@opengis/fastify-table 1.1.68 → 1.1.69
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.js +109 -109
- package/package.json +45 -45
- package/server/migrations/0.sql +80 -80
- package/server/migrations/cls.sql +39 -39
- package/server/migrations/properties.sql +144 -144
- package/server/migrations/roles.sql +175 -175
- package/server/migrations/users.sql +170 -170
- package/server/plugins/cron/funcs/addCron.js +128 -128
- package/server/plugins/cron/index.js +6 -6
- package/server/plugins/crud/funcs/dataDelete.js +21 -21
- package/server/plugins/crud/funcs/dataInsert.js +34 -34
- package/server/plugins/crud/funcs/dataUpdate.js +50 -50
- package/server/plugins/crud/funcs/getAccess.js +48 -48
- package/server/plugins/crud/funcs/getOpt.js +13 -13
- package/server/plugins/crud/funcs/setOpt.js +21 -21
- package/server/plugins/crud/funcs/setToken.js +44 -44
- package/server/plugins/crud/funcs/utils/getFolder.js +10 -10
- package/server/plugins/crud/funcs/utils/logChanges.js +62 -62
- package/server/plugins/crud/index.js +23 -23
- package/server/plugins/hook/index.js +8 -8
- package/server/plugins/migration/funcs/exec.migrations.js +79 -79
- package/server/plugins/migration/index.js +7 -7
- package/server/plugins/pg/funcs/getMeta.js +28 -28
- package/server/plugins/pg/funcs/getPG.js +30 -30
- package/server/plugins/pg/pgClients.js +21 -21
- package/server/plugins/policy/funcs/checkPolicy.js +92 -92
- package/server/plugins/policy/index.js +12 -12
- package/server/plugins/policy/sqlInjection.js +33 -33
- package/server/plugins/redis/client.js +8 -8
- package/server/plugins/redis/funcs/redisClients.js +3 -3
- package/server/plugins/redis/index.js +15 -15
- package/server/plugins/table/funcs/addTemplateDir.js +8 -8
- package/server/plugins/table/funcs/getFilterSQL/index.js +96 -96
- package/server/plugins/table/funcs/getFilterSQL/util/formatValue.js +170 -170
- package/server/plugins/table/funcs/getFilterSQL/util/getCustomQuery.js +13 -13
- package/server/plugins/table/funcs/getFilterSQL/util/getFilterQuery.js +66 -66
- package/server/plugins/table/funcs/getFilterSQL/util/getOptimizedQuery.js +12 -12
- package/server/plugins/table/funcs/getFilterSQL/util/getTableSql.js +34 -34
- package/server/plugins/table/funcs/getSelect.js +19 -19
- package/server/plugins/table/funcs/getSelectMeta.js +60 -60
- package/server/plugins/table/funcs/getTemplates.js +19 -19
- package/server/plugins/table/funcs/gisIRColumn.js +72 -72
- package/server/plugins/table/funcs/loadTemplate.js +1 -1
- package/server/plugins/table/funcs/loadTemplatePath.js +1 -1
- package/server/plugins/table/funcs/metaFormat/getSelectVal.js +23 -23
- package/server/plugins/table/funcs/metaFormat/index.js +30 -30
- package/server/plugins/table/funcs/userTemplateDir.js +1 -1
- package/server/plugins/table/index.js +13 -13
- package/server/plugins/util/funcs/eventStream.js +28 -28
- package/server/plugins/util/index.js +7 -7
- package/server/routes/cron/index.js +14 -14
- package/server/routes/crud/controllers/deleteCrud.js +36 -36
- package/server/routes/crud/controllers/insert.js +81 -81
- package/server/routes/crud/controllers/table.js +87 -87
- package/server/routes/crud/controllers/update.js +81 -81
- package/server/routes/crud/index.js +21 -21
- package/server/routes/logger/controllers/logger.file.js +92 -92
- package/server/routes/logger/controllers/utils/checkUserAccess.js +19 -19
- package/server/routes/logger/controllers/utils/getRootDir.js +26 -26
- package/server/routes/logger/index.js +17 -17
- package/server/routes/properties/controllers/properties.add.js +55 -55
- package/server/routes/properties/controllers/properties.get.js +17 -17
- package/server/routes/properties/index.js +16 -16
- package/server/routes/table/controllers/data.js +142 -142
- package/server/routes/table/controllers/filter.js +60 -60
- package/server/routes/table/controllers/form.js +42 -42
- package/server/routes/table/controllers/search.js +74 -74
- package/server/routes/table/controllers/suggest.js +84 -84
- package/server/routes/table/index.js +28 -28
- package/server/routes/table/schema.js +64 -64
- package/server/routes/util/controllers/status.monitor.js +8 -8
- package/server/routes/util/index.js +11 -11
- package/utils.js +120 -120
|
@@ -1,33 +1,33 @@
|
|
|
1
|
-
const sqlInjection = [
|
|
2
|
-
'()',
|
|
3
|
-
'^',
|
|
4
|
-
'*',
|
|
5
|
-
'like ',
|
|
6
|
-
'@variable',
|
|
7
|
-
'@@variable',
|
|
8
|
-
'group by ',
|
|
9
|
-
'union ',
|
|
10
|
-
'select ',
|
|
11
|
-
'having ',
|
|
12
|
-
'as injectx',
|
|
13
|
-
'where ',
|
|
14
|
-
'rlike ',
|
|
15
|
-
'if(',
|
|
16
|
-
'sleep(',
|
|
17
|
-
'waitfor delay',
|
|
18
|
-
'benchmark(',
|
|
19
|
-
'pg_sleep(',
|
|
20
|
-
"'\\\"",
|
|
21
|
-
'randomblob(',
|
|
22
|
-
'order by ',
|
|
23
|
-
'union all ',
|
|
24
|
-
'+or',
|
|
25
|
-
'or ',
|
|
26
|
-
'and ',
|
|
27
|
-
"'' ",
|
|
28
|
-
'""" ',
|
|
29
|
-
'<script',
|
|
30
|
-
'javascript:',
|
|
31
|
-
];
|
|
32
|
-
|
|
33
|
-
export default sqlInjection;
|
|
1
|
+
const sqlInjection = [
|
|
2
|
+
'()',
|
|
3
|
+
'^',
|
|
4
|
+
'*',
|
|
5
|
+
'like ',
|
|
6
|
+
'@variable',
|
|
7
|
+
'@@variable',
|
|
8
|
+
'group by ',
|
|
9
|
+
'union ',
|
|
10
|
+
'select ',
|
|
11
|
+
'having ',
|
|
12
|
+
'as injectx',
|
|
13
|
+
'where ',
|
|
14
|
+
'rlike ',
|
|
15
|
+
'if(',
|
|
16
|
+
'sleep(',
|
|
17
|
+
'waitfor delay',
|
|
18
|
+
'benchmark(',
|
|
19
|
+
'pg_sleep(',
|
|
20
|
+
"'\\\"",
|
|
21
|
+
'randomblob(',
|
|
22
|
+
'order by ',
|
|
23
|
+
'union all ',
|
|
24
|
+
'+or',
|
|
25
|
+
'or ',
|
|
26
|
+
'and ',
|
|
27
|
+
"'' ",
|
|
28
|
+
'""" ',
|
|
29
|
+
'<script',
|
|
30
|
+
'javascript:',
|
|
31
|
+
];
|
|
32
|
+
|
|
33
|
+
export default sqlInjection;
|
|
@@ -1,8 +1,8 @@
|
|
|
1
|
-
import redisClients from './funcs/redisClients.js';
|
|
2
|
-
import getRedis from './funcs/getRedis.js';
|
|
3
|
-
|
|
4
|
-
if (!redisClients[0]) {
|
|
5
|
-
getRedis({ db: 0 });
|
|
6
|
-
}
|
|
7
|
-
|
|
8
|
-
export default redisClients[0];
|
|
1
|
+
import redisClients from './funcs/redisClients.js';
|
|
2
|
+
import getRedis from './funcs/getRedis.js';
|
|
3
|
+
|
|
4
|
+
if (!redisClients[0]) {
|
|
5
|
+
getRedis({ db: 0 });
|
|
6
|
+
}
|
|
7
|
+
|
|
8
|
+
export default redisClients[0];
|
|
@@ -1,3 +1,3 @@
|
|
|
1
|
-
const redisClients = {};
|
|
2
|
-
|
|
3
|
-
export default redisClients;
|
|
1
|
+
const redisClients = {};
|
|
2
|
+
|
|
3
|
+
export default redisClients;
|
|
@@ -1,15 +1,15 @@
|
|
|
1
|
-
import getRedis from './funcs/getRedis.js';
|
|
2
|
-
|
|
3
|
-
function close(fastify) {
|
|
4
|
-
fastify.rclient.quit();
|
|
5
|
-
}
|
|
6
|
-
|
|
7
|
-
async function plugin(fastify) {
|
|
8
|
-
const client = getRedis({ db: 0 });
|
|
9
|
-
client.getJSON = client.get;
|
|
10
|
-
// fastify.decorate('rclient', client);
|
|
11
|
-
// fastify.decorate('getRedis', getRedis);
|
|
12
|
-
fastify.addHook('onClose', close);
|
|
13
|
-
}
|
|
14
|
-
|
|
15
|
-
export default plugin;
|
|
1
|
+
import getRedis from './funcs/getRedis.js';
|
|
2
|
+
|
|
3
|
+
function close(fastify) {
|
|
4
|
+
fastify.rclient.quit();
|
|
5
|
+
}
|
|
6
|
+
|
|
7
|
+
async function plugin(fastify) {
|
|
8
|
+
const client = getRedis({ db: 0 });
|
|
9
|
+
client.getJSON = client.get;
|
|
10
|
+
// fastify.decorate('rclient', client);
|
|
11
|
+
// fastify.decorate('getRedis', getRedis);
|
|
12
|
+
fastify.addHook('onClose', close);
|
|
13
|
+
}
|
|
14
|
+
|
|
15
|
+
export default plugin;
|
|
@@ -1,8 +1,8 @@
|
|
|
1
|
-
import userTemplateDir from './userTemplateDir.js';
|
|
2
|
-
|
|
3
|
-
export default function addTemplateDir(dir) {
|
|
4
|
-
if (dir) {
|
|
5
|
-
userTemplateDir.push(dir);
|
|
6
|
-
}
|
|
7
|
-
return userTemplateDir;
|
|
8
|
-
}
|
|
1
|
+
import userTemplateDir from './userTemplateDir.js';
|
|
2
|
+
|
|
3
|
+
export default function addTemplateDir(dir) {
|
|
4
|
+
if (dir) {
|
|
5
|
+
userTemplateDir.push(dir);
|
|
6
|
+
}
|
|
7
|
+
return userTemplateDir;
|
|
8
|
+
}
|
|
@@ -1,96 +1,96 @@
|
|
|
1
|
-
import getTemplate from '../getTemplate.js';
|
|
2
|
-
import pgClients from '../../../pg/pgClients.js';
|
|
3
|
-
|
|
4
|
-
// import { getTemplate, pgClients } from '../../../../../utils.js';
|
|
5
|
-
|
|
6
|
-
// filter util
|
|
7
|
-
import getTableSql from './util/getTableSql.js';
|
|
8
|
-
import getFilterQuery from './util/getFilterQuery.js';
|
|
9
|
-
import getOptimizedQuery from './util/getOptimizedQuery.js';
|
|
10
|
-
|
|
11
|
-
async function getFilterSQL({
|
|
12
|
-
table, filter, pg = pgClients.client, search, filterList, query, custom, state,
|
|
13
|
-
}) {
|
|
14
|
-
if (!table) return { error: 'param table is required', status: 400 };
|
|
15
|
-
|
|
16
|
-
const body = await getTemplate('table', table);
|
|
17
|
-
|
|
18
|
-
const sqlList = body?.sql?.length
|
|
19
|
-
? body?.sql?.filter((el) => !el.disabled && el?.sql?.replace)
|
|
20
|
-
.map((el, i) => {
|
|
21
|
-
Object.assign(el, { name: el.name || `t${i + 1}` });
|
|
22
|
-
return ` left join lateral (${el.filter ? el.sql.replace(/limit 1/ig, '') : el.sql}) as ${el.name} on 1=1 `;
|
|
23
|
-
}).join(' ')
|
|
24
|
-
: '';
|
|
25
|
-
const fieldQuery = `select * from ${body?.table || table} ${sqlList ? ` t ${sqlList}` : ''} where 1=1 limit 0`;
|
|
26
|
-
const { fields = [] } = await pg.query(fieldQuery);
|
|
27
|
-
|
|
28
|
-
const { fields: fieldsModel } = body?.table && pg.pk[body?.table] ? await pg.query(`select * from ${body.table} limit 0`) : {};
|
|
29
|
-
|
|
30
|
-
const autoSearchColumn = fields?.filter((el) => pg.pgType?.[el.dataTypeID] === 'text')?.map((el) => el.name).join(',');
|
|
31
|
-
const searchColumn = body?.search_column || autoSearchColumn;
|
|
32
|
-
const fieldsList = (fieldsModel || fields)?.map((el) => el.name);
|
|
33
|
-
try {
|
|
34
|
-
const tableSQL = await getTableSql({
|
|
35
|
-
pg, body, table, fields,
|
|
36
|
-
});
|
|
37
|
-
const sval = `ilike '%${decodeURIComponent(search).replace(/'/g, "''")}%'`;
|
|
38
|
-
const searchQuery = search && searchColumn
|
|
39
|
-
? ` (${searchColumn.split(',')?.map((name) => {
|
|
40
|
-
const { pk } = tableSQL.find((el) => el.name === name) || {};
|
|
41
|
-
return pk && !fieldsList.includes(name) ? `${pk} in (select ${pk} from (${fieldQuery})q where ${name} ${sval})` : `${name} ${sval}`;
|
|
42
|
-
}).join(' or ')} )` : '';
|
|
43
|
-
|
|
44
|
-
const filterList1 = await Promise.all((filterList || (body?.filter_list || []).concat(body?.filterInline || []).concat(body?.filterCustom || []).concat(body?.filterState || []).concat(body?.filterList || [])
|
|
45
|
-
.concat(body?.filters || [])) /* .concat(extraFilters || []).concat(customFilters || []) */
|
|
46
|
-
|
|
47
|
-
?.map(async (el) => {
|
|
48
|
-
if (!el?.data) return el;
|
|
49
|
-
const cls = await getTemplate(['cls', 'select'], el.data);
|
|
50
|
-
if (Array.isArray(cls) && cls?.length) {
|
|
51
|
-
Object.assign(el, { options: cls });
|
|
52
|
-
}
|
|
53
|
-
else if (typeof (cls?.sql || cls) === 'string') {
|
|
54
|
-
Object.assign(el, { sql: cls?.sql || cls });
|
|
55
|
-
}
|
|
56
|
-
return el;
|
|
57
|
-
}));
|
|
58
|
-
|
|
59
|
-
const filters = getFilterQuery({
|
|
60
|
-
pg,
|
|
61
|
-
filter,
|
|
62
|
-
table,
|
|
63
|
-
tableSQL,
|
|
64
|
-
fields,
|
|
65
|
-
filterList: filterList1,
|
|
66
|
-
});
|
|
67
|
-
|
|
68
|
-
// filter
|
|
69
|
-
const customQuery = body?.filterCustom?.length && custom ? body.filterCustom?.find((el) => el.name === custom)?.sql : null;
|
|
70
|
-
const stateQuery = body?.filterState?.length && state ? body.filterState?.find((el) => el.name === state)?.sql : null;
|
|
71
|
-
|
|
72
|
-
const filterQuery = filters?.filter((el) => el.query)?.map((el) => `${el.query} `).join(' and ');
|
|
73
|
-
const q = [body?.query, query, searchQuery, filterQuery, stateQuery, customQuery].filter((el) => el).join(' and ');
|
|
74
|
-
|
|
75
|
-
// table
|
|
76
|
-
const modelQuery = body?.model || body?.table || table;
|
|
77
|
-
const optimizedSQL = `select * from ${getOptimizedQuery({ body, table, q })} `;
|
|
78
|
-
const tableCount = getOptimizedQuery({ body, table, q }, true);
|
|
79
|
-
// console.log(optimizedSQL);
|
|
80
|
-
return {
|
|
81
|
-
filterList,
|
|
82
|
-
|
|
83
|
-
q,
|
|
84
|
-
optimizedSQL,
|
|
85
|
-
tableCount,
|
|
86
|
-
table: modelQuery,
|
|
87
|
-
// filter parts
|
|
88
|
-
searchQuery,
|
|
89
|
-
};
|
|
90
|
-
}
|
|
91
|
-
catch (err) {
|
|
92
|
-
throw new Error(err.toString());
|
|
93
|
-
}
|
|
94
|
-
}
|
|
95
|
-
|
|
96
|
-
export default getFilterSQL;
|
|
1
|
+
import getTemplate from '../getTemplate.js';
|
|
2
|
+
import pgClients from '../../../pg/pgClients.js';
|
|
3
|
+
|
|
4
|
+
// import { getTemplate, pgClients } from '../../../../../utils.js';
|
|
5
|
+
|
|
6
|
+
// filter util
|
|
7
|
+
import getTableSql from './util/getTableSql.js';
|
|
8
|
+
import getFilterQuery from './util/getFilterQuery.js';
|
|
9
|
+
import getOptimizedQuery from './util/getOptimizedQuery.js';
|
|
10
|
+
|
|
11
|
+
async function getFilterSQL({
|
|
12
|
+
table, filter, pg = pgClients.client, search, filterList, query, custom, state,
|
|
13
|
+
}) {
|
|
14
|
+
if (!table) return { error: 'param table is required', status: 400 };
|
|
15
|
+
|
|
16
|
+
const body = await getTemplate('table', table);
|
|
17
|
+
|
|
18
|
+
const sqlList = body?.sql?.length
|
|
19
|
+
? body?.sql?.filter((el) => !el.disabled && el?.sql?.replace)
|
|
20
|
+
.map((el, i) => {
|
|
21
|
+
Object.assign(el, { name: el.name || `t${i + 1}` });
|
|
22
|
+
return ` left join lateral (${el.filter ? el.sql.replace(/limit 1/ig, '') : el.sql}) as ${el.name} on 1=1 `;
|
|
23
|
+
}).join(' ')
|
|
24
|
+
: '';
|
|
25
|
+
const fieldQuery = `select * from ${body?.table || table} ${sqlList ? ` t ${sqlList}` : ''} where 1=1 limit 0`;
|
|
26
|
+
const { fields = [] } = await pg.query(fieldQuery);
|
|
27
|
+
|
|
28
|
+
const { fields: fieldsModel } = body?.table && pg.pk[body?.table] ? await pg.query(`select * from ${body.table} limit 0`) : {};
|
|
29
|
+
|
|
30
|
+
const autoSearchColumn = fields?.filter((el) => pg.pgType?.[el.dataTypeID] === 'text')?.map((el) => el.name).join(',');
|
|
31
|
+
const searchColumn = body?.search_column || autoSearchColumn;
|
|
32
|
+
const fieldsList = (fieldsModel || fields)?.map((el) => el.name);
|
|
33
|
+
try {
|
|
34
|
+
const tableSQL = await getTableSql({
|
|
35
|
+
pg, body, table, fields,
|
|
36
|
+
});
|
|
37
|
+
const sval = `ilike '%${decodeURIComponent(search).replace(/'/g, "''")}%'`;
|
|
38
|
+
const searchQuery = search && searchColumn
|
|
39
|
+
? ` (${searchColumn.split(',')?.map((name) => {
|
|
40
|
+
const { pk } = tableSQL.find((el) => el.name === name) || {};
|
|
41
|
+
return pk && !fieldsList.includes(name) ? `${pk} in (select ${pk} from (${fieldQuery})q where ${name} ${sval})` : `${name} ${sval}`;
|
|
42
|
+
}).join(' or ')} )` : '';
|
|
43
|
+
|
|
44
|
+
const filterList1 = await Promise.all((filterList || (body?.filter_list || []).concat(body?.filterInline || []).concat(body?.filterCustom || []).concat(body?.filterState || []).concat(body?.filterList || [])
|
|
45
|
+
.concat(body?.filters || [])) /* .concat(extraFilters || []).concat(customFilters || []) */
|
|
46
|
+
|
|
47
|
+
?.map(async (el) => {
|
|
48
|
+
if (!el?.data) return el;
|
|
49
|
+
const cls = await getTemplate(['cls', 'select'], el.data);
|
|
50
|
+
if (Array.isArray(cls) && cls?.length) {
|
|
51
|
+
Object.assign(el, { options: cls });
|
|
52
|
+
}
|
|
53
|
+
else if (typeof (cls?.sql || cls) === 'string') {
|
|
54
|
+
Object.assign(el, { sql: cls?.sql || cls });
|
|
55
|
+
}
|
|
56
|
+
return el;
|
|
57
|
+
}));
|
|
58
|
+
|
|
59
|
+
const filters = getFilterQuery({
|
|
60
|
+
pg,
|
|
61
|
+
filter,
|
|
62
|
+
table,
|
|
63
|
+
tableSQL,
|
|
64
|
+
fields,
|
|
65
|
+
filterList: filterList1,
|
|
66
|
+
});
|
|
67
|
+
|
|
68
|
+
// filter
|
|
69
|
+
const customQuery = body?.filterCustom?.length && custom ? body.filterCustom?.find((el) => el.name === custom)?.sql : null;
|
|
70
|
+
const stateQuery = body?.filterState?.length && state ? body.filterState?.find((el) => el.name === state)?.sql : null;
|
|
71
|
+
|
|
72
|
+
const filterQuery = filters?.filter((el) => el.query)?.map((el) => `${el.query} `).join(' and ');
|
|
73
|
+
const q = [body?.query, query, searchQuery, filterQuery, stateQuery, customQuery].filter((el) => el).join(' and ');
|
|
74
|
+
|
|
75
|
+
// table
|
|
76
|
+
const modelQuery = body?.model || body?.table || table;
|
|
77
|
+
const optimizedSQL = `select * from ${getOptimizedQuery({ body, table, q })} `;
|
|
78
|
+
const tableCount = getOptimizedQuery({ body, table, q }, true);
|
|
79
|
+
// console.log(optimizedSQL);
|
|
80
|
+
return {
|
|
81
|
+
filterList,
|
|
82
|
+
|
|
83
|
+
q,
|
|
84
|
+
optimizedSQL,
|
|
85
|
+
tableCount,
|
|
86
|
+
table: modelQuery,
|
|
87
|
+
// filter parts
|
|
88
|
+
searchQuery,
|
|
89
|
+
};
|
|
90
|
+
}
|
|
91
|
+
catch (err) {
|
|
92
|
+
throw new Error(err.toString());
|
|
93
|
+
}
|
|
94
|
+
}
|
|
95
|
+
|
|
96
|
+
export default getFilterSQL;
|