@opengis/fastify-table 1.1.60 → 1.1.61
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.js +109 -103
- package/package.json +46 -46
- package/server/migrations/0.sql +80 -80
- package/server/migrations/cls.sql +39 -39
- package/server/migrations/properties.sql +144 -144
- package/server/migrations/roles.sql +175 -175
- package/server/migrations/users.sql +168 -168
- package/server/plugins/cron/funcs/addCron.js +128 -128
- package/server/plugins/cron/index.js +6 -6
- package/server/plugins/crud/funcs/dataDelete.js +21 -21
- package/server/plugins/crud/funcs/dataInsert.js +33 -33
- package/server/plugins/crud/funcs/dataUpdate.js +50 -50
- package/server/plugins/crud/funcs/getAccess.js +48 -48
- package/server/plugins/crud/funcs/getOpt.js +12 -12
- package/server/plugins/crud/funcs/setOpt.js +19 -19
- package/server/plugins/crud/funcs/setToken.js +56 -56
- package/server/plugins/crud/funcs/utils/getFolder.js +10 -10
- package/server/plugins/crud/funcs/utils/logChanges.js +62 -62
- package/server/plugins/crud/index.js +23 -23
- package/server/plugins/hook/index.js +8 -8
- package/server/plugins/migration/funcs/exec.migrations.js +79 -79
- package/server/plugins/migration/index.js +7 -7
- package/server/plugins/pg/funcs/getMeta.js +28 -28
- package/server/plugins/pg/funcs/getPG.js +30 -30
- package/server/plugins/pg/pgClients.js +21 -21
- package/server/plugins/policy/funcs/checkPolicy.js +92 -92
- package/server/plugins/policy/index.js +12 -12
- package/server/plugins/policy/sqlInjection.js +33 -33
- package/server/plugins/redis/client.js +8 -8
- package/server/plugins/redis/funcs/redisClients.js +3 -3
- package/server/plugins/redis/index.js +15 -15
- package/server/plugins/table/funcs/addTemplateDir.js +8 -8
- package/server/plugins/table/funcs/getFilterSQL/index.js +96 -96
- package/server/plugins/table/funcs/getFilterSQL/util/formatValue.js +170 -170
- package/server/plugins/table/funcs/getFilterSQL/util/getCustomQuery.js +13 -13
- package/server/plugins/table/funcs/getFilterSQL/util/getFilterQuery.js +66 -66
- package/server/plugins/table/funcs/getFilterSQL/util/getOptimizedQuery.js +12 -12
- package/server/plugins/table/funcs/getFilterSQL/util/getTableSql.js +34 -34
- package/server/plugins/table/funcs/getSelect.js +19 -19
- package/server/plugins/table/funcs/getSelectMeta.js +57 -57
- package/server/plugins/table/funcs/getTemplates.js +19 -19
- package/server/plugins/table/funcs/gisIRColumn.js +72 -69
- package/server/plugins/table/funcs/loadTemplate.js +1 -1
- package/server/plugins/table/funcs/loadTemplatePath.js +1 -1
- package/server/plugins/table/funcs/metaFormat/getSelectVal.js +23 -23
- package/server/plugins/table/funcs/metaFormat/index.js +30 -30
- package/server/plugins/table/funcs/userTemplateDir.js +1 -1
- package/server/plugins/table/index.js +13 -13
- package/server/plugins/util/funcs/eventStream.js +28 -28
- package/server/plugins/util/index.js +7 -7
- package/server/routes/cron/index.js +14 -14
- package/server/routes/crud/controllers/deleteCrud.js +36 -36
- package/server/routes/crud/controllers/insert.js +73 -73
- package/server/routes/crud/controllers/update.js +76 -76
- package/server/routes/crud/index.js +19 -19
- package/server/routes/logger/controllers/logger.file.js +92 -92
- package/server/routes/logger/controllers/utils/checkUserAccess.js +19 -19
- package/server/routes/logger/controllers/utils/getRootDir.js +26 -26
- package/server/routes/logger/index.js +17 -17
- package/server/routes/properties/controllers/properties.add.js +55 -55
- package/server/routes/properties/controllers/properties.get.js +17 -17
- package/server/routes/properties/index.js +16 -16
- package/server/routes/table/controllers/data.js +153 -153
- package/server/routes/table/controllers/filter.js +60 -60
- package/server/routes/table/controllers/form.js +42 -42
- package/server/routes/table/controllers/search.js +74 -74
- package/server/routes/table/controllers/suggest.js +84 -84
- package/server/routes/table/controllers/table.js +81 -81
- package/server/routes/table/index.js +28 -28
- package/server/routes/table/schema.js +64 -64
- package/server/routes/util/controllers/status.monitor.js +8 -8
- package/server/routes/util/index.js +11 -11
- package/utils.js +120 -119
|
@@ -1,30 +1,30 @@
|
|
|
1
|
-
import getTemplate from '../getTemplate.js';
|
|
2
|
-
import getSelectVal from './getSelectVal.js';
|
|
3
|
-
|
|
4
|
-
// import { getTemplate, getSelectVal } from '../../../../../utils.js';
|
|
5
|
-
|
|
6
|
-
export default async function metaFormat({ rows, table }) {
|
|
7
|
-
const loadTable = await getTemplate('table', table);
|
|
8
|
-
const selectCols = loadTable?.columns?.filter((e) => e.data);
|
|
9
|
-
const metaCls = Object.keys(loadTable?.meta?.cls || {}).map((el) => ({ name: el, data: loadTable?.meta?.cls[el] }));
|
|
10
|
-
if (!selectCols?.length && !metaCls?.length) return rows;
|
|
11
|
-
|
|
12
|
-
// cls & select format
|
|
13
|
-
|
|
14
|
-
await Promise.all(selectCols.concat(metaCls)?.map(async (attr) => {
|
|
15
|
-
const values = [...new Set(rows?.map((el) => el[attr.name]).flat())].filter((el) => el);
|
|
16
|
-
if (!values.length) return null;
|
|
17
|
-
|
|
18
|
-
const cls = await getSelectVal({ name: attr.data, values });
|
|
19
|
-
if (!cls) return null;
|
|
20
|
-
rows.forEach(el => {
|
|
21
|
-
const val = el[attr.name]?.map?.(c => cls[c] || c) || cls[el[attr.name]] || el[attr.name];
|
|
22
|
-
if (!val) return;
|
|
23
|
-
Object.assign(el, { [val?.color ? `${attr.name}_data` : `${attr.name}_text`]: (val.color ? val : val.text || val) });
|
|
24
|
-
});
|
|
25
|
-
|
|
26
|
-
return null;
|
|
27
|
-
}));
|
|
28
|
-
|
|
29
|
-
return rows;
|
|
30
|
-
}
|
|
1
|
+
import getTemplate from '../getTemplate.js';
|
|
2
|
+
import getSelectVal from './getSelectVal.js';
|
|
3
|
+
|
|
4
|
+
// import { getTemplate, getSelectVal } from '../../../../../utils.js';
|
|
5
|
+
|
|
6
|
+
export default async function metaFormat({ rows, table }) {
|
|
7
|
+
const loadTable = await getTemplate('table', table);
|
|
8
|
+
const selectCols = loadTable?.columns?.filter((e) => e.data);
|
|
9
|
+
const metaCls = Object.keys(loadTable?.meta?.cls || {}).map((el) => ({ name: el, data: loadTable?.meta?.cls[el] }));
|
|
10
|
+
if (!selectCols?.length && !metaCls?.length) return rows;
|
|
11
|
+
|
|
12
|
+
// cls & select format
|
|
13
|
+
|
|
14
|
+
await Promise.all(selectCols.concat(metaCls)?.map(async (attr) => {
|
|
15
|
+
const values = [...new Set(rows?.map((el) => el[attr.name]).flat())].filter((el) => el);
|
|
16
|
+
if (!values.length) return null;
|
|
17
|
+
|
|
18
|
+
const cls = await getSelectVal({ name: attr.data, values });
|
|
19
|
+
if (!cls) return null;
|
|
20
|
+
rows.forEach(el => {
|
|
21
|
+
const val = el[attr.name]?.map?.(c => cls[c] || c) || cls[el[attr.name]] || el[attr.name];
|
|
22
|
+
if (!val) return;
|
|
23
|
+
Object.assign(el, { [val?.color ? `${attr.name}_data` : `${attr.name}_text`]: (val.color ? val : val.text || val) });
|
|
24
|
+
});
|
|
25
|
+
|
|
26
|
+
return null;
|
|
27
|
+
}));
|
|
28
|
+
|
|
29
|
+
return rows;
|
|
30
|
+
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
export default [];
|
|
1
|
+
export default [];
|
|
@@ -1,13 +1,13 @@
|
|
|
1
|
-
import metaFormat from './funcs/metaFormat/index.js';
|
|
2
|
-
import getFilterSQL from './funcs/getFilterSQL/index.js';
|
|
3
|
-
import getTemplate from './funcs/getTemplate.js';
|
|
4
|
-
import getSelect from './funcs/getSelect.js';
|
|
5
|
-
|
|
6
|
-
async function plugin(fastify) {
|
|
7
|
-
// fastify.decorate('metaFormat', metaFormat);
|
|
8
|
-
// fastify.decorate('getFilterSQL', getFilterSQL);
|
|
9
|
-
// fastify.decorate('getTemplate', getTemplate);
|
|
10
|
-
// fastify.decorate('getSelect', getSelect);
|
|
11
|
-
}
|
|
12
|
-
|
|
13
|
-
export default plugin;
|
|
1
|
+
import metaFormat from './funcs/metaFormat/index.js';
|
|
2
|
+
import getFilterSQL from './funcs/getFilterSQL/index.js';
|
|
3
|
+
import getTemplate from './funcs/getTemplate.js';
|
|
4
|
+
import getSelect from './funcs/getSelect.js';
|
|
5
|
+
|
|
6
|
+
async function plugin(fastify) {
|
|
7
|
+
// fastify.decorate('metaFormat', metaFormat);
|
|
8
|
+
// fastify.decorate('getFilterSQL', getFilterSQL);
|
|
9
|
+
// fastify.decorate('getTemplate', getTemplate);
|
|
10
|
+
// fastify.decorate('getSelect', getSelect);
|
|
11
|
+
}
|
|
12
|
+
|
|
13
|
+
export default plugin;
|
|
@@ -1,28 +1,28 @@
|
|
|
1
|
-
/* eslint-disable no-param-reassign */
|
|
2
|
-
export default function eventStream(res) {
|
|
3
|
-
if (!res) return console.log;
|
|
4
|
-
const time = Date.now();
|
|
5
|
-
|
|
6
|
-
// eslint-disable-next-line no-underscore-dangle
|
|
7
|
-
if (!res?._headerSent) {
|
|
8
|
-
res.raw.writeHead(200, {
|
|
9
|
-
'Content-Type': 'text/event-stream; charset=utf-8',
|
|
10
|
-
'Cache-Control': 'no-cache',
|
|
11
|
-
Connection: 'keep-alive',
|
|
12
|
-
'X-Accel-Buffering': 'no',
|
|
13
|
-
});
|
|
14
|
-
res.hijack();
|
|
15
|
-
}
|
|
16
|
-
let prev = time;
|
|
17
|
-
function send(mes, finish) {
|
|
18
|
-
const t1 = Date.now();
|
|
19
|
-
res.raw.write(`data: ${finish ? 'finish' : ''} ${typeof mes === 'object' ? JSON.stringify(mes) : mes} ${t1 - prev}/${t1 - time}ms\n\n`);
|
|
20
|
-
prev = t1;
|
|
21
|
-
if (finish) {
|
|
22
|
-
res.raw.write('data: finish');
|
|
23
|
-
res.raw.end('');
|
|
24
|
-
}
|
|
25
|
-
}
|
|
26
|
-
|
|
27
|
-
return send;
|
|
28
|
-
}
|
|
1
|
+
/* eslint-disable no-param-reassign */
|
|
2
|
+
export default function eventStream(res) {
|
|
3
|
+
if (!res) return console.log;
|
|
4
|
+
const time = Date.now();
|
|
5
|
+
|
|
6
|
+
// eslint-disable-next-line no-underscore-dangle
|
|
7
|
+
if (!res?._headerSent) {
|
|
8
|
+
res.raw.writeHead(200, {
|
|
9
|
+
'Content-Type': 'text/event-stream; charset=utf-8',
|
|
10
|
+
'Cache-Control': 'no-cache',
|
|
11
|
+
Connection: 'keep-alive',
|
|
12
|
+
'X-Accel-Buffering': 'no',
|
|
13
|
+
});
|
|
14
|
+
res.hijack();
|
|
15
|
+
}
|
|
16
|
+
let prev = time;
|
|
17
|
+
function send(mes, finish) {
|
|
18
|
+
const t1 = Date.now();
|
|
19
|
+
res.raw.write(`data: ${finish ? 'finish' : ''} ${typeof mes === 'object' ? JSON.stringify(mes) : mes} ${t1 - prev}/${t1 - time}ms\n\n`);
|
|
20
|
+
prev = t1;
|
|
21
|
+
if (finish) {
|
|
22
|
+
res.raw.write('data: finish');
|
|
23
|
+
res.raw.end('');
|
|
24
|
+
}
|
|
25
|
+
}
|
|
26
|
+
|
|
27
|
+
return send;
|
|
28
|
+
}
|
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
import eventStream from './funcs/eventStream.js';
|
|
2
|
-
|
|
3
|
-
async function plugin(fastify) {
|
|
4
|
-
// fastify.decorate('eventStream', eventStream);
|
|
5
|
-
}
|
|
6
|
-
|
|
7
|
-
export default plugin;
|
|
1
|
+
import eventStream from './funcs/eventStream.js';
|
|
2
|
+
|
|
3
|
+
async function plugin(fastify) {
|
|
4
|
+
// fastify.decorate('eventStream', eventStream);
|
|
5
|
+
}
|
|
6
|
+
|
|
7
|
+
export default plugin;
|
|
@@ -1,14 +1,14 @@
|
|
|
1
|
-
import cronApi from './controllers/cronApi.js';
|
|
2
|
-
|
|
3
|
-
const cronSchema = {
|
|
4
|
-
params: {
|
|
5
|
-
name: { type: 'string', pattern: '^([\\d\\w._-]+)$' },
|
|
6
|
-
},
|
|
7
|
-
};
|
|
8
|
-
|
|
9
|
-
async function plugin(fastify, config = {}) {
|
|
10
|
-
const prefix = config.prefix || '/api';
|
|
11
|
-
fastify.get(`${prefix}/cron/:name`, { schema: cronSchema }, cronApi);
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
export default plugin;
|
|
1
|
+
import cronApi from './controllers/cronApi.js';
|
|
2
|
+
|
|
3
|
+
const cronSchema = {
|
|
4
|
+
params: {
|
|
5
|
+
name: { type: 'string', pattern: '^([\\d\\w._-]+)$' },
|
|
6
|
+
},
|
|
7
|
+
};
|
|
8
|
+
|
|
9
|
+
async function plugin(fastify, config = {}) {
|
|
10
|
+
const prefix = config.prefix || '/api';
|
|
11
|
+
fastify.get(`${prefix}/cron/:name`, { schema: cronSchema }, cronApi);
|
|
12
|
+
}
|
|
13
|
+
|
|
14
|
+
export default plugin;
|
|
@@ -1,36 +1,36 @@
|
|
|
1
|
-
import {
|
|
2
|
-
dataDelete, getTemplate, getAccess, applyHook, getToken, config,
|
|
3
|
-
} from '../../../../utils.js';
|
|
4
|
-
|
|
5
|
-
export default async function deleteCrud(req) {
|
|
6
|
-
const { user, params = {} } = req || {};
|
|
7
|
-
const hookData = await applyHook('preDelete', {
|
|
8
|
-
table: params?.table, id: params?.id, user,
|
|
9
|
-
});
|
|
10
|
-
if (hookData?.message && hookData?.status) {
|
|
11
|
-
return { message: hookData?.message, status: hookData?.status };
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
const tokenData = await getToken({
|
|
15
|
-
uid: user.uid, token: params.table, mode: 'w', json: 1,
|
|
16
|
-
});
|
|
17
|
-
|
|
18
|
-
const { table: del, id } = hookData || tokenData || (config.auth?.disable ? req.params : {});
|
|
19
|
-
const { actions = [] } = await getAccess({ table: del, id, user }) || {};
|
|
20
|
-
|
|
21
|
-
if (!actions.includes('del') && !config?.local) {
|
|
22
|
-
return { message: 'access restricted', status: 403 };
|
|
23
|
-
}
|
|
24
|
-
const loadTemplate = await getTemplate('table', del);
|
|
25
|
-
|
|
26
|
-
const { table } = loadTemplate || hookData || req.params || {};
|
|
27
|
-
|
|
28
|
-
if (!table) return { status: 404, message: 'table is required' };
|
|
29
|
-
if (!id) return { status: 404, message: 'id is required' };
|
|
30
|
-
|
|
31
|
-
const data = await dataDelete({
|
|
32
|
-
table, id, uid: user?.uid,
|
|
33
|
-
});
|
|
34
|
-
|
|
35
|
-
return { rowCount: data.rowCount, msg: !data.rowCount ? data : null };
|
|
36
|
-
}
|
|
1
|
+
import {
|
|
2
|
+
dataDelete, getTemplate, getAccess, applyHook, getToken, config,
|
|
3
|
+
} from '../../../../utils.js';
|
|
4
|
+
|
|
5
|
+
export default async function deleteCrud(req) {
|
|
6
|
+
const { user, params = {} } = req || {};
|
|
7
|
+
const hookData = await applyHook('preDelete', {
|
|
8
|
+
table: params?.table, id: params?.id, user,
|
|
9
|
+
});
|
|
10
|
+
if (hookData?.message && hookData?.status) {
|
|
11
|
+
return { message: hookData?.message, status: hookData?.status };
|
|
12
|
+
}
|
|
13
|
+
|
|
14
|
+
const tokenData = await getToken({
|
|
15
|
+
uid: user.uid, token: params.table, mode: 'w', json: 1,
|
|
16
|
+
});
|
|
17
|
+
|
|
18
|
+
const { table: del, id } = hookData || tokenData || (config.auth?.disable ? req.params : {});
|
|
19
|
+
const { actions = [] } = await getAccess({ table: del, id, user }) || {};
|
|
20
|
+
|
|
21
|
+
if (!actions.includes('del') && !config?.local) {
|
|
22
|
+
return { message: 'access restricted', status: 403 };
|
|
23
|
+
}
|
|
24
|
+
const loadTemplate = await getTemplate('table', del);
|
|
25
|
+
|
|
26
|
+
const { table } = loadTemplate || hookData || req.params || {};
|
|
27
|
+
|
|
28
|
+
if (!table) return { status: 404, message: 'table is required' };
|
|
29
|
+
if (!id) return { status: 404, message: 'id is required' };
|
|
30
|
+
|
|
31
|
+
const data = await dataDelete({
|
|
32
|
+
table, id, uid: user?.uid,
|
|
33
|
+
});
|
|
34
|
+
|
|
35
|
+
return { rowCount: data.rowCount, msg: !data.rowCount ? data : null };
|
|
36
|
+
}
|
|
@@ -1,73 +1,73 @@
|
|
|
1
|
-
import {
|
|
2
|
-
applyHook, getAccess, getTemplate, checkXSS, dataInsert, getToken, config,
|
|
3
|
-
} from '../../../../utils.js';
|
|
4
|
-
|
|
5
|
-
export default async function insert(req) {
|
|
6
|
-
const {
|
|
7
|
-
user, params = {}, body = {},
|
|
8
|
-
} = req || {};
|
|
9
|
-
const hookData = await applyHook('preInsert', { table: params?.table, user });
|
|
10
|
-
if (hookData?.message && hookData?.status) {
|
|
11
|
-
return { message: hookData?.message, status: hookData?.status };
|
|
12
|
-
}
|
|
13
|
-
const tokenData = await getToken({
|
|
14
|
-
uid: user.uid, token: params.table, mode: 'a', json: 1,
|
|
15
|
-
});
|
|
16
|
-
|
|
17
|
-
const { form, table: add } = hookData || tokenData || (config.auth?.disable ? req.params : {});
|
|
18
|
-
|
|
19
|
-
const { actions = [] } = await getAccess({ table: add, user }) || {};
|
|
20
|
-
|
|
21
|
-
if (!actions.includes('add') && !config?.local) {
|
|
22
|
-
return { message: 'access restricted', status: 403 };
|
|
23
|
-
}
|
|
24
|
-
|
|
25
|
-
if (!add) {
|
|
26
|
-
return { message: 'table is required', status: 400 };
|
|
27
|
-
}
|
|
28
|
-
|
|
29
|
-
const loadTemplate = await getTemplate('table', add);
|
|
30
|
-
const { table } = loadTemplate || hookData || req.params || {};
|
|
31
|
-
if (!table) {
|
|
32
|
-
return { message: 'table not found', status: 404 };
|
|
33
|
-
}
|
|
34
|
-
|
|
35
|
-
const formData = form || loadTemplate?.form ? (await getTemplate('form', form || loadTemplate?.form) || {}) : {};
|
|
36
|
-
|
|
37
|
-
const xssCheck = checkXSS({ body, schema: formData?.schema || formData });
|
|
38
|
-
|
|
39
|
-
if (xssCheck.error && formData?.xssCheck !== false) {
|
|
40
|
-
req.log.warn({ name: 'injection/xss', msg: xssCheck.error, table }, req);
|
|
41
|
-
return { message: 'Дані містять заборонені символи. Приберіть їх та спробуйте ще раз', status: 409 };
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
const uid = user?.uid;
|
|
45
|
-
if (![add, table].filter((el) => el !== 'admin.users')?.length) {
|
|
46
|
-
Object.assign(body, { uid, editor_id: uid });
|
|
47
|
-
}
|
|
48
|
-
const res = await dataInsert({
|
|
49
|
-
table: loadTemplate?.table, data: body, uid,
|
|
50
|
-
});
|
|
51
|
-
|
|
52
|
-
// admin.custom_column
|
|
53
|
-
await applyHook('afterInsert', {
|
|
54
|
-
table, body, payload: res, user,
|
|
55
|
-
});
|
|
56
|
-
// form DataTable
|
|
57
|
-
const extraKeys = Object.keys(formData)?.filter((key) => formData?.[key]?.type === 'DataTable' && formData?.[key]?.table && formData?.[key]?.parent_id && body[key].length);
|
|
58
|
-
if (extraKeys?.length) {
|
|
59
|
-
res.extra = {};
|
|
60
|
-
await Promise.all(extraKeys?.map(async (key) => {
|
|
61
|
-
const objId = body[formData[key].parent_id] || req.body?.id;
|
|
62
|
-
const extraRows = await Promise.all(body[key].map(async (row) => {
|
|
63
|
-
const extraRes = await dataInsert({
|
|
64
|
-
table: formData[key].table, data: { ...row, [formData[key].parent_id]: objId }, uid,
|
|
65
|
-
});
|
|
66
|
-
return extraRes?.rows?.[0];
|
|
67
|
-
}));
|
|
68
|
-
Object.assign(res.extra, { [key]: extraRows.filter((el) => el) });
|
|
69
|
-
}));
|
|
70
|
-
}
|
|
71
|
-
|
|
72
|
-
return { rows: res.rows, extra: res.extra };
|
|
73
|
-
}
|
|
1
|
+
import {
|
|
2
|
+
applyHook, getAccess, getTemplate, checkXSS, dataInsert, getToken, config,
|
|
3
|
+
} from '../../../../utils.js';
|
|
4
|
+
|
|
5
|
+
export default async function insert(req) {
|
|
6
|
+
const {
|
|
7
|
+
user, params = {}, body = {},
|
|
8
|
+
} = req || {};
|
|
9
|
+
const hookData = await applyHook('preInsert', { table: params?.table, user });
|
|
10
|
+
if (hookData?.message && hookData?.status) {
|
|
11
|
+
return { message: hookData?.message, status: hookData?.status };
|
|
12
|
+
}
|
|
13
|
+
const tokenData = await getToken({
|
|
14
|
+
uid: user.uid, token: params.table, mode: 'a', json: 1,
|
|
15
|
+
});
|
|
16
|
+
|
|
17
|
+
const { form, table: add } = hookData || tokenData || (config.auth?.disable ? req.params : {});
|
|
18
|
+
|
|
19
|
+
const { actions = [] } = await getAccess({ table: add, user }) || {};
|
|
20
|
+
|
|
21
|
+
if (!actions.includes('add') && !config?.local) {
|
|
22
|
+
return { message: 'access restricted', status: 403 };
|
|
23
|
+
}
|
|
24
|
+
|
|
25
|
+
if (!add) {
|
|
26
|
+
return { message: 'table is required', status: 400 };
|
|
27
|
+
}
|
|
28
|
+
|
|
29
|
+
const loadTemplate = await getTemplate('table', add);
|
|
30
|
+
const { table } = loadTemplate || hookData || req.params || {};
|
|
31
|
+
if (!table) {
|
|
32
|
+
return { message: 'table not found', status: 404 };
|
|
33
|
+
}
|
|
34
|
+
|
|
35
|
+
const formData = form || loadTemplate?.form ? (await getTemplate('form', form || loadTemplate?.form) || {}) : {};
|
|
36
|
+
|
|
37
|
+
const xssCheck = checkXSS({ body, schema: formData?.schema || formData });
|
|
38
|
+
|
|
39
|
+
if (xssCheck.error && formData?.xssCheck !== false) {
|
|
40
|
+
req.log.warn({ name: 'injection/xss', msg: xssCheck.error, table }, req);
|
|
41
|
+
return { message: 'Дані містять заборонені символи. Приберіть їх та спробуйте ще раз', status: 409 };
|
|
42
|
+
}
|
|
43
|
+
|
|
44
|
+
const uid = user?.uid;
|
|
45
|
+
if (![add, table].filter((el) => el !== 'admin.users')?.length) {
|
|
46
|
+
Object.assign(body, { uid, editor_id: uid });
|
|
47
|
+
}
|
|
48
|
+
const res = await dataInsert({
|
|
49
|
+
table: loadTemplate?.table, data: body, uid,
|
|
50
|
+
});
|
|
51
|
+
|
|
52
|
+
// admin.custom_column
|
|
53
|
+
await applyHook('afterInsert', {
|
|
54
|
+
table, body, payload: res, user,
|
|
55
|
+
});
|
|
56
|
+
// form DataTable
|
|
57
|
+
const extraKeys = Object.keys(formData)?.filter((key) => formData?.[key]?.type === 'DataTable' && formData?.[key]?.table && formData?.[key]?.parent_id && body[key].length);
|
|
58
|
+
if (extraKeys?.length) {
|
|
59
|
+
res.extra = {};
|
|
60
|
+
await Promise.all(extraKeys?.map(async (key) => {
|
|
61
|
+
const objId = body[formData[key].parent_id] || req.body?.id;
|
|
62
|
+
const extraRows = await Promise.all(body[key].map(async (row) => {
|
|
63
|
+
const extraRes = await dataInsert({
|
|
64
|
+
table: formData[key].table, data: { ...row, [formData[key].parent_id]: objId }, uid,
|
|
65
|
+
});
|
|
66
|
+
return extraRes?.rows?.[0];
|
|
67
|
+
}));
|
|
68
|
+
Object.assign(res.extra, { [key]: extraRows.filter((el) => el) });
|
|
69
|
+
}));
|
|
70
|
+
}
|
|
71
|
+
|
|
72
|
+
return { rows: res.rows, extra: res.extra };
|
|
73
|
+
}
|
|
@@ -1,76 +1,76 @@
|
|
|
1
|
-
import {
|
|
2
|
-
pgClients, applyHook, getAccess, getTemplate, checkXSS, dataInsert, dataUpdate, logger, getToken,
|
|
3
|
-
} from '../../../../utils.js';
|
|
4
|
-
import config from '../../../../config.js';
|
|
5
|
-
|
|
6
|
-
export default async function update(req) {
|
|
7
|
-
const { user, params = {}, body = {} } = req;
|
|
8
|
-
const hookData = await applyHook('preUpdate', {
|
|
9
|
-
table: params?.table, id: params?.id, user,
|
|
10
|
-
});
|
|
11
|
-
|
|
12
|
-
if (hookData?.message && hookData?.status) {
|
|
13
|
-
return { message: hookData?.message, status: hookData?.status };
|
|
14
|
-
}
|
|
15
|
-
const tokenData = await getToken({
|
|
16
|
-
uid: user.uid, token: body.token || params.table, mode: 'w', json: 1,
|
|
17
|
-
});
|
|
18
|
-
|
|
19
|
-
const { form, table: edit, id } = hookData || tokenData || (config.auth?.disable ? params : {});
|
|
20
|
-
|
|
21
|
-
const { actions = [] } = await getAccess({ table: edit, id, user }) || {};
|
|
22
|
-
|
|
23
|
-
if (!actions.includes('edit') && !config?.local) {
|
|
24
|
-
return { message: 'access restricted', status: 403 };
|
|
25
|
-
}
|
|
26
|
-
|
|
27
|
-
if (!edit) {
|
|
28
|
-
return { message: 'table is required', status: 400 };
|
|
29
|
-
}
|
|
30
|
-
|
|
31
|
-
if (!id) {
|
|
32
|
-
return { message: 'id is required', status: 404 };
|
|
33
|
-
}
|
|
34
|
-
|
|
35
|
-
const loadTemplate = await getTemplate('table', edit);
|
|
36
|
-
const { table } = loadTemplate || hookData || params || {};
|
|
37
|
-
|
|
38
|
-
const uid = user?.uid;
|
|
39
|
-
|
|
40
|
-
const formData = form || loadTemplate?.form ? await getTemplate('form', form || loadTemplate?.form) : {};
|
|
41
|
-
|
|
42
|
-
const xssCheck = checkXSS({ body, schema: formData?.schema || formData });
|
|
43
|
-
|
|
44
|
-
if (xssCheck.error && formData?.xssCheck !== false) {
|
|
45
|
-
logger.warn({ name: 'injection/xss', msg: xssCheck.error, table }, req);
|
|
46
|
-
return { message: 'Дані містять заборонені символи. Приберіть їх та спробуйте ще раз', status: 409 };
|
|
47
|
-
}
|
|
48
|
-
|
|
49
|
-
const res = await dataUpdate({
|
|
50
|
-
table: loadTemplate?.table || table, id, data: body, uid,
|
|
51
|
-
});
|
|
52
|
-
|
|
53
|
-
// admin.custom_column
|
|
54
|
-
await applyHook('afterUpdate', {
|
|
55
|
-
table: params?.table, body, payload: res, user,
|
|
56
|
-
});
|
|
57
|
-
|
|
58
|
-
// form DataTable
|
|
59
|
-
const extraKeys = Object.keys(formData)?.filter((key) => formData?.[key]?.type === 'DataTable' && formData?.[key]?.table && formData?.[key]?.parent_id && body[key].length);
|
|
60
|
-
if (extraKeys?.length) {
|
|
61
|
-
res.extra = {};
|
|
62
|
-
await Promise.all(extraKeys?.map(async (key) => {
|
|
63
|
-
const objId = body[formData[key].parent_id] || body?.id;
|
|
64
|
-
// delete old extra data
|
|
65
|
-
await pgClients.client.query(`delete from ${formData[key].table} where ${formData[key].parent_id}=$1`, [objId]); // rewrite?
|
|
66
|
-
// insert new extra data
|
|
67
|
-
const extraRows = await Promise.all(body[key].map(async (row) => {
|
|
68
|
-
const extraRes = await dataInsert({ table: formData[key].table, data: { ...row, [formData[key].parent_id]: objId }, uid });
|
|
69
|
-
return extraRes?.rows?.[0];
|
|
70
|
-
}));
|
|
71
|
-
Object.assign(res.extra, { [key]: extraRows.filter((el) => el) });
|
|
72
|
-
}));
|
|
73
|
-
}
|
|
74
|
-
|
|
75
|
-
return res;
|
|
76
|
-
}
|
|
1
|
+
import {
|
|
2
|
+
pgClients, applyHook, getAccess, getTemplate, checkXSS, dataInsert, dataUpdate, logger, getToken,
|
|
3
|
+
} from '../../../../utils.js';
|
|
4
|
+
import config from '../../../../config.js';
|
|
5
|
+
|
|
6
|
+
export default async function update(req) {
|
|
7
|
+
const { user, params = {}, body = {} } = req;
|
|
8
|
+
const hookData = await applyHook('preUpdate', {
|
|
9
|
+
table: params?.table, id: params?.id, user,
|
|
10
|
+
});
|
|
11
|
+
|
|
12
|
+
if (hookData?.message && hookData?.status) {
|
|
13
|
+
return { message: hookData?.message, status: hookData?.status };
|
|
14
|
+
}
|
|
15
|
+
const tokenData = await getToken({
|
|
16
|
+
uid: user.uid, token: body.token || params.table, mode: 'w', json: 1,
|
|
17
|
+
});
|
|
18
|
+
|
|
19
|
+
const { form, table: edit, id } = hookData || tokenData || (config.auth?.disable ? params : {});
|
|
20
|
+
|
|
21
|
+
const { actions = [] } = await getAccess({ table: edit, id, user }) || {};
|
|
22
|
+
|
|
23
|
+
if (!actions.includes('edit') && !config?.local) {
|
|
24
|
+
return { message: 'access restricted', status: 403 };
|
|
25
|
+
}
|
|
26
|
+
|
|
27
|
+
if (!edit) {
|
|
28
|
+
return { message: 'table is required', status: 400 };
|
|
29
|
+
}
|
|
30
|
+
|
|
31
|
+
if (!id) {
|
|
32
|
+
return { message: 'id is required', status: 404 };
|
|
33
|
+
}
|
|
34
|
+
|
|
35
|
+
const loadTemplate = await getTemplate('table', edit);
|
|
36
|
+
const { table } = loadTemplate || hookData || params || {};
|
|
37
|
+
|
|
38
|
+
const uid = user?.uid;
|
|
39
|
+
|
|
40
|
+
const formData = form || loadTemplate?.form ? await getTemplate('form', form || loadTemplate?.form) : {};
|
|
41
|
+
|
|
42
|
+
const xssCheck = checkXSS({ body, schema: formData?.schema || formData });
|
|
43
|
+
|
|
44
|
+
if (xssCheck.error && formData?.xssCheck !== false) {
|
|
45
|
+
logger.warn({ name: 'injection/xss', msg: xssCheck.error, table }, req);
|
|
46
|
+
return { message: 'Дані містять заборонені символи. Приберіть їх та спробуйте ще раз', status: 409 };
|
|
47
|
+
}
|
|
48
|
+
|
|
49
|
+
const res = await dataUpdate({
|
|
50
|
+
table: loadTemplate?.table || table, id, data: body, uid,
|
|
51
|
+
});
|
|
52
|
+
|
|
53
|
+
// admin.custom_column
|
|
54
|
+
await applyHook('afterUpdate', {
|
|
55
|
+
table: params?.table, body, payload: res, user,
|
|
56
|
+
});
|
|
57
|
+
|
|
58
|
+
// form DataTable
|
|
59
|
+
const extraKeys = Object.keys(formData)?.filter((key) => formData?.[key]?.type === 'DataTable' && formData?.[key]?.table && formData?.[key]?.parent_id && body[key].length);
|
|
60
|
+
if (extraKeys?.length) {
|
|
61
|
+
res.extra = {};
|
|
62
|
+
await Promise.all(extraKeys?.map(async (key) => {
|
|
63
|
+
const objId = body[formData[key].parent_id] || body?.id;
|
|
64
|
+
// delete old extra data
|
|
65
|
+
await pgClients.client.query(`delete from ${formData[key].table} where ${formData[key].parent_id}=$1`, [objId]); // rewrite?
|
|
66
|
+
// insert new extra data
|
|
67
|
+
const extraRows = await Promise.all(body[key].map(async (row) => {
|
|
68
|
+
const extraRes = await dataInsert({ table: formData[key].table, data: { ...row, [formData[key].parent_id]: objId }, uid });
|
|
69
|
+
return extraRes?.rows?.[0];
|
|
70
|
+
}));
|
|
71
|
+
Object.assign(res.extra, { [key]: extraRows.filter((el) => el) });
|
|
72
|
+
}));
|
|
73
|
+
}
|
|
74
|
+
|
|
75
|
+
return res;
|
|
76
|
+
}
|
|
@@ -1,19 +1,19 @@
|
|
|
1
|
-
import update from './controllers/update.js';
|
|
2
|
-
import insert from './controllers/insert.js';
|
|
3
|
-
import deleteCrud from './controllers/deleteCrud.js';
|
|
4
|
-
|
|
5
|
-
const tableSchema = {
|
|
6
|
-
params: {
|
|
7
|
-
id: { type: 'string', pattern: '^([\\d\\w]+)$' },
|
|
8
|
-
table: { type: 'string', pattern: '^([\\w\\d_.]+)$' },
|
|
9
|
-
},
|
|
10
|
-
};
|
|
11
|
-
|
|
12
|
-
async function plugin(fastify, config = {}) {
|
|
13
|
-
const prefix = config.prefix || '/api';
|
|
14
|
-
fastify.put(`${prefix}/table/:table/:id?`, { schema: tableSchema }, update);
|
|
15
|
-
fastify.delete(`${prefix}/table/:table/:id?`, { schema: tableSchema }, deleteCrud);
|
|
16
|
-
fastify.post(`${prefix}/table/:table?`, { schema: tableSchema }, insert);
|
|
17
|
-
}
|
|
18
|
-
|
|
19
|
-
export default plugin;
|
|
1
|
+
import update from './controllers/update.js';
|
|
2
|
+
import insert from './controllers/insert.js';
|
|
3
|
+
import deleteCrud from './controllers/deleteCrud.js';
|
|
4
|
+
|
|
5
|
+
const tableSchema = {
|
|
6
|
+
params: {
|
|
7
|
+
id: { type: 'string', pattern: '^([\\d\\w]+)$' },
|
|
8
|
+
table: { type: 'string', pattern: '^([\\w\\d_.]+)$' },
|
|
9
|
+
},
|
|
10
|
+
};
|
|
11
|
+
|
|
12
|
+
async function plugin(fastify, config = {}) {
|
|
13
|
+
const prefix = config.prefix || '/api';
|
|
14
|
+
fastify.put(`${prefix}/table/:table/:id?`, { schema: tableSchema }, update);
|
|
15
|
+
fastify.delete(`${prefix}/table/:table/:id?`, { schema: tableSchema }, deleteCrud);
|
|
16
|
+
fastify.post(`${prefix}/table/:table?`, { schema: tableSchema }, insert);
|
|
17
|
+
}
|
|
18
|
+
|
|
19
|
+
export default plugin;
|