mirror of
https://github.com/zhigang1992/deployd.git
synced 2026-05-23 04:47:26 +08:00
457 lines
14 KiB
HTML
457 lines
14 KiB
HTML
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<title>Deployd Documentation</title>
|
|
<link href="css/bootstrap.min.css" rel="stylesheet" type="text/css" />
|
|
<link href="css/style.css" rel="stylesheet" type="text/css" />
|
|
<script src="http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js"></script>
|
|
<link href='http://fonts.googleapis.com/css?family=Bitter:400,700,400italic' rel='stylesheet' type='text/css'>
|
|
</head>
|
|
<body>
|
|
<div class="container-fluid">
|
|
<div class="row-fluid">
|
|
<div class="span3" style="height: 1px;">
|
|
</div><!--/span-->
|
|
<div id="side">
|
|
<div class="well sidebar-nav">
|
|
<h4 style="margin-left: 17px; margin-bottom: 10px;">Deployd</h4>
|
|
<ul class="nav nav-list">
|
|
|
|
</ul>
|
|
</div><!--/.well -->
|
|
</div><!-- /#side -->
|
|
<div class="span9" style="max-width: 1000px;"><h1>Deployd</h1>
|
|
|
|
<p><strong><em>Deployd</strong> lets you quickly build secure, dynamic JavaScript and Mobile apps without writing backend code. Instead you boot a simple server that is very good at securely proxying requests to a storage layer such as a database. This enables your un-trusted client code to do things it never could before, such as write directly to a database without a custom application running in-between.</em></p>
|
|
|
|
<p>Instead of reinventing a protocol, deployd embraces HTTP. This means that any HTTP client, such as a JavaScript app, a mobile app, or even another server, can securely interact with your data without having to setup a web server and write a custom backend.</p>
|
|
|
|
<h2>Quick start</h2>
|
|
|
|
<p>To install deployd locally you must have <code>npm</code> and a running instance of mongodb.</p>
|
|
|
|
<pre><code>[sudo] npm install deployd -g
|
|
</code></pre>
|
|
|
|
<p>First you'll want to generate an authentication key.</p>
|
|
|
|
<pre><code>dpd key
|
|
</code></pre>
|
|
|
|
<p>Copy the key for use in the dashboard. Then start the server.</p>
|
|
|
|
<pre><code>dpd listen
|
|
</code></pre>
|
|
|
|
<p>You can view the dashboard at <code>http://localhost:2403/__dashboard/</code>. It will prompt you for your auth key.</p>
|
|
|
|
<h2>How does it work?</h2>
|
|
|
|
<h3>Resources</h3>
|
|
|
|
<p>When deployd receives an HTTP request, it checks the first part of the URL to see which resource should handle the request:</p>
|
|
|
|
<ul>
|
|
<li><strong>/todos</strong>/12345 - handled by the <strong>/todos</strong> resource</li>
|
|
<li><strong>/img</strong>/bg.jpg - handled by the <strong>/img</strong> resource</li>
|
|
<li><strong>/</strong>index.html - handled by the <strong>/</strong> resource</li>
|
|
</ul>
|
|
|
|
<p>Once deployd knows what resource is being requested, it will validate the input, execute any event handlers you have defined and either return or store the result. You can create and configure resources and event handlers in the dashboard.</p>
|
|
|
|
<h2>REST API</h2>
|
|
|
|
<p>REST is a web service design pattern that conforms closely to HTTP itself. In Deployd, HTTP methods or verbs have meaning:</p>
|
|
|
|
<ul>
|
|
<li><strong>GET</strong> - Load a resource without modifying it (this is a browser's default method)</li>
|
|
<li><strong>POST</strong> - Create a resource, or send data to a special that doesn't fit within these methods</li>
|
|
<li><strong>PUT</strong> - Update an existing resource</li>
|
|
<li><strong>DELETE</strong> - Destroy an existing resource</li>
|
|
</ul>
|
|
|
|
<p>In Deployd, HTTP response codes are also important:</p>
|
|
|
|
<ul>
|
|
<li><strong>200</strong> OK - The request succeeded</li>
|
|
<li><strong>204</strong> No Content - The request succeeded, but there is no content to return (for example, after a deletion, or requesting an empty list)</li>
|
|
<li><strong>400</strong> Bad Request - The request did not pass validation. Change the parameters and try again.</li>
|
|
<li><strong>401</strong> Unauthorized - The request's session does not have permission to access that resource. </li>
|
|
<li><strong>404</strong> Not Found - That URL does not reference an existing resource</li>
|
|
<li><strong>500</strong> Internal Server Error - Deployd has failed to process the request due to an unexpected error.</li>
|
|
</ul>
|
|
|
|
<h2>Cross-Origin AJAX</h2>
|
|
|
|
<p>Deployd is configured so that you can easily develop a web app locally on your computer. It will send Access-Control-Allow-Origin HTTP headers if a request is coming from localhost or your filesystem, which will allow modern web browsers to use AJAX normally. It will not send these headers for any other domain.</p>
|
|
|
|
<hr />
|
|
<h1>Collection Resource</h1>
|
|
|
|
<p>A Collection resource allows client apps to save and query data.</p>
|
|
|
|
<h2>Setting up a collection</h2>
|
|
|
|
<p>After creating a Collection resource in the dashboard, you can set up the schema that will automatically validate data sent to the resource url over HTTP. You can configure this schema in the dashboard.</p>
|
|
|
|
<p>The grid view below the property list allows you to edit the Collection manually.</p>
|
|
|
|
<h2>Property types</h2>
|
|
|
|
<p>You can currently use the following property types:</p>
|
|
|
|
<ul>
|
|
<li><strong>String</strong> - Arbritrary text data</li>
|
|
<li><strong>Number</strong> - Numeric value, supports floating points</li>
|
|
<li><strong>Boolean</strong> - True or false</li>
|
|
<li><strong>Date</strong> - A specific point in time</li>
|
|
</ul>
|
|
|
|
<h2>Formats</h2>
|
|
|
|
<p>When POSTing or PUTing data to a resource <code>/path</code>, you must format the request body as a JSON string and pass the header "Content-Type: application/json".</p>
|
|
|
|
<h2>Saving data</h2>
|
|
|
|
<p>To save data, send a POST request to the root of the Collection:</p>
|
|
|
|
<pre><code>POST /people
|
|
Content-Type: application/json
|
|
{
|
|
"age": 23,
|
|
"firstName": "Joe",
|
|
"lastName": "Smith"
|
|
}
|
|
</code></pre>
|
|
|
|
<p>The server will respond with the object, which will have a new <code>_id</code> property. </p>
|
|
|
|
<pre><code>200 OK
|
|
{
|
|
"_id": "4f71fc7c2ba744786f000001",
|
|
"age": 23,
|
|
"firstName": "Joe",
|
|
"lastName": "Smith"
|
|
}
|
|
</code></pre>
|
|
|
|
<p>This <code>_id</code> is used to find the object's URL (i.e. <code>/people/4f71fc7c2ba744786f000001</code>)</p>
|
|
|
|
<h2>Listing data</h2>
|
|
|
|
<p>A GET request to the root of the Collection will return an array of objects in the collection:</p>
|
|
|
|
<pre><code>GET /people
|
|
|
|
200 OK
|
|
[
|
|
{
|
|
"_id": "4f71fc7c2ba744786f000001",
|
|
"age": 23,
|
|
"firstName": "Joe",
|
|
"lastName": "Smith"
|
|
},
|
|
{
|
|
"_id": "4f71fe8b2ba744786f000002",
|
|
"age": 36,
|
|
"firstName": "John",
|
|
"lastName": "Doe"
|
|
}
|
|
]
|
|
</code></pre>
|
|
|
|
<h2>Retrieving a specific object</h2>
|
|
|
|
<p>A GET request at an object's URL will return the properties of that object:</p>
|
|
|
|
<pre><code>GET /people/4f71fc7c2ba744786f000001
|
|
|
|
200 OK
|
|
{
|
|
"_id": "4f71fc7c2ba744786f000001",
|
|
"age": 23,
|
|
"firstName": "Joe",
|
|
"lastName": "Smith"
|
|
}
|
|
</code></pre>
|
|
|
|
<h2>Updating an object</h2>
|
|
|
|
<p>A PUT request at an object's URL will update the object. You must include all properties except for <code>_id</code>.</p>
|
|
|
|
<pre><code>PUT /people/4f71fc7c2ba744786f000001
|
|
Content-Type: application/json
|
|
{
|
|
"age": 24,
|
|
"firstName": "Fred",
|
|
"lastName": "Smith"
|
|
}
|
|
</code></pre>
|
|
|
|
<p>The server will respond with the entire object:</p>
|
|
|
|
<pre><code>200 OK
|
|
{
|
|
"_id": "4f71fc7c2ba744786f000001",
|
|
"age": 24,
|
|
"firstName": "Fred",
|
|
"lastName": "Smith"
|
|
}
|
|
</code></pre>
|
|
|
|
<h2>Deleting an object</h2>
|
|
|
|
<p>A DELETE request at an object's URL will permanently remove that object from the collection:</p>
|
|
|
|
<pre><code>DELETE /people/4f71fc7c2ba744786f000001
|
|
|
|
204 No Content
|
|
</code></pre>
|
|
|
|
<h2>Filtering results</h2>
|
|
|
|
<p>You can add querystring parameters to a GET request at the root to filter the results by properties specified:</p>
|
|
|
|
<pre><code>GET /people?firstName=Joe&lastName=Smith
|
|
</code></pre>
|
|
|
|
<p><strong>NOTE</strong>: This currently only works for String properties.</p>
|
|
|
|
<h2>Advanced querying</h2>
|
|
|
|
<p>If you need to query additional types of properties, pass a JSON object as the <code>q</code> parameter with the properties you wish to filter:</p>
|
|
|
|
<pre><code>GET /people?q={
|
|
"age": 23
|
|
}
|
|
</code></pre>
|
|
|
|
<p>The <code>q</code> parameter supports <a href="http://www.mongodb.org/display/DOCS/Advanced+Queries">MongoDB's query language</a> for particularly advanced queries. Note that Collections do not currently support embedded documents or arrays.</p>
|
|
|
|
<pre><code>GET /people?q={
|
|
"$orderby": { "age": 1 },
|
|
"name": {
|
|
"$regex": "^j"
|
|
"$options": "i",
|
|
}
|
|
}
|
|
</code></pre>
|
|
|
|
<h1>Collection Event Handlers</h1>
|
|
|
|
<p>You can attach micro-scripts to events to add logic and validation to your objects. Collections currently support the following events:</p>
|
|
|
|
<ul>
|
|
<li><strong>On Get</strong> - called when data is read</li>
|
|
<li><strong>On Post</strong> - called when data is created</li>
|
|
<li><strong>On Put</strong> - called when data is updated</li>
|
|
<li><strong>On Delete</strong> - called when data is destroyed</li>
|
|
</ul>
|
|
|
|
<h2>Reading and setting properties</h2>
|
|
|
|
<p>In an event micro-script, the <code>this</code> object refers to the current object, and has all of the properties of the object.</p>
|
|
|
|
<p>You can set values on the <code>this</code> object during an On Post or On Put event. These changes will be saved to the database.</p>
|
|
|
|
<pre><code>// On Post:
|
|
this.dateCreated = new Date();
|
|
|
|
// On Put:
|
|
this.totalScore = this.level1Points + this.level2Points;
|
|
</code></pre>
|
|
|
|
<h2>Accessing the current user</h2>
|
|
|
|
<p>If the request is coming from a logged in User, you can use the "me" object to access their properties.</p>
|
|
|
|
<pre><code>// On Post:
|
|
this.creator = me._id;
|
|
</code></pre>
|
|
|
|
<h2>Cancelling an event</h2>
|
|
|
|
<p>You can stop any event by calling the <code>cancel(message, [code])</code> method.</p>
|
|
|
|
<pre><code>//On Delete:
|
|
if (this.protected) {
|
|
cancel('This post is protected and cannot be deleted');
|
|
}
|
|
|
|
DELETE /posts/123456
|
|
|
|
400 Bad Request
|
|
{
|
|
"message": "This post is protected and cannot be deleted"
|
|
}
|
|
</code></pre>
|
|
|
|
<p>You can pass an integer to the <code>cancel()</code> method as the second parameter to set the HTTP status code. For example, 401 means "Unauthorized".</p>
|
|
|
|
<pre><code>//On Put
|
|
if (this.creator !== me._id) {
|
|
cancel("You cannot view this post because it is not yours!", 401);
|
|
}
|
|
|
|
PUT /posts/13456
|
|
Content-Type: application/json
|
|
{ ... }
|
|
|
|
401 Unauthorized
|
|
{
|
|
"message": "You cannot view this post because it is not yours!"
|
|
}
|
|
</code></pre>
|
|
|
|
<h2>Validation</h2>
|
|
|
|
<p>Use the <code>error(name, message)</code> function to add a validation error.</p>
|
|
|
|
<pre><code>//On Post
|
|
if (this.age < 18) {
|
|
error('age', 'must be older than 18')
|
|
}
|
|
|
|
POST /people
|
|
{
|
|
"firstName": "Joe",
|
|
"lastName": "Smith",
|
|
"age": 12
|
|
}
|
|
|
|
400 Bad Request
|
|
{
|
|
errors: {
|
|
"age": "must be older than 18"
|
|
}
|
|
}
|
|
</code></pre>
|
|
|
|
<h2>Hiding properties</h2>
|
|
|
|
<p>If you wish to hide certain properties from a user, use the <code>hide(propertyName)</code> function.</p>
|
|
|
|
<pre><code>//On Get
|
|
if (this.creator !== me._id) {
|
|
hide('lastName');
|
|
hide('age');
|
|
}
|
|
</code></pre>
|
|
|
|
<h2>Protecting properties from modification</h2>
|
|
|
|
<p>Use the <code>protect(propertyName)</code> function to protect specified properties during a POST or PUT.</p>
|
|
|
|
<pre><code>//On Put
|
|
protect('createdDate');
|
|
</code></pre>
|
|
<hr /><h1>Files Resource</h1>
|
|
|
|
<p>The Files Resource allows you host static files from your app, such as HTML, browser JavaScript, CSS, images, and videos. </p>
|
|
|
|
<h2>Accessing files</h2>
|
|
|
|
<p>Send a GET request with the filename to load the raw file. This is how browsers request pages and files by default.</p>
|
|
|
|
<pre><code>GET /files/bg.jpg
|
|
</code></pre>
|
|
|
|
<h2>Folders</h2>
|
|
|
|
<p>If you prefer to have separate folders for Javascript, CSS, and images, create multiple Static Resources at the paths you want to store the files.</p>
|
|
|
|
<p>You can also give a Static Resource an empty path <code>/</code>. This will assign it to the root of your app.</p>
|
|
|
|
<h2>Home page</h2>
|
|
|
|
<p>If a Static Resource receives a request without a filename, it will automatically redirect to "index.html" if available.</p>
|
|
<hr /><h1>User Collection Resource</h1>
|
|
|
|
<p>A User Collection resource behaves much like the standard Collection resource, but adds the ability to authenticate with a username and password.</p>
|
|
|
|
<h2>Special properties</h2>
|
|
|
|
<p>The User Collection contains two special properties:</p>
|
|
|
|
<ul>
|
|
<li><strong>email</strong> - For security, hidden by default on all users except the current user.</li>
|
|
<li><strong>password</strong> - Never readable under any circumstances. Can only be set when the user is logged in, when creating a new user, or from the Dashboard.</li>
|
|
</ul>
|
|
|
|
<h2>Registering a user</h2>
|
|
|
|
<p>First create a user by POSTing it to the root of the collection.
|
|
For this example our collection will be called <code>/users</code>.</p>
|
|
|
|
<pre><code>POST /users
|
|
Content-Type: application/json
|
|
{
|
|
"email": "foo@bar.com",
|
|
"password": "barfoo"
|
|
}
|
|
</code></pre>
|
|
|
|
<h2>Authenticating a user</h2>
|
|
|
|
<p>To login a user, send a POST request to <code>/<collection name>/login</code>:</p>
|
|
|
|
<pre><code>POST /users/login
|
|
Content-Type: application/json
|
|
{
|
|
"email": "foo@bar.com",
|
|
"password": "barfoo"
|
|
}
|
|
</code></pre>
|
|
|
|
<p>The server will respond with the user, without the password.</p>
|
|
|
|
<pre><code>200 OK
|
|
{
|
|
"_id": "4f71fc7c2ba744786f000001",
|
|
"email": "foo@bar.com"
|
|
}
|
|
</code></pre>
|
|
|
|
<h2>Current user</h2>
|
|
|
|
<p>The currently logged in user is available by sending a GET request to <code>/users/me</code>.</p>
|
|
|
|
<pre><code>200 OK
|
|
{
|
|
"_id": "4f71fc7c2ba744786f000001",
|
|
"email": "foo@bar.com"
|
|
}
|
|
</code></pre>
|
|
|
|
<h2>Logging out</h2>
|
|
|
|
<p>To logout a user send a POST request to <code>/<collection name>/logout</code>:</p>
|
|
|
|
<pre><code>204 No Content
|
|
</code></pre>
|
|
</div> <!-- /span9 -->
|
|
</div> <!-- /row -->
|
|
</div> <!-- /container -->
|
|
</body>
|
|
|
|
<script>
|
|
var nav = $('.nav').empty();
|
|
|
|
// build out navigation
|
|
$('h1, h2').each(function () {
|
|
var key = $(this).text().replace(/ /g, '-');
|
|
$(this).prepend('<a name="'+ key + '"></a>');
|
|
console.log(this);
|
|
nav.append('<li class="'+ (this.nodeName === 'H1' ? 'nav-header' : '') +'"><a href="#' + key + '">' + $(this).text() + '</a></li>');
|
|
})
|
|
|
|
function fill() {
|
|
$('#side .well').height($(window).height() - 100);
|
|
}
|
|
|
|
$(window).resize(fill)
|
|
|
|
fill();
|
|
</script>
|
|
|
|
</html> |