beech-api 3.8.0 → 3.9.75

package/packages/cli/core/index.js

@@ -1,188 +1,264 @@
-global.appRoot = require("app-root-path");
-const moment = require("moment");
-const { performance } = require("perf_hooks");
-const moduleAlias = require("module-alias");
-moduleAlias.addAlias("@", appRoot + "/src");
-const _express_ = require("express");
-global._app_ = _express_();
-// Compression
-const compression = require("compression");
-_app_.use(compression());
-// Helmet
-const helmet = require("helmet");
-_app_.use(helmet());
-// CORS
-const cors = require("cors");
-global.endpoint = _express_.Router();
-const cookieParser = require("cookie-parser");
-const bodyParser = require("body-parser");
-const methodOverride = require("method-override");
-const expressSession = require("express-session");
-const expressValidator = require("express-validator");
-const globalVariable = require(appRoot + "/global.config.js");
-globalVariable.init();
-// Local environments
-global._config_ = require(appRoot + "/app.config");
-const _beech_ = require(appRoot + "/beech.config.js").defineConfig;
-global._publicPath_ = _beech_.base;
-const mySqlDbConnect = require("./databases/mysql");
-const SequelizeDbConnect = require("./databases/sequelize");
-// Rate Request middleware
-const { Limiter, Duplicater } = require("./middleware/index");
-endpoint.use(Limiter);
-endpoint.use(Duplicater);
-// Database test
-const {
-  testConnectInProcess,
-  filterDbIsTrue,
-  disConnectTestDB,
-} = require("./databases/test");
-// create global sequelize object
-const { QueryTypes, DataTypes, Op } = require("sequelize");
-global.QueryTypes = QueryTypes;
-global.DataTypes = DataTypes;
-global.Op = Op;
-// Allow whitelist cors
-const { whitelist, sign, avg } = require("./middleware/index");
-_app_.use(cors({ origin: true, credentials: true }));
-_app_.use((req, res, next) => {
-  whitelist(async (lists, originSensitive) => {
-    sign(req, res, lists, originSensitive, (err) => {
-      if (!err) {
-        next();
-      } else {
-        throw err;
-      }
-    });
-  });
-});
-// View engine
-_app_.use(bodyParser.json());
-_app_.use(bodyParser.urlencoded({ extended: true }));
-_app_.use(methodOverride());
-_app_.use(cookieParser());
-_app_.use(expressSession({
-  secret: "surprise you mother f*cker",
-  resave: true,
-  saveUninitialized: true,
-}));
-_app_.use(expressValidator());
-// Dev. activity
-global._requestTime_ = moment(new Date()).format("YYYY-MM-DD HH:mm:ss");
-_app_.use((req, res, next) => {
-  console.log(`[${_requestTime_}] : Request ${req.method} ${req.originalUrl}`);
-  const t0 = performance.now();
-  res.on('finish', () => {
-    const responseTime = moment(new Date()).format("YYYY-MM-DD HH:mm:ss");
-    const t1 = performance.now();
-    const duration = (t1 - t0).toFixed(0);
-    console.log(`[${responseTime}] : Response ${res.statusCode} (${duration}ms)`);
-  });
-  next();
-});
-// Check Syntax error.
-_app_.use((error, req, res, next) => {
-  if (error instanceof SyntaxError) {
-    res.status(400).json({
-      ...error,
-      status: "BAD_REQUEST",
-      message: "Bad Request.",
-      body: error.body,
-    });
-  } else {
-    next();
-  }
-});
-// Advance Guard
-_app_.use(avg);
-// Engine import
-const httpExpress = require("./services/http.express");
-const fileWalk = require("./file-walk/file-walk");
-// Passport initialization
-const authPassport = require("./auth/Passport");
-const passport = require("passport");
-_app_.use(passport.initialize());
-_app_.use(passport.session());
-passport.serializeUser((user, done) => {
-  done(null, user);
-});
-passport.deserializeUser((user, done) => {
-  done(null, user);
-});
-// Endpoint magic
-const { Base } = require("../../lib/index");
-// Read folder in ./src/endpoints/*
-const walk = require("walk");
-let jsfiles = [];
-let walker = walk.walk(appRoot + "/src/endpoints", { followLinks: false });
-// Walk file on push
-walker.on("file", (root, stat, next) => {
-  jsfiles.push(root + "/" + stat.name);
-  next();
-});
-// Walking
-walker.on("end", () => {
-  init(jsfiles);
-});
-// Initialize the application
-init = async (jsfiles) => {
-  try {
-    const testConnectToDB = new Promise((resolve) => {
-      filterDbIsTrue(_config_.database_config, (err, dbTruthy) => {
-        if (err) {
-          throw ("Config file crash.", err);
-        }
-        // leave data to disconnect database
-        let leaveDataForDisconnect = dbTruthy.slice(0);
-        // check db connect truthy length ?
-        if (dbTruthy.length > 0) {
-          testConnectInProcess(dbTruthy, dbTruthy.length, (err, result, dbs) => {
-            if (err) {
-              throw (" Failed  Database connect failed.", err);
-            }
-            if (result) {
-              // Disconnect database
-              disConnectTestDB(leaveDataForDisconnect, dbs, (err, disResult) => {
-                if (err) {
-                  throw (" Failed  Testing Database connect failed.", err);
-                }
-                if (disResult) {
-                  // Disconnect and Next to real
-                  resolve(true);
-                } else {
-                  throw err;
-                }
-              });
-            }
-          });
-        } else {
-          // Not ON connect, Next to real
-          resolve(true);
-        }
-      });
-    });
-    Promise.all([testConnectToDB]).then(async (x) => {
-      if (x[0]) {
-        await (pool_base == "basic" ? new Promise((resolve) => resolve(mySqlDbConnect.connect())) : new Promise((resolve) => resolve(SequelizeDbConnect.connect())));
-          await authPassport.init().then(async (x) => {
-            if (x[0]) {
-              throw x[0];
-            } else {
-              await new Promise((resolve) => resolve(fileWalk.fileWalk(jsfiles)));
-              await (pool_base == "basic" ? new Promise((resolve) => resolve()) : new Promise((resolve) => resolve(Base())));
-              await new Promise((resolve) => {
-                httpExpress.expressStart().then((expss) => {
-                  resolve(expss);
-                });
-              });
-            }
-          });
-      }
-    });
-  } catch (error) {
-    console.log(" Compile failed ", error);
-    throw error;
-  }
-};
-// Use router
-_app_.use(_publicPath_, endpoint);
+global.appRoot = require("app-root-path");
+const moment = require("moment");
+const { performance } = require("perf_hooks");
+const moduleAlias = require("module-alias");
+moduleAlias.addAlias("@", appRoot + "/src");
+const _express_ = require("express");
+global._app_ = _express_();
+// Compression
+const compression = require("compression");
+_app_.use(compression());
+// Helmet
+const helmet = require("helmet");
+_app_.use(helmet());
+// CORS
+const cors = require("cors");
+global.endpoint = _express_.Router();
+const cookieParser = require("cookie-parser");
+const methodOverride = require("method-override");
+const expressSession = require("express-session");
+const globalVariable = require(appRoot + "/global.config.js");
+globalVariable.init();
+// Local environments
+global._config_ = require(appRoot + "/app.config");
+const _beech_ = require(appRoot + "/beech.config.js").defineConfig;
+global._publicPath_ = _beech_.base;
+const mySqlDbConnect = require("./databases/mysql");
+const SequelizeDbConnect = require("./databases/sequelize");
+// Set limit payload for request body & multipart/form-data (multer)
+const multer = require("multer");
+const uploadAllowMethod = _beech_?.payload?.file?.uploadAllowMethod || ["POST", "PATCH", "PUT"];
+const allowedTypes = _beech_?.payload?.file?.allowedTypes || []; // default: no allowed type
+const fileLimitSize = _beech_?.payload?.file?.limit || 5 * 1024 * 1024; // 5MB
+const uploadStrategy = multer({
+  limits: { fileSize:  fileLimitSize },
+  fileFilter: (req, file, cb) => {
+    if (allowedTypes.length === 0) {
+      cb(new Error("INVALID_FILE_TYPE_ALLOW"), false); // Allow all file types if no allowed types specified
+    } else if (allowedTypes.includes(file.mimetype)) {
+      cb(null, true);
+    } else {
+      cb(new Error("INVALID_FILE_TYPE"), false);
+    }
+  }
+}).any();
+const jsonLimitSize = _beech_?.payload?.json?.limit || "100KB"; // json payload
+const urlencodedLimitSize = _beech_?.payload?.urlencoded?.limit || "100KB"; // urlencoded payload (multipart/form-data)
+const urlencodedExtended = !!(_beech_?.payload?.urlencoded?.extended ?? true);
+_app_.use(_express_.urlencoded({ limit: urlencodedLimitSize, extended: urlencodedExtended })); // application/x-www-form-urlencoded payload
+_app_.use(_express_.json({ limit: jsonLimitSize }));
+_app_.use((req, res, next) => {
+  const isUploadMethod = uploadAllowMethod.includes(req.method);
+  const isMultipart = req.headers["content-type"]?.includes("multipart/form-data");
+  // Handle file upload for allowed methods
+  if (isUploadMethod) {
+    return uploadStrategy(req, res, (err) => {
+      if (err) return next(err);
+      next();
+    });
+  }
+  // Handle method not allowed for file upload
+  if (!isUploadMethod && isMultipart) {
+    return res.status(405).json({
+      code: 405,
+      status: "METHOD_NOT_ALLOWED_FOR_UPLOAD",
+      message: _config_.main_config?.dev ? `File upload is not allowed for ${req.method} method.` : "Method Not Allowed for file upload.",
+    });
+  }
+  // next to next middleware
+  next();
+});
+_app_.use((err, req, res, next) => {
+  // Handle payload too large error for JSON and URL-encoded
+  if (err.type === "entity.too.large") {
+    const isJson = req.headers["content-type"]?.includes("application/json");
+    const limitUsed = isJson ? jsonLimitSize : urlencodedLimitSize;
+    return res.status(413).json({
+      code: 413,
+      status: "PAYLOAD_TOO_LARGE",
+      message:_config_.main_config?.dev ? `${isJson ? 'JSON' : 'Form data'} too large, Max limit is ${limitUsed}` : "Payload Too Large.",
+    });
+  }
+  if (err.message === "INVALID_FILE_TYPE_ALLOW") {
+    return res.status(400).json({
+      code: 400,
+      status: "INVALID_FILE_TYPE_ALLOW",
+      message: "Invalid file type, No file types allowed.",
+    });
+  }
+  // Handle invalid file type error from multer
+  if (err.message === "INVALID_FILE_TYPE") {
+    return res.status(400).json({
+      code: 400,
+      status: "INVALID_FILE_TYPE",
+      message: _config_.main_config?.dev ? `Invalid file type, Allowed: ${allowedTypes.join(', ')}` : "Invalid file type.",
+    });
+  }
+  // Handle multer file size limit error
+  if (err.code === "LIMIT_FILE_SIZE") {
+    return res.status(413).json({
+      code: 413,
+      status: "PAYLOAD_TOO_LARGE",
+      message: _config_.main_config?.dev ? `File size too large, Max limit is ${fileLimitSize / 1024 / 1024}MB` : "Payload Too Large.",
+    });
+  }
+  // next to general error handler
+  next(err);
+});
+// Database test
+const {
+  testConnectInProcess,
+  filterDbIsTrue,
+  disConnectTestDB,
+} = require("./databases/test");
+// create global sequelize object
+const { QueryTypes, DataTypes, Op } = require("sequelize");
+global.QueryTypes = QueryTypes;
+global.DataTypes = DataTypes;
+global.Op = Op;
+// Allow whitelist cors
+const { whitelist, sign, avg } = require("./middleware/index");
+_app_.use(cors({ origin: true, credentials: true }));
+_app_.use((req, res, next) => {
+  whitelist(async (lists, originSensitive) => {
+    sign(req, res, lists, originSensitive, (err) => {
+      if (!err) {
+        next();
+      } else {
+        throw err;
+      }
+    });
+  });
+});
+// View engine
+_app_.use(methodOverride());
+_app_.use(cookieParser());
+_app_.use(expressSession({
+  secret: "surprise you mother f*cker",
+  resave: true,
+  saveUninitialized: true,
+}));
+// Dev. activity
+global._requestTime_ = moment(new Date()).format("YYYY-MM-DD HH:mm:ss");
+_app_.use((req, res, next) => {
+  console.log(`[${_requestTime_}] : Request ${req.method} ${req.originalUrl}`);
+  const t0 = performance.now();
+  res.on('finish', () => {
+    const responseTime = moment(new Date()).format("YYYY-MM-DD HH:mm:ss");
+    const t1 = performance.now();
+    const duration = (t1 - t0).toFixed(0);
+    console.log(`[${responseTime}] : Response ${res.statusCode} (${duration}ms)`);
+  });
+  next();
+});
+// Check Syntax error.
+_app_.use((error, req, res, next) => {
+  if (error instanceof SyntaxError) {
+    res.status(400).json({
+      ...error,
+      status: "BAD_REQUEST",
+      message: "Bad Request.",
+      body: error.body,
+    });
+  } else {
+    next();
+  }
+});
+// Advance Guard
+_app_.use(avg);
+// Engine import
+const httpExpress = require("./services/http.express");
+const fileWalk = require("./file-walk/file-walk");
+// Passport initialization
+const authPassport = require("./auth/Passport");
+const passport = require("passport");
+_app_.use(passport.initialize());
+_app_.use(passport.session());
+passport.serializeUser((user, done) => {
+  done(null, user);
+});
+passport.deserializeUser((user, done) => {
+  done(null, user);
+});
+// Endpoint magic
+const { Base } = require("../../lib/index");
+// Read folder in ./src/endpoints/*
+const walk = require("walk");
+let jsfiles = [];
+let walker = walk.walk(appRoot + "/src/endpoints", { followLinks: false });
+// Walk file on push
+walker.on("file", (root, stat, next) => {
+  jsfiles.push(root + "/" + stat.name);
+  next();
+});
+// Walking
+walker.on("end", () => {
+  init(jsfiles);
+});
+// Initialize the application
+init = async (jsfiles) => {
+  try {
+    const testConnectToDB = new Promise((resolve) => {
+      filterDbIsTrue(_config_.database_config, (err, dbTruthy) => {
+        if (err) {
+          throw ("Config file crash.", err);
+        }
+        // leave data to disconnect database
+        let leaveDataForDisconnect = dbTruthy.slice(0);
+        // check db connect truthy length ?
+        if (dbTruthy.length > 0) {
+          testConnectInProcess(dbTruthy, dbTruthy.length, (err, result, dbs) => {
+            if (err) {
+              throw (" Failed  Database connect failed.", err);
+            }
+            if (result) {
+              // Disconnect database
+              disConnectTestDB(leaveDataForDisconnect, dbs, (err, disResult) => {
+                if (err) {
+                  throw (" Failed  Testing Database connect failed.", err);
+                }
+                if (disResult) {
+                  // Disconnect and Next to real
+                  resolve(true);
+                } else {
+                  throw err;
+                }
+              });
+            }
+          });
+        } else {
+          // Not ON connect, Next to real
+          resolve(true);
+        }
+      });
+    });
+    Promise.all([testConnectToDB]).then(async (x) => {
+      if (x[0]) {
+        await (pool_base == "basic" ? new Promise((resolve) => resolve(mySqlDbConnect.connect())) : new Promise((resolve) => resolve(SequelizeDbConnect.connect())));
+          await authPassport.init().then(async (p) => {
+            if (p[0]) {
+              console.log("\n Init failed ", p[0]);
+              return;
+              //throw p[0];
+            } else {
+              await new Promise((resolve) => resolve(fileWalk.fileWalk(jsfiles)));
+              await (pool_base == "basic" ? new Promise((resolve) => resolve()) : new Promise((resolve) => resolve(Base())));
+              await new Promise((resolve) => {
+                httpExpress.expressStart().then((expss) => {
+                  resolve(expss);
+                });
+              });
+            }
+          }).catch((err) => {
+            console.log(" Catch init failed ", err);
+            throw err;
+          });
+      }
+    });
+  } catch (error) {
+    console.log(" Compile failed ", error);
+    throw error;
+  }
+};
+// Use router
+_app_.use(_publicPath_, endpoint);

package/packages/cli/core/middleware/express/duplicateRequest.js

@@ -1,12 +1,16 @@
-const _beech_ = require(appRoot + "/beech.config.js");
-const { duplicateRequest } = require("express-duplicate-request");
-const nextDuplicater = (req, res, next) => {
-  next();
-};
-let configure = {
-  expiration: _beech_.defineConfig.server.duplicateRequest ? _beech_.defineConfig.server.duplicateRequest.expiration : 0,
-};
-configure = { ...configure, ..._beech_.defineConfig.server.duplicateRequest };
-const Duplicater = configure.expiration ? duplicateRequest(configure) : nextDuplicater;
-
-module.exports = { Duplicater, duplicateRequest };
+const _beech_ = require(appRoot + "/beech.config.js");
+const { duplicateRequest } = require("express-duplicate-request");
+const nextDuplicater = (req, res, next) => next();
+const defaultConfigure = {
+  expiration: _beech_.defineConfig.server.duplicateRequest ? _beech_.defineConfig.server.duplicateRequest.expiration : 0,
+};
+const baseConfigure = {
+  ..._beech_.defineConfig.server.duplicateRequest, // Override default configure with user configure.
+  ...defaultConfigure,
+};
+const Duplicater = (more_configure = {}) => {
+  const config = { ...baseConfigure, ...more_configure };
+  return config.expiration ? duplicateRequest(config) : nextDuplicater;
+};
+
+module.exports = { Duplicater, duplicateRequest };

package/packages/cli/core/middleware/express/jwtCheckAllow.js

@@ -1,68 +1,86 @@
-const passport = require("passport");
-
-const checkRoleMiddleware = (options) => {
-  return function (req, res, next) {
-    if(!Array.isArray(options)) {
-      return next();
-    } else {
-      passport.authenticate("jwt", {
-        session: false,
-      }, (err, user, info) => {
-        // error check
-        if (err) {
-          console.log(err, info);
-          return res.status(403).json({
-            code: 403,
-            status: "FORBIDDEN",
-            message: "Forbidden: Insufficient role",
-            info: {
-              error: err,
-            },
-          });
-        } else {
-          let isPerfectly = true;
-          options.forEach((element, key) => {
-            let checkVal = Object.values(element).flat();
-            let checkKey = Object.keys(element);
-            if(user && user[checkKey]) {
-              if(checkVal.includes(user[checkKey])) {
-                if(options.length -1 === key) {
-                  if(isPerfectly) {
-                    // Perfectly
-                    return next();
-                  }
-                }
-              } else {
-                if(isPerfectly) {
-                  res.status(403).json({
-                    code: 403,
-                    status: "FORBIDDEN",
-                    message: "Forbidden: Insufficient role",
-                  });
-                }
-                isPerfectly = false;
-              }
-            } else {
-              if(isPerfectly) {
-                res.status(403).json({
-                  code: 403,
-                  status: "FORBIDDEN",
-                  message: `No ${checkKey} assigned to token.`,
-                });
-              }
-              isPerfectly = false;
-            }
-          });
-        }
-      })(req, res, next);
-    }
-  }
-}
-
-const checkRoleMiddlewareWithDefaultProject = (options) => {
-  return function (req, res, next) {
-    return checkRoleMiddleware(options)(req, res, next);
-  }
-}
-
-module.exports = { checkRoleMiddleware, checkRoleMiddlewareWithDefaultProject }
+const passport = require("passport");
+
+const checkRoleMiddleware = (options) => {
+  return (req, res, next) => {
+    if(!Array.isArray(options)) {
+      // Perfectly with options is not type Array
+      return next();
+    } else {
+      passport.authenticate("jwt", {
+        session: false,
+      }, (err, user, info) => {
+        // error check
+        if (err) {
+          //console.log(err, info);
+          return res.status(403).json({
+            code: 403,
+            status: "FORBIDDEN",
+            message: "Forbidden: Insufficient role",
+            info: {
+              error: err,
+            },
+          });
+        } else {
+          if(!options.length) {
+            // Perfectly with no options
+            return next();
+          } else {
+            const allowed = options.some(rule => {
+              return Object.entries(rule).every(([key, condition]) => {
+                //console.log('----matchCondition(user?.[key], condition, user)-->>', matchCondition(user?.[key], condition, user));
+                return matchCondition(user?.[key], condition, user);
+              });
+            });
+            if (allowed) {
+              return next();
+            } else {
+              res.status(403).json({
+                code: 403,
+                status: "FORBIDDEN",
+                message: "Forbidden: Insufficient role",
+                info: {
+                  status: "ROLE_NOT_ALLOWED",
+                  error: "Insufficient role or User token does not have sufficient role.",
+                },
+              });
+            }
+          }
+        }
+      })(req, res, next);
+    }
+  }
+}
+
+const operators = {
+  $eq: (userValue, expected) => userValue === expected,
+  $ne: (userValue, expected) => userValue !== expected,
+  $in: (userValue, expected) => Array.isArray(expected) && expected.includes(userValue),
+  $not: (userValue, expected) => Array.isArray(expected) && !expected.includes(userValue),
+  $regex: (userValue, expected) =>
+    typeof userValue === 'string' && expected instanceof RegExp
+      ? expected.test(userValue)
+      : false,
+  $fn: (userValue, fn, user) => typeof fn === 'function' && fn(userValue, user),
+};
+
+const matchCondition = (userValue, condition, user) => {
+  if (typeof condition !== 'object' || condition instanceof RegExp || Array.isArray(condition)) {
+    return Array.isArray(condition)
+      ? operators.$in(userValue, condition)
+      : operators.$eq(userValue, condition);
+  }
+  // operator object
+  return Object.entries(condition).every(([op, expected]) => {
+    const handler = operators[op];
+    if (!handler) return false;
+    return handler(userValue, expected, user);
+  });
+};
+
+const checkRoleMiddlewareWithDefaultProject = (options) => {
+  return function (req, res, next) {
+    return checkRoleMiddleware(options)(req, res, next);
+  }
+}
+
+module.exports = { checkRoleMiddleware, checkRoleMiddlewareWithDefaultProject };