vanta-api 1.0.5 → 1.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vanta-api",
-  "version": "1.0.5",
+  "version": "1.1.0",
   "description": "Advanced API features and security configuration for Node.js/MongoDB.",
   "main": "index.js",
   "scripts": {

package/src/api-features.js

@@ -3,7 +3,6 @@ import winston from "winston";
 import { securityConfig } from "./config.js";
 import HandleERROR from "./handleError.js";
 
-// تنظیم logger با winston
 const logger = winston.createLogger({
   level: "info",
   format: winston.format.combine(
@@ -21,7 +20,6 @@ export class ApiFeatures {
     this.pipeline = [];
     this.countPipeline = [];
     this.manualFilters = {};
-    // انتخاب استفاده از cursor برای پردازش داده‌های حجیم
     this.useCursor = false;
     this.#initialSanitization();
   }
@@ -33,7 +31,6 @@ export class ApiFeatures {
     const safeFilters = this.#applySecurityFilters(mergedFilters);
 
     if (Object.keys(safeFilters).length > 0) {
-      // اضافه کردن فیلتر به ابتدای pipeline جهت بهبود عملکرد
       this.pipeline.push({ $match: safeFilters });
       this.countPipeline.push({ $match: safeFilters });
     }
@@ -137,11 +134,11 @@ export class ApiFeatures {
         lookupStage = {
           $lookup: {
             from: collection,
-            let: { localField: `$${field}` },
+            let: { localId: `$${field}` },
             pipeline: [
               {
                 $match: {
-                  $expr: { $eq: ["$_id", "$$localField"] }
+                  $expr: { $eq: ["$_id", "$$localId"] }
                 }
               },
               { $project: projection }
@@ -295,13 +292,8 @@ export class ApiFeatures {
       throw new HandleERROR(`Invalid populate field: ${field}`, 400);
     }
 
-    const refModel = mongoose.model(schemaPath.options.ref);
-    if (refModel.schema.options.restricted && this.userRole !== "admin") {
-      throw new HandleERROR(`Unauthorized to populate ${field}`, 403);
-    }
-
     return {
-      collection: refModel.collection.name,
+      collection:  schemaPath.options.ref.toLowerCase()+'s',
       isArray: schemaPath.instance === "Array"
     };
   }