sntl 0.1.1

Compile-time guarded ORM for PostgreSQL — your data's guardian from compile to production
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79

use sntl::core::query::QueryBuilder;
use sntl::core::types::Value;

#[test]
fn dynamic_select() {
    let mut q = QueryBuilder::select_from("users");
    q.column("id");
    q.column("email");
    let (sql, binds) = q.build();
    assert_eq!(sql, "SELECT \"id\", \"email\" FROM \"users\"");
    assert!(binds.is_empty());
}

#[test]
fn dynamic_select_with_where() {
    let mut q = QueryBuilder::select_from("users");
    q.column("id");
    q.where_eq("active", true);
    let (sql, binds) = q.build();
    assert_eq!(sql, "SELECT \"id\" FROM \"users\" WHERE \"active\" = $1");
    assert_eq!(binds.len(), 1);
}

#[test]
fn dynamic_select_multiple_where() {
    let mut q = QueryBuilder::select_from("users");
    q.column("id");
    q.where_eq("active", true);
    q.where_eq("role", "admin");
    let (sql, binds) = q.build();
    assert_eq!(
        sql,
        "SELECT \"id\" FROM \"users\" WHERE \"active\" = $1 AND \"role\" = $2"
    );
    assert_eq!(binds.len(), 2);
}

#[test]
fn dynamic_select_order_limit() {
    let mut q = QueryBuilder::select_from("users");
    q.column("id");
    q.order_by_desc("created_at");
    q.limit(10);
    let (sql, _) = q.build();
    assert_eq!(
        sql,
        "SELECT \"id\" FROM \"users\" ORDER BY \"created_at\" DESC LIMIT 10"
    );
}

#[test]
fn always_parameterized() {
    let mut q = QueryBuilder::select_from("users");
    q.column("id");
    q.where_eq("name", "Robert'); DROP TABLE users;--");
    let (sql, binds) = q.build();
    // Value is in binds, NOT in SQL string
    assert_eq!(sql, "SELECT \"id\" FROM \"users\" WHERE \"name\" = $1");
    assert_eq!(
        binds[0],
        Value::Text("Robert'); DROP TABLE users;--".into())
    );
}

#[test]
fn dynamic_select_star() {
    let q = QueryBuilder::select_from("users");
    let (sql, binds) = q.build();
    assert_eq!(sql, "SELECT * FROM \"users\"");
    assert!(binds.is_empty());
}

#[test]
fn dynamic_select_order_by_asc() {
    let mut q = QueryBuilder::select_from("users");
    q.order_by_asc("name");
    let (sql, _) = q.build();
    assert_eq!(sql, "SELECT * FROM \"users\" ORDER BY \"name\" ASC");
}