kallesh/BE
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

auth fix 6

Browse Source
This commit is contained in:
Kallesh B S 2025-09-27 18:02:26 +05:30
parent 7d27c9a0ff
commit 1a08f98548
1 changed files with 14 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
src/pg/carnet-application/carnet-application.service.ts
View File

@ -267,36 +267,31 @@ export class CarnetApplicationService {
await client.query('BEGIN');
function escapePostgresString(str: string): string {
function escapePostgresCompositeField(str: string): string {
if (str == null) return '';
return `"${str.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
}
function escapePostgresValue(val: any): string {
if (val == null || val === '') return ''; // NULL or empty becomes empty string
if (typeof val === 'number') return String(val); // pass numbers as-is
return escapePostgresString(String(val)); // quote and escape strings
return str.replace(/\\/g, '\\\\').replace(/"/g, '""');
}
const contactLiterals = body.P_GLTABLE.map(c => {
const fields = [
escapePostgresValue(c.ITEMNO), // integer
escapePostgresValue(c.ITEMDESCRIPTION), // varchar
escapePostgresValue(c.ITEMVALUE), // numeric
escapePostgresValue(c.NOOFPIECES), // integer
escapePostgresValue(c.ITEMWEIGHT), // numeric
escapePostgresValue(c.ITEMWEIGHTUOM), // varchar
escapePostgresValue(c.GOODSORIGINCOUNTRY), // varchar
];
c.ITEMNO ?? '',
c.ITEMDESCRIPTION ?? '',
c.ITEMVALUE ?? '',
c.NOOFPIECES ?? '',
c.ITEMWEIGHT ?? '',
c.ITEMWEIGHTUOM ?? '',
c.GOODSORIGINCOUNTRY ?? '',
].map(field => escapePostgresCompositeField(String(field))).join(',');
return `(${fields.join(',')})`; // composite literal without outer double quotes
return `"(${fields})"`; // ✅ Wrap each composite in double quotes
});
const pgArrayLiteral = `{${contactLiterals.join(',')}}`;
const callProcQuery = `
CALL "CARNETSYS".carnetapplication_pkg_editgenerallistitems($1, $2::"CARNETSYS".gltable[], $3, $4)
`;
`;
await client.query(callProcQuery, [body.P_HEADERID, pgArrayLiteral, body.P_USERID, cursorName]);
// 🚫 DON'T quote the cursor name in FETCH