Updates
This commit is contained in:
@@ -0,0 +1,8 @@
|
||||
import { APIPathsCrudParams, APIPathsParamsAllowedTable } from "../../types";
|
||||
export default function checks<T extends {
|
||||
[k: string]: any;
|
||||
} = {
|
||||
[k: string]: any;
|
||||
}>({ table, allowedTables, query, body, method, getMiddleware, postMiddleware, putMiddleware, deleteMiddleware, crudMiddleware, }: APIPathsCrudParams<T>): Promise<Pick<APIPathsCrudParams<T>, "query" | "body"> & {
|
||||
allowedTable: APIPathsParamsAllowedTable;
|
||||
}>;
|
||||
+121
@@ -0,0 +1,121 @@
|
||||
"use strict";
|
||||
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
||||
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
||||
return new (P || (P = Promise))(function (resolve, reject) {
|
||||
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
||||
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
||||
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
||||
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
||||
});
|
||||
};
|
||||
var __importDefault = (this && this.__importDefault) || function (mod) {
|
||||
return (mod && mod.__esModule) ? mod : { "default": mod };
|
||||
};
|
||||
Object.defineProperty(exports, "__esModule", { value: true });
|
||||
exports.default = checks;
|
||||
const lodash_1 = __importDefault(require("lodash"));
|
||||
function checks(_a) {
|
||||
return __awaiter(this, arguments, void 0, function* ({ table, allowedTables, query, body, method, getMiddleware, postMiddleware, putMiddleware, deleteMiddleware, crudMiddleware, }) {
|
||||
var _b, _c, _d, _e;
|
||||
const allowedTable = allowedTables.find((tbl) => tbl.table == table);
|
||||
if (!allowedTable) {
|
||||
throw new Error(`Can't Access this table: \`${table}\``);
|
||||
}
|
||||
let newQuery = lodash_1.default.cloneDeep(query);
|
||||
let newBody = lodash_1.default.cloneDeep(body);
|
||||
const searchFields = Object.keys(((_b = newQuery === null || newQuery === void 0 ? void 0 : newQuery.searchQuery) === null || _b === void 0 ? void 0 : _b.query) || {});
|
||||
const selectFields = (_d = (((_c = newQuery === null || newQuery === void 0 ? void 0 : newQuery.searchQuery) === null || _c === void 0 ? void 0 : _c.selectFields)
|
||||
? newQuery.searchQuery.selectFields.map((f) => typeof f == "string"
|
||||
? f
|
||||
: typeof f == "object"
|
||||
? f.fieldName
|
||||
: undefined)
|
||||
: undefined)) === null || _d === void 0 ? void 0 : _d.filter((f) => typeof f == "string");
|
||||
const targetFields = [...(searchFields || []), ...(selectFields || [])];
|
||||
if (method == "GET" && allowedTable.allowedFields) {
|
||||
for (let i = 0; i < targetFields.length; i++) {
|
||||
const fld = targetFields[i];
|
||||
const allowedFld = allowedTable.allowedFields.find((f) => typeof f == "string" ? f == fld : fld.match(f));
|
||||
if (!allowedFld) {
|
||||
throw new Error(`\`${allowedFld}\` field not allowed`);
|
||||
}
|
||||
}
|
||||
}
|
||||
if (method == "GET" && allowedTable.disallowedFields) {
|
||||
for (let i = 0; i < targetFields.length; i++) {
|
||||
const fld = targetFields[i];
|
||||
const disallowedFld = allowedTable.disallowedFields.find((f) => typeof f == "string" ? f == fld : fld.match(f));
|
||||
if (disallowedFld) {
|
||||
throw new Error(`\`${disallowedFld}\` field not allowed`);
|
||||
}
|
||||
}
|
||||
}
|
||||
if (method == "GET" && getMiddleware) {
|
||||
newQuery = yield getMiddleware({ query: newQuery || {} });
|
||||
}
|
||||
if (method !== "GET" && crudMiddleware) {
|
||||
const middRes = yield crudMiddleware({
|
||||
body: newBody || {},
|
||||
query: newQuery || {},
|
||||
});
|
||||
newBody = lodash_1.default.merge(newBody, middRes);
|
||||
}
|
||||
if (method == "POST" && postMiddleware) {
|
||||
const middRes = yield postMiddleware({
|
||||
body: newBody || {},
|
||||
query: newQuery || {},
|
||||
});
|
||||
newBody = lodash_1.default.merge(newBody, middRes);
|
||||
}
|
||||
if (method == "PUT" && putMiddleware) {
|
||||
const middRes = yield putMiddleware({
|
||||
body: newBody || {},
|
||||
query: newQuery || {},
|
||||
});
|
||||
newBody = lodash_1.default.merge(newBody, middRes);
|
||||
}
|
||||
if (method == "DELETE" && deleteMiddleware) {
|
||||
const middRes = yield deleteMiddleware({
|
||||
body: newBody || {},
|
||||
query: newQuery || {},
|
||||
});
|
||||
newBody = lodash_1.default.merge(newBody, middRes);
|
||||
}
|
||||
if ((_e = newQuery === null || newQuery === void 0 ? void 0 : newQuery.searchQuery) === null || _e === void 0 ? void 0 : _e.join) {
|
||||
for (let i = 0; i < newQuery.searchQuery.join.length; i++) {
|
||||
const join = newQuery.searchQuery.join[i];
|
||||
const joinTableName = join.tableName;
|
||||
const selectFields = join.selectFields;
|
||||
if (allowedTables === null || allowedTables === void 0 ? void 0 : allowedTables[0]) {
|
||||
const allowedJoinTable = allowedTables.find((t) => t.table == joinTableName);
|
||||
if (!(allowedJoinTable === null || allowedJoinTable === void 0 ? void 0 : allowedJoinTable.table)) {
|
||||
throw new Error(`Can't joint \`${joinTableName}\` table`);
|
||||
}
|
||||
const allowedFields = allowedJoinTable.allowedFields;
|
||||
const disallowedFields = allowedJoinTable.disallowedFields;
|
||||
if (selectFields === null || selectFields === void 0 ? void 0 : selectFields[0]) {
|
||||
for (let j = 0; j < selectFields.length; j++) {
|
||||
const selectField = selectFields[j];
|
||||
const selectFieldName = typeof selectField == "object"
|
||||
? selectField.field
|
||||
: String(selectField);
|
||||
if ((allowedFields === null || allowedFields === void 0 ? void 0 : allowedFields[0]) &&
|
||||
!allowedFields.find((f) => String(f) == selectFieldName)) {
|
||||
throw new Error(`Can't Select this Field!`);
|
||||
}
|
||||
if ((disallowedFields === null || disallowedFields === void 0 ? void 0 : disallowedFields[0]) &&
|
||||
disallowedFields.find((f) => String(f) == selectFieldName)) {
|
||||
throw new Error(`Disallowed Field Selected!`);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
return {
|
||||
query: newQuery,
|
||||
body: newBody,
|
||||
allowedTable,
|
||||
};
|
||||
});
|
||||
}
|
||||
@@ -0,0 +1,6 @@
|
||||
import { APIPathsData, APIPathsParams } from "../../types";
|
||||
export declare function grabPathData<T extends {
|
||||
[k: string]: any;
|
||||
} = {
|
||||
[k: string]: any;
|
||||
}>({ href, basePath }: APIPathsParams<T>): APIPathsData<T>;
|
||||
@@ -0,0 +1,28 @@
|
||||
"use strict";
|
||||
var __importDefault = (this && this.__importDefault) || function (mod) {
|
||||
return (mod && mod.__esModule) ? mod : { "default": mod };
|
||||
};
|
||||
Object.defineProperty(exports, "__esModule", { value: true });
|
||||
exports.grabPathData = grabPathData;
|
||||
const deserialize_query_1 = __importDefault(require("../../utils/deserialize-query"));
|
||||
function grabPathData({ href, basePath }) {
|
||||
const urlObj = new URL(href);
|
||||
const pathname = basePath
|
||||
? urlObj.pathname.replace(basePath, "")
|
||||
: urlObj.pathname;
|
||||
const urlArray = pathname.split("/").filter((u) => Boolean(u.match(/./)));
|
||||
const table = urlArray[0];
|
||||
const targetId = urlArray[1];
|
||||
let query = ((urlObj === null || urlObj === void 0 ? void 0 : urlObj.searchParams)
|
||||
? (0, deserialize_query_1.default)(Object.fromEntries(urlObj.searchParams))
|
||||
: undefined);
|
||||
if (!table) {
|
||||
throw new Error(`No Table Found`);
|
||||
}
|
||||
return {
|
||||
table,
|
||||
targetId,
|
||||
query,
|
||||
url: urlObj,
|
||||
};
|
||||
}
|
||||
Reference in New Issue
Block a user