directus-extension-sql-query-panel 1.0.6 → 1.0.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/api.js +1 -1
- package/package.json +1 -1
package/dist/api.js
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
var e=(e=>(e.REQUEST="sql-query.request",e.RESPONSE="sql-query.response",e))(e||{});const r=[],a=[{name:"insights",config:(r,{database:a,services:t,emitter:s})=>{const{PanelsService:n}=t;async function i(e,r){if(new RegExp(["delete","update","insert","execute","kill","drop"].map((e=>`\\b${e}\\b`)).join("|")).test(e.toLowerCase()))throw new Error("SQL query is blacklisted");const t=e.match(/{{\w+}}/g);if(t)throw new Error(`Missing query param: ${t.join(", ").replace(/{{|}}/g,"")}`);return(e=>{let r=[],a=[];if(e.rows&&e.fields)r=e.rows,a=e.fields.map((e=>e.name));else if(Array.isArray(e)){const[t,s]=e;r=2===t.length&&Array.isArray(t[0])?t.at(0):t,a=(2===s.length&&Array.isArray(s[0])?s.at(0):s).map((e=>e.name))}else void 0!==e.length&&e.columns?(r=e,r.length>0&&(a=Object.keys(r[0]))):e.recordset&&(r=e.recordset,a=e.recordset.columns?Object.keys(e.recordset.columns):[]);return{items:r,headers:a}})(await a.raw(e,r))}r.get("/query/:panelId",(async
|
|
1
|
+
var e=(e=>(e.REQUEST="sql-query.request",e.RESPONSE="sql-query.response",e))(e||{});const r=[],a=[{name:"insights",config:(r,{database:a,services:t,emitter:s})=>{const{PanelsService:n}=t;async function i(e,r){if(new RegExp(["delete","update","insert","execute","kill","drop"].map((e=>`\\b${e}\\b`)).join("|")).test(e.toLowerCase()))throw new Error("SQL query is blacklisted");const t=e.match(/{{\w+}}/g);if(t)throw new Error(`Missing query param: ${t.join(", ").replace(/{{|}}/g,"")}`);return(e=>{let r=[],a=[];if(e.rows&&e.fields)r=e.rows,a=e.fields.map((e=>e.name));else if(Array.isArray(e)){const[t,s]=e;r=2===t.length&&Array.isArray(t[0])?t.at(0):t,a=(2===s.length&&Array.isArray(s[0])?s.at(0):s).map((e=>e.name))}else void 0!==e.length&&e.columns?(r=e,r.length>0&&(a=Object.keys(r[0]))):e.recordset&&(r=e.recordset,a=e.recordset.columns?Object.keys(e.recordset.columns):[]);return{items:r,headers:a}})(await a.raw(e,r))}r.get("/query/:panelId",(async(r,a)=>{var t;try{const{query:o,variables:l,panel:c}=await async function(r){var a;const t=r.params.panelId;if(!t)throw new Error("Missing panelId");const i=new n({accountability:r.accountability,schema:r.schema}),o=await i.readOne(t);let{variables:l,query:c}=await s.emitFilter(e.REQUEST,{variables:Object.assign({dashboard:o.dashboard},null!=(a=r.query)?a:{}),query:o.options.sql},r);for(const e in l){if(!e.match(/^[a-zA-Z0-9_]+$/))throw new Error(`Invalid variable name: ${e}`);c=c.replace(new RegExp(`{{${e}}}`,"g"),`:${e}`)}return{query:c,variables:l,panel:o}}(r);let u=await i(o,l);u=await s.emitFilter(e.RESPONSE,u,r);let y=Number(null!=(t=c.options.cache)?t:300);return y=y>0?y:300,a.set("Cache-control",`public, max-age=${y}`),a.json(u)}catch(e){return a.status(400).json({error:e.message})}}))}}],t=[];export{a as endpoints,r as hooks,t as operations};
|