switchy_database 0.5.0

Switchy database package
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123

#![cfg(all(feature = "sqlite-rusqlite", feature = "schema"))]

use std::sync::Arc;
use switchy_database::{
    Database,
    query::{FilterableQuery, qualified_column},
    rusqlite::RusqliteDatabase,
    schema::{Column, DataType},
};

#[tokio::test]
async fn qualified_columns_are_expressions_not_fragments() {
    let connection = rusqlite::Connection::open_in_memory().unwrap();
    let db = RusqliteDatabase::new(vec![Arc::new(switchy_async::sync::Mutex::new(connection))]);
    db.create_table("items")
        .column(Column {
            name: "value".into(),
            data_type: DataType::BigInt,
            nullable: false,
            auto_increment: false,
            default: None,
        })
        .execute(&db)
        .await
        .unwrap();
    db.insert("items")
        .value("value", 7)
        .execute(&db)
        .await
        .unwrap();
    for (bound, expected) in [(6, 1), (7, 0), (8, 0)] {
        assert_eq!(
            db.select("items")
                .where_gt_expression(qualified_column("items", "value"), bound)
                .execute(&db)
                .await
                .unwrap()
                .len(),
            expected
        );
    }
    assert!(
        db.select("items")
            .where_gt_expression(
                qualified_column("items", "value"),
                qualified_column("items", "value")
            )
            .execute(&db)
            .await
            .unwrap()
            .is_empty()
    );
    assert_eq!(
        db.select("items")
            .where_eq("value", qualified_column("items", "value"))
            .execute(&db)
            .await
            .unwrap()
            .len(),
        1
    );
    assert!(
        db.select("items")
            .where_eq("value", qualified_column("items", "value"))
            .where_eq("value", 8)
            .execute(&db)
            .await
            .unwrap()
            .is_empty()
    );
    for value in [
        switchy_database::DatabaseValue::Int64(7),
        switchy_database::DatabaseValue::Null,
    ] {
        let equal = db
            .select("items")
            .where_eq_expression(qualified_column("items", "value"), value.clone())
            .execute(&db)
            .await
            .unwrap();
        let unequal = db
            .select("items")
            .where_not_eq_expression(qualified_column("items", "value"), value)
            .execute(&db)
            .await
            .unwrap();
        assert_eq!(equal.len() + unequal.len(), 1);
    }
    assert_eq!(
        db.select("items")
            .where_eq_expression(
                qualified_column("items", "value"),
                qualified_column("items", "value")
            )
            .execute(&db)
            .await
            .unwrap()
            .len(),
        1
    );
    assert!(
        db.select("items")
            .where_not_eq_expression(
                qualified_column("items", "value"),
                qualified_column("items", "value")
            )
            .execute(&db)
            .await
            .unwrap()
            .is_empty()
    );
    // An unknown qualified column is an error, not a WHERE clause escape.
    for name in ["value OR 1=1 --", "value\" = 7 OR 1=1 --", "items.value"] {
        assert!(
            db.select("items")
                .where_eq("value", qualified_column("items", name))
                .execute(&db)
                .await
                .is_err()
        );
    }
    db.close().await.unwrap();
}