backend-plus 2.0.0-beta.11 → 2.0.0-beta.12

package/lib/backend-plus.js

@@ -163,6 +163,7 @@ AppBackend.prototype.configStaticConfig = function configStaticConfig(){
           skins:
             "":
               local-path: for-client
+          bin: {}
         client-setup: 
           skin: ""
           lang: en
@@ -237,6 +238,9 @@ AppBackend.prototype.i18n.messages.en={
     },
     server:{
         backupNotAvailable: 'Backup not available',
+        backupReady: 'Backup ready to download',
+        backupZipping: 'Zipping backup file',
+        badBackupEncryptKey: 'encrypt key not present or less than 10 characters',
         cantDelete_TLDR:'Can\'t delete. May be rights problems, locked records or internal problems',
         cantInsert_TLDR:'Can\'t insert. May be rights problems, locked records or internal problems',
         cantUpdate_TLDR:'Can\'t update. May be rights problems, locked records or internal problems',
@@ -316,6 +320,9 @@ AppBackend.prototype.i18n.messages.es={
     },
     server:{
         backupNotAvailable: 'Backup no disponible',
+        backupReady: 'Archivo listo para bajar',
+        backupZipping: 'Compactando el backup',
+        badBackupEncryptKey: 'Debe proveer una clave de encriptacion de 10 caracteres o mas para encriptar el archivo de destino',
         cantDelete_TLDR:'no se pudo eliminar el registro. Podrían haber problemas de persmisos, bloqueo de registros o problemas internos en la definición de la PK',
         cantInsert_TLDR:'no se pudo insertar el registro. Podrían haber problemas de persmisos, bloqueo de registros o problemas internos en la definición de la PK',
         cantUpdate_TLDR:'no se pudo modificar el registro. Podrían haber problemas de persmisos, bloqueo de registros o problemas internos en la definición de la PK',
@@ -485,6 +492,12 @@ AppBackend.prototype.isAdmin = function isAdmin(reqOrContext){
     return reqOrContext && (reqOrContext.forDump || reqOrContext.user && reqOrContext.user[be.config.login.rolFieldName] == 'admin');
 }
 
+AppBackend.prototype.can = function can(reqOrContext, what){
+    var be = this;
+    if (be.isAdmin(reqOrContext)) return true;
+    return reqOrContext?.user?.['can' + what];
+}
+
 AppBackend.prototype.canChangePass = async function canChangePass(reqOrContext, _userToChangePass){
     var be = this;
     return be.isAdmin(reqOrContext);
@@ -1288,6 +1301,7 @@ AppBackend.prototype.generateInsertSQL = function generateInsertSQL(schemaName,
 }
 
 AppBackend.prototype.updateUpdateSQL = function updateUpdateSQL(schemaName, tableName, updateElement, updateConditions){
+    var be = this;
     var {db} = this;
     var setPairs = [];
     for (var key in updateElement) {
@@ -2383,6 +2397,13 @@ AppBackend.prototype.addLoggedServices = function addLoggedServices(){
             }).catch(MiniTools.serveErr(req,res,next));
         });
     }
+    if(be.config.db['downloadable-backup-path']){
+        be.app.get('/backup-db.zip', function(req,res,next){
+            if (be.can(req, 'DownloadBackup')) {
+                MiniTools.serveFile('./local-private/backup-db.zip')(req,res,next);
+            }
+        })
+    }
     be.app.use(function(req,res,next){
         // req != '/keep-alive.json'
         req.session.lastNonKeepAlive = new Date().getTime();

package/lib/procedures-table.js

@@ -4,9 +4,11 @@
 var {datetime, changing, coalesce} = require('best-globals');
 var XLSX = require('xlsx');
 var fs = require('fs/promises')
+var fsSync = require('fs');
 var typeStore=require('type-store');
 var likeAr=require('like-ar');
 const f = require('session-file-store');
+const { expected } = require('cast-error');
 
 const PANIC_IMPORT = true;
 
@@ -1190,7 +1192,7 @@ ProcedureTables = [
         resultOk:'showGrid',
         coreFunction:async function(context,parameters){
             var {be,client} = context;
-            if(context.user[be.config.login.rolFieldName] != 'admin'){
+            if(!be.can(context,'SeeHistoryChanges')){
                 throw new Error('Forbiden history')
             }
             var tableDef = be.tableStructures[parameters.tableName](context);
@@ -1211,20 +1213,63 @@ ProcedureTables = [
     {
         action:'download_dump',
         parameters:[
-            {name:'password'        , typeName:'text' },
+            {name:'encrypt', typeName:'text'}
         ],
         bitacora:{always: true, error: true},
         progress:true,
-        coreFunction:async function(context,parameters){
+        resultOk:'showDownloadUrl',
+        coreFunction:async function(context, parameters){
+            context.informProgress({message:"tart"});
             var {be,client} = context;
-            if(context.user[be.config.login.rolFieldName] != 'admin'){
-                throw new Error('Forbiden history')
+            if (!be.can(context,'DownloadBackup')) {
+                throw new Error('Forbiden backup')
             }
-            if (!be.config.db['downloadable-backup-path']) {
+            if (parameters.encript?.length < 10) {
+                throw new Error(be.messages.server.badBackupEncryptKey)
+            }
+            var path = be.config.db['downloadable-backup-path']
+            if (!path) {
                 throw new Error(be.messages.server.backupNotAvailable)
             }
-            
-            return result.rows;
+            context.informProgress({message:be.messages.server.backupZipping});
+            var spawn = require('child_process').spawn;
+            try {
+                await fs.mkdir('./local-private');
+            } catch (error) {
+                if (expected(error).code !== 'EEXIST') throw error;
+                try {
+                    await fs.unlink('./local-private/backup-db.zip');
+                } catch (error) {
+                    if (expected(error).code !== 'ENOENT') throw error;
+                }
+            }
+            var out = fsSync.createWriteStream('./local-private/backup-db.log');
+            await new Promise((resolve, reject) => {
+                out.on('error', reject);
+                out.on('open', resolve);
+            })
+            var zip = spawn(be.config.server.bin.zip ?? 'zip',[
+                ...(be.config.server.bin["zip-fixed-parameters"] ?? []),
+                ...(be.config.server.bin["zip-password-parameter-flag"] === false ? [] : [be.config.server.bin["zip-password-parameter-flag"] ?? '--password']), 
+                `${be.config.server.bin["zip-password-prefix"] ?? ''}${parameters.encrypt}` , 
+                './local-private/backup-db.zip', 
+                path                
+            ], {stdio: [out, out, out]});
+            var code = await new Promise((resolve, reject) => {
+                zip.on('data', chunk => out.write(chunk));
+                zip.on('error', err => {
+                    context.informProgress(err);
+                    out.end();
+                    reject(err);
+                });
+                zip.on('exit', any => {
+                    out.end();
+                    if (any) reject(new Error("ZIP Error: " + any));
+                    resolve(any);
+                });
+            })
+            context.informProgress({message:be.messages.server.backupReady});
+            return [{url: './backup-db.zip', label:'backup-db.zip'}];
         }
     }
 ];

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "backend-plus",
   "description": "Backend for the anti Pareto rule",
-  "version": "2.0.0-beta.11",
+  "version": "2.0.0-beta.12",
   "author": "Codenautas <codenautas@googlegroups.com>",
   "license": "MIT",
   "repository": "codenautas/backend-plus",
@@ -54,7 +54,7 @@
     "mini-tools": "^1.12.1",
     "moment": "^2.29.4",
     "multiparty": "^4.2.3",
-    "nodemailer": "^6.9.5",
+    "nodemailer": "^6.9.6",
     "numeral": "^2.0.6",
     "pg-promise-strict": "^1.3.3",
     "pikaday": "^1.8.2",
@@ -73,20 +73,20 @@
     "xlsx": "https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz"
   },
   "devDependencies": {
-    "@types/big.js": "^6.2.0",
-    "@types/expect.js": "~0.3.30",
-    "@types/express": "^4.17.18",
-    "@types/express-useragent": "^1.0.3",
-    "@types/fs-extra": "^11.0.2",
-    "@types/js-yaml": "^4.0.6",
-    "@types/mocha": "^10.0.2",
-    "@types/multiparty": "~0.0.34",
-    "@types/node": "^20.8.0",
-    "@types/nodemailer": "^6.4.11",
-    "@types/numeral": "~2.0.3",
-    "@types/session-file-store": "^1.2.3",
-    "@types/stack-trace": "~0.0.31",
-    "@types/websql": "~0.0.28",
+    "@types/big.js": "^6.2.1",
+    "@types/expect.js": "~0.3.31",
+    "@types/express": "^4.17.20",
+    "@types/express-useragent": "^1.0.4",
+    "@types/fs-extra": "^11.0.3",
+    "@types/js-yaml": "^4.0.8",
+    "@types/mocha": "^10.0.3",
+    "@types/multiparty": "~0.0.35",
+    "@types/node": "^20.8.7",
+    "@types/nodemailer": "^6.4.13",
+    "@types/numeral": "~2.0.4",
+    "@types/session-file-store": "^1.2.4",
+    "@types/stack-trace": "~0.0.32",
+    "@types/websql": "~0.0.29",
     "esprima": "^4.0.1",
     "expect.js": "~0.3.1",
     "karma": "6.4.2",
@@ -98,8 +98,8 @@
     "kill-9": "~0.4.3",
     "mocha": "^10.2.0",
     "nyc": "^15.1.0",
-    "puppeteer": "^21.3.6",
-    "sinon": "^16.0.0",
+    "puppeteer": "^21.4.0",
+    "sinon": "^17.0.0",
     "supertest": "^6.3.3",
     "types.d.ts": "~0.6.18",
     "typescript": "^5.2.2",