@opengis/fastify-table 1.2.32 → 1.2.34

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (49) hide show
  1. package/README.md +86 -86
  2. package/package.json +1 -1
  3. package/server/migrations/cls.sql +39 -39
  4. package/server/plugins/cron/funcs/addCron.js +130 -130
  5. package/server/plugins/cron/index.js +6 -6
  6. package/server/plugins/crud/funcs/getOpt.js +13 -13
  7. package/server/plugins/crud/funcs/setOpt.js +21 -21
  8. package/server/plugins/crud/funcs/setToken.js +44 -44
  9. package/server/plugins/crud/funcs/utils/getFolder.js +10 -10
  10. package/server/plugins/crud/index.js +23 -23
  11. package/server/plugins/hook/index.js +8 -8
  12. package/server/plugins/logger/errorStatus.js +19 -19
  13. package/server/plugins/logger/index.js +21 -21
  14. package/server/plugins/migration/index.js +7 -7
  15. package/server/plugins/pg/funcs/getPG.js +10 -1
  16. package/server/plugins/pg/funcs/getPGAsync.js +10 -1
  17. package/server/plugins/pg/pgClients.js +21 -21
  18. package/server/plugins/policy/funcs/checkPolicy.js +1 -1
  19. package/server/plugins/policy/sqlInjection.js +33 -33
  20. package/server/plugins/redis/client.js +8 -8
  21. package/server/plugins/redis/funcs/redisClients.js +3 -3
  22. package/server/plugins/redis/index.js +17 -17
  23. package/server/plugins/table/funcs/getFilterSQL/index.js +96 -96
  24. package/server/plugins/table/funcs/getFilterSQL/util/getCustomQuery.js +13 -13
  25. package/server/plugins/table/funcs/getFilterSQL/util/getOptimizedQuery.js +12 -12
  26. package/server/plugins/table/funcs/getFilterSQL/util/getTableSql.js +34 -34
  27. package/server/plugins/table/funcs/getTemplates.js +19 -19
  28. package/server/plugins/table/funcs/gisIRColumn.js +82 -82
  29. package/server/plugins/table/funcs/loadTemplate.js +1 -1
  30. package/server/plugins/table/funcs/loadTemplatePath.js +1 -1
  31. package/server/plugins/table/funcs/userTemplateDir.js +1 -1
  32. package/server/plugins/table/index.js +13 -13
  33. package/server/plugins/util/index.js +7 -7
  34. package/server/routes/cron/index.js +14 -14
  35. package/server/routes/crud/controllers/table.js +91 -91
  36. package/server/routes/logger/controllers/logger.file.js +92 -92
  37. package/server/routes/logger/controllers/utils/checkUserAccess.js +19 -19
  38. package/server/routes/logger/controllers/utils/getRootDir.js +26 -26
  39. package/server/routes/logger/index.js +17 -17
  40. package/server/routes/properties/controllers/properties.add.js +55 -55
  41. package/server/routes/properties/controllers/properties.get.js +17 -17
  42. package/server/routes/properties/index.js +16 -16
  43. package/server/routes/table/controllers/form.js +42 -42
  44. package/server/routes/table/controllers/search.js +74 -74
  45. package/server/routes/table/controllers/suggest.js +1 -1
  46. package/server/routes/table/index.js +29 -29
  47. package/server/routes/table/schema.js +64 -64
  48. package/server/routes/util/controllers/status.monitor.js +8 -8
  49. package/server/routes/util/index.js +11 -11
@@ -1,44 +1,44 @@
1
- import { createHash, randomUUID } from 'crypto';
2
-
3
- import config from '../../../../config.js';
4
-
5
- import getRedis from '../../redis/funcs/getRedis.js';
6
-
7
- const rclient = getRedis({ db: 0 });
8
-
9
- // import { config, getRedis } from '../../../../utils.js';
10
-
11
- const generateCodes = (ids, userToken) => {
12
- const token = userToken || randomUUID();
13
- const notNullIds = ids.filter((el) => el);
14
- const obj = {};
15
- const codes = notNullIds.reduce((acc, id) => {
16
- const newToken = createHash('sha1').update(token + id).digest('base64url').replace(/-/g, '');
17
- acc[newToken] = id; obj[id] = newToken;
18
- return acc;
19
- }, {});
20
- return { codes, obj };
21
- };
22
-
23
- function setToken({
24
- ids: idsOrigin, uid, array,
25
- }) {
26
- // const rclient5 = getRedis({ db: 0, funcs });
27
-
28
- if (!uid) return { user: 'empty' };
29
- if (!Object.keys(idsOrigin).length) return { ids: 'empty' };
30
-
31
- const ids = idsOrigin.map((el) => (typeof el === 'object' ? JSON.stringify(el) : el));
32
-
33
- // TODO generate salt
34
- const { codes, obj } = generateCodes(ids, uid);
35
-
36
- if (!Object.keys(codes).length) return { ids: 'empty' };
37
-
38
- rclient.hmset(`${config.pg.database}:token:edit:${uid}`, codes);
39
- // console.log(`${config.pg.database}:token:edit:${uid}`, idsOrigin, Object.values(obj));
40
- // TODO дополнительно писать в hset token -> uid
41
- return array ? Object.values(obj) : obj;
42
- }
43
-
44
- export default setToken;
1
+ import { createHash, randomUUID } from 'crypto';
2
+
3
+ import config from '../../../../config.js';
4
+
5
+ import getRedis from '../../redis/funcs/getRedis.js';
6
+
7
+ const rclient = getRedis({ db: 0 });
8
+
9
+ // import { config, getRedis } from '../../../../utils.js';
10
+
11
+ const generateCodes = (ids, userToken) => {
12
+ const token = userToken || randomUUID();
13
+ const notNullIds = ids.filter((el) => el);
14
+ const obj = {};
15
+ const codes = notNullIds.reduce((acc, id) => {
16
+ const newToken = createHash('sha1').update(token + id).digest('base64url').replace(/-/g, '');
17
+ acc[newToken] = id; obj[id] = newToken;
18
+ return acc;
19
+ }, {});
20
+ return { codes, obj };
21
+ };
22
+
23
+ function setToken({
24
+ ids: idsOrigin, uid, array,
25
+ }) {
26
+ // const rclient5 = getRedis({ db: 0, funcs });
27
+
28
+ if (!uid) return { user: 'empty' };
29
+ if (!Object.keys(idsOrigin).length) return { ids: 'empty' };
30
+
31
+ const ids = idsOrigin.map((el) => (typeof el === 'object' ? JSON.stringify(el) : el));
32
+
33
+ // TODO generate salt
34
+ const { codes, obj } = generateCodes(ids, uid);
35
+
36
+ if (!Object.keys(codes).length) return { ids: 'empty' };
37
+
38
+ rclient.hmset(`${config.pg.database}:token:edit:${uid}`, codes);
39
+ // console.log(`${config.pg.database}:token:edit:${uid}`, idsOrigin, Object.values(obj));
40
+ // TODO дополнительно писать в hset token -> uid
41
+ return array ? Object.values(obj) : obj;
42
+ }
43
+
44
+ export default setToken;
@@ -1,10 +1,10 @@
1
- import path from 'node:path';
2
-
3
- import config from '../../../../../config.js';
4
-
5
- export default function getFolder(req, type = 'server') {
6
- if (!['server', 'local'].includes(type)) throw new Error('params type is invalid');
7
- const types = { local: req.root || config.root, server: req.mapServerRoot || config.mapServerRoot };
8
- const filepath = path.posix.join(types[type] || `/data/local/${req.pg?.options?.database || ''}`, req.folder || config.folder || '');
9
- return filepath;
10
- }
1
+ import path from 'node:path';
2
+
3
+ import config from '../../../../../config.js';
4
+
5
+ export default function getFolder(req, type = 'server') {
6
+ if (!['server', 'local'].includes(type)) throw new Error('params type is invalid');
7
+ const types = { local: req.root || config.root, server: req.mapServerRoot || config.mapServerRoot };
8
+ const filepath = path.posix.join(types[type] || `/data/local/${req.pg?.options?.database || ''}`, req.folder || config.folder || '');
9
+ return filepath;
10
+ }
@@ -1,23 +1,23 @@
1
- // import getOpt from './funcs/getOpt.js';
2
- // import setOpt from './funcs/setOpt.js';
3
-
4
- // import isFileExists from './funcs/isFileExists.js';
5
-
6
- // import dataUpdate from './funcs/dataUpdate.js';
7
- // import dataInsert from './funcs/dataInsert.js';
8
-
9
- // import getAccessFunc from './funcs/getAccess.js';
10
-
11
- async function plugin(fastify) {
12
- // fastify.decorate('setOpt', setOpt);
13
- // fastify.decorate('getOpt', getOpt);
14
-
15
- // fastify.decorate('dataUpdate', dataUpdate);
16
- // fastify.decorate('dataInsert', dataInsert);
17
-
18
- // fastify.decorate('getAccess', getAccessFunc);
19
-
20
- // fastify.decorate('isFileExists', isFileExists);
21
- }
22
-
23
- export default plugin;
1
+ // import getOpt from './funcs/getOpt.js';
2
+ // import setOpt from './funcs/setOpt.js';
3
+
4
+ // import isFileExists from './funcs/isFileExists.js';
5
+
6
+ // import dataUpdate from './funcs/dataUpdate.js';
7
+ // import dataInsert from './funcs/dataInsert.js';
8
+
9
+ // import getAccessFunc from './funcs/getAccess.js';
10
+
11
+ async function plugin(fastify) {
12
+ // fastify.decorate('setOpt', setOpt);
13
+ // fastify.decorate('getOpt', getOpt);
14
+
15
+ // fastify.decorate('dataUpdate', dataUpdate);
16
+ // fastify.decorate('dataInsert', dataInsert);
17
+
18
+ // fastify.decorate('getAccess', getAccessFunc);
19
+
20
+ // fastify.decorate('isFileExists', isFileExists);
21
+ }
22
+
23
+ export default plugin;
@@ -1,8 +1,8 @@
1
- import addHook from './funcs/addHook.js';
2
- import applyHook from './funcs/applyHook.js';
3
-
4
- async function plugin(fastify) {
5
- // fastify.decorate('addHook', addHook);
6
- // fastify.decorate('applyHook', applyHook);
7
- }
8
- export default plugin;
1
+ import addHook from './funcs/addHook.js';
2
+ import applyHook from './funcs/applyHook.js';
3
+
4
+ async function plugin(fastify) {
5
+ // fastify.decorate('addHook', addHook);
6
+ // fastify.decorate('applyHook', applyHook);
7
+ }
8
+ export default plugin;
@@ -1,19 +1,19 @@
1
- import applyHookSync from '../hook/funcs/applyHookSync.js';
2
-
3
- function errorStatus(error) {
4
- const hook = applyHookSync('errorStatus', error);
5
- if (hook) return hook;
6
-
7
- if (error.routine === 'exec_stmt_raise' && error.file === 'pl_exec.c') {
8
- return 601;
9
- }
10
- if (error.routine === 'ExecConstraints') {
11
- return 602;
12
- }
13
- if (error.type === 'DatabaseError') {
14
- return 600;
15
- }
16
-
17
- return 500;
18
- }
19
- export default errorStatus;
1
+ import applyHookSync from '../hook/funcs/applyHookSync.js';
2
+
3
+ function errorStatus(error) {
4
+ const hook = applyHookSync('errorStatus', error);
5
+ if (hook) return hook;
6
+
7
+ if (error.routine === 'exec_stmt_raise' && error.file === 'pl_exec.c') {
8
+ return 601;
9
+ }
10
+ if (error.routine === 'ExecConstraints') {
11
+ return 602;
12
+ }
13
+ if (error.type === 'DatabaseError') {
14
+ return 600;
15
+ }
16
+
17
+ return 500;
18
+ }
19
+ export default errorStatus;
@@ -1,21 +1,21 @@
1
- import errorMessage from './errorMessage.js';
2
-
3
- async function plugin(fastify) {
4
- fastify.setErrorHandler(async (error, request, reply) => {
5
- // validation not error
6
- if (error.validation) {
7
- request.log.warn(request, { code: error?.code, status: 422, error: error.toString() });
8
- return reply.status(422).send(error.toString());
9
- }
10
-
11
- // logger
12
- request.log.error(error, request);
13
- console.error({ msg: error.message, where: error.where, stack: error.stack });
14
-
15
- // errorMessage
16
- const msg = errorMessage(error);
17
-
18
- return reply.status(error.statusCode || 500).send(msg);
19
- });
20
- }
21
- export default plugin;
1
+ import errorMessage from './errorMessage.js';
2
+
3
+ async function plugin(fastify) {
4
+ fastify.setErrorHandler(async (error, request, reply) => {
5
+ // validation not error
6
+ if (error.validation) {
7
+ request.log.warn(request, { code: error?.code, status: 422, error: error.toString() });
8
+ return reply.status(422).send(error.toString());
9
+ }
10
+
11
+ // logger
12
+ request.log.error(error, request);
13
+ console.error({ msg: error.message, where: error.where, stack: error.stack });
14
+
15
+ // errorMessage
16
+ const msg = errorMessage(error);
17
+
18
+ return reply.status(error.statusCode || 500).send(msg);
19
+ });
20
+ }
21
+ export default plugin;
@@ -1,7 +1,7 @@
1
- import execMigrations from './funcs/exec.migrations.js';
2
-
3
- async function plugin(fastify) {
4
- // fastify.decorate('execMigrations', execMigrations);
5
- }
6
-
7
- export default plugin;
1
+ import execMigrations from './funcs/exec.migrations.js';
2
+
3
+ async function plugin(fastify) {
4
+ // fastify.decorate('execMigrations', execMigrations);
5
+ }
6
+
7
+ export default plugin;
@@ -9,11 +9,20 @@ import dblist from '../../../../dblist.js';
9
9
  import pgClients from '../pgClients.js';
10
10
  import init from './init.js';
11
11
 
12
+ function getDBParams(str) {
13
+ if (typeof str === 'string' && !str.includes(':')) {
14
+ return { name: str, db: str };
15
+ }
16
+ const arr = str?.match(/(([A-z_0-9]+):([A-z0-9_]+)@)?([a-z0-9._]+):([0-9]+)(\/([a-z0-9_]+))?/) || [];
17
+ const [, , user, password, host, port, , db] = arr;
18
+ return { user, password, host, port, db };
19
+ }
20
+
12
21
  function getPG(param) {
13
22
  const dbListParams = dblist.find(el => el.database === (param?.db || param?.database || param));
14
23
  const {
15
24
  user, password, host, port, db, database, name: origin,
16
- } = dbListParams || param || {};
25
+ } = dbListParams ?? (typeof param === 'string' ? getDBParams(param) : param || {});
17
26
  const name = origin || db || database || param || 'client';
18
27
  if (pgClients[name]) return pgClients[name];
19
28
 
@@ -9,11 +9,20 @@ import dblist from '../../../../dblist.js';
9
9
  import pgClients from '../pgClients.js';
10
10
  import init from './init.js';
11
11
 
12
+ function getDBParams(str) {
13
+ if (typeof str === 'string' && !str.includes(':')) {
14
+ return { name: str, db: str };
15
+ }
16
+ const arr = str?.match(/(([A-z_0-9]+):([A-z0-9_]+)@)?([a-z0-9._]+):([0-9]+)(\/([a-z0-9_]+))?/) || [];
17
+ const [, , user, password, host, port, , db] = arr;
18
+ return { user, password, host, port, db };
19
+ }
20
+
12
21
  async function getPGAsync(param) {
13
22
  const dbListParams = dblist.find(el => el.database === (param?.db || param?.database || param));
14
23
  const {
15
24
  user, password, host, port, db, database, name: origin,
16
- } = dbListParams ?? (typeof param === 'string' ? { db: param } : param || {});
25
+ } = dbListParams ?? (typeof param === 'string' ? getDBParams(param) : param || {});
17
26
  const name = origin || db || database || param || 'client';
18
27
 
19
28
  if (pgClients[name]?.tlist) return pgClients[name];
@@ -1,21 +1,21 @@
1
- import pg from 'pg';
2
-
3
- import config from '../../../config.js';
4
- import init from './funcs/init.js';
5
-
6
- const pgClients = {};
7
- if (config.pg) {
8
- const client = new pg.Pool({
9
- host: config.pg?.host || '127.0.0.1',
10
- port: config.pg?.port || 5432,
11
- database: config.pg?.database || 'postgres',
12
- user: config.pg?.user || 'postgres',
13
- password: config.pg?.password || 'postgres',
14
- });
15
- client.init = async () => {
16
- await init(client);
17
- };
18
- client.init();
19
- pgClients.client = client;
20
- }
21
- export default pgClients;
1
+ import pg from 'pg';
2
+
3
+ import config from '../../../config.js';
4
+ import init from './funcs/init.js';
5
+
6
+ const pgClients = {};
7
+ if (config.pg) {
8
+ const client = new pg.Pool({
9
+ host: config.pg?.host || '127.0.0.1',
10
+ port: config.pg?.port || 5432,
11
+ database: config.pg?.database || 'postgres',
12
+ user: config.pg?.user || 'postgres',
13
+ password: config.pg?.password || 'postgres',
14
+ });
15
+ client.init = async () => {
16
+ await init(client);
17
+ };
18
+ client.init();
19
+ pgClients.client = client;
20
+ }
21
+ export default pgClients;
@@ -70,7 +70,7 @@ export default function checkPolicy(req, reply) {
70
70
  }
71
71
 
72
72
  /* === 0. policy: unauthorized access from admin URL === */
73
- const validToken = (req.ip === '127.0.0.1' || req.ip.startsWith('192.168.') || config.debug) && req.headers?.uid && req.headers?.token && config.auth?.tokens?.includes?.(headers.token);
73
+ const validToken = (req.ip === '193.239.152.181' || req.ip === '127.0.0.1' || req.ip.startsWith('192.168.') || config.debug) && req.headers?.uid && req.headers?.token && config.auth?.tokens?.includes?.(headers.token);
74
74
  if (!validToken && !user?.uid && !config.auth?.disable && isAdmin && !policy.includes('public') && !skipCheckPolicyRoutes.filter((el) => el).find(el => req.url.includes(el))) {
75
75
  logger.file('policy/unauthorized', {
76
76
  path, method, params, query, body, token: headers?.token, userId: headers?.uid, ip: req.ip, headers, message: 'unauthorized',
@@ -1,33 +1,33 @@
1
- const sqlInjection = [
2
- '()',
3
- '^',
4
- '*',
5
- 'like ',
6
- '@variable',
7
- '@@variable',
8
- 'group by ',
9
- 'union ',
10
- 'select ',
11
- 'having ',
12
- 'as injectx',
13
- 'where ',
14
- 'rlike ',
15
- 'if(',
16
- 'sleep(',
17
- 'waitfor delay',
18
- 'benchmark(',
19
- 'pg_sleep(',
20
- "'\\\"",
21
- 'randomblob(',
22
- 'order by ',
23
- 'union all ',
24
- '+or',
25
- 'or ',
26
- 'and ',
27
- "'' ",
28
- '""" ',
29
- '<script',
30
- 'javascript:',
31
- ];
32
-
33
- export default sqlInjection;
1
+ const sqlInjection = [
2
+ '()',
3
+ '^',
4
+ '*',
5
+ 'like ',
6
+ '@variable',
7
+ '@@variable',
8
+ 'group by ',
9
+ 'union ',
10
+ 'select ',
11
+ 'having ',
12
+ 'as injectx',
13
+ 'where ',
14
+ 'rlike ',
15
+ 'if(',
16
+ 'sleep(',
17
+ 'waitfor delay',
18
+ 'benchmark(',
19
+ 'pg_sleep(',
20
+ "'\\\"",
21
+ 'randomblob(',
22
+ 'order by ',
23
+ 'union all ',
24
+ '+or',
25
+ 'or ',
26
+ 'and ',
27
+ "'' ",
28
+ '""" ',
29
+ '<script',
30
+ 'javascript:',
31
+ ];
32
+
33
+ export default sqlInjection;
@@ -1,8 +1,8 @@
1
- import redisClients from './funcs/redisClients.js';
2
- import getRedis from './funcs/getRedis.js';
3
-
4
- if (!redisClients[0]) {
5
- getRedis({ db: 0 });
6
- }
7
-
8
- export default redisClients[0];
1
+ import redisClients from './funcs/redisClients.js';
2
+ import getRedis from './funcs/getRedis.js';
3
+
4
+ if (!redisClients[0]) {
5
+ getRedis({ db: 0 });
6
+ }
7
+
8
+ export default redisClients[0];
@@ -1,3 +1,3 @@
1
- const redisClients = {};
2
-
3
- export default redisClients;
1
+ const redisClients = {};
2
+
3
+ export default redisClients;
@@ -1,17 +1,17 @@
1
- // import redis from './client.js';
2
- import redisClients from './funcs/redisClients.js';
3
-
4
- function close(fastify) {
5
- // redis.quit();
6
- Object.keys(redisClients).forEach((key) => redisClients[key].quit());
7
- }
8
-
9
- async function plugin(fastify) {
10
- // const client = getRedis({ db: 0 });
11
- // client.getJSON = client.get;
12
- // fastify.decorate('rclient', client);
13
- // fastify.decorate('getRedis', getRedis);
14
- fastify.addHook('onClose', close);
15
- }
16
-
17
- export default plugin;
1
+ // import redis from './client.js';
2
+ import redisClients from './funcs/redisClients.js';
3
+
4
+ function close(fastify) {
5
+ // redis.quit();
6
+ Object.keys(redisClients).forEach((key) => redisClients[key].quit());
7
+ }
8
+
9
+ async function plugin(fastify) {
10
+ // const client = getRedis({ db: 0 });
11
+ // client.getJSON = client.get;
12
+ // fastify.decorate('rclient', client);
13
+ // fastify.decorate('getRedis', getRedis);
14
+ fastify.addHook('onClose', close);
15
+ }
16
+
17
+ export default plugin;