SQLer：无需编程语言即可将SQL查询转换为RESTful API的工具

// create a macro/endpoint called "_boot",// this macro is private "used within other macros" // because it starts with "_".// this rule only used within `RESTful` context._boot {    // the query we want to execute    exec = <<SQL        CREATE TABLE IF NOT EXISTS `users` (            `ID` INT UNSIGNED AUTO_INCREMENT PRIMARY KEY,            `name` VARCHAR(30) DEFAULT "@anonymous",            `email` VARCHAR(30) DEFAULT "@anonymous",            `password` VARCHAR(200) DEFAULT "",            `time` INT UNSIGNED        );    SQL}
// adduser macro/endpoint, just hit `/adduser` with// a `?user_name=&user_email=` or json `POST` request// with the same fields.adduser {    // what request method will this macro be called    // default: ["ANY"]    // this only used within `RESTful` context.    methods = ["POST"]
    // authorizers,    // sqler will attempt to send the incoming authorization header    // to the provided endpoint(s) as `Authorization`,    // each endpoint MUST return `200 OK` so sqler can continue, other wise,    // sqler will break the request and return back the client with the error occurred.    // each authorizer has a method and a url.    // this only used within `RESTful` context.    authorizers = ["GET http://web.hook/api/authorize", "GET http://web.hook/api/allowed?roles=admin,root,super_admin"]
    // the validation rules    // you can specify separated rules for each request method!    rules {        user_name = ["required"]        user_email =  ["required", "email"]        user_password = ["required", "stringlength: 5,50"]    }
    // the query to be executed    exec = <<SQL       {{ template "_boot" }}
        /* let's bind a vars to be used within our internal prepared statement */        {{ .BindVar "name" .Input.user_name }}        {{ .BindVar "email" .Input.user_email }}        {{ .BindVar "emailx" .Input.user_email }}
        INSERT INTO users(name, email, password, time) VALUES(            /* we added it above */            :name,
            /* we added it above */            :email,
            /* it will be secured anyway because it is encoded */            '{{ .Input.user_password | .Hash "bcrypt" }}',
            /* generate a unix timestamp "seconds" */            {{ .UnixTime }}        );
        SELECT * FROM users WHERE id = LAST_INSERT_ID();    SQL}
// list all databases, and run a transformer functiondatabases {    exec = "SHOW DATABASES"
    transformer = <<JS        // there is a global variable called `$result`,        // `$result` holds the result of the sql execution.        (function(){            newResult = []
            for ( i in $result ) {                newResult.push($result[i].Database)            }
            return newResult        })()    JS}