Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
adonis-jsonapi
Advanced tools
This addon adds JSONApi Support and helpers for Adonis projects.
NOTE This addon is currently under development so APIs, methods, and class structures may change (though I will try my best to keep docs up to date).
To install this addon into you Adonis project follow these steps:
Run:
npm install --save adonis-jsonapi
To the providers
array in bootstrap/app.js
add:
'adonis-jsonapi/providers/JsonApiProvider',
To the globalMiddleware
array in app/Http/kernel.js
add:
'AdonisJsonApi/Middleware',
Now your app is ready to start using this addon!
The AdonisJsonApi
middleware adds a JsonApiRequest
instance to all incoming requests as jsonApi
.
This class has a few methods that help parse incoming JSON API data.
getAttributes
This method will dig into the request JSON and look for data.attributes
.
The getAttributes
method optionally accepts an array of attributes and will use the Lodash pick
function to get only a select set of attributes (similar to request.only
).
If the incoming request is not formatted with an object of
data.attributes
, this method will throw aJsonApiError
with error codes and titleInvalid data root
.
Example
* store(request, response) {
const data = request.jsonApi.getAttributes(['email', 'password', 'password-confirmation']);
response.send(data);
}
getAttributesCamelCase
This is the same as getAttributes
, but will use change-case
to change property names into camelCase for easier use.
Example
* store(request, response) {
const data = request.jsonApi.getAttributesCamelCase(['email', 'password', 'password-confirmation']);
response.send(data);
}
getAttributesSnakeCase
This is the same as getAttributes
, but will use change-case
to change property names into snake_case for easier use with database tables and Lucid models.
Example
* store(request, response) {
const data = request.jsonApi.getAttributesSnakeCase(['email', 'password', 'password-confirmation']);
response.send(data);
}
getId
This method will dig into the request JSON and look for data.id
.
If the incoming request is not formatted with a
data.id
property, this method will throw aJsonApiError
with error codes and titleInvalid data root
.
Example
* store(request, response) {
const data = request.jsonApi.getId();
response.send(data);
}
assertId
This method takes a single argument testId
and checks to see if the value of the incoming data.id
matches.
If the values do not match, then a JsonApiError
with error code 400 and title Id mismatch
is thrown.
If the incoming request is not formatted with a
data.id
property, this method will throw aJsonApiError
with error codes and titleInvalid data root
.
Example
* store(request, response) {
request.jsonApi.assertId(reqest.params.id);
response.send(data);
}
getRelationId
This function gets the id
for a specified relation name. If the relation is an hasMany relation, the function will return an array of ids.
If the incoming request is not formatted with the required relation, this method will throw a
JsonApiError
with error codes and titleRelation not found
.
Example
* store(request, response) {
const data = request.jsonApi.getAttributes(['email', 'password', 'password-confirmation']);
data.user_id = request.jsonApi.getRelationId('author');
response.send(data);
}
Serializing data takes two steps:
jsonApi
response macro to serialize dataTo create a view, create a new module in App/Http/JsonApiViews
.
For instance to serialize a lucid model named Author
, create a file app/Http/JsonApiViews/Author.js
.
From this new module, export a class that extends from adonis-jsonapi/src/JsonApiView
:
const JsonApiView = require('adonis-jsonapi/src/JsonApiView');
class Author extends JsonApiView {
}
module.exports = Author;
Attributes are values that should be directly serialized as part of data.attributes
for a single model instance.
To describe the properties to be serialized, add a getter method called attributes
that returns an array of dasherized property names:
const JsonApiView = require('adonis-jsonapi/src/JsonApiView');
class Author extends JsonApiView {
get attributes() {
return ['first-name', 'last-name'];
}
}
module.exports = Author;
To create relations, create a method for the relation name and use either this.belongsTo
or this.hasMany
just like Lucid relations.
But instead of putting the name of a model, you will put the name of the serializer for the related model.
Let's say our Author
has many Book
s:
const JsonApiView = require('adonis-jsonapi/src/JsonApiView');
class Author extends JsonApiView {
get attributes() {
return ['first-name', 'last-name'];
}
books() {
return this.hasMany('App/Http/JsonApiViews/Book', {
included: true,
excludeRelation: 'author'
});
}
}
module.exports = Author;
NOTE the options object included with the relation is required since circular object references are really annoying. I hope that this was more automatic (if anyone is looking to help!).
NOTE Since JSON API does not have a specification of ownership, only
belongsTo
andhasMany
relationships are needed for JsonApiViews. So forhasOne
relations usebelongsTo
for both sides, and forbelongsToMany
use ahasMany
relation.
For most Adonis Lucid models, you will want to use the id
property as the primary key displayed in resources.
But sometimes, you may want to use a different field for your primary key.
This can be configured by creating a primaryKey
getter that returns the property name for the primary key that is used for id
in the resulting resource.
const JsonApiView = require('adonis-jsonapi/src/JsonApiView');
class Post extends JsonApiView {
get attributes() {
return ['title', 'content'];
}
get primaryKey() {
return 'slug';
}
}
module.exports = Post;
For relations primary keys can be customized using ref
.
For instance in our AuthorView, we can say that our related books use the isbn
as a primary key:
const JsonApiView = require('adonis-jsonapi/src/JsonApiView');
class Author extends JsonApiView {
get attributes() {
return ['first-name', 'last-name'];
}
books() {
return this.hasMany('App/Http/JsonApiViews/Book', {
ref: 'isbn',
included: true,
excludeRelation: 'author'
});
}
}
module.exports = Author;
To help format errors to JSON API specifications, there is a response macro JsonApiError
.
A simple setup is to replace the Http handleError listener in app/Listeners/Http.js
:
Http.handleError = function * (error, request, response) {
/**
* DEVELOPMENT REPORTER
*/
if (Env.get('NODE_ENV') === 'development') {
return (new Ouch)
.pushHandler((new Ouch.handlers.JsonResponseHandler(
/* handle errors from ajax and json request only*/false,
/* return formatted trace information along with error response*/false,
false
)))
// .pushHandler(new Ouch.handlers.PrettyPageHandler())
.handleException(error, request.request, response.response, (output) => {
const status = error.status || 500;
response.status(status).send(JSON.parse(output));
console.log('Error handled properly');
});
}
yield response.jsonApiError(error);
};
NOTE This macro shows the
name
andmessage
properties but not the stack for errors. This may not be what you want since it may expose too much information about your environment. This macro will never show the full stack trace, instead work is being done to bring Youch up to date with a JsonApiResponseHandler.
FAQs
A JSON API configuration for adonis-framework
The npm package adonis-jsonapi receives a total of 9 weekly downloads. As such, adonis-jsonapi popularity was classified as not popular.
We found that adonis-jsonapi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.