Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
loopback4-soft-delete
Advanced tools
npm install loopback4-soft-delete
For a quick starter guide, you can refer to our loopback 4 starter application which utilizes this package for soft-deletes in a multi-tenant application.
The package exports following classes and mixins:
DefaultCrudRepository
).DefaultCrudRepository
, DefaultTransactionalRepository
etc.DefaultTransactionalRepository
.SequelizeCrudRepository
.Following are more details on the usage of above artifcats:
An abstract base class for all models which require soft delete feature. This class is a wrapper over Entity class from @loopback/repository adding three attributes to the model class for handling soft-delete, namely, deleted, deletedOn, deletedBy. The column names needed to be there in DB within that table are - 'deleted', 'deleted_on', 'deleted_by'. If you are using auto-migration of loopback 4, then, you may not need to do anything specific to add this column. If not, then please add these columns to the DB table.
An abstract base class providing soft delete capabilities for projects using @loopback/sequelize package.
All the other workings are similar to SoftCrudRepository, except it's imported using directory import syntax from loopback4-soft-delete/sequelize
.
An abstract base class for all repositories which require soft delete feature. This class is going to be the one which handles soft delete operations and ensures soft deleted entries are not returned in responses, However if there is a need to query soft deleted entries as well, there is an options to achieve that and you can use findAll() in place of find() , findOneIncludeSoftDelete() in place of findOne() and findByIdIncludeSoftDelete() in place of findById(), these will give you the responses including soft deleted entries. This class is a wrapper over DefaultCrudRepository class from @loopback/repository.
Note:
DefaultTransactionSoftCrudRepository
is deprecated in favour of SoftCrudRepositoryMixin and will be removed in future releases.
An abstract base class similar to SoftCrudRepository but with transaction support.
This class is a wrapper over DefaultTransactionalRepository
class from @loopback/repository.
In order to use this extension in your application, please follow below steps.
import {model, property} from '@loopback/repository';
import {SoftDeleteEntity} from 'loopback4-soft-delete';
@model({
name: 'users',
})
export class User extends SoftDeleteEntity {
@property({
type: 'number',
id: true,
})
id?: number;
// .... More properties
}
import {Getter, inject} from '@loopback/core';
import {SoftCrudRepository} from 'loopback4-soft-delete';
import {AuthenticationBindings, IAuthUser} from 'loopback4-authentication';
import {PgdbDataSource} from '../datasources';
import {User, UserRelations} from '../models';
export class UserRepository extends SoftCrudRepository<
User,
typeof User.prototype.id,
UserRelations
> {
constructor(
@inject('datasources.pgdb') dataSource: PgdbDataSource,
@inject.getter(AuthenticationBindings.CURRENT_USER, {optional: true})
protected readonly getCurrentUser: Getter<IAuthUser | undefined>,
) {
super(User, dataSource, getCurrentUser);
}
}
SoftCrudRepositoryMixin
and wrap it around DefaultTransactionalRepository
. Like below:import {Getter, inject} from '@loopback/core';
import {SoftCrudRepository} from 'loopback4-soft-delete';
import {AuthenticationBindings, IAuthUser} from 'loopback4-authentication';
import {PgdbDataSource} from '../datasources';
import {User, UserRelations} from '../models';
export class UserRepository extends SoftCrudRepositoryMixin<
User,
typeof User.prototype.id,
UserRelations
>(DefaultTransactionalRepository) {
constructor(
@inject('datasources.pgdb') dataSource: PgdbDataSource,
@inject.getter(AuthenticationBindings.CURRENT_USER, {optional: true})
protected readonly getCurrentUser: Getter<IAuthUser | undefined>,
) {
super(User, dataSource, getCurrentUser);
}
}
The package also provides the following mixins which can be used for soft delete functionality:
This mixin adds the soft delete properties to your model. The properties added are represented by the IBaseEntity interface:
There is also an option to provide config for the @property
decorator for all these properties.
Usage of SoftDeleteEntityMixin
is as follows:
class Item extends Entity {
@property({
type: 'number',
id: true,
generated: true,
})
id?: number;
@property({
type: 'string',
required: true,
})
name: string;
constructor(data?: Partial<Item>) {
super(data);
}
}
@model()
export class ItemSoftDelete extends SoftDeleteEntityMixin(Item, {
deletedBy: {
name: 'deleted_by_userid',
},
}) {}
The soft deleted properties added by SoftDeleteEntityMixin are represented by IBaseEntity
interface.
interface IBaseEntity {
deleted?: boolean;
deletedOn?: Date;
deletedBy?: string;
}
You can make use of this mixin to get the soft delete functionality for DefaultCrudRepository
or any respository that extends the DefaultCrudRepository
. You need to extend your repository with this mixin and provide DefaultCrudRepository (or any repository that extends DefaultCrudRepository) as input. This means that this same mixin can also be used to provide soft delete functionality for DefaultTransactionSoftCrudRepository (as DefaultTransactionSoftCrudRepository extends DefaultCrudRepository). You will have to inject the getter for IAuthUser in the contructor of your repository.
import {Constructor, Getter, inject} from '@loopback/core';
import {DefaultCrudRepository} from '@loopback/repository';
import {AuthenticationBindings, IAuthUser} from 'loopback4-authentication';
import {SoftCrudRepositoryMixin} from 'loopback4-soft-delete';
import {TestDataSource} from '../datasources';
import {ItemSoftDelete, ItemSoftDeleteRelations} from '../models';
export class ItemRepository extends SoftCrudRepositoryMixin<
ItemSoftDelete,
typeof ItemSoftDelete.prototype.id,
Constructor<
DefaultCrudRepository<
ItemSoftDelete,
typeof ItemSoftDelete.prototype.id,
ItemSoftDeleteRelations
>
>,
ItemSoftDeleteRelations
>(DefaultCrudRepository) {
constructor(
@inject('datasources.test') dataSource: TestDataSource,
@inject.getter(AuthenticationBindings.CURRENT_USER)
public getCurrentUser: Getter<IAuthUser>,
) {
super(ItemSoftDelete, dataSource);
}
}
Following are some additional methods that you can use when working with repositories in your application, either by extending the base repositories provided or by using the SoftCrudRepositoryMixin:
findAll
- This method is similar to find
, but it returns entries including soft deleted ones.deleteHard
- This method is used to perform a hard delete on a specified entity.deleteByIdHard
- This method is used to perform a hard delete of an entity based on the provided ID.findByIdIncludeSoftDelete
- This method is similar to findById
, but it returns the entity even if it is soft deleted.deleteAllHard
- This method is used to perform a hard delete of multiple entities based on a specified condition.findOneIncludeSoftDelete
- This method is similar to findOne
, but it returns a single entity even if it is soft deleted.countAll
- This method is similar to count
, but it returns the total count of all entities including soft deleted ones.Whenever any entry is deleted using deleteById, delete and deleteAll repository methods, it also sets deletedBy column with a value with user id whoever is logged in currently. Hence it uses a Getter function of IUser type. However, if you want to use some other attribute of user model other than id, you can do it by overriding deletedByIdKey. Here is an example.
import {Getter, inject} from '@loopback/core';
import {SoftCrudRepository, IUser} from 'loopback4-soft-delete';
import {AuthenticationBindings} from 'loopback4-authentication';
import {PgdbDataSource} from '../datasources';
import {User, UserRelations} from '../models';
export class UserRepository extends SoftCrudRepository<
User,
typeof User.prototype.id,
UserRelations
> {
constructor(
@inject('datasources.pgdb') dataSource: PgdbDataSource,
@inject.getter(AuthenticationBindings.CURRENT_USER, {optional: true})
protected readonly getCurrentUser: Getter<User | undefined>,
) {
super(User, dataSource, getCurrentUser);
}
}
Model class for custom identifier case. Notice the getIdentifier() method
and IUser
interface implemented.
@model()
class User extends SoftDeleteEntity implements IUser {
@property({
id: true,
})
id: string;
@property()
username: string;
getIdentifier() {
return this.username;
}
constructor(data?: Partial<User>) {
super(data);
}
}
Release v10.0.2 June 4, 2024
Welcome to the June 4, 2024 release of loopback4-soft-delete. There are many updates in this version that we hope you will like, the key highlights include:
:- chore(deps): loopback version updates was commited on June 4, 2024 by Surbhi
loopback version updates
GH-213
loopback version updates
Fixes #213
Please delete options that are not relevant.
functionality
to not work as expected)
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for
your test configuration
[ ] API Documentation in code was updated
Clink on the above links to understand the changes in detail.
FAQs
A loopback-next extension for soft delete feature.
The npm package loopback4-soft-delete receives a total of 1,890 weekly downloads. As such, loopback4-soft-delete popularity was classified as popular.
We found that loopback4-soft-delete demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.