jammin

Installation

npm install jammin

Note: Jammin is still in alpha. The API is not stable.

About

Jammin is the fastest way (that I know of) to build a JSON REST API with Node, Express, and MongoDB. It consists of a light-weight wrapper around Mongoose for database operations and an Express router to expose HTTP methods. It is fully extensible via middleware to support things like authentication, resource ownership, and complex queries.

Usage

var App = require('express')();
var Jammin = require('jammin');
var API = new Jammin('mongodb://<username>:<password>@<mongodb_host>');

var PetSchema = new Jammin.Schema({
  name: String,
  age: Number
});

API.define('Pet', PetSchema);
API.Pet.get('/pets/{name}');
API.Pet.post('/pets');

App.use('/api', API);
App.listen(3000);

> curl -X POST 127.0.0.1:3000/pets -d '{"name": "Lucy", "age": 2}'
{"success": true}
> curl 127.0.0.1:3000/pets/Lucy
{"name": "Lucy", "age": 2}

GET

Jammin will use req.params and req.query to find an item the database.

API.pet.get('/pet/{name}');

Use getMany to return an array of matching documents.

API.pet.getMany('/pet')

POST

Jammin will use req.body to create a new item in the database.

API.pet.post('/pets');

Use postMany to accept an array of items to be created.

API.pet.postMany('/pets');

PATCH

Jammin will use req.params and req.query to find an item in the database, and use req.body to update that item.

API.pet.patch('/pets/{name}');

Use patchMany to update every matching item in the database.

API.pet.patchMany('/pets');

DELETE

Jammin will use req.params and req.query to remove an item from the database.

API.pet.delete('/pets/{name}');

Use deleteMany to delete every matching item in the database.

API.pet.deleteMany('/pets');

Middleware

You can use middleware to intercept database calls, alter the request, perform authentication, etc. The example below alters req.query to construct a complex Mongo query from user inputs.

API.pet.getMany('/search/pets', function(req, res, next) {
  req.query = {
    name: { "$regex": new RegExp(req.query.q) }
  };
  next();
})

Swagger

Serve a Swagger specification for your API at the specified path. You can use this to document your API via Swagger UI or a LucyBot portal

API.swagger('/swagger.json');

Jammin will automatically fill out most of your spec, but you can provide additional information:

var API = new Jammin({
  databaseURL: DatabaseURL,
  swagger: {
    info: {title: 'Pet Store'},
    host: 'api.example.com',
    basePath: '/api'
  }
});

Extended Usage

var Hash = require('password-hash');
var App = require('express')();
var Jammin = require('jammin');

var DatabaseURL = 'mongodb://<username>:<password>@<mongodb_host>';
var API = new Jammin({
  databaseURL: DatabaseURL,
  swagger: {
    info: {title: 'Pet Store'},
    host: 'api.example.com',
    basePath: '/api'
  }
});

var UserSchema = new Jammin.Schema({
  username: {type: String, required: true, unique: true, match: /^\w+$/},
  password_hash: {type: String, required: true},
})

var PetSchema = new Jammin.Schema({
  id: {type: Number, required: true, unique: true},
  name: String,
  owner: String,
  animalType: {type: String, default: 'unknown'}
})

var authenticateUser = function(req, res, next) {
  var query = {
    username: req.headers['username'],
  };
  API.user.db.findOne(query, function(err, user) {
    if (err) {
      res.status(500).json({error: err.toString()})
    } else if (!user) {
      res.status(401).json({error: "Unknown user:" + query.username});
    } else if (!Hash.verify(req.headers['password'], user.password_hash)) {
      res.status(401).json({error: "Invalid password for " + query.username}) 
    } else {
      req.user = user;
      next();
    }
  }) 
}

API.define('pet', PetSchema);
API.define('user', UserSchema);

// Creates a new user.
API.user.post('/user', function(req, res, next) {
  req.body.password_hash = Hash.generate(req.body.password);
  next();
});

// Gets a pet by id.
API.pet.get('/pets/{id}');

// Gets an array of pets that match the query.
API.pet.getMany('/pets');

// Searches pets by name
API.pet.getMany('/search/pets', {
  swagger: {
    description: "Search all pets by name",
    parameters: [
      {name: 'q', in: 'query', type: 'string', description: 'Any regex'}
    ]
  }
}, function(req, res, next) {
  req.query = {
    name: { "$regex": new RegExp(req.query.q) }
  };
  next();
})

// Creates one or more new pets.
API.pet.postMany('/pets', authenticateUser, function(req, res, next) {
  if (!Array.isArray(req.body)) req.body = [req.body];
  req.body.forEach(function(pet) {
    pet.owner = req.user.username;
  });
  next();
});

// Setting req.query.owner will ensure that DB calls only return
// documents owned by the user.
var ensureOwnership = function(req, res, next) {
  req.query.owner = req.user.username;
  next();
}

// Changes a pet.
API.pet.put('/pets/{id}', authenticateUser, ensureOwnership)

// Changes every pet that matches the query.
API.pet.putMany('/pets', authenticateUser, ensureOwnership)

// Deletes a pet by ID.
API.pet.delete('/pets/{id}', authenticateUser, ensureOwnership);

// Deletes every pet that matches the query.
API.pet.deleteMany('/pets', authenticateUser, ensureOwnership)

App.use('/api', API.router);
App.listen(3000);