Custom API call does not filter all columns

[piere129]

Informations

• Node.js version: 9.9.0
• npm version: 5.6.0
• Strapi version: 3.0.0-alpha.12.2
• Database: MongoDB
• Operating system: Windows 10

What is the current behavior?

I'm calling a custom API route called /client/categories/:code ,that should return the categories column based on the entered ":code" passed. In service:

findCategoriesUser: (params) => {
        var query = Client.findOne({'access_code': params.code});
        query.select({  "_id":0, "avatar_image":0, "id":0, "access_code":0, "createdAt":0, "updatedAt":0, "__v":0, "products":0});
        return query.exec();
    },

The API call works but for some reason, the payload returned still includes the fields "avatar_image", "products" and "id", on top of the categories field:

{
    "categories": [
        "5b0412434af3412c685af19e"
    ],
    "products": null,
    "avatar_image": null,
    "id": null
}

Steps to reproduce the problem

make custom routing for calling the service and set all columns except the 'categories' column to 0.

What is the expected behavior?

API result should not include "avatar_image", "products" and "id"

Suggested solutions

I'm guessing there is a faulty hook somewhere that causes this

[lauriejim]

Hi @piere129 , thank you for this report. Can you check the request log you receive in your mongoDB ?

[piere129]

the api call does a total of 3 requests, 2 of them being user-permission requests which don't seem to be the problem. The third one gives me the following JSON when logging the request:

{
    "op" : "query",
    "ns" : "securitas.client",
    "query" : {
        "find" : "client",
        "filter" : {
            "access_code" : "ABC-123"
        },
        "projection" : {
            "_id" : 0,
            "avatar_image" : 0,
            "access_code" : 0,
            "createdAt" : 0,
            "updatedAt" : 0,
            "__v" : 0,
            "products" : 0,
            "id" : 0
        },
        "limit" : 1,
        "singleBatch" : true,
        "batchSize" : 1,
        "returnKey" : false,
        "showRecordId" : false
    },
    "keysExamined" : 1,
    "docsExamined" : 1,
    "cursorExhausted" : true,
    "keyUpdates" : 0,
    "writeConflicts" : 0,
    "numYield" : 0,
    "locks" : {
        "Global" : {
            "acquireCount" : {
                "r" : NumberLong(2)
            }
        },
        "Database" : {
            "acquireCount" : {
                "r" : NumberLong(1)
            }
        },
        "Collection" : {
            "acquireCount" : {
                "r" : NumberLong(1)
            }
        }
    },
    "nreturned" : 1,
    "responseLength" : 177,
    "protocol" : "op_query",
    "millis" : 0,
    "execStats" : {
        "stage" : "LIMIT",
        "nReturned" : 1,
        "executionTimeMillisEstimate" : 0,
        "works" : 1,
        "advanced" : 1,
        "needTime" : 0,
        "needYield" : 0,
        "saveState" : 0,
        "restoreState" : 0,
        "isEOF" : 1,
        "invalidates" : 0,
        "limitAmount" : 1,
        "inputStage" : {
            "stage" : "PROJECTION",
            "nReturned" : 1,
            "executionTimeMillisEstimate" : 0,
            "works" : 1,
            "advanced" : 1,
            "needTime" : 0,
            "needYield" : 0,
            "saveState" : 0,
            "restoreState" : 0,
            "isEOF" : 0,
            "invalidates" : 0,
            "transformBy" : {
                "_id" : 0,
                "avatar_image" : 0,
                "access_code" : 0,
                "createdAt" : 0,
                "updatedAt" : 0,
                "__v" : 0,
                "products" : 0,
                "id" : 0
            },
            "inputStage" : {
                "stage" : "FETCH",
                "nReturned" : 1,
                "executionTimeMillisEstimate" : 0,
                "works" : 1,
                "advanced" : 1,
                "needTime" : 0,
                "needYield" : 0,
                "saveState" : 0,
                "restoreState" : 0,
                "isEOF" : 0,
                "invalidates" : 0,
                "docsExamined" : 1,
                "alreadyHasObj" : 0,
                "inputStage" : {
                    "stage" : "IXSCAN",
                    "nReturned" : 1,
                    "executionTimeMillisEstimate" : 0,
                    "works" : 1,
                    "advanced" : 1,
                    "needTime" : 0,
                    "needYield" : 0,
                    "saveState" : 0,
                    "restoreState" : 0,
                    "isEOF" : 0,
                    "invalidates" : 0,
                    "keyPattern" : {
                        "access_code" : 1
                    },
                    "indexName" : "access_code_1",
                    "isMultiKey" : false,
                    "isUnique" : true,
                    "isSparse" : false,
                    "isPartial" : false,
                    "indexVersion" : 1,
                    "direction" : "forward",
                    "indexBounds" : {
                        "access_code" : [ 
                            "[\"ABC-123\", \"ABC-123\"]"
                        ]
                    },
                    "keysExamined" : 1,
                    "dupsTested" : 0,
                    "dupsDropped" : 0,
                    "seenInvalidated" : 0
                }
            }
        }
    },
    "ts" : ISODate("2018-05-23T06:42:26.723Z"),
    "client" : "127.0.0.1",
    "allUsers" : [],
    "user" : ""
}

[piere129]

I also just noticed that populating a list of categories, does not include the image details of those filled categories, but instead returns null, is this intentional..? And if so, how can this be worked around?

[lauriejim]

@piere129 I have no time to test it. But the request you did with .select() is something that work with standalone Mongoose instance. Or this issue come from Strapi mongoose intégration.

And if you don't use .select() the data in well get ?

[piere129]

@lauriejim If i don't use the select it just returns all data as if you'd call a default api call. But that's not what I'm trying to achieve. I believe there is a feature in Strapi that adds these variables, after i do my mongoose query, a hook perhaps?

[lauriejim]

Please try. It work on my side

await Client
  .findOne({
    code: "eee"
  }).select({name: 1});