Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@coding-blocks/jsonapi-store-sequelize
Advanced tools
Relational data store for jsonapi-server with Sequelize
jsonapi-store-sequelize
is a relational database backed data store for jsonapi-server
.
This is based on (and forked from) jsonapi-store-relationaldb
This project conforms to the specification laid out in the jsonapi-server handler documentation.
var SQLStore = require("jsonapi-store-sequelize");
jsonApi.define({
resource: "comments",
handlers: new SQLStore({
dialect: "mysql",
dialectOptions: {
supportBigNumbers: true
},
host: "localhost",
port: 3306,
database: "jsonapi", // If not provided, defaults to the name of the resource
username: "root",
password: null,
logging: false
})
});
Note: the logging
property controls the logging of the emitted SQL and can either be false
(which will mean it will be captured by the internal debugging module under the namespace jsonApi:store:relationaldb:sequelize
) or a user provided function (e.g. console.log
) to which a string containing the information to be logged will be passed as the first argument.
If you are already using sequelize or need to have access to the sequelize instance, you may provide an instance to the store to be used instead of having the store create a new instance from the given config.
var RelationalDbStore = require("jsonapi-store-relationaldb");
var Sequelize = require("Sequelize");
var sequelize = new Sequelize("jsonapi", "root", null, {dialect: "mysql"});
jsonApi.define({
resource: "comments",
handlers: new RelationalDbStore({
sequelize: sequelize
})
});
Getting this data store to production isn't too bad...
(new SQLStore()).populate()
to have this module attempt to create the require tables. If you enable debugging via DEBUG=jsonApi:store:*
you'll see the create-table statements - you can target a local database, call populate(), grab the queries, review them and finally run them against your production stack manually.When deploying schema changes, you'll need to correct your database schema - database migrations are left as an exercise for the user. If your schema are likely to change frequently, maybe consider using a different (less schema-driven) data store.
When changing columns in a production database, a typical approach might be to create a new table that is a clone of the table in production, copy all data from the production table into the new table, run an ALTER-TABLE command on the new table to adjust the columns (this may take a while and will lock the table), then run a RENAME-TABLES to swap the production table out for the new one.
Note: When populating database tables, you can use the force
config option to DROP and CREATE tables. This is helpful in development stage, when your data doesn't matter and you want your Tables schemas to change according to the DAOs without having to manually write migrations.
(new SQLStore()).populate({force: true}, () => {
//tables dropped and created
})
Relational databases don't differentiate between undefined
and null
values. Joi
does differentiate between undefined
and null
values. Some undefined
properties will pass validation, whilst null
properties may not. For example, the default articles resource contains a created
attribute of type "date"
- this won't pass validation with a null
value, so the Joi schema will need tweaking.
FAQs
Relational data store for jsonapi-server with Sequelize
We found that @coding-blocks/jsonapi-store-sequelize demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.