backend-plus 2.5.0-betha.3 → 2.5.2-betha.10

package/lib/backend-plus.d.ts

@@ -172,6 +172,10 @@ export type SequenceDefinition = {
     name:string
     firstValue:number
     prefix?:string /* Prefix for the generated value */
+} 
+export type SequenceMadMaxDefinition = {
+    madMax: string[] // grouping of mad max sequences
+    firstValue?: number
 }
 export type ExportMetadataDefinition={ /* TODO: define */ }
 export type PostInputOptions='upperSpanish' | 'upperWithoutDiacritics' | 'parseDecimal'
@@ -218,11 +222,21 @@ export type FieldDefinition = EditableDbDefinition & {
     alwaysShow?:boolean /* show when appears in fixed fields */
     suggestingKeys?:string[]
     postInput?:PostInputOptions
-} & ({} | {
-    sequence:SequenceDefinition
-    nullable:true
-    editable:false
-})
+} & (
+    {
+        sequence?: undefined
+        nullable?: boolean
+        editable?: boolean
+    } | {
+        sequence: SequenceDefinition
+        nullable: true
+        editable: false
+    } | {
+        sequence: SequenceMadMaxDefinition
+        nullable: true
+        editable: boolean
+    }
+);
 export type EditableDbDefinition = {
     editable?:boolean
     allow?:{
@@ -395,6 +409,7 @@ export interface AppConfigServer
         "kill-9": string                   // a way to kill from URL with a token
         bitacoraSchema: string
         bitacoraTableName: string 
+        allowedHosts:string[]              //API allowed hosts
     }
 export interface AppConfigDb 
     {
@@ -414,7 +429,6 @@ export interface AppConfigLogin
     {
         schema: string                     // schema of the user table
         table: string                      // user table
-        from: string                       // complete expression to get table or join where get the user
         userFieldname: string              // fieldname in user table that stores the user name
         passFieldname: string              // fieldname in user table that stores the password hash
         rolFieldname: string               // fieldname in user table that stores the rol

package/lib/backend-plus.js

@@ -20,6 +20,7 @@ MiniTools.globalOpts.serveErr.propertiesWhiteList=['message','detail','code','ta
 var crypto = require('crypto');
 var serveContent = require('serve-content');
 var pg = require('pg-promise-strict');
+var pgTriggers = require('pg-triggers');
 var SessionFileStore = require('session-file-store');
 var memorystore = require('memorystore');
 var jsToHtml=require('js-to-html');
@@ -30,6 +31,7 @@ var locatePath = require('@upgraded/locate-path');
 var jsYaml = require('js-yaml');
 var nodemailer = require('nodemailer');
 var os = require('os');
+const cors = require('cors');
 
 var likeAr = require('like-ar');
 
@@ -902,6 +904,18 @@ AppBackend.prototype.start = function start(opts){
     }).then(async function(){
         mainApp = express();
         //mainApp.use(cookieParser());
+        const whitelist = ['localhost'].concat(be.config.server.allowedHosts||[]); // Agrega aquí los orígenes de tus aplicaciones
+        const corsOptions = {
+            origin: function (origin, callback) {
+                if (whitelist.some((element)=>origin?.includes(element)) || !origin){
+                    callback(null, true);
+                }else{
+                    callback(new Error('Not allowed by CORS'));
+                }
+            },
+            credentials: true
+        };
+        mainApp.use(cors(corsOptions));
         mainApp.use(bodyParser.urlencoded({extended:true, limit: '50mb'}));
         mainApp.use(function(req,res,next){
             if((req.headers['content-type']||'').match(/^multipart\/form-data/)){
@@ -2640,7 +2654,16 @@ AppBackend.prototype.dumpFkConstraint = function dumpFkConstraint(fk, tableDef,
     return {consName, clause, sourceFieldList};
 }
 
+AppBackend.prototype.isGeneratedSequence = function isGeneratedSequence(sequence, not){
+    return sequence && ((!sequence.name && !sequence.madMax) == !not)
+}
+
+AppBackend.prototype.isSequenceNonGenerated = function isSequenceNonGenerated(sequence){
+    return this.isGeneratedSequence(sequence, true);
+}
+
 AppBackend.prototype.dumpDbTableFields = function dumpDbTableFields(tableDef, opts = {}, complements = null){
+    var be = this;
     var db = this.db;
     var fields=[];
     tableDef.fields.forEach(function(fieldDef){
@@ -2654,7 +2677,7 @@ AppBackend.prototype.dumpDbTableFields = function dumpDbTableFields(tableDef, op
                 ' '+(fieldDef.dataLength?(fieldType=='text'?'varchar':fieldType)+'('+fieldDef.dataLength+')':fieldType)+
                 (fieldDef.defaultValue!=null?' default '+db.quoteLiteral(fieldDef.defaultValue):'')+
                 (fieldDef.defaultDbValue!=null?' default '+fieldDef.defaultDbValue:'')+
-                (fieldDef.sequence && !fieldDef.sequence.name?' generated always as identity':'')+
+                (be.isGeneratedSequence(fieldDef.sequence)?' generated always as identity':'')+
                 (fieldDef.generatedAs!=null?` generated always as (${fieldDef.generatedAs}) stored`:'')
             );
             if(complements){
@@ -2761,7 +2784,7 @@ AppBackend.prototype.dumpDbSchemaPartial = async function dumpDbSchemaPartial(pa
                 lines.push('create table '+cualQuoteTableName+' (');
                 var fields = be.dumpDbTableFields(tableDef, opts,
                     function complements(fieldDef){
-                        if(fieldDef.sequence && !fieldDef.sequence.name){
+                        if(be.isGeneratedSequence(fieldDef.sequence)){
                             tablesWithStrictSequence[tableName]={}
                         }
                         if(fieldDef.typeName==='text' && !fieldDef.allowEmptyText){
@@ -2785,7 +2808,7 @@ AppBackend.prototype.dumpDbSchemaPartial = async function dumpDbSchemaPartial(pa
                                 ' alter column '+db.quoteIdent(fieldDef.name)+' set not null;'
                             );
                         }
-                        if(fieldDef.sequence && fieldDef.sequence.name){
+                        if(be.isSequenceNonGenerated(fieldDef.sequence)){
                             fieldsForSequences.push(fieldDef);
                         }
                     }
@@ -2888,19 +2911,26 @@ AppBackend.prototype.dumpDbSchemaPartial = async function dumpDbSchemaPartial(pa
                 });
                 lines.push(tableDef.sql.postCreateSqls);
                 lines.push('');
-                fieldsForSequences.forEach(function(fieldDef) {
+                await Promise.all(fieldsForSequences.map(async function(fieldDef) {
                     var sequence = fieldDef.sequence;
-                    lines.push("CREATE SEQUENCE "+db.quoteIdent(sequence.name)+" START "+db.quoteInteger(sequence.firstValue||1)+";");
-                    lines.push(
-                        "ALTER TABLE "+cualQuoteTableName+
-                        " ALTER COLUMN "+db.quoteIdent(fieldDef.name)+
-                        (sequence.prefix==null
-                        ?" SET DEFAULT nextval("+db.quoteLiteral(sequence.name)+"::regclass);"
-                        :" SET DEFAULT ("+db.quoteLiteral(sequence.prefix)+" || nextval("+db.quoteLiteral(sequence.name)+"::regclass)::text);"
-                        )
-                    );
-                    lines.push('GRANT USAGE, SELECT ON SEQUENCE '+db.quoteIdent(sequence.name)+' TO '+user+';');
-                });
+                    if (sequence.name) {
+                        if (sequence.madMax) throw new Error('a sequence with madMax cannot have name');
+                        lines.push("CREATE SEQUENCE "+db.quoteIdent(sequence.name)+" START "+db.quoteInteger(sequence.firstValue||1)+";");
+                        lines.push(
+                            "ALTER TABLE "+cualQuoteTableName+
+                            " ALTER COLUMN "+db.quoteIdent(fieldDef.name)+
+                            (sequence.prefix==null
+                            ?" SET DEFAULT nextval("+db.quoteLiteral(sequence.name)+"::regclass);"
+                            :" SET DEFAULT ("+db.quoteLiteral(sequence.prefix)+" || nextval("+db.quoteLiteral(sequence.name)+"::regclass)::text);"
+                            )
+                        );
+                        lines.push('GRANT USAGE, SELECT ON SEQUENCE '+db.quoteIdent(sequence.name)+' TO '+user+';');
+                    } else if (sequence.madMax) {
+                        lines.push(await pgTriggers.dumpMaxIdTrigger(tableDef.sql.tableName, fieldDef.name, {grouping: sequence.madMax.grouping, firstValue: sequence.firstValue}));
+                    } else {
+                        throw new Error('a sequence without madMax nor name');
+                    }
+                }));
                 lines.push('');
                 if(tableDef.sql.policies.enabled){
                     policyLines.push(`ALTER TABLE ${cualQuoteTableName} ENABLE ROW LEVEL SECURITY;`);
@@ -2937,7 +2967,7 @@ AppBackend.prototype.dumpDbSchemaPartial = async function dumpDbSchemaPartial(pa
     }
     lines.push(`
 create or replace function set_app_user(p_user text) returns text
-  secirotu definer volatile language plpgsql
+  security definer volatile language plpgsql
 as
 $body$
 declare
@@ -2953,8 +2983,11 @@ begin
     else
         select ${be.config.login.infoFieldList.map(fieldName => db.quoteIdent(fieldName)).join(', ')}
             into ${be.config.login.infoFieldList.map(fieldName => db.quoteIdent('v_'+fieldName)).join(', ')}
-            from usuarios u left join personas p using (idper)
-                where u."usuario" = p_user;
+            
+            from ${(be.config.login.from ?? (
+                (be.config.login.schema?be.db.quoteIdent(be.config.login.schema)+'.':'')+
+                be.db.quoteIdent(be.config.login.table)))}
+                where ${db.quoteIdent(be.config.login.userFieldName)} = p_user;
         ${be.config.login.infoFieldList.map(fieldName => `
         perform set_config('backend_plus._${fieldName}', v_${fieldName}, false);`).join('')}
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "backend-plus",
   "description": "Backend for the anti Pareto rule",
-  "version": "2.5.0-betha.3",
+  "version": "2.5.2-betha.10",
   "author": "Codenautas <codenautas@googlegroups.com>",
   "license": "MIT",
   "repository": "codenautas/backend-plus",
@@ -35,12 +35,13 @@
     "best-globals": "^2.0.1",
     "big.js": "^7.0.1",
     "body-parser": "^2.2.0",
-    "cast-error": "^0.1.1",
+    "cast-error": "^0.1.2",
     "castellano": "^0.1.4",
     "connect-pg-simple": "^10.0.0",
     "cookie-parser": "^1.4.7",
-    "dialog-promise": "^0.10.1",
-    "discrepances": "^0.2.8",
+    "cors": "^2.8.5",
+    "dialog-promise": "^0.10.2",
+    "discrepances": "^0.2.9",
     "express": "^5.1.0",
     "express-session": "^1.18.1",
     "express-useragent": "^1.0.15",
@@ -50,14 +51,15 @@
     "json4all": "^1.4.0",
     "lazy-some": "^0.1.0",
     "like-ar": "^0.5.1",
-    "login-plus": "^1.7.2",
+    "login-plus": "^1.7.3",
     "memorystore": "^1.6.7",
-    "mini-tools": "^1.13.2",
+    "mini-tools": "^1.13.3",
     "moment": "^2.30.1",
     "multiparty": "^4.2.3",
     "nodemailer": "^7.0.3",
     "numeral": "^2.0.6",
-    "pg-promise-strict": "^1.4.2",
+    "pg-promise-strict": "^1.4.3",
+    "pg-triggers": "0.4.3",
     "pikaday": "^1.8.2",
     "pug": "^3.0.3",
     "read-yaml-promise": "^1.0.2",
@@ -76,13 +78,13 @@
   "devDependencies": {
     "@types/big.js": "^6.2.2",
     "@types/expect.js": "~0.3.32",
-    "@types/express": "^5.0.2",
+    "@types/express": "^5.0.3",
     "@types/express-useragent": "^1.0.5",
     "@types/fs-extra": "^11.0.4",
     "@types/js-yaml": "^4.0.9",
     "@types/mocha": "^10.0.10",
     "@types/multiparty": "~4.2.1",
-    "@types/node": "^22.15.29",
+    "@types/node": "^24.0.3",
     "@types/nodemailer": "^6.4.17",
     "@types/numeral": "~2.0.5",
     "@types/session-file-store": "^1.2.5",
@@ -97,10 +99,10 @@
     "karma-ie-launcher": "^1.0.0",
     "karma-mocha": "^2.0.1",
     "kill-9": "~0.4.3",
-    "mocha": "^11.5.0",
+    "mocha": "^11.7.0",
     "nyc": "^17.1.0",
-    "puppeteer": "^24.9.0",
-    "sinon": "^20.0.0",
+    "puppeteer": "^24.10.2",
+    "sinon": "^21.0.0",
     "supertest": "^7.1.1",
     "types.d.ts": "~0.6.22",
     "typescript": "^5.8.3",