ });
47
+ await t.test('GET /filter', async () => {
48
+ const res = await app.inject({
49
+ method: 'GET',
50
+ url: '/api/filter/test.dataset.table',
51
+ });
52
+ // console.log(res);
53
+ const rep = JSON.parse(res?.body);
54
+ // console.log(rep.total);
55
+ assert.ok(rep);
56
+ });
57
+ });