adapt-authoring-api 1.1.0 → 1.3.0

package/errors/errors.json

@@ -28,5 +28,14 @@
   "NO_SCHEMA_DEF": {
     "description": "No json schema has been defined",
     "statusCode": 404
+  },
+  "TOO_MANY_RESULTS": {
+    "data": {
+      "actual": "Number of actual results",
+      "expected": "Number of expected results",
+      "query": "The query"
+    },
+    "description": "Too many results were returned",
+    "statusCode": 500
   }
 }

package/lib/AbstractApiModule.js

@@ -514,13 +514,15 @@ class AbstractApiModule extends AbstractModule {
    * @return {Promise} Rejects if access should be blocked
    */
   async checkAccess (req, data) {
+    if (req.auth.isSuper) {
+      return data
+    }
     const isArray = Array.isArray(data)
     const filtered = []
     let error
     await Promise.allSettled((isArray ? data : [data]).map(async r => {
       try {
-        if (!this.accessCheckHook.hasObservers || req.auth.isSuper ||
-          (await this.accessCheckHook.invoke(req, r)).some(Boolean)) {
+        if (!this.accessCheckHook.hasObservers || (await this.accessCheckHook.invoke(req, r)).some(Boolean)) {
           filtered.push(r)
         }
       } catch (e) {
@@ -566,6 +568,24 @@ class AbstractApiModule extends AbstractModule {
     return this.cache.get(q, options, mongoOptions)
   }
 
+  /**
+   * Retrieves a single document from the DB. If multiple results are returned from the query, an error is thrown.
+   * @param {Object} query Attributes to use to filter DB documents
+   * @param {FindOptions} options Function options
+   * @param {external:MongoDBFindOptions} mongoOptions Options to be passed to the MongoDB function
+   * @return {Promise} Resolves with the single DB document
+   */
+  async findOne (query, options = {}, mongoOptions = {}) {
+    const results = await this.find(query, options, mongoOptions)
+    if (results.length > 1) {
+      throw this.app.errors.TOO_MANY_RESULTS.setData({ actual: results.length, expected: 1, query })
+    }
+    if (options.strict !== false && !results.length) {
+      throw this.app.errors.NOT_FOUND.setData({ id: query, type: options.schemaName })
+    }
+    return results[0]
+  }
+
   /**
    * Updates an existing document in the DB
    * @param {Object} query Attributes to use to filter DB documents

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "adapt-authoring-api",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "Abstract module for creating APIs",
   "homepage": "https://github.com/adapt-security/adapt-authoring-api",
   "license": "GPL-3.0",