feat: entry templates + tag autocomplete + slideover push + robustness bundle
- Entry templates: new vault_entries.template column drives a typed
sub-kind ('credit-card', 'ssh-key', 'server', 'recovery-codes'). Card
+ table label off the template, badge reads "credit card" instead of
"note". Templates seed kind=note (no site/password required), use
custom_fields with optional dropdown options (brand, month/year,
protocol). Round-tripped across export/import/duplicate/master-pw
rotation, preserved by partial PUTs via a HasTemplate flag.
- Custom fields: support per-field `options[]` rendering as <select>
(card brand, expiry MM/YYYY, SSH/server protocol).
- Tags: existing-tag autocomplete dropdown under the chip input,
filtered against what's already selected.
- Search history: per-query X for individual delete + 1s debounced
commit (no Enter required).
- Slideover: clicking outside closes again (drag-selection respected
via mousedown origin tracker), Esc closes, X closes. App shell is
pushed left by 420px when the panel is open so the table / pagination
/ sort / search stay visible and interactive.
- Export/import: JSON now round-trips custom_fields, attachments
(decrypted to base64, re-encrypted under current key on restore),
icon_b64, and template. CSV warning lists what's not included.
- Auto-backup: same payload shape as user-driven export.
- Notes: import (JSON + CSV) accepts kind=note with empty site,
preserves title/template/custom_fields. CSV parser detects kind/
template columns.
- Bulk-import response returns `ids[]` parallel to input so the
client can map back to new entry IDs (drives attachment restore).
- Move-to-folder bugs fixed: moveEntryToFolder, batchMoveToFolder,
addTag, batchAddTag were all silently wiping TOTP / custom_fields
/ kind / template via partial PUT. Now re-ship full payload.
- Master-pw rotation: server mints a fresh session token + csrf so
the very next request after rotation no longer ESessionRejects.
Client adopts the new pair. Attachments are re-encrypted client-side
during rotation (GET old → decrypt with old key → encrypt with new
→ PUT). New endpoints: GET /attachments/all, PUT /attachments/:id.
- Duplicate: carries icon_b64 + template + attachments to the copy.
- HandleCreateEntry: accepts icon_b64.
- FireDAC param fix: all blob/icon/custom_fields params use ftMemo +
.Value assignment so SQLite TEXT no longer truncates to 4000 chars
(deepseek's 200+ KB favicon was being wiped on lock/unlock).
- HandleSetEntryIcon cap: 262144 → 524288 chars (base64 of a 256 KB
raw fetch overflows the old cap, fails silently in saveEntryIcon).
- Native save dialog: surfaces server errors instead of swallowing.
- Modals: reauth (export) + backup-password prompt support inline
error display, retry up to 5 attempts, then hard-stop.
- Keyboard cursor (j/k): bootstraps to current page, auto-paginates
when the cursor crosses a page boundary, Enter opens slideover.
- Slideover focuses Title on edit-open so j/k → Enter → type Just
Works.
- TOTP tool: Esc closes the modal.
- App version + launch mode (auto/manual): exposed via bridge,
surfaced in Settings → Account. Autostart launches suppress the
first-time tray balloon.
- Passkey button hidden (Delphi backend stubs WebAuthn at 501).
- TEST_PLAN.md captured for regression coverage.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
r-zakarya
@@ -104,6 +104,7 @@ begin
|
||||
else
|
||||
LObj.AddPair('deleted_at', ISODateTimeField(LQ.FieldByName('deleted_at')));
|
||||
LObj.AddPair('favorite', TJSONNumber.Create(LQ.FieldByName('favorite').AsInteger));
|
||||
LObj.AddPair('pinned', TJSONNumber.Create(LQ.FieldByName('pinned').AsInteger));
|
||||
LObj.AddPair('tags', LQ.FieldByName('tags').AsString);
|
||||
// TOTP fields are NULL when the entry has no 2FA configured. We emit
|
||||
// JSON null instead of '' so the client can distinguish "no TOTP" from
|
||||
@@ -126,6 +127,11 @@ begin
|
||||
var LKindVal := LQ.FieldByName('kind').AsString;
|
||||
if LKindVal = '' then LKindVal := 'login';
|
||||
LObj.AddPair('kind', LKindVal);
|
||||
// Template subtype. Empty = generic; otherwise drives UI labels.
|
||||
if LQ.FieldByName('template').IsNull then
|
||||
LObj.AddPair('template', TJSONNull.Create)
|
||||
else
|
||||
LObj.AddPair('template', LQ.FieldByName('template').AsString);
|
||||
// Custom fields: opaque ciphertext + IV, treated identically to
|
||||
// password / totp_secret. NULL → JSON null so the client can
|
||||
// distinguish "never set" from "empty array stored".
|
||||
@@ -167,7 +173,7 @@ var
|
||||
LUserId, LNewId: Integer;
|
||||
LBody, LObj: TJSONObject;
|
||||
LSite, LTitle, LUser, LFolder, LEnc, LIV, LTags, LNow, LTotpSec, LTotpIv,
|
||||
LKind, LCf, LCfIv: string;
|
||||
LKind, LCf, LCfIv, LIcon, LTemplate: string;
|
||||
LQ: TFDQuery;
|
||||
begin
|
||||
try
|
||||
@@ -192,6 +198,8 @@ begin
|
||||
LKind := LBody.GetValue<string>('kind', 'login');
|
||||
LCf := LBody.GetValue<string>('custom_fields', '');
|
||||
LCfIv := LBody.GetValue<string>('custom_fields_iv', '');
|
||||
LIcon := LBody.GetValue<string>('icon_b64', '');
|
||||
LTemplate:= Trim(LBody.GetValue<string>('template', ''));
|
||||
finally
|
||||
LBody.Free;
|
||||
end;
|
||||
@@ -221,9 +229,9 @@ begin
|
||||
'INSERT INTO vault_entries ' +
|
||||
'(user_id, site, title, username, encrypted_password, iv, encryption_method, ' +
|
||||
' folder, tags, totp_secret, totp_iv, kind, custom_fields, custom_fields_iv,' +
|
||||
' created_at, updated_at, password_changed_at) ' +
|
||||
' icon_b64, template, created_at, updated_at, password_changed_at) ' +
|
||||
'VALUES (:uid, :s, :tt, :u, :e, :i, ''client'', :f, :t, :ts, :tiv, :k, ' +
|
||||
' :cf, :cfiv, :c, :c2, :c)';
|
||||
' :cf, :cfiv, :ic, :tpl, :c, :c2, :c)';
|
||||
LQ.ParamByName('uid').AsInteger := LUserId;
|
||||
LQ.ParamByName('s').AsString := LSite;
|
||||
LQ.ParamByName('tt').AsString := LTitle;
|
||||
@@ -236,23 +244,28 @@ begin
|
||||
// assigned a string and sometimes Clear()ed to NULL — without a
|
||||
// prior typed assignment, .Clear raises "data type unknown" on
|
||||
// SQLite. Declare ftString up front for the optional TOTP fields.
|
||||
LQ.ParamByName('ts').DataType := ftString;
|
||||
LQ.ParamByName('tiv').DataType := ftString;
|
||||
LQ.ParamByName('ts').DataType := ftMemo;
|
||||
LQ.ParamByName('tiv').DataType := ftMemo;
|
||||
// Store empty TOTP fields as NULL so the GET endpoint emits JSON null
|
||||
// rather than '' — keeps client-side "has TOTP?" checks unambiguous.
|
||||
if LTotpSec = '' then
|
||||
LQ.ParamByName('ts').Clear
|
||||
else
|
||||
LQ.ParamByName('ts').AsString := LTotpSec;
|
||||
LQ.ParamByName('ts').Value := LTotpSec;
|
||||
if LTotpIv = '' then
|
||||
LQ.ParamByName('tiv').Clear
|
||||
else
|
||||
LQ.ParamByName('tiv').AsString := LTotpIv;
|
||||
LQ.ParamByName('tiv').Value := LTotpIv;
|
||||
LQ.ParamByName('k').AsString := LKind;
|
||||
LQ.ParamByName('cf').DataType := ftString;
|
||||
LQ.ParamByName('cfiv').DataType := ftString;
|
||||
if LCf = '' then LQ.ParamByName('cf').Clear else LQ.ParamByName('cf').AsString := LCf;
|
||||
if LCfIv = '' then LQ.ParamByName('cfiv').Clear else LQ.ParamByName('cfiv').AsString := LCfIv;
|
||||
LQ.ParamByName('cf').DataType := ftMemo;
|
||||
LQ.ParamByName('cfiv').DataType := ftMemo;
|
||||
if LCf = '' then LQ.ParamByName('cf').Clear else LQ.ParamByName('cf').Value := LCf;
|
||||
if LCfIv = '' then LQ.ParamByName('cfiv').Clear else LQ.ParamByName('cfiv').Value := LCfIv;
|
||||
LQ.ParamByName('ic').DataType := ftMemo;
|
||||
if LIcon = '' then LQ.ParamByName('ic').Clear else LQ.ParamByName('ic').Value := LIcon;
|
||||
LQ.ParamByName('tpl').DataType := ftString;
|
||||
if LTemplate = '' then LQ.ParamByName('tpl').Clear
|
||||
else LQ.ParamByName('tpl').AsString := LTemplate;
|
||||
LQ.ParamByName('c').AsString := LNow;
|
||||
LQ.ParamByName('c2').AsString := LNow;
|
||||
LQ.ExecSQL;
|
||||
@@ -284,7 +297,8 @@ var
|
||||
LUserId, LId: Integer;
|
||||
LBody: TJSONObject;
|
||||
LSite, LTitle, LUser, LFolder, LEnc, LIV, LTags, LNow, LTotpSec, LTotpIv,
|
||||
LKind, LCf, LCfIv: string;
|
||||
LKind, LCf, LCfIv, LTemplate: string;
|
||||
LHasTemplate: Boolean;
|
||||
LQ: TFDQuery;
|
||||
begin
|
||||
try
|
||||
@@ -315,6 +329,10 @@ begin
|
||||
LKind := LBody.GetValue<string>('kind', 'login');
|
||||
LCf := LBody.GetValue<string>('custom_fields', '');
|
||||
LCfIv := LBody.GetValue<string>('custom_fields_iv', '');
|
||||
// Template is only updated when the caller explicitly sends it —
|
||||
// partial PUTs (drag-to-folder) must not wipe it.
|
||||
LHasTemplate := LBody.GetValue('template') <> nil;
|
||||
LTemplate := Trim(LBody.GetValue<string>('template', ''));
|
||||
finally
|
||||
LBody.Free;
|
||||
end;
|
||||
@@ -365,6 +383,10 @@ begin
|
||||
|
||||
// password_changed_at fires only when the ciphertext actually
|
||||
// changes — same conditional used above for history insertion.
|
||||
// template column is updated only when the caller sent it, so a
|
||||
// partial PUT (drag-to-folder, move-to-folder) doesn't wipe it.
|
||||
var LTemplateSet := '';
|
||||
if LHasTemplate then LTemplateSet := ', template=:tpl';
|
||||
LQ.SQL.Text :=
|
||||
'UPDATE vault_entries ' +
|
||||
'SET site=:s, title=:tt, username=:u, encrypted_password=:e, iv=:i, ' +
|
||||
@@ -372,7 +394,8 @@ begin
|
||||
' custom_fields=:cf, custom_fields_iv=:cfiv, ' +
|
||||
' updated_at=:c, ' +
|
||||
' password_changed_at = CASE WHEN encrypted_password <> :e ' +
|
||||
' THEN :c ELSE password_changed_at END ' +
|
||||
' THEN :c ELSE password_changed_at END' +
|
||||
LTemplateSet + ' ' +
|
||||
'WHERE id=:id AND user_id=:uid';
|
||||
LQ.ParamByName('s').AsString := LSite;
|
||||
LQ.ParamByName('tt').AsString := LTitle;
|
||||
@@ -383,23 +406,29 @@ begin
|
||||
LQ.ParamByName('t').AsString := LTags;
|
||||
// Declare TOTP param types so .Clear works on first use (FireDAC
|
||||
// needs an inferred or explicit DataType before NULL binding).
|
||||
LQ.ParamByName('ts').DataType := ftString;
|
||||
LQ.ParamByName('tiv').DataType := ftString;
|
||||
LQ.ParamByName('ts').DataType := ftMemo;
|
||||
LQ.ParamByName('tiv').DataType := ftMemo;
|
||||
// Clearing TOTP (user removed 2FA from this entry) is signaled by an
|
||||
// empty string in the request → store NULL in the DB.
|
||||
if LTotpSec = '' then
|
||||
LQ.ParamByName('ts').Clear
|
||||
else
|
||||
LQ.ParamByName('ts').AsString := LTotpSec;
|
||||
LQ.ParamByName('ts').Value := LTotpSec;
|
||||
if LTotpIv = '' then
|
||||
LQ.ParamByName('tiv').Clear
|
||||
else
|
||||
LQ.ParamByName('tiv').AsString := LTotpIv;
|
||||
LQ.ParamByName('tiv').Value := LTotpIv;
|
||||
LQ.ParamByName('k').AsString := LKind;
|
||||
LQ.ParamByName('cf').DataType := ftString;
|
||||
LQ.ParamByName('cfiv').DataType := ftString;
|
||||
if LCf = '' then LQ.ParamByName('cf').Clear else LQ.ParamByName('cf').AsString := LCf;
|
||||
if LCfIv = '' then LQ.ParamByName('cfiv').Clear else LQ.ParamByName('cfiv').AsString := LCfIv;
|
||||
LQ.ParamByName('cf').DataType := ftMemo;
|
||||
LQ.ParamByName('cfiv').DataType := ftMemo;
|
||||
if LCf = '' then LQ.ParamByName('cf').Clear else LQ.ParamByName('cf').Value := LCf;
|
||||
if LCfIv = '' then LQ.ParamByName('cfiv').Clear else LQ.ParamByName('cfiv').Value := LCfIv;
|
||||
if LHasTemplate then
|
||||
begin
|
||||
LQ.ParamByName('tpl').DataType := ftString;
|
||||
if LTemplate = '' then LQ.ParamByName('tpl').Clear
|
||||
else LQ.ParamByName('tpl').AsString := LTemplate;
|
||||
end;
|
||||
LQ.ParamByName('c').AsString := LNow;
|
||||
LQ.ParamByName('id').AsInteger := LId;
|
||||
LQ.ParamByName('uid').AsInteger := LUserId;
|
||||
@@ -558,6 +587,51 @@ begin
|
||||
TJSONHelper.SendOK(AResponse, 'Toggled');
|
||||
end;
|
||||
|
||||
// ===== POST /entries/{id}/pin ================================================
|
||||
// Same shape as /favorite: flip the pinned bit, no body required.
|
||||
procedure HandleTogglePin(ARequest: TIdHTTPRequestInfo;
|
||||
AResponse: TIdHTTPResponseInfo; const AParams: TArray<string>);
|
||||
var
|
||||
LUserId, LId: Integer;
|
||||
LQ: TFDQuery;
|
||||
begin
|
||||
try
|
||||
LUserId := Authenticate(ARequest, AResponse);
|
||||
RequireCSRF(ARequest, AResponse, LUserId);
|
||||
except
|
||||
on ESessionRejected do Exit;
|
||||
end;
|
||||
|
||||
LId := StrToIntDef(AParams[0], 0);
|
||||
if LId = 0 then
|
||||
begin
|
||||
TJSONHelper.SendError(AResponse, 400, 'Invalid id');
|
||||
Exit;
|
||||
end;
|
||||
|
||||
DB.Lock;
|
||||
try
|
||||
LQ := TFDQuery.Create(nil);
|
||||
try
|
||||
LQ.Connection := DB.Connection;
|
||||
LQ.SQL.Text :=
|
||||
'UPDATE vault_entries ' +
|
||||
'SET pinned = CASE WHEN pinned=1 THEN 0 ELSE 1 END ' +
|
||||
'WHERE id=:id AND user_id=:uid';
|
||||
LQ.ParamByName('id').AsInteger := LId;
|
||||
LQ.ParamByName('uid').AsInteger := LUserId;
|
||||
LQ.ExecSQL;
|
||||
finally
|
||||
LQ.Free;
|
||||
end;
|
||||
finally
|
||||
DB.Unlock;
|
||||
end;
|
||||
|
||||
LogAudit(LUserId, 'toggle_pin', GetClientIP(ARequest));
|
||||
TJSONHelper.SendOK(AResponse, 'Toggled');
|
||||
end;
|
||||
|
||||
// ===== POST /entries/{id}/touch ==============================================
|
||||
// Bumps accessed_at. Called from JS on copy / slideover-open so the sidebar
|
||||
// "Recent" view can show what the user actually uses. Auth-only (no CSRF
|
||||
@@ -637,12 +711,12 @@ begin
|
||||
LBody.Free;
|
||||
end;
|
||||
|
||||
// Soft cap to prevent a misbehaving fetcher from ballooning the DB.
|
||||
// 32x32 PNG favicons rarely exceed 4 KB; 64 KB leaves room for SVG / 64x64.
|
||||
// Soft cap. Most favicons are < 10 KB; bumped to 256 KB because DDG
|
||||
// occasionally serves the brand's full-resolution PNG (deepseek.com
|
||||
// came back at 200+ KB) and we want those to be cacheable too.
|
||||
if Length(LIcon) > 262144 then
|
||||
// Soft cap on the SERIALISED data URI ('data:image/...;base64,...'). The
|
||||
// favicon fetcher allows 256 KB raw, which becomes ~350 KB after base64
|
||||
// + prefix overhead. Cap at 512 KB chars so a max-raw fetch + a bit of
|
||||
// headroom still passes (the silent 413 here was deleting deepseek's
|
||||
// 200+ KB icon on lock/unlock since saveEntryIcon swallows the error).
|
||||
if Length(LIcon) > 524288 then
|
||||
begin
|
||||
TJSONHelper.SendError(AResponse, 413, 'Icon too large');
|
||||
Exit;
|
||||
@@ -658,7 +732,7 @@ begin
|
||||
'WHERE id=:id AND user_id=:uid';
|
||||
LQ.ParamByName('ic').DataType := ftMemo; // long text → ftMemo on SQLite
|
||||
if LIcon = '' then LQ.ParamByName('ic').Clear
|
||||
else LQ.ParamByName('ic').AsString := LIcon;
|
||||
else LQ.ParamByName('ic').Value := LIcon;
|
||||
LQ.ParamByName('id').AsInteger := LId;
|
||||
LQ.ParamByName('uid').AsInteger := LUserId;
|
||||
LQ.ExecSQL;
|
||||
@@ -862,10 +936,11 @@ end;
|
||||
procedure HandleBulkImport(ARequest: TIdHTTPRequestInfo;
|
||||
AResponse: TIdHTTPResponseInfo; const AParams: TArray<string>);
|
||||
var
|
||||
LUserId, I, LImported: Integer;
|
||||
LUserId, I, LImported, LNewId: Integer;
|
||||
LBody, LObj, LEntry: TJSONObject;
|
||||
LArr: TJSONArray;
|
||||
LSite, LTitle, LUser, LFolder, LEnc, LIV, LTags, LTotpSec, LTotpIv, LNow: string;
|
||||
LArr, LIds: TJSONArray;
|
||||
LSite, LTitle, LUser, LFolder, LEnc, LIV, LTags, LTotpSec, LTotpIv, LNow,
|
||||
LKind, LCf, LCfIv, LIcon, LTemplate: string;
|
||||
LQ: TFDQuery;
|
||||
begin
|
||||
try
|
||||
@@ -894,6 +969,10 @@ begin
|
||||
|
||||
LNow := FormatDateTime('yyyy-mm-dd hh:nn:ss', Now);
|
||||
LImported := 0;
|
||||
// Track newly-inserted IDs in input order so the client can upload
|
||||
// attachments to the right entry afterwards. Skipped rows emit -1
|
||||
// so the array remains positionally aligned with the input.
|
||||
LIds := TJSONArray.Create;
|
||||
|
||||
DB.Lock;
|
||||
try
|
||||
@@ -905,14 +984,24 @@ begin
|
||||
LQ.SQL.Text :=
|
||||
'INSERT INTO vault_entries ' +
|
||||
'(user_id, site, title, username, encrypted_password, iv, encryption_method, ' +
|
||||
' folder, tags, totp_secret, totp_iv, created_at, updated_at) ' +
|
||||
'VALUES (:uid, :s, :tt, :u, :e, :i, ''client'', :f, :t, :ts, :tiv, :c, :c2)';
|
||||
// Declare optional TOTP param types ONCE — the prepared statement
|
||||
// is reused across every imported entry, and FireDAC needs the
|
||||
' folder, tags, totp_secret, totp_iv, kind, custom_fields, custom_fields_iv,' +
|
||||
' icon_b64, template, created_at, updated_at) ' +
|
||||
'VALUES (:uid, :s, :tt, :u, :e, :i, ''client'', :f, :t, :ts, :tiv, :k, ' +
|
||||
' :cf, :cfiv, :ic, :tpl, :c, :c2)';
|
||||
// Declare optional param types ONCE — the prepared statement is
|
||||
// reused across every imported entry, and FireDAC needs the
|
||||
// type set before the first .Clear call would otherwise fail
|
||||
// for a row without TOTP.
|
||||
LQ.ParamByName('ts').DataType := ftString;
|
||||
LQ.ParamByName('tiv').DataType := ftString;
|
||||
// for a row that omits the field. ftMemo (unlimited TEXT) is
|
||||
// mandatory for icon_b64 + custom_fields which often exceed
|
||||
// FireDAC's default ftString cap (~4000 chars) — a 256 KB
|
||||
// icon would otherwise be silently truncated to nothing on
|
||||
// the next read.
|
||||
LQ.ParamByName('ts').DataType := ftMemo;
|
||||
LQ.ParamByName('tiv').DataType := ftMemo;
|
||||
LQ.ParamByName('cf').DataType := ftMemo;
|
||||
LQ.ParamByName('cfiv').DataType := ftMemo;
|
||||
LQ.ParamByName('ic').DataType := ftMemo;
|
||||
LQ.ParamByName('tpl').DataType := ftString;
|
||||
|
||||
for I := 0 to LArr.Count - 1 do
|
||||
begin
|
||||
@@ -926,11 +1015,27 @@ begin
|
||||
LTags := Trim(LEntry.GetValue<string>('tags', ''));
|
||||
LTotpSec := LEntry.GetValue<string>('totp_secret', '');
|
||||
LTotpIv := LEntry.GetValue<string>('totp_iv', '');
|
||||
LKind := LEntry.GetValue<string>('kind', 'login');
|
||||
if (LKind <> 'login') and (LKind <> 'note') then LKind := 'login';
|
||||
LCf := LEntry.GetValue<string>('custom_fields', '');
|
||||
LCfIv := LEntry.GetValue<string>('custom_fields_iv', '');
|
||||
LIcon := LEntry.GetValue<string>('icon_b64', '');
|
||||
LTemplate:= Trim(LEntry.GetValue<string>('template', ''));
|
||||
|
||||
// Skip silently if a row is missing the minimum required fields
|
||||
// (site + ciphertext). Better than failing the whole batch on
|
||||
// one bad row when the user is importing 500+ entries.
|
||||
if (LSite = '') or (LEnc = '') or (LIV = '') then Continue;
|
||||
// Ciphertext is always required. Site is required only for
|
||||
// logins — notes legitimately have no site (their body lives
|
||||
// inside the encrypted blob). Skip silently rather than fail
|
||||
// the whole batch on one bad row.
|
||||
if (LEnc = '') or (LIV = '') then
|
||||
begin
|
||||
LIds.AddElement(TJSONNumber.Create(-1));
|
||||
Continue;
|
||||
end;
|
||||
if (LKind = 'login') and (LSite = '') then
|
||||
begin
|
||||
LIds.AddElement(TJSONNumber.Create(-1));
|
||||
Continue;
|
||||
end;
|
||||
|
||||
LQ.ParamByName('uid').AsInteger := LUserId;
|
||||
LQ.ParamByName('s').AsString := LSite;
|
||||
@@ -941,12 +1046,20 @@ begin
|
||||
LQ.ParamByName('f').AsString := LFolder;
|
||||
LQ.ParamByName('t').AsString := LTags;
|
||||
if LTotpSec = '' then LQ.ParamByName('ts').Clear
|
||||
else LQ.ParamByName('ts').AsString := LTotpSec;
|
||||
else LQ.ParamByName('ts').Value := LTotpSec;
|
||||
if LTotpIv = '' then LQ.ParamByName('tiv').Clear
|
||||
else LQ.ParamByName('tiv').AsString := LTotpIv;
|
||||
else LQ.ParamByName('tiv').Value := LTotpIv;
|
||||
LQ.ParamByName('k').AsString := LKind;
|
||||
if LCf = '' then LQ.ParamByName('cf').Clear else LQ.ParamByName('cf').Value := LCf;
|
||||
if LCfIv = '' then LQ.ParamByName('cfiv').Clear else LQ.ParamByName('cfiv').Value := LCfIv;
|
||||
if LIcon = '' then LQ.ParamByName('ic').Clear else LQ.ParamByName('ic').Value := LIcon;
|
||||
if LTemplate = '' then LQ.ParamByName('tpl').Clear
|
||||
else LQ.ParamByName('tpl').AsString := LTemplate;
|
||||
LQ.ParamByName('c').AsString := LNow;
|
||||
LQ.ParamByName('c2').AsString := LNow;
|
||||
LQ.ExecSQL;
|
||||
LNewId := DB.Connection.GetLastAutoGenValue('vault_entries');
|
||||
LIds.AddElement(TJSONNumber.Create(LNewId));
|
||||
Inc(LImported);
|
||||
end;
|
||||
finally
|
||||
@@ -967,6 +1080,7 @@ begin
|
||||
LogAudit(LUserId, Format('bulk_import %d entries', [LImported]), GetClientIP(ARequest));
|
||||
LObj := TJSONObject.Create;
|
||||
LObj.AddPair('imported', TJSONNumber.Create(LImported));
|
||||
LObj.AddPair('ids', LIds);
|
||||
TJSONHelper.SendJSON(AResponse, LObj);
|
||||
end;
|
||||
|
||||
@@ -1026,6 +1140,7 @@ initialization
|
||||
Router.Register('POST', '/entries/(\d+)/restore', HandleRestoreEntry);
|
||||
Router.Register('POST', '/entries/(\d+)/favorite', HandleToggleFavorite);
|
||||
Router.Register('POST', '/entries/(\d+)/touch', HandleTouchEntry);
|
||||
Router.Register('POST', '/entries/(\d+)/pin', HandleTogglePin);
|
||||
Router.Register('POST', '/entries/(\d+)/icon', HandleSetEntryIcon);
|
||||
Router.Register('GET', '/entries/(\d+)/history', HandleGetEntryHistory);
|
||||
Router.Register('GET', '/entries/count', HandleEntriesCount);
|
||||
|
||||
Reference in New Issue
Block a user