Security News
UK Officials Consider Banning Ransomware Payments from Public Entities
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Restle is a lightweight (and unstable) JSON API engine compatible with Ember Data. This library wraps Express and Mongoose. This is alpha software and not recommended for use in production code.
Not all features in the JSON API specification are implemented yet: fields, voluntary inclusion, and some other small things. I'm trying to match the test suite as close as possible with the JSON API spec. Reach out on GitHub for feature requests and any bugs you encounter, thanks!
Disclaimer: Restle enables CORS by default.
$ npm install restle --save
// API: http://localhost:1337/api/
import Restle from 'restle';
const restle = new Restle({
port: 1337,
database: 'mongodb://...',
namespace: '/api',
});
// define schemas
const userSchema = {
name: { attr: 'string' },
birthday: { attr: 'date' },
isMarried: { attr: 'boolean' },
articles: { hasMany: 'article' },
company: { belongsTo: 'company' },
};
const articleSchema = {
title: { attr: 'string' },
body: { attr: 'string' },
createdOn: { attr: 'date' },
};
const companySchema = {
name: { attr: 'string' },
employees: { hasMany: 'user' },
};
// register schemas
restle.register('user', userSchema);
restle.register('article', articleSchema);
restle.register('company', companySchema);
// check out some events
restle.on('ready', () => {
console.log('Database has connected!');
});
// verify the user with a JSON Web Token
// all events except ready have express `req`, `res`, and `next` arguments
import jwt from 'jsonwebtoken';
restle.on('before', (req, res, next) => {
console.log('Intercept all requests to your API.');
const token = req.get('authorization');
const secret = new Buffer(process.env.SECRET_KEY, 'base64');
jwt.verify(token, secret, (err, decoded) => {
// life ain't so good
if (err) {
return res.status(403).json({
isVerified: false,
error: err
});
}
// life is good
next();
});
});
// add a company to a user if there isn't one
restle.on('user.create', (req, res, next) => {
console.log('Fires before creating a user.');
// Mongoose object
const company = restle.model('company');
if (!req.body.data.relationships.company) {
company.find({}, (err, companies) => {
if (err) {
return res.sendStatus(500);
}
req.body.data.relationships.company = {
type: 'company',
id: companies[0]._id;
};
next();
});
}
});
Complete list of events for the user model:
// request
GET /users HTTP/1.1
Accept: application/vnd.api+json
// response
HTTP/1.1 200 OK
Content-Type: application/vnd.api+json
{
"data": [{
"type": "user",
"id": "1",
"attributes": {
"name": "Bob"
},
"links": {
"self": "http://localhost:1337/api/users/1"
},
"relationships": {
"company": {
"links": {
"self": "http://localhost:1337/api/articles/1/relationships/company",
"related": "http://localhost:1337/api/articles/1/company"
},
"data": { "type": "company", "id": "9" }
},
"articles": {
"links": {
"self": "http://localhost:1337/api/users/1/relationships/articles",
"related": "http://localhost:1337/api/users/1/articles"
},
"data": [
{ "type": "article", "id": "5" },
{ "type": "article", "id": "12" }
]
}
}
}],
"included": [{
"type": "company",
"id": "9",
"attributes": {
"name:" "Apple"
},
"links": {
"self": "http://localhost:1337/api/companies/9"
}
}, {
"type": "article",
"id": "5",
"attributes": {
"title": "Awesome title",
"body": "Awesome text"
},
"links": {
"self": "http://localhost:1337/api/articles/5"
}
}, {
"type": "article",
"id": "12",
"attributes": {
"title": "Another title",
"body": "Another text"
},
"links": {
"self": "http://localhost:1337/api/articles/12"
}
}]
}
FAQs
JSON API engine.
The npm package restle receives a total of 0 weekly downloads. As such, restle popularity was classified as not popular.
We found that restle demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.