
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@hristozov/angular2-jsonapi
Advanced tools
A lightweight Angular 2 adapter for JSON API
Why this library? Because JSON API is an awesome standard, but the responses that you get and the way to interact with endpoints are not really easy and directly consumable from Angular.
Moreover, using Angular2 and Typescript, we like to interact with classes and models, not with bare JSONs. Thanks to this library, you will be able to map all your data into models and relationships like these:
[
Post{
id: 1,
title: 'My post',
content: 'My content',
comments: [
Comment{
id: 1,
// ...
},
Comment{
id: 2,
// ...
}
]
},
// ...
]
To install this library, run:
$ npm install angular2-jsonapi --save
Add the JsonApiModule
to your app module imports:
import { JsonApiModule } from 'angular2-jsonapi';
@NgModule({
imports: [
BrowserModule,
JsonApiModule
],
declarations: [
AppComponent
],
bootstrap: [AppComponent]
})
export class AppModule { }
Note: Because in our custom Datastore
service we will make use of dependency injection into a class that inherits from a class of this module (see this doc for an example) the used @angular/http
module in our base project need to be of the same version as the version used by this module. Otherwise you will get an error like this:
Argument of type 'Http' is not assignable to parameter of type 'Http'.
Property '_backend' is protected but type 'Http' is not a class derived from 'Http'.
See this issue for details.
Firstly, create your Datastore
service:
JsonApiDatastore
class@JsonApiDatastoreConfig
, set the baseUrl
for your APIs and map your modelsHttp
depencency to the parent constructor.import { JsonApiDatastoreConfig, JsonApiDatastore } from 'angular2-jsonapi';
@Injectable()
@JsonApiDatastoreConfig({
baseUrl: 'http://localhost:8000/v1/',
models: {
posts: Post,
comments: Comment,
users: User
}
})
export class Datastore extends JsonApiDatastore {
constructor(http: Http) {
super(http);
}
}
Then set up your models:
JsonApiModel
class@JsonApiModelConfig
, passing the type
@Attribute
@HasMany
and @BelongsTo
import { JsonApiModelConfig, JsonApiModel, Attribute, HasMany, BelongsTo } from 'angular2-jsonapi';
@JsonApiModelConfig({
type: 'posts'
})
export class Post extends JsonApiModel {
@Attribute()
title: string;
@Attribute()
content: string;
@Attribute()
created_at: Date;
@HasMany()
comments: Comment[];
}
@JsonApiModelConfig({
type: 'comments'
})
export class Comment extends JsonApiModel {
@Attribute()
title: string;
@Attribute()
created_at: Date;
@BelongsTo()
post: Post;
@BelongsTo()
user: User;
}
@JsonApiModelConfig({
type: 'users'
})
export class User extends JsonApiModel {
@Attribute()
name: string;
// ...
}
Now, you can use your Datastore
in order to query your API with the query()
method:
// ...
constructor(private datastore: Datastore) { }
getPosts(){
this.datastore.query(Post, {
page: { size: 10, number: 1}
}).subscribe(
(posts: Post[]) => console.log(posts)
);
}
Use peekAll()
to retrieve all of the records for a given type that are already loaded into the store, without making a network request:
let posts = this.datastore.peekAll(Post);
Use findRecord()
to retrieve a record by its type and ID:
this.datastore.findRecord(Post, '1').subscribe(
(post: Post) => console.log(post)
);
Use peekRecord()
to retrieve a record by its type and ID, without making a network request. This will return the record only if it is already present in the store:
let post = this.datastore.peekRecord(Post, '1');
You can create records by calling the createRecord()
method on the datastore:
this.datastore.createRecord(Post, {
title: 'My post',
content: 'My content'
});
Making changes to records is as simple as setting the attribute you want to change:
this.datastore.findRecord(Post, '1').subscribe(
(post: Post) => {
post.title = 'New title';
}
);
Records are persisted on a per-instance basis. Call save()
on any instance of JsonApiModel
and it will make a network request.
The library takes care of tracking the state of each record for you, so that newly created records are treated differently from existing records when saving.
Newly created records will be POST
ed:
let post = this.datastore.createRecord(Post, {
title: 'My post',
content: 'My content'
});
post.save().subscribe(); // => POST to '/posts'
Records that already exist on the backend are updated using the HTTP PATCH
verb:
this.datastore.findRecord(Post, '1').subscribe(
(post: Post) => {
post.title = 'New title';
post.save().subscribe(); // => PATCH to '/posts/1'
}
);
The save()
method will return an Observer
that you can subscribe:
post.save().subscribe(
(post: Post) => console.log(post)
);
Note: always remember to call the subscribe()
method, even if you are not interested in doing something with the response. Since the http
method return a cold Observable, the request won't go out until something subscribes to the observable.
You can tell if a record has outstanding changes that have not yet been saved by checking its hasDirtyAttributes
property.
At this point, you can either persist your changes via save()
or you can roll back your changes. Calling rollbackAttributes()
for a saved record reverts all the dirty attributes to their original value.
this.datastore.findRecord(Post, '1').subscribe(
(post: Post) => {
console.log(post.title); // => 'Old title'
console.log(post.hasDirtyAttributes); // => false
post.title = 'New title';
console.log(post.hasDirtyAttributes); // => true
post.rollbackAttributes();
console.log(post.hasDirtyAttributes); // => false
console.log(post.title); // => 'Old title'
}
);
For deleting a record, just call the datastore's method deleteRecord()
, passing the type and the id of the record:
this.datastore.deleteRecord(Post, '1').subscribe(() => {
// deleted!
});
In order to query an object including its relationships, you can pass in its options the attribute name you want to load with the relationships:
this.datastore.query(Post, {
page: { size: 10, number: 1},
include: 'comments'
}).subscribe(
(posts: Post[]) => console.log(posts)
);
The same, if you want to include relationships when finding a record:
this.datastore.findRecord(Post, '1', {
include: 'comments,comments.user'
}).subscribe(
(post: Post) => console.log(post)
);
The library will try to resolve relationships on infinite levels connecting nested objects by reference. So that you can have a Post
, with a list of Comment
s, that have a User
that has Post
s, that have Comment
s... etc.
If the object you want to create has a one-to-many relationship, you can do this:
let post = this.datastore.peekRecord(Post, '1');
let comment = this.datastore.createRecord(Comment, {
title: 'My comment',
post: post
});
comment.save().subscribe();
The library will do its best to discover which relationships map to one another. In the code above, for example, setting the comment
relationship with the post
will update the post.comments
array, automatically adding the comment
object!
If you want to include a relationship when creating a record to have it parsed in the response, you can pass the params
object to the save()
method:
comment.save({
include: 'user'
}).subscribe(
(comment: Comment) => console.log(comment)
);
You can also update an object that comes from a relationship:
this.datastore.findRecord(Post, '1', {
include: 'comments'
}).subscribe(
(post: Post) => {
let comment: Comment = post.comments[0];
comment.title = 'Cool';
comment.save().subscribe((comment: Comment) => {
console.log(comment);
});
}
);
By default, the library adds these headers, according to the JSON API MIME Types:
Accept: application/vnd.api+json
Content-Type: application/vnd.api+json
You can also add your custom headers to be appended to each http call:
this.datastore.headers = new Headers({'Authorization': 'Bearer ' + accessToken});
Or you can pass the headers as last argument of any datastore call method:
this.datastore.query(Post, {
include: 'comments'
}, new Headers({'Authorization': 'Bearer ' + accessToken}));
and in the save()
method:
post.save({}, new Headers({'Authorization': 'Bearer ' + accessToken})).subscribe();
Error handling is done in the subscribe
method of the returned Observables.
If your server returns valid JSON API Error Objects you can access them in your onError method:
import {ErrorResponse} from "angular2-jsonapi";
...
this.datastore.query(Post).subscribe(
(posts: Post[]) => console.log(posts),
(errorResponse) => {
if (errorResponse instanceof ErrorResponse) {
// do something with errorResponse
console.log(errorResponse.errors);
}
}
);
It's also possible to handle errors for all requests by overriding handleError(error: any): ErrorObservable
in the datastore.
The library will automatically transform date values into Date
objects and it will serialize them when sending to the server. In order to do that, remember to set the type of the corresponding attribute as Date
:
@JsonApiModelConfig({
type: 'posts'
})
export class Post extends JsonApiModel {
// ...
@Attribute()
created_at: Date;
}
Moreover, it should be noted that the following assumptions have been made:
Date
propertyTo generate all *.js
, *.js.map
and *.d.ts
files:
$ npm run ngc
To lint all *.ts
files:
$ npm run lint
This library is inspired by the draft of this never implemented library.
MIT © Daniele Ghidoli
FAQs
A lightweight Angular 2 adapter for JSON API
We found that @hristozov/angular2-jsonapi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.