meadow-endpoints 2.0.21 → 2.0.23

package/.babelrc

@@ -0,0 +1,6 @@
+{
+    "presets": [
+        "@babel/preset-env"
+    ],
+    "sourceMaps": "both"
+}

package/.browserslistrc

@@ -0,0 +1 @@
+since 2022

package/.gulpfile-quackage-config.json

@@ -0,0 +1,8 @@
+{
+    "EntrypointInputSourceFile": "/home/alex/dev/clean/meadow-endpoints/source/Meadow-Endpoints.js",
+    "LibraryObjectName": "MeadowEndpoints",
+    "LibraryOutputFolder": "/home/alex/dev/clean/meadow-endpoints/dist/",
+    "LibraryUniminifiedFileName": "meadow-endpoints.js",
+    "LibraryMinifiedFileName": "meadow-endpoints.min.js",
+    "BrowserifyIgnore": []
+}

package/.gulpfile-quackage.js

@@ -0,0 +1,2 @@
+require('/home/alex/dev/clean/meadow-endpoints/node_modules/quackage/gulp/Quackage-Gulpfile.js');
+require('/home/alex/dev/clean/meadow-endpoints/node_modules/quackage/gulp/Quackage-Gulpfile.js');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "meadow-endpoints",
-  "version": "2.0.21",
+  "version": "2.0.23",
   "description": "Automatic API endpoints for Meadow data.",
   "main": "source/Meadow-Endpoints.js",
   "scripts": {
@@ -44,7 +44,7 @@
   "homepage": "https://github.com/stevenvelozo/meadow-endpoints",
   "devDependencies": {
     "chai": "4.1.2",
-    "chance": "^1.1.8",
+    "chance": "^1.1.13",
     "fable": "^2.0.1",
     "mocha": "9.2.2",
     "mysql2": "1.6.1",
@@ -55,7 +55,7 @@
     "async": "2.6.1",
     "JSONStream": "^1.3.5",
     "meadow": "~1.0.32",
-    "meadow-filter": "^1.0.5",
+    "meadow-filter": "^1.0.10",
     "orator": "~2.0.2",
     "underscore": "1.9.1"
   }

package/source/crud/Meadow-Endpoint-ReadLiteList.js

@@ -111,6 +111,11 @@ var doAPIReadLiteEndpoint = function(pRequest, pResponse, fNext)
 				// It looks like this record was not authorized.  Send an error.
 				return fStageComplete({Code:405,Message:'UNAUTHORIZED ACCESS IS NOT ALLOWED'});
 			},
+			// 2.7: INJECT: Post-operation behavior (e.g. field cleansing)
+			function (fStageComplete)
+			{
+				pRequest.BehaviorModifications.runBehavior('ReadsLite-PostOperation', pRequest, fStageComplete);
+			},
 			// 3. Marshalling of records into the hash list, using underscore templates.
 			function (fStageComplete)
 			{

package/source/crud/Meadow-Marshal-LiteList.js

@@ -30,7 +30,8 @@ var marshalLiteList = (pRecords, pRequest, pFieldList) =>
 		{
 			if (pField.indexOf('ID') === 0 ||
 				pField.indexOf('GUID') === 0 ||
-				pField == 'CreatingIDUser') //we should always include owner info
+				pField == 'CreatingIDUser' || // we should always include owner info
+				pField == 'Error') // we should propagate errors through (ex. bulk upsert)
 			{
 				tmpFieldList.push(pField);
 			}

package/source/crud/Meadow-Operation-Update.js

@@ -111,7 +111,7 @@ var doUpdate = function(pRecordToModify, pRequest, pResponse, fCallback, pOption
 					{
 						if (!pRecord)
 						{
-							return fStageComplete('Error updating a record.');
+							return fStageComplete(pError || 'Error updating a record.');
 						}
 
 						pRequest.Record = pRecord;

package/test/MeadowEndpoints_basic_tests.js

@@ -608,6 +608,91 @@ suite
 					}
 				);
 				test
+				(
+					'readsLite: ReadsLite-PostOperation behavior fires and can modify records',
+					function(fDone)
+					{
+						_MeadowEndpoints.behaviorModifications.setBehavior('ReadsLite-PostOperation',
+							function(pRequest, fComplete)
+							{
+								// Simulate field cleansing by removing Type from all records
+								pRequest.Records.forEach(function(pRecord)
+								{
+									delete pRecord.Type;
+								});
+								fComplete(false);
+							});
+						libSuperTest('http://localhost:9080/')
+						.get('1.0/FableTests/LiteExtended/Type,Name')
+						.end(
+							function (pError, pResponse)
+							{
+								var tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(6);
+								// Type was requested via LiteExtended but removed by PostOperation behavior
+								Expect(tmpResults[0]).to.not.have.property('Type');
+								Expect(tmpResults[4]).to.not.have.property('Type');
+								// Name was not removed and should still be present
+								Expect(tmpResults[4].Name).to.equal('Gertrude');
+								// Clean up
+								_MeadowEndpoints.behaviorModifications.setBehavior('ReadsLite-PostOperation', null);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readsLite: ReadsLite-PostOperation behavior fires for standard Lite endpoint',
+					function(fDone)
+					{
+						var tmpBehaviorFired = false;
+						_MeadowEndpoints.behaviorModifications.setBehavior('ReadsLite-PostOperation',
+							function(pRequest, fComplete)
+							{
+								tmpBehaviorFired = true;
+								fComplete(false);
+							});
+						libSuperTest('http://localhost:9080/')
+						.get('1.0/FableTests/Lite')
+						.end(
+							function (pError, pResponse)
+							{
+								var tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(6);
+								Expect(tmpBehaviorFired).to.equal(true);
+								// Clean up
+								_MeadowEndpoints.behaviorModifications.setBehavior('ReadsLite-PostOperation', null);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readsLite: ReadsLite-PostOperation error halts response',
+					function(fDone)
+					{
+						_MeadowEndpoints.behaviorModifications.setBehavior('ReadsLite-PostOperation',
+							function(pRequest, fComplete)
+							{
+								fComplete({Code:403,Message:'SENSITIVE FIELD ACCESS DENIED'});
+							});
+						libSuperTest('http://localhost:9080/')
+						.get('1.0/FableTests/LiteExtended/Type,Name')
+						.end(
+							function (pError, pResponse)
+							{
+								var tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult).to.have.property('Error');
+								// Clean up
+								_MeadowEndpoints.behaviorModifications.setBehavior('ReadsLite-PostOperation', null);
+								fDone();
+							}
+						);
+					}
+				);
+				test
 				(
 					'readsby: get all records by Type',
 					function(fDone)
@@ -2496,6 +2581,35 @@ suite
 						);
 					}
 				);
+				test
+				(
+					'problematic bulk upserts',
+					function(fDone)
+					{
+						_MeadowEndpoints.behaviorModifications.setTemplate('SelectList', '<%= Record.Name %>|<%=Record.Type%>');
+						var tmpRecords = [
+							{GUIDAnimal:'0xHAXXXX', TypeOh:'Triceratops'},
+							{GUIDAnimal:'0xDavison', Nameology:'Davison', Type:'Dog'},
+							{GUIDAnimal:'0xMartino', Name:'Martin', Type:'Dog'}, // this one still works
+						];
+						_MockSessionValidUser.UserRoleIndex = 2;
+						libSuperTest('http://localhost:9080/')
+						.put('1.0/FableTest/Upserts')
+						.send(tmpRecords)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								var tmpResult = JSON.parse(pResponse.text);
+								console.log(JSON.stringify(tmpResult,null,4));
+								Expect(tmpResult[0].Error).to.be.a('string');
+								Expect(tmpResult[1].Error).to.be.a('string');
+								Expect(tmpResult[2].Error).to.not.exist;
+								fDone();
+							}
+						);
+					}
+				);
 			}
 		);
 	}