Ignore hidden files?

[andrewsinnovations]

I've found myself in a pattern where I will write code like this:

index.sql

select 
    'dynamic' as component
    , sqlpage.run_sql('tabs.sql') AS properties;

tabs.sql

select 'tab' as component;
select 'Tab1' as title, 'index.sql' as link, true as active;
select 'Tab2' as title, 'page2.sql' as link;

In this example, I just want to re-use the tabs code on every page without having to re-write it and potentially miss tabs as the application grows.

However, imagine now that index.sql is behind an authentication check:

index.sql

-- now imagine there's code here to check that a session is valid and redirect to a different page if not.
-- ....... omitted for brevity

-- the rest of the code is the same as above.
select 
    'dynamic' as component
    , sqlpage.run_sql('tabs.sql') AS properties;

The Problem:

I also have to duplicate the authentication check in tabs.sql, because I don't want a user who knows that such a route exists to be able to access my partials.

I have lots of partials around in my apps, and I realized that if you know the URL of them, SQLPage will happily serve them up, so I have to add the authentication checks to those endpoints.

What I have been doing

I either just add the auth checks to my partials, or I put the partials under the "sqlpage" folder, because it seems the default behavior of SQLPage is to not serve up endpoints from the "/sqlpage/**/*" route. I haven't seen documentation that says that is the intended behavior, though. So it could change in the future.

Also, putting the partials under /sqlpage/ folder is crowding that path, and I would really like the partials to be near the code that uses them.

My Proposed Solution

What if sqlpage followed the "hidden file" spec of a dot "." in front of the filename. If a file is named ".tabs.sql" then it will refuse to serve "/tabs.sql" or "/tabs" as that file is intentionally hidden. Then you can put the partials in the same path as the code that uses them, and also not have to duplicate authentication checks.

I'm very new to rust, but I believe I could code this up and submit it as a PR if it's something that is a good idea.

[lovasoa]

What would you think of #866 ?

[andrewsinnovations]

That looks like it will work great! Thank you!