backend-plus 2.5.0-betha.1 → 2.5.1-betha.0

package/lib/backend-plus.d.ts

@@ -395,6 +395,7 @@ export interface AppConfigServer
         "kill-9": string                   // a way to kill from URL with a token
         bitacoraSchema: string
         bitacoraTableName: string 
+        allowedHosts:string[]              //API allowed hosts
     }
 export interface AppConfigDb 
     {
@@ -414,7 +415,6 @@ export interface AppConfigLogin
     {
         schema: string                     // schema of the user table
         table: string                      // user table
-        from: string                       // complete expression to get table or join where get the user
         userFieldname: string              // fieldname in user table that stores the user name
         passFieldname: string              // fieldname in user table that stores the password hash
         rolFieldname: string               // fieldname in user table that stores the rol

package/lib/backend-plus.js

@@ -30,6 +30,7 @@ var locatePath = require('@upgraded/locate-path');
 var jsYaml = require('js-yaml');
 var nodemailer = require('nodemailer');
 var os = require('os');
+const cors = require('cors');
 
 var likeAr = require('like-ar');
 
@@ -893,6 +894,18 @@ AppBackend.prototype.start = function start(opts){
     }).then(async function(){
         mainApp = express();
         //mainApp.use(cookieParser());
+        const whitelist = ['localhost'].concat(be.config.server.allowedHosts||[]); // Agrega aquí los orígenes de tus aplicaciones
+        const corsOptions = {
+            origin: function (origin, callback) {
+                if (whitelist.some((element)=>origin?.includes(element)) || !origin){
+                    callback(null, true);
+                }else{
+                    callback(new Error('Not allowed by CORS'));
+                }
+            },
+            credentials: true
+        };
+        mainApp.use(cors(corsOptions));
         mainApp.use(bodyParser.urlencoded({extended:true, limit: '50mb'}));
         mainApp.use(function(req,res,next){
             if((req.headers['content-type']||'').match(/^multipart\/form-data/)){
@@ -1004,10 +1017,8 @@ AppBackend.prototype.start = function start(opts){
                             "SELECT  "+infoFieldList.map(function(fieldOrPair){ return fieldOrPair.split(' as ').map(function(ident){ return be.db.quoteIdent(ident)}).join(' as '); })+
                                 ", "+be.config.login.activeClausule+" as active "+
                                 ", "+be.config.login.lockedClausule+" as locked "+
-                            "  FROM  "+(be.config.login.from ?? (
-                                (be.config.login.schema?be.db.quoteIdent(be.config.login.schema)+'.':'')+
-                                be.db.quoteIdent(be.config.login.table)
-                            ))+
+                            "  FROM  "+(be.config.login.schema?be.db.quoteIdent(be.config.login.schema)+'.':'')
+                                      +be.db.quoteIdent(be.config.login.table)+
                             "  WHERE "+be.db.quoteIdent(be.config.login.userFieldName)+" = $1 "+
                             "    AND "+be.db.quoteIdent(be.config.login.passFieldName)+" = $2 ",
                             [username, md5(password+username)]

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "backend-plus",
   "description": "Backend for the anti Pareto rule",
-  "version": "2.5.0-betha.1",
+  "version": "2.5.1-betha.0",
   "author": "Codenautas <codenautas@googlegroups.com>",
   "license": "MIT",
   "repository": "codenautas/backend-plus",
@@ -39,6 +39,7 @@
     "castellano": "^0.1.4",
     "connect-pg-simple": "^10.0.0",
     "cookie-parser": "^1.4.7",
+    "cors": "^2.8.5",
     "dialog-promise": "^0.10.1",
     "discrepances": "^0.2.8",
     "express": "^5.1.0",