@websy/websy-designs 1.12.4 → 1.12.5

package/dist/server/helpers/v1/authHelper.js

@@ -121,13 +121,13 @@ class AuthHelper {
     })    
   }
   isLoggedIn (req, res, next) {
-    console.log(req.session)
+    // console.log(req.session)
     if (req.session && req.session.user && req.session.user.isAnonymous !== true) {      
-      console.log('in condition D')
+      // console.log('in condition D')
       next()
     }
     else {
-      console.log('in condition E')
+      // console.log('in condition E')
       res.redirect('/login')
     }      
   }

package/dist/server/helpers/v1/pgHelper.js

@@ -264,6 +264,8 @@ class PGHelper {
             updates.push(`${key} = ${(row[key] === null ? row[key] : `'${row[key]}'`)}`)
           }      
         }
+        console.log('updates 1')
+        console.log(updates)        
         sql += `
           UPDATE ${entity}
           SET ${updates.join(',')}
@@ -284,6 +286,8 @@ class PGHelper {
             // (d === null ? `${d}` : `'${d.replace(/'/)}'`)
           }
         }).join(',')
+        console.log('updates 2')
+        console.log(sqlValues)   
         sql += `
           INSERT INTO ${entity} (${Object.keys(row).join(',')})
           VALUES (${sqlValues})

package/dist/server/routes/v1/api.js

@@ -61,6 +61,8 @@ function APIRoutes (dbHelper, authHelper) {
       user = req.session.user
     }
     const sql = dbHelper.buildUpsert(req.params.entity, req.body, user)
+    console.log('upsert sql')
+    console.log(sql)
     dbHelper.execute(sql).then(response => res.json(response), err => res.json(err))
   })
   router.post('/:entity', authHelper.checkPermissions, (req, res) => {

package/dist/server/routes/v1/auth.js

@@ -55,11 +55,11 @@ function AuthRoutes (dbHelper, engine, app, Strategy) {
   }   
   router.post('/login', (req, res) => {
     app.authHelper.login(req, res).then(user => {
-      console.log('after login')
+      // console.log('after login')
       if (!req.session) {
         req.session = {}
       }
-      console.log(user)
+      // console.log(user)
       req.session.user = user      
       if (dbHelper) {
         const sId = sessionHelper.getSessionId(req)
@@ -82,7 +82,7 @@ function AuthRoutes (dbHelper, engine, app, Strategy) {
         // }) 
       }
     }, err => {
-      console.log('in auth route', err)
+      // console.log('in auth route', err)
       res.json({err})
     })
   })

package/dist/server/websy-designs-server.js

@@ -187,15 +187,15 @@ module.exports = function (options) {
           }         
         }
         app.use(protectedRoutes)
-        if (options.useAPI === true) {
-          console.log('allowed keys', options.allowedKeys)
-          
-          app.use('/api', sanitizer.clean({
+        if (options.useAPI === true) {          
+          app.use('/api', sanitizer.clean(Object.assign({}, {
             xss: true,
             noSql: true,
             sql: true,
+            noSqlLevel: 2,
+            sqlLevel: 2,
             allowedKeys: options.allowedKeys || []
-          }), checkReferrer, protectedRoutes, require(`./routes/${version}/api`)(dbHelper, app.authHelper)) 
+          }, (dbOptions.sanitizeOptions || {}))), checkReferrer, protectedRoutes, require(`./routes/${version}/api`)(dbHelper, app.authHelper)) 
         }
         if (options.useShop === true) {
           app.use('/shop', protectedRoutes, require(`./routes/${version}/shop`)(dbHelper, options.dbEngine, app))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@websy/websy-designs",
-  "version": "1.12.4",
+  "version": "1.12.5",
   "main": "index.js",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1"