NestJs+TypeOrm中如何调用存储过程(后端)

Rik*_*yat 4 nestjs

我在 oracle 数据库中有存储过程,我想在 NestJs 中调用它。如何在 NestJs 中调用存储过程?

这是我的存储过程

PROCEDURE pipeline_critical (
        i_main_company IN NUMBER,
        o_value OUT NUMBER
   ) AS
   BEGIN
    SELECT COUNT(A.PIPELINE_ID) AS IGNORED_PIPELINE 
    INTO o_value
    FROM T_PIPELINE A
    LEFT JOIN T_PIPELINE_PRODUCT P ON P.PIPELINE_ID = A.PIPELINE_ID
    WHERE 
        1 = ( CASE WHEN
                i_main_company <> 3
                AND A.MAIN_COMPANY_ID = i_main_company
                AND TO_CHAR(A.EST_DELIVERY,'YYYY') >= TO_CHAR(SYSDATE,'YYYY') - 1
                AND A.PIPELINE_STATUS_ID IN (1,2,3)
                AND TO_CHAR(ADD_MONTHS(A.UPDATE_DATE,3),'YYYYMM') < TO_CHAR(SYSDATE,'YYYYMM')
                AND P.PAID_DATE IS NULL THEN 1
            WHEN
                i_main_company = 3
                AND TO_CHAR(A.EST_DELIVERY,'YYYY') >= TO_CHAR(SYSDATE,'YYYY') - 1
                AND A.PIPELINE_STATUS_ID IN (1,2,3)
                AND TO_CHAR(ADD_MONTHS(A.UPDATE_DATE,3),'YYYYMM') < TO_CHAR(SYSDATE,'YYYYMM')
                AND P.PAID_DATE IS NULL THEN 1
            END
        );
   END pipeline_critical;
Run Code Online (Sandbox Code Playgroud)

Fer*_*tte 8

我正在迁移 Javascript/sequealize 后端,我正在测试我的需求。这是一个对我有用的简单示例:

这是存储过程

CREATE PROCEDURE sp_prueba
@email varchar(100)
AS
BEGIN
    SET NOCOUNT ON;
    select * from tbusua where emai_usua=@email
END
Run Code Online (Sandbox Code Playgroud)

在 NESTJS 中 - 控制器

import { Controller, Get, Param } from '@nestjs/common';
import { UsuariosService } from './usuarios.service';
import { async } from 'rxjs/internal/scheduler/async';
import { Usuario } from './usuarios.entity';


@Controller('Usuarios')
export class UsuariosController {
    constructor(private readonly UsuariosService: UsuariosService) { }

    @Get('/:email')
    async find(@Param('email') email): Promise <Usuario[]>{
        return await this.UsuariosService.find(email);
    }
}
Run Code Online (Sandbox Code Playgroud)

并在 NESTJS - TypeORM Backend 服务中

import { Injectable } from '@nestjs/common';
import { InjectRepository } from '@nestjs/typeorm';
import { Usuario } from './usuarios.entity';
import { Repository, Db, EntityManager } from 'typeorm';

@Injectable()
export class UsuariosService {
    constructor(
        @InjectRepository(Usuario)
        private readonly usuariosRepository: Repository<Usuario>) { }

    async find(email: string): Promise<Usuario[]>{
        return await this.usuariosRepository.query("sp_prueba @email='"+email +"'");
    }
}
Run Code Online (Sandbox Code Playgroud)

这对我有用

  • 为了避免sql注入,你可以执行以下操作;查询(“调用 my_spr(?)”,[值1]) (9认同)
  • 我认为你当前的代码中容易出现sql注入“sp_prueba @email='”+email +“'”` (4认同)
  • 如果没有可供查询的存储库怎么办? (3认同)