@opengis/fastify-table 2.5.54 → 3.0.0-beta.0

package/dist/server/routes/crud/controllers/insert.js

@@ -1,140 +0,0 @@
-import config from "../../../../config.js";
-import applyHook from "../../../plugins/hook/applyHook.js";
-import logger from "../../../plugins/logger/getLogger.js";
-import pgClients from "../../../plugins/pg/pgClients.js";
-import checkXSS from "../../../plugins/policy/funcs/checkXSS.js";
-import dataInsert from "../../../plugins/crud/funcs/dataInsert.js";
-import validateData from "../../../plugins/crud/funcs/validateData.js";
-import getAccess from "../../../plugins/crud/funcs/getAccess.js";
-import getToken from "../../../plugins/crud/funcs/getToken.js";
-import getTemplate from "../../../plugins/table/funcs/getTemplate.js";
-import { resources } from "../../../plugins/access/funcs/getResources.js";
-import { BadRequestError, ConflictError, ForbiddenError, NotFoundError, } from "../../../../errors.js";
-export default async function insert(req) {
-    const { pg = pgClients.client, user = {}, params = {}, body = {}, headers = {}, method, } = req || {};
-    if (!user) {
-        throw ForbiddenError("access restricted");
-    }
-    const hookData = (await applyHook("preInsert", {
-        pg,
-        table: params?.table,
-        user,
-        body,
-    }));
-    // hooks should throw custom errors instead, this is temp solution to avoid breaking changes in hooks
-    if (hookData?.message && hookData?.status) {
-        if (hookData.status >= 400) {
-            throw new Error(hookData.message);
-        }
-        return hookData.message;
-    }
-    const { referer } = headers;
-    const tokenData = await getToken({
-        uid: user?.uid,
-        token: params.table,
-        mode: "a",
-        json: 1,
-    });
-    const resource = resources[hookData?.resource || tokenData?.resource || params.table]
-        ? tokenData?.resource || params.table
-        : undefined;
-    const { form, table: add } = (resources[params.table] ? { table: resources[params.table] } : null) ||
-        hookData ||
-        tokenData ||
-        (config.security?.disableToken || config.local || config.auth?.disable
-            ? req.params
-            : {});
-    const { actions = [], message: accessMessage } = (await getAccess({ resource, table: add, form, user, method }, pg)) || {};
-    if (accessMessage) {
-        throw ForbiddenError(accessMessage);
-    }
-    if (!resource &&
-        !tokenData &&
-        !config.local &&
-        !config.security?.disableToken &&
-        !config.auth?.disable) {
-        throw BadRequestError("invalid token");
-    }
-    if (!actions.includes("add") &&
-        !config.security?.disableToken &&
-        !config.local &&
-        !tokenData) {
-        throw ForbiddenError("access restricted: actions");
-    }
-    if (!add) {
-        throw BadRequestError("table is required");
-    }
-    const loadTemplate = await getTemplate("table", add);
-    const { table } = loadTemplate || hookData || tokenData || req.params || {};
-    if (!table) {
-        throw NotFoundError("table not found");
-    }
-    const formData = form || loadTemplate?.form
-        ? (await getTemplate("form", form || loadTemplate?.form)) || {}
-        : {};
-    const schema = formData?.schema || formData;
-    const xssCheck = checkXSS({ body, schema });
-    if (xssCheck.error && formData?.xssCheck !== false) {
-        logger.file("injection/xss", {
-            table,
-            form: form || loadTemplate?.form,
-            body,
-            uid: user?.uid,
-            msg: xssCheck.error,
-        });
-        throw ConflictError("Дані містять заборонені символи. Приберіть їх та спробуйте ще раз");
-    }
-    const fieldCheck = validateData({ body, schema });
-    if (fieldCheck.error) {
-        logger.file("injection/formdata", {
-            table,
-            form: form || loadTemplate?.form,
-            uid: user?.uid,
-            ...fieldCheck,
-        });
-        throw ConflictError("Дані не пройшли валідацію. Приберіть некоректні дані та спробуйте ще раз");
-    }
-    if (![add, table].includes("admin.users")) {
-        Object.assign(body, { uid: user?.uid, editor_id: user?.uid });
-    }
-    if (tokenData?.obj) {
-        const objData = tokenData.obj?.split("#").reduce((p, el) => ({
-            ...p,
-            [el.split("=")[0] || ""]: el.split("=")[1],
-        }), {}) || {};
-        Object.assign(body, objData);
-    }
-    const res = await dataInsert({
-        pg,
-        id: params?.id || body.id,
-        table: loadTemplate?.table || table,
-        data: body,
-        uid: user?.uid,
-        tokenData,
-        referer,
-    });
-    if (!res) {
-        throw BadRequestError("nothing added");
-    }
-    const pk = pg.pk?.[loadTemplate?.table || table];
-    const id = res[pk];
-    if (Array.isArray(body.files)) {
-        await Promise.all(body.files
-            .filter((el) => el.file_id && el.file_path)
-            .map(async (el) => pg.query("update crm.files set entity_id=$1 where entity_id = 'uploads' and file_id=$2 and file_path=$3", [id, el.file_id, el.file_path])));
-    }
-    // remove stale files
-    // await pg.query(
-    //   "delete from crm.files where entity_id = 'uploads' and cdate  < now() - interval '1 day'"
-    // );
-    // admin.custom_column
-    await applyHook("afterInsert", {
-        pg,
-        table,
-        token: params?.table,
-        body,
-        payload: res,
-        user,
-    });
-    return { id, rows: res.rows, extra: res.extra, ...(res || {}) };
-}

package/dist/server/routes/crud/controllers/table.d.ts

@@ -1,2 +0,0 @@
-export default function tableAPI(req: any, _: any, called: any): Promise<any>;
-//# sourceMappingURL=table.d.ts.map

package/dist/server/routes/crud/controllers/table.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../../../../server/routes/crud/controllers/table.ts"],"names":[],"mappings":"AAmBA,wBAA8B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,gBAmQnE"}

package/dist/server/routes/crud/controllers/table.js

@@ -1,192 +0,0 @@
-import config from "../../../../config.js";
-import applyHook from "../../../plugins/hook/applyHook.js";
-import pgClients from "../../../plugins/pg/pgClients.js";
-import getMeta from "../../../plugins/pg/funcs/getMeta.js";
-import getAccess from "../../../plugins/crud/funcs/getAccess.js";
-import getToken from "../../../plugins/crud/funcs/getToken.js";
-import setToken from "../../../plugins/crud/funcs/setToken.js";
-import getTemplate from "../../../plugins/table/funcs/getTemplate.js";
-import extraDataGet from "../../../plugins/extra/extraDataGet.js";
-import { resources } from "../../../plugins/access/funcs/getResources.js";
-import { BadRequestError, ForbiddenError, NotFoundError, } from "../../../../errors.js";
-export default async function tableAPI(req, _, called) {
-    const { pg = pgClients.client, params, user = {}, query = {}, method } = req;
-    const tokenData = await getToken({
-        token: params?.table,
-        uid: user.uid,
-        json: 1,
-    });
-    const hookData = (await applyHook("preTable", {
-        pg,
-        table: params?.table,
-        id: params?.id,
-        ...(tokenData || {}),
-        user,
-    }));
-    // hooks should throw custom errors instead, this is temp solution to avoid breaking changes in hooks
-    if (hookData?.message && hookData?.status) {
-        if (hookData.status >= 400) {
-            throw new Error(hookData.message);
-        }
-        return hookData.message;
-    }
-    const resource = resources[hookData?.resource || tokenData?.resource || params.table]
-        ? tokenData?.resource || params.table
-        : undefined;
-    const templateName = resources[params.table] ||
-        hookData?.table ||
-        tokenData?.table ||
-        params.table;
-    const loadTable = await getTemplate("table", templateName);
-    if (!loadTable &&
-        !pg.pk?.[tokenData?.table] &&
-        !(pg.pk?.[templateName] && called)) {
-        throw NotFoundError("table not found");
-    }
-    const { table: table1 = params.table, form: form1, obj, } = hookData || loadTable || tokenData || {};
-    const table = loadTable?.table || table1;
-    const form = loadTable?.form || form1;
-    const id = hookData?.id || tokenData?.id || params.id;
-    if (tokenData && !table) {
-        throw ForbiddenError("invalid token");
-    }
-    if (!table) {
-        throw BadRequestError("not enough params: table");
-    }
-    const { actions = [], query: accessQuery, message: accessMessage, } = (await getAccess({
-        resource,
-        table: templateName,
-        form,
-        id,
-        user,
-        method,
-    }, pg)) || {};
-    if (accessMessage) {
-        throw ForbiddenError(accessMessage);
-    }
-    if (!resource &&
-        !tokenData &&
-        !config?.local &&
-        !config.security?.disableToken &&
-        !called) {
-        throw ForbiddenError("invalid token");
-    }
-    if (!actions.includes("edit") &&
-        !config?.local &&
-        !config.security?.disableToken &&
-        !tokenData &&
-        !called) {
-        throw ForbiddenError("access restricted: actions");
-    }
-    const { pk, columns: dbColumns = [] } = await getMeta({
-        pg,
-        table,
-    });
-    if (!pk) {
-        throw NotFoundError(`table not found: ${table}`);
-    }
-    // const cols = columns.map((el) => el.name || el).join(',');
-    const formData = (await getTemplate("form", form)) || {};
-    const schema = formData?.schema || formData || {};
-    // skip DataTable from another table
-    const extraKeys = Object.keys(schema).filter((key) => schema[key]?.table &&
-        schema[key]?.parent_id &&
-        Object.hasOwn(schema[key], "colModel"));
-    // skip non-existing columns
-    const columnList = dbColumns.map((el) => el.name || el).join(",");
-    const fields = !loadTable?.table
-        ? await pg
-            .query(`select * from ${table} limit 0`)
-            .then((el) => el.fields || [])
-        : [];
-    const cols = loadTable?.table
-        ? Object.keys(schema || {})
-            .filter((col) => columnList.includes(col) && !extraKeys.includes(col))
-            ?.map((col) => col?.includes("geom") && schema?.[col]?.type === "Geom"
-            ? `st_asgeojson(${col})::json as "${col}"`
-            : `"${col}"`)
-            ?.join(",")
-        : fields
-            .map((el) => el?.name?.includes("geom") && pg.pgType[el?.dataTypeID] === "geometry"
-            ? `st_asgeojson(${el.name})::json as "${el.name}"`
-            : `"${el?.name}"`)
-            .join(",");
-    const where = [`"${pk}" = $1`, loadTable?.query, accessQuery]
-        .filter(Boolean)
-        .filter((el) => user?.user_type === "superadmin" ? !el.includes("{{uid}}") : true);
-    const geom = dbColumns.find((el) => el.name === "geom" && pg.pgType[el.dataTypeID] === "geometry")
-        ? ",st_asgeojson(geom)::json as geom"
-        : "";
-    const q = `select "${pk}" as id, ${cols || "*"} ${geom} from ${table} t where ${where.join(" and ") || "true"} limit 1`;
-    if (query?.sql === "1") {
-        const extraQ = extraKeys
-            ?.map((key) => {
-            const { colModel, table: extraTable, parent_id: parentId, } = schema[key];
-            const colModel1 = Array.isArray(colModel)
-                ? colModel
-                : Object.values(colModel || {});
-            return colModel1.length
-                ? `/*${key}*/ select ${parentId} as parent, ${colModel1
-                    .map((col) => col.name || col.key)
-                    .join(",")} from ${extraTable} a where ${parentId}::text=$1`
-                : null;
-        })
-            .filter((el) => el)
-            .join(";");
-        return `${q};${extraQ || ""}`.replace(/\$1/g, `'${id}'`);
-    }
-    const data = id
-        ? await pg
-            .query(q.replace(/{{uid}}/, user?.uid), [id])
-            .then((el) => el.rows[0])
-        : null;
-    if (id && !data) {
-        throw NotFoundError(`object not found: ${id}`);
-    }
-    Object.keys(schema)
-        .filter((key) => schema[key]?.type === "DataTable")
-        .forEach((key) => {
-        if (data[key] && !Array.isArray(data[key])) {
-            data[key] = null;
-        }
-    });
-    if (id && extraKeys?.length) {
-        await Promise.all(extraKeys?.map(async (key) => {
-            const { colModel, table: extraTable, parent_id: parentId, } = schema[key];
-            const colModel1 = Array.isArray(colModel)
-                ? colModel
-                : Object.values(colModel || {});
-            const q1 = `select ${parentId} as parent, ${colModel1
-                .map((col) => col.name || col.key)
-                .join(",")} from ${extraTable} a where ${parentId}=$1`;
-            // console.log(table, formName, q1);
-            const extraRows = await pg
-                .query(q1, [id])
-                .then((el) => el.rows || []);
-            Object.assign(data, { [key]: extraRows });
-        }));
-    }
-    if (user?.uid &&
-        !config.security?.disableToken &&
-        actions.includes("edit") &&
-        !called &&
-        id) {
-        data.token = tokenData?.table
-            ? params.table
-            : setToken({
-                ids: [JSON.stringify({ id, table, form, obj, resource })],
-                uid: user.uid,
-                array: 1,
-            })?.[0];
-    }
-    if (id) {
-        await extraDataGet({ rows: [data], table, form }, pg);
-    }
-    const res = await applyHook("afterTable", {
-        pg,
-        table,
-        payload: [data],
-        user,
-    });
-    return res || data || {};
-}

package/dist/server/routes/crud/controllers/update.d.ts

@@ -1,2 +0,0 @@
-export default function update(req: any, reply: any): Promise<any>;
-//# sourceMappingURL=update.d.ts.map

package/dist/server/routes/crud/controllers/update.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../server/routes/crud/controllers/update.ts"],"names":[],"mappings":"AAqBA,wBAA8B,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBA4LxD"}

package/dist/server/routes/crud/controllers/update.js

@@ -1,139 +0,0 @@
-import config from "../../../../config.js";
-import applyHook from "../../../plugins/hook/applyHook.js";
-import logger from "../../../plugins/logger/getLogger.js";
-import pgClients from "../../../plugins/pg/pgClients.js";
-import checkXSS from "../../../plugins/policy/funcs/checkXSS.js";
-import dataUpdate from "../../../plugins/crud/funcs/dataUpdate.js";
-import validateData from "../../../plugins/crud/funcs/validateData.js";
-import getAccess from "../../../plugins/crud/funcs/getAccess.js";
-import getToken from "../../../plugins/crud/funcs/getToken.js";
-import getTemplate from "../../../plugins/table/funcs/getTemplate.js";
-import { resources } from "../../../plugins/access/funcs/getResources.js";
-import insert from "./insert.js";
-import { BadRequestError, ConflictError, ForbiddenError, UnauthorizedError, } from "../../../../errors.js";
-export default async function update(req, reply) {
-    const { pg = pgClients.client, user, params = {}, body = {}, headers = {}, method, } = req;
-    const { referer } = headers;
-    const unittest = process.env.NODE_ENV === "test" || process.env.VITEST;
-    if (!user) {
-        throw UnauthorizedError("unauthorized");
-    }
-    const hookData = (await applyHook("preUpdate", {
-        pg,
-        table: params?.table,
-        id: params?.id,
-        user,
-    }));
-    // hooks should throw custom errors instead, this is temp solution to avoid breaking changes in hooks
-    if (hookData?.message && hookData?.status) {
-        if (hookData.status >= 400) {
-            throw new Error(hookData.message);
-        }
-        return hookData.message;
-    }
-    const tokenData = await getToken({
-        uid: user.uid,
-        token: body.token || params.id || params.table,
-        mode: "w",
-        json: 1,
-    });
-    const resource = resources[hookData?.resource || tokenData?.resource || params.table]
-        ? tokenData?.resource || params.table
-        : undefined;
-    const { form, table: edit, id, } = (resources[params.table]
-        ? { table: resources[params.table], id: params.id }
-        : null) ||
-        hookData ||
-        tokenData ||
-        (config.security?.disableToken || config.local || config.auth?.disable
-            ? params
-            : {});
-    const { actions = [], message: accessMessage } = (await getAccess({
-        resource,
-        table: edit,
-        form,
-        id,
-        user,
-        method,
-    }, pg)) || {};
-    if (accessMessage) {
-        throw ForbiddenError(accessMessage);
-    }
-    if (!resource &&
-        !tokenData &&
-        !config.local &&
-        !config.security?.disableToken &&
-        !config.auth?.disable) {
-        throw ForbiddenError("invalid token");
-    }
-    if (!actions.includes("edit") &&
-        !config.local &&
-        !config.security?.disableToken &&
-        !tokenData) {
-        throw ForbiddenError("access restricted: actions");
-    }
-    if (!edit) {
-        throw BadRequestError("table is required");
-    }
-    if (!id && tokenData?.table) {
-        return insert(req);
-    }
-    if (!id) {
-        throw BadRequestError("id is required");
-    }
-    const loadTemplate = await getTemplate("table", edit);
-    const { table } = loadTemplate || hookData || tokenData || params || {};
-    const uid = user?.uid;
-    const formData = form || loadTemplate?.form
-        ? await getTemplate("form", form || loadTemplate?.form)
-        : {};
-    const schema = formData?.schema || formData;
-    // skip non-present fields in form schema
-    if (!unittest &&
-        !tokenData?.ignoreCheck &&
-        headers["content-type"] === "application/json") {
-        Object.keys(body || {})
-            .filter((key) => !Object.keys(schema || {}).includes(key))
-            .forEach((key) => delete body[key]);
-    }
-    const xssCheck = checkXSS({ body, schema });
-    if (xssCheck.error && formData?.xssCheck !== false) {
-        logger.file("injection/xss", { msg: xssCheck.error, table }, req);
-        throw ConflictError("Дані не пройшли валідацію. Приберіть некоректні дані та спробуйте ще раз");
-    }
-    const fieldCheck = validateData({ body, schema, update: true });
-    if (fieldCheck.error) {
-        logger.file("injection/formdata", {
-            table,
-            form: form || loadTemplate?.form,
-            uid: user?.uid,
-            ...fieldCheck,
-        });
-        throw ConflictError("Дані не пройшли валідацію. Приберіть некоректні дані та спробуйте ще раз");
-    }
-    if (tokenData?.obj) {
-        const objData = tokenData.obj?.split("#").reduce((p, el) => ({
-            ...p,
-            [el.split("=")[0] || ""]: el.split("=")[1],
-        }), {}) || {};
-        Object.assign(body, objData);
-    }
-    const res = await dataUpdate({
-        pg,
-        table: loadTemplate?.table || table,
-        id,
-        data: body,
-        uid,
-        tokenData,
-        referer,
-    });
-    // admin.custom_column
-    await applyHook("afterUpdate", {
-        pg,
-        table: params?.table,
-        body,
-        payload: res,
-        user,
-    });
-    return res;
-}

package/dist/server/routes/crud/crud.route.d.ts

@@ -1,3 +0,0 @@
-declare function plugin(app: any): void;
-export default plugin;
-//# sourceMappingURL=crud.route.d.ts.map

package/dist/server/routes/crud/crud.route.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"crud.route.d.ts","sourceRoot":"","sources":["../../../../server/routes/crud/crud.route.ts"],"names":[],"mappings":"AAuBA,iBAAS,MAAM,CAAC,GAAG,EAAE,GAAG,QAoMvB;AAED,eAAe,MAAM,CAAC"}

package/dist/server/routes/crud/crud.route.js

@@ -1,161 +0,0 @@
-import update from "./controllers/update.js";
-import insert from "./controllers/insert.js";
-import deleteCrud from "./controllers/deleteCrud.js";
-import table from "./controllers/table.js";
-import { tableSchema, tableRelationSchema, createTableRelationSchema, updateTableRelationSchema, } from "./crud.schema.js";
-import deleteTableRelation from "./functions/deleteTableRelation.js";
-import readTableRelations from "./functions/readTableRelations.js";
-import createTableRelation from "./functions/createTableRelation.js";
-import updateTableRelation from "./functions/updateTableRelation.js";
-// public access to API, permission check in route
-const publicPolicy = "L0";
-const authorizedPolicy = "L1";
-const tags = ["core", "crud"];
-const packageName = "fastify-table";
-function plugin(app) {
-    app.put("/table/:table/:id?", {
-        config: {
-            tags,
-            package: packageName,
-            policy: authorizedPolicy,
-            summary: "Edit table data",
-        },
-        schema: tableSchema,
-    }, update);
-    app.delete("/table/:table/:id?", {
-        config: {
-            tags,
-            package: packageName,
-            policy: authorizedPolicy,
-            summary: "Delete table data",
-        },
-        schema: tableSchema,
-    }, deleteCrud);
-    app.post("/table/:table/:id?", {
-        config: {
-            tags,
-            package: packageName,
-            policy: authorizedPolicy,
-            summary: "Add table data",
-        },
-        schema: tableSchema,
-    }, insert);
-    app.get("/table/:table/:id?", {
-        config: {
-            tags,
-            package: packageName,
-            policy: publicPolicy,
-            summary: "Get table data",
-        },
-        schema: tableSchema,
-    }, table);
-    app.get("/table/:table/:id/:relname", {
-        config: {
-            tags,
-            package: packageName,
-            policy: publicPolicy,
-            summary: "Список пов’язаних записів",
-        },
-        schema: tableRelationSchema,
-    }, async ({ params, headers, query, user, pg }) => {
-        const result = await readTableRelations({
-            table: params.table,
-            id: params.id,
-            relname: params.relname,
-            uid: user?.uid,
-            userType: user?.user_type,
-            limit: query.limit,
-            page: query.page,
-            referer: headers.referer,
-            // called: false,
-        }, pg);
-        return result;
-    });
-    app.get("/table/:table/:id/:relname/:relationId", {
-        config: {
-            tags,
-            package: packageName,
-            policy: publicPolicy,
-            summary: "Отримати пов’язаний запис",
-        },
-        schema: tableRelationSchema,
-    }, async ({ params, headers, user, pg }) => {
-        const result = await readTableRelations({
-            table: params.table,
-            id: params.id,
-            relname: params.relname,
-            relationId: params.relationId,
-            uid: user?.uid,
-            userType: user?.user_type,
-            referer: headers.referer,
-            // called: false,
-        }, pg);
-        return result;
-    });
-    app.post("/table/:table/:id/:relname/:relationId?", {
-        config: {
-            tags,
-            package: packageName,
-            policy: authorizedPolicy,
-            summary: "Додати дочірній запис",
-        },
-        schema: createTableRelationSchema,
-    }, async ({ params, headers, body, user, pg }) => {
-        const result = await createTableRelation({
-            table: params.table,
-            id: params.id,
-            relname: params.relname,
-            relationId: params.relationId,
-            body,
-            uid: user?.uid,
-            userType: user?.user_type,
-            referer: headers.referer,
-            // called: false,
-        }, pg);
-        return result;
-    });
-    app.put("/table/:table/:id/:relname/:relationId", {
-        config: {
-            tags,
-            package: packageName,
-            policy: authorizedPolicy,
-            summary: "Оновити пов’язаний запис",
-        },
-        schema: updateTableRelationSchema,
-    }, async ({ params, headers, body, user, pg }) => {
-        const result = await updateTableRelation({
-            table: params.table,
-            id: params.id,
-            relname: params.relname,
-            relationId: params.relationId,
-            body,
-            uid: user?.uid,
-            userType: user?.user_type,
-            referer: headers.referer,
-            ignoreCheck: process.env.NODE_ENV === "test" || !!process.env.VITEST,
-            // called: false,
-        }, pg);
-        return result;
-    });
-    app.delete("/table/:table/:id/:relname/:relationId", {
-        config: {
-            tags,
-            package: packageName,
-            policy: authorizedPolicy,
-            summary: "Видалити або відв’язати запис",
-        },
-        schema: tableRelationSchema,
-    }, async ({ params, user, pg }) => {
-        const result = await deleteTableRelation({
-            table: params.table,
-            id: params.id,
-            relname: params.relname,
-            relationId: params.relationId,
-            uid: user?.uid,
-            userType: user?.user_type,
-            // called: false,
-        }, pg);
-        return result;
-    });
-}
-export default plugin;