Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
result-tsk
Advanced tools
ResultJs tool y part of the NodeTskeleton
template project.
NodeTskeleton
is a Clean Architecture
based template project
for NodeJs
using TypeScript
to implement with any web server framework
or even any user interface.
Result
is a tool
that helps us control the flow
of our use cases
and allows us to manage the response
, be it an object
, an array
of objects, a message
or an error
as follows:
import { IResultT, ResultT, Result } from "result-tsk";
export class GetProductUseCase extends BaseUseCase {
constructor(private readonly productQueryService: IProductQueryService) {
super();
}
async execute(idMask: string): Promise<IResultT<ProductDto>> {
// We create the instance of our type of result at the beginning of the use case.
const result = new ResultT<ProductDto>();
// With the resulting object we can control validations within other functions.
if (!this.validator.isValidEntry(result, { productMaskId: idMask })) {
return result;
}
// Ways to use the result:
// A. Common way (Not so clean)
const product: Product = await this.productQueryService.getByMaskId(idMask);
if (!product) {
// The result object helps us with the error response and the code.
result.setError(
this.resources.get(this.resources.keys.PRODUCT_DOES_NOT_EXIST),
ApplicationStatus.NOT_FOUND,
);
return result;
}
// B. Way one: the result object helps us with managing the executing flow
const { value: product } = await result.execute(this.getProduct(idMask));
if (result.hasError()) return result;
// C. Way two: sending the result to the function
const product = await this.getProduct(result, idMask);
if (result.hasError()) return result;
// D. Way three: returning a new result object and using it to set in UseCase result
const { product, resultError } = await this.getProduct(idMask);
if (!product) return result.fromResult(resultError);
// Or
if (resultError?.hasError()) return result.fromResult(resultError);
// Manage the UseCase response
const productDto = this.mapper.mapObject<Product, ProductDto>(product, new ProductDto());
// The result object also helps you with the response data.
result.setData(productDto, ApplicationStatus.SUCCESS);
// And finally you give it back.
return result;
}
// Implementations according the way to manage result
// B. Way one to get the product, without using the result object
private async getProduct(idMask: string): ResultExecutionPromise<Product> {
const product: Product = await this.productQueryService.getByMaskId(idMask);
if (!product) {
return {
error: this.resources.get(this.resources.keys.PRODUCT_DOES_NOT_EXIST),
statusCode: ApplicationStatus.NOT_FOUND,
value: null,
}
}
return { value: product };
}
// C. Way two by using the result object
private async getProduct(result: IResult, idMask: string): Promise<Product> {
const product: Product = await this.productQueryService.getByMaskId(idMask);
if (!product) {
result.setError(this.resources.get(this.resources.keys.PRODUCT_DOES_NOT_EXIST), ApplicationStatus.NOT_FOUND);
}
return product;
}
// D. Way three by using a new instance of result object
private async getProduct(idMask: string): Promise<{ value?: Product, result?: IResult }> {
const product: Product = await this.productQueryService.getByMaskId(idMask);
if (!product) {
return { product, resultError: Result.fromError(this.resources.get(this.resources.keys.PRODUCT_DOES_NOT_EXIST), ApplicationStatus.NOT_FOUND) };
}
return { product };
}
}
So, using the A, B, C or D way to manage the result and call to functions, is a question about a personal decision, you have many options, so, be free.
The result
object may or may not have a type
of response
, it fits your needs, and the result instance without type
cannot be assigned data
.
// Generic result
const resultTyped = new ResultT<Product>();
// Simple result
const resultWithoutType = new Result();
The result object
can help us to support our unit tests
validations as shown below:
it("should return a 400 error if quantity is null or zero", async () => {
// ... some lines after
itemDto.quantity = null;
const result = await addUseCase.execute(userUid, itemDto);
expect(result.success).toBeFalsy();
expect(result.error).toBe(
resources.getWithParams(resources.keys.SOME_PARAMETERS_ARE_MISSING, {
missingParams: "quantity",
}),
);
expect(result.statusCode).toBe(ApplicationStatus.BAD_REQUEST);
// Or you can create a ResultMock builder to do the following
expect(result).toEqual(resultBuilder);
});
The result object
has a method named toResultDto()
, you must call this method to reconstruct the result
that will be returned to the client, normally this must be done in the request handler
(controller).
The recommendation is to build a base controller class
where the request handling is done, something like this:
export default class BaseController {
constructor() {
this.router = Router();
}
router: RouterType;
handleResult(res: Response, result: IResult): void {
if (result.success) {
res
.status(result.statusCode)
.json(result.message ? result.toResultDto() : result.toResultDto().data);
} else {
res.status(result.statusCode).json(result.toResultDto());
}
}
}
// In some controller you will have lines like this:
/*...*/
const textDto: TextDto = req.body;
this.handleResult(res, await getLowestFeelingSentenceUseCase.execute(textDto));
/*...*/
The result obtained from this function is something like this:
// For result with type (ResultT)
{
data: "your response data",
message: "your message",
error: "your error message"
}
// For result without type (Result)
{
message: "your message",
error: "your error message"
}
Only properties that are not NULL or UNDEFINED
will be considered when resolving the result.
In some cases you may need to add metadata as part of the result to use in the adapter layer as part of the response or for any special purposes, so you have the following functions.
// Metadata is a Record<string, any> type like { [key: string]: any }
// Method for add object metadata
setMetadata(headers: Metadata): void
// Method for add a key value pair metadata
addMetadata(key: string, value: string | number): void;
// Get object metadata
getMetadata(): Metadata;
// Verify if has metadata
hasMetadata(): boolean;
It is important to note that the metadata will not be resolved as part of the response when executing the toResultDto
method.
// The result object also helps you with the metadata for use in adapter layer.
result.setData(productDto, this.resultCodes.SUCCESS);
result.addMetadata("keyOne", "valueOne");
result.addMetadata("keyTwo", 100);
// Or set an object
result.setMetadata({ keyOne: "valueOne", keyTwo: 100, keyN: "valueN" });
Go to this Link or click in Try on RunKit button
on the right side of the page.
Use this resource at your own risk.
FAQs
result tool to use with or without NodeTskeleton template project
The npm package result-tsk receives a total of 44 weekly downloads. As such, result-tsk popularity was classified as not popular.
We found that result-tsk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.