@opengis/fastify-table 1.1.68 → 1.1.69

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (73) hide show
  1. package/index.js +109 -109
  2. package/package.json +45 -45
  3. package/server/migrations/0.sql +80 -80
  4. package/server/migrations/cls.sql +39 -39
  5. package/server/migrations/properties.sql +144 -144
  6. package/server/migrations/roles.sql +175 -175
  7. package/server/migrations/users.sql +170 -170
  8. package/server/plugins/cron/funcs/addCron.js +128 -128
  9. package/server/plugins/cron/index.js +6 -6
  10. package/server/plugins/crud/funcs/dataDelete.js +21 -21
  11. package/server/plugins/crud/funcs/dataInsert.js +34 -34
  12. package/server/plugins/crud/funcs/dataUpdate.js +50 -50
  13. package/server/plugins/crud/funcs/getAccess.js +48 -48
  14. package/server/plugins/crud/funcs/getOpt.js +13 -13
  15. package/server/plugins/crud/funcs/setOpt.js +21 -21
  16. package/server/plugins/crud/funcs/setToken.js +44 -44
  17. package/server/plugins/crud/funcs/utils/getFolder.js +10 -10
  18. package/server/plugins/crud/funcs/utils/logChanges.js +62 -62
  19. package/server/plugins/crud/index.js +23 -23
  20. package/server/plugins/hook/index.js +8 -8
  21. package/server/plugins/migration/funcs/exec.migrations.js +79 -79
  22. package/server/plugins/migration/index.js +7 -7
  23. package/server/plugins/pg/funcs/getMeta.js +28 -28
  24. package/server/plugins/pg/funcs/getPG.js +30 -30
  25. package/server/plugins/pg/pgClients.js +21 -21
  26. package/server/plugins/policy/funcs/checkPolicy.js +92 -92
  27. package/server/plugins/policy/index.js +12 -12
  28. package/server/plugins/policy/sqlInjection.js +33 -33
  29. package/server/plugins/redis/client.js +8 -8
  30. package/server/plugins/redis/funcs/redisClients.js +3 -3
  31. package/server/plugins/redis/index.js +15 -15
  32. package/server/plugins/table/funcs/addTemplateDir.js +8 -8
  33. package/server/plugins/table/funcs/getFilterSQL/index.js +96 -96
  34. package/server/plugins/table/funcs/getFilterSQL/util/formatValue.js +170 -170
  35. package/server/plugins/table/funcs/getFilterSQL/util/getCustomQuery.js +13 -13
  36. package/server/plugins/table/funcs/getFilterSQL/util/getFilterQuery.js +66 -66
  37. package/server/plugins/table/funcs/getFilterSQL/util/getOptimizedQuery.js +12 -12
  38. package/server/plugins/table/funcs/getFilterSQL/util/getTableSql.js +34 -34
  39. package/server/plugins/table/funcs/getSelect.js +19 -19
  40. package/server/plugins/table/funcs/getSelectMeta.js +60 -60
  41. package/server/plugins/table/funcs/getTemplates.js +19 -19
  42. package/server/plugins/table/funcs/gisIRColumn.js +72 -72
  43. package/server/plugins/table/funcs/loadTemplate.js +1 -1
  44. package/server/plugins/table/funcs/loadTemplatePath.js +1 -1
  45. package/server/plugins/table/funcs/metaFormat/getSelectVal.js +23 -23
  46. package/server/plugins/table/funcs/metaFormat/index.js +30 -30
  47. package/server/plugins/table/funcs/userTemplateDir.js +1 -1
  48. package/server/plugins/table/index.js +13 -13
  49. package/server/plugins/util/funcs/eventStream.js +28 -28
  50. package/server/plugins/util/index.js +7 -7
  51. package/server/routes/cron/index.js +14 -14
  52. package/server/routes/crud/controllers/deleteCrud.js +36 -36
  53. package/server/routes/crud/controllers/insert.js +81 -81
  54. package/server/routes/crud/controllers/table.js +87 -87
  55. package/server/routes/crud/controllers/update.js +81 -81
  56. package/server/routes/crud/index.js +21 -21
  57. package/server/routes/logger/controllers/logger.file.js +92 -92
  58. package/server/routes/logger/controllers/utils/checkUserAccess.js +19 -19
  59. package/server/routes/logger/controllers/utils/getRootDir.js +26 -26
  60. package/server/routes/logger/index.js +17 -17
  61. package/server/routes/properties/controllers/properties.add.js +55 -55
  62. package/server/routes/properties/controllers/properties.get.js +17 -17
  63. package/server/routes/properties/index.js +16 -16
  64. package/server/routes/table/controllers/data.js +142 -142
  65. package/server/routes/table/controllers/filter.js +60 -60
  66. package/server/routes/table/controllers/form.js +42 -42
  67. package/server/routes/table/controllers/search.js +74 -74
  68. package/server/routes/table/controllers/suggest.js +84 -84
  69. package/server/routes/table/index.js +28 -28
  70. package/server/routes/table/schema.js +64 -64
  71. package/server/routes/util/controllers/status.monitor.js +8 -8
  72. package/server/routes/util/index.js +11 -11
  73. package/utils.js +120 -120
@@ -1,33 +1,33 @@
1
- const sqlInjection = [
2
- '()',
3
- '^',
4
- '*',
5
- 'like ',
6
- '@variable',
7
- '@@variable',
8
- 'group by ',
9
- 'union ',
10
- 'select ',
11
- 'having ',
12
- 'as injectx',
13
- 'where ',
14
- 'rlike ',
15
- 'if(',
16
- 'sleep(',
17
- 'waitfor delay',
18
- 'benchmark(',
19
- 'pg_sleep(',
20
- "'\\\"",
21
- 'randomblob(',
22
- 'order by ',
23
- 'union all ',
24
- '+or',
25
- 'or ',
26
- 'and ',
27
- "'' ",
28
- '""" ',
29
- '<script',
30
- 'javascript:',
31
- ];
32
-
33
- export default sqlInjection;
1
+ const sqlInjection = [
2
+ '()',
3
+ '^',
4
+ '*',
5
+ 'like ',
6
+ '@variable',
7
+ '@@variable',
8
+ 'group by ',
9
+ 'union ',
10
+ 'select ',
11
+ 'having ',
12
+ 'as injectx',
13
+ 'where ',
14
+ 'rlike ',
15
+ 'if(',
16
+ 'sleep(',
17
+ 'waitfor delay',
18
+ 'benchmark(',
19
+ 'pg_sleep(',
20
+ "'\\\"",
21
+ 'randomblob(',
22
+ 'order by ',
23
+ 'union all ',
24
+ '+or',
25
+ 'or ',
26
+ 'and ',
27
+ "'' ",
28
+ '""" ',
29
+ '<script',
30
+ 'javascript:',
31
+ ];
32
+
33
+ export default sqlInjection;
@@ -1,8 +1,8 @@
1
- import redisClients from './funcs/redisClients.js';
2
- import getRedis from './funcs/getRedis.js';
3
-
4
- if (!redisClients[0]) {
5
- getRedis({ db: 0 });
6
- }
7
-
8
- export default redisClients[0];
1
+ import redisClients from './funcs/redisClients.js';
2
+ import getRedis from './funcs/getRedis.js';
3
+
4
+ if (!redisClients[0]) {
5
+ getRedis({ db: 0 });
6
+ }
7
+
8
+ export default redisClients[0];
@@ -1,3 +1,3 @@
1
- const redisClients = {};
2
-
3
- export default redisClients;
1
+ const redisClients = {};
2
+
3
+ export default redisClients;
@@ -1,15 +1,15 @@
1
- import getRedis from './funcs/getRedis.js';
2
-
3
- function close(fastify) {
4
- fastify.rclient.quit();
5
- }
6
-
7
- async function plugin(fastify) {
8
- const client = getRedis({ db: 0 });
9
- client.getJSON = client.get;
10
- // fastify.decorate('rclient', client);
11
- // fastify.decorate('getRedis', getRedis);
12
- fastify.addHook('onClose', close);
13
- }
14
-
15
- export default plugin;
1
+ import getRedis from './funcs/getRedis.js';
2
+
3
+ function close(fastify) {
4
+ fastify.rclient.quit();
5
+ }
6
+
7
+ async function plugin(fastify) {
8
+ const client = getRedis({ db: 0 });
9
+ client.getJSON = client.get;
10
+ // fastify.decorate('rclient', client);
11
+ // fastify.decorate('getRedis', getRedis);
12
+ fastify.addHook('onClose', close);
13
+ }
14
+
15
+ export default plugin;
@@ -1,8 +1,8 @@
1
- import userTemplateDir from './userTemplateDir.js';
2
-
3
- export default function addTemplateDir(dir) {
4
- if (dir) {
5
- userTemplateDir.push(dir);
6
- }
7
- return userTemplateDir;
8
- }
1
+ import userTemplateDir from './userTemplateDir.js';
2
+
3
+ export default function addTemplateDir(dir) {
4
+ if (dir) {
5
+ userTemplateDir.push(dir);
6
+ }
7
+ return userTemplateDir;
8
+ }
@@ -1,96 +1,96 @@
1
- import getTemplate from '../getTemplate.js';
2
- import pgClients from '../../../pg/pgClients.js';
3
-
4
- // import { getTemplate, pgClients } from '../../../../../utils.js';
5
-
6
- // filter util
7
- import getTableSql from './util/getTableSql.js';
8
- import getFilterQuery from './util/getFilterQuery.js';
9
- import getOptimizedQuery from './util/getOptimizedQuery.js';
10
-
11
- async function getFilterSQL({
12
- table, filter, pg = pgClients.client, search, filterList, query, custom, state,
13
- }) {
14
- if (!table) return { error: 'param table is required', status: 400 };
15
-
16
- const body = await getTemplate('table', table);
17
-
18
- const sqlList = body?.sql?.length
19
- ? body?.sql?.filter((el) => !el.disabled && el?.sql?.replace)
20
- .map((el, i) => {
21
- Object.assign(el, { name: el.name || `t${i + 1}` });
22
- return ` left join lateral (${el.filter ? el.sql.replace(/limit 1/ig, '') : el.sql}) as ${el.name} on 1=1 `;
23
- }).join(' ')
24
- : '';
25
- const fieldQuery = `select * from ${body?.table || table} ${sqlList ? ` t ${sqlList}` : ''} where 1=1 limit 0`;
26
- const { fields = [] } = await pg.query(fieldQuery);
27
-
28
- const { fields: fieldsModel } = body?.table && pg.pk[body?.table] ? await pg.query(`select * from ${body.table} limit 0`) : {};
29
-
30
- const autoSearchColumn = fields?.filter((el) => pg.pgType?.[el.dataTypeID] === 'text')?.map((el) => el.name).join(',');
31
- const searchColumn = body?.search_column || autoSearchColumn;
32
- const fieldsList = (fieldsModel || fields)?.map((el) => el.name);
33
- try {
34
- const tableSQL = await getTableSql({
35
- pg, body, table, fields,
36
- });
37
- const sval = `ilike '%${decodeURIComponent(search).replace(/'/g, "''")}%'`;
38
- const searchQuery = search && searchColumn
39
- ? ` (${searchColumn.split(',')?.map((name) => {
40
- const { pk } = tableSQL.find((el) => el.name === name) || {};
41
- return pk && !fieldsList.includes(name) ? `${pk} in (select ${pk} from (${fieldQuery})q where ${name} ${sval})` : `${name} ${sval}`;
42
- }).join(' or ')} )` : '';
43
-
44
- const filterList1 = await Promise.all((filterList || (body?.filter_list || []).concat(body?.filterInline || []).concat(body?.filterCustom || []).concat(body?.filterState || []).concat(body?.filterList || [])
45
- .concat(body?.filters || [])) /* .concat(extraFilters || []).concat(customFilters || []) */
46
-
47
- ?.map(async (el) => {
48
- if (!el?.data) return el;
49
- const cls = await getTemplate(['cls', 'select'], el.data);
50
- if (Array.isArray(cls) && cls?.length) {
51
- Object.assign(el, { options: cls });
52
- }
53
- else if (typeof (cls?.sql || cls) === 'string') {
54
- Object.assign(el, { sql: cls?.sql || cls });
55
- }
56
- return el;
57
- }));
58
-
59
- const filters = getFilterQuery({
60
- pg,
61
- filter,
62
- table,
63
- tableSQL,
64
- fields,
65
- filterList: filterList1,
66
- });
67
-
68
- // filter
69
- const customQuery = body?.filterCustom?.length && custom ? body.filterCustom?.find((el) => el.name === custom)?.sql : null;
70
- const stateQuery = body?.filterState?.length && state ? body.filterState?.find((el) => el.name === state)?.sql : null;
71
-
72
- const filterQuery = filters?.filter((el) => el.query)?.map((el) => `${el.query} `).join(' and ');
73
- const q = [body?.query, query, searchQuery, filterQuery, stateQuery, customQuery].filter((el) => el).join(' and ');
74
-
75
- // table
76
- const modelQuery = body?.model || body?.table || table;
77
- const optimizedSQL = `select * from ${getOptimizedQuery({ body, table, q })} `;
78
- const tableCount = getOptimizedQuery({ body, table, q }, true);
79
- // console.log(optimizedSQL);
80
- return {
81
- filterList,
82
-
83
- q,
84
- optimizedSQL,
85
- tableCount,
86
- table: modelQuery,
87
- // filter parts
88
- searchQuery,
89
- };
90
- }
91
- catch (err) {
92
- throw new Error(err.toString());
93
- }
94
- }
95
-
96
- export default getFilterSQL;
1
+ import getTemplate from '../getTemplate.js';
2
+ import pgClients from '../../../pg/pgClients.js';
3
+
4
+ // import { getTemplate, pgClients } from '../../../../../utils.js';
5
+
6
+ // filter util
7
+ import getTableSql from './util/getTableSql.js';
8
+ import getFilterQuery from './util/getFilterQuery.js';
9
+ import getOptimizedQuery from './util/getOptimizedQuery.js';
10
+
11
+ async function getFilterSQL({
12
+ table, filter, pg = pgClients.client, search, filterList, query, custom, state,
13
+ }) {
14
+ if (!table) return { error: 'param table is required', status: 400 };
15
+
16
+ const body = await getTemplate('table', table);
17
+
18
+ const sqlList = body?.sql?.length
19
+ ? body?.sql?.filter((el) => !el.disabled && el?.sql?.replace)
20
+ .map((el, i) => {
21
+ Object.assign(el, { name: el.name || `t${i + 1}` });
22
+ return ` left join lateral (${el.filter ? el.sql.replace(/limit 1/ig, '') : el.sql}) as ${el.name} on 1=1 `;
23
+ }).join(' ')
24
+ : '';
25
+ const fieldQuery = `select * from ${body?.table || table} ${sqlList ? ` t ${sqlList}` : ''} where 1=1 limit 0`;
26
+ const { fields = [] } = await pg.query(fieldQuery);
27
+
28
+ const { fields: fieldsModel } = body?.table && pg.pk[body?.table] ? await pg.query(`select * from ${body.table} limit 0`) : {};
29
+
30
+ const autoSearchColumn = fields?.filter((el) => pg.pgType?.[el.dataTypeID] === 'text')?.map((el) => el.name).join(',');
31
+ const searchColumn = body?.search_column || autoSearchColumn;
32
+ const fieldsList = (fieldsModel || fields)?.map((el) => el.name);
33
+ try {
34
+ const tableSQL = await getTableSql({
35
+ pg, body, table, fields,
36
+ });
37
+ const sval = `ilike '%${decodeURIComponent(search).replace(/'/g, "''")}%'`;
38
+ const searchQuery = search && searchColumn
39
+ ? ` (${searchColumn.split(',')?.map((name) => {
40
+ const { pk } = tableSQL.find((el) => el.name === name) || {};
41
+ return pk && !fieldsList.includes(name) ? `${pk} in (select ${pk} from (${fieldQuery})q where ${name} ${sval})` : `${name} ${sval}`;
42
+ }).join(' or ')} )` : '';
43
+
44
+ const filterList1 = await Promise.all((filterList || (body?.filter_list || []).concat(body?.filterInline || []).concat(body?.filterCustom || []).concat(body?.filterState || []).concat(body?.filterList || [])
45
+ .concat(body?.filters || [])) /* .concat(extraFilters || []).concat(customFilters || []) */
46
+
47
+ ?.map(async (el) => {
48
+ if (!el?.data) return el;
49
+ const cls = await getTemplate(['cls', 'select'], el.data);
50
+ if (Array.isArray(cls) && cls?.length) {
51
+ Object.assign(el, { options: cls });
52
+ }
53
+ else if (typeof (cls?.sql || cls) === 'string') {
54
+ Object.assign(el, { sql: cls?.sql || cls });
55
+ }
56
+ return el;
57
+ }));
58
+
59
+ const filters = getFilterQuery({
60
+ pg,
61
+ filter,
62
+ table,
63
+ tableSQL,
64
+ fields,
65
+ filterList: filterList1,
66
+ });
67
+
68
+ // filter
69
+ const customQuery = body?.filterCustom?.length && custom ? body.filterCustom?.find((el) => el.name === custom)?.sql : null;
70
+ const stateQuery = body?.filterState?.length && state ? body.filterState?.find((el) => el.name === state)?.sql : null;
71
+
72
+ const filterQuery = filters?.filter((el) => el.query)?.map((el) => `${el.query} `).join(' and ');
73
+ const q = [body?.query, query, searchQuery, filterQuery, stateQuery, customQuery].filter((el) => el).join(' and ');
74
+
75
+ // table
76
+ const modelQuery = body?.model || body?.table || table;
77
+ const optimizedSQL = `select * from ${getOptimizedQuery({ body, table, q })} `;
78
+ const tableCount = getOptimizedQuery({ body, table, q }, true);
79
+ // console.log(optimizedSQL);
80
+ return {
81
+ filterList,
82
+
83
+ q,
84
+ optimizedSQL,
85
+ tableCount,
86
+ table: modelQuery,
87
+ // filter parts
88
+ searchQuery,
89
+ };
90
+ }
91
+ catch (err) {
92
+ throw new Error(err.toString());
93
+ }
94
+ }
95
+
96
+ export default getFilterSQL;