100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Hein	16cc7d350e	fix(hooks): implement retry logic for hook registry locks ... * Add tryLock and tryRLock methods to manage mutex access * Update Register, Clear, and Execute methods to handle locked state * Log errors when registry operations fail due to locking	2026-08-04 17:55:36 +02:00
Hein	a172c73ab0	fix(handler): update default sort retrieval logic	2026-07-29 10:23:08 +02:00
Hein	ef28959c4d	test(types): add test for ResolveSortColumns with descending order	2026-07-29 10:15:52 +02:00
Hein	7c737afc5a	feat(handler): implement default sort configuration for models ... * Add SetDefaultSort method to configure default sort order * Implement getDefaultSort method to retrieve configured defaults * Update handleRead to apply default sort when none specified * Add tests for default sort functionality	2026-07-29 10:05:24 +02:00
HeinandClaude Sonnet 5	a70e3e02d0	feat(security): complete OAuth2/OIDC spec coverage in OAuthServer ... Add client_secret_basic/client_secret_post client authentication, the client_credentials grant (RFC 6749 §4.4, backed by a synthetic service-account user so it reuses the existing session/introspection/RLS pipeline unchanged), RFC 9728 protected resource metadata, and OIDC discovery + JWKS + id_token/userinfo support. Remove plan_oauth.md, which was only meant as a working handoff doc. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-29 09:45:09 +02:00
Hein	cec8eb5c0f	Merge branch 'main' of https://github.com/bitechdev/ResolveSpec	2026-07-28 17:48:14 +02:00
Hein	06fa3198f2	feat(security): implement OAuth2 client authentication and grants ... * Add client authentication methods and client_credentials grant support * Introduce RFC 9728 Protected Resource Metadata endpoint * Implement OIDC discovery and id_token issuance * Update database schema for new client fields * Add new HTTP handlers for metadata and userinfo	2026-07-28 17:48:09 +02:00
Hein	873e8925d4	fix(handler): ensure target ID is provided for updates	2026-07-24 16:35:22 +02:00
Hein	b23916048a	fix: ordering in before hook	2026-07-24 15:56:23 +02:00
Hein	47708fc87a	fix(security): run RLS-scoping hooks in the same transaction as their queries ... BeforeRead/BeforeCreate hooks (used to set session-scoped RLS GUCs) were firing against the pooled db handle while the actual queries ran as separate calls to the same pool. Under connection pooling these could land on different physical connections, silently bypassing row-level security on creates and reads. handleUpdate already did this correctly; handleRead/handleCreate in both resolvespec and restheadspec now wrap hook execution and queries in a single RunInTransaction call.	2026-07-24 12:40:27 +02:00
Hein	a85e572732	fix(hooks): reset Tx to pooled connection for post-commit hook calls ... BeforeScan (restheadspec handleUpdate) and BeforeResponse (funcspec list/single query handlers) fire after RunInTransaction commits, but hookCtx.Tx still pointed at the now-dead transaction. Any hook that executed a query against Tx (e.g. setUserViaContext) failed with "sql: transaction has already been committed or rolled back".	2026-07-20 13:45:13 +02:00
Hein	598fd687f6	feat(security): add GetUserRef method for opaque user identifiers	2026-07-10 13:47:32 +02:00
Hein	eee83f9dc6	feat(security): add query mode handling for database operations ... * Introduced QueryMode to select between stored procedure and direct SQL execution. * Implemented dbCapability to probe for stored procedure existence. * Added table names configuration for direct SQL operations. * Updated DatabaseTwoFactorProvider to support query mode and table names. * Implemented direct SQL methods mirroring stored procedures for TOTP operations. * Added tests for query mode logic and table names validation.	2026-07-07 15:29:29 +02:00
Hein	8a06aacfb2	fix(cors): update CORS headers handling for requests ... * Reflect request origin for Access-Control-Allow-Origin * Set Vary header for caching based on origin * Allow specific headers from preflight requests * Enable credentials only for specific origins	2026-07-01 12:27:39 +02:00
Hein	705c4f8001	fix(manager): ensure HTTP1 is set when HTTP2 is disabled	2026-06-30 13:54:56 +02:00
Hein	d648614611	feat(config): add PanicHandler to Config for custom recovery	2026-06-30 13:49:51 +02:00
Hein	3f86eb0f06	feat(config): add HTTP2 field to ServerInstanceConfig and align with server.Config	2026-06-30 13:36:06 +02:00
Hein	3dac55cb19	fix: Set http2 based on prop	2026-06-30 13:29:55 +02:00
Hein	bbb2c6d127	feat(server): add HTTP2 support in server configuration	2026-06-30 11:33:31 +02:00
Hein	3fec7b1a90	fix(handler): update Content-Range headers for API response ... * change Content-Range format to include 'items' * add X-Api-Range-From and X-Api-Modelname headers * add X-Api-Range-Etotal header for total filtered items	2026-06-24 10:02:54 +02:00
Hein	910390f62d	fix(headers): correct order of limit and offset parsing	2026-06-24 09:47:14 +02:00
Hein	b9bed67bd7	feat(security): add program user ID and table to user context	2026-06-23 10:18:22 +02:00
Hein	11ef16f75a	fix(sql_helpers): adjust parenthesis nesting depth comment	2026-06-23 09:41:40 +02:00
Hein	48b72a7631	fix(sql_helpers): enhance splitByAND to handle BETWEEN and quotes ... * Add support for BETWEEN-aware AND detection * Ensure AND inside single-quoted strings does not cause splits * Update tests to cover new BETWEEN and quote scenarios	2026-06-23 09:41:27 +02:00
Hein	4c512acf25	test(function_api): add test for x-detailapi header response	2026-06-23 08:53:33 +02:00
Hein	07a402634e	fix(function_api): enhance detail format with table metadata ... * include table name and prefix in response * add field metadata extraction for raw SQL results	2026-06-23 08:50:29 +02:00
Hein	0e8f8925c6	fix(reflection): replace reflect.Ptr with reflect.Pointer ... * Updated all instances of reflect.Ptr to reflect.Pointer for consistency in type checking.	2026-06-22 16:40:07 +02:00
Hein	5a359a160b	fix(handler): update sendFormattedResponse to include table name and model	2026-06-22 16:38:21 +02:00
Hein	a2799fa224	fix(handler): re-fetch records to capture DB-generated values	2026-06-12 16:28:51 +02:00
Hein	1419542650	fix(handler): re-fetch records to capture DB-generated changes	2026-06-12 13:37:07 +02:00
Hein	c120b49529	fix(router): prevent HTML escaping in JSON responses ... fix(sql_helpers): avoid prefix extraction in subqueries	2026-06-08 15:13:58 +02:00
Hein	66348dac97	test(handler): add tests for valid nested request verbs	2026-06-08 09:06:29 +02:00
Hein	a87cd18b1b	fix(handler): validate nested request structure for relations ... * added checks for valid _request values in single and multiple relations * introduced isValidNestedRequest function to encapsulate validation logic fix(crud): expand operation handling for nested CUD * added "add" to insert operations and "modify" to update operations * included "remove" in delete operations	2026-06-08 09:02:29 +02:00
Hein	29449c93d5	fix(test): add tests for asymmetric join column handling	2026-06-07 19:13:59 +02:00
Hein	3b6e5c75be	fix(handler): update foreign key field resolution logic ... * Adjust foreign key field name selection for has-many/has-one relationships * Improve logging to clarify foreign key and child field usage	2026-06-07 14:20:55 +02:00
Hein	549ccb8468	fix(handler): fetch updated records after transaction commits ... * Update selection queries to use model columns * Ensure updated records are fetched and returned in responses	2026-06-05 11:12:04 +02:00
Hein	1af9c76337	fix(handler): fetch updated record after transaction commits	2026-06-04 18:23:18 +02:00
Hein	938a2ef3d9	fix(staticweb): add fallback for extensionless file paths	2026-05-27 18:41:43 +02:00
Hein	69cc3e2839	fix(db): update Returning method to accept multiple columns	2026-05-27 14:11:20 +02:00
Hein	4018af0636	fix(validation): enhance filter logic for column validation ... * adjust handling of "all" filter to consider filtered columns fix(function_api): improve variable substitution in SQL queries * add safeSubstituteVar for context-aware value sanitization	2026-05-27 12:17:31 +02:00
Hein	c4e79d6950	fix(validation): use strings.EqualFold for case-insensitive comparison	2026-05-27 12:07:08 +02:00
Hein	982a0e62ac	fix(validation): add Columns method to retrieve valid column names	2026-05-27 12:06:46 +02:00
Hein	5d459c95a7	fix(headers): reorder import statements for clarity	2026-05-27 11:28:39 +02:00
Hein	e9f7726e43	fix(headers): sort combined parameters before processing	2026-05-27 11:28:22 +02:00
Hein	3d2251317a	fix(headers): remove unused utf8 validation in DecodeParam	2026-05-26 10:31:34 +02:00
Hein	1ce0ab1ab4	fix(validation): improve preload column validation logic	2026-05-21 20:18:01 +02:00
Hein	1f9b230f7f	fix(validation): improve preload column validation logic ... * Use related model's validator for filtering preload columns * Ensure valid columns are checked against the correct validator	2026-05-21 20:16:53 +02:00
Hein	c42c6b28e3	fix(errortracking): update error context handling in Sentry ... * Replace event.Extra with event.Contexts["extra"] for error and message captures. * Consolidate extra context handling in CapturePanic method.	2026-05-21 14:03:01 +02:00
Hein	57e7503389	feat(staticweb): enhance fallback logic for extensionless paths ... * Added support for serving index.html for extensionless paths * Updated isStaticAsset to exclude paths without extensions from static asset checks	2026-05-21 13:30:39 +02:00
Hein	0308644075	feat(auth): add authenticate callback for fallback logic ... * Implement SetAuthenticateCallback in authenticators * Update Authenticate methods to use callback on failure	2026-05-21 11:27:51 +02:00
Hein	e5984f5205	feat(security): add cookie support for login and logout methods ... * Implement LoginWithCookie and LogoutWithCookie in stubAuthenticator, mockAuth, mockSecurityProvider, and MockAuthenticator * Update tests to use cookie-based authentication	2026-05-21 09:51:30 +02:00
Hein	76909ae869	feat(security): add cookie support for login and logout methods ... * Implement LoginWithCookie and LogoutWithCookie in CompositeSecurityProvider * Update Authenticator interface to include cookie methods * Add cookie support in HeaderAuthenticator and JWTAuthenticator	2026-05-21 09:48:46 +02:00
Hein	c90c2984ac	feat(security): add cookie session support to DatabaseAuthenticator ... * Introduce enableCookieSession option for session management * Implement LoginWithCookie and LogoutWithCookie methods * Update Authenticate method to support session token from cookie	2026-05-21 09:14:50 +02:00
Hein	1ab4ae33e7	feat(security): implement ChainAuthenticator for sequential authentication	2026-05-21 08:35:39 +02:00
Hein	905457964c	fix(restheadspec): remove redundant column selection in query	2026-05-21 08:34:09 +02:00
Hein	c42d09238f	fix: better error detail for failed sql	2026-05-20 13:06:26 +02:00
Hein	0647a88aba	fix(restheadspec): qualify primary key and sort columns with table alias	2026-05-20 12:41:16 +02:00
Hein	3d2e11eeed	fix(restheadspec): always respond 200 OK regardless of result count in sendFormattedResponse	2026-05-19 09:46:25 +02:00
Hein	4493bfa40f	feat(reflection): add IsEmptyValue helper; guard CUD ops against missing PK ... Add reflection.IsEmptyValue to detect nil, empty string, and zero numbers. Use it in recursive CUD processing to skip update/delete when the primary key is absent, logging a warning instead of proceeding with an invalid operation.	2026-05-19 09:14:19 +02:00
Hein	b157379ff8	fix(restheadspec): return 200 OK with empty body instead of 204 on zero results ... Frontend clients are sensitive to 204 No Content responses; always return 200 with an empty array/object and rely on X-No-Data-Found header to signal absence of records. Also treat "change" as an alias for "update" in recursive CUD processing.	2026-05-19 08:56:11 +02:00
Hein	52752d9c8b	fix(bun): adjust field alignment in BunSelectQuery struct	2026-05-18 17:12:32 +02:00
Hein	baca5ad29e	fix(bun): add relation alias handling for separate-query preloads ... * implement preloadRelationAlias to rewrite WHERE conditions * update Where method to handle relation alias in queries	2026-05-18 17:12:21 +02:00
Hein	53ab22ce02	fix(nestedCUD): handle error in processChildRelations gracefully	2026-05-18 16:14:24 +02:00
Hein	09a3dc92b9	fix(restheadspec): normalize empty results to objects instead of arrays	2026-05-18 14:37:46 +02:00
Hein	6590cd789a	fix(nestedCUD): re-select rows after insert/update for accurate state ... * Ensure result.Data reflects DB-generated defaults after insert. * Update result.Data with current DB state after update.	2026-05-18 13:10:13 +02:00
Hein	4244e838b1	fix(reflection): enhance GetForeignKeyColumn logic for self-referential models ... * Add support for self-referential models in GetForeignKeyColumn * Update comments for clarity on foreign key resolution strategies * Introduce selfRefItem struct for testing self-referential behavior	2026-05-18 13:03:07 +02:00
Hein	c42fa11c1a	fix(reflection): update GetForeignKeyColumn to return multiple columns ... * Change return type to []string for composite keys * Adjust related logic in injectForeignKeys method * Update tests to validate new behavior for composite foreign keys	2026-05-18 12:39:06 +02:00
Hein	85bb0f7874	fix(funcspec): update meta variable replacement in SQL query	2026-05-18 12:13:06 +02:00
Hein	cd65946191	fix(database): add Scan method to insert query interfaces ... * Implement Scan method for BunInsertQuery, GormInsertQuery, and PgSQLInsertQuery * Update mock implementations to support Scan method * Introduce GetForeignKeyColumn utility for foreign key resolution * Add tests for GetForeignKeyColumn functionality	2026-05-18 12:04:50 +02:00
Hein	cb416d49c4	fix(headers): handle decoding errors in header values ... * return original value if decoding fails * decode base64 strings when appropriate	2026-05-15 16:59:06 +02:00
Hein	cb921f2c5e	fix(websocketspec): add transaction access to HookContext	2026-05-15 14:59:34 +02:00
Hein	1ebe0d7ac3	fix(funcspec): refine filter application logic for SQL queries ... * update filter checks to only consider SELECT list * add test for function parameters not matching filters	2026-05-15 14:28:12 +02:00
Hein	ae9e06c98b	fix(sql_helpers): strip empty RHS conditions from SQL strings ... * Add regex patterns to identify and remove empty comparisons * Implement tests for stripping empty RHS conditions fix(handler): prevent duplicate JOIN aliases from preload * Skip custom SQL JOINs if alias already provided by preload * Split multiple JOIN clauses for individual alias handling	2026-05-15 13:35:24 +02:00
Hein	2ae4d07544	fix(funcspec): remove AllowQueryParamFilters and related logic ... * Simplify SqlQueryOptions by removing AllowQueryParamFilters * Update mergeQueryParams to avoid applying filters for JSON arguments * Add tests for sqlStripStringLiterals and query param handling	2026-05-15 09:25:55 +02:00
Hein	49639b6c19	fix(funcspec): add support for query param filters ... * Introduced AllowQueryParamFilters option in SqlQueryOptions * Implemented applyQueryParamFilters method to handle field filters	2026-05-15 09:07:21 +02:00
Hein	8733176cba	fix(funcspec): enhance quote detection for parameters	2026-05-15 08:26:59 +02:00
Hein	bce27f7ed2	fix: 🐛 Fixed array to slice array resolution on reflection GetRelationType	2026-05-11 14:24:25 +02:00
Hein	987a2a7faf	fix(db): convert slices to PostgreSQL array literals in queries	2026-05-07 14:33:35 +02:00
Hein	fb051b5577	fix(spectypes): correct quoting logic in formatPostgresStringArray	2026-04-30 15:38:21 +02:00
Hein	cc9c4337fd	feat(spectypes): add PostgreSQL array types and parsing functions	2026-04-30 15:37:33 +02:00
Hein	0aaeff63a2	fix(db): guard against non-existent relations in preload	2026-04-20 17:15:33 +02:00
Hein	325769be4e	feat(reflection): add support for nested struct mapping	2026-04-16 13:45:46 +02:00
Hein	aef1f96c10	fix(db): cast columns to text for LIKE/ILIKE queries	2026-04-13 14:05:17 +02:00
Hein	354ed2a8dc	feat(db): add fallback metric entity handling for unknown targets ... * implement fallbackMetricEntityFromQuery for query sanitization * add tests for fallback metric entity and sanitization logic	2026-04-10 16:00:22 +02:00
Hein	dfb63c3328	refactor(db): remove metrics enabling methods from adapters	2026-04-10 14:13:15 +02:00
Hein	e8d0ab28c3	feat(db): add query metrics tracking for database operations ... * Introduced metrics tracking for SELECT, INSERT, UPDATE, and DELETE operations. * Added methods to enable or disable metrics on the PgSQLAdapter. * Created a new query_metrics.go file to handle metrics recording logic. * Updated interfaces and implementations to support schema and entity tracking. * Added tests to verify metrics recording functionality.	2026-04-10 13:51:46 +02:00
Hein	4fc25c60ae	fix(db): correct connection pool assignment in GORM adapter	2026-04-10 11:20:44 +02:00
Hein	16a960d973	feat(db): add reconnect logic for database adapters ... * Implement reconnect functionality in GormAdapter and other database adapters. * Introduce a DBFactory to handle reconnections. * Update health check logic to skip reconnects for transient failures. * Add tests for reconnect behavior in DatabaseAuthenticator.	2026-04-10 11:18:39 +02:00
Hein	2afee9d238	fix(db): handle database reconnection in transactions	2026-04-10 08:42:41 +02:00
Hein	2a2e33da0c	Merge branch 'main' of https://github.com/bitechdev/ResolveSpec into feature-auth-mcp	2026-04-09 15:52:26 +02:00
Hein	134ff85c59	Merge branch 'main' of https://github.com/bitechdev/ResolveSpec into feature-keystore	2026-04-09 15:47:54 +02:00
Hein	bacddc58a6	style(recursive_crud): remove unnecessary blank line	2026-04-09 15:37:13 +02:00
Hein	f1ad83d966	feat(reflection): add JSON to DB column name mapping functions ... * Implement BuildJSONToDBColumnMap for translating JSON keys to DB column names * Enhance GetColumnName to extract column names with priority * Update filterValidFields to utilize new mapping for improved data handling * Fix TestToSnakeCase expected values for consistency	2026-04-09 15:36:52 +02:00
Hein	79a3912f93	fix(db): improve database connection handling and reconnection logic ... * Added a database factory function to allow reconnection when the database is closed. * Implemented mutex locks for safe concurrent access to the database connection. * Updated all database query methods to handle reconnection attempts on closed connections. * Enhanced error handling for database operations across multiple providers.	2026-04-09 09:19:28 +02:00
Hein	a9bf08f58b	feat(security): implement keystore for user authentication keys ... * Add ConfigKeyStore for in-memory key management * Introduce DatabaseKeyStore for PostgreSQL-backed key storage * Create KeyStoreAuthenticator for API key validation * Define SQL procedures for key management in PostgreSQL * Document keystore functionality and usage in KEYSTORE.md	2026-04-07 17:09:17 +02:00
Hein	405a04a192	feat(security): integrate security hooks for access control ... * Add security hooks for per-entity operation rules and row/column-level security. * Implement annotation tool for storing and retrieving freeform annotations. * Enhance handler to support model registration with access rules.	2026-04-07 15:53:12 +02:00
Hein	c1b16d363a	feat(db): add DB method to sqlConnection and mongoConnection	2026-04-01 15:34:09 +02:00
Hein	568df8c6d6	feat(security): add configurable SQL procedure names ... * Introduce SQLNames struct to define stored procedure names. * Update DatabaseAuthenticator, JWTAuthenticator, and other providers to use SQLNames for procedure calls. * Remove hardcoded procedure names for better flexibility and customization. * Implement validation for SQL names to ensure they are valid identifiers. * Add tests for SQLNames functionality and merging behavior.	2026-03-31 14:25:59 +02:00
Hein	aa362c77da	fix(cursor): trim parentheses from sort column names	2026-03-27 15:07:10 +02:00
Hein	1641eaf278	feat(resolvemcp): enhance handler with configuration support ... * Introduce Config struct for BaseURL and BasePath settings * Update handler creation functions to accept configuration * Modify SSEServer to use dynamic base URL detection * Adjust route setup functions to utilize BasePath from config	2026-03-27 13:56:03 +02:00