@directus/api
Version:
Directus is a real-time API and App dashboard for managing SQL database content
181 lines (180 loc) • 6.66 kB
JavaScript
import { ErrorCode, ForbiddenError, RouteNotFoundError, isDirectusError } from '@directus/errors';
import { isSystemCollection } from '@directus/system-data';
import express from 'express';
import collectionExists from '../middleware/collection-exists.js';
import { respond } from '../middleware/respond.js';
import { validateBatch } from '../middleware/validate-batch.js';
import { ItemsService } from '../services/items.js';
import { MetaService } from '../services/meta.js';
import asyncHandler from '../utils/async-handler.js';
import { sanitizeQuery } from '../utils/sanitize-query.js';
const router = express.Router();
router.post('/:collection', collectionExists, asyncHandler(async (req, res, next) => {
if (isSystemCollection(req.params['collection']))
throw new ForbiddenError();
if (req.singleton) {
throw new RouteNotFoundError({ path: req.path });
}
const service = new ItemsService(req.collection, {
accountability: req.accountability,
schema: req.schema,
});
const savedKeys = [];
if (Array.isArray(req.body)) {
const keys = await service.createMany(req.body);
savedKeys.push(...keys);
}
else {
const key = await service.createOne(req.body);
savedKeys.push(key);
}
try {
if (Array.isArray(req.body)) {
const result = await service.readMany(savedKeys, req.sanitizedQuery);
res.locals['payload'] = { data: result || null };
}
else {
const result = await service.readOne(savedKeys[0], req.sanitizedQuery);
res.locals['payload'] = { data: result || null };
}
}
catch (error) {
if (isDirectusError(error, ErrorCode.Forbidden)) {
return next();
}
throw error;
}
return next();
}), respond);
const readHandler = asyncHandler(async (req, res, next) => {
if (isSystemCollection(req.params['collection']))
throw new ForbiddenError();
const service = new ItemsService(req.collection, {
accountability: req.accountability,
schema: req.schema,
});
const metaService = new MetaService({
accountability: req.accountability,
schema: req.schema,
});
let result;
if (req.singleton) {
result = await service.readSingleton(req.sanitizedQuery);
}
else if (req.body.keys) {
result = await service.readMany(req.body.keys, req.sanitizedQuery);
}
else {
result = await service.readByQuery(req.sanitizedQuery);
}
const meta = await metaService.getMetaForQuery(req.collection, req.sanitizedQuery);
res.locals['payload'] = {
meta: meta,
data: result,
};
return next();
});
router.search('/:collection', collectionExists, validateBatch('read'), readHandler, respond);
router.get('/:collection', collectionExists, readHandler, respond);
router.get('/:collection/:pk', collectionExists, asyncHandler(async (req, res, next) => {
if (isSystemCollection(req.params['collection']))
throw new ForbiddenError();
const service = new ItemsService(req.collection, {
accountability: req.accountability,
schema: req.schema,
});
const result = await service.readOne(req.params['pk'], req.sanitizedQuery);
res.locals['payload'] = {
data: result || null,
};
return next();
}), respond);
router.patch('/:collection', collectionExists, validateBatch('update'), asyncHandler(async (req, res, next) => {
if (isSystemCollection(req.params['collection']))
throw new ForbiddenError();
const service = new ItemsService(req.collection, {
accountability: req.accountability,
schema: req.schema,
});
if (req.singleton === true) {
await service.upsertSingleton(req.body);
const item = await service.readSingleton(req.sanitizedQuery);
res.locals['payload'] = { data: item || null };
return next();
}
let keys = [];
if (Array.isArray(req.body)) {
keys = await service.updateBatch(req.body);
}
else if (req.body.keys) {
keys = await service.updateMany(req.body.keys, req.body.data);
}
else {
const sanitizedQuery = await sanitizeQuery(req.body.query, req.schema, req.accountability);
keys = await service.updateByQuery(sanitizedQuery, req.body.data);
}
try {
const result = await service.readMany(keys, req.sanitizedQuery);
res.locals['payload'] = { data: result };
}
catch (error) {
if (isDirectusError(error, ErrorCode.Forbidden)) {
return next();
}
throw error;
}
return next();
}), respond);
router.patch('/:collection/:pk', collectionExists, asyncHandler(async (req, res, next) => {
if (isSystemCollection(req.params['collection']))
throw new ForbiddenError();
if (req.singleton) {
throw new RouteNotFoundError({ path: req.path });
}
const service = new ItemsService(req.collection, {
accountability: req.accountability,
schema: req.schema,
});
const updatedPrimaryKey = await service.updateOne(req.params['pk'], req.body);
try {
const result = await service.readOne(updatedPrimaryKey, req.sanitizedQuery);
res.locals['payload'] = { data: result || null };
}
catch (error) {
if (isDirectusError(error, ErrorCode.Forbidden)) {
return next();
}
throw error;
}
return next();
}), respond);
router.delete('/:collection', collectionExists, validateBatch('delete'), asyncHandler(async (req, _res, next) => {
if (isSystemCollection(req.params['collection']))
throw new ForbiddenError();
const service = new ItemsService(req.collection, {
accountability: req.accountability,
schema: req.schema,
});
if (Array.isArray(req.body)) {
await service.deleteMany(req.body);
}
else if (req.body.keys) {
await service.deleteMany(req.body.keys);
}
else {
const sanitizedQuery = await sanitizeQuery(req.body.query, req.schema, req.accountability);
await service.deleteByQuery(sanitizedQuery);
}
return next();
}), respond);
router.delete('/:collection/:pk', collectionExists, asyncHandler(async (req, _res, next) => {
if (isSystemCollection(req.params['collection']))
throw new ForbiddenError();
const service = new ItemsService(req.collection, {
accountability: req.accountability,
schema: req.schema,
});
await service.deleteOne(req.params['pk']);
return next();
}), respond);
export default router;