@opengis/fastify-table 1.4.7 → 1.4.9

package/server/routes/table/functions/getData.js

@@ -19,7 +19,7 @@ const defaultLimit = 20;
 
 export default async function dataAPI(req, reply, called) {
   const {
-    pg = pgClients.client, params, query = {}, user = {}, contextQuery, sufix = true,
+    pg = pgClients.client, params, headers = {}, query = {}, user = {}, contextQuery, sufix = true,
   } = req;
 
   const time = Date.now();
@@ -64,15 +64,27 @@ export default async function dataAPI(req, reply, called) {
   }
 
   const id = tokenData?.id || hookData?.id || params?.id;
-  const { actions = [], query: accessQuery } = await getAccess({ table: tokenData?.table || hookData?.table || params.table, id, user }, pg) || {};
+  const { actions = [], query: accessQuery } = await getAccess({
+    table: tokenData?.table || hookData?.table || params.table, id, user,
+  }, pg) || {};
 
   if (!actions.includes('view') && !config?.local && !called) {
     return reply.status(403).send('access restricted');
   }
 
+  const body = loadTable || hookData || tokenData;
+
   const {
-    table, columns = [], sql, cardSql, filters, form, meta, sqlColumns, public: ispublic, editable = false,
-  } = loadTable || tokenData || params;
+    table, columns = [], sql, cardSql, form, meta, sqlColumns, public: ispublic, editable = false,
+  } = loadTable || hookData || tokenData || params;
+
+  const filters = ((body?.filter_list || [])
+    .concat(body?.filterInline || [])
+    .concat(body?.filterCustom || [])
+    .concat(body?.filterState || [])
+    .concat(body?.filterList || [])
+    .concat(body?.filters || [])
+  ).filter(el => el.id || el.name);
 
   const tableMeta = await getMeta({ pg, table });
   timeArr.push(Date.now());
@@ -119,13 +131,7 @@ export default async function dataAPI(req, reply, called) {
   }
 
   const objectId = tokenData?.id || hookData?.id || params.id;
-  const isdefault = !objectId ? (loadTable?.filter_list || [])
-    .concat(loadTable?.filterInline || [])
-    .concat(loadTable?.filterCustom || [])
-    .concat(loadTable?.filterState || [])
-    .concat(loadTable?.filterList || [])
-    .concat(loadTable?.filters || [])
-    .find(el => el.default) : null;
+  const isdefault = !objectId ? filters.find(el => el.default) : null;
 
   const checkFilter = [query.filter, query.search, query.state, query.custom, isdefault].filter((el) => el).length;
 
@@ -186,6 +192,10 @@ export default async function dataAPI(req, reply, called) {
     throw new Error(err.toString());
   });
 
+  if (!rows.length && headers?.referer?.includes?.('/card/')) {
+    return reply.status(403).send('access restricted: empty rows');
+  }
+
   timeArr.push(Date.now());
 
   if (uid && rows.length && !config.security?.disableToken && (editable || actions.includes('edit') || actions.includes('del'))) {

package/utils.js

@@ -72,7 +72,7 @@ import config from './config.js';
 import dblist from './dblist.js';
 import redactionList from './redactionList.js';
 import eventStream from './server/plugins/util/funcs/eventStream.js';
-import isFileExists from './server/plugins/crud/funcs/isFileExists.js';
+// import isFileExists from './server/plugins/crud/funcs/isFileExists.js';
 import getFolder from './server/plugins/crud/funcs/utils/getFolder.js';
 
 import logChanges from './server/plugins/crud/funcs/utils/logChanges.js';
@@ -86,6 +86,21 @@ import mdToHTML from './server/plugins/md/funcs/mdToHTML.js';
 import flattenObject from './server/plugins/util/funcs/flattenObject.js';
 import unflattenObject from './server/plugins/util/funcs/unflattenObject.js';
 
+// file
+import isFileExists from './server/plugins/file/isFileExists.js';
+import downloadFile from './server/plugins/file/downloadFile.js';
+import uploadFile from './server/plugins/file/uploadFile.js';
+import uploadMultiPart from './server/plugins/file/uploadMultiPart.js';
+import getMimeType from './server/plugins/file/providers/mime/index.js';
+import getFileType from './server/plugins/file/utils/getFileType.js';
+import allowedExtensions from './server/plugins/file/utils/allowedExtensions.js';
+
+// grpc
+import grpc from './server/plugins/grpc/grpc.js';
+import file2json from './server/plugins/grpc/file2json.js';
+import officeConverter from './server/plugins/grpc/office2pdf.js';
+import getExport from './server/plugins/file/getExport.js';
+
 export default null;
 export {
   config,
@@ -101,7 +116,7 @@ export {
   getRedis,
   redisClients,
   logger,
-  isFileExists,
+  // isFileExists,
   eventStream,
 
   // hook
@@ -166,4 +181,17 @@ export {
 
   flattenObject,
   unflattenObject,
+
+  // file
+  isFileExists,
+  downloadFile,
+  uploadFile,
+  uploadMultiPart,
+  file2json,
+  grpc,
+  getMimeType,
+  getFileType,
+  getExport,
+  officeConverter,
+  allowedExtensions,
 };