unregistered closed/destroyed overlay panels

.github/FUNDING.yaml

@@ -0,0 +1,13 @@
+# These are supported funding model platforms
+
+github: # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2]
+patreon: # Replace with a single Patreon username
+open_collective: pocketbase
+ko_fi: # Replace with a single Ko-fi username
+tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
+community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
+liberapay: # Replace with a single Liberapay username
+issuehunt: # Replace with a single IssueHunt username
+otechie: # Replace with a single Otechie username
+lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry
+custom: ['https://www.paypal.com/donate/?hosted_button_id=4DVXNL4B8WT98']

.github/workflows/release.yaml

@@ -9,19 +9,19 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
         with:
           fetch-depth: 0
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v3
         with:
-          node-version: 20.11.0
+          node-version: latest
 
       - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v3
         with:
-          go-version: '>=1.27.1'
+          go-version: '>=1.19.5'
 
       # This step usually is not needed because the /ui/dist is pregenerated locally
       # but its here to ensure that each release embeds the latest admin ui artifacts.
@@ -29,13 +29,6 @@ jobs:
       - name: Build Admin dashboard UI
         run: npm --prefix=./ui ci && npm --prefix=./ui run build
 
-      # Temporary disable as the types can have random generated identifiers making it non-deterministic.
-      #
-      # # Similar to the above, the jsvm types are pregenerated locally
-      # # but its here to ensure that it wasn't forgotten to be executed.
-      # - name: Generate jsvm types
-      #   run: go run ./plugins/jsvm/internal/types/types.go
-
       # The prebuilt golangci-lint doesn't support go 1.18+ yet
       # https://github.com/golangci/golangci-lint/issues/2649
       # - name: Run linter
@@ -49,6 +42,6 @@ jobs:
         with:
           distribution: goreleaser
           version: latest
-          args: release --clean
+          args: release --rm-dist
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.goreleaser.yaml

@@ -7,21 +7,7 @@ before:
     - go mod tidy
 
 builds:
-  # used only for tests
-  - id: build_cgo
-    main: ./examples/base
-    binary: pocketbase
-    ldflags:
-      - -s -w -X github.com/pocketbase/pocketbase.Version={{ .Version }}
-    env:
-      - CGO_ENABLED=1
-    goos:
-      - linux
-    goarch:
-      - amd64
-
-  - id: build_noncgo
-    main: ./examples/base
+  - main: ./examples/base
     binary: pocketbase
     ldflags:
       - -s -w -X github.com/pocketbase/pocketbase.Version={{ .Version }}
@@ -47,12 +33,10 @@ release:
   draft: true
 
 archives:
-  - id: archive_noncgo
-    builds: [build_noncgo]
-    format: zip
+  - format: zip
     files:
-      - LICENSE.md
-      - CHANGELOG.md
+      - LICENSE*
+      - CHANGELOG*
 
 checksum:
   name_template: 'checksums.txt'

CONTRIBUTING.md

@@ -1,4 +1,5 @@
-# Contributing to PocketBase
+Contributing to PocketBase
+======================================================================
 
 Thanks for taking the time to improve PocketBase!
 
@@ -8,26 +9,26 @@ This document describes how to prepare a PR for a change in the main repository.
 - [Making changes in the Go code](#making-changes-in-the-go-code)
 - [Making changes in the Admin UI](#making-changes-in-the-admin-ui)
 
+
 ## Prerequisites
 
-- Go 1.25+ (for making changes in the Go code)
-- Node 18+ (for making changes in the Admin UI)
+- Go 1.18+ (for making changes in the Go code)
+- Node 16+ (for making changes in the Admin UI)
 
 If you haven't already, you can fork the main repository and clone your fork so that you can work locally:
-
 ```
 git clone https://github.com/your_username/pocketbase.git
 ```
 
-> [!IMPORTANT]
 > It is recommended to create a new branch from master for each of your bugfixes and features.
 > This is required if you are planning to submit multiple PRs in order to keep the changes separate for review until they eventually get merged.
 
+
 ## Making changes in the Go code
 
 PocketBase is distributed as a Go package, which means that in order to run the project you'll have to create a Go `main` program that imports the package.
 
-The repository already includes such program, located in `examples/base`, that is also used for the prebuilt executables.
+The repository already includes such program, located in `/examples/base`, that is also used for the prebuilt executables.
 
 So, let's assume that you already done some changes in the PocketBase Go code and you want now to run them:
 
@@ -40,22 +41,20 @@ This will start a web server on `http://localhost:8090` with the embedded prebui
 
 - Add unit/integration tests for your changes (we are using the standard `testing` go package).
   To run the tests, you could execute (while in the root project directory):
+    ```sh
+    go test ./...
 
-  ```sh
-  go test ./...
-
-  # or using the Makefile
-  make test
-  ```
+    # or using the Makefile
+    make test
+    ```
 
 - Run the linter - **golangci** ([see how to install](https://golangci-lint.run/usage/install/#local-installation)):
+    ```sh
+    golangci-lint run -c ./golangci.yml ./...
 
-  ```sh
-  golangci-lint run -c ./golangci.yml ./...
-
-  # or using the Makefile
-  make lint
-  ```
+    # or using the Makefile
+    make lint
+    ```
 
 ## Making changes in the Admin UI
 
@@ -66,15 +65,14 @@ To start the Admin UI:
 1. Navigate to the `ui` project directory
 2. Run `npm install` to install the node dependencies
 3. Start vite's dev server
-   ```sh
-   npm run dev
-   ```
+    ```sh
+    npm run dev
+    ```
 
 You could open the browser and access the running Admin UI at `http://localhost:3000`.
 
 Since the Admin UI is just a client-side application, you need to have the PocketBase backend server also running in the background (either manually running the `examples/base/main.go` or download a prebuilt executable).
 
-> [!NOTE]
 > By default, the Admin UI is expecting the backend server to be started at `http://localhost:8090`, but you could change that by creating a new `ui/.env.development.local` file with `PB_BACKEND_URL = YOUR_ADDRESS` variable inside it.
 
 Every change you make in the Admin UI should be automatically reflected in the browser at `http://localhost:3000` without reloading the page.

Makefile

@@ -4,9 +4,6 @@ lint:
 test:
 	go test ./... -v --cover
 
-jstypes:
-	go run ./plugins/jsvm/internal/types/types.go
-
 test-report:
 	go test ./... -v --cover -coverprofile=coverage.out
 	go tool cover -html=coverage.out

README.md

@@ -7,7 +7,7 @@
 <p align="center">
     <a href="https://github.com/pocketbase/pocketbase/actions/workflows/release.yaml" target="_blank" rel="noopener"><img src="https://github.com/pocketbase/pocketbase/actions/workflows/release.yaml/badge.svg" alt="build" /></a>
     <a href="https://github.com/pocketbase/pocketbase/releases" target="_blank" rel="noopener"><img src="https://img.shields.io/github/release/pocketbase/pocketbase.svg" alt="Latest releases" /></a>
-    <a href="https://pkg.go.dev/github.com/pocketbase/pocketbase" target="_blank" rel="noopener"><img src="https://godoc.org/github.com/pocketbase/pocketbase?status.svg" alt="Go package documentation" /></a>
+    <a href="https://pkg.go.dev/github.com/pocketbase/pocketbase" target="_blank" rel="noopener"><img src="https://godoc.org/github.com/ganigeorgiev/fexpr?status.svg" alt="Go package documentation" /></a>
 </p>
 
 [PocketBase](https://pocketbase.io) is an open source Go backend, consisting of:
@@ -19,10 +19,10 @@
 
 **For documentation and examples, please visit https://pocketbase.io/docs.**
 
-> [!WARNING]
-> Please keep in mind that PocketBase is still under active development
+> ⚠️ Please keep in mind that PocketBase is still under active development
 > and therefore full backward compatibility is not guaranteed before reaching v1.0.0.
 
+
 ## API SDK clients
 
 The easiest way to interact with the API is to use one of the official SDK clients:
@@ -30,90 +30,79 @@ The easiest way to interact with the API is to use one of the official SDK clien
 - **JavaScript - [pocketbase/js-sdk](https://github.com/pocketbase/js-sdk)** (_browser and node_)
 - **Dart - [pocketbase/dart-sdk](https://github.com/pocketbase/dart-sdk)** (_web, mobile, desktop_)
 
+
 ## Overview
 
-### Use as standalone app
-
-You could download the prebuilt executable for your platform from the [Releases page](https://github.com/pocketbase/pocketbase/releases).
-Once downloaded, extract the archive and run `./pocketbase serve` in the extracted directory.
-
-The prebuilt executables are based on the [`examples/base/main.go` file](https://github.com/pocketbase/pocketbase/blob/master/examples/base/main.go) and comes with the JS VM plugin enabled by default which allows to extend PocketBase with JavaScript (_for more details please refer to [Extend with JavaScript](https://pocketbase.io/docs/js-overview/)_).
-
-### Use as a Go framework/toolkit
-
-PocketBase is distributed as a regular Go library package which allows you to build
+PocketBase could be [downloaded directly as a standalone app](https://github.com/pocketbase/pocketbase/releases) or it could be used as a Go framework/toolkit which allows you to build
 your own custom app specific business logic and still have a single portable executable at the end.
 
-Here is a minimal example:
+### Installation
 
-0. [Install Go 1.25+](https://go.dev/doc/install) (_if you haven't already_)
+```sh
+# go 1.18+
+go get github.com/pocketbase/pocketbase
+```
+> For Windows, you may have to use go 1.19+ due to an incorrect js mime type in the Windows Registry (see [issue#6](https://github.com/pocketbase/pocketbase/issues/6)).
 
-1. Create a new project directory with the following `main.go` file inside it:
-    ```go
-    package main
+### Example
 
-    import (
-        "log"
-        "net/http"
+```go
+package main
 
-        "github.com/labstack/echo/v5"
-        "github.com/pocketbase/pocketbase"
-        "github.com/pocketbase/pocketbase/apis"
-        "github.com/pocketbase/pocketbase/core"
-    )
+import (
+    "log"
+    "net/http"
 
-    func main() {
-        app := pocketbase.New()
+    "github.com/labstack/echo/v5"
+    "github.com/pocketbase/pocketbase"
+    "github.com/pocketbase/pocketbase/apis"
+    "github.com/pocketbase/pocketbase/core"
+)
 
-        app.OnBeforeServe().Add(func(e *core.ServeEvent) error {
-            // add new "GET /hello" route to the app router (echo)
-            e.Router.AddRoute(echo.Route{
-                Method: http.MethodGet,
-                Path:   "/hello",
-                Handler: func(c echo.Context) error {
-                    return c.String(200, "Hello world!")
-                },
-                Middlewares: []echo.MiddlewareFunc{
-                    apis.ActivityLogger(app),
-                },
-            })
+func main() {
+    app := pocketbase.New()
 
-            return nil
+    app.OnBeforeServe().Add(func(e *core.ServeEvent) error {
+        // add new "GET /hello" route to the app router (echo)
+        e.Router.AddRoute(echo.Route{
+            Method: http.MethodGet,
+            Path:   "/hello",
+            Handler: func(c echo.Context) error {
+                return c.String(200, "Hello world!")
+            },
+            Middlewares: []echo.MiddlewareFunc{
+                apis.ActivityLogger(app),
+            },
         })
 
-        if err := app.Start(); err != nil {
-            log.Fatal(err)
-        }
+        return nil
+    })
+
+    if err := app.Start(); err != nil {
+        log.Fatal(err)
     }
-    ```
+}
+```
 
-2. To init the dependencies, run `go mod init myapp && go mod tidy`.
+### Running and building
 
-3. To start the application, run `go run main.go serve`.
+Running/building the application is the same as for any other Go program, aka. just `go run` and `go build`.
 
-4. To build a statically linked executable, you can run `CGO_ENABLED=0 go build` and then start the created executable with `./myapp serve`.
+**PocketBase embeds SQLite, but doesn't require CGO.**
 
-> [!NOTE]
-> PocketBase embeds SQLite, but doesn't require CGO.
->
-> If CGO is enabled (aka. `CGO_ENABLED=1`), it will use [mattn/go-sqlite3](https://pkg.go.dev/github.com/mattn/go-sqlite3) driver, otherwise - [modernc.org/sqlite](https://pkg.go.dev/modernc.org/sqlite).
-> Enable CGO only if you really need to squeeze the read/write query performance at the expense of complicating cross compilation.
-
-_For more details please refer to [Extend with Go](https://pocketbase.io/docs/go-overview/)._
-
-### Building and running the repo main.go example
+If CGO is enabled (aka. `CGO_ENABLED=1`), it will use [mattn/go-sqlite3](https://pkg.go.dev/github.com/mattn/go-sqlite3) driver, otherwise - [modernc.org/sqlite](https://pkg.go.dev/modernc.org/sqlite).
+Enable CGO only if you really need to squeeze the read/write query performance at the expense of complicating cross compilation.
 
 To build the minimal standalone executable, like the prebuilt ones in the releases page, you can simply run `go build` inside the `examples/base` directory:
 
-0. [Install Go 1.21+](https://go.dev/doc/install) (_if you haven't already_)
+0. [Install Go 1.18+](https://go.dev/doc/install) (_if you haven't already_)
 1. Clone/download the repo
 2. Navigate to `examples/base`
 3. Run `GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build`
-   (_https://go.dev/doc/install/source#environment_)
+    (_https://go.dev/doc/install/source#environment_)
 4. Start the created executable by running `./base serve`.
 
-Note that the supported build targets by the pure Go SQLite driver at the moment are:
-
+The supported build targets by the non-cgo driver at the moment are:
 ```
 darwin  amd64
 darwin  arm64
@@ -125,7 +114,6 @@ linux   arm
 linux   arm64
 linux   ppc64le
 linux   riscv64
-linux   s390x
 windows amd64
 windows arm64
 ```
@@ -133,8 +121,7 @@ windows arm64
 ### Testing
 
 PocketBase comes with mixed bag of unit and integration tests.
-To run them, use the standard `go test` command:
-
+To run them, use the default `go test` command:
 ```sh
 go test ./...
 ```
@@ -147,6 +134,7 @@ If you discover a security vulnerability within PocketBase, please send an e-mai
 
 All reports will be promptly addressed, and you'll be credited accordingly.
 
+
 ## Contributing
 
 PocketBase is free and open source project licensed under the [MIT License](LICENSE.md).
@@ -156,11 +144,16 @@ You could help continuing its development by:
 
 - [Contribute to the source code](CONTRIBUTING.md)
 - [Suggest new features and report issues](https://github.com/pocketbase/pocketbase/issues)
+- [Donate a small amount](https://pocketbase.io/support-us)
 
-PRs for new OAuth2 providers, bug fixes, code optimizations and documentation improvements are more than welcome.
+PRs for _small features_ (eg. adding new OAuth2 providers), bug and documentation fixes, etc. are more than welcome.
 
-But please refrain creating PRs for _new features_ without previously discussing the implementation details.
-PocketBase has a [roadmap](https://github.com/orgs/pocketbase/projects/2) and I try to work on issues in specific order and such PRs often come in out of nowhere and skew all initial planning with tedious back-and-forth communication.
+But please refrain creating PRs for _big features_ without previously discussing the implementation details. Reviewing big PRs often requires a lot of time and tedious back-and-forth communication.
+PocketBase has a [roadmap](https://github.com/orgs/pocketbase/projects/2)
+and I try to work on issues in a specific order and such PRs often come in out of nowhere and skew all initial planning.
 
 Don't get upset if I close your PR, even if it is well executed and tested. This doesn't mean that it will never be merged.
 Later we can always refer to it and/or take pieces of your implementation when the time comes to work on the issue (don't worry you'll be credited in the release notes).
+
+_Please also note that PocketBase was initially created to serve as a new backend for my other open source project - [Presentator](https://presentator.io) (see [#183](https://github.com/presentator/presentator/issues/183)),
+so all feature requests will be first aligned with what we need for Presentator v3._

apis/admin.go

@@ -1,6 +1,7 @@
 package apis
 
 import (
+	"log"
 	"net/http"
 
 	"github.com/labstack/echo/v5"
@@ -32,28 +33,18 @@ type adminApi struct {
 	app core.App
 }
 
-func (api *adminApi) authResponse(c echo.Context, admin *models.Admin, finalizers ...func(token string) error) error {
+func (api *adminApi) authResponse(c echo.Context, admin *models.Admin) error {
 	token, tokenErr := tokens.NewAdminAuthToken(api.app, admin)
 	if tokenErr != nil {
 		return NewBadRequestError("Failed to create auth token.", tokenErr)
 	}
 
-	for _, f := range finalizers {
-		if err := f(token); err != nil {
-			return err
-		}
-	}
-
 	event := new(core.AdminAuthEvent)
 	event.HttpContext = c
 	event.Admin = admin
 	event.Token = token
 
 	return api.app.OnAdminAuthRequest().Trigger(event, func(e *core.AdminAuthEvent) error {
-		if e.HttpContext.Response().Committed {
-			return nil
-		}
-
 		return e.HttpContext.JSON(200, map[string]any{
 			"token": e.Token,
 			"admin": e.Admin,
@@ -71,11 +62,17 @@ func (api *adminApi) authRefresh(c echo.Context) error {
 	event.HttpContext = c
 	event.Admin = admin
 
-	return api.app.OnAdminBeforeAuthRefreshRequest().Trigger(event, func(e *core.AdminAuthRefreshEvent) error {
-		return api.app.OnAdminAfterAuthRefreshRequest().Trigger(event, func(e *core.AdminAuthRefreshEvent) error {
-			return api.authResponse(e.HttpContext, e.Admin)
-		})
+	handlerErr := api.app.OnAdminBeforeAuthRefreshRequest().Trigger(event, func(e *core.AdminAuthRefreshEvent) error {
+		return api.authResponse(e.HttpContext, e.Admin)
 	})
+
+	if handlerErr == nil {
+		if err := api.app.OnAdminAfterAuthRefreshRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
+	return handlerErr
 }
 
 func (api *adminApi) authWithPassword(c echo.Context) error {
@@ -98,13 +95,17 @@ func (api *adminApi) authWithPassword(c echo.Context) error {
 					return NewBadRequestError("Failed to authenticate.", err)
 				}
 
-				return api.app.OnAdminAfterAuthWithPasswordRequest().Trigger(event, func(e *core.AdminAuthWithPasswordEvent) error {
-					return api.authResponse(e.HttpContext, e.Admin)
-				})
+				return api.authResponse(e.HttpContext, e.Admin)
 			})
 		}
 	})
 
+	if submitErr == nil {
+		if err := api.app.OnAdminAfterAuthWithPasswordRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
 	return submitErr
 }
 
@@ -128,29 +129,30 @@ func (api *adminApi) requestPasswordReset(c echo.Context) error {
 			return api.app.OnAdminBeforeRequestPasswordResetRequest().Trigger(event, func(e *core.AdminRequestPasswordResetEvent) error {
 				// run in background because we don't need to show the result to the client
 				routine.FireAndForget(func() {
-					if err := next(e.Admin); err != nil {
-						api.app.Logger().Error("Failed to send admin password reset request.", "error", err)
+					if err := next(e.Admin); err != nil && api.app.IsDebug() {
+						log.Println(err)
 					}
 				})
 
-				return api.app.OnAdminAfterRequestPasswordResetRequest().Trigger(event, func(e *core.AdminRequestPasswordResetEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.NoContent(http.StatusNoContent)
-				})
+				return e.HttpContext.NoContent(http.StatusNoContent)
 			})
 		}
 	})
 
-	// eagerly write 204 response and skip submit errors
-	// as a measure against admins enumeration
+	if submitErr == nil {
+		if err := api.app.OnAdminAfterRequestPasswordResetRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	} else if api.app.IsDebug() {
+		log.Println(submitErr)
+	}
+
+	// don't return the response error to prevent emails enumeration
 	if !c.Response().Committed {
 		c.NoContent(http.StatusNoContent)
 	}
 
-	return submitErr
+	return nil
 }
 
 func (api *adminApi) confirmPasswordReset(c echo.Context) error {
@@ -171,17 +173,17 @@ func (api *adminApi) confirmPasswordReset(c echo.Context) error {
 					return NewBadRequestError("Failed to set new password.", err)
 				}
 
-				return api.app.OnAdminAfterConfirmPasswordResetRequest().Trigger(event, func(e *core.AdminConfirmPasswordResetEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.NoContent(http.StatusNoContent)
-				})
+				return e.HttpContext.NoContent(http.StatusNoContent)
 			})
 		}
 	})
 
+	if submitErr == nil {
+		if err := api.app.OnAdminAfterConfirmPasswordResetRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
 	return submitErr
 }
 
@@ -206,10 +208,6 @@ func (api *adminApi) list(c echo.Context) error {
 	event.Result = result
 
 	return api.app.OnAdminsListRequest().Trigger(event, func(e *core.AdminsListEvent) error {
-		if e.HttpContext.Response().Committed {
-			return nil
-		}
-
 		return e.HttpContext.JSON(http.StatusOK, e.Result)
 	})
 }
@@ -230,10 +228,6 @@ func (api *adminApi) view(c echo.Context) error {
 	event.Admin = admin
 
 	return api.app.OnAdminViewRequest().Trigger(event, func(e *core.AdminViewEvent) error {
-		if e.HttpContext.Response().Committed {
-			return nil
-		}
-
 		return e.HttpContext.JSON(http.StatusOK, e.Admin)
 	})
 }
@@ -262,17 +256,17 @@ func (api *adminApi) create(c echo.Context) error {
 					return NewBadRequestError("Failed to create admin.", err)
 				}
 
-				return api.app.OnAdminAfterCreateRequest().Trigger(event, func(e *core.AdminCreateEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.JSON(http.StatusOK, e.Admin)
-				})
+				return e.HttpContext.JSON(http.StatusOK, e.Admin)
 			})
 		}
 	})
 
+	if submitErr == nil {
+		if err := api.app.OnAdminAfterCreateRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
 	return submitErr
 }
 
@@ -308,17 +302,17 @@ func (api *adminApi) update(c echo.Context) error {
 					return NewBadRequestError("Failed to update admin.", err)
 				}
 
-				return api.app.OnAdminAfterUpdateRequest().Trigger(event, func(e *core.AdminUpdateEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.JSON(http.StatusOK, e.Admin)
-				})
+				return e.HttpContext.JSON(http.StatusOK, e.Admin)
 			})
 		}
 	})
 
+	if submitErr == nil {
+		if err := api.app.OnAdminAfterUpdateRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
 	return submitErr
 }
 
@@ -337,17 +331,19 @@ func (api *adminApi) delete(c echo.Context) error {
 	event.HttpContext = c
 	event.Admin = admin
 
-	return api.app.OnAdminBeforeDeleteRequest().Trigger(event, func(e *core.AdminDeleteEvent) error {
+	handlerErr := api.app.OnAdminBeforeDeleteRequest().Trigger(event, func(e *core.AdminDeleteEvent) error {
 		if err := api.app.Dao().DeleteAdmin(e.Admin); err != nil {
 			return NewBadRequestError("Failed to delete admin.", err)
 		}
 
-		return api.app.OnAdminAfterDeleteRequest().Trigger(event, func(e *core.AdminDeleteEvent) error {
-			if e.HttpContext.Response().Committed {
-				return nil
-			}
-
-			return e.HttpContext.NoContent(http.StatusNoContent)
-		})
+		return e.HttpContext.NoContent(http.StatusNoContent)
 	})
+
+	if handlerErr == nil {
+		if err := api.app.OnAdminAfterDeleteRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
+	return handlerErr
 }

apis/admin_test.go

@@ -1,7 +1,6 @@
 package apis_test
 
 import (
-	"errors"
 	"net/http"
 	"strings"
 	"testing"
@@ -9,7 +8,6 @@ import (
 
 	"github.com/labstack/echo/v5"
 	"github.com/pocketbase/dbx"
-	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/tests"
@@ -17,8 +15,6 @@ import (
 )
 
 func TestAdminAuthWithPassword(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "empty data",
@@ -93,26 +89,6 @@ func TestAdminAuthWithPassword(t *testing.T) {
 				"OnAdminAuthRequest":                   1,
 			},
 		},
-		{
-			Name:   "OnAdminAfterAuthWithPasswordRequest error response",
-			Method: http.MethodPost,
-			Url:    "/api/admins/auth-with-password",
-			Body:   strings.NewReader(`{"identity":"test@example.com","password":"1234567890"}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4MTYwMH0.han3_sG65zLddpcX2ic78qgy7FKecuPfOpFa8Dvi5Bg",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnAdminAfterAuthWithPasswordRequest().Add(func(e *core.AdminAuthWithPasswordEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnAdminBeforeAuthWithPasswordRequest": 1,
-				"OnAdminAfterAuthWithPasswordRequest":  1,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -121,8 +97,6 @@ func TestAdminAuthWithPassword(t *testing.T) {
 }
 
 func TestAdminRequestPasswordReset(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "empty data",
@@ -192,8 +166,6 @@ func TestAdminRequestPasswordReset(t *testing.T) {
 }
 
 func TestAdminConfirmPasswordReset(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "empty data",
@@ -252,29 +224,6 @@ func TestAdminConfirmPasswordReset(t *testing.T) {
 				"OnAdminAfterConfirmPasswordResetRequest":  1,
 			},
 		},
-		{
-			Name:   "OnAdminAfterConfirmPasswordResetRequest error response",
-			Method: http.MethodPost,
-			Url:    "/api/admins/confirm-password-reset",
-			Body: strings.NewReader(`{
-				"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImVtYWlsIjoidGVzdEBleGFtcGxlLmNvbSIsImV4cCI6MjIwODk4MTYwMH0.kwFEler6KSMKJNstuaSDvE1QnNdCta5qSnjaIQ0hhhc",
-				"password":"1234567891",
-				"passwordConfirm":"1234567891"
-			}`),
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnAdminAfterConfirmPasswordResetRequest().Add(func(e *core.AdminConfirmPasswordResetEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeUpdate":                      1,
-				"OnModelAfterUpdate":                       1,
-				"OnAdminBeforeConfirmPasswordResetRequest": 1,
-				"OnAdminAfterConfirmPasswordResetRequest":  1,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -283,8 +232,6 @@ func TestAdminConfirmPasswordReset(t *testing.T) {
 }
 
 func TestAdminRefresh(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -331,25 +278,6 @@ func TestAdminRefresh(t *testing.T) {
 				"OnAdminAfterAuthRefreshRequest":  1,
 			},
 		},
-		{
-			Name:   "OnAdminAfterAuthRefreshRequest error response",
-			Method: http.MethodPost,
-			Url:    "/api/admins/auth-refresh",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnAdminAfterAuthRefreshRequest().Add(func(e *core.AdminAuthRefreshEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnAdminBeforeAuthRefreshRequest": 1,
-				"OnAdminAfterAuthRefreshRequest":  1,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -358,8 +286,6 @@ func TestAdminRefresh(t *testing.T) {
 }
 
 func TestAdminsList(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -463,8 +389,6 @@ func TestAdminsList(t *testing.T) {
 }
 
 func TestAdminView(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -520,8 +444,6 @@ func TestAdminView(t *testing.T) {
 }
 
 func TestAdminDelete(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -588,27 +510,6 @@ func TestAdminDelete(t *testing.T) {
 				"OnAdminBeforeDeleteRequest": 1,
 			},
 		},
-		{
-			Name:   "OnAdminAfterDeleteRequest error response",
-			Method: http.MethodDelete,
-			Url:    "/api/admins/sbmbsdb40jyxf7h",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnAdminAfterDeleteRequest().Add(func(e *core.AdminDeleteEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeDelete":        1,
-				"OnModelAfterDelete":         1,
-				"OnAdminBeforeDeleteRequest": 1,
-				"OnAdminAfterDeleteRequest":  1,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -617,8 +518,6 @@ func TestAdminDelete(t *testing.T) {
 }
 
 func TestAdminCreate(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized (while having at least 1 existing admin)",
@@ -738,33 +637,6 @@ func TestAdminCreate(t *testing.T) {
 				"OnAdminAfterCreateRequest":  1,
 			},
 		},
-		{
-			Name:   "OnAdminAfterCreateRequest error response",
-			Method: http.MethodPost,
-			Url:    "/api/admins",
-			Body: strings.NewReader(`{
-				"email":"testnew@example.com",
-				"password":"1234567890",
-				"passwordConfirm":"1234567890",
-				"avatar":3
-			}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnAdminAfterCreateRequest().Add(func(e *core.AdminCreateEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeCreate":        1,
-				"OnModelAfterCreate":         1,
-				"OnAdminBeforeCreateRequest": 1,
-				"OnAdminAfterCreateRequest":  1,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -773,8 +645,6 @@ func TestAdminCreate(t *testing.T) {
 }
 
 func TestAdminUpdate(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -859,7 +729,6 @@ func TestAdminUpdate(t *testing.T) {
 			},
 		},
 		{
-			Name:   "authorized as admin + valid data",
 			Method: http.MethodPatch,
 			Url:    "/api/admins/sbmbsdb40jyxf7h",
 			Body: strings.NewReader(`{
@@ -890,33 +759,6 @@ func TestAdminUpdate(t *testing.T) {
 				"OnAdminAfterUpdateRequest":  1,
 			},
 		},
-		{
-			Name:   "OnAdminAfterUpdateRequest error response",
-			Method: http.MethodPatch,
-			Url:    "/api/admins/sbmbsdb40jyxf7h",
-			Body: strings.NewReader(`{
-				"email":"testnew@example.com",
-				"password":"1234567891",
-				"passwordConfirm":"1234567891",
-				"avatar":5
-			}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnAdminAfterUpdateRequest().Add(func(e *core.AdminUpdateEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeUpdate":        1,
-				"OnModelAfterUpdate":         1,
-				"OnAdminBeforeUpdateRequest": 1,
-				"OnAdminAfterUpdateRequest":  1,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {

apis/api_error.go

@@ -4,7 +4,7 @@ import (
 	"net/http"
 	"strings"
 
-	validation "github.com/pocketbase/ozzo-validation/v4"
+	validation "github.com/go-ozzo/ozzo-validation/v4"
 	"github.com/pocketbase/pocketbase/tools/inflector"
 )
 
@@ -66,67 +66,43 @@ func NewUnauthorizedError(message string, data any) *ApiError {
 
 // NewApiError creates and returns new normalized `ApiError` instance.
 func NewApiError(status int, message string, data any) *ApiError {
+	message = inflector.Sentenize(message)
+
+	formattedData := map[string]any{}
+
+	if v, ok := data.(validation.Errors); ok {
+		formattedData = resolveValidationErrors(v)
+	}
+
 	return &ApiError{
 		rawData: data,
-		Data:    safeErrorsData(data),
+		Data:    formattedData,
 		Code:    status,
-		Message: strings.TrimSpace(inflector.Sentenize(message)),
+		Message: strings.TrimSpace(message),
 	}
 }
 
-func safeErrorsData(data any) map[string]any {
-	switch v := data.(type) {
-	case validation.Errors:
-		return resolveSafeErrorsData[error](v)
-	case map[string]validation.Error:
-		return resolveSafeErrorsData[validation.Error](v)
-	case map[string]error:
-		return resolveSafeErrorsData[error](v)
-	case map[string]any:
-		return resolveSafeErrorsData[any](v)
-	default:
-		return map[string]any{} // not nil to ensure that is json serialized as object
-	}
-}
-
-func resolveSafeErrorsData[T any](data map[string]T) map[string]any {
+func resolveValidationErrors(validationErrors validation.Errors) map[string]any {
 	result := map[string]any{}
 
-	for name, err := range data {
-		if isNestedError(err) {
-			result[name] = safeErrorsData(err)
+	// extract from each validation error its error code and message.
+	for name, err := range validationErrors {
+		// check for nested errors
+		if nestedErrs, ok := err.(validation.Errors); ok {
+			result[name] = resolveValidationErrors(nestedErrs)
 			continue
 		}
-		result[name] = resolveSafeErrorItem(err)
+
+		errCode := "validation_invalid_value" // default
+		if errObj, ok := err.(validation.ErrorObject); ok {
+			errCode = errObj.Code()
+		}
+
+		result[name] = map[string]string{
+			"code":    errCode,
+			"message": inflector.Sentenize(err.Error()),
+		}
 	}
 
 	return result
 }
-
-func isNestedError(err any) bool {
-	switch err.(type) {
-	case validation.Errors, map[string]validation.Error, map[string]error, map[string]any:
-		return true
-	}
-
-	return false
-}
-
-// resolveSafeErrorItem extracts from each validation error its
-// public safe error code and message.
-func resolveSafeErrorItem(err any) map[string]string {
-	// default public safe error values
-	code := "validation_invalid_value"
-	msg := "Invalid value."
-
-	// only validation errors are public safe
-	if obj, ok := err.(validation.Error); ok {
-		code = obj.Code()
-		msg = inflector.Sentenize(obj.Error())
-	}
-
-	return map[string]string{
-		"code":    code,
-		"message": msg,
-	}
-}

apis/api_error_test.go

@@ -5,13 +5,11 @@ import (
 	"errors"
 	"testing"
 
-	validation "github.com/pocketbase/ozzo-validation/v4"
+	validation "github.com/go-ozzo/ozzo-validation/v4"
 	"github.com/pocketbase/pocketbase/apis"
 )
 
 func TestNewApiErrorWithRawData(t *testing.T) {
-	t.Parallel()
-
 	e := apis.NewApiError(
 		300,
 		"message_test",
@@ -35,16 +33,14 @@ func TestNewApiErrorWithRawData(t *testing.T) {
 }
 
 func TestNewApiErrorWithValidationData(t *testing.T) {
-	t.Parallel()
-
 	e := apis.NewApiError(
 		300,
 		"message_test",
 		validation.Errors{
-			"err1": errors.New("test error"), // should be normalized
+			"err1": errors.New("test error"),
 			"err2": validation.ErrRequired,
 			"err3": validation.Errors{
-				"sub1": errors.New("test error"), // should be normalized
+				"sub1": errors.New("test error"),
 				"sub2": validation.ErrRequired,
 				"sub3": validation.Errors{
 					"sub11": validation.ErrRequired,
@@ -54,10 +50,10 @@ func TestNewApiErrorWithValidationData(t *testing.T) {
 	)
 
 	result, _ := json.Marshal(e)
-	expected := `{"code":300,"message":"Message_test.","data":{"err1":{"code":"validation_invalid_value","message":"Invalid value."},"err2":{"code":"validation_required","message":"Cannot be blank."},"err3":{"sub1":{"code":"validation_invalid_value","message":"Invalid value."},"sub2":{"code":"validation_required","message":"Cannot be blank."},"sub3":{"sub11":{"code":"validation_required","message":"Cannot be blank."}}}}}`
+	expected := `{"code":300,"message":"Message_test.","data":{"err1":{"code":"validation_invalid_value","message":"Test error."},"err2":{"code":"validation_required","message":"Cannot be blank."},"err3":{"sub1":{"code":"validation_invalid_value","message":"Test error."},"sub2":{"code":"validation_required","message":"Cannot be blank."},"sub3":{"sub11":{"code":"validation_required","message":"Cannot be blank."}}}}}`
 
 	if string(result) != expected {
-		t.Errorf("Expected \n%v, \ngot \n%v", expected, string(result))
+		t.Errorf("Expected %v, got %v", expected, string(result))
 	}
 
 	if e.Error() != "Message_test." {
@@ -70,8 +66,6 @@ func TestNewApiErrorWithValidationData(t *testing.T) {
 }
 
 func TestNewNotFoundError(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []struct {
 		message  string
 		data     any
@@ -79,7 +73,7 @@ func TestNewNotFoundError(t *testing.T) {
 	}{
 		{"", nil, `{"code":404,"message":"The requested resource wasn't found.","data":{}}`},
 		{"demo", "rawData_test", `{"code":404,"message":"Demo.","data":{}}`},
-		{"demo", validation.Errors{"err1": validation.NewError("test_code", "test_message")}, `{"code":404,"message":"Demo.","data":{"err1":{"code":"test_code","message":"Test_message."}}}`},
+		{"demo", validation.Errors{"err1": errors.New("test error")}, `{"code":404,"message":"Demo.","data":{"err1":{"code":"validation_invalid_value","message":"Test error."}}}`},
 	}
 
 	for i, scenario := range scenarios {
@@ -87,14 +81,12 @@ func TestNewNotFoundError(t *testing.T) {
 		result, _ := json.Marshal(e)
 
 		if string(result) != scenario.expected {
-			t.Errorf("(%d) Expected \n%v, \ngot \n%v", i, scenario.expected, string(result))
+			t.Errorf("(%d) Expected %v, got %v", i, scenario.expected, string(result))
 		}
 	}
 }
 
 func TestNewBadRequestError(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []struct {
 		message  string
 		data     any
@@ -102,7 +94,7 @@ func TestNewBadRequestError(t *testing.T) {
 	}{
 		{"", nil, `{"code":400,"message":"Something went wrong while processing your request.","data":{}}`},
 		{"demo", "rawData_test", `{"code":400,"message":"Demo.","data":{}}`},
-		{"demo", validation.Errors{"err1": validation.NewError("test_code", "test_message")}, `{"code":400,"message":"Demo.","data":{"err1":{"code":"test_code","message":"Test_message."}}}`},
+		{"demo", validation.Errors{"err1": errors.New("test error")}, `{"code":400,"message":"Demo.","data":{"err1":{"code":"validation_invalid_value","message":"Test error."}}}`},
 	}
 
 	for i, scenario := range scenarios {
@@ -110,14 +102,12 @@ func TestNewBadRequestError(t *testing.T) {
 		result, _ := json.Marshal(e)
 
 		if string(result) != scenario.expected {
-			t.Errorf("(%d) Expected \n%v, \ngot \n%v", i, scenario.expected, string(result))
+			t.Errorf("(%d) Expected %v, got %v", i, scenario.expected, string(result))
 		}
 	}
 }
 
 func TestNewForbiddenError(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []struct {
 		message  string
 		data     any
@@ -125,7 +115,7 @@ func TestNewForbiddenError(t *testing.T) {
 	}{
 		{"", nil, `{"code":403,"message":"You are not allowed to perform this request.","data":{}}`},
 		{"demo", "rawData_test", `{"code":403,"message":"Demo.","data":{}}`},
-		{"demo", validation.Errors{"err1": validation.NewError("test_code", "test_message")}, `{"code":403,"message":"Demo.","data":{"err1":{"code":"test_code","message":"Test_message."}}}`},
+		{"demo", validation.Errors{"err1": errors.New("test error")}, `{"code":403,"message":"Demo.","data":{"err1":{"code":"validation_invalid_value","message":"Test error."}}}`},
 	}
 
 	for i, scenario := range scenarios {
@@ -133,14 +123,12 @@ func TestNewForbiddenError(t *testing.T) {
 		result, _ := json.Marshal(e)
 
 		if string(result) != scenario.expected {
-			t.Errorf("(%d) Expected \n%v, \ngot \n%v", i, scenario.expected, string(result))
+			t.Errorf("(%d) Expected %v, got %v", i, scenario.expected, string(result))
 		}
 	}
 }
 
 func TestNewUnauthorizedError(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []struct {
 		message  string
 		data     any
@@ -148,7 +136,7 @@ func TestNewUnauthorizedError(t *testing.T) {
 	}{
 		{"", nil, `{"code":401,"message":"Missing or invalid authentication token.","data":{}}`},
 		{"demo", "rawData_test", `{"code":401,"message":"Demo.","data":{}}`},
-		{"demo", validation.Errors{"err1": validation.NewError("test_code", "test_message")}, `{"code":401,"message":"Demo.","data":{"err1":{"code":"test_code","message":"Test_message."}}}`},
+		{"demo", validation.Errors{"err1": errors.New("test error")}, `{"code":401,"message":"Demo.","data":{"err1":{"code":"validation_invalid_value","message":"Test error."}}}`},
 	}
 
 	for i, scenario := range scenarios {
@@ -156,7 +144,7 @@ func TestNewUnauthorizedError(t *testing.T) {
 		result, _ := json.Marshal(e)
 
 		if string(result) != scenario.expected {
-			t.Errorf("(%d) Expected \n%v, \ngot \n%v", i, scenario.expected, string(result))
+			t.Errorf("(%d) Expected %v, got %v", i, scenario.expected, string(result))
 		}
 	}
 }

apis/backup.go

@@ -1,215 +0,0 @@
-package apis
-
-import (
-	"context"
-	"net/http"
-	"path/filepath"
-	"time"
-
-	"github.com/labstack/echo/v5"
-	"github.com/pocketbase/pocketbase/core"
-	"github.com/pocketbase/pocketbase/forms"
-	"github.com/pocketbase/pocketbase/models"
-	"github.com/pocketbase/pocketbase/tools/filesystem"
-	"github.com/pocketbase/pocketbase/tools/rest"
-	"github.com/pocketbase/pocketbase/tools/routine"
-	"github.com/pocketbase/pocketbase/tools/types"
-	"github.com/spf13/cast"
-)
-
-// bindBackupApi registers the file api endpoints and the corresponding handlers.
-//
-// @todo add hooks once the app hooks api restructuring is finalized
-func bindBackupApi(app core.App, rg *echo.Group) {
-	api := backupApi{app: app}
-
-	subGroup := rg.Group("/backups", ActivityLogger(app))
-	subGroup.GET("", api.list, RequireAdminAuth())
-	subGroup.POST("", api.create, RequireAdminAuth())
-	subGroup.POST("/upload", api.upload, RequireAdminAuth())
-	subGroup.GET("/:key", api.download)
-	subGroup.DELETE("/:key", api.delete, RequireAdminAuth())
-	subGroup.POST("/:key/restore", api.restore, RequireAdminAuth())
-}
-
-type backupApi struct {
-	app core.App
-}
-
-func (api *backupApi) list(c echo.Context) error {
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	fsys, err := api.app.NewBackupsFilesystem()
-	if err != nil {
-		return NewBadRequestError("Failed to load backups filesystem.", err)
-	}
-	defer fsys.Close()
-
-	fsys.SetContext(ctx)
-
-	backups, err := fsys.List("")
-	if err != nil {
-		return NewBadRequestError("Failed to retrieve backup items. Raw error: \n"+err.Error(), nil)
-	}
-
-	result := make([]models.BackupFileInfo, len(backups))
-
-	for i, obj := range backups {
-		modified, _ := types.ParseDateTime(obj.ModTime)
-
-		result[i] = models.BackupFileInfo{
-			Key:      obj.Key,
-			Size:     obj.Size,
-			Modified: modified,
-		}
-	}
-
-	return c.JSON(http.StatusOK, result)
-}
-
-func (api *backupApi) create(c echo.Context) error {
-	if api.app.Store().Has(core.StoreKeyActiveBackup) {
-		return NewBadRequestError("Try again later - another backup/restore process has already been started", nil)
-	}
-
-	form := forms.NewBackupCreate(api.app)
-	if err := c.Bind(form); err != nil {
-		return NewBadRequestError("An error occurred while loading the submitted data.", err)
-	}
-
-	return form.Submit(func(next forms.InterceptorNextFunc[string]) forms.InterceptorNextFunc[string] {
-		return func(name string) error {
-			if err := next(name); err != nil {
-				return NewBadRequestError("Failed to create backup.", err)
-			}
-
-			// we don't retrieve the generated backup file because it may not be
-			// available yet due to the eventually consistent nature of some S3 providers
-			return c.NoContent(http.StatusNoContent)
-		}
-	})
-}
-
-func (api *backupApi) upload(c echo.Context) error {
-	files, err := rest.FindUploadedFiles(c.Request(), "file")
-	if err != nil {
-		return NewBadRequestError("Missing or invalid uploaded file.", err)
-	}
-
-	form := forms.NewBackupUpload(api.app)
-	form.File = files[0]
-
-	return form.Submit(func(next forms.InterceptorNextFunc[*filesystem.File]) forms.InterceptorNextFunc[*filesystem.File] {
-		return func(file *filesystem.File) error {
-			if err := next(file); err != nil {
-				return NewBadRequestError("Failed to upload backup.", err)
-			}
-
-			// we don't retrieve the generated backup file because it may not be
-			// available yet due to the eventually consistent nature of some S3 providers
-			return c.NoContent(http.StatusNoContent)
-		}
-	})
-}
-
-func (api *backupApi) download(c echo.Context) error {
-	fileToken := c.QueryParam("token")
-
-	_, err := api.app.Dao().FindAdminByToken(
-		fileToken,
-		api.app.Settings().AdminFileToken.Secret,
-	)
-	if err != nil {
-		return NewForbiddenError("Insufficient permissions to access the resource.", err)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Minute)
-	defer cancel()
-
-	fsys, err := api.app.NewBackupsFilesystem()
-	if err != nil {
-		return NewBadRequestError("Failed to load backups filesystem.", err)
-	}
-	defer fsys.Close()
-
-	fsys.SetContext(ctx)
-
-	key := c.PathParam("key")
-
-	br, err := fsys.GetFile(key)
-	if err != nil {
-		return NewBadRequestError("Failed to retrieve backup item. Raw error: \n"+err.Error(), nil)
-	}
-	defer br.Close()
-
-	return fsys.Serve(
-		c.Response(),
-		c.Request(),
-		key,
-		filepath.Base(key), // without the path prefix (if any)
-	)
-}
-
-func (api *backupApi) restore(c echo.Context) error {
-	if api.app.Store().Has(core.StoreKeyActiveBackup) {
-		return NewBadRequestError("Try again later - another backup/restore process has already been started.", nil)
-	}
-
-	key := c.PathParam("key")
-
-	existsCtx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	fsys, err := api.app.NewBackupsFilesystem()
-	if err != nil {
-		return NewBadRequestError("Failed to load backups filesystem.", err)
-	}
-	defer fsys.Close()
-
-	fsys.SetContext(existsCtx)
-
-	if exists, err := fsys.Exists(key); !exists {
-		return NewBadRequestError("Missing or invalid backup file.", err)
-	}
-
-	routine.FireAndForget(func() {
-		// wait max 15 minutes to fetch the backup
-		ctx, cancel := context.WithTimeout(context.Background(), 15*time.Minute)
-		defer cancel()
-
-		// give some optimistic time to write the response
-		time.Sleep(1 * time.Second)
-
-		if err := api.app.RestoreBackup(ctx, key); err != nil {
-			api.app.Logger().Error("Failed to restore backup", "key", key, "error", err.Error())
-		}
-	})
-
-	return c.NoContent(http.StatusNoContent)
-}
-
-func (api *backupApi) delete(c echo.Context) error {
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	fsys, err := api.app.NewBackupsFilesystem()
-	if err != nil {
-		return NewBadRequestError("Failed to load backups filesystem.", err)
-	}
-	defer fsys.Close()
-
-	fsys.SetContext(ctx)
-
-	key := c.PathParam("key")
-
-	if key != "" && cast.ToString(api.app.Store().Get(core.StoreKeyActiveBackup)) == key {
-		return NewBadRequestError("The backup is currently being used and cannot be deleted.", nil)
-	}
-
-	if err := fsys.Delete(key); err != nil {
-		return NewBadRequestError("Invalid or already deleted backup file. Raw error: \n"+err.Error(), nil)
-	}
-
-	return c.NoContent(http.StatusNoContent)
-}

apis/backup_test.go

@@ -1,770 +0,0 @@
-package apis_test
-
-import (
-	"archive/zip"
-	"bytes"
-	"context"
-	"io"
-	"mime/multipart"
-	"net/http"
-	"strings"
-	"testing"
-
-	"github.com/labstack/echo/v5"
-	"github.com/pocketbase/pocketbase/core"
-	"github.com/pocketbase/pocketbase/tests"
-	"gocloud.dev/blob"
-)
-
-func TestBackupsList(t *testing.T) {
-	t.Parallel()
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:   "unauthorized",
-			Method: http.MethodGet,
-			Url:    "/api/backups",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as auth record",
-			Method: http.MethodGet,
-			Url:    "/api/backups",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as admin (empty list)",
-			Method: http.MethodGet,
-			Url:    "/api/backups",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`[]`,
-			},
-		},
-		{
-			Name:   "authorized as admin",
-			Method: http.MethodGet,
-			Url:    "/api/backups",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"test1.zip"`,
-				`"test2.zip"`,
-				`"test3.zip"`,
-			},
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}
-
-func TestBackupsCreate(t *testing.T) {
-	t.Parallel()
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:   "unauthorized",
-			Method: http.MethodPost,
-			Url:    "/api/backups",
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				ensureNoBackups(t, app)
-			},
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as auth record",
-			Method: http.MethodPost,
-			Url:    "/api/backups",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				ensureNoBackups(t, app)
-			},
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as admin (pending backup)",
-			Method: http.MethodPost,
-			Url:    "/api/backups",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.Store().Set(core.StoreKeyActiveBackup, "")
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				ensureNoBackups(t, app)
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as admin (autogenerated name)",
-			Method: http.MethodPost,
-			Url:    "/api/backups",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				files, err := getBackupFiles(app)
-				if err != nil {
-					t.Fatal(err)
-				}
-
-				if total := len(files); total != 1 {
-					t.Fatalf("Expected 1 backup file, got %d", total)
-				}
-
-				expected := "pb_backup_"
-				if !strings.HasPrefix(files[0].Key, expected) {
-					t.Fatalf("Expected backup file with prefix %q, got %q", expected, files[0].Key)
-				}
-			},
-			ExpectedStatus: 204,
-		},
-		{
-			Name:   "authorized as admin (invalid name)",
-			Method: http.MethodPost,
-			Url:    "/api/backups",
-			Body:   strings.NewReader(`{"name":"!test.zip"}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				ensureNoBackups(t, app)
-			},
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"data":{`,
-				`"name":{"code":"validation_match_invalid"`,
-			},
-		},
-		{
-			Name:   "authorized as admin (valid name)",
-			Method: http.MethodPost,
-			Url:    "/api/backups",
-			Body:   strings.NewReader(`{"name":"test.zip"}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				files, err := getBackupFiles(app)
-				if err != nil {
-					t.Fatal(err)
-				}
-
-				if total := len(files); total != 1 {
-					t.Fatalf("Expected 1 backup file, got %d", total)
-				}
-
-				expected := "test.zip"
-				if files[0].Key != expected {
-					t.Fatalf("Expected backup file %q, got %q", expected, files[0].Key)
-				}
-			},
-			ExpectedStatus: 204,
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}
-
-func TestBackupsUpload(t *testing.T) {
-	t.Parallel()
-
-	// create dummy form data bodies
-	type body struct {
-		buffer      io.Reader
-		contentType string
-	}
-	bodies := make([]body, 10)
-	for i := 0; i < 10; i++ {
-		func() {
-			zb := new(bytes.Buffer)
-			zw := zip.NewWriter(zb)
-			if err := zw.Close(); err != nil {
-				t.Fatal(err)
-			}
-
-			b := new(bytes.Buffer)
-			mw := multipart.NewWriter(b)
-
-			mfw, err := mw.CreateFormFile("file", "test")
-			if err != nil {
-				t.Fatal(err)
-			}
-			if _, err := io.Copy(mfw, zb); err != nil {
-				t.Fatal(err)
-			}
-
-			mw.Close()
-
-			bodies[i] = body{
-				buffer:      b,
-				contentType: mw.FormDataContentType(),
-			}
-		}()
-	}
-	// ---
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:   "unauthorized",
-			Method: http.MethodPost,
-			Url:    "/api/backups/upload",
-			Body:   bodies[0].buffer,
-			RequestHeaders: map[string]string{
-				"Content-Type": bodies[0].contentType,
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				ensureNoBackups(t, app)
-			},
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as auth record",
-			Method: http.MethodPost,
-			Url:    "/api/backups/upload",
-			Body:   bodies[1].buffer,
-			RequestHeaders: map[string]string{
-				"Content-Type":  bodies[1].contentType,
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				ensureNoBackups(t, app)
-			},
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as admin (missing file)",
-			Method: http.MethodPost,
-			Url:    "/api/backups/upload",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				ensureNoBackups(t, app)
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{`},
-		},
-		{
-			Name:   "authorized as admin (existing backup name)",
-			Method: http.MethodPost,
-			Url:    "/api/backups/upload",
-			Body:   bodies[3].buffer,
-			RequestHeaders: map[string]string{
-				"Content-Type":  bodies[3].contentType,
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				fsys, err := app.NewBackupsFilesystem()
-				if err != nil {
-					t.Fatal(err)
-				}
-				defer fsys.Close()
-				// create a dummy backup file to simulate existing backups
-				if err := fsys.Upload([]byte("123"), "test"); err != nil {
-					t.Fatal(err)
-				}
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				files, _ := getBackupFiles(app)
-				if total := len(files); total != 1 {
-					t.Fatalf("Expected %d backup file, got %d", 1, total)
-				}
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{"file":{`},
-		},
-		{
-			Name:   "authorized as admin (valid file)",
-			Method: http.MethodPost,
-			Url:    "/api/backups/upload",
-			Body:   bodies[4].buffer,
-			RequestHeaders: map[string]string{
-				"Content-Type":  bodies[4].contentType,
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				files, _ := getBackupFiles(app)
-				if total := len(files); total != 1 {
-					t.Fatalf("Expected %d backup file, got %d", 1, total)
-				}
-			},
-			ExpectedStatus: 204,
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}
-
-func TestBackupsDownload(t *testing.T) {
-	t.Parallel()
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:   "unauthorized",
-			Method: http.MethodGet,
-			Url:    "/api/backups/test1.zip",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "with record auth header",
-			Method: http.MethodGet,
-			Url:    "/api/backups/test1.zip",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "with admin auth header",
-			Method: http.MethodGet,
-			Url:    "/api/backups/test1.zip",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "with empty or invalid token",
-			Method: http.MethodGet,
-			Url:    "/api/backups/test1.zip?token=",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "with valid record auth token",
-			Method: http.MethodGet,
-			Url:    "/api/backups/test1.zip?token=eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "with valid record file token",
-			Method: http.MethodGet,
-			Url:    "/api/backups/test1.zip?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImV4cCI6MTg5MzQ1MjQ2MSwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwidHlwZSI6ImF1dGhSZWNvcmQifQ.0d_0EO6kfn9ijZIQWAqgRi8Bo1z7MKcg1LQpXhQsEPk",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "with valid admin auth token",
-			Method: http.MethodGet,
-			Url:    "/api/backups/test1.zip?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "with expired admin file token",
-			Method: http.MethodGet,
-			Url:    "/api/backups/test1.zip?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsImV4cCI6MTY0MDk5MTY2MSwidHlwZSI6ImFkbWluIn0.g7Q_3UX6H--JWJ7yt1Hoe-1ugTX1KpbKzdt0zjGSe-E",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "with valid admin file token but missing backup name",
-			Method: http.MethodGet,
-			Url:    "/api/backups/missing?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsImV4cCI6MTg5MzQ1MjQ2MSwidHlwZSI6ImFkbWluIn0.LyAMpSfaHVsuUqIlqqEbhDQSdFzoPz_EIDcb2VJMBsU",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "with valid admin file token",
-			Method: http.MethodGet,
-			Url:    "/api/backups/test1.zip?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsImV4cCI6MTg5MzQ1MjQ2MSwidHlwZSI6ImFkbWluIn0.LyAMpSfaHVsuUqIlqqEbhDQSdFzoPz_EIDcb2VJMBsU",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`storage/`,
-				`data.db`,
-				`logs.db`,
-			},
-		},
-		{
-			Name:   "with valid admin file token and backup name with escaped char",
-			Method: http.MethodGet,
-			Url:    "/api/backups/%40test4.zip?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsImV4cCI6MTg5MzQ1MjQ2MSwidHlwZSI6ImFkbWluIn0.LyAMpSfaHVsuUqIlqqEbhDQSdFzoPz_EIDcb2VJMBsU",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`storage/`,
-				`data.db`,
-				`logs.db`,
-			},
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}
-
-func TestBackupsDelete(t *testing.T) {
-	t.Parallel()
-
-	noTestBackupFilesChanges := func(t *testing.T, app *tests.TestApp) {
-		files, err := getBackupFiles(app)
-		if err != nil {
-			t.Fatal(err)
-		}
-
-		expected := 4
-		if total := len(files); total != expected {
-			t.Fatalf("Expected %d backup(s), got %d", expected, total)
-		}
-	}
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:   "unauthorized",
-			Method: http.MethodDelete,
-			Url:    "/api/backups/test1.zip",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				noTestBackupFilesChanges(t, app)
-			},
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as auth record",
-			Method: http.MethodDelete,
-			Url:    "/api/backups/test1.zip",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				noTestBackupFilesChanges(t, app)
-			},
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as admin (missing file)",
-			Method: http.MethodDelete,
-			Url:    "/api/backups/missing.zip",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				noTestBackupFilesChanges(t, app)
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as admin (existing file with matching active backup)",
-			Method: http.MethodDelete,
-			Url:    "/api/backups/test1.zip",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-
-				// mock active backup with the same name to delete
-				app.Store().Set(core.StoreKeyActiveBackup, "test1.zip")
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				noTestBackupFilesChanges(t, app)
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as admin (existing file and no matching active backup)",
-			Method: http.MethodDelete,
-			Url:    "/api/backups/test1.zip",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-
-				// mock active backup with different name
-				app.Store().Set(core.StoreKeyActiveBackup, "new.zip")
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				files, err := getBackupFiles(app)
-				if err != nil {
-					t.Fatal(err)
-				}
-
-				if total := len(files); total != 3 {
-					t.Fatalf("Expected %d backup files, got %d", 3, total)
-				}
-
-				deletedFile := "test1.zip"
-
-				for _, f := range files {
-					if f.Key == deletedFile {
-						t.Fatalf("Expected backup %q to be deleted", deletedFile)
-					}
-				}
-			},
-			ExpectedStatus: 204,
-		},
-		{
-			Name:   "authorized as admin (backup with escaped character)",
-			Method: http.MethodDelete,
-			Url:    "/api/backups/%40test4.zip",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				files, err := getBackupFiles(app)
-				if err != nil {
-					t.Fatal(err)
-				}
-
-				if total := len(files); total != 3 {
-					t.Fatalf("Expected %d backup files, got %d", 3, total)
-				}
-
-				deletedFile := "@test4.zip"
-
-				for _, f := range files {
-					if f.Key == deletedFile {
-						t.Fatalf("Expected backup %q to be deleted", deletedFile)
-					}
-				}
-			},
-			ExpectedStatus: 204,
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}
-
-func TestBackupsRestore(t *testing.T) {
-	t.Parallel()
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:   "unauthorized",
-			Method: http.MethodPost,
-			Url:    "/api/backups/test1.zip/restore",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as auth record",
-			Method: http.MethodPost,
-			Url:    "/api/backups/test1.zip/restore",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as admin (missing file)",
-			Method: http.MethodPost,
-			Url:    "/api/backups/missing.zip/restore",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as admin (active backup process)",
-			Method: http.MethodPost,
-			Url:    "/api/backups/test1.zip/restore",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := createTestBackups(app); err != nil {
-					t.Fatal(err)
-				}
-
-				app.Store().Set(core.StoreKeyActiveBackup, "")
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}
-
-// -------------------------------------------------------------------
-
-func createTestBackups(app core.App) error {
-	ctx := context.Background()
-
-	if err := app.CreateBackup(ctx, "test1.zip"); err != nil {
-		return err
-	}
-
-	if err := app.CreateBackup(ctx, "test2.zip"); err != nil {
-		return err
-	}
-
-	if err := app.CreateBackup(ctx, "test3.zip"); err != nil {
-		return err
-	}
-
-	if err := app.CreateBackup(ctx, "@test4.zip"); err != nil {
-		return err
-	}
-
-	return nil
-}
-
-func getBackupFiles(app core.App) ([]*blob.ListObject, error) {
-	fsys, err := app.NewBackupsFilesystem()
-	if err != nil {
-		return nil, err
-	}
-	defer fsys.Close()
-
-	return fsys.List("")
-}
-
-func ensureNoBackups(t *testing.T, app *tests.TestApp) {
-	files, err := getBackupFiles(app)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	if total := len(files); total != 0 {
-		t.Fatalf("Expected 0 backup files, got %d", total)
-	}
-}

apis/base.go

@@ -2,21 +2,18 @@
 package apis
 
 import (
-	"database/sql"
 	"errors"
 	"fmt"
 	"io/fs"
-	"log/slog"
+	"log"
 	"net/http"
 	"net/url"
 	"path/filepath"
 	"strings"
-	"time"
 
 	"github.com/labstack/echo/v5"
 	"github.com/labstack/echo/v5/middleware"
 	"github.com/pocketbase/pocketbase/core"
-	"github.com/pocketbase/pocketbase/tools/rest"
 	"github.com/pocketbase/pocketbase/ui"
 	"github.com/spf13/cast"
 )
@@ -27,63 +24,51 @@ const trailedAdminPath = "/_/"
 // system and app specific routes and middlewares.
 func InitApi(app core.App) (*echo.Echo, error) {
 	e := echo.New()
-	e.Debug = false
-	e.Binder = &rest.MultiBinder{}
-	e.JSONSerializer = &rest.Serializer{
-		FieldsParam: fieldsQueryParam,
-	}
+	e.Debug = app.IsDebug()
 
 	// configure a custom router
 	e.ResetRouterCreator(func(ec *echo.Echo) echo.Router {
 		return echo.NewRouter(echo.RouterConfig{
 			UnescapePathParamValues: true,
-			AllowOverwritingRoute:   true,
 		})
 	})
 
 	// default middlewares
 	e.Pre(middleware.RemoveTrailingSlashWithConfig(middleware.RemoveTrailingSlashConfig{
 		Skipper: func(c echo.Context) bool {
-			// enable by default only for the API routes
-			return !strings.HasPrefix(c.Request().URL.Path, "/api/")
+			// ignore Admin UI route(s)
+			return strings.HasPrefix(c.Request().URL.Path, trailedAdminPath)
 		},
 	}))
-	e.Pre(LoadAuthContext(app))
 	e.Use(middleware.Recover())
 	e.Use(middleware.Secure())
-	e.Use(func(next echo.HandlerFunc) echo.HandlerFunc {
-		return func(c echo.Context) error {
-			c.Set(ContextExecStartKey, time.Now())
-
-			return next(c)
-		}
-	})
+	e.Use(LoadAuthContext(app))
 
 	// custom error handler
 	e.HTTPErrorHandler = func(c echo.Context, err error) {
-		if err == nil {
-			return // no error
+		if c.Response().Committed {
+			return
 		}
 
 		var apiErr *ApiError
 
-		if errors.As(err, &apiErr) {
-			// already an api error...
-		} else if v := new(echo.HTTPError); errors.As(err, &v) {
+		switch v := err.(type) {
+		case *echo.HTTPError:
+			if v.Internal != nil && app.IsDebug() {
+				log.Println(v.Internal)
+			}
 			msg := fmt.Sprintf("%v", v.Message)
 			apiErr = NewApiError(v.Code, msg, v)
-		} else {
-			if errors.Is(err, sql.ErrNoRows) {
-				apiErr = NewNotFoundError("", err)
-			} else {
-				apiErr = NewBadRequestError("", err)
+		case *ApiError:
+			if app.IsDebug() && v.RawData() != nil {
+				log.Println(v.RawData())
 			}
-		}
-
-		logRequest(app, c, apiErr)
-
-		if c.Response().Committed {
-			return // already committed
+			apiErr = v
+		default:
+			if err != nil && app.IsDebug() {
+				log.Println(err)
+			}
+			apiErr = NewBadRequestError("", err)
 		}
 
 		event := new(core.ApiErrorEvent)
@@ -92,10 +77,6 @@ func InitApi(app core.App) (*echo.Echo, error) {
 
 		// send error response
 		hookErr := app.OnBeforeApiError().Trigger(event, func(e *core.ApiErrorEvent) error {
-			if e.HttpContext.Response().Committed {
-				return nil
-			}
-
 			// @see https://github.com/labstack/echo/issues/608
 			if e.HttpContext.Request().Method == http.MethodHead {
 				return e.HttpContext.NoContent(apiErr.Code)
@@ -104,20 +85,19 @@ func InitApi(app core.App) (*echo.Echo, error) {
 			return e.HttpContext.JSON(apiErr.Code, apiErr)
 		})
 
-		if hookErr == nil {
-			if err := app.OnAfterApiError().Trigger(event); err != nil {
-				app.Logger().Debug("OnAfterApiError failure", slog.String("error", err.Error()))
-			}
-		} else {
-			app.Logger().Debug("OnBeforeApiError error (truly rare case, eg. client already disconnected)", slog.String("error", hookErr.Error()))
+		// truly rare case; eg. client already disconnected
+		if hookErr != nil && app.IsDebug() {
+			log.Println(hookErr)
 		}
+
+		app.OnAfterApiError().Trigger(event)
 	}
 
 	// admin ui routes
 	bindStaticAdminUI(app, e)
 
 	// default routes
-	api := e.Group("/api", eagerRequestInfoCache(app))
+	api := e.Group("/api")
 	bindSettingsApi(app, api)
 	bindAdminApi(app, api)
 	bindCollectionApi(app, api)
@@ -127,7 +107,16 @@ func InitApi(app core.App) (*echo.Echo, error) {
 	bindRealtimeApi(app, api)
 	bindLogsApi(app, api)
 	bindHealthApi(app, api)
-	bindBackupApi(app, api)
+
+	// trigger the custom BeforeServe hook for the created api router
+	// allowing users to further adjust its options or register new routes
+	serveEvent := &core.ServeEvent{
+		App:    app,
+		Router: e,
+	}
+	if err := app.OnBeforeServe().Trigger(serveEvent); err != nil {
+		return nil, err
+	}
 
 	// catch all any route
 	api.Any("/*", func(c echo.Context) error {
@@ -174,7 +163,7 @@ func bindStaticAdminUI(app core.App, e *echo.Echo) error {
 	e.GET(
 		strings.TrimRight(trailedAdminPath, "/"),
 		func(c echo.Context) error {
-			return c.Redirect(http.StatusTemporaryRedirect, strings.TrimLeft(trailedAdminPath, "/"))
+			return c.Redirect(http.StatusTemporaryRedirect, trailedAdminPath)
 		},
 	)
 
@@ -184,36 +173,21 @@ func bindStaticAdminUI(app core.App, e *echo.Echo) error {
 		trailedAdminPath+"*",
 		echo.StaticDirectoryHandler(ui.DistDirFS, false),
 		installerRedirect(app),
-		uiCacheControl(),
 		middleware.Gzip(),
 	)
 
 	return nil
 }
 
-func uiCacheControl() echo.MiddlewareFunc {
-	return func(next echo.HandlerFunc) echo.HandlerFunc {
-		return func(c echo.Context) error {
-			// add default Cache-Control header for all Admin UI resources
-			// (ignoring the root admin path)
-			if c.Request().URL.Path != trailedAdminPath {
-				c.Response().Header().Set("Cache-Control", "max-age=1209600, stale-while-revalidate=86400")
-			}
+const totalAdminsCacheKey = "totalAdmins"
 
-			return next(c)
-		}
-	}
-}
-
-const hasAdminsCacheKey = "@hasAdmins"
-
-func updateHasAdminsCache(app core.App) error {
+func updateTotalAdminsCache(app core.App) error {
 	total, err := app.Dao().TotalAdmins()
 	if err != nil {
 		return err
 	}
 
-	app.Store().Set(hasAdminsCacheKey, total > 0)
+	app.Cache().Set(totalAdminsCacheKey, total)
 
 	return nil
 }
@@ -221,13 +195,12 @@ func updateHasAdminsCache(app core.App) error {
 // installerRedirect redirects the user to the installer admin UI page
 // when the application needs some preliminary configurations to be done.
 func installerRedirect(app core.App) echo.MiddlewareFunc {
-	// keep hasAdminsCacheKey value up-to-date
+	// keep totalAdminsCacheKey value up-to-date
 	app.OnAdminAfterCreateRequest().Add(func(data *core.AdminCreateEvent) error {
-		return updateHasAdminsCache(app)
+		return updateTotalAdminsCache(app)
 	})
-
 	app.OnAdminAfterDeleteRequest().Add(func(data *core.AdminDeleteEvent) error {
-		return updateHasAdminsCache(app)
+		return updateTotalAdminsCache(app)
 	})
 
 	return func(next echo.HandlerFunc) echo.HandlerFunc {
@@ -238,26 +211,25 @@ func installerRedirect(app core.App) echo.MiddlewareFunc {
 				return next(c)
 			}
 
-			hasAdmins := cast.ToBool(app.Store().Get(hasAdminsCacheKey))
-
-			if !hasAdmins {
-				// update the cache to make sure that the admin wasn't created by another process
-				if err := updateHasAdminsCache(app); err != nil {
+			// load into cache (if not already)
+			if !app.Cache().Has(totalAdminsCacheKey) {
+				if err := updateTotalAdminsCache(app); err != nil {
 					return err
 				}
-				hasAdmins = cast.ToBool(app.Store().Get(hasAdminsCacheKey))
 			}
 
+			totalAdmins := cast.ToInt(app.Cache().Get(totalAdminsCacheKey))
+
 			_, hasInstallerParam := c.Request().URL.Query()["installer"]
 
-			if !hasAdmins && !hasInstallerParam {
+			if totalAdmins == 0 && !hasInstallerParam {
 				// redirect to the installer page
-				return c.Redirect(http.StatusTemporaryRedirect, "?installer#")
+				return c.Redirect(http.StatusTemporaryRedirect, trailedAdminPath+"?installer#")
 			}
 
-			if hasAdmins && hasInstallerParam {
-				// clear the installer param
-				return c.Redirect(http.StatusTemporaryRedirect, "?")
+			if totalAdmins != 0 && hasInstallerParam {
+				// redirect to the home page
+				return c.Redirect(http.StatusTemporaryRedirect, trailedAdminPath+"#/")
 			}
 
 			return next(c)

apis/base_test.go

@@ -1,23 +1,16 @@
 package apis_test
 
 import (
-	"database/sql"
 	"errors"
-	"fmt"
 	"net/http"
-	"strings"
 	"testing"
 
 	"github.com/labstack/echo/v5"
 	"github.com/pocketbase/pocketbase/apis"
 	"github.com/pocketbase/pocketbase/tests"
-	"github.com/pocketbase/pocketbase/tools/rest"
-	"github.com/spf13/cast"
 )
 
 func Test404(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Method:          http.MethodGet,
@@ -56,8 +49,6 @@ func Test404(t *testing.T) {
 }
 
 func TestCustomRoutesAndErrorsHandling(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:   "custom route",
@@ -145,278 +136,3 @@ func TestCustomRoutesAndErrorsHandling(t *testing.T) {
 		scenario.Test(t)
 	}
 }
-
-func TestRemoveTrailingSlashMiddleware(t *testing.T) {
-	t.Parallel()
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:   "non /api/* route (exact match)",
-			Method: http.MethodGet,
-			Url:    "/custom",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.AddRoute(echo.Route{
-					Method: http.MethodGet,
-					Path:   "/custom",
-					Handler: func(c echo.Context) error {
-						return c.String(200, "test123")
-					},
-				})
-			},
-			ExpectedStatus:  200,
-			ExpectedContent: []string{"test123"},
-		},
-		{
-			Name:   "non /api/* route (with trailing slash)",
-			Method: http.MethodGet,
-			Url:    "/custom/",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.AddRoute(echo.Route{
-					Method: http.MethodGet,
-					Path:   "/custom",
-					Handler: func(c echo.Context) error {
-						return c.String(200, "test123")
-					},
-				})
-			},
-			ExpectedStatus:  404,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "/api/* route (exact match)",
-			Method: http.MethodGet,
-			Url:    "/api/custom",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.AddRoute(echo.Route{
-					Method: http.MethodGet,
-					Path:   "/api/custom",
-					Handler: func(c echo.Context) error {
-						return c.String(200, "test123")
-					},
-				})
-			},
-			ExpectedStatus:  200,
-			ExpectedContent: []string{"test123"},
-		},
-		{
-			Name:   "/api/* route (with trailing slash)",
-			Method: http.MethodGet,
-			Url:    "/api/custom/",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.AddRoute(echo.Route{
-					Method: http.MethodGet,
-					Path:   "/api/custom",
-					Handler: func(c echo.Context) error {
-						return c.String(200, "test123")
-					},
-				})
-			},
-			ExpectedStatus:  200,
-			ExpectedContent: []string{"test123"},
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}
-
-func TestMultiBinder(t *testing.T) {
-	t.Parallel()
-
-	rawJson := `{"name":"test123"}`
-
-	formData, mp, err := tests.MockMultipartData(map[string]string{
-		rest.MultipartJsonKey: rawJson,
-	})
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:   "non-api group route",
-			Method: "POST",
-			Url:    "/custom",
-			Body:   strings.NewReader(rawJson),
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.AddRoute(echo.Route{
-					Method: "POST",
-					Path:   "/custom",
-					Handler: func(c echo.Context) error {
-						data := &struct {
-							Name string `json:"name"`
-						}{}
-
-						if err := c.Bind(data); err != nil {
-							return err
-						}
-
-						// try to read the body again
-						r := apis.RequestInfo(c)
-						if v := cast.ToString(r.Data["name"]); v != "test123" {
-							t.Fatalf("Expected request data with name %q, got, %q", "test123", v)
-						}
-
-						return c.NoContent(200)
-					},
-				})
-			},
-			ExpectedStatus: 200,
-		},
-		{
-			Name:   "api group route",
-			Method: "GET",
-			Url:    "/api/admins",
-			Body:   strings.NewReader(rawJson),
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.Use(func(next echo.HandlerFunc) echo.HandlerFunc {
-					return func(c echo.Context) error {
-						// it is not important whether the route handler return an error since
-						// we just need to ensure that the eagerRequestInfoCache was registered
-						next(c)
-
-						// ensure that the body was read at least once
-						data := &struct {
-							Name string `json:"name"`
-						}{}
-						c.Bind(data)
-
-						// try to read the body again
-						r := apis.RequestInfo(c)
-						if v := cast.ToString(r.Data["name"]); v != "test123" {
-							t.Fatalf("Expected request data with name %q, got, %q", "test123", v)
-						}
-
-						return nil
-					}
-				})
-			},
-			ExpectedStatus: 200,
-		},
-		{
-			Name:   "custom route with @jsonPayload as multipart body",
-			Method: "POST",
-			Url:    "/custom",
-			Body:   formData,
-			RequestHeaders: map[string]string{
-				"Content-Type": mp.FormDataContentType(),
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.AddRoute(echo.Route{
-					Method: "POST",
-					Path:   "/custom",
-					Handler: func(c echo.Context) error {
-						data := &struct {
-							Name string `json:"name"`
-						}{}
-
-						if err := c.Bind(data); err != nil {
-							return err
-						}
-
-						// try to read the body again
-						r := apis.RequestInfo(c)
-						if v := cast.ToString(r.Data["name"]); v != "test123" {
-							t.Fatalf("Expected request data with name %q, got, %q", "test123", v)
-						}
-
-						return c.NoContent(200)
-					},
-				})
-			},
-			ExpectedStatus: 200,
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}
-
-func TestErrorHandler(t *testing.T) {
-	t.Parallel()
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:   "apis.ApiError",
-			Method: http.MethodGet,
-			Url:    "/test",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.GET("/test", func(c echo.Context) error {
-					return apis.NewApiError(418, "test", nil)
-				})
-			},
-			ExpectedStatus:  418,
-			ExpectedContent: []string{`"message":"Test."`},
-		},
-		{
-			Name:   "wrapped apis.ApiError",
-			Method: http.MethodGet,
-			Url:    "/test",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.GET("/test", func(c echo.Context) error {
-					return fmt.Errorf("example 123: %w", apis.NewApiError(418, "test", nil))
-				})
-			},
-			ExpectedStatus:     418,
-			ExpectedContent:    []string{`"message":"Test."`},
-			NotExpectedContent: []string{"example", "123"},
-		},
-		{
-			Name:   "echo.HTTPError",
-			Method: http.MethodGet,
-			Url:    "/test",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.GET("/test", func(c echo.Context) error {
-					return echo.NewHTTPError(418, "test")
-				})
-			},
-			ExpectedStatus:  418,
-			ExpectedContent: []string{`"message":"Test."`},
-		},
-		{
-			Name:   "wrapped echo.HTTPError",
-			Method: http.MethodGet,
-			Url:    "/test",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.GET("/test", func(c echo.Context) error {
-					return fmt.Errorf("example 123: %w", echo.NewHTTPError(418, "test"))
-				})
-			},
-			ExpectedStatus:     418,
-			ExpectedContent:    []string{`"message":"Test."`},
-			NotExpectedContent: []string{"example", "123"},
-		},
-		{
-			Name:   "wrapped sql.ErrNoRows",
-			Method: http.MethodGet,
-			Url:    "/test",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.GET("/test", func(c echo.Context) error {
-					return fmt.Errorf("example 123: %w", sql.ErrNoRows)
-				})
-			},
-			ExpectedStatus:     404,
-			ExpectedContent:    []string{`"data":{}`},
-			NotExpectedContent: []string{"example", "123"},
-		},
-		{
-			Name:   "custom error",
-			Method: http.MethodGet,
-			Url:    "/test",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				e.GET("/test", func(c echo.Context) error {
-					return fmt.Errorf("example 123")
-				})
-			},
-			ExpectedStatus:     400,
-			ExpectedContent:    []string{`"data":{}`},
-			NotExpectedContent: []string{"example", "123"},
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}

apis/collection.go

@@ -1,6 +1,7 @@
 package apis
 
 import (
+	"log"
 	"net/http"
 
 	"github.com/labstack/echo/v5"
@@ -48,10 +49,6 @@ func (api *collectionApi) list(c echo.Context) error {
 	event.Result = result
 
 	return api.app.OnCollectionsListRequest().Trigger(event, func(e *core.CollectionsListEvent) error {
-		if e.HttpContext.Response().Committed {
-			return nil
-		}
-
 		return e.HttpContext.JSON(http.StatusOK, e.Result)
 	})
 }
@@ -67,10 +64,6 @@ func (api *collectionApi) view(c echo.Context) error {
 	event.Collection = collection
 
 	return api.app.OnCollectionViewRequest().Trigger(event, func(e *core.CollectionViewEvent) error {
-		if e.HttpContext.Response().Committed {
-			return nil
-		}
-
 		return e.HttpContext.JSON(http.StatusOK, e.Collection)
 	})
 }
@@ -90,7 +83,7 @@ func (api *collectionApi) create(c echo.Context) error {
 	event.Collection = collection
 
 	// create the collection
-	return form.Submit(func(next forms.InterceptorNextFunc[*models.Collection]) forms.InterceptorNextFunc[*models.Collection] {
+	submitErr := form.Submit(func(next forms.InterceptorNextFunc[*models.Collection]) forms.InterceptorNextFunc[*models.Collection] {
 		return func(m *models.Collection) error {
 			event.Collection = m
 
@@ -99,16 +92,18 @@ func (api *collectionApi) create(c echo.Context) error {
 					return NewBadRequestError("Failed to create the collection.", err)
 				}
 
-				return api.app.OnCollectionAfterCreateRequest().Trigger(event, func(e *core.CollectionCreateEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.JSON(http.StatusOK, e.Collection)
-				})
+				return e.HttpContext.JSON(http.StatusOK, e.Collection)
 			})
 		}
 	})
+
+	if submitErr == nil {
+		if err := api.app.OnCollectionAfterCreateRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
+	return submitErr
 }
 
 func (api *collectionApi) update(c echo.Context) error {
@@ -129,7 +124,7 @@ func (api *collectionApi) update(c echo.Context) error {
 	event.Collection = collection
 
 	// update the collection
-	return form.Submit(func(next forms.InterceptorNextFunc[*models.Collection]) forms.InterceptorNextFunc[*models.Collection] {
+	submitErr := form.Submit(func(next forms.InterceptorNextFunc[*models.Collection]) forms.InterceptorNextFunc[*models.Collection] {
 		return func(m *models.Collection) error {
 			event.Collection = m
 
@@ -138,16 +133,18 @@ func (api *collectionApi) update(c echo.Context) error {
 					return NewBadRequestError("Failed to update the collection.", err)
 				}
 
-				return api.app.OnCollectionAfterUpdateRequest().Trigger(event, func(e *core.CollectionUpdateEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.JSON(http.StatusOK, e.Collection)
-				})
+				return e.HttpContext.JSON(http.StatusOK, e.Collection)
 			})
 		}
 	})
+
+	if submitErr == nil {
+		if err := api.app.OnCollectionAfterUpdateRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
+	return submitErr
 }
 
 func (api *collectionApi) delete(c echo.Context) error {
@@ -160,19 +157,21 @@ func (api *collectionApi) delete(c echo.Context) error {
 	event.HttpContext = c
 	event.Collection = collection
 
-	return api.app.OnCollectionBeforeDeleteRequest().Trigger(event, func(e *core.CollectionDeleteEvent) error {
+	handlerErr := api.app.OnCollectionBeforeDeleteRequest().Trigger(event, func(e *core.CollectionDeleteEvent) error {
 		if err := api.app.Dao().DeleteCollection(e.Collection); err != nil {
-			return NewBadRequestError("Failed to delete collection due to existing dependency.", err)
+			return NewBadRequestError("Failed to delete collection. Make sure that the collection is not referenced by other collections.", err)
 		}
 
-		return api.app.OnCollectionAfterDeleteRequest().Trigger(event, func(e *core.CollectionDeleteEvent) error {
-			if e.HttpContext.Response().Committed {
-				return nil
-			}
-
-			return e.HttpContext.NoContent(http.StatusNoContent)
-		})
+		return e.HttpContext.NoContent(http.StatusNoContent)
 	})
+
+	if handlerErr == nil {
+		if err := api.app.OnCollectionAfterDeleteRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
+	return handlerErr
 }
 
 func (api *collectionApi) bulkImport(c echo.Context) error {
@@ -188,7 +187,7 @@ func (api *collectionApi) bulkImport(c echo.Context) error {
 	event.Collections = form.Collections
 
 	// import collections
-	return form.Submit(func(next forms.InterceptorNextFunc[[]*models.Collection]) forms.InterceptorNextFunc[[]*models.Collection] {
+	submitErr := form.Submit(func(next forms.InterceptorNextFunc[[]*models.Collection]) forms.InterceptorNextFunc[[]*models.Collection] {
 		return func(imports []*models.Collection) error {
 			event.Collections = imports
 
@@ -197,14 +196,16 @@ func (api *collectionApi) bulkImport(c echo.Context) error {
 					return NewBadRequestError("Failed to import the submitted collections.", err)
 				}
 
-				return api.app.OnCollectionsAfterImportRequest().Trigger(event, func(e *core.CollectionsImportEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.NoContent(http.StatusNoContent)
-				})
+				return e.HttpContext.NoContent(http.StatusNoContent)
 			})
 		}
 	})
+
+	if submitErr == nil {
+		if err := api.app.OnCollectionsAfterImportRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
+	return submitErr
 }

apis/collection_test.go

@@ -1,7 +1,6 @@
 package apis_test
 
 import (
-	"errors"
 	"net/http"
 	"os"
 	"path/filepath"
@@ -10,15 +9,13 @@ import (
 	"time"
 
 	"github.com/labstack/echo/v5"
-	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/models"
+	"github.com/pocketbase/pocketbase/models/schema"
 	"github.com/pocketbase/pocketbase/tests"
 	"github.com/pocketbase/pocketbase/tools/list"
 )
 
 func TestCollectionsList(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -48,7 +45,7 @@ func TestCollectionsList(t *testing.T) {
 			ExpectedContent: []string{
 				`"page":1`,
 				`"perPage":30`,
-				`"totalItems":11`,
+				`"totalItems":8`,
 				`"items":[{`,
 				`"id":"_pb_users_auth_"`,
 				`"id":"v851q4r790rhknl"`,
@@ -58,7 +55,6 @@ func TestCollectionsList(t *testing.T) {
 				`"id":"wzlqyes4orhoygb"`,
 				`"id":"4d1blo5cuycfaca"`,
 				`"id":"9n89pl5vkct6330"`,
-				`"id":"ib3m2700k5hlsjz"`,
 				`"type":"auth"`,
 				`"type":"base"`,
 			},
@@ -77,10 +73,10 @@ func TestCollectionsList(t *testing.T) {
 			ExpectedContent: []string{
 				`"page":2`,
 				`"perPage":2`,
-				`"totalItems":11`,
+				`"totalItems":8`,
 				`"items":[{`,
-				`"id":"v9gwnfh02gjq1q0"`,
-				`"id":"9n89pl5vkct6330"`,
+				`"id":"v851q4r790rhknl"`,
+				`"id":"4d1blo5cuycfaca"`,
 			},
 			ExpectedEvents: map[string]int{
 				"OnCollectionsListRequest": 1,
@@ -127,8 +123,6 @@ func TestCollectionsList(t *testing.T) {
 }
 
 func TestCollectionView(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -197,8 +191,6 @@ func TestCollectionView(t *testing.T) {
 }
 
 func TestCollectionDelete(t *testing.T) {
-	t.Parallel()
-
 	ensureDeletedFiles := func(app *tests.TestApp, collectionId string) {
 		storageDir := filepath.Join(app.DataDir(), "storage", collectionId)
 
@@ -239,7 +231,7 @@ func TestCollectionDelete(t *testing.T) {
 		{
 			Name:   "authorized as admin + using the collection name",
 			Method: http.MethodDelete,
-			Url:    "/api/collections/demo5",
+			Url:    "/api/collections/demo1",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
@@ -251,14 +243,14 @@ func TestCollectionDelete(t *testing.T) {
 				"OnCollectionBeforeDeleteRequest": 1,
 				"OnCollectionAfterDeleteRequest":  1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				ensureDeletedFiles(app, "9n89pl5vkct6330")
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
+				ensureDeletedFiles(app, "wsmn24bux7wo113")
 			},
 		},
 		{
 			Name:   "authorized as admin + using the collection id",
 			Method: http.MethodDelete,
-			Url:    "/api/collections/9n89pl5vkct6330",
+			Url:    "/api/collections/wsmn24bux7wo113",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
@@ -270,8 +262,8 @@ func TestCollectionDelete(t *testing.T) {
 				"OnCollectionBeforeDeleteRequest": 1,
 				"OnCollectionAfterDeleteRequest":  1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				ensureDeletedFiles(app, "9n89pl5vkct6330")
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
+				ensureDeletedFiles(app, "wsmn24bux7wo113")
 			},
 		},
 		{
@@ -300,42 +292,6 @@ func TestCollectionDelete(t *testing.T) {
 				"OnCollectionBeforeDeleteRequest": 1,
 			},
 		},
-		{
-			Name:   "authorized as admin + deleting a view",
-			Method: http.MethodDelete,
-			Url:    "/api/collections/view2",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 204,
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeDelete":             1,
-				"OnModelAfterDelete":              1,
-				"OnCollectionBeforeDeleteRequest": 1,
-				"OnCollectionAfterDeleteRequest":  1,
-			},
-		},
-		{
-			Name:   "OnCollectionAfterDeleteRequest error response",
-			Method: http.MethodDelete,
-			Url:    "/api/collections/view2",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnCollectionAfterDeleteRequest().Add(func(e *core.CollectionDeleteEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeDelete":             1,
-				"OnModelAfterDelete":              1,
-				"OnCollectionBeforeDeleteRequest": 1,
-				"OnCollectionAfterDeleteRequest":  1,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -344,8 +300,6 @@ func TestCollectionDelete(t *testing.T) {
 }
 
 func TestCollectionCreate(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -408,7 +362,7 @@ func TestCollectionCreate(t *testing.T) {
 				`"name":"new"`,
 				`"type":"base"`,
 				`"system":false`,
-				`"schema":[{"system":false,"id":"12345789","name":"test","type":"text","required":false,"presentable":false,"unique":false,"options":{"min":null,"max":null,"pattern":""}}]`,
+				`"schema":[{"system":false,"id":"12345789","name":"test","type":"text","required":false,"unique":false,"options":{"min":null,"max":null,"pattern":""}}]`,
 				`"options":{}`,
 			},
 			ExpectedEvents: map[string]int{
@@ -432,8 +386,8 @@ func TestCollectionCreate(t *testing.T) {
 				`"name":"new"`,
 				`"type":"auth"`,
 				`"system":false`,
-				`"schema":[{"system":false,"id":"12345789","name":"test","type":"text","required":false,"presentable":false,"unique":false,"options":{"min":null,"max":null,"pattern":""}}]`,
-				`"options":{"allowEmailAuth":false,"allowOAuth2Auth":false,"allowUsernameAuth":false,"exceptEmailDomains":null,"manageRule":null,"minPasswordLength":0,"onlyEmailDomains":null,"onlyVerified":false,"requireEmail":false}`,
+				`"schema":[{"system":false,"id":"12345789","name":"test","type":"text","required":false,"unique":false,"options":{"min":null,"max":null,"pattern":""}}]`,
+				`"options":{"allowEmailAuth":false,"allowOAuth2Auth":false,"allowUsernameAuth":false,"exceptEmailDomains":null,"manageRule":null,"minPasswordLength":0,"onlyEmailDomains":null,"requireEmail":false}`,
 			},
 			ExpectedEvents: map[string]int{
 				"OnModelBeforeCreate":             1,
@@ -566,155 +520,6 @@ func TestCollectionCreate(t *testing.T) {
 				`"options":{"minPasswordLength":{"code":"validation_required"`,
 			},
 		},
-		{
-			Name:   "OnCollectionAfterCreateRequest error response",
-			Method: http.MethodPost,
-			Url:    "/api/collections",
-			Body:   strings.NewReader(`{"name":"new","type":"base","schema":[{"type":"text","id":"12345789","name":"test"}]}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnCollectionAfterCreateRequest().Add(func(e *core.CollectionCreateEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeCreate":             1,
-				"OnModelAfterCreate":              1,
-				"OnCollectionBeforeCreateRequest": 1,
-				"OnCollectionAfterCreateRequest":  1,
-			},
-		},
-
-		// view
-		// -----------------------------------------------------------
-		{
-			Name:   "trying to create view collection with invalid options",
-			Method: http.MethodPost,
-			Url:    "/api/collections",
-			Body: strings.NewReader(`{
-				"name":"new",
-				"type":"view",
-				"schema":[{"type":"text","id":"12345789","name":"ignored!@#$"}],
-				"options":{"query": "invalid"}
-			}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"data":{`,
-				`"options":{"query":{"code":"validation_invalid_view_query`,
-			},
-		},
-		{
-			Name:   "creating view collection",
-			Method: http.MethodPost,
-			Url:    "/api/collections",
-			Body: strings.NewReader(`{
-				"name":"new",
-				"type":"view",
-				"schema":[{"type":"text","id":"12345789","name":"ignored!@#$"}],
-				"options": {
-					"query": "select 1 as id from _admins"
-				}
-			}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"name":"new"`,
-				`"type":"view"`,
-				`"schema":[]`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeCreate":             1,
-				"OnModelAfterCreate":              1,
-				"OnCollectionBeforeCreateRequest": 1,
-				"OnCollectionAfterCreateRequest":  1,
-			},
-		},
-
-		// indexes
-		// -----------------------------------------------------------
-		{
-			Name:   "creating base collection with invalid indexes",
-			Method: http.MethodPost,
-			Url:    "/api/collections",
-			Body: strings.NewReader(`{
-				"name":"new",
-				"type":"base",
-				"schema":[
-					{"type":"text","name":"test"}
-				],
-				"indexes": [
-					"create index idx_test1 on new (test)",
-					"create index idx_test2 on new (missing)"
-				]
-			}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"data":{`,
-				`"indexes":{"1":{"code":"`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnCollectionBeforeCreateRequest": 1,
-				"OnModelBeforeCreate":             1,
-			},
-		},
-		{
-			Name:   "creating base collection with valid indexes (+ random table name)",
-			Method: http.MethodPost,
-			Url:    "/api/collections",
-			Body: strings.NewReader(`{
-				"name":"new",
-				"type":"base",
-				"schema":[
-					{"type":"text","name":"test"}
-				],
-				"indexes": [
-					"create index idx_test1 on new (test)",
-					"create index idx_test2 on anything (id, test)"
-				]
-			}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"name":"new"`,
-				`"type":"base"`,
-				`"indexes":[`,
-				`idx_test1`,
-				`idx_test2`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeCreate":             1,
-				"OnModelAfterCreate":              1,
-				"OnCollectionBeforeCreateRequest": 1,
-				"OnCollectionAfterCreateRequest":  1,
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				indexes, err := app.Dao().TableIndexes("new")
-				if err != nil {
-					t.Fatal(err)
-				}
-
-				expected := []string{"idx_test1", "idx_test2"}
-				for name := range indexes {
-					if !list.ExistInSlice(name, expected) {
-						t.Fatalf("Missing index %q", name)
-					}
-				}
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -723,8 +528,6 @@ func TestCollectionCreate(t *testing.T) {
 }
 
 func TestCollectionUpdate(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -774,28 +577,6 @@ func TestCollectionUpdate(t *testing.T) {
 				"OnModelBeforeUpdate":             1,
 			},
 		},
-		{
-			Name:   "OnCollectionAfterUpdateRequest error response",
-			Method: http.MethodPatch,
-			Url:    "/api/collections/demo1",
-			Body:   strings.NewReader(`{}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnCollectionAfterUpdateRequest().Add(func(e *core.CollectionUpdateEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnCollectionAfterUpdateRequest":  1,
-				"OnCollectionBeforeUpdateRequest": 1,
-				"OnModelAfterUpdate":              1,
-				"OnModelBeforeUpdate":             1,
-			},
-		},
 		{
 			Name:   "authorized as admin + invalid data (eg. existing name)",
 			Method: http.MethodPatch,
@@ -833,7 +614,7 @@ func TestCollectionUpdate(t *testing.T) {
 				"OnCollectionBeforeUpdateRequest": 1,
 				"OnCollectionAfterUpdateRequest":  1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				// check if the record table was renamed
 				if !app.Dao().HasTable("new") {
 					t.Fatal("Couldn't find record table 'new'.")
@@ -879,7 +660,7 @@ func TestCollectionUpdate(t *testing.T) {
 		{
 			Name:   "updating base collection with reserved auth fields",
 			Method: http.MethodPatch,
-			Url:    "/api/collections/demo4",
+			Url:    "/api/collections/demo1",
 			Body: strings.NewReader(`{
 				"schema":[
 					{"type":"text","name":"email"},
@@ -893,15 +674,14 @@ func TestCollectionUpdate(t *testing.T) {
 					{"type":"text","name":"password"},
 					{"type":"text","name":"passwordConfirm"},
 					{"type":"text","name":"oldPassword"}
-				],
-				"indexes": []
+				]
 			}`),
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
 			ExpectedStatus: 200,
 			ExpectedContent: []string{
-				`"name":"demo4"`,
+				`"name":"demo1"`,
 				`"type":"base"`,
 				`"schema":[{`,
 				`"email"`,
@@ -970,89 +750,18 @@ func TestCollectionUpdate(t *testing.T) {
 			},
 		},
 
-		// view
-		// -----------------------------------------------------------
+		// rel field change displayFields propagation
 		{
-			Name:   "trying to update view collection with invalid options",
+			Name:   "renaming a display field should also update the referenced displayFields value",
 			Method: http.MethodPatch,
-			Url:    "/api/collections/view1",
+			Url:    "/api/collections/demo3",
 			Body: strings.NewReader(`{
-				"schema":[{"type":"text","id":"12345789","name":"ignored!@#$"}],
-				"options":{"query": "invalid"}
-			}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"data":{`,
-				`"options":{"query":{"code":"validation_invalid_view_query`,
-			},
-		},
-		{
-			Name:   "updating view collection",
-			Method: http.MethodPatch,
-			Url:    "/api/collections/view2",
-			Body: strings.NewReader(`{
-				"name":"view2_update",
-				"schema":[{"type":"text","id":"12345789","name":"ignored!@#$"}],
-				"options": {
-					"query": "select 2 as id, created, updated, email from _admins"
-				}
-			}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"name":"view2_update"`,
-				`"type":"view"`,
-				`"schema":[{`,
-				`"name":"email"`,
-			},
-			NotExpectedContent: []string{
-				// base model fields are not part of the schema
-				`"name":"id"`,
-				`"name":"created"`,
-				`"name":"updated"`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeUpdate":             1,
-				"OnModelAfterUpdate":              1,
-				"OnCollectionBeforeUpdateRequest": 1,
-				"OnCollectionAfterUpdateRequest":  1,
-			},
-		},
-
-		// indexes
-		// -----------------------------------------------------------
-		{
-			Name:   "updating base collection with invalid indexes",
-			Method: http.MethodPatch,
-			Url:    "/api/collections/demo2",
-			Body: strings.NewReader(`{
-				"indexes": [
-					"create unique idx_test1 on demo1 (text)",
-					"create index idx_test2 on demo2 (id, title)"
-				]
-			}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"data":{`,
-				`"indexes":{"0":{"code":"`,
-			},
-		},
-		{
-			Name:   "updating base collection with valid indexes (+ random table name)",
-			Method: http.MethodPatch,
-			Url:    "/api/collections/demo2",
-			Body: strings.NewReader(`{
-				"indexes": [
-					"create unique index idx_test1 on demo2 (title)",
-					"create index idx_test2 on anything (active)"
+				"schema":[
+					{
+						"id": "w5z2x0nq",
+						"type": "text",
+						"name": "title_change"
+					}
 				]
 			}`),
 			RequestHeaders: map[string]string{
@@ -1060,28 +769,64 @@ func TestCollectionUpdate(t *testing.T) {
 			},
 			ExpectedStatus: 200,
 			ExpectedContent: []string{
-				`"name":"demo2"`,
-				`"indexes":[`,
-				"CREATE UNIQUE INDEX `idx_test1`",
-				"CREATE INDEX `idx_test2`",
+				`"name":"title_change"`,
 			},
 			ExpectedEvents: map[string]int{
-				"OnModelBeforeUpdate":             1,
-				"OnModelAfterUpdate":              1,
+				"OnModelBeforeUpdate":             2,
+				"OnModelAfterUpdate":              2,
 				"OnCollectionBeforeUpdateRequest": 1,
 				"OnCollectionAfterUpdateRequest":  1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				indexes, err := app.Dao().TableIndexes("new")
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
+				collection, err := app.Dao().FindCollectionByNameOrId("demo4")
 				if err != nil {
 					t.Fatal(err)
 				}
 
-				expected := []string{"idx_test1", "idx_test2"}
-				for name := range indexes {
-					if !list.ExistInSlice(name, expected) {
-						t.Fatalf("Missing index %q", name)
+				relField := collection.Schema.GetFieldByName("rel_many_no_cascade_required")
+				options := relField.Options.(*schema.RelationOptions)
+				expectedDisplayFields := []string{"title_change", "id"}
+				if len(list.SubtractSlice(options.DisplayFields, expectedDisplayFields)) != 0 {
+					t.Fatalf("Expected displayFields %v, got %v", expectedDisplayFields, options.DisplayFields)
+				}
+			},
+		},
+		{
+			Name:   "deleting a display field should also update the referenced displayFields value",
+			Method: http.MethodPatch,
+			Url:    "/api/collections/demo3",
+			Body: strings.NewReader(`{
+				"schema":[
+					{
+						"type": "text",
+						"name": "new_field"
 					}
+				]
+			}`),
+			RequestHeaders: map[string]string{
+				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
+			},
+			ExpectedStatus: 200,
+			ExpectedContent: []string{
+				`"name":"new_field"`,
+			},
+			ExpectedEvents: map[string]int{
+				"OnModelBeforeUpdate":             2,
+				"OnModelAfterUpdate":              2,
+				"OnCollectionBeforeUpdateRequest": 1,
+				"OnCollectionAfterUpdateRequest":  1,
+			},
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
+				collection, err := app.Dao().FindCollectionByNameOrId("demo4")
+				if err != nil {
+					t.Fatal(err)
+				}
+
+				relField := collection.Schema.GetFieldByName("rel_many_no_cascade_required")
+				options := relField.Options.(*schema.RelationOptions)
+				expectedDisplayFields := []string{"id"}
+				if len(list.SubtractSlice(options.DisplayFields, expectedDisplayFields)) != 0 {
+					t.Fatalf("Expected displayFields %v, got %v", expectedDisplayFields, options.DisplayFields)
 				}
 			},
 		},
@@ -1092,11 +837,7 @@ func TestCollectionUpdate(t *testing.T) {
 	}
 }
 
-func TestCollectionsImport(t *testing.T) {
-	t.Parallel()
-
-	totalCollections := 11
-
+func TestCollectionImport(t *testing.T) {
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -1128,12 +869,12 @@ func TestCollectionsImport(t *testing.T) {
 				`"data":{`,
 				`"collections":{"code":"validation_required"`,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				collections := []*models.Collection{}
 				if err := app.Dao().CollectionQuery().All(&collections); err != nil {
 					t.Fatal(err)
 				}
-				expected := totalCollections
+				expected := 8
 				if len(collections) != expected {
 					t.Fatalf("Expected %d collections, got %d", expected, len(collections))
 				}
@@ -1154,14 +895,14 @@ func TestCollectionsImport(t *testing.T) {
 			},
 			ExpectedEvents: map[string]int{
 				"OnCollectionsBeforeImportRequest": 1,
-				"OnModelBeforeDelete":              1,
+				"OnModelBeforeDelete":              6,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				collections := []*models.Collection{}
 				if err := app.Dao().CollectionQuery().All(&collections); err != nil {
 					t.Fatal(err)
 				}
-				expected := totalCollections
+				expected := 8
 				if len(collections) != expected {
 					t.Fatalf("Expected %d collections, got %d", expected, len(collections))
 				}
@@ -1198,12 +939,12 @@ func TestCollectionsImport(t *testing.T) {
 				"OnCollectionsBeforeImportRequest": 1,
 				"OnModelBeforeCreate":              2,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				collections := []*models.Collection{}
 				if err := app.Dao().CollectionQuery().All(&collections); err != nil {
 					t.Fatal(err)
 				}
-				expected := totalCollections
+				expected := 8
 				if len(collections) != expected {
 					t.Fatalf("Expected %d collections, got %d", expected, len(collections))
 				}
@@ -1233,9 +974,6 @@ func TestCollectionsImport(t *testing.T) {
 							  "name": "test",
 							  "type": "text"
 							}
-						],
-						"indexes": [
-							"create index idx_test on import2 (test)"
 						]
 					},
 					{
@@ -1254,21 +992,15 @@ func TestCollectionsImport(t *testing.T) {
 				"OnModelBeforeCreate":              3,
 				"OnModelAfterCreate":               3,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				collections := []*models.Collection{}
 				if err := app.Dao().CollectionQuery().All(&collections); err != nil {
 					t.Fatal(err)
 				}
-
-				expected := totalCollections + 3
+				expected := 11
 				if len(collections) != expected {
 					t.Fatalf("Expected %d collections, got %d", expected, len(collections))
 				}
-
-				indexes, err := app.Dao().TableIndexes("import2")
-				if err != nil || indexes["idx_test"] == "" {
-					t.Fatalf("Missing index %s (%v)", "idx_test", err)
-				}
 			},
 		},
 		{
@@ -1352,14 +1084,14 @@ func TestCollectionsImport(t *testing.T) {
 			ExpectedEvents: map[string]int{
 				"OnCollectionsAfterImportRequest":  1,
 				"OnCollectionsBeforeImportRequest": 1,
-				"OnModelBeforeDelete":              9,
-				"OnModelAfterDelete":               9,
+				"OnModelBeforeDelete":              6,
+				"OnModelAfterDelete":               6,
 				"OnModelBeforeUpdate":              2,
 				"OnModelAfterUpdate":               2,
 				"OnModelBeforeCreate":              1,
 				"OnModelAfterCreate":               1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				collections := []*models.Collection{}
 				if err := app.Dao().CollectionQuery().All(&collections); err != nil {
 					t.Fatal(err)
@@ -1370,58 +1102,6 @@ func TestCollectionsImport(t *testing.T) {
 				}
 			},
 		},
-		{
-			Name:   "authorized as admin + successful collections save",
-			Method: http.MethodPut,
-			Url:    "/api/collections/import",
-			Body: strings.NewReader(`{
-				"collections":[
-					{
-						"name": "import1",
-						"schema": [
-							{
-							  "id": "koih1lqx",
-							  "name": "test",
-							  "type": "text"
-							}
-						]
-					},
-					{
-						"name": "import2",
-						"schema": [
-							{
-							  "id": "koih1lqx",
-							  "name": "test",
-							  "type": "text"
-							}
-						],
-						"indexes": [
-							"create index idx_test on import2 (test)"
-						]
-					},
-					{
-						"name": "auth_without_schema",
-						"type": "auth"
-					}
-				]
-			}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnCollectionsAfterImportRequest().Add(func(e *core.CollectionsImportEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnCollectionsBeforeImportRequest": 1,
-				"OnCollectionsAfterImportRequest":  1,
-				"OnModelBeforeCreate":              3,
-				"OnModelAfterCreate":               3,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {

apis/file.go

@@ -1,26 +1,11 @@
 package apis
 
 import (
-	"context"
-	"errors"
-	"fmt"
-	"log/slog"
-	"net/http"
-	"runtime"
-	"strings"
-	"time"
-
 	"github.com/labstack/echo/v5"
 	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/models/schema"
-	"github.com/pocketbase/pocketbase/tokens"
-	"github.com/pocketbase/pocketbase/tools/filesystem"
 	"github.com/pocketbase/pocketbase/tools/list"
-	"github.com/pocketbase/pocketbase/tools/security"
-	"github.com/spf13/cast"
-	"golang.org/x/sync/semaphore"
-	"golang.org/x/sync/singleflight"
 )
 
 var imageContentTypes = []string{"image/png", "image/jpg", "image/jpeg", "image/gif"}
@@ -28,62 +13,14 @@ var defaultThumbSizes = []string{"100x100"}
 
 // bindFileApi registers the file api endpoints and the corresponding handlers.
 func bindFileApi(app core.App, rg *echo.Group) {
-	api := fileApi{
-		app:             app,
-		thumbGenSem:     semaphore.NewWeighted(int64(runtime.NumCPU() + 2)), // the value is arbitrary chosen and may change in the future
-		thumbGenPending: new(singleflight.Group),
-		thumbGenMaxWait: 60 * time.Second,
-	}
+	api := fileApi{app: app}
 
 	subGroup := rg.Group("/files", ActivityLogger(app))
-	subGroup.POST("/token", api.fileToken)
-	subGroup.HEAD("/:collection/:recordId/:filename", api.download, LoadCollectionContext(api.app))
 	subGroup.GET("/:collection/:recordId/:filename", api.download, LoadCollectionContext(api.app))
 }
 
 type fileApi struct {
 	app core.App
-
-	// thumbGenSem is a semaphore to prevent too much concurrent
-	// requests generating new thumbs at the same time.
-	thumbGenSem *semaphore.Weighted
-
-	// thumbGenPending represents a group of currently pending
-	// thumb generation processes.
-	thumbGenPending *singleflight.Group
-
-	// thumbGenMaxWait is the maximum waiting time for starting a new
-	// thumb generation process.
-	thumbGenMaxWait time.Duration
-}
-
-func (api *fileApi) fileToken(c echo.Context) error {
-	event := new(core.FileTokenEvent)
-	event.HttpContext = c
-
-	if admin, _ := c.Get(ContextAdminKey).(*models.Admin); admin != nil {
-		event.Model = admin
-		event.Token, _ = tokens.NewAdminFileToken(api.app, admin)
-	} else if record, _ := c.Get(ContextAuthRecordKey).(*models.Record); record != nil {
-		event.Model = record
-		event.Token, _ = tokens.NewRecordFileToken(api.app, record)
-	}
-
-	return api.app.OnFileBeforeTokenRequest().Trigger(event, func(e *core.FileTokenEvent) error {
-		if e.Model == nil || e.Token == "" {
-			return NewBadRequestError("Failed to generate file token.", nil)
-		}
-
-		return api.app.OnFileAfterTokenRequest().Trigger(event, func(e *core.FileTokenEvent) error {
-			if e.HttpContext.Response().Committed {
-				return nil
-			}
-
-			return e.HttpContext.JSON(http.StatusOK, map[string]string{
-				"token": e.Token,
-			})
-		})
-	})
 }
 
 func (api *fileApi) download(c echo.Context) error {
@@ -108,54 +45,15 @@ func (api *fileApi) download(c echo.Context) error {
 	if fileField == nil {
 		return NewNotFoundError("", nil)
 	}
+	options, _ := fileField.Options.(*schema.FileOptions)
 
-	options, ok := fileField.Options.(*schema.FileOptions)
-	if !ok {
-		return NewBadRequestError("", errors.New("failed to load file options"))
-	}
-
-	// check whether the request is authorized to view the protected file
-	if options.Protected {
-		token := c.QueryParam("token")
-
-		adminOrAuthRecord, _ := api.findAdminOrAuthRecordByFileToken(token)
-
-		// create a copy of the cached request data and adjust it for the current auth model
-		requestInfo := *RequestInfo(c)
-		requestInfo.Context = models.RequestInfoContextProtectedFile
-		requestInfo.Admin = nil
-		requestInfo.AuthRecord = nil
-		if adminOrAuthRecord != nil {
-			if admin, _ := adminOrAuthRecord.(*models.Admin); admin != nil {
-				requestInfo.Admin = admin
-			} else if record, _ := adminOrAuthRecord.(*models.Record); record != nil {
-				requestInfo.AuthRecord = record
-			}
-		}
-
-		if ok, _ := api.app.Dao().CanAccessRecord(record, &requestInfo, record.Collection().ViewRule); !ok {
-			return NewForbiddenError("Insufficient permissions to access the file resource.", nil)
-		}
-	}
-
-	baseFilesPath := record.BaseFilesPath()
-
-	// fetch the original view file field related record
-	if collection.IsView() {
-		fileRecord, err := api.app.Dao().FindRecordByViewFile(collection.Id, fileField.Name, filename)
-		if err != nil {
-			return NewNotFoundError("", fmt.Errorf("Failed to fetch view file field record: %w", err))
-		}
-		baseFilesPath = fileRecord.BaseFilesPath()
-	}
-
-	fsys, err := api.app.NewFilesystem()
+	fs, err := api.app.NewFilesystem()
 	if err != nil {
 		return NewBadRequestError("Filesystem initialization failure.", err)
 	}
-	defer fsys.Close()
+	defer fs.Close()
 
-	originalPath := baseFilesPath + "/" + filename
+	originalPath := record.BaseFilesPath() + "/" + filename
 	servedPath := originalPath
 	servedName := filename
 
@@ -163,7 +61,7 @@ func (api *fileApi) download(c echo.Context) error {
 	thumbSize := c.QueryParam("thumb")
 	if thumbSize != "" && (list.ExistInSlice(thumbSize, defaultThumbSizes) || list.ExistInSlice(thumbSize, options.Thumbs)) {
 		// extract the original file meta attributes and check it existence
-		oAttrs, oAttrsErr := fsys.Attributes(originalPath)
+		oAttrs, oAttrsErr := fs.Attributes(originalPath)
 		if oAttrsErr != nil {
 			return NewNotFoundError("", err)
 		}
@@ -172,21 +70,15 @@ func (api *fileApi) download(c echo.Context) error {
 		if list.ExistInSlice(oAttrs.ContentType, imageContentTypes) {
 			// add thumb size as file suffix
 			servedName = thumbSize + "_" + filename
-			servedPath = baseFilesPath + "/thumbs_" + filename + "/" + servedName
+			servedPath = record.BaseFilesPath() + "/thumbs_" + filename + "/" + servedName
 
-			// create a new thumb if it doesn't exist
-			if exists, _ := fsys.Exists(servedPath); !exists {
-				if err := api.createThumb(c, fsys, originalPath, servedPath, thumbSize); err != nil {
-					api.app.Logger().Warn(
-						"Fallback to original - failed to create thumb "+servedName,
-						slog.Any("error", err),
-						slog.String("original", originalPath),
-						slog.String("thumb", servedPath),
-					)
-
-					// fallback to the original
-					servedName = filename
-					servedPath = originalPath
+			// check if the thumb exists:
+			// - if doesn't exist - create a new thumb with the specified thumb size
+			// - if exists - compare last modified dates to determine whether the thumb should be recreated
+			tAttrs, tAttrsErr := fs.Attributes(servedPath)
+			if tAttrsErr != nil || oAttrs.ModTime.After(tAttrs.ModTime) {
+				if err := fs.CreateThumb(originalPath, servedPath, thumbSize); err != nil {
+					servedPath = originalPath // fallback to the original
 				}
 			}
 		}
@@ -200,77 +92,13 @@ func (api *fileApi) download(c echo.Context) error {
 	event.ServedPath = servedPath
 	event.ServedName = servedName
 
-	// clickjacking shouldn't be a concern when serving uploaded files,
-	// so it safe to unset the global X-Frame-Options to allow files embedding
-	// (note: it is out of the hook to allow users to customize the behavior)
-	c.Response().Header().Del("X-Frame-Options")
-
 	return api.app.OnFileDownloadRequest().Trigger(event, func(e *core.FileDownloadEvent) error {
-		if e.HttpContext.Response().Committed {
-			return nil
-		}
-
-		if err := fsys.Serve(e.HttpContext.Response(), e.HttpContext.Request(), e.ServedPath, e.ServedName); err != nil {
+		res := e.HttpContext.Response()
+		req := e.HttpContext.Request()
+		if err := fs.Serve(res, req, e.ServedPath, e.ServedName); err != nil {
 			return NewNotFoundError("", err)
 		}
 
 		return nil
 	})
 }
-
-func (api *fileApi) findAdminOrAuthRecordByFileToken(fileToken string) (models.Model, error) {
-	fileToken = strings.TrimSpace(fileToken)
-	if fileToken == "" {
-		return nil, errors.New("missing file token")
-	}
-
-	claims, _ := security.ParseUnverifiedJWT(strings.TrimSpace(fileToken))
-	tokenType := cast.ToString(claims["type"])
-
-	switch tokenType {
-	case tokens.TypeAdmin:
-		admin, err := api.app.Dao().FindAdminByToken(
-			fileToken,
-			api.app.Settings().AdminFileToken.Secret,
-		)
-		if err == nil && admin != nil {
-			return admin, nil
-		}
-	case tokens.TypeAuthRecord:
-		record, err := api.app.Dao().FindAuthRecordByToken(
-			fileToken,
-			api.app.Settings().RecordFileToken.Secret,
-		)
-		if err == nil && record != nil {
-			return record, nil
-		}
-	}
-
-	return nil, errors.New("missing or invalid file token")
-}
-
-func (api *fileApi) createThumb(
-	c echo.Context,
-	fsys *filesystem.System,
-	originalPath string,
-	thumbPath string,
-	thumbSize string,
-) error {
-	ch := api.thumbGenPending.DoChan(thumbPath, func() (any, error) {
-		ctx, cancel := context.WithTimeout(c.Request().Context(), api.thumbGenMaxWait)
-		defer cancel()
-
-		if err := api.thumbGenSem.Acquire(ctx, 1); err != nil {
-			return nil, err
-		}
-		defer api.thumbGenSem.Release(1)
-
-		return nil, fsys.CreateThumb(originalPath, thumbPath, thumbSize)
-	})
-
-	res := <-ch
-
-	api.thumbGenPending.Forget(thumbPath)
-
-	return res.Err
-}

apis/file_test.go

@@ -2,100 +2,16 @@ package apis_test
 
 import (
 	"net/http"
-	"net/http/httptest"
 	"os"
 	"path"
 	"path/filepath"
 	"runtime"
-	"sync"
 	"testing"
 
-	"github.com/labstack/echo/v5"
-	"github.com/pocketbase/pocketbase/apis"
-	"github.com/pocketbase/pocketbase/core"
-	"github.com/pocketbase/pocketbase/daos"
-	"github.com/pocketbase/pocketbase/models/schema"
 	"github.com/pocketbase/pocketbase/tests"
-	"github.com/pocketbase/pocketbase/tools/types"
 )
 
-func TestFileToken(t *testing.T) {
-	t.Parallel()
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:            "unauthorized",
-			Method:          http.MethodPost,
-			Url:             "/api/files/token",
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnFileBeforeTokenRequest": 1,
-			},
-		},
-		{
-			Name:   "unauthorized with model and token via hook",
-			Method: http.MethodPost,
-			Url:    "/api/files/token",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnFileBeforeTokenRequest().Add(func(e *core.FileTokenEvent) error {
-					record, _ := app.Dao().FindAuthRecordByEmail("users", "test@example.com")
-					e.Model = record
-					e.Token = "test"
-					return nil
-				})
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"token":"test"`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnFileBeforeTokenRequest": 1,
-				"OnFileAfterTokenRequest":  1,
-			},
-		},
-		{
-			Name:   "auth record",
-			Method: http.MethodPost,
-			Url:    "/api/files/token",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"token":"`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnFileBeforeTokenRequest": 1,
-				"OnFileAfterTokenRequest":  1,
-			},
-		},
-		{
-			Name:   "admin",
-			Method: http.MethodPost,
-			Url:    "/api/files/token",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"token":"`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnFileBeforeTokenRequest": 1,
-				"OnFileAfterTokenRequest":  1,
-			},
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}
-
 func TestFileDownload(t *testing.T) {
-	t.Parallel()
-
 	_, currentFile, _, _ := runtime.Caller(0)
 	dataDirRelPath := "../tests/data/"
 
@@ -260,215 +176,9 @@ func TestFileDownload(t *testing.T) {
 				"OnFileDownloadRequest": 1,
 			},
 		},
-
-		// protected file access checks
-		{
-			Name:            "protected file - expired token",
-			Method:          http.MethodGet,
-			Url:             "/api/files/_pb_users_auth_/oap640cot4yru2s/test_kfd2wYLxkz.txt?thumb=100x100",
-			ExpectedStatus:  200,
-			ExpectedContent: []string{string(testFile)},
-			ExpectedEvents: map[string]int{
-				"OnFileDownloadRequest": 1,
-			},
-		},
-		{
-			Name:            "protected file - admin with expired file token",
-			Method:          http.MethodGet,
-			Url:             "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsImV4cCI6MTY0MDk5MTY2MSwidHlwZSI6ImFkbWluIn0.g7Q_3UX6H--JWJ7yt1Hoe-1ugTX1KpbKzdt0zjGSe-E",
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:            "protected file - admin with valid file token",
-			Method:          http.MethodGet,
-			Url:             "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsImV4cCI6MTg5MzQ1MjQ2MSwidHlwZSI6ImFkbWluIn0.LyAMpSfaHVsuUqIlqqEbhDQSdFzoPz_EIDcb2VJMBsU",
-			ExpectedStatus:  200,
-			ExpectedContent: []string{"PNG"},
-			ExpectedEvents: map[string]int{
-				"OnFileDownloadRequest": 1,
-			},
-		},
-		{
-			Name:            "protected file - guest without view access",
-			Method:          http.MethodGet,
-			Url:             "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png",
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "protected file - guest with view access",
-			Method: http.MethodGet,
-			Url:    "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				dao := daos.New(app.Dao().DB())
-
-				// mock public view access
-				c, err := dao.FindCollectionByNameOrId("demo1")
-				if err != nil {
-					t.Fatalf("Failed to fetch mock collection: %v", err)
-				}
-				c.ViewRule = types.Pointer("")
-				if err := dao.SaveCollection(c); err != nil {
-					t.Fatalf("Failed to update mock collection: %v", err)
-				}
-			},
-			ExpectedStatus:  200,
-			ExpectedContent: []string{"PNG"},
-			ExpectedEvents: map[string]int{
-				"OnFileDownloadRequest": 1,
-			},
-		},
-		{
-			Name:   "protected file - auth record without view access",
-			Method: http.MethodGet,
-			Url:    "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImV4cCI6MTg5MzQ1MjQ2MSwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwidHlwZSI6ImF1dGhSZWNvcmQifQ.0d_0EO6kfn9ijZIQWAqgRi8Bo1z7MKcg1LQpXhQsEPk",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				dao := daos.New(app.Dao().DB())
-
-				// mock restricted user view access
-				c, err := dao.FindCollectionByNameOrId("demo1")
-				if err != nil {
-					t.Fatalf("Failed to fetch mock collection: %v", err)
-				}
-				c.ViewRule = types.Pointer("@request.auth.verified = true")
-				if err := dao.SaveCollection(c); err != nil {
-					t.Fatalf("Failed to update mock collection: %v", err)
-				}
-			},
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "protected file - auth record with view access",
-			Method: http.MethodGet,
-			Url:    "/api/files/demo1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImV4cCI6MTg5MzQ1MjQ2MSwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwidHlwZSI6ImF1dGhSZWNvcmQifQ.0d_0EO6kfn9ijZIQWAqgRi8Bo1z7MKcg1LQpXhQsEPk",
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				dao := daos.New(app.Dao().DB())
-
-				// mock user view access
-				c, err := dao.FindCollectionByNameOrId("demo1")
-				if err != nil {
-					t.Fatalf("Failed to fetch mock collection: %v", err)
-				}
-				c.ViewRule = types.Pointer("@request.auth.verified = false")
-				if err := dao.SaveCollection(c); err != nil {
-					t.Fatalf("Failed to update mock collection: %v", err)
-				}
-			},
-			ExpectedStatus:  200,
-			ExpectedContent: []string{"PNG"},
-			ExpectedEvents: map[string]int{
-				"OnFileDownloadRequest": 1,
-			},
-		},
-		{
-			Name:            "protected file in view (view's View API rule failure)",
-			Method:          http.MethodGet,
-			Url:             "/api/files/view1/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImV4cCI6MTg5MzQ1MjQ2MSwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwidHlwZSI6ImF1dGhSZWNvcmQifQ.0d_0EO6kfn9ijZIQWAqgRi8Bo1z7MKcg1LQpXhQsEPk",
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:            "protected file in view (view's View API rule success)",
-			Method:          http.MethodGet,
-			Url:             "/api/files/view1/84nmscqy84lsi1t/test_d61b33QdDU.txt?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImV4cCI6MTg5MzQ1MjQ2MSwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwidHlwZSI6ImF1dGhSZWNvcmQifQ.0d_0EO6kfn9ijZIQWAqgRi8Bo1z7MKcg1LQpXhQsEPk",
-			ExpectedStatus:  200,
-			ExpectedContent: []string{"test"},
-			ExpectedEvents: map[string]int{
-				"OnFileDownloadRequest": 1,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
-		// clone for the HEAD test (the same as the original scenario but without body)
-		head := scenario
-		head.Method = http.MethodHead
-		head.Name = ("(HEAD) " + scenario.Name)
-		head.ExpectedContent = nil
-		head.Test(t)
-
-		// regular request test
 		scenario.Test(t)
 	}
 }
-
-func TestConcurrentThumbsGeneration(t *testing.T) {
-	t.Parallel()
-
-	app, err := tests.NewTestApp()
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer app.Cleanup()
-
-	fsys, err := app.NewFilesystem()
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer fsys.Close()
-
-	// create a dummy file field collection
-	demo1, err := app.Dao().FindCollectionByNameOrId("demo1")
-	if err != nil {
-		t.Fatal(err)
-	}
-	fileField := demo1.Schema.GetFieldByName("file_one")
-	fileField.Options = &schema.FileOptions{
-		Protected: false,
-		MaxSelect: 1,
-		MaxSize:   999999,
-		// new thumbs
-		Thumbs: []string{"111x111", "111x222", "111x333"},
-	}
-	demo1.Schema.AddField(fileField)
-	if err := app.Dao().SaveCollection(demo1); err != nil {
-		t.Fatal(err)
-	}
-
-	fileKey := "wsmn24bux7wo113/al1h9ijdeojtsjy/300_Jsjq7RdBgA.png"
-
-	e, err := apis.InitApi(app)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	urls := []string{
-		"/api/files/" + fileKey + "?thumb=111x111",
-		"/api/files/" + fileKey + "?thumb=111x111", // should still result in single thumb
-		"/api/files/" + fileKey + "?thumb=111x222",
-		"/api/files/" + fileKey + "?thumb=111x333",
-	}
-
-	var wg sync.WaitGroup
-
-	wg.Add(len(urls))
-
-	for _, url := range urls {
-		url := url
-		go func() {
-			defer wg.Done()
-
-			recorder := httptest.NewRecorder()
-
-			req := httptest.NewRequest("GET", url, nil)
-
-			e.ServeHTTP(recorder, req)
-		}()
-	}
-
-	wg.Wait()
-
-	// ensure that all new requested thumbs were created
-	thumbKeys := []string{
-		"wsmn24bux7wo113/al1h9ijdeojtsjy/thumbs_300_Jsjq7RdBgA.png/111x111_" + filepath.Base(fileKey),
-		"wsmn24bux7wo113/al1h9ijdeojtsjy/thumbs_300_Jsjq7RdBgA.png/111x222_" + filepath.Base(fileKey),
-		"wsmn24bux7wo113/al1h9ijdeojtsjy/thumbs_300_Jsjq7RdBgA.png/111x333_" + filepath.Base(fileKey),
-	}
-	for _, k := range thumbKeys {
-		if exists, _ := fsys.Exists(k); !exists {
-			t.Fatalf("Missing thumb %q: %v", k, err)
-		}
-	}
-}

apis/health.go

@@ -12,7 +12,6 @@ func bindHealthApi(app core.App, rg *echo.Group) {
 	api := healthApi{app: app}
 
 	subGroup := rg.Group("/health")
-	subGroup.HEAD("", api.healthCheck)
 	subGroup.GET("", api.healthCheck)
 }
 
@@ -20,24 +19,12 @@ type healthApi struct {
 	app core.App
 }
 
-type healthCheckResponse struct {
-	Message string `json:"message"`
-	Code    int    `json:"code"`
-	Data    struct {
-		CanBackup bool `json:"canBackup"`
-	} `json:"data"`
-}
-
 // healthCheck returns a 200 OK response if the server is healthy.
 func (api *healthApi) healthCheck(c echo.Context) error {
-	if c.Request().Method == http.MethodHead {
-		return c.NoContent(http.StatusOK)
+	payload := map[string]any{
+		"code":    http.StatusOK,
+		"message": "API is healthy.",
 	}
 
-	resp := new(healthCheckResponse)
-	resp.Code = http.StatusOK
-	resp.Message = "API is healthy."
-	resp.Data.CanBackup = !api.app.Store().Has(core.StoreKeyActiveBackup)
-
-	return c.JSON(http.StatusOK, resp)
+	return c.JSON(http.StatusOK, payload)
 }

apis/health_test.go

@@ -8,24 +8,14 @@ import (
 )
 
 func TestHealthAPI(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
-			Name:           "HEAD health status",
-			Method:         http.MethodHead,
-			Url:            "/api/health",
-			ExpectedStatus: 200,
-		},
-		{
-			Name:           "GET health status",
+			Name:           "health status returns 200",
 			Method:         http.MethodGet,
 			Url:            "/api/health",
 			ExpectedStatus: 200,
 			ExpectedContent: []string{
 				`"code":200`,
-				`"data":{`,
-				`"canBackup":true`,
 			},
 		},
 	}

apis/logs.go

@@ -15,27 +15,27 @@ func bindLogsApi(app core.App, rg *echo.Group) {
 	api := logsApi{app: app}
 
 	subGroup := rg.Group("/logs", RequireAdminAuth())
-	subGroup.GET("", api.list)
-	subGroup.GET("/stats", api.stats)
-	subGroup.GET("/:id", api.view)
+	subGroup.GET("/requests", api.requestsList)
+	subGroup.GET("/requests/stats", api.requestsStats)
+	subGroup.GET("/requests/:id", api.requestView)
 }
 
 type logsApi struct {
 	app core.App
 }
 
-var logFilterFields = []string{
+var requestFilterFields = []string{
 	"rowid", "id", "created", "updated",
-	"level", "message", "data",
-	`^data\.[\w\.\:]*\w+$`,
+	"url", "method", "status", "auth",
+	"remoteIp", "userIp", "referer", "userAgent",
 }
 
-func (api *logsApi) list(c echo.Context) error {
-	fieldResolver := search.NewSimpleFieldResolver(logFilterFields...)
+func (api *logsApi) requestsList(c echo.Context) error {
+	fieldResolver := search.NewSimpleFieldResolver(requestFilterFields...)
 
 	result, err := search.NewProvider(fieldResolver).
-		Query(api.app.LogsDao().LogQuery()).
-		ParseAndExec(c.QueryParams().Encode(), &[]*models.Log{})
+		Query(api.app.LogsDao().RequestQuery()).
+		ParseAndExec(c.QueryParams().Encode(), &[]*models.Request{})
 
 	if err != nil {
 		return NewBadRequestError("", err)
@@ -44,8 +44,8 @@ func (api *logsApi) list(c echo.Context) error {
 	return c.JSON(http.StatusOK, result)
 }
 
-func (api *logsApi) stats(c echo.Context) error {
-	fieldResolver := search.NewSimpleFieldResolver(logFilterFields...)
+func (api *logsApi) requestsStats(c echo.Context) error {
+	fieldResolver := search.NewSimpleFieldResolver(requestFilterFields...)
 
 	filter := c.QueryParam(search.FilterQueryParam)
 
@@ -58,24 +58,24 @@ func (api *logsApi) stats(c echo.Context) error {
 		}
 	}
 
-	stats, err := api.app.LogsDao().LogsStats(expr)
+	stats, err := api.app.LogsDao().RequestsStats(expr)
 	if err != nil {
-		return NewBadRequestError("Failed to generate logs stats.", err)
+		return NewBadRequestError("Failed to generate requests stats.", err)
 	}
 
 	return c.JSON(http.StatusOK, stats)
 }
 
-func (api *logsApi) view(c echo.Context) error {
+func (api *logsApi) requestView(c echo.Context) error {
 	id := c.PathParam("id")
 	if id == "" {
 		return NewNotFoundError("", nil)
 	}
 
-	log, err := api.app.LogsDao().FindLogById(id)
-	if err != nil || log == nil {
+	request, err := api.app.LogsDao().FindRequestById(id)
+	if err != nil || request == nil {
 		return NewNotFoundError("", err)
 	}
 
-	return c.JSON(http.StatusOK, log)
+	return c.JSON(http.StatusOK, request)
 }

apis/logs_test.go

@@ -8,21 +8,19 @@ import (
 	"github.com/pocketbase/pocketbase/tests"
 )
 
-func TestLogsList(t *testing.T) {
-	t.Parallel()
-
+func TestRequestsList(t *testing.T) {
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
 			Method:          http.MethodGet,
-			Url:             "/api/logs",
+			Url:             "/api/logs/requests",
 			ExpectedStatus:  401,
 			ExpectedContent: []string{`"data":{}`},
 		},
 		{
 			Name:   "authorized as auth record",
 			Method: http.MethodGet,
-			Url:    "/api/logs",
+			Url:    "/api/logs/requests",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
 			},
@@ -32,12 +30,12 @@ func TestLogsList(t *testing.T) {
 		{
 			Name:   "authorized as admin",
 			Method: http.MethodGet,
-			Url:    "/api/logs",
+			Url:    "/api/logs/requests",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
 			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := tests.MockLogsData(app); err != nil {
+				if err := tests.MockRequestLogsData(app); err != nil {
 					t.Fatal(err)
 				}
 			},
@@ -54,12 +52,12 @@ func TestLogsList(t *testing.T) {
 		{
 			Name:   "authorized as admin + filter",
 			Method: http.MethodGet,
-			Url:    "/api/logs?filter=data.status>200",
+			Url:    "/api/logs/requests?filter=status>200",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
 			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := tests.MockLogsData(app); err != nil {
+				if err := tests.MockRequestLogsData(app); err != nil {
 					t.Fatal(err)
 				}
 			},
@@ -79,21 +77,19 @@ func TestLogsList(t *testing.T) {
 	}
 }
 
-func TestLogView(t *testing.T) {
-	t.Parallel()
-
+func TestRequestView(t *testing.T) {
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
 			Method:          http.MethodGet,
-			Url:             "/api/logs/873f2133-9f38-44fb-bf82-c8f53b310d91",
+			Url:             "/api/logs/requests/873f2133-9f38-44fb-bf82-c8f53b310d91",
 			ExpectedStatus:  401,
 			ExpectedContent: []string{`"data":{}`},
 		},
 		{
 			Name:   "authorized as auth record",
 			Method: http.MethodGet,
-			Url:    "/api/logs/873f2133-9f38-44fb-bf82-c8f53b310d91",
+			Url:    "/api/logs/requests/873f2133-9f38-44fb-bf82-c8f53b310d91",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
 			},
@@ -103,12 +99,12 @@ func TestLogView(t *testing.T) {
 		{
 			Name:   "authorized as admin (nonexisting request log)",
 			Method: http.MethodGet,
-			Url:    "/api/logs/missing1-9f38-44fb-bf82-c8f53b310d91",
+			Url:    "/api/logs/requests/missing1-9f38-44fb-bf82-c8f53b310d91",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
 			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := tests.MockLogsData(app); err != nil {
+				if err := tests.MockRequestLogsData(app); err != nil {
 					t.Fatal(err)
 				}
 			},
@@ -118,12 +114,12 @@ func TestLogView(t *testing.T) {
 		{
 			Name:   "authorized as admin (existing request log)",
 			Method: http.MethodGet,
-			Url:    "/api/logs/873f2133-9f38-44fb-bf82-c8f53b310d91",
+			Url:    "/api/logs/requests/873f2133-9f38-44fb-bf82-c8f53b310d91",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
 			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := tests.MockLogsData(app); err != nil {
+				if err := tests.MockRequestLogsData(app); err != nil {
 					t.Fatal(err)
 				}
 			},
@@ -139,21 +135,19 @@ func TestLogView(t *testing.T) {
 	}
 }
 
-func TestLogsStats(t *testing.T) {
-	t.Parallel()
-
+func TestRequestsStats(t *testing.T) {
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
 			Method:          http.MethodGet,
-			Url:             "/api/logs/stats",
+			Url:             "/api/logs/requests/stats",
 			ExpectedStatus:  401,
 			ExpectedContent: []string{`"data":{}`},
 		},
 		{
 			Name:   "authorized as auth record",
 			Method: http.MethodGet,
-			Url:    "/api/logs/stats",
+			Url:    "/api/logs/requests/stats",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
 			},
@@ -163,12 +157,12 @@ func TestLogsStats(t *testing.T) {
 		{
 			Name:   "authorized as admin",
 			Method: http.MethodGet,
-			Url:    "/api/logs/stats",
+			Url:    "/api/logs/requests/stats",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
 			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := tests.MockLogsData(app); err != nil {
+				if err := tests.MockRequestLogsData(app); err != nil {
 					t.Fatal(err)
 				}
 			},
@@ -180,12 +174,12 @@ func TestLogsStats(t *testing.T) {
 		{
 			Name:   "authorized as admin + filter",
 			Method: http.MethodGet,
-			Url:    "/api/logs/stats?filter=data.status>200",
+			Url:    "/api/logs/requests/stats?filter=status>200",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
 			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				if err := tests.MockLogsData(app); err != nil {
+				if err := tests.MockRequestLogsData(app); err != nil {
 					t.Fatal(err)
 				}
 			},

apis/middlewares.go

@@ -2,10 +2,9 @@ package apis
 
 import (
 	"fmt"
-	"log/slog"
+	"log"
 	"net"
 	"net/http"
-	"net/url"
 	"strings"
 	"time"
 
@@ -16,6 +15,7 @@ import (
 	"github.com/pocketbase/pocketbase/tools/list"
 	"github.com/pocketbase/pocketbase/tools/routine"
 	"github.com/pocketbase/pocketbase/tools/security"
+	"github.com/pocketbase/pocketbase/tools/types"
 	"github.com/spf13/cast"
 )
 
@@ -24,7 +24,6 @@ const (
 	ContextAdminKey      string = "admin"
 	ContextAuthRecordKey string = "authRecord"
 	ContextCollectionKey string = "collection"
-	ContextExecStartKey  string = "execStart"
 )
 
 // RequireGuestOnly middleware requires a request to NOT have a valid
@@ -60,12 +59,9 @@ func RequireGuestOnly() echo.MiddlewareFunc {
 // specifying their names.
 //
 // Example:
-//
-//	apis.RequireRecordAuth()
-//
+//   apis.RequireRecordAuth()
 // Or:
-//
-//	apis.RequireRecordAuth("users", "supervisors")
+//   apis.RequireRecordAuth("users", "supervisors")
 //
 // To restrict the auth record only to the loaded context collection,
 // use [apis.RequireSameContextRecordAuth()] instead.
@@ -87,6 +83,7 @@ func RequireRecordAuth(optCollectionNames ...string) echo.MiddlewareFunc {
 	}
 }
 
+//
 // RequireSameContextRecordAuth middleware requires a request to have
 // a valid record Authorization header.
 //
@@ -130,17 +127,14 @@ func RequireAdminAuth() echo.MiddlewareFunc {
 func RequireAdminAuthOnlyIfAny(app core.App) echo.MiddlewareFunc {
 	return func(next echo.HandlerFunc) echo.HandlerFunc {
 		return func(c echo.Context) error {
-			admin, _ := c.Get(ContextAdminKey).(*models.Admin)
-			if admin != nil {
-				return next(c)
-			}
-
 			totalAdmins, err := app.Dao().TotalAdmins()
 			if err != nil {
 				return NewBadRequestError("Failed to fetch admins info.", err)
 			}
 
-			if totalAdmins == 0 {
+			admin, _ := c.Get(ContextAdminKey).(*models.Admin)
+
+			if admin != nil || totalAdmins == 0 {
 				return next(c)
 			}
 
@@ -261,13 +255,13 @@ func LoadCollectionContext(app core.App, optCollectionTypes ...string) echo.Midd
 	return func(next echo.HandlerFunc) echo.HandlerFunc {
 		return func(c echo.Context) error {
 			if param := c.PathParam("collection"); param != "" {
-				collection, err := core.FindCachedCollectionByNameOrId(app, param)
+				collection, err := app.Dao().FindCollectionByNameOrId(param)
 				if err != nil || collection == nil {
 					return NewNotFoundError("", err)
 				}
 
 				if len(optCollectionTypes) > 0 && !list.ExistInSlice(collection.Type, optCollectionTypes) {
-					return NewBadRequestError("Unsupported collection type.", nil)
+					return NewBadRequestError("Invalid collection type.", nil)
 				}
 
 				c.Set(ContextCollectionKey, collection)
@@ -286,92 +280,84 @@ func LoadCollectionContext(app core.App, optCollectionTypes ...string) echo.Midd
 func ActivityLogger(app core.App) echo.MiddlewareFunc {
 	return func(next echo.HandlerFunc) echo.HandlerFunc {
 		return func(c echo.Context) error {
-			if err := next(c); err != nil {
+			err := next(c)
+
+			// no logs retention
+			if app.Settings().Logs.MaxDays == 0 {
 				return err
 			}
 
-			logRequest(app, c, nil)
+			httpRequest := c.Request()
+			httpResponse := c.Response()
+			status := httpResponse.Status
+			meta := types.JsonMap{}
 
-			return nil
+			if err != nil {
+				switch v := err.(type) {
+				case *echo.HTTPError:
+					status = v.Code
+					meta["errorMessage"] = v.Message
+					meta["errorDetails"] = fmt.Sprint(v.Internal)
+				case *ApiError:
+					status = v.Code
+					meta["errorMessage"] = v.Message
+					meta["errorDetails"] = fmt.Sprint(v.RawData())
+				default:
+					status = http.StatusBadRequest
+					meta["errorMessage"] = v.Error()
+				}
+			}
+
+			requestAuth := models.RequestAuthGuest
+			if c.Get(ContextAuthRecordKey) != nil {
+				requestAuth = models.RequestAuthRecord
+			} else if c.Get(ContextAdminKey) != nil {
+				requestAuth = models.RequestAuthAdmin
+			}
+
+			ip, _, _ := net.SplitHostPort(httpRequest.RemoteAddr)
+
+			model := &models.Request{
+				Url:       httpRequest.URL.RequestURI(),
+				Method:    strings.ToLower(httpRequest.Method),
+				Status:    status,
+				Auth:      requestAuth,
+				UserIp:    realUserIp(httpRequest, ip),
+				RemoteIp:  ip,
+				Referer:   httpRequest.Referer(),
+				UserAgent: httpRequest.UserAgent(),
+				Meta:      meta,
+			}
+			// set timestamp fields before firing a new go routine
+			model.RefreshCreated()
+			model.RefreshUpdated()
+
+			routine.FireAndForget(func() {
+				if err := app.LogsDao().SaveRequest(model); err != nil && app.IsDebug() {
+					log.Println("Log save failed:", err)
+				}
+
+				// Delete old request logs
+				// ---
+				now := time.Now()
+				lastLogsDeletedAt := cast.ToTime(app.Cache().Get("lastLogsDeletedAt"))
+				daysDiff := now.Sub(lastLogsDeletedAt).Hours() * 24
+
+				if daysDiff > float64(app.Settings().Logs.MaxDays) {
+					deleteErr := app.LogsDao().DeleteOldRequests(now.AddDate(0, 0, -1*app.Settings().Logs.MaxDays))
+					if deleteErr == nil {
+						app.Cache().Set("lastLogsDeletedAt", now)
+					} else if app.IsDebug() {
+						log.Println("Logs delete failed:", deleteErr)
+					}
+				}
+			})
+
+			return err
 		}
 	}
 }
 
-func logRequest(app core.App, c echo.Context, err *ApiError) {
-	// no logs retention
-	if app.Settings().Logs.MaxDays == 0 {
-		return
-	}
-
-	attrs := make([]any, 0, 15)
-
-	attrs = append(attrs, slog.String("type", "request"))
-
-	started := cast.ToTime(c.Get(ContextExecStartKey))
-	if !started.IsZero() {
-		attrs = append(attrs, slog.Float64("execTime", float64(time.Since(started))/float64(time.Millisecond)))
-	}
-
-	httpRequest := c.Request()
-	httpResponse := c.Response()
-	method := strings.ToUpper(httpRequest.Method)
-	status := httpResponse.Status
-	requestUri := httpRequest.URL.RequestURI()
-
-	// parse the request error
-	if err != nil {
-		status = err.Code
-		attrs = append(
-			attrs,
-			slog.String("error", err.Message),
-			slog.Any("details", err.RawData()),
-		)
-	}
-
-	requestAuth := models.RequestAuthGuest
-	if c.Get(ContextAuthRecordKey) != nil {
-		requestAuth = models.RequestAuthRecord
-	} else if c.Get(ContextAdminKey) != nil {
-		requestAuth = models.RequestAuthAdmin
-	}
-
-	attrs = append(
-		attrs,
-		slog.String("url", requestUri),
-		slog.String("method", method),
-		slog.Int("status", status),
-		slog.String("auth", requestAuth),
-		slog.String("referer", httpRequest.Referer()),
-		slog.String("userAgent", httpRequest.UserAgent()),
-	)
-
-	if app.Settings().Logs.LogIp {
-		ip, _, _ := net.SplitHostPort(httpRequest.RemoteAddr)
-		attrs = append(
-			attrs,
-			slog.String("userIp", realUserIp(httpRequest, ip)),
-			slog.String("remoteIp", ip),
-		)
-	}
-
-	// don't block on logs write
-	routine.FireAndForget(func() {
-		message := method + " "
-
-		if escaped, err := url.PathUnescape(requestUri); err == nil {
-			message += escaped
-		} else {
-			message += requestUri
-		}
-
-		if err != nil {
-			app.Logger().Error(message, attrs...)
-		} else {
-			app.Logger().Info(message, attrs...)
-		}
-	})
-}
-
 // Returns the "real" user IP from common proxy headers (or fallbackIp if none is found).
 //
 // The returned IP value shouldn't be trusted if not behind a trusted reverse proxy!
@@ -380,19 +366,15 @@ func realUserIp(r *http.Request, fallbackIp string) string {
 		return ip
 	}
 
-	if ip := r.Header.Get("Fly-Client-IP"); ip != "" {
-		return ip
-	}
-
 	if ip := r.Header.Get("X-Real-IP"); ip != "" {
 		return ip
 	}
 
 	if ipsList := r.Header.Get("X-Forwarded-For"); ipsList != "" {
-		// extract the first non-empty leftmost-ish ip
 		ips := strings.Split(ipsList, ",")
-		for _, ip := range ips {
-			ip = strings.TrimSpace(ip)
+		// extract the rightmost ip
+		for i := len(ips) - 1; i >= 0; i-- {
+			ip := strings.TrimSpace(ips[i])
 			if ip != "" {
 				return ip
 			}
@@ -401,21 +383,3 @@ func realUserIp(r *http.Request, fallbackIp string) string {
 
 	return fallbackIp
 }
-
-// @todo consider removing as this may no longer be needed due to the custom rest.MultiBinder.
-//
-// eagerRequestInfoCache ensures that the request data is cached in the request
-// context to allow reading for example the json request body data more than once.
-func eagerRequestInfoCache(app core.App) echo.MiddlewareFunc {
-	return func(next echo.HandlerFunc) echo.HandlerFunc {
-		return func(c echo.Context) error {
-			switch c.Request().Method {
-			// currently we are eagerly caching only the requests with body
-			case "POST", "PUT", "PATCH", "DELETE":
-				RequestInfo(c)
-			}
-
-			return next(c)
-		}
-	}
-}

apis/middlewares_test.go

@@ -10,8 +10,6 @@ import (
 )
 
 func TestRequireGuestOnly(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:   "valid record token",
@@ -106,8 +104,6 @@ func TestRequireGuestOnly(t *testing.T) {
 }
 
 func TestRequireRecordAuth(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:   "guest",
@@ -246,8 +242,6 @@ func TestRequireRecordAuth(t *testing.T) {
 }
 
 func TestRequireSameContextRecordAuth(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:   "guest",
@@ -364,8 +358,6 @@ func TestRequireSameContextRecordAuth(t *testing.T) {
 }
 
 func TestRequireAdminAuth(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:   "guest",
@@ -460,8 +452,6 @@ func TestRequireAdminAuth(t *testing.T) {
 }
 
 func TestRequireAdminAuthOnlyIfAny(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:   "guest (while having at least 1 existing admin)",
@@ -581,8 +571,6 @@ func TestRequireAdminAuthOnlyIfAny(t *testing.T) {
 }
 
 func TestRequireAdminOrRecordAuth(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:   "guest",
@@ -743,8 +731,6 @@ func TestRequireAdminOrRecordAuth(t *testing.T) {
 }
 
 func TestRequireAdminOrOwnerAuth(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:   "guest",
@@ -883,8 +869,6 @@ func TestRequireAdminOrOwnerAuth(t *testing.T) {
 }
 
 func TestLoadCollectionContext(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:   "missing collection",

apis/realtime.go

@@ -4,9 +4,9 @@ import (
 	"context"
 	"encoding/json"
 	"errors"
-	"log/slog"
+	"fmt"
+	"log"
 	"net/http"
-	"strings"
 	"time"
 
 	"github.com/labstack/echo/v5"
@@ -15,20 +15,18 @@ import (
 	"github.com/pocketbase/pocketbase/forms"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/resolvers"
-	"github.com/pocketbase/pocketbase/tools/rest"
 	"github.com/pocketbase/pocketbase/tools/routine"
 	"github.com/pocketbase/pocketbase/tools/search"
 	"github.com/pocketbase/pocketbase/tools/subscriptions"
-	"github.com/spf13/cast"
 )
 
 // bindRealtimeApi registers the realtime api endpoints.
 func bindRealtimeApi(app core.App, rg *echo.Group) {
 	api := realtimeApi{app: app}
 
-	subGroup := rg.Group("/realtime")
+	subGroup := rg.Group("/realtime", ActivityLogger(app))
 	subGroup.GET("", api.connect)
-	subGroup.POST("", api.setSubscriptions, ActivityLogger(app))
+	subGroup.POST("", api.setSubscriptions)
 
 	api.bindEvents()
 }
@@ -51,19 +49,16 @@ func (api *realtimeApi) connect(c echo.Context) error {
 			Client:      client,
 		}
 
-		if err := api.app.OnRealtimeDisconnectRequest().Trigger(disconnectEvent); err != nil {
-			api.app.Logger().Debug(
-				"OnRealtimeDisconnectRequest error",
-				slog.String("clientId", client.Id()),
-				slog.String("error", err.Error()),
-			)
+		if err := api.app.OnRealtimeDisconnectRequest().Trigger(disconnectEvent); err != nil && api.app.IsDebug() {
+			log.Println(err)
 		}
 
 		api.app.SubscriptionsBroker().Unregister(client.Id())
 	}()
 
-	c.Response().Header().Set("Content-Type", "text/event-stream")
+	c.Response().Header().Set("Content-Type", "text/event-stream; charset=UTF-8")
 	c.Response().Header().Set("Cache-Control", "no-store")
+	c.Response().Header().Set("Connection", "keep-alive")
 	// https://github.com/pocketbase/pocketbase/discussions/480#discussioncomment-3657640
 	// https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffering
 	c.Response().Header().Set("X-Accel-Buffering", "no")
@@ -71,14 +66,15 @@ func (api *realtimeApi) connect(c echo.Context) error {
 	connectEvent := &core.RealtimeConnectEvent{
 		HttpContext: c,
 		Client:      client,
-		IdleTimeout: 5 * time.Minute,
 	}
 
 	if err := api.app.OnRealtimeConnectRequest().Trigger(connectEvent); err != nil {
 		return err
 	}
 
-	api.app.Logger().Debug("Realtime connection established.", slog.String("clientId", client.Id()))
+	if api.app.IsDebug() {
+		log.Printf("Realtime connection established: %s\n", client.Id())
+	}
 
 	// signalize established connection (aka. fire "connect" message)
 	connectMsgEvent := &core.RealtimeMessageEvent{
@@ -86,31 +82,30 @@ func (api *realtimeApi) connect(c echo.Context) error {
 		Client:      client,
 		Message: &subscriptions.Message{
 			Name: "PB_CONNECT",
-			Data: []byte(`{"clientId":"` + client.Id() + `"}`),
+			Data: `{"clientId":"` + client.Id() + `"}`,
 		},
 	}
 	connectMsgErr := api.app.OnRealtimeBeforeMessageSend().Trigger(connectMsgEvent, func(e *core.RealtimeMessageEvent) error {
 		w := e.HttpContext.Response()
-		w.Write([]byte("id:" + client.Id() + "\n"))
-		w.Write([]byte("event:" + e.Message.Name + "\n"))
-		w.Write([]byte("data:"))
-		w.Write(e.Message.Data)
-		w.Write([]byte("\n\n"))
+		fmt.Fprint(w, "id:"+client.Id()+"\n")
+		fmt.Fprint(w, "event:"+e.Message.Name+"\n")
+		fmt.Fprint(w, "data:"+e.Message.Data+"\n\n")
 		w.Flush()
-		return api.app.OnRealtimeAfterMessageSend().Trigger(e)
+		return nil
 	})
 	if connectMsgErr != nil {
-		api.app.Logger().Debug(
-			"Realtime connection closed (failed to deliver PB_CONNECT)",
-			slog.String("clientId", client.Id()),
-			slog.String("error", connectMsgErr.Error()),
-		)
+		if api.app.IsDebug() {
+			log.Println("Realtime connection closed (failed to deliver PB_CONNECT):", client.Id(), connectMsgErr)
+		}
 		return nil
 	}
+	if err := api.app.OnRealtimeAfterMessageSend().Trigger(connectMsgEvent); err != nil && api.app.IsDebug() {
+		log.Println("OnRealtimeAfterMessageSend PB_CONNECT error:", err)
+	}
 
 	// start an idle timer to keep track of inactive/forgotten connections
-	idleTimeout := connectEvent.IdleTimeout
-	idleTimer := time.NewTimer(idleTimeout)
+	idleDuration := 5 * time.Minute
+	idleTimer := time.NewTimer(idleDuration)
 	defer idleTimer.Stop()
 
 	for {
@@ -120,10 +115,9 @@ func (api *realtimeApi) connect(c echo.Context) error {
 		case msg, ok := <-client.Channel():
 			if !ok {
 				// channel is closed
-				api.app.Logger().Debug(
-					"Realtime connection closed (closed channel)",
-					slog.String("clientId", client.Id()),
-				)
+				if api.app.IsDebug() {
+					log.Println("Realtime connection closed (closed channel):", client.Id())
+				}
 				return nil
 			}
 
@@ -134,31 +128,30 @@ func (api *realtimeApi) connect(c echo.Context) error {
 			}
 			msgErr := api.app.OnRealtimeBeforeMessageSend().Trigger(msgEvent, func(e *core.RealtimeMessageEvent) error {
 				w := e.HttpContext.Response()
-				w.Write([]byte("id:" + e.Client.Id() + "\n"))
-				w.Write([]byte("event:" + e.Message.Name + "\n"))
-				w.Write([]byte("data:"))
-				w.Write(e.Message.Data)
-				w.Write([]byte("\n\n"))
+				fmt.Fprint(w, "id:"+e.Client.Id()+"\n")
+				fmt.Fprint(w, "event:"+e.Message.Name+"\n")
+				fmt.Fprint(w, "data:"+e.Message.Data+"\n\n")
 				w.Flush()
-				return api.app.OnRealtimeAfterMessageSend().Trigger(msgEvent)
+				return nil
 			})
 			if msgErr != nil {
-				api.app.Logger().Debug(
-					"Realtime connection closed (failed to deliver message)",
-					slog.String("clientId", client.Id()),
-					slog.String("error", msgErr.Error()),
-				)
+				if api.app.IsDebug() {
+					log.Println("Realtime connection closed (failed to deliver message):", client.Id(), msgErr)
+				}
 				return nil
 			}
 
+			if err := api.app.OnRealtimeAfterMessageSend().Trigger(msgEvent); err != nil && api.app.IsDebug() {
+				log.Println("OnRealtimeAfterMessageSend error:", err)
+			}
+
 			idleTimer.Stop()
-			idleTimer.Reset(idleTimeout)
+			idleTimer.Reset(idleDuration)
 		case <-c.Request().Context().Done():
 			// connection is closed
-			api.app.Logger().Debug(
-				"Realtime connection closed (cancelled request)",
-				slog.String("clientId", client.Id()),
-			)
+			if api.app.IsDebug() {
+				log.Println("Realtime connection closed (cancelled request):", client.Id())
+			}
 			return nil
 		}
 	}
@@ -197,7 +190,7 @@ func (api *realtimeApi) setSubscriptions(c echo.Context) error {
 		Subscriptions: form.Subscriptions,
 	}
 
-	return api.app.OnRealtimeBeforeSubscribeRequest().Trigger(event, func(e *core.RealtimeSubscribeEvent) error {
+	handlerErr := api.app.OnRealtimeBeforeSubscribeRequest().Trigger(event, func(e *core.RealtimeSubscribeEvent) error {
 		// update auth state
 		e.Client.Set(ContextAdminKey, e.HttpContext.Get(ContextAdminKey))
 		e.Client.Set(ContextAuthRecordKey, e.HttpContext.Get(ContextAuthRecordKey))
@@ -208,35 +201,22 @@ func (api *realtimeApi) setSubscriptions(c echo.Context) error {
 		// subscribe to the new subscriptions
 		e.Client.Subscribe(e.Subscriptions...)
 
-		api.app.Logger().Debug(
-			"Realtime subscriptions updated.",
-			slog.String("clientId", e.Client.Id()),
-			slog.Any("subscriptions", e.Subscriptions),
-		)
-
-		return api.app.OnRealtimeAfterSubscribeRequest().Trigger(event, func(e *core.RealtimeSubscribeEvent) error {
-			if e.HttpContext.Response().Committed {
-				return nil
-			}
-
-			return e.HttpContext.NoContent(http.StatusNoContent)
-		})
+		return e.HttpContext.NoContent(http.StatusNoContent)
 	})
+
+	if handlerErr == nil {
+		api.app.OnRealtimeAfterSubscribeRequest().Trigger(event)
+	}
+
+	return handlerErr
 }
 
 // updateClientsAuthModel updates the existing clients auth model with the new one (matched by ID).
 func (api *realtimeApi) updateClientsAuthModel(contextKey string, newModel models.Model) error {
 	for _, client := range api.app.SubscriptionsBroker().Clients() {
 		clientModel, _ := client.Get(contextKey).(models.Model)
-		if clientModel != nil &&
-			clientModel.TableName() == newModel.TableName() &&
-			clientModel.GetId() == newModel.GetId() {
-			record, ok := newModel.(*models.Record)
-			if ok && record.OriginalCopy().TokenKey() != record.TokenKey() {
-				client.Unset(contextKey)
-			} else {
-				client.Set(contextKey, newModel)
-			}
+		if clientModel != nil && clientModel.GetId() == newModel.GetId() {
+			client.Set(contextKey, newModel)
 		}
 	}
 
@@ -247,10 +227,8 @@ func (api *realtimeApi) updateClientsAuthModel(contextKey string, newModel model
 func (api *realtimeApi) unregisterClientsByAuthModel(contextKey string, model models.Model) error {
 	for _, client := range api.app.SubscriptionsBroker().Clients() {
 		clientModel, _ := client.Get(contextKey).(models.Model)
-		if clientModel != nil &&
-			clientModel.TableName() == model.TableName() &&
-			clientModel.GetId() == model.GetId() {
-			client.Unset(contextKey)
+		if clientModel != nil && clientModel.GetId() == model.GetId() {
+			api.app.SubscriptionsBroker().Unregister(client.Id())
 		}
 	}
 
@@ -260,7 +238,7 @@ func (api *realtimeApi) unregisterClientsByAuthModel(contextKey string, model mo
 func (api *realtimeApi) bindEvents() {
 	// update the clients that has admin or auth record association
 	api.app.OnModelAfterUpdate().PreAdd(func(e *core.ModelEvent) error {
-		if record := api.resolveRecord(e.Model); record != nil && record.Collection().IsAuth() {
+		if record, ok := e.Model.(*models.Record); ok && record != nil && record.Collection().IsAuth() {
 			return api.updateClientsAuthModel(ContextAuthRecordKey, record)
 		}
 
@@ -273,8 +251,8 @@ func (api *realtimeApi) bindEvents() {
 
 	// remove the client(s) associated to the deleted admin or auth record
 	api.app.OnModelAfterDelete().PreAdd(func(e *core.ModelEvent) error {
-		if collection := api.resolveRecordCollection(e.Model); collection != nil && collection.IsAuth() {
-			return api.unregisterClientsByAuthModel(ContextAuthRecordKey, e.Model)
+		if record, ok := e.Model.(*models.Record); ok && record != nil && record.Collection().IsAuth() {
+			return api.unregisterClientsByAuthModel(ContextAuthRecordKey, record)
 		}
 
 		if admin, ok := e.Model.(*models.Admin); ok && admin != nil {
@@ -285,98 +263,84 @@ func (api *realtimeApi) bindEvents() {
 	})
 
 	api.app.OnModelAfterCreate().PreAdd(func(e *core.ModelEvent) error {
-		if record := api.resolveRecord(e.Model); record != nil {
-			if err := api.broadcastRecord("create", record, false); err != nil {
-				api.app.Logger().Debug(
-					"Failed to broadcast record create",
-					slog.String("id", record.Id),
-					slog.String("collectionName", record.Collection().Name),
-					slog.String("error", err.Error()),
-				)
+		if record, ok := e.Model.(*models.Record); ok {
+			if err := api.broadcastRecord("create", record); err != nil && api.app.IsDebug() {
+				log.Println(err)
 			}
 		}
 		return nil
 	})
 
 	api.app.OnModelAfterUpdate().PreAdd(func(e *core.ModelEvent) error {
-		if record := api.resolveRecord(e.Model); record != nil {
-			if err := api.broadcastRecord("update", record, false); err != nil {
-				api.app.Logger().Debug(
-					"Failed to broadcast record update",
-					slog.String("id", record.Id),
-					slog.String("collectionName", record.Collection().Name),
-					slog.String("error", err.Error()),
-				)
+		if record, ok := e.Model.(*models.Record); ok {
+			if err := api.broadcastRecord("update", record); err != nil && api.app.IsDebug() {
+				log.Println(err)
 			}
 		}
 		return nil
 	})
 
 	api.app.OnModelBeforeDelete().Add(func(e *core.ModelEvent) error {
-		if record := api.resolveRecord(e.Model); record != nil {
-			if err := api.broadcastRecord("delete", record, true); err != nil {
-				api.app.Logger().Debug(
-					"Failed to dry cache record delete",
-					slog.String("id", record.Id),
-					slog.String("collectionName", record.Collection().Name),
-					slog.String("error", err.Error()),
-				)
-			}
-		}
-		return nil
-	})
-
-	api.app.OnModelAfterDelete().Add(func(e *core.ModelEvent) error {
-		if record := api.resolveRecord(e.Model); record != nil {
-			if err := api.broadcastDryCachedRecord("delete", record); err != nil {
-				api.app.Logger().Debug(
-					"Failed to broadcast record delete",
-					slog.String("id", record.Id),
-					slog.String("collectionName", record.Collection().Name),
-					slog.String("error", err.Error()),
-				)
+		if record, ok := e.Model.(*models.Record); ok {
+			if err := api.broadcastRecord("delete", record); err != nil && api.app.IsDebug() {
+				log.Println(err)
 			}
 		}
 		return nil
 	})
 }
 
-// resolveRecord converts *if possible* the provided model interface to a Record.
-// This is usually helpful if the provided model is a custom Record model struct.
-func (api *realtimeApi) resolveRecord(model models.Model) (record *models.Record) {
-	record, _ = model.(*models.Record)
-
-	// check if it is custom Record model struct (ignore "private" tables)
-	if record == nil && !strings.HasPrefix(model.TableName(), "_") {
-		record, _ = api.app.Dao().FindRecordById(model.TableName(), model.GetId())
+func (api *realtimeApi) canAccessRecord(client subscriptions.Client, record *models.Record, accessRule *string) bool {
+	admin, _ := client.Get(ContextAdminKey).(*models.Admin)
+	if admin != nil {
+		// admins can access everything
+		return true
 	}
 
-	return record
-}
-
-// resolveRecordCollection extracts *if possible* the Collection model from the provided model interface.
-// This is usually helpful if the provided model is a custom Record model struct.
-func (api *realtimeApi) resolveRecordCollection(model models.Model) (collection *models.Collection) {
-	if record, ok := model.(*models.Record); ok {
-		collection = record.Collection()
-	} else if !strings.HasPrefix(model.TableName(), "_") {
-		// check if it is custom Record model struct (ignore "private" tables)
-		collection, _ = api.app.Dao().FindCollectionByNameOrId(model.TableName())
+	if accessRule == nil {
+		// only admins can access this record
+		return false
 	}
 
-	return collection
+	ruleFunc := func(q *dbx.SelectQuery) error {
+		if *accessRule == "" {
+			return nil // empty public rule
+		}
+
+		// emulate request data
+		requestData := &models.RequestData{
+			Method: "GET",
+		}
+		requestData.AuthRecord, _ = client.Get(ContextAuthRecordKey).(*models.Record)
+
+		resolver := resolvers.NewRecordFieldResolver(api.app.Dao(), record.Collection(), requestData, true)
+		expr, err := search.FilterData(*accessRule).BuildExpr(resolver)
+		if err != nil {
+			return err
+		}
+		resolver.UpdateQuery(q)
+		q.AndWhere(expr)
+
+		return nil
+	}
+
+	foundRecord, err := api.app.Dao().FindRecordById(record.Collection().Id, record.Id, ruleFunc)
+	if err == nil && foundRecord != nil {
+		return true
+	}
+
+	return false
 }
 
-// recordData represents the broadcasted record subscrition message data.
 type recordData struct {
-	Record any    `json:"record"` /* map or models.Record */
-	Action string `json:"action"`
+	Action string         `json:"action"`
+	Record *models.Record `json:"record"`
 }
 
-func (api *realtimeApi) broadcastRecord(action string, record *models.Record, dryCache bool) error {
+func (api *realtimeApi) broadcastRecord(action string, record *models.Record) error {
 	collection := record.Collection()
 	if collection == nil {
-		return errors.New("[broadcastRecord] Record collection not set")
+		return errors.New("Record collection not set.")
 	}
 
 	clients := api.app.SubscriptionsBroker().Clients()
@@ -384,159 +348,77 @@ func (api *realtimeApi) broadcastRecord(action string, record *models.Record, dr
 		return nil // no subscribers
 	}
 
+	// create a clean record copy without expand and unknown fields
+	// because we don't know if the clients have permissions to view them
+	cleanRecord := record.CleanCopy()
+
 	subscriptionRuleMap := map[string]*string{
-		(collection.Name + "/" + record.Id + "?"): collection.ViewRule,
-		(collection.Id + "/" + record.Id + "?"):   collection.ViewRule,
-		(collection.Name + "/*?"):                 collection.ListRule,
-		(collection.Id + "/*?"):                   collection.ListRule,
-		// @deprecated: the same      as the wildcard topic but kept for backward compatibility
-		(collection.Name + "?"): collection.ListRule,
-		(collection.Id + "?"):   collection.ListRule,
+		(collection.Name + "/" + cleanRecord.Id): collection.ViewRule,
+		(collection.Id + "/" + cleanRecord.Id):   collection.ViewRule,
+		(collection.Name + "/*"):                 collection.ListRule,
+		(collection.Id + "/*"):                   collection.ListRule,
+		// @deprecated: the same as the wildcard topic but kept for backward compatibility
+		collection.Name: collection.ListRule,
+		collection.Id:   collection.ListRule,
 	}
 
-	dryCacheKey := action + "/" + record.Id
+	data := &recordData{
+		Action: action,
+		Record: cleanRecord,
+	}
+
+	dataBytes, err := json.Marshal(data)
+	if err != nil {
+		if api.app.IsDebug() {
+			log.Println(err)
+		}
+		return err
+	}
+
+	encodedData := string(dataBytes)
 
 	for _, client := range clients {
 		client := client
 
-		// note: not executed concurrently to avoid races and to ensure
-		// that the access checks are applied for the current record db state
-		for prefix, rule := range subscriptionRuleMap {
-			subs := client.Subscriptions(prefix)
-			if len(subs) == 0 {
+		for subscription, rule := range subscriptionRuleMap {
+			if !client.HasSubscription(subscription) {
 				continue
 			}
 
-			for sub, options := range subs {
-				// create a clean record copy without expand and unknown fields
-				// because we don't know yet which exact fields the client subscription has permissions to access
-				cleanRecord := record.CleanCopy()
+			if !api.canAccessRecord(client, data.Record, rule) {
+				continue
+			}
 
-				// mock request data
-				requestInfo := &models.RequestInfo{
-					Context: models.RequestInfoContextRealtime,
-					Method:  "GET",
-					Query:   options.Query,
-					Headers: options.Headers,
-				}
-				requestInfo.Admin, _ = client.Get(ContextAdminKey).(*models.Admin)
-				requestInfo.AuthRecord, _ = client.Get(ContextAuthRecordKey).(*models.Record)
+			msg := subscriptions.Message{
+				Name: subscription,
+				Data: encodedData,
+			}
 
-				if !api.canAccessRecord(cleanRecord, requestInfo, rule) {
-					continue
-				}
-
-				rawExpand := cast.ToString(options.Query[expandQueryParam])
-				if rawExpand != "" {
-					expandErrs := api.app.Dao().ExpandRecord(cleanRecord, strings.Split(rawExpand, ","), expandFetch(api.app.Dao(), requestInfo))
-					if len(expandErrs) > 0 {
-						api.app.Logger().Debug(
-							"[broadcastRecord] expand errors",
-							slog.String("id", cleanRecord.Id),
-							slog.String("collectionName", cleanRecord.Collection().Name),
-							slog.String("sub", sub),
-							slog.String("expand", rawExpand),
-							slog.Any("errors", expandErrs),
-						)
+			// ignore the auth record email visibility checks for
+			// auth owner, admin or manager
+			if collection.IsAuth() {
+				authId := extractAuthIdFromGetter(client)
+				if authId == data.Record.Id ||
+					api.canAccessRecord(client, data.Record, collection.AuthOptions().ManageRule) {
+					data.Record.IgnoreEmailVisibility(true) // ignore
+					if newData, err := json.Marshal(data); err == nil {
+						msg.Data = string(newData)
 					}
-				}
-
-				// ignore the auth record email visibility checks
-				// for auth owner, admin or manager
-				if collection.IsAuth() {
-					authId := extractAuthIdFromGetter(client)
-					if authId == cleanRecord.Id {
-						if api.canAccessRecord(cleanRecord, requestInfo, collection.AuthOptions().ManageRule) {
-							cleanRecord.IgnoreEmailVisibility(true)
-						}
-					}
-				}
-
-				data := &recordData{
-					Action: action,
-					Record: cleanRecord,
-				}
-
-				// check fields
-				rawFields := cast.ToString(options.Query[fieldsQueryParam])
-				if rawFields != "" {
-					decoded, err := rest.PickFields(cleanRecord, rawFields)
-					if err == nil {
-						data.Record = decoded
-					} else {
-						api.app.Logger().Debug(
-							"[broadcastRecord] pick fields error",
-							slog.String("id", cleanRecord.Id),
-							slog.String("collectionName", cleanRecord.Collection().Name),
-							slog.String("sub", sub),
-							slog.String("fields", rawFields),
-							slog.String("error", err.Error()),
-						)
-					}
-				}
-
-				dataBytes, err := json.Marshal(data)
-				if err != nil {
-					api.app.Logger().Debug(
-						"[broadcastRecord] data marshal error",
-						slog.String("id", cleanRecord.Id),
-						slog.String("collectionName", cleanRecord.Collection().Name),
-						slog.String("error", err.Error()),
-					)
-					continue
-				}
-
-				msg := subscriptions.Message{
-					Name: sub,
-					Data: dataBytes,
-				}
-
-				if dryCache {
-					messages, ok := client.Get(dryCacheKey).([]subscriptions.Message)
-					if !ok {
-						messages = []subscriptions.Message{msg}
-					} else {
-						messages = append(messages, msg)
-					}
-					client.Set(dryCacheKey, messages)
-				} else {
-					routine.FireAndForget(func() {
-						client.Send(msg)
-					})
+					data.Record.IgnoreEmailVisibility(false) // restore
 				}
 			}
+
+			routine.FireAndForget(func() {
+				if !client.IsDiscarded() {
+					client.Channel() <- msg
+				}
+			})
 		}
 	}
 
 	return nil
 }
 
-// broadcastDryCachedRecord broadcasts all cached record related messages.
-func (api *realtimeApi) broadcastDryCachedRecord(action string, record *models.Record) error {
-	key := action + "/" + record.Id
-
-	clients := api.app.SubscriptionsBroker().Clients()
-
-	for _, client := range clients {
-		messages, ok := client.Get(key).([]subscriptions.Message)
-		if !ok {
-			continue
-		}
-
-		client.Unset(key)
-
-		client := client
-
-		routine.FireAndForget(func() {
-			for _, msg := range messages {
-				client.Send(msg)
-			}
-		})
-	}
-
-	return nil
-}
-
 type getter interface {
 	Get(string) any
 }
@@ -554,45 +436,3 @@ func extractAuthIdFromGetter(val getter) string {
 
 	return ""
 }
-
-// canAccessRecord checks if the subscription client has access to the specified record model.
-func (api *realtimeApi) canAccessRecord(
-	record *models.Record,
-	requestInfo *models.RequestInfo,
-	accessRule *string,
-) bool {
-	// check the access rule
-	// ---
-	if ok, _ := api.app.Dao().CanAccessRecord(record, requestInfo, accessRule); !ok {
-		return false
-	}
-
-	// check the subscription client-side filter (if any)
-	// ---
-	filter := cast.ToString(requestInfo.Query[search.FilterQueryParam])
-	if filter == "" {
-		return true // no further checks needed
-	}
-
-	if err := checkForAdminOnlyRuleFields(requestInfo); err != nil {
-		return false
-	}
-
-	ruleFunc := func(q *dbx.SelectQuery) error {
-		resolver := resolvers.NewRecordFieldResolver(api.app.Dao(), record.Collection(), requestInfo, false)
-
-		expr, err := search.FilterData(filter).BuildExpr(resolver)
-		if err != nil {
-			return err
-		}
-		q.AndWhere(expr)
-
-		resolver.UpdateQuery(q)
-
-		return nil
-	}
-
-	_, err := api.app.Dao().FindRecordById(record.Collection().Id, record.Id, ruleFunc)
-
-	return err == nil
-}

apis/realtime_test.go

@@ -5,13 +5,10 @@ import (
 	"net/http"
 	"strings"
 	"testing"
-	"time"
 
 	"github.com/labstack/echo/v5"
-	"github.com/pocketbase/dbx"
 	"github.com/pocketbase/pocketbase/apis"
 	"github.com/pocketbase/pocketbase/core"
-	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/tests"
 	"github.com/pocketbase/pocketbase/tools/hook"
@@ -23,7 +20,6 @@ func TestRealtimeConnect(t *testing.T) {
 		{
 			Method:         http.MethodGet,
 			Url:            "/api/realtime",
-			Timeout:        100 * time.Millisecond,
 			ExpectedStatus: 200,
 			ExpectedContent: []string{
 				`id:`,
@@ -36,7 +32,7 @@ func TestRealtimeConnect(t *testing.T) {
 				"OnRealtimeAfterMessageSend":  1,
 				"OnRealtimeDisconnectRequest": 1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				if len(app.SubscriptionsBroker().Clients()) != 0 {
 					t.Errorf("Expected the subscribers to be removed after connection close, found %d", len(app.SubscriptionsBroker().Clients()))
 				}
@@ -46,7 +42,6 @@ func TestRealtimeConnect(t *testing.T) {
 			Name:           "PB_CONNECT interrupt",
 			Method:         http.MethodGet,
 			Url:            "/api/realtime",
-			Timeout:        100 * time.Millisecond,
 			ExpectedStatus: 200,
 			ExpectedEvents: map[string]int{
 				"OnRealtimeConnectRequest":    1,
@@ -61,7 +56,7 @@ func TestRealtimeConnect(t *testing.T) {
 					return nil
 				})
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				if len(app.SubscriptionsBroker().Clients()) != 0 {
 					t.Errorf("Expected the subscribers to be removed after connection close, found %d", len(app.SubscriptionsBroker().Clients()))
 				}
@@ -71,11 +66,11 @@ func TestRealtimeConnect(t *testing.T) {
 			Name:           "Skipping/ignoring messages",
 			Method:         http.MethodGet,
 			Url:            "/api/realtime",
-			Timeout:        100 * time.Millisecond,
 			ExpectedStatus: 200,
 			ExpectedEvents: map[string]int{
 				"OnRealtimeConnectRequest":    1,
 				"OnRealtimeBeforeMessageSend": 1,
+				"OnRealtimeAfterMessageSend":  1,
 				"OnRealtimeDisconnectRequest": 1,
 			},
 			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
@@ -83,7 +78,7 @@ func TestRealtimeConnect(t *testing.T) {
 					return hook.StopPropagation
 				})
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				if len(app.SubscriptionsBroker().Clients()) != 0 {
 					t.Errorf("Expected the subscribers to be removed after connection close, found %d", len(app.SubscriptionsBroker().Clients()))
 				}
@@ -128,7 +123,7 @@ func TestRealtimeSubscribe(t *testing.T) {
 				client.Subscribe("test0")
 				app.SubscriptionsBroker().Register(client)
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				if len(client.Subscriptions()) != 0 {
 					t.Errorf("Expected no subscriptions, got %v", client.Subscriptions())
 				}
@@ -149,7 +144,7 @@ func TestRealtimeSubscribe(t *testing.T) {
 				client.Subscribe("test0")
 				app.SubscriptionsBroker().Register(client)
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				expectedSubs := []string{"test1", "test2"}
 				if len(expectedSubs) != len(client.Subscriptions()) {
 					t.Errorf("Expected subscriptions %v, got %v", expectedSubs, client.Subscriptions())
@@ -179,7 +174,7 @@ func TestRealtimeSubscribe(t *testing.T) {
 			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				app.SubscriptionsBroker().Register(client)
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				admin, _ := client.Get(apis.ContextAdminKey).(*models.Admin)
 				if admin == nil {
 					t.Errorf("Expected admin auth model, got nil")
@@ -203,7 +198,7 @@ func TestRealtimeSubscribe(t *testing.T) {
 			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				app.SubscriptionsBroker().Register(client)
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				authRecord, _ := client.Get(apis.ContextAuthRecordKey).(*models.Record)
 				if authRecord == nil {
 					t.Errorf("Expected auth record model, got nil")
@@ -228,7 +223,7 @@ func TestRealtimeSubscribe(t *testing.T) {
 
 				app.SubscriptionsBroker().Register(client)
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				authRecord, _ := client.Get(apis.ContextAuthRecordKey).(*models.Record)
 				if authRecord == nil {
 					t.Errorf("Expected auth record model, got nil")
@@ -249,48 +244,19 @@ func TestRealtimeAuthRecordDeleteEvent(t *testing.T) {
 
 	apis.InitApi(testApp)
 
-	authRecord1, err := testApp.Dao().FindFirstRecordByData("users", "email", "test@example.com")
+	authRecord, err := testApp.Dao().FindFirstRecordByData("users", "email", "test@example.com")
 	if err != nil {
 		t.Fatal(err)
 	}
 
-	authRecord2, err := testApp.Dao().FindFirstRecordByData("users", "email", "test2@example.com")
-	if err != nil {
-		t.Fatal(err)
-	}
+	client := subscriptions.NewDefaultClient()
+	client.Set(apis.ContextAuthRecordKey, authRecord)
+	testApp.SubscriptionsBroker().Register(client)
 
-	client1 := subscriptions.NewDefaultClient()
-	client1.Set(apis.ContextAuthRecordKey, authRecord1)
-	testApp.SubscriptionsBroker().Register(client1)
+	testApp.OnModelAfterDelete().Trigger(&core.ModelEvent{Dao: testApp.Dao(), Model: authRecord})
 
-	client2 := subscriptions.NewDefaultClient()
-	client2.Set(apis.ContextAuthRecordKey, authRecord1)
-	testApp.SubscriptionsBroker().Register(client2)
-
-	client3 := subscriptions.NewDefaultClient()
-	client3.Set(apis.ContextAuthRecordKey, authRecord2)
-	testApp.SubscriptionsBroker().Register(client3)
-
-	// "delete" authRecord1
-	e := new(core.ModelEvent)
-	e.Dao = testApp.Dao()
-	e.Model = authRecord1
-	testApp.OnModelAfterDelete().Trigger(e)
-
-	if total := len(testApp.SubscriptionsBroker().Clients()); total != 3 {
-		t.Fatalf("Expected %d subscription clients, found %d", 3, total)
-	}
-
-	if auth := client1.Get(apis.ContextAuthRecordKey); auth != nil {
-		t.Fatalf("[client1] Expected the auth state to be unset, found %#v", auth)
-	}
-
-	if auth := client2.Get(apis.ContextAuthRecordKey); auth != nil {
-		t.Fatalf("[client2] Expected the auth state to be unset, found %#v", auth)
-	}
-
-	if auth := client3.Get(apis.ContextAuthRecordKey); auth == nil || auth.(*models.Record).Id != authRecord2.Id {
-		t.Fatalf("[client3] Expected the auth state to be left unchanged, found %#v", auth)
+	if len(testApp.SubscriptionsBroker().Clients()) != 0 {
+		t.Fatalf("Expected no subscription clients, found %d", len(testApp.SubscriptionsBroker().Clients()))
 	}
 }
 
@@ -316,10 +282,7 @@ func TestRealtimeAuthRecordUpdateEvent(t *testing.T) {
 	}
 	authRecord2.SetEmail("new@example.com")
 
-	e := new(core.ModelEvent)
-	e.Dao = testApp.Dao()
-	e.Model = authRecord2
-	testApp.OnModelAfterUpdate().Trigger(e)
+	testApp.OnModelAfterUpdate().Trigger(&core.ModelEvent{Dao: testApp.Dao(), Model: authRecord2})
 
 	clientAuthRecord, _ := client.Get(apis.ContextAuthRecordKey).(*models.Record)
 	if clientAuthRecord.Email() != authRecord2.Email() {
@@ -327,87 +290,25 @@ func TestRealtimeAuthRecordUpdateEvent(t *testing.T) {
 	}
 }
 
-func TestRealtimeAuthRecordUnsetOnTokenKeyRefresh(t *testing.T) {
-	testApp, _ := tests.NewTestApp()
-	defer testApp.Cleanup()
-
-	apis.InitApi(testApp)
-
-	authRecord1, err := testApp.Dao().FindFirstRecordByData("users", "email", "test@example.com")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	client := subscriptions.NewDefaultClient()
-	client.Set(apis.ContextAuthRecordKey, authRecord1)
-	testApp.SubscriptionsBroker().Register(client)
-
-	// refetch the authRecord and refresh its tokenKey
-	authRecord2, err := testApp.Dao().FindFirstRecordByData("users", "email", "test@example.com")
-	if err != nil {
-		t.Fatal(err)
-	}
-	authRecord2.RefreshTokenKey()
-
-	e := new(core.ModelEvent)
-	e.Dao = testApp.Dao()
-	e.Model = authRecord2
-	testApp.OnModelAfterUpdate().Trigger(e)
-
-	clientAuthRecord, _ := client.Get(apis.ContextAuthRecordKey).(*models.Record)
-	if clientAuthRecord != nil {
-		t.Fatalf("Expected authRecord to be unset, got %q", clientAuthRecord.Email())
-	}
-}
-
 func TestRealtimeAdminDeleteEvent(t *testing.T) {
 	testApp, _ := tests.NewTestApp()
 	defer testApp.Cleanup()
 
 	apis.InitApi(testApp)
 
-	admin1, err := testApp.Dao().FindAdminByEmail("test@example.com")
+	admin, err := testApp.Dao().FindAdminByEmail("test@example.com")
 	if err != nil {
 		t.Fatal(err)
 	}
 
-	admin2, err := testApp.Dao().FindAdminByEmail("test2@example.com")
-	if err != nil {
-		t.Fatal(err)
-	}
+	client := subscriptions.NewDefaultClient()
+	client.Set(apis.ContextAdminKey, admin)
+	testApp.SubscriptionsBroker().Register(client)
 
-	client1 := subscriptions.NewDefaultClient()
-	client1.Set(apis.ContextAdminKey, admin1)
-	testApp.SubscriptionsBroker().Register(client1)
+	testApp.OnModelAfterDelete().Trigger(&core.ModelEvent{Dao: testApp.Dao(), Model: admin})
 
-	client2 := subscriptions.NewDefaultClient()
-	client2.Set(apis.ContextAdminKey, admin1)
-	testApp.SubscriptionsBroker().Register(client2)
-
-	client3 := subscriptions.NewDefaultClient()
-	client3.Set(apis.ContextAdminKey, admin2)
-	testApp.SubscriptionsBroker().Register(client3)
-
-	// "delete" admin1
-	e := new(core.ModelEvent)
-	e.Dao = testApp.Dao()
-	e.Model = admin1
-	testApp.OnModelAfterDelete().Trigger(e)
-
-	if total := len(testApp.SubscriptionsBroker().Clients()); total != 3 {
-		t.Fatalf("Expected %d subscription clients, found %d", 3, total)
-	}
-
-	if auth := client1.Get(apis.ContextAdminKey); auth != nil {
-		t.Fatalf("[client1] Expected the auth state to be unset, found %#v", auth)
-	}
-
-	if auth := client2.Get(apis.ContextAdminKey); auth != nil {
-		t.Fatalf("[client2] Expected the auth state to be unset, found %#v", auth)
-	}
-
-	if auth := client3.Get(apis.ContextAdminKey); auth == nil || auth.(*models.Admin).Id != admin2.Id {
-		t.Fatalf("[client3] Expected the auth state to be left unchanged, found %#v", auth)
+	if len(testApp.SubscriptionsBroker().Clients()) != 0 {
+		t.Fatalf("Expected no subscription clients, found %d", len(testApp.SubscriptionsBroker().Clients()))
 	}
 }
 
@@ -433,131 +334,10 @@ func TestRealtimeAdminUpdateEvent(t *testing.T) {
 	}
 	admin2.Email = "new@example.com"
 
-	e := new(core.ModelEvent)
-	e.Dao = testApp.Dao()
-	e.Model = admin2
-	testApp.OnModelAfterUpdate().Trigger(e)
+	testApp.OnModelAfterUpdate().Trigger(&core.ModelEvent{Dao: testApp.Dao(), Model: admin2})
 
 	clientAdmin, _ := client.Get(apis.ContextAdminKey).(*models.Admin)
 	if clientAdmin.Email != admin2.Email {
 		t.Fatalf("Expected authRecord with email %q, got %q", admin2.Email, clientAdmin.Email)
 	}
 }
-
-// Custom auth record model struct
-// -------------------------------------------------------------------
-var _ models.Model = (*CustomUser)(nil)
-
-type CustomUser struct {
-	models.BaseModel
-
-	Email string `db:"email" json:"email"`
-}
-
-func (m *CustomUser) TableName() string {
-	return "users" // the name of your collection
-}
-
-func findCustomUserByEmail(dao *daos.Dao, email string) (*CustomUser, error) {
-	model := &CustomUser{}
-
-	err := dao.ModelQuery(model).
-		AndWhere(dbx.HashExp{"email": email}).
-		Limit(1).
-		One(model)
-
-	if err != nil {
-		return nil, err
-	}
-
-	return model, nil
-}
-
-func TestRealtimeCustomAuthModelDeleteEvent(t *testing.T) {
-	testApp, _ := tests.NewTestApp()
-	defer testApp.Cleanup()
-
-	apis.InitApi(testApp)
-
-	authRecord1, err := testApp.Dao().FindFirstRecordByData("users", "email", "test@example.com")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	authRecord2, err := testApp.Dao().FindFirstRecordByData("users", "email", "test2@example.com")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	client1 := subscriptions.NewDefaultClient()
-	client1.Set(apis.ContextAuthRecordKey, authRecord1)
-	testApp.SubscriptionsBroker().Register(client1)
-
-	client2 := subscriptions.NewDefaultClient()
-	client2.Set(apis.ContextAuthRecordKey, authRecord1)
-	testApp.SubscriptionsBroker().Register(client2)
-
-	client3 := subscriptions.NewDefaultClient()
-	client3.Set(apis.ContextAuthRecordKey, authRecord2)
-	testApp.SubscriptionsBroker().Register(client3)
-
-	// refetch authRecord1 as CustomUser
-	customUser, err := findCustomUserByEmail(testApp.Dao(), "test@example.com")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	// delete the custom user (should unset the client auth record)
-	if err := testApp.Dao().Delete(customUser); err != nil {
-		t.Fatal(err)
-	}
-
-	if total := len(testApp.SubscriptionsBroker().Clients()); total != 3 {
-		t.Fatalf("Expected %d subscription clients, found %d", 3, total)
-	}
-
-	if auth := client1.Get(apis.ContextAuthRecordKey); auth != nil {
-		t.Fatalf("[client1] Expected the auth state to be unset, found %#v", auth)
-	}
-
-	if auth := client2.Get(apis.ContextAuthRecordKey); auth != nil {
-		t.Fatalf("[client2] Expected the auth state to be unset, found %#v", auth)
-	}
-
-	if auth := client3.Get(apis.ContextAuthRecordKey); auth == nil || auth.(*models.Record).Id != authRecord2.Id {
-		t.Fatalf("[client3] Expected the auth state to be left unchanged, found %#v", auth)
-	}
-}
-
-func TestRealtimeCustomAuthModelUpdateEvent(t *testing.T) {
-	testApp, _ := tests.NewTestApp()
-	defer testApp.Cleanup()
-
-	apis.InitApi(testApp)
-
-	authRecord, err := testApp.Dao().FindFirstRecordByData("users", "email", "test@example.com")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	client := subscriptions.NewDefaultClient()
-	client.Set(apis.ContextAuthRecordKey, authRecord)
-	testApp.SubscriptionsBroker().Register(client)
-
-	// refetch the authRecord as CustomUser
-	customUser, err := findCustomUserByEmail(testApp.Dao(), "test@example.com")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	// change its email
-	customUser.Email = "new@example.com"
-	if err := testApp.Dao().Save(customUser); err != nil {
-		t.Fatal(err)
-	}
-
-	clientAuthRecord, _ := client.Get(apis.ContextAuthRecordKey).(*models.Record)
-	if clientAuthRecord.Email() != customUser.Email {
-		t.Fatalf("Expected authRecord with email %q, got %q", customUser.Email, clientAuthRecord.Email())
-	}
-}

apis/record_auth.go

@@ -1,29 +1,22 @@
 package apis
 
 import (
-	"encoding/json"
 	"errors"
 	"fmt"
-	"log/slog"
+	"log"
 	"net/http"
-	"sort"
-	"time"
 
 	"github.com/labstack/echo/v5"
 	"github.com/pocketbase/dbx"
 	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/forms"
-	"github.com/pocketbase/pocketbase/mails"
 	"github.com/pocketbase/pocketbase/models"
-	"github.com/pocketbase/pocketbase/models/schema"
 	"github.com/pocketbase/pocketbase/resolvers"
 	"github.com/pocketbase/pocketbase/tools/auth"
 	"github.com/pocketbase/pocketbase/tools/routine"
 	"github.com/pocketbase/pocketbase/tools/search"
 	"github.com/pocketbase/pocketbase/tools/security"
-	"github.com/pocketbase/pocketbase/tools/subscriptions"
-	"github.com/pocketbase/pocketbase/tools/types"
 	"golang.org/x/oauth2"
 )
 
@@ -32,16 +25,12 @@ import (
 func bindRecordAuthApi(app core.App, rg *echo.Group) {
 	api := recordAuthApi{app: app}
 
-	// global oauth2 subscription redirect handler
-	rg.GET("/oauth2-redirect", api.oauth2SubscriptionRedirect)
-	rg.POST("/oauth2-redirect", api.oauth2SubscriptionRedirect) // needed in case of response_mode=form_post
-
-	// common collection record related routes
 	subGroup := rg.Group(
 		"/collections/:collection",
 		ActivityLogger(app),
 		LoadCollectionContext(app, models.CollectionTypeAuth),
 	)
+
 	subGroup.GET("/auth-methods", api.authMethods)
 	subGroup.POST("/auth-refresh", api.authRefresh, RequireSameContextRecordAuth())
 	subGroup.POST("/auth-with-oauth2", api.authWithOAuth2)
@@ -71,23 +60,26 @@ func (api *recordAuthApi) authRefresh(c echo.Context) error {
 	event.Collection = record.Collection()
 	event.Record = record
 
-	return api.app.OnRecordBeforeAuthRefreshRequest().Trigger(event, func(e *core.RecordAuthRefreshEvent) error {
-		return api.app.OnRecordAfterAuthRefreshRequest().Trigger(event, func(e *core.RecordAuthRefreshEvent) error {
-			return RecordAuthResponse(api.app, e.HttpContext, e.Record, nil)
-		})
+	handlerErr := api.app.OnRecordBeforeAuthRefreshRequest().Trigger(event, func(e *core.RecordAuthRefreshEvent) error {
+		return RecordAuthResponse(api.app, e.HttpContext, e.Record, nil)
 	})
+
+	if handlerErr == nil {
+		if err := api.app.OnRecordAfterAuthRefreshRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
+	return handlerErr
 }
 
 type providerInfo struct {
-	Name        string `json:"name"`
-	DisplayName string `json:"displayName"`
-	State       string `json:"state"`
-	AuthUrl     string `json:"authUrl"`
-	// technically could be omitted if the provider doesn't support PKCE,
-	// but to avoid breaking existing typed clients we'll return them as empty string
+	Name                string `json:"name"`
+	State               string `json:"state"`
 	CodeVerifier        string `json:"codeVerifier"`
 	CodeChallenge       string `json:"codeChallenge"`
 	CodeChallengeMethod string `json:"codeChallengeMethod"`
+	AuthUrl             string `json:"authUrl"`
 }
 
 func (api *recordAuthApi) authMethods(c echo.Context) error {
@@ -99,14 +91,12 @@ func (api *recordAuthApi) authMethods(c echo.Context) error {
 	authOptions := collection.AuthOptions()
 
 	result := struct {
-		AuthProviders    []providerInfo `json:"authProviders"`
 		UsernamePassword bool           `json:"usernamePassword"`
 		EmailPassword    bool           `json:"emailPassword"`
-		OnlyVerified     bool           `json:"onlyVerified"`
+		AuthProviders    []providerInfo `json:"authProviders"`
 	}{
 		UsernamePassword: authOptions.AllowUsernameAuth,
 		EmailPassword:    authOptions.AllowEmailAuth,
-		OnlyVerified:     authOptions.OnlyVerified,
 		AuthProviders:    []providerInfo{},
 	}
 
@@ -122,61 +112,37 @@ func (api *recordAuthApi) authMethods(c echo.Context) error {
 
 		provider, err := auth.NewProviderByName(name)
 		if err != nil {
-			api.app.Logger().Debug("Missing or invalid provider name", slog.String("name", name))
+			if api.app.IsDebug() {
+				log.Println(err)
+			}
 			continue // skip provider
 		}
 
 		if err := config.SetupProvider(provider); err != nil {
-			api.app.Logger().Debug(
-				"Failed to setup provider",
-				slog.String("name", name),
-				slog.String("error", err.Error()),
-			)
+			if api.app.IsDebug() {
+				log.Println(err)
+			}
 			continue // skip provider
 		}
 
-		info := providerInfo{
-			Name:        name,
-			DisplayName: provider.DisplayName(),
-			State:       security.RandomString(30),
-		}
-
-		if info.DisplayName == "" {
-			info.DisplayName = name
-		}
-
-		urlOpts := []oauth2.AuthCodeOption{}
-
-		// custom providers url options
-		switch name {
-		case auth.NameApple:
-			// see https://developer.apple.com/documentation/sign_in_with_apple/sign_in_with_apple_js/incorporating_sign_in_with_apple_into_other_platforms#3332113
-			urlOpts = append(urlOpts, oauth2.SetAuthURLParam("response_mode", "form_post"))
-		}
-
-		if provider.PKCE() {
-			info.CodeVerifier = security.RandomString(43)
-			info.CodeChallenge = security.S256Challenge(info.CodeVerifier)
-			info.CodeChallengeMethod = "S256"
-			urlOpts = append(urlOpts,
-				oauth2.SetAuthURLParam("code_challenge", info.CodeChallenge),
-				oauth2.SetAuthURLParam("code_challenge_method", info.CodeChallengeMethod),
-			)
-		}
-
-		info.AuthUrl = provider.BuildAuthUrl(
-			info.State,
-			urlOpts...,
-		) + "&redirect_uri=" // empty redirect_uri so that users can append their redirect url
-
-		result.AuthProviders = append(result.AuthProviders, info)
+		state := security.RandomString(30)
+		codeVerifier := security.RandomString(43)
+		codeChallenge := security.S256Challenge(codeVerifier)
+		codeChallengeMethod := "S256"
+		result.AuthProviders = append(result.AuthProviders, providerInfo{
+			Name:                name,
+			State:               state,
+			CodeVerifier:        codeVerifier,
+			CodeChallenge:       codeChallenge,
+			CodeChallengeMethod: codeChallengeMethod,
+			AuthUrl: provider.BuildAuthUrl(
+				state,
+				oauth2.SetAuthURLParam("code_challenge", codeChallenge),
+				oauth2.SetAuthURLParam("code_challenge_method", codeChallengeMethod),
+			) + "&redirect_uri=", // empty redirect_uri so that users can append their url
+		})
 	}
 
-	// sort providers
-	sort.SliceStable(result.AuthProviders, func(i, j int) bool {
-		return result.AuthProviders[i].Name < result.AuthProviders[j].Name
-	})
-
 	return c.JSON(http.StatusOK, result)
 }
 
@@ -202,19 +168,10 @@ func (api *recordAuthApi) authWithOAuth2(c echo.Context) error {
 		return NewBadRequestError("An error occurred while loading the submitted data.", readErr)
 	}
 
-	event := new(core.RecordAuthWithOAuth2Event)
-	event.HttpContext = c
-	event.Collection = collection
-	event.ProviderName = form.Provider
-
 	form.SetBeforeNewRecordCreateFunc(func(createForm *forms.RecordUpsert, authRecord *models.Record, authUser *auth.AuthUser) error {
 		return createForm.DrySubmit(func(txDao *daos.Dao) error {
-			event.IsNewRecord = true
-
-			// clone the current request data and assign the form create data as its body data
-			requestInfo := *RequestInfo(c)
-			requestInfo.Context = models.RequestInfoContextOAuth2
-			requestInfo.Data = form.CreateData
+			requestData := RequestData(c)
+			requestData.Data = form.CreateData
 
 			createRuleFunc := func(q *dbx.SelectQuery) error {
 				admin, _ := c.Get(ContextAdminKey).(*models.Admin)
@@ -227,7 +184,7 @@ func (api *recordAuthApi) authWithOAuth2(c echo.Context) error {
 				}
 
 				if *collection.CreateRule != "" {
-					resolver := resolvers.NewRecordFieldResolver(txDao, collection, &requestInfo, true)
+					resolver := resolvers.NewRecordFieldResolver(txDao, collection, requestData, true)
 					expr, err := search.FilterData(*collection.CreateRule).BuildExpr(resolver)
 					if err != nil {
 						return err
@@ -247,12 +204,14 @@ func (api *recordAuthApi) authWithOAuth2(c echo.Context) error {
 		})
 	})
 
+	event := new(core.RecordAuthWithOAuth2Event)
+	event.HttpContext = c
+	event.Collection = collection
+
 	_, _, submitErr := form.Submit(func(next forms.InterceptorNextFunc[*forms.RecordOAuth2LoginData]) forms.InterceptorNextFunc[*forms.RecordOAuth2LoginData] {
 		return func(data *forms.RecordOAuth2LoginData) error {
 			event.Record = data.Record
 			event.OAuth2User = data.OAuth2User
-			event.ProviderClient = data.ProviderClient
-			event.IsNewRecord = data.Record == nil
 
 			return api.app.OnRecordBeforeAuthWithOAuth2Request().Trigger(event, func(e *core.RecordAuthWithOAuth2Event) error {
 				data.Record = e.Record
@@ -265,29 +224,17 @@ func (api *recordAuthApi) authWithOAuth2(c echo.Context) error {
 				e.Record = data.Record
 				e.OAuth2User = data.OAuth2User
 
-				meta := struct {
-					*auth.AuthUser
-					IsNew bool `json:"isNew"`
-				}{
-					AuthUser: e.OAuth2User,
-					IsNew:    event.IsNewRecord,
-				}
-
-				return api.app.OnRecordAfterAuthWithOAuth2Request().Trigger(event, func(e *core.RecordAuthWithOAuth2Event) error {
-					// clear the lastLoginAlertSentAt field so that we can enforce password auth notifications
-					if !e.Record.LastLoginAlertSentAt().IsZero() {
-						e.Record.Set(schema.FieldNameLastLoginAlertSentAt, "")
-						if err := api.app.Dao().SaveRecord(e.Record); err != nil {
-							api.app.Logger().Warn("Failed to reset lastLoginAlertSentAt", "error", err, "recordId", e.Record.Id)
-						}
-					}
-
-					return RecordAuthResponse(api.app, e.HttpContext, e.Record, meta)
-				})
+				return RecordAuthResponse(api.app, e.HttpContext, e.Record, e.OAuth2User)
 			})
 		}
 	})
 
+	if submitErr == nil {
+		if err := api.app.OnRecordAfterAuthWithOAuth2Request().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
 	return submitErr
 }
 
@@ -317,49 +264,17 @@ func (api *recordAuthApi) authWithPassword(c echo.Context) error {
 					return NewBadRequestError("Failed to authenticate.", err)
 				}
 
-				// @todo remove after the refactoring
-				if collection.AuthOptions().AllowOAuth2Auth && e.Record.Email() != "" {
-					externalAuths, err := api.app.Dao().FindAllExternalAuthsByRecord(e.Record)
-					if err != nil {
-						return NewBadRequestError("Failed to authenticate.", err)
-					}
-					if len(externalAuths) > 0 {
-						lastLoginAlert := e.Record.LastLoginAlertSentAt().Time()
-
-						// send an email alert if the password auth is after OAuth2 auth (lastLoginAlert will be empty)
-						// or if it has been ~7 days since the last alert
-						if lastLoginAlert.IsZero() || time.Now().UTC().Sub(lastLoginAlert).Hours() > 168 {
-							providerNames := make([]string, len(externalAuths))
-							for i, ea := range externalAuths {
-								var name string
-								if provider, err := auth.NewProviderByName(ea.Provider); err == nil {
-									name = provider.DisplayName()
-								}
-								if name == "" {
-									name = ea.Provider
-								}
-								providerNames[i] = name
-							}
-
-							if err := mails.SendRecordPasswordLoginAlert(api.app, e.Record, providerNames...); err != nil {
-								return NewBadRequestError("Failed to authenticate.", err)
-							}
-
-							e.Record.SetLastLoginAlertSentAt(types.NowDateTime())
-							if err := api.app.Dao().SaveRecord(e.Record); err != nil {
-								api.app.Logger().Warn("Failed to update lastLoginAlertSentAt", "error", err, "recordId", e.Record.Id)
-							}
-						}
-					}
-				}
-
-				return api.app.OnRecordAfterAuthWithPasswordRequest().Trigger(event, func(e *core.RecordAuthWithPasswordEvent) error {
-					return RecordAuthResponse(api.app, e.HttpContext, e.Record, nil)
-				})
+				return RecordAuthResponse(api.app, e.HttpContext, e.Record, nil)
 			})
 		}
 	})
 
+	if submitErr == nil {
+		if err := api.app.OnRecordAfterAuthWithPasswordRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
 	return submitErr
 }
 
@@ -394,32 +309,30 @@ func (api *recordAuthApi) requestPasswordReset(c echo.Context) error {
 			return api.app.OnRecordBeforeRequestPasswordResetRequest().Trigger(event, func(e *core.RecordRequestPasswordResetEvent) error {
 				// run in background because we don't need to show the result to the client
 				routine.FireAndForget(func() {
-					if err := next(e.Record); err != nil {
-						api.app.Logger().Debug(
-							"Failed to send password reset email",
-							slog.String("error", err.Error()),
-						)
+					if err := next(e.Record); err != nil && api.app.IsDebug() {
+						log.Println(err)
 					}
 				})
 
-				return api.app.OnRecordAfterRequestPasswordResetRequest().Trigger(event, func(e *core.RecordRequestPasswordResetEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.NoContent(http.StatusNoContent)
-				})
+				return e.HttpContext.NoContent(http.StatusNoContent)
 			})
 		}
 	})
 
-	// eagerly write 204 response and skip submit errors
-	// as a measure against emails enumeration
+	if submitErr == nil {
+		if err := api.app.OnRecordAfterRequestPasswordResetRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	} else if api.app.IsDebug() {
+		log.Println(submitErr)
+	}
+
+	// don't return the response error to prevent emails enumeration
 	if !c.Response().Committed {
 		c.NoContent(http.StatusNoContent)
 	}
 
-	return submitErr
+	return nil
 }
 
 func (api *recordAuthApi) confirmPasswordReset(c echo.Context) error {
@@ -446,17 +359,17 @@ func (api *recordAuthApi) confirmPasswordReset(c echo.Context) error {
 					return NewBadRequestError("Failed to set new password.", err)
 				}
 
-				return api.app.OnRecordAfterConfirmPasswordResetRequest().Trigger(event, func(e *core.RecordConfirmPasswordResetEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.NoContent(http.StatusNoContent)
-				})
+				return e.HttpContext.NoContent(http.StatusNoContent)
 			})
 		}
 	})
 
+	if submitErr == nil {
+		if err := api.app.OnRecordAfterConfirmPasswordResetRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
 	return submitErr
 }
 
@@ -486,32 +399,30 @@ func (api *recordAuthApi) requestVerification(c echo.Context) error {
 			return api.app.OnRecordBeforeRequestVerificationRequest().Trigger(event, func(e *core.RecordRequestVerificationEvent) error {
 				// run in background because we don't need to show the result to the client
 				routine.FireAndForget(func() {
-					if err := next(e.Record); err != nil {
-						api.app.Logger().Debug(
-							"Failed to send verification email",
-							slog.String("error", err.Error()),
-						)
+					if err := next(e.Record); err != nil && api.app.IsDebug() {
+						log.Println(err)
 					}
 				})
 
-				return api.app.OnRecordAfterRequestVerificationRequest().Trigger(event, func(e *core.RecordRequestVerificationEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.NoContent(http.StatusNoContent)
-				})
+				return e.HttpContext.NoContent(http.StatusNoContent)
 			})
 		}
 	})
 
-	// eagerly write 204 response and skip submit errors
-	// as a measure against users enumeration
+	if submitErr == nil {
+		if err := api.app.OnRecordAfterRequestVerificationRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	} else if api.app.IsDebug() {
+		log.Println(submitErr)
+	}
+
+	// don't return the response error to prevent emails enumeration
 	if !c.Response().Committed {
 		c.NoContent(http.StatusNoContent)
 	}
 
-	return submitErr
+	return nil
 }
 
 func (api *recordAuthApi) confirmVerification(c echo.Context) error {
@@ -538,17 +449,17 @@ func (api *recordAuthApi) confirmVerification(c echo.Context) error {
 					return NewBadRequestError("An error occurred while submitting the form.", err)
 				}
 
-				return api.app.OnRecordAfterConfirmVerificationRequest().Trigger(event, func(e *core.RecordConfirmVerificationEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.NoContent(http.StatusNoContent)
-				})
+				return e.HttpContext.NoContent(http.StatusNoContent)
 			})
 		}
 	})
 
+	if submitErr == nil {
+		if err := api.app.OnRecordAfterConfirmVerificationRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
 	return submitErr
 }
 
@@ -573,23 +484,23 @@ func (api *recordAuthApi) requestEmailChange(c echo.Context) error {
 	event.Collection = collection
 	event.Record = record
 
-	return form.Submit(func(next forms.InterceptorNextFunc[*models.Record]) forms.InterceptorNextFunc[*models.Record] {
+	submitErr := form.Submit(func(next forms.InterceptorNextFunc[*models.Record]) forms.InterceptorNextFunc[*models.Record] {
 		return func(record *models.Record) error {
 			return api.app.OnRecordBeforeRequestEmailChangeRequest().Trigger(event, func(e *core.RecordRequestEmailChangeEvent) error {
 				if err := next(e.Record); err != nil {
 					return NewBadRequestError("Failed to request email change.", err)
 				}
 
-				return api.app.OnRecordAfterRequestEmailChangeRequest().Trigger(event, func(e *core.RecordRequestEmailChangeEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.NoContent(http.StatusNoContent)
-				})
+				return e.HttpContext.NoContent(http.StatusNoContent)
 			})
 		}
 	})
+
+	if submitErr == nil {
+		api.app.OnRecordAfterRequestEmailChangeRequest().Trigger(event)
+	}
+
+	return submitErr
 }
 
 func (api *recordAuthApi) confirmEmailChange(c echo.Context) error {
@@ -616,17 +527,17 @@ func (api *recordAuthApi) confirmEmailChange(c echo.Context) error {
 					return NewBadRequestError("Failed to confirm email change.", err)
 				}
 
-				return api.app.OnRecordAfterConfirmEmailChangeRequest().Trigger(event, func(e *core.RecordConfirmEmailChangeEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.NoContent(http.StatusNoContent)
-				})
+				return e.HttpContext.NoContent(http.StatusNoContent)
 			})
 		}
 	})
 
+	if submitErr == nil {
+		if err := api.app.OnRecordAfterConfirmEmailChangeRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
 	return submitErr
 }
 
@@ -690,76 +601,17 @@ func (api *recordAuthApi) unlinkExternalAuth(c echo.Context) error {
 	event.Record = record
 	event.ExternalAuth = externalAuth
 
-	return api.app.OnRecordBeforeUnlinkExternalAuthRequest().Trigger(event, func(e *core.RecordUnlinkExternalAuthEvent) error {
+	handlerErr := api.app.OnRecordBeforeUnlinkExternalAuthRequest().Trigger(event, func(e *core.RecordUnlinkExternalAuthEvent) error {
 		if err := api.app.Dao().DeleteExternalAuth(externalAuth); err != nil {
 			return NewBadRequestError("Cannot unlink the external auth provider.", err)
 		}
 
-		return api.app.OnRecordAfterUnlinkExternalAuthRequest().Trigger(event, func(e *core.RecordUnlinkExternalAuthEvent) error {
-			if e.HttpContext.Response().Committed {
-				return nil
-			}
-
-			return e.HttpContext.NoContent(http.StatusNoContent)
-		})
+		return e.HttpContext.NoContent(http.StatusNoContent)
 	})
-}
 
-// -------------------------------------------------------------------
-
-const (
-	oauth2SubscriptionTopic   string = "@oauth2"
-	oauth2RedirectFailurePath string = "../_/#/auth/oauth2-redirect-failure"
-	oauth2RedirectSuccessPath string = "../_/#/auth/oauth2-redirect-success"
-)
-
-type oauth2RedirectData struct {
-	State string `form:"state" query:"state" json:"state"`
-	Code  string `form:"code" query:"code" json:"code"`
-	Error string `form:"error" query:"error" json:"error,omitempty"`
-}
-
-func (api *recordAuthApi) oauth2SubscriptionRedirect(c echo.Context) error {
-	redirectStatusCode := http.StatusTemporaryRedirect
-	if c.Request().Method != http.MethodGet {
-		redirectStatusCode = http.StatusSeeOther
-	}
-
-	data := oauth2RedirectData{}
-	if err := c.Bind(&data); err != nil {
-		api.app.Logger().Debug("Failed to read OAuth2 redirect data", "error", err)
-		return c.Redirect(redirectStatusCode, oauth2RedirectFailurePath)
-	}
-
-	if data.State == "" {
-		api.app.Logger().Debug("Missing OAuth2 state parameter")
-		return c.Redirect(redirectStatusCode, oauth2RedirectFailurePath)
-	}
-
-	client, err := api.app.SubscriptionsBroker().ClientById(data.State)
-	if err != nil || client.IsDiscarded() || !client.HasSubscription(oauth2SubscriptionTopic) {
-		api.app.Logger().Debug("Missing or invalid OAuth2 subscription client", "error", err, "clientId", data.State)
-		return c.Redirect(redirectStatusCode, oauth2RedirectFailurePath)
-	}
-	defer client.Unsubscribe(oauth2SubscriptionTopic)
-
-	encodedData, err := json.Marshal(data)
-	if err != nil {
-		api.app.Logger().Debug("Failed to marshalize OAuth2 redirect data", "error", err)
-		return c.Redirect(redirectStatusCode, oauth2RedirectFailurePath)
-	}
-
-	msg := subscriptions.Message{
-		Name: oauth2SubscriptionTopic,
-		Data: encodedData,
-	}
-
-	client.Send(msg)
-
-	if data.Error != "" || data.Code == "" {
-		api.app.Logger().Debug("Failed OAuth2 redirect due to an error or missing code parameter", "error", data.Error, "clientId", data.State)
-		return c.Redirect(redirectStatusCode, oauth2RedirectFailurePath)
+	if handlerErr == nil {
+		api.app.OnRecordAfterUnlinkExternalAuthRequest().Trigger(event)
 	}
 
-	return c.Redirect(redirectStatusCode, oauth2RedirectSuccessPath)
+	return handlerErr
 }

apis/record_auth_test.go

@@ -1,24 +1,18 @@
 package apis_test
 
 import (
-	"context"
-	"errors"
 	"net/http"
 	"strings"
 	"testing"
 	"time"
 
 	"github.com/labstack/echo/v5"
-	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/tests"
-	"github.com/pocketbase/pocketbase/tools/subscriptions"
 	"github.com/pocketbase/pocketbase/tools/types"
 )
 
 func TestRecordAuthMethodsList(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "missing collection",
@@ -42,7 +36,6 @@ func TestRecordAuthMethodsList(t *testing.T) {
 			ExpectedContent: []string{
 				`"usernamePassword":true`,
 				`"emailPassword":true`,
-				`"onlyVerified":false`,
 				`"authProviders":[{`,
 				`"name":"gitlab"`,
 				`"state":`,
@@ -61,7 +54,6 @@ func TestRecordAuthMethodsList(t *testing.T) {
 			ExpectedContent: []string{
 				`"usernamePassword":false`,
 				`"emailPassword":true`,
-				`"onlyVerified":true`,
 				`"authProviders":[]`,
 			},
 		},
@@ -73,8 +65,6 @@ func TestRecordAuthMethodsList(t *testing.T) {
 }
 
 func TestRecordAuthWithPassword(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "invalid body format",
@@ -218,7 +208,7 @@ func TestRecordAuthWithPassword(t *testing.T) {
 			},
 		},
 		{
-			Name:   "valid email (unverified) and valid password in allowed collection",
+			Name:   "valid email and valid password in allowed collection",
 			Method: http.MethodPost,
 			Url:    "/api/collections/users/auth-with-password",
 			Body: strings.NewReader(`{
@@ -231,51 +221,6 @@ func TestRecordAuthWithPassword(t *testing.T) {
 				`"token":"`,
 				`"id":"4q1xlclmfloku33"`,
 				`"email":"test@example.com"`,
-				`"verified":false`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnRecordBeforeAuthWithPasswordRequest": 1,
-				"OnRecordAfterAuthWithPasswordRequest":  1,
-				"OnRecordAuthRequest":                   1,
-				// lastLoginAlertSentAt update
-				"OnModelAfterUpdate":  1,
-				"OnModelBeforeUpdate": 1,
-			},
-		},
-
-		// onlyVerified collection check
-		{
-			Name:   "unverified user in onlyVerified collection",
-			Method: http.MethodPost,
-			Url:    "/api/collections/clients/auth-with-password",
-			Body: strings.NewReader(`{
-				"identity":"test2@example.com",
-				"password":"1234567890"
-			}`),
-			ExpectedStatus: 403,
-			ExpectedContent: []string{
-				`"data":{}`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnRecordBeforeAuthWithPasswordRequest": 1,
-				"OnRecordAfterAuthWithPasswordRequest":  1,
-			},
-		},
-		{
-			Name:   "verified user in onlyVerified collection",
-			Method: http.MethodPost,
-			Url:    "/api/collections/clients/auth-with-password",
-			Body: strings.NewReader(`{
-				"identity":"test@example.com",
-				"password":"1234567890"
-			}`),
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"record":{`,
-				`"token":"`,
-				`"id":"gk390qegs4y47wn"`,
-				`"email":"test@example.com"`,
-				`"verified":true`,
 			},
 			ExpectedEvents: map[string]int{
 				"OnRecordBeforeAuthWithPasswordRequest": 1,
@@ -307,9 +252,6 @@ func TestRecordAuthWithPassword(t *testing.T) {
 				"OnRecordBeforeAuthWithPasswordRequest": 1,
 				"OnRecordAfterAuthWithPasswordRequest":  1,
 				"OnRecordAuthRequest":                   1,
-				// lastLoginAlertSentAt update
-				"OnModelAfterUpdate":  1,
-				"OnModelBeforeUpdate": 1,
 			},
 		},
 		{
@@ -334,31 +276,6 @@ func TestRecordAuthWithPassword(t *testing.T) {
 				"OnRecordBeforeAuthWithPasswordRequest": 1,
 				"OnRecordAfterAuthWithPasswordRequest":  1,
 				"OnRecordAuthRequest":                   1,
-				// lastLoginAlertSentAt update
-				"OnModelAfterUpdate":  1,
-				"OnModelBeforeUpdate": 1,
-			},
-		},
-
-		// after hooks error checks
-		{
-			Name:   "OnRecordAfterAuthWithPasswordRequest error response",
-			Method: http.MethodPost,
-			Url:    "/api/collections/users/auth-with-password",
-			Body: strings.NewReader(`{
-				"identity":"test2_username",
-				"password":"1234567890"
-			}`),
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnRecordAfterAuthWithPasswordRequest().Add(func(e *core.RecordAuthWithPasswordEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnRecordBeforeAuthWithPasswordRequest": 1,
-				"OnRecordAfterAuthWithPasswordRequest":  1,
 			},
 		},
 	}
@@ -369,8 +286,6 @@ func TestRecordAuthWithPassword(t *testing.T) {
 }
 
 func TestRecordAuthRefresh(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -436,60 +351,6 @@ func TestRecordAuthRefresh(t *testing.T) {
 				"OnRecordAfterAuthRefreshRequest":  1,
 			},
 		},
-		{
-			Name:   "unverified auth record in onlyVerified collection",
-			Method: http.MethodPost,
-			Url:    "/api/collections/clients/auth-refresh",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6Im8xeTBkZDBzcGQ3ODZtZCIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoidjg1MXE0cjc5MHJoa25sIiwiZXhwIjoyMjA4OTg1MjYxfQ.-JYlrz5DcGzvb0nYx-xqnSFMu9dupyKY7Vg_FUm0OaM",
-			},
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnRecordBeforeAuthRefreshRequest": 1,
-				"OnRecordAfterAuthRefreshRequest":  1,
-			},
-		},
-		{
-			Name:   "verified auth record in onlyVerified collection",
-			Method: http.MethodPost,
-			Url:    "/api/collections/clients/auth-refresh",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6ImdrMzkwcWVnczR5NDd3biIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoidjg1MXE0cjc5MHJoa25sIiwiZXhwIjoyMjA4OTg1MjYxfQ.q34IWXrRWsjLvbbVNRfAs_J4SoTHloNBfdGEiLmy-D8",
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"token":`,
-				`"record":`,
-				`"id":"gk390qegs4y47wn"`,
-				`"verified":true`,
-				`"email":"test@example.com"`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnRecordBeforeAuthRefreshRequest": 1,
-				"OnRecordAuthRequest":              1,
-				"OnRecordAfterAuthRefreshRequest":  1,
-			},
-		},
-		{
-			Name:   "OnRecordAfterAuthRefreshRequest error response",
-			Method: http.MethodPost,
-			Url:    "/api/collections/users/auth-refresh?expand=rel,missing",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnRecordAfterAuthRefreshRequest().Add(func(e *core.RecordAuthRefreshEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnRecordBeforeAuthRefreshRequest": 1,
-				"OnRecordAfterAuthRefreshRequest":  1,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -498,8 +359,6 @@ func TestRecordAuthRefresh(t *testing.T) {
 }
 
 func TestRecordAuthRequestPasswordReset(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "not an auth collection",
@@ -585,8 +444,6 @@ func TestRecordAuthRequestPasswordReset(t *testing.T) {
 }
 
 func TestRecordAuthConfirmPasswordReset(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:           "empty data",
@@ -635,8 +492,10 @@ func TestRecordAuthConfirmPasswordReset(t *testing.T) {
 				"password":"12345678",
 				"passwordConfirm":"12345678"
 			}`),
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
+			ExpectedStatus: 400,
+			ExpectedContent: []string{
+				`"data":{}`,
+			},
 		},
 		{
 			Name:   "different auth collection",
@@ -653,55 +512,7 @@ func TestRecordAuthConfirmPasswordReset(t *testing.T) {
 			},
 		},
 		{
-			Name:   "valid token and data (unverified user)",
-			Method: http.MethodPost,
-			Url:    "/api/collections/users/confirm-password-reset",
-			Body: strings.NewReader(`{
-				"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImVtYWlsIjoidGVzdEBleGFtcGxlLmNvbSIsImNvbGxlY3Rpb25JZCI6Il9wYl91c2Vyc19hdXRoXyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiZXhwIjoyMjA4OTg1MjYxfQ.R_4FOSUHIuJQ5Crl3PpIPCXMsoHzuTaNlccpXg_3FOg",
-				"password":"12345678",
-				"passwordConfirm":"12345678"
-			}`),
-			ExpectedStatus: 204,
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeUpdate":                       1,
-				"OnModelAfterUpdate":                        1,
-				"OnRecordBeforeConfirmPasswordResetRequest": 1,
-				"OnRecordAfterConfirmPasswordResetRequest":  1,
-				// external auths deletion
-				"OnModelBeforeDelete": 2,
-				"OnModelAfterDelete":  2,
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				user, err := app.Dao().FindAuthRecordByEmail("users", "test@example.com")
-				if err != nil {
-					t.Fatalf("Failed to fetch confirm password user: %v", err)
-				}
-
-				if user.Verified() {
-					t.Fatalf("Expected the user to be unverified")
-				}
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				user, err := app.Dao().FindAuthRecordByToken(
-					"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImVtYWlsIjoidGVzdEBleGFtcGxlLmNvbSIsImNvbGxlY3Rpb25JZCI6Il9wYl91c2Vyc19hdXRoXyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiZXhwIjoyMjA4OTg1MjYxfQ.R_4FOSUHIuJQ5Crl3PpIPCXMsoHzuTaNlccpXg_3FOg",
-					app.Settings().RecordPasswordResetToken.Secret,
-				)
-				if err == nil {
-					t.Fatalf("Expected the password reset token to be invalidated")
-				}
-
-				user, err = app.Dao().FindAuthRecordByEmail("users", "test@example.com")
-				if err != nil {
-					t.Fatalf("Failed to fetch confirm password user: %v", err)
-				}
-
-				if !user.Verified() {
-					t.Fatalf("Expected the user to be marked as verified")
-				}
-			},
-		},
-		{
-			Name:   "valid token and data (unverified user with different email from the one in the token)",
+			Name:   "valid token and data",
 			Method: http.MethodPost,
 			Url:    "/api/collections/users/confirm-password-reset",
 			Body: strings.NewReader(`{
@@ -716,121 +527,6 @@ func TestRecordAuthConfirmPasswordReset(t *testing.T) {
 				"OnRecordBeforeConfirmPasswordResetRequest": 1,
 				"OnRecordAfterConfirmPasswordResetRequest":  1,
 			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				user, err := app.Dao().FindAuthRecordByEmail("users", "test@example.com")
-				if err != nil {
-					t.Fatalf("Failed to fetch confirm password user: %v", err)
-				}
-
-				if user.Verified() {
-					t.Fatalf("Expected the user to be unverified")
-				}
-
-				// manually change the email to check whether the verified state will be updated
-				user.SetEmail("test_update@example.com")
-				if err := app.Dao().WithoutHooks().SaveRecord(user); err != nil {
-					t.Fatalf("Failed to update user test email")
-				}
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				user, err := app.Dao().FindAuthRecordByToken(
-					"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImVtYWlsIjoidGVzdEBleGFtcGxlLmNvbSIsImNvbGxlY3Rpb25JZCI6Il9wYl91c2Vyc19hdXRoXyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiZXhwIjoyMjA4OTg1MjYxfQ.R_4FOSUHIuJQ5Crl3PpIPCXMsoHzuTaNlccpXg_3FOg",
-					app.Settings().RecordPasswordResetToken.Secret,
-				)
-				if err == nil {
-					t.Fatalf("Expected the password reset token to be invalidated")
-				}
-
-				user, err = app.Dao().FindAuthRecordByEmail("users", "test_update@example.com")
-				if err != nil {
-					t.Fatalf("Failed to fetch confirm password user: %v", err)
-				}
-
-				if user.Verified() {
-					t.Fatalf("Expected the user to remain unverified")
-				}
-			},
-		},
-		{
-			Name:   "valid token and data (verified user)",
-			Method: http.MethodPost,
-			Url:    "/api/collections/users/confirm-password-reset",
-			Body: strings.NewReader(`{
-				"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImVtYWlsIjoidGVzdEBleGFtcGxlLmNvbSIsImNvbGxlY3Rpb25JZCI6Il9wYl91c2Vyc19hdXRoXyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiZXhwIjoyMjA4OTg1MjYxfQ.R_4FOSUHIuJQ5Crl3PpIPCXMsoHzuTaNlccpXg_3FOg",
-				"password":"12345678",
-				"passwordConfirm":"12345678"
-			}`),
-			ExpectedStatus: 204,
-			ExpectedEvents: map[string]int{
-				"OnModelAfterUpdate":                        1,
-				"OnModelBeforeUpdate":                       1,
-				"OnRecordBeforeConfirmPasswordResetRequest": 1,
-				"OnRecordAfterConfirmPasswordResetRequest":  1,
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				user, err := app.Dao().FindAuthRecordByEmail("users", "test@example.com")
-				if err != nil {
-					t.Fatalf("Failed to fetch confirm password user: %v", err)
-				}
-
-				oldTokenKey := user.TokenKey()
-
-				// ensure that the user is already verified
-				user.SetVerified(true)
-				if err := app.Dao().WithoutHooks().SaveRecord(user); err != nil {
-					t.Fatal("Failed to update user verified state")
-				}
-
-				// restore original token key that was reseted after the verified change
-				user.SetTokenKey(oldTokenKey)
-				if err := app.Dao().WithoutHooks().SaveRecord(user); err != nil {
-					t.Fatal("Failed to reset user tokenKey")
-				}
-			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				user, err := app.Dao().FindAuthRecordByToken(
-					"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImVtYWlsIjoidGVzdEBleGFtcGxlLmNvbSIsImNvbGxlY3Rpb25JZCI6Il9wYl91c2Vyc19hdXRoXyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiZXhwIjoyMjA4OTg1MjYxfQ.R_4FOSUHIuJQ5Crl3PpIPCXMsoHzuTaNlccpXg_3FOg",
-					app.Settings().RecordPasswordResetToken.Secret,
-				)
-				if err == nil {
-					t.Fatalf("Expected the password reset token to be invalidated")
-				}
-
-				user, err = app.Dao().FindAuthRecordByEmail("users", "test@example.com")
-				if err != nil {
-					t.Fatalf("Failed to fetch confirm password user: %v", err)
-				}
-
-				if !user.Verified() {
-					t.Fatalf("Expected the user to remain verified")
-				}
-			},
-		},
-		{
-			Name:   "OnRecordAfterConfirmPasswordResetRequest error response",
-			Method: http.MethodPost,
-			Url:    "/api/collections/users/confirm-password-reset",
-			Body: strings.NewReader(`{
-				"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImVtYWlsIjoidGVzdEBleGFtcGxlLmNvbSIsImNvbGxlY3Rpb25JZCI6Il9wYl91c2Vyc19hdXRoXyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiZXhwIjoyMjA4OTg1MjYxfQ.R_4FOSUHIuJQ5Crl3PpIPCXMsoHzuTaNlccpXg_3FOg",
-				"password":"12345678",
-				"passwordConfirm":"12345678"
-			}`),
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnRecordAfterConfirmPasswordResetRequest().Add(func(e *core.RecordConfirmPasswordResetEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeUpdate":                       1,
-				"OnModelAfterUpdate":                        1,
-				"OnRecordBeforeConfirmPasswordResetRequest": 1,
-				"OnRecordAfterConfirmPasswordResetRequest":  1,
-				// external auths deletion
-				"OnModelBeforeDelete": 2,
-				"OnModelAfterDelete":  2,
-			},
 		},
 	}
 
@@ -840,8 +536,6 @@ func TestRecordAuthConfirmPasswordReset(t *testing.T) {
 }
 
 func TestRecordAuthRequestVerification(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "not an auth collection",
@@ -935,8 +629,6 @@ func TestRecordAuthRequestVerification(t *testing.T) {
 }
 
 func TestRecordAuthConfirmVerification(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:           "empty data",
@@ -977,8 +669,10 @@ func TestRecordAuthConfirmVerification(t *testing.T) {
 			Body: strings.NewReader(`{
 				"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImVtYWlsIjoidGVzdEBleGFtcGxlLmNvbSIsImNvbGxlY3Rpb25JZCI6Il9wYl91c2Vyc19hdXRoXyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiZXhwIjoyMjA4OTg1MjYxfQ.R_4FOSUHIuJQ5Crl3PpIPCXMsoHzuTaNlccpXg_3FOg"
 			}`),
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
+			ExpectedStatus: 400,
+			ExpectedContent: []string{
+				`"data":{}`,
+			},
 		},
 		{
 			Name:   "different auth collection",
@@ -1001,13 +695,10 @@ func TestRecordAuthConfirmVerification(t *testing.T) {
 			}`),
 			ExpectedStatus: 204,
 			ExpectedEvents: map[string]int{
-				"OnModelBeforeUpdate":                      1,
 				"OnModelAfterUpdate":                       1,
+				"OnModelBeforeUpdate":                      1,
 				"OnRecordBeforeConfirmVerificationRequest": 1,
 				"OnRecordAfterConfirmVerificationRequest":  1,
-				// external auths deletion
-				"OnModelBeforeDelete": 2,
-				"OnModelAfterDelete":  2,
 			},
 		},
 		{
@@ -1039,30 +730,6 @@ func TestRecordAuthConfirmVerification(t *testing.T) {
 				"OnRecordAfterConfirmVerificationRequest":  1,
 			},
 		},
-		{
-			Name:   "OnRecordAfterConfirmVerificationRequest error response",
-			Method: http.MethodPost,
-			Url:    "/api/collections/users/confirm-verification",
-			Body: strings.NewReader(`{
-				"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImVtYWlsIjoidGVzdEBleGFtcGxlLmNvbSIsImNvbGxlY3Rpb25JZCI6Il9wYl91c2Vyc19hdXRoXyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiZXhwIjoyMjA4OTg1MjYxfQ.hL16TVmStHFdHLc4a860bRqJ3sFfzjv0_NRNzwsvsrc"
-			}`),
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnRecordAfterConfirmVerificationRequest().Add(func(e *core.RecordConfirmVerificationEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeUpdate":                      1,
-				"OnModelAfterUpdate":                       1,
-				"OnRecordBeforeConfirmVerificationRequest": 1,
-				"OnRecordAfterConfirmVerificationRequest":  1,
-				// external auths deletion
-				"OnModelBeforeDelete": 2,
-				"OnModelAfterDelete":  2,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -1071,8 +738,6 @@ func TestRecordAuthConfirmVerification(t *testing.T) {
 }
 
 func TestRecordAuthRequestEmailChange(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -1148,7 +813,7 @@ func TestRecordAuthRequestEmailChange(t *testing.T) {
 			ExpectedStatus: 400,
 			ExpectedContent: []string{
 				`"data":`,
-				`"newEmail":{"code":"validation_record_email_invalid"`,
+				`"newEmail":{"code":"validation_record_email_exists"`,
 			},
 		},
 		{
@@ -1175,8 +840,6 @@ func TestRecordAuthRequestEmailChange(t *testing.T) {
 }
 
 func TestRecordAuthConfirmEmailChange(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:           "not an auth collection",
@@ -1247,13 +910,10 @@ func TestRecordAuthConfirmEmailChange(t *testing.T) {
 			}`),
 			ExpectedStatus: 204,
 			ExpectedEvents: map[string]int{
-				"OnModelBeforeUpdate":                     1,
 				"OnModelAfterUpdate":                      1,
+				"OnModelBeforeUpdate":                     1,
 				"OnRecordBeforeConfirmEmailChangeRequest": 1,
 				"OnRecordAfterConfirmEmailChangeRequest":  1,
-				// external auths deletion
-				"OnModelBeforeDelete": 2,
-				"OnModelAfterDelete":  2,
 			},
 		},
 		{
@@ -1270,31 +930,6 @@ func TestRecordAuthConfirmEmailChange(t *testing.T) {
 				`"token":{"code":"validation_token_collection_mismatch"`,
 			},
 		},
-		{
-			Name:   "OnRecordAfterConfirmEmailChangeRequest error response",
-			Method: http.MethodPost,
-			Url:    "/api/collections/users/confirm-email-change",
-			Body: strings.NewReader(`{
-				"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsImNvbGxlY3Rpb25JZCI6Il9wYl91c2Vyc19hdXRoXyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiZW1haWwiOiJ0ZXN0QGV4YW1wbGUuY29tIiwibmV3RW1haWwiOiJjaGFuZ2VAZXhhbXBsZS5jb20iLCJleHAiOjIyMDg5ODUyNjF9.1sG6cL708pRXXjiHRZhG-in0X5fnttSf5nNcadKoYRs",
-				"password":"1234567890"
-			}`),
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnRecordAfterConfirmEmailChangeRequest().Add(func(e *core.RecordConfirmEmailChangeEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelAfterUpdate":                      1,
-				"OnModelBeforeUpdate":                     1,
-				"OnRecordBeforeConfirmEmailChangeRequest": 1,
-				"OnRecordAfterConfirmEmailChangeRequest":  1,
-				// external auths deletion
-				"OnModelBeforeDelete": 2,
-				"OnModelAfterDelete":  2,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -1303,8 +938,6 @@ func TestRecordAuthConfirmEmailChange(t *testing.T) {
 }
 
 func TestRecordAuthListExternalsAuths(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -1405,8 +1038,6 @@ func TestRecordAuthListExternalsAuths(t *testing.T) {
 }
 
 func TestRecordAuthUnlinkExternalsAuth(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -1450,7 +1081,7 @@ func TestRecordAuthUnlinkExternalsAuth(t *testing.T) {
 				"OnRecordAfterUnlinkExternalAuthRequest":  1,
 				"OnRecordBeforeUnlinkExternalAuthRequest": 1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				record, err := app.Dao().FindRecordById("users", "4q1xlclmfloku33")
 				if err != nil {
 					t.Fatal(err)
@@ -1496,7 +1127,7 @@ func TestRecordAuthUnlinkExternalsAuth(t *testing.T) {
 				"OnRecordAfterUnlinkExternalAuthRequest":  1,
 				"OnRecordBeforeUnlinkExternalAuthRequest": 1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				record, err := app.Dao().FindRecordById("users", "4q1xlclmfloku33")
 				if err != nil {
 					t.Fatal(err)
@@ -1507,259 +1138,6 @@ func TestRecordAuthUnlinkExternalsAuth(t *testing.T) {
 				}
 			},
 		},
-		{
-			Name:   "OnRecordBeforeUnlinkExternalAuthRequest error response",
-			Method: http.MethodDelete,
-			Url:    "/api/collections/users/records/4q1xlclmfloku33/external-auths/google",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnRecordAfterUnlinkExternalAuthRequest().Add(func(e *core.RecordUnlinkExternalAuthEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelAfterDelete":                      1,
-				"OnModelBeforeDelete":                     1,
-				"OnRecordAfterUnlinkExternalAuthRequest":  1,
-				"OnRecordBeforeUnlinkExternalAuthRequest": 1,
-			},
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}
-
-func TestRecordAuthOAuth2Redirect(t *testing.T) {
-	t.Parallel()
-
-	clientStubs := make([]map[string]subscriptions.Client, 0, 10)
-
-	for i := 0; i < 10; i++ {
-		c1 := subscriptions.NewDefaultClient()
-
-		c2 := subscriptions.NewDefaultClient()
-		c2.Subscribe("@oauth2")
-
-		c3 := subscriptions.NewDefaultClient()
-		c3.Subscribe("test1", "@oauth2")
-
-		c4 := subscriptions.NewDefaultClient()
-		c4.Subscribe("test1", "test2")
-
-		c5 := subscriptions.NewDefaultClient()
-		c5.Subscribe("@oauth2")
-		c5.Discard()
-
-		clientStubs = append(clientStubs, map[string]subscriptions.Client{
-			"c1": c1,
-			"c2": c2,
-			"c3": c3,
-			"c4": c4,
-			"c5": c5,
-		})
-	}
-
-	checkFailureRedirect := func(t *testing.T, app *tests.TestApp, res *http.Response) {
-		loc := res.Header.Get("Location")
-		if !strings.Contains(loc, "/oauth2-redirect-failure") {
-			t.Fatalf("Expected failure redirect, got %q", loc)
-		}
-	}
-
-	checkSuccessRedirect := func(t *testing.T, app *tests.TestApp, res *http.Response) {
-		loc := res.Header.Get("Location")
-		if !strings.Contains(loc, "/oauth2-redirect-success") {
-			t.Fatalf("Expected success redirect, got %q", loc)
-		}
-	}
-
-	checkClientMessages := func(t *testing.T, clientId string, msg subscriptions.Message, expectedMessages map[string][]string) {
-		if len(expectedMessages[clientId]) == 0 {
-			t.Fatalf("Unexpected client %q message, got %s:\n%s", clientId, msg.Name, msg.Data)
-		}
-
-		if msg.Name != "@oauth2" {
-			t.Fatalf("Expected @oauth2 msg.Name, got %q", msg.Name)
-		}
-
-		for _, txt := range expectedMessages[clientId] {
-			if !strings.Contains(string(msg.Data), txt) {
-				t.Fatalf("Failed to find %q in \n%s", txt, msg.Data)
-			}
-		}
-	}
-
-	beforeTestFunc := func(
-		clients map[string]subscriptions.Client,
-		expectedMessages map[string][]string,
-	) func(*testing.T, *tests.TestApp, *echo.Echo) {
-		return func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-			for _, client := range clients {
-				app.SubscriptionsBroker().Register(client)
-			}
-
-			ctx, cancelFunc := context.WithTimeout(context.Background(), 100*time.Millisecond)
-
-			// add to the app store so that it can be cancelled manually after test completion
-			app.Store().Set("cancelFunc", cancelFunc)
-
-			go func() {
-				defer cancelFunc()
-
-				for {
-					select {
-					case msg := <-clients["c1"].Channel():
-						checkClientMessages(t, "c1", msg, expectedMessages)
-					case msg := <-clients["c2"].Channel():
-						checkClientMessages(t, "c2", msg, expectedMessages)
-					case msg := <-clients["c3"].Channel():
-						checkClientMessages(t, "c3", msg, expectedMessages)
-					case msg := <-clients["c4"].Channel():
-						checkClientMessages(t, "c4", msg, expectedMessages)
-					case msg := <-clients["c5"].Channel():
-						checkClientMessages(t, "c5", msg, expectedMessages)
-					case <-ctx.Done():
-						for _, c := range clients {
-							close(c.Channel())
-						}
-						return
-					}
-				}
-			}()
-		}
-	}
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:           "no state query param",
-			Method:         http.MethodGet,
-			Url:            "/api/oauth2-redirect?code=123",
-			BeforeTestFunc: beforeTestFunc(clientStubs[0], nil),
-			ExpectedStatus: http.StatusTemporaryRedirect,
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				app.Store().Get("cancelFunc").(context.CancelFunc)()
-
-				checkFailureRedirect(t, app, res)
-			},
-		},
-		{
-			Name:           "invalid or missing client",
-			Method:         http.MethodGet,
-			Url:            "/api/oauth2-redirect?code=123&state=missing",
-			BeforeTestFunc: beforeTestFunc(clientStubs[1], nil),
-			ExpectedStatus: http.StatusTemporaryRedirect,
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				app.Store().Get("cancelFunc").(context.CancelFunc)()
-
-				checkFailureRedirect(t, app, res)
-			},
-		},
-		{
-			Name:   "no code query param",
-			Method: http.MethodGet,
-			Url:    "/api/oauth2-redirect?state=" + clientStubs[2]["c3"].Id(),
-			BeforeTestFunc: beforeTestFunc(clientStubs[2], map[string][]string{
-				"c3": {`"state":"` + clientStubs[2]["c3"].Id(), `"code":""`},
-			}),
-			ExpectedStatus: http.StatusTemporaryRedirect,
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				app.Store().Get("cancelFunc").(context.CancelFunc)()
-
-				checkFailureRedirect(t, app, res)
-
-				if clientStubs[2]["c3"].HasSubscription("@oauth2") {
-					t.Fatalf("Expected oauth2 subscription to be removed")
-				}
-			},
-		},
-		{
-			Name:   "error query param",
-			Method: http.MethodGet,
-			Url:    "/api/oauth2-redirect?error=example&code=123&state=" + clientStubs[3]["c3"].Id(),
-			BeforeTestFunc: beforeTestFunc(clientStubs[3], map[string][]string{
-				"c3": {`"state":"` + clientStubs[3]["c3"].Id(), `"code":"123"`, `"error":"example"`},
-			}),
-			ExpectedStatus: http.StatusTemporaryRedirect,
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				app.Store().Get("cancelFunc").(context.CancelFunc)()
-
-				checkFailureRedirect(t, app, res)
-
-				if clientStubs[3]["c3"].HasSubscription("@oauth2") {
-					t.Fatalf("Expected oauth2 subscription to be removed")
-				}
-			},
-		},
-		{
-			Name:           "discarded client with @oauth2 subscription",
-			Method:         http.MethodGet,
-			Url:            "/api/oauth2-redirect?code=123&state=" + clientStubs[4]["c5"].Id(),
-			BeforeTestFunc: beforeTestFunc(clientStubs[4], nil),
-			ExpectedStatus: http.StatusTemporaryRedirect,
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				app.Store().Get("cancelFunc").(context.CancelFunc)()
-
-				checkFailureRedirect(t, app, res)
-			},
-		},
-		{
-			Name:           "client without @oauth2 subscription",
-			Method:         http.MethodGet,
-			Url:            "/api/oauth2-redirect?code=123&state=" + clientStubs[4]["c4"].Id(),
-			BeforeTestFunc: beforeTestFunc(clientStubs[5], nil),
-			ExpectedStatus: http.StatusTemporaryRedirect,
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				app.Store().Get("cancelFunc").(context.CancelFunc)()
-
-				checkFailureRedirect(t, app, res)
-			},
-		},
-		{
-			Name:   "client with @oauth2 subscription",
-			Method: http.MethodGet,
-			Url:    "/api/oauth2-redirect?code=123&state=" + clientStubs[6]["c3"].Id(),
-			BeforeTestFunc: beforeTestFunc(clientStubs[6], map[string][]string{
-				"c3": {`"state":"` + clientStubs[6]["c3"].Id(), `"code":"123"`},
-			}),
-			ExpectedStatus: http.StatusTemporaryRedirect,
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				app.Store().Get("cancelFunc").(context.CancelFunc)()
-
-				checkSuccessRedirect(t, app, res)
-
-				if clientStubs[6]["c3"].HasSubscription("@oauth2") {
-					t.Fatalf("Expected oauth2 subscription to be removed")
-				}
-			},
-		},
-		{
-			Name:   "(POST) client with @oauth2 subscription",
-			Method: http.MethodPost,
-			Url:    "/api/oauth2-redirect",
-			Body:   strings.NewReader("code=123&state=" + clientStubs[7]["c3"].Id()),
-			RequestHeaders: map[string]string{
-				"content-type": "application/x-www-form-urlencoded",
-			},
-			BeforeTestFunc: beforeTestFunc(clientStubs[7], map[string][]string{
-				"c3": {`"state":"` + clientStubs[7]["c3"].Id(), `"code":"123"`},
-			}),
-			ExpectedStatus: http.StatusSeeOther,
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
-				app.Store().Get("cancelFunc").(context.CancelFunc)()
-
-				checkSuccessRedirect(t, app, res)
-
-				if clientStubs[7]["c3"].HasSubscription("@oauth2") {
-					t.Fatalf("Expected oauth2 subscription to be removed")
-				}
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {

apis/record_crud.go

@@ -1,12 +1,10 @@
 package apis
 
 import (
-	cryptoRand "crypto/rand"
 	"fmt"
-	"log/slog"
-	"math/big"
+	"log"
 	"net/http"
-	"time"
+	"strings"
 
 	"github.com/labstack/echo/v5"
 	"github.com/pocketbase/dbx"
@@ -18,6 +16,8 @@ import (
 	"github.com/pocketbase/pocketbase/tools/search"
 )
 
+const expandQueryParam = "expand"
+
 // bindRecordCrudApi registers the record crud api endpoints and
 // the corresponding handlers.
 func bindRecordCrudApi(app core.App, rg *echo.Group) {
@@ -26,13 +26,14 @@ func bindRecordCrudApi(app core.App, rg *echo.Group) {
 	subGroup := rg.Group(
 		"/collections/:collection",
 		ActivityLogger(app),
+		LoadCollectionContext(app),
 	)
 
-	subGroup.GET("/records", api.list, LoadCollectionContext(app))
-	subGroup.GET("/records/:id", api.view, LoadCollectionContext(app))
-	subGroup.POST("/records", api.create, LoadCollectionContext(app, models.CollectionTypeBase, models.CollectionTypeAuth))
-	subGroup.PATCH("/records/:id", api.update, LoadCollectionContext(app, models.CollectionTypeBase, models.CollectionTypeAuth))
-	subGroup.DELETE("/records/:id", api.delete, LoadCollectionContext(app, models.CollectionTypeBase, models.CollectionTypeAuth))
+	subGroup.GET("/records", api.list)
+	subGroup.POST("/records", api.create)
+	subGroup.GET("/records/:id", api.view)
+	subGroup.PATCH("/records/:id", api.update)
+	subGroup.DELETE("/records/:id", api.delete)
 }
 
 type recordApi struct {
@@ -45,14 +46,14 @@ func (api *recordApi) list(c echo.Context) error {
 		return NewNotFoundError("", "Missing collection context.")
 	}
 
-	requestInfo := RequestInfo(c)
-
 	// forbid users and guests to query special filter/sort fields
-	if err := checkForAdminOnlyRuleFields(requestInfo); err != nil {
+	if err := api.checkForForbiddenQueryFields(c); err != nil {
 		return err
 	}
 
-	if requestInfo.Admin == nil && collection.ListRule == nil {
+	requestData := RequestData(c)
+
+	if requestData.Admin == nil && collection.ListRule == nil {
 		// only admins can access if the rule is nil
 		return NewForbiddenError("Only admins can perform this action.", nil)
 	}
@@ -60,31 +61,28 @@ func (api *recordApi) list(c echo.Context) error {
 	fieldsResolver := resolvers.NewRecordFieldResolver(
 		api.app.Dao(),
 		collection,
-		requestInfo,
+		requestData,
 		// hidden fields are searchable only by admins
-		requestInfo.Admin != nil,
+		requestData.Admin != nil,
 	)
 
 	searchProvider := search.NewProvider(fieldsResolver).
 		Query(api.app.Dao().RecordQuery(collection))
 
-	if requestInfo.Admin == nil && collection.ListRule != nil {
+	if requestData.Admin == nil && collection.ListRule != nil {
 		searchProvider.AddFilter(search.FilterData(*collection.ListRule))
 	}
 
-	records := []*models.Record{}
-
-	// note: in v0.23.0 this has been migrated as option check in the search.Provider
-	queryStr := c.QueryParams().Encode()
-	if len(queryStr) > 2048 {
-		return NewBadRequestError("query string is too large", nil)
-	}
-
-	result, err := searchProvider.ParseAndExec(queryStr, &records)
+	var rawRecords = []dbx.NullStringMap{}
+	result, err := searchProvider.ParseAndExec(c.QueryParams().Encode(), &rawRecords)
 	if err != nil {
-		return NewBadRequestError("", err)
+		return NewBadRequestError("Invalid filter parameters.", err)
 	}
 
+	records := models.NewRecordsFromNullStringMaps(collection, rawRecords)
+
+	result.Items = records
+
 	event := new(core.RecordsListEvent)
 	event.HttpContext = c
 	event.Collection = collection
@@ -92,51 +90,14 @@ func (api *recordApi) list(c echo.Context) error {
 	event.Result = result
 
 	return api.app.OnRecordsListRequest().Trigger(event, func(e *core.RecordsListEvent) error {
-		if e.HttpContext.Response().Committed {
-			return nil
-		}
-
-		if err := EnrichRecords(e.HttpContext, api.app.Dao(), e.Records); err != nil {
-			api.app.Logger().Debug("Failed to enrich list records", slog.String("error", err.Error()))
-		}
-
-		// note: in v0.23.0 this is combined with extra check for repeated attempts
-		//
-		// Add a randomized throttle in case of empty search filter attempts.
-		//
-		// This is just for extra precaution since security researches raised concern regarding the possibity of eventual
-		// timing attacks because the List API rule acts also as filter and executes in a single run with the client-side filters.
-		// This is by design and it is an accepted tradeoff between performance, usability and correctness.
-		//
-		// While technically the below doesn't fully guarantee protection against filter timing attacks, in practice combined with the network latency it makes them even less feasible.
-		// A properly configured rate limiter or individual fields Hidden checks are better suited if you are really concerned about eventual information disclosure by side-channel attacks.
-		//
-		// In all cases it doesn't really matter that much because it doesn't affect the builtin PocketBase security sensitive fields (e.g. password and tokenKey) since they
-		// are not client-side filterable and in the few places where they need to be compared against an external value, a constant time check is used.
-		if requestInfo.Admin == nil &&
-			(collection.ListRule != nil && *collection.ListRule != "") &&
-			(requestInfo.Query["filter"] != "") &&
-			len(e.Records) == 0 {
-			api.app.Logger().Debug("Randomized throttle because of failed filter search", "collectionId", collection.Id)
-			randomizedThrottle(100)
+		if err := EnrichRecords(e.HttpContext, api.app.Dao(), e.Records); err != nil && api.app.IsDebug() {
+			log.Println(err)
 		}
 
 		return e.HttpContext.JSON(http.StatusOK, e.Result)
 	})
 }
 
-func randomizedThrottle(softMax int64) {
-	var timeout int64
-	randRange, err := cryptoRand.Int(cryptoRand.Reader, big.NewInt(softMax))
-	if err == nil {
-		timeout = randRange.Int64()
-	} else {
-		timeout = softMax
-	}
-
-	time.Sleep(time.Duration(timeout) * time.Millisecond)
-}
-
 func (api *recordApi) view(c echo.Context) error {
 	collection, _ := c.Get(ContextCollectionKey).(*models.Collection)
 	if collection == nil {
@@ -148,16 +109,16 @@ func (api *recordApi) view(c echo.Context) error {
 		return NewNotFoundError("", nil)
 	}
 
-	requestInfo := RequestInfo(c)
+	requestData := RequestData(c)
 
-	if requestInfo.Admin == nil && collection.ViewRule == nil {
+	if requestData.Admin == nil && collection.ViewRule == nil {
 		// only admins can access if the rule is nil
 		return NewForbiddenError("Only admins can perform this action.", nil)
 	}
 
 	ruleFunc := func(q *dbx.SelectQuery) error {
-		if requestInfo.Admin == nil && collection.ViewRule != nil && *collection.ViewRule != "" {
-			resolver := resolvers.NewRecordFieldResolver(api.app.Dao(), collection, requestInfo, true)
+		if requestData.Admin == nil && collection.ViewRule != nil && *collection.ViewRule != "" {
+			resolver := resolvers.NewRecordFieldResolver(api.app.Dao(), collection, requestData, true)
 			expr, err := search.FilterData(*collection.ViewRule).BuildExpr(resolver)
 			if err != nil {
 				return err
@@ -179,17 +140,8 @@ func (api *recordApi) view(c echo.Context) error {
 	event.Record = record
 
 	return api.app.OnRecordViewRequest().Trigger(event, func(e *core.RecordViewEvent) error {
-		if e.HttpContext.Response().Committed {
-			return nil
-		}
-
-		if err := EnrichRecord(e.HttpContext, api.app.Dao(), e.Record); err != nil {
-			api.app.Logger().Debug(
-				"Failed to enrich view record",
-				slog.String("id", e.Record.Id),
-				slog.String("collectionName", e.Record.Collection().Name),
-				slog.String("error", err.Error()),
-			)
+		if err := EnrichRecord(e.HttpContext, api.app.Dao(), e.Record); err != nil && api.app.IsDebug() {
+			log.Println(err)
 		}
 
 		return e.HttpContext.JSON(http.StatusOK, e.Record)
@@ -202,23 +154,23 @@ func (api *recordApi) create(c echo.Context) error {
 		return NewNotFoundError("", "Missing collection context.")
 	}
 
-	requestInfo := RequestInfo(c)
+	requestData := RequestData(c)
 
-	if requestInfo.Admin == nil && collection.CreateRule == nil {
+	if requestData.Admin == nil && collection.CreateRule == nil {
 		// only admins can access if the rule is nil
 		return NewForbiddenError("Only admins can perform this action.", nil)
 	}
 
-	hasFullManageAccess := requestInfo.Admin != nil
+	hasFullManageAccess := requestData.Admin != nil
 
 	// temporary save the record and check it against the create rule
-	if requestInfo.Admin == nil && collection.CreateRule != nil {
+	if requestData.Admin == nil && collection.CreateRule != nil {
 		testRecord := models.NewRecord(collection)
 
 		// replace modifiers fields so that the resolved value is always
-		// available when accessing requestInfo.Data using just the field name
-		if requestInfo.HasModifierDataKeys() {
-			requestInfo.Data = testRecord.ReplaceModifers(requestInfo.Data)
+		// available when accessing requestData.Data using just the field name
+		if requestData.HasModifierDataKeys() {
+			requestData.Data = testRecord.ReplaceModifers(requestData.Data)
 		}
 
 		testForm := forms.NewRecordUpsert(api.app, testRecord)
@@ -227,17 +179,12 @@ func (api *recordApi) create(c echo.Context) error {
 			return NewBadRequestError("Failed to load the submitted data due to invalid formatting.", err)
 		}
 
-		// force unset the verified state to prevent ManageRule misuse
-		if !hasFullManageAccess {
-			testForm.Verified = false
-		}
-
 		createRuleFunc := func(q *dbx.SelectQuery) error {
 			if *collection.CreateRule == "" {
 				return nil // no create rule to resolve
 			}
 
-			resolver := resolvers.NewRecordFieldResolver(api.app.Dao(), collection, requestInfo, true)
+			resolver := resolvers.NewRecordFieldResolver(api.app.Dao(), collection, requestData, true)
 			expr, err := search.FilterData(*collection.CreateRule).BuildExpr(resolver)
 			if err != nil {
 				return err
@@ -252,7 +199,7 @@ func (api *recordApi) create(c echo.Context) error {
 			if err != nil {
 				return fmt.Errorf("DrySubmit create rule failure: %w", err)
 			}
-			hasFullManageAccess = hasAuthManageAccess(txDao, foundRecord, requestInfo)
+			hasFullManageAccess = hasAuthManageAccess(txDao, foundRecord, requestData)
 			return nil
 		})
 
@@ -274,10 +221,9 @@ func (api *recordApi) create(c echo.Context) error {
 	event.HttpContext = c
 	event.Collection = collection
 	event.Record = record
-	event.UploadedFiles = form.FilesToUpload()
 
 	// create the record
-	return form.Submit(func(next forms.InterceptorNextFunc[*models.Record]) forms.InterceptorNextFunc[*models.Record] {
+	submitErr := form.Submit(func(next forms.InterceptorNextFunc[*models.Record]) forms.InterceptorNextFunc[*models.Record] {
 		return func(m *models.Record) error {
 			event.Record = m
 
@@ -286,25 +232,22 @@ func (api *recordApi) create(c echo.Context) error {
 					return NewBadRequestError("Failed to create record.", err)
 				}
 
-				if err := EnrichRecord(e.HttpContext, api.app.Dao(), e.Record); err != nil {
-					api.app.Logger().Debug(
-						"Failed to enrich create record",
-						slog.String("id", e.Record.Id),
-						slog.String("collectionName", e.Record.Collection().Name),
-						slog.String("error", err.Error()),
-					)
+				if err := EnrichRecord(e.HttpContext, api.app.Dao(), e.Record); err != nil && api.app.IsDebug() {
+					log.Println(err)
 				}
 
-				return api.app.OnRecordAfterCreateRequest().Trigger(event, func(e *core.RecordCreateEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.JSON(http.StatusOK, e.Record)
-				})
+				return e.HttpContext.JSON(http.StatusOK, e.Record)
 			})
 		}
 	})
+
+	if submitErr == nil {
+		if err := api.app.OnRecordAfterCreateRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
+	return submitErr
 }
 
 func (api *recordApi) update(c echo.Context) error {
@@ -318,26 +261,26 @@ func (api *recordApi) update(c echo.Context) error {
 		return NewNotFoundError("", nil)
 	}
 
-	requestInfo := RequestInfo(c)
+	requestData := RequestData(c)
 
-	if requestInfo.Admin == nil && collection.UpdateRule == nil {
+	if requestData.Admin == nil && collection.UpdateRule == nil {
 		// only admins can access if the rule is nil
 		return NewForbiddenError("Only admins can perform this action.", nil)
 	}
 
 	// eager fetch the record so that the modifier field values are replaced
-	// and available when accessing requestInfo.Data using just the field name
-	if requestInfo.HasModifierDataKeys() {
+	// and available when accessing requestData.Data using just the field name
+	if requestData.HasModifierDataKeys() {
 		record, err := api.app.Dao().FindRecordById(collection.Id, recordId)
 		if err != nil || record == nil {
 			return NewNotFoundError("", err)
 		}
-		requestInfo.Data = record.ReplaceModifers(requestInfo.Data)
+		requestData.Data = record.ReplaceModifers(requestData.Data)
 	}
 
 	ruleFunc := func(q *dbx.SelectQuery) error {
-		if requestInfo.Admin == nil && collection.UpdateRule != nil && *collection.UpdateRule != "" {
-			resolver := resolvers.NewRecordFieldResolver(api.app.Dao(), collection, requestInfo, true)
+		if requestData.Admin == nil && collection.UpdateRule != nil && *collection.UpdateRule != "" {
+			resolver := resolvers.NewRecordFieldResolver(api.app.Dao(), collection, requestData, true)
 			expr, err := search.FilterData(*collection.UpdateRule).BuildExpr(resolver)
 			if err != nil {
 				return err
@@ -355,7 +298,7 @@ func (api *recordApi) update(c echo.Context) error {
 	}
 
 	form := forms.NewRecordUpsert(api.app, record)
-	form.SetFullManageAccess(requestInfo.Admin != nil || hasAuthManageAccess(api.app.Dao(), record, requestInfo))
+	form.SetFullManageAccess(requestData.Admin != nil || hasAuthManageAccess(api.app.Dao(), record, requestData))
 
 	// load request
 	if err := form.LoadRequest(c.Request(), ""); err != nil {
@@ -366,10 +309,9 @@ func (api *recordApi) update(c echo.Context) error {
 	event.HttpContext = c
 	event.Collection = collection
 	event.Record = record
-	event.UploadedFiles = form.FilesToUpload()
 
 	// update the record
-	return form.Submit(func(next forms.InterceptorNextFunc[*models.Record]) forms.InterceptorNextFunc[*models.Record] {
+	submitErr := form.Submit(func(next forms.InterceptorNextFunc[*models.Record]) forms.InterceptorNextFunc[*models.Record] {
 		return func(m *models.Record) error {
 			event.Record = m
 
@@ -378,25 +320,22 @@ func (api *recordApi) update(c echo.Context) error {
 					return NewBadRequestError("Failed to update record.", err)
 				}
 
-				if err := EnrichRecord(e.HttpContext, api.app.Dao(), e.Record); err != nil {
-					api.app.Logger().Debug(
-						"Failed to enrich update record",
-						slog.String("id", e.Record.Id),
-						slog.String("collectionName", e.Record.Collection().Name),
-						slog.String("error", err.Error()),
-					)
+				if err := EnrichRecord(e.HttpContext, api.app.Dao(), e.Record); err != nil && api.app.IsDebug() {
+					log.Println(err)
 				}
 
-				return api.app.OnRecordAfterUpdateRequest().Trigger(event, func(e *core.RecordUpdateEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
-
-					return e.HttpContext.JSON(http.StatusOK, e.Record)
-				})
+				return e.HttpContext.JSON(http.StatusOK, e.Record)
 			})
 		}
 	})
+
+	if submitErr == nil {
+		if err := api.app.OnRecordAfterUpdateRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
+	return submitErr
 }
 
 func (api *recordApi) delete(c echo.Context) error {
@@ -410,16 +349,16 @@ func (api *recordApi) delete(c echo.Context) error {
 		return NewNotFoundError("", nil)
 	}
 
-	requestInfo := RequestInfo(c)
+	requestData := RequestData(c)
 
-	if requestInfo.Admin == nil && collection.DeleteRule == nil {
+	if requestData.Admin == nil && collection.DeleteRule == nil {
 		// only admins can access if the rule is nil
 		return NewForbiddenError("Only admins can perform this action.", nil)
 	}
 
 	ruleFunc := func(q *dbx.SelectQuery) error {
-		if requestInfo.Admin == nil && collection.DeleteRule != nil && *collection.DeleteRule != "" {
-			resolver := resolvers.NewRecordFieldResolver(api.app.Dao(), collection, requestInfo, true)
+		if requestData.Admin == nil && collection.DeleteRule != nil && *collection.DeleteRule != "" {
+			resolver := resolvers.NewRecordFieldResolver(api.app.Dao(), collection, requestData, true)
 			expr, err := search.FilterData(*collection.DeleteRule).BuildExpr(resolver)
 			if err != nil {
 				return err
@@ -440,18 +379,38 @@ func (api *recordApi) delete(c echo.Context) error {
 	event.Collection = collection
 	event.Record = record
 
-	return api.app.OnRecordBeforeDeleteRequest().Trigger(event, func(e *core.RecordDeleteEvent) error {
+	handlerErr := api.app.OnRecordBeforeDeleteRequest().Trigger(event, func(e *core.RecordDeleteEvent) error {
 		// delete the record
 		if err := api.app.Dao().DeleteRecord(e.Record); err != nil {
 			return NewBadRequestError("Failed to delete record. Make sure that the record is not part of a required relation reference.", err)
 		}
 
-		return api.app.OnRecordAfterDeleteRequest().Trigger(event, func(e *core.RecordDeleteEvent) error {
-			if e.HttpContext.Response().Committed {
-				return nil
-			}
-
-			return e.HttpContext.NoContent(http.StatusNoContent)
-		})
+		return e.HttpContext.NoContent(http.StatusNoContent)
 	})
+
+	if handlerErr == nil {
+		if err := api.app.OnRecordAfterDeleteRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
+	return handlerErr
+}
+
+func (api *recordApi) checkForForbiddenQueryFields(c echo.Context) error {
+	admin, _ := c.Get(ContextAdminKey).(*models.Admin)
+	if admin != nil {
+		return nil // admins are allowed to query everything
+	}
+
+	decodedQuery := c.QueryParam(search.FilterQueryParam) + c.QueryParam(search.SortQueryParam)
+	forbiddenFields := []string{"@collection.", "@request."}
+
+	for _, field := range forbiddenFields {
+		if strings.Contains(decodedQuery, field) {
+			return NewForbiddenError("Only admins can filter by @collection and @request query params", nil)
+		}
+	}
+
+	return nil
 }

apis/record_crud_test.go

@@ -1,7 +1,6 @@
 package apis_test
 
 import (
-	"errors"
 	"net/http"
 	"net/url"
 	"os"
@@ -11,16 +10,11 @@ import (
 	"time"
 
 	"github.com/labstack/echo/v5"
-	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/tests"
-	"github.com/pocketbase/pocketbase/tools/rest"
-	"github.com/pocketbase/pocketbase/tools/types"
 )
 
 func TestRecordCrudList(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "missing collection",
@@ -47,16 +41,9 @@ func TestRecordCrudList(t *testing.T) {
 			ExpectedContent: []string{`"data":{}`},
 		},
 		{
-			Name:            "public collection but with admin only filter param (aka. @collection, @request, etc.)",
+			Name:            "public collection but with admin only filter/sort (aka. @collection)",
 			Method:          http.MethodGet,
-			Url:             "/api/collections/demo2/records?filter=%40collection.demo2.title='test1'",
-			ExpectedStatus:  403,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:            "public collection but with admin only sort param (aka. @collection, @request, etc.)",
-			Method:          http.MethodGet,
-			Url:             "/api/collections/demo2/records?sort=@request.auth.title",
+			Url:             "/api/collections/demo2/records?filter=@collection.demo2.title='test1'",
 			ExpectedStatus:  403,
 			ExpectedContent: []string{`"data":{}`},
 		},
@@ -269,7 +256,7 @@ func TestRecordCrudList(t *testing.T) {
 			ExpectedEvents: map[string]int{"OnRecordsListRequest": 1},
 		},
 
-		// auth collection
+		// auth collection checks
 		// -----------------------------------------------------------
 		{
 			Name:           "check email visibility as guest",
@@ -416,79 +403,6 @@ func TestRecordCrudList(t *testing.T) {
 			},
 			ExpectedEvents: map[string]int{"OnRecordsListRequest": 1},
 		},
-
-		// view collection
-		// -----------------------------------------------------------
-		{
-			Name:           "public view records",
-			Method:         http.MethodGet,
-			Url:            "/api/collections/view2/records?filter=state=false",
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"page":1`,
-				`"perPage":30`,
-				`"totalPages":1`,
-				`"totalItems":2`,
-				`"items":[{`,
-				`"id":"al1h9ijdeojtsjy"`,
-				`"id":"imy661ixudk5izi"`,
-			},
-			NotExpectedContent: []string{
-				`"created"`,
-				`"updated"`,
-			},
-			ExpectedEvents: map[string]int{"OnRecordsListRequest": 1},
-		},
-		{
-			Name:           "guest that doesn't match the view collection list rule",
-			Method:         http.MethodGet,
-			Url:            "/api/collections/view1/records",
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"page":1`,
-				`"perPage":30`,
-				`"totalPages":0`,
-				`"totalItems":0`,
-				`"items":[]`,
-			},
-			ExpectedEvents: map[string]int{"OnRecordsListRequest": 1},
-		},
-		{
-			Name:   "authenticated record that matches the view collection list rule",
-			Method: http.MethodGet,
-			Url:    "/api/collections/view1/records",
-			RequestHeaders: map[string]string{
-				// users, test@example.com
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"page":1`,
-				`"perPage":30`,
-				`"totalPages":1`,
-				`"totalItems":1`,
-				`"items":[{`,
-				`"id":"84nmscqy84lsi1t"`,
-				`"bool":true`,
-			},
-			ExpectedEvents: map[string]int{"OnRecordsListRequest": 1},
-		},
-		{
-			Name:           "view collection with numeric ids",
-			Method:         http.MethodGet,
-			Url:            "/api/collections/numeric_id_view/records",
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"page":1`,
-				`"perPage":30`,
-				`"totalPages":1`,
-				`"totalItems":2`,
-				`"items":[{`,
-				`"id":"1"`,
-				`"id":"2"`,
-			},
-			ExpectedEvents: map[string]int{"OnRecordsListRequest": 1},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -497,8 +411,6 @@ func TestRecordCrudList(t *testing.T) {
 }
 
 func TestRecordCrudView(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "missing collection",
@@ -619,7 +531,7 @@ func TestRecordCrudView(t *testing.T) {
 			ExpectedEvents: map[string]int{"OnRecordViewRequest": 1},
 		},
 
-		// auth collection
+		// auth collection checks
 		// -----------------------------------------------------------
 		{
 			Name:           "check email visibility as guest",
@@ -717,59 +629,6 @@ func TestRecordCrudView(t *testing.T) {
 			},
 			ExpectedEvents: map[string]int{"OnRecordViewRequest": 1},
 		},
-
-		// view collection
-		// -----------------------------------------------------------
-		{
-			Name:           "public view record",
-			Method:         http.MethodGet,
-			Url:            "/api/collections/view2/records/84nmscqy84lsi1t",
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"id":"84nmscqy84lsi1t"`,
-				`"state":true`,
-				`"file_many":["`,
-				`"rel_many":["`,
-			},
-			NotExpectedContent: []string{
-				`"created"`,
-				`"updated"`,
-			},
-			ExpectedEvents: map[string]int{"OnRecordViewRequest": 1},
-		},
-		{
-			Name:            "guest that doesn't match the view collection view rule",
-			Method:          http.MethodGet,
-			Url:             "/api/collections/view1/records/84nmscqy84lsi1t",
-			ExpectedStatus:  404,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authenticated record that matches the view collection view rule",
-			Method: http.MethodGet,
-			Url:    "/api/collections/view1/records/84nmscqy84lsi1t",
-			RequestHeaders: map[string]string{
-				// users, test@example.com
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"id":"84nmscqy84lsi1t"`,
-				`"bool":true`,
-				`"text":"`,
-			},
-			ExpectedEvents: map[string]int{"OnRecordViewRequest": 1},
-		},
-		{
-			Name:           "view record with numeric id",
-			Method:         http.MethodGet,
-			Url:            "/api/collections/numeric_id_view/records/1",
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"id":"1"`,
-			},
-			ExpectedEvents: map[string]int{"OnRecordViewRequest": 1},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -778,8 +637,6 @@ func TestRecordCrudView(t *testing.T) {
 }
 
 func TestRecordCrudDelete(t *testing.T) {
-	t.Parallel()
-
 	ensureDeletedFiles := func(app *tests.TestApp, collectionId string, recordId string) {
 		storageDir := filepath.Join(app.DataDir(), "storage", collectionId, recordId)
 
@@ -833,13 +690,6 @@ func TestRecordCrudDelete(t *testing.T) {
 			ExpectedStatus:  404,
 			ExpectedContent: []string{`"data":{}`},
 		},
-		{
-			Name:            "trying to delete a view collection record",
-			Method:          http.MethodDelete,
-			Url:             "/api/collections/view1/records/imy661ixudk5izi",
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-		},
 		{
 			Name:           "public collection record delete",
 			Method:         http.MethodDelete,
@@ -879,27 +729,6 @@ func TestRecordCrudDelete(t *testing.T) {
 				"OnRecordBeforeDeleteRequest": 1,
 			},
 		},
-		{
-			Name:   "OnRecordAfterDeleteRequest error response",
-			Method: http.MethodDelete,
-			Url:    "/api/collections/clients/records/o1y0dd0spd786md",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnRecordAfterDeleteRequest().Add(func(e *core.RecordDeleteEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelAfterDelete":          1,
-				"OnModelBeforeDelete":         1,
-				"OnRecordAfterDeleteRequest":  1,
-				"OnRecordBeforeDeleteRequest": 1,
-			},
-		},
 		{
 			Name:   "authenticated record that match the collection delete rule",
 			Method: http.MethodDelete,
@@ -918,7 +747,7 @@ func TestRecordCrudDelete(t *testing.T) {
 				"OnRecordAfterDeleteRequest":  1,
 				"OnRecordBeforeDeleteRequest": 1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				ensureDeletedFiles(app, "_pb_users_auth_", "4q1xlclmfloku33")
 
 				// check if all the external auths records were deleted
@@ -1005,7 +834,7 @@ func TestRecordCrudDelete(t *testing.T) {
 				"OnRecordBeforeDeleteRequest": 1,
 				"OnRecordAfterDeleteRequest":  1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				recId := "84nmscqy84lsi1t"
 				rec, _ := app.Dao().FindRecordById("demo1", recId, nil)
 				if rec != nil {
@@ -1023,8 +852,6 @@ func TestRecordCrudDelete(t *testing.T) {
 }
 
 func TestRecordCrudCreate(t *testing.T) {
-	t.Parallel()
-
 	formData, mp, err := tests.MockMultipartData(map[string]string{
 		"title": "title_test",
 	}, "files")
@@ -1032,20 +859,6 @@ func TestRecordCrudCreate(t *testing.T) {
 		t.Fatal(err)
 	}
 
-	formData2, mp2, err2 := tests.MockMultipartData(map[string]string{
-		rest.MultipartJsonKey: `{"title": "title_test2", "testPayload": 123}`,
-	}, "files")
-	if err2 != nil {
-		t.Fatal(err2)
-	}
-
-	formData3, mp3, err3 := tests.MockMultipartData(map[string]string{
-		rest.MultipartJsonKey: `{"title": "title_test3", "testPayload": 123}`,
-	}, "files")
-	if err3 != nil {
-		t.Fatal(err3)
-	}
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "missing collection",
@@ -1072,14 +885,6 @@ func TestRecordCrudCreate(t *testing.T) {
 			ExpectedStatus:  403,
 			ExpectedContent: []string{`"data":{}`},
 		},
-		{
-			Name:            "trying to create a new view collection record",
-			Method:          http.MethodPost,
-			Url:             "/api/collections/view1/records",
-			Body:            strings.NewReader(`{"text":"new"}`),
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-		},
 		{
 			Name:            "submit nil body",
 			Method:          http.MethodPost,
@@ -1253,93 +1058,6 @@ func TestRecordCrudCreate(t *testing.T) {
 				"OnModelAfterCreate":          1,
 			},
 		},
-		{
-			Name:   "submit via multipart form data with @jsonPayload key and unsatisfied @request.data rule",
-			Method: http.MethodPost,
-			Url:    "/api/collections/demo3/records",
-			Body:   formData2,
-			RequestHeaders: map[string]string{
-				"Content-Type": mp2.FormDataContentType(),
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				collection, err := app.Dao().FindCollectionByNameOrId("demo3")
-				if err != nil {
-					t.Fatalf("failed to find demo3 collection: %v", err)
-				}
-				collection.CreateRule = types.Pointer("@request.data.testPayload != 123")
-				if err := app.Dao().WithoutHooks().SaveCollection(collection); err != nil {
-					t.Fatalf("failed to update demo3 collection create rule: %v", err)
-				}
-				core.ReloadCachedCollections(app)
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "submit via multipart form data with @jsonPayload key and satisfied @request.data rule",
-			Method: http.MethodPost,
-			Url:    "/api/collections/demo3/records",
-			Body:   formData3,
-			RequestHeaders: map[string]string{
-				"Content-Type": mp3.FormDataContentType(),
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				collection, err := app.Dao().FindCollectionByNameOrId("demo3")
-				if err != nil {
-					t.Fatalf("failed to find demo3 collection: %v", err)
-				}
-				collection.CreateRule = types.Pointer("@request.data.testPayload = 123")
-				if err := app.Dao().WithoutHooks().SaveCollection(collection); err != nil {
-					t.Fatalf("failed to update demo3 collection create rule: %v", err)
-				}
-				core.ReloadCachedCollections(app)
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"id":"`,
-				`"title":"title_test3"`,
-				`"files":["`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnRecordBeforeCreateRequest": 1,
-				"OnRecordAfterCreateRequest":  1,
-				"OnModelBeforeCreate":         1,
-				"OnModelAfterCreate":          1,
-			},
-		},
-		{
-			Name:   "unique field error check",
-			Method: http.MethodPost,
-			Url:    "/api/collections/demo2/records",
-			Body: strings.NewReader(`{
-				"title":"test2"
-			}`),
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"data":{`,
-				`"title":{`,
-				`"code":"validation_not_unique"`,
-			},
-		},
-		{
-			Name:   "OnRecordAfterCreateRequest error response",
-			Method: http.MethodPost,
-			Url:    "/api/collections/demo2/records",
-			Body:   strings.NewReader(`{"title":"new"}`),
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnRecordAfterCreateRequest().Add(func(e *core.RecordCreateEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnRecordBeforeCreateRequest": 1,
-				"OnRecordAfterCreateRequest":  1,
-				"OnModelBeforeCreate":         1,
-				"OnModelAfterCreate":          1,
-			},
-		},
 
 		// ID checks
 		// -----------------------------------------------------------
@@ -1669,8 +1387,6 @@ func TestRecordCrudCreate(t *testing.T) {
 }
 
 func TestRecordCrudUpdate(t *testing.T) {
-	t.Parallel()
-
 	formData, mp, err := tests.MockMultipartData(map[string]string{
 		"title": "title_test",
 	}, "files")
@@ -1678,20 +1394,6 @@ func TestRecordCrudUpdate(t *testing.T) {
 		t.Fatal(err)
 	}
 
-	formData2, mp2, err2 := tests.MockMultipartData(map[string]string{
-		rest.MultipartJsonKey: `{"title": "title_test2", "testPayload": 123}`,
-	}, "files")
-	if err2 != nil {
-		t.Fatal(err2)
-	}
-
-	formData3, mp3, err3 := tests.MockMultipartData(map[string]string{
-		rest.MultipartJsonKey: `{"title": "title_test3", "testPayload": 123}`,
-	}, "files")
-	if err3 != nil {
-		t.Fatal(err3)
-	}
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "missing collection",
@@ -1726,14 +1428,6 @@ func TestRecordCrudUpdate(t *testing.T) {
 			ExpectedStatus:  400,
 			ExpectedContent: []string{`"data":{}`},
 		},
-		{
-			Name:            "trying to update a view collection record",
-			Method:          http.MethodPatch,
-			Url:             "/api/collections/view1/records/imy661ixudk5izi",
-			Body:            strings.NewReader(`{"text":"new"}`),
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-		},
 		{
 			Name:            "submit nil body",
 			Method:          http.MethodPatch,
@@ -1914,79 +1608,6 @@ func TestRecordCrudUpdate(t *testing.T) {
 				"OnModelAfterUpdate":          1,
 			},
 		},
-		{
-			Name:   "submit via multipart form data with @jsonPayload key and unsatisfied @request.data rule",
-			Method: http.MethodPatch,
-			Url:    "/api/collections/demo3/records/mk5fmymtx4wsprk",
-			Body:   formData2,
-			RequestHeaders: map[string]string{
-				"Content-Type": mp2.FormDataContentType(),
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				collection, err := app.Dao().FindCollectionByNameOrId("demo3")
-				if err != nil {
-					t.Fatalf("failed to find demo3 collection: %v", err)
-				}
-				collection.UpdateRule = types.Pointer("@request.data.testPayload != 123")
-				if err := app.Dao().WithoutHooks().SaveCollection(collection); err != nil {
-					t.Fatalf("failed to update demo3 collection update rule: %v", err)
-				}
-				core.ReloadCachedCollections(app)
-			},
-			ExpectedStatus:  404,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "submit via multipart form data with @jsonPayload key and satisfied @request.data rule",
-			Method: http.MethodPatch,
-			Url:    "/api/collections/demo3/records/mk5fmymtx4wsprk",
-			Body:   formData3,
-			RequestHeaders: map[string]string{
-				"Content-Type": mp3.FormDataContentType(),
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				collection, err := app.Dao().FindCollectionByNameOrId("demo3")
-				if err != nil {
-					t.Fatalf("failed to find demo3 collection: %v", err)
-				}
-				collection.UpdateRule = types.Pointer("@request.data.testPayload = 123")
-				if err := app.Dao().WithoutHooks().SaveCollection(collection); err != nil {
-					t.Fatalf("failed to update demo3 collection update rule: %v", err)
-				}
-				core.ReloadCachedCollections(app)
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"id":"mk5fmymtx4wsprk"`,
-				`"title":"title_test3"`,
-				`"files":["`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnRecordBeforeUpdateRequest": 1,
-				"OnRecordAfterUpdateRequest":  1,
-				"OnModelBeforeUpdate":         1,
-				"OnModelAfterUpdate":          1,
-			},
-		},
-		{
-			Name:   "OnRecordAfterUpdateRequest error response",
-			Method: http.MethodPatch,
-			Url:    "/api/collections/demo2/records/0yxhwia2amd8gec",
-			Body:   strings.NewReader(`{"title":"new"}`),
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnRecordAfterUpdateRequest().Add(func(e *core.RecordUpdateEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnRecordBeforeUpdateRequest": 1,
-				"OnRecordAfterUpdateRequest":  1,
-				"OnModelBeforeUpdate":         1,
-				"OnModelAfterUpdate":          1,
-			},
-		},
 		{
 			Name:   "try to change the id of an existing record",
 			Method: http.MethodPatch,
@@ -2003,24 +1624,6 @@ func TestRecordCrudUpdate(t *testing.T) {
 				`"id":{"code":"validation_in_invalid"`,
 			},
 		},
-		{
-			Name:   "unique field error check",
-			Method: http.MethodPatch,
-			Url:    "/api/collections/demo2/records/llvuca81nly1qls",
-			Body: strings.NewReader(`{
-				"title":"test2"
-			}`),
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"data":{`,
-				`"title":{`,
-				`"code":"validation_not_unique"`,
-			},
-			ExpectedEvents: map[string]int{
-				"OnRecordBeforeUpdateRequest": 1,
-				"OnModelBeforeUpdate":         1,
-			},
-		},
 
 		// check whether if @request.data modifer fields are properly resolved
 		// -----------------------------------------------------------
@@ -2187,7 +1790,7 @@ func TestRecordCrudUpdate(t *testing.T) {
 				"OnRecordAfterUpdateRequest":  1,
 				"OnRecordBeforeUpdateRequest": 1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				record, _ := app.Dao().FindRecordById("nologin", "phhq3wr65cap535")
 				if !record.ValidatePassword("12345678") {
 					t.Fatal("Password update failed.")
@@ -2230,7 +1833,7 @@ func TestRecordCrudUpdate(t *testing.T) {
 				"OnRecordAfterUpdateRequest":  1,
 				"OnRecordBeforeUpdateRequest": 1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				record, _ := app.Dao().FindRecordById("users", "oap640cot4yru2s")
 				if !record.ValidatePassword("12345678") {
 					t.Fatal("Password update failed.")
@@ -2292,7 +1895,7 @@ func TestRecordCrudUpdate(t *testing.T) {
 				"OnRecordAfterUpdateRequest":  1,
 				"OnRecordBeforeUpdateRequest": 1,
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				record, _ := app.Dao().FindRecordById("nologin", "dc49k6jgejn40h3")
 				if !record.ValidatePassword("123456789") {
 					t.Fatal("Password update failed.")

apis/record_helpers.go

@@ -3,7 +3,6 @@ package apis
 import (
 	"fmt"
 	"log"
-	"log/slog"
 	"net/http"
 	"strings"
 
@@ -14,49 +13,26 @@ import (
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/resolvers"
 	"github.com/pocketbase/pocketbase/tokens"
-	"github.com/pocketbase/pocketbase/tools/inflector"
 	"github.com/pocketbase/pocketbase/tools/rest"
 	"github.com/pocketbase/pocketbase/tools/search"
 )
 
-const ContextRequestInfoKey = "requestInfo"
+const ContextRequestDataKey = "requestData"
 
-const expandQueryParam = "expand"
-const fieldsQueryParam = "fields"
-
-// Deprecated: Use RequestInfo instead.
-func RequestData(c echo.Context) *models.RequestInfo {
-	log.Println("RequestData(c) is deprecated and will be removed in the future! You can replace it with RequestInfo(c).")
-	return RequestInfo(c)
-}
-
-// RequestInfo exports cached common request data fields
+// RequestData exports cached common request data fields
 // (query, body, logged auth state, etc.) from the provided context.
-func RequestInfo(c echo.Context) *models.RequestInfo {
+func RequestData(c echo.Context) *models.RequestData {
 	// return cached to avoid copying the body multiple times
-	if v := c.Get(ContextRequestInfoKey); v != nil {
-		if data, ok := v.(*models.RequestInfo); ok {
-			// refresh auth state
-			data.AuthRecord, _ = c.Get(ContextAuthRecordKey).(*models.Record)
-			data.Admin, _ = c.Get(ContextAdminKey).(*models.Admin)
+	if v := c.Get(ContextRequestDataKey); v != nil {
+		if data, ok := v.(*models.RequestData); ok {
 			return data
 		}
 	}
 
-	result := &models.RequestInfo{
-		Context: models.RequestInfoContextDefault,
-		Method:  c.Request().Method,
-		Query:   map[string]any{},
-		Data:    map[string]any{},
-		Headers: map[string]any{},
-	}
-
-	// extract the first value of all headers and normalizes the keys
-	// ("X-Token" is converted to "x_token")
-	for k, v := range c.Request().Header {
-		if len(v) > 0 {
-			result.Headers[inflector.Snakecase(k)] = v[0]
-		}
+	result := &models.RequestData{
+		Method: c.Request().Method,
+		Query:  map[string]any{},
+		Data:   map[string]any{},
 	}
 
 	result.AuthRecord, _ = c.Get(ContextAuthRecordKey).(*models.Record)
@@ -64,24 +40,12 @@ func RequestInfo(c echo.Context) *models.RequestInfo {
 	echo.BindQueryParams(c, &result.Query)
 	rest.BindBody(c, &result.Data)
 
-	c.Set(ContextRequestInfoKey, result)
+	c.Set(ContextRequestDataKey, result)
 
 	return result
 }
 
-// RecordAuthResponse writes standardised json record auth response
-// into the specified request context.
-func RecordAuthResponse(
-	app core.App,
-	c echo.Context,
-	authRecord *models.Record,
-	meta any,
-	finalizers ...func(token string) error,
-) error {
-	if !authRecord.Verified() && authRecord.Collection().AuthOptions().OnlyVerified {
-		return NewForbiddenError("Please verify your account first.", nil)
-	}
-
+func RecordAuthResponse(app core.App, c echo.Context, authRecord *models.Record, meta any) error {
 	token, tokenErr := tokens.NewRecordAuthToken(app, authRecord)
 	if tokenErr != nil {
 		return NewBadRequestError("Failed to create auth token.", tokenErr)
@@ -95,10 +59,6 @@ func RecordAuthResponse(
 	event.Meta = meta
 
 	return app.OnRecordAuthRequest().Trigger(event, func(e *core.RecordAuthEvent) error {
-		if e.HttpContext.Response().Committed {
-			return nil
-		}
-
 		// allow always returning the email address of the authenticated account
 		e.Record.IgnoreEmailVisibility(true)
 
@@ -106,16 +66,16 @@ func RecordAuthResponse(
 		expands := strings.Split(c.QueryParam(expandQueryParam), ",")
 		if len(expands) > 0 {
 			// create a copy of the cached request data and adjust it to the current auth record
-			requestInfo := *RequestInfo(e.HttpContext)
-			requestInfo.Admin = nil
-			requestInfo.AuthRecord = e.Record
+			requestData := *RequestData(e.HttpContext)
+			requestData.Admin = nil
+			requestData.AuthRecord = e.Record
 			failed := app.Dao().ExpandRecord(
 				e.Record,
 				expands,
-				expandFetch(app.Dao(), &requestInfo),
+				expandFetch(app.Dao(), &requestData),
 			)
-			if len(failed) > 0 {
-				app.Logger().Debug("[RecordAuthResponse] Failed to expand relations", slog.Any("errors", failed))
+			if len(failed) > 0 && app.IsDebug() {
+				log.Println("Failed to expand relations: ", failed)
 			}
 		}
 
@@ -128,12 +88,6 @@ func RecordAuthResponse(
 			result["meta"] = e.Meta
 		}
 
-		for _, f := range finalizers {
-			if err := f(e.Token); err != nil {
-				return err
-			}
-		}
-
 		return e.HttpContext.JSON(http.StatusOK, result)
 	})
 }
@@ -141,7 +95,7 @@ func RecordAuthResponse(
 // EnrichRecord parses the request context and enrich the provided record:
 //   - expands relations (if defaultExpands and/or ?expand query param is set)
 //   - ensures that the emails of the auth record and its expanded auth relations
-//     are visible only for the current logged admin, record owner or record with manage access
+//     are visibe only for the current logged admin, record owner or record with manage access
 func EnrichRecord(c echo.Context, dao *daos.Dao, record *models.Record, defaultExpands ...string) error {
 	return EnrichRecords(c, dao, []*models.Record{record}, defaultExpands...)
 }
@@ -149,25 +103,23 @@ func EnrichRecord(c echo.Context, dao *daos.Dao, record *models.Record, defaultE
 // EnrichRecords parses the request context and enriches the provided records:
 //   - expands relations (if defaultExpands and/or ?expand query param is set)
 //   - ensures that the emails of the auth records and their expanded auth relations
-//     are visible only for the current logged admin, record owner or record with manage access
+//     are visibe only for the current logged admin, record owner or record with manage access
 func EnrichRecords(c echo.Context, dao *daos.Dao, records []*models.Record, defaultExpands ...string) error {
-	requestInfo := RequestInfo(c)
+	requestData := RequestData(c)
 
-	if err := autoIgnoreAuthRecordsEmailVisibility(dao, records, requestInfo); err != nil {
-		return fmt.Errorf("failed to resolve email visibility: %w", err)
+	if err := autoIgnoreAuthRecordsEmailVisibility(dao, records, requestData); err != nil {
+		return fmt.Errorf("Failed to resolve email visibility: %w", err)
 	}
 
 	expands := defaultExpands
-	if param := c.QueryParam(expandQueryParam); param != "" {
-		expands = append(expands, strings.Split(param, ",")...)
-	}
+	expands = append(expands, strings.Split(c.QueryParam(expandQueryParam), ",")...)
 	if len(expands) == 0 {
 		return nil // nothing to expand
 	}
 
-	errs := dao.ExpandRecords(records, expands, expandFetch(dao, requestInfo))
+	errs := dao.ExpandRecords(records, expands, expandFetch(dao, requestData))
 	if len(errs) > 0 {
-		return fmt.Errorf("failed to expand: %v", errs)
+		return fmt.Errorf("Failed to expand: %v", errs)
 	}
 
 	return nil
@@ -176,20 +128,20 @@ func EnrichRecords(c echo.Context, dao *daos.Dao, records []*models.Record, defa
 // expandFetch is the records fetch function that is used to expand related records.
 func expandFetch(
 	dao *daos.Dao,
-	requestInfo *models.RequestInfo,
+	requestData *models.RequestData,
 ) daos.ExpandFetchFunc {
 	return func(relCollection *models.Collection, relIds []string) ([]*models.Record, error) {
 		records, err := dao.FindRecordsByIds(relCollection.Id, relIds, func(q *dbx.SelectQuery) error {
-			if requestInfo.Admin != nil {
+			if requestData.Admin != nil {
 				return nil // admins can access everything
 			}
 
 			if relCollection.ViewRule == nil {
-				return fmt.Errorf("only admins can view collection %q records", relCollection.Name)
+				return fmt.Errorf("Only admins can view collection %q records", relCollection.Name)
 			}
 
 			if *relCollection.ViewRule != "" {
-				resolver := resolvers.NewRecordFieldResolver(dao, relCollection, requestInfo, true)
+				resolver := resolvers.NewRecordFieldResolver(dao, relCollection, requestData, true)
 				expr, err := search.FilterData(*(relCollection.ViewRule)).BuildExpr(resolver)
 				if err != nil {
 					return err
@@ -202,7 +154,7 @@ func expandFetch(
 		})
 
 		if err == nil && len(records) > 0 {
-			autoIgnoreAuthRecordsEmailVisibility(dao, records, requestInfo)
+			autoIgnoreAuthRecordsEmailVisibility(dao, records, requestData)
 		}
 
 		return records, err
@@ -216,13 +168,13 @@ func expandFetch(
 func autoIgnoreAuthRecordsEmailVisibility(
 	dao *daos.Dao,
 	records []*models.Record,
-	requestInfo *models.RequestInfo,
+	requestData *models.RequestData,
 ) error {
 	if len(records) == 0 || !records[0].Collection().IsAuth() {
 		return nil // nothing to check
 	}
 
-	if requestInfo.Admin != nil {
+	if requestData.Admin != nil {
 		for _, rec := range records {
 			rec.IgnoreEmailVisibility(true)
 		}
@@ -238,8 +190,8 @@ func autoIgnoreAuthRecordsEmailVisibility(
 		recordIds[i] = rec.Id
 	}
 
-	if requestInfo != nil && requestInfo.AuthRecord != nil && mappedRecords[requestInfo.AuthRecord.Id] != nil {
-		mappedRecords[requestInfo.AuthRecord.Id].IgnoreEmailVisibility(true)
+	if requestData != nil && requestData.AuthRecord != nil && mappedRecords[requestData.AuthRecord.Id] != nil {
+		mappedRecords[requestData.AuthRecord.Id].IgnoreEmailVisibility(true)
 	}
 
 	authOptions := collection.AuthOptions()
@@ -255,7 +207,7 @@ func autoIgnoreAuthRecordsEmailVisibility(
 		Select(dao.DB().QuoteSimpleColumnName(collection.Name) + ".id").
 		AndWhere(dbx.In(dao.DB().QuoteSimpleColumnName(collection.Name)+".id", recordIds...))
 
-	resolver := resolvers.NewRecordFieldResolver(dao, collection, requestInfo, true)
+	resolver := resolvers.NewRecordFieldResolver(dao, collection, requestData, true)
 	expr, err := search.FilterData(*authOptions.ManageRule).BuildExpr(resolver)
 	if err != nil {
 		return err
@@ -284,7 +236,7 @@ func autoIgnoreAuthRecordsEmailVisibility(
 func hasAuthManageAccess(
 	dao *daos.Dao,
 	record *models.Record,
-	requestInfo *models.RequestInfo,
+	requestData *models.RequestData,
 ) bool {
 	if !record.Collection().IsAuth() {
 		return false
@@ -296,12 +248,12 @@ func hasAuthManageAccess(
 		return false // only for admins (manageRule can't be empty)
 	}
 
-	if requestInfo == nil || requestInfo.AuthRecord == nil {
+	if requestData == nil || requestData.AuthRecord == nil {
 		return false // no auth record
 	}
 
 	ruleFunc := func(q *dbx.SelectQuery) error {
-		resolver := resolvers.NewRecordFieldResolver(dao, record.Collection(), requestInfo, true)
+		resolver := resolvers.NewRecordFieldResolver(dao, record.Collection(), requestData, true)
 		expr, err := search.FilterData(*manageRule).BuildExpr(resolver)
 		if err != nil {
 			return err
@@ -315,31 +267,3 @@ func hasAuthManageAccess(
 
 	return findErr == nil
 }
-
-var ruleQueryParams = []string{search.FilterQueryParam, search.SortQueryParam}
-var adminOnlyRuleFields = []string{"@collection.", "@request."}
-
-// @todo consider moving the rules check to the RecordFieldResolver.
-//
-// checkForAdminOnlyRuleFields loosely checks and returns an error if
-// the provided RequestInfo contains rule fields that only the admin can use.
-func checkForAdminOnlyRuleFields(requestInfo *models.RequestInfo) error {
-	if requestInfo.Admin != nil || len(requestInfo.Query) == 0 {
-		return nil // admin or nothing to check
-	}
-
-	for _, param := range ruleQueryParams {
-		v, _ := requestInfo.Query[param].(string)
-		if v == "" {
-			continue
-		}
-
-		for _, field := range adminOnlyRuleFields {
-			if strings.Contains(v, field) {
-				return NewForbiddenError("Only admins can filter by "+field, nil)
-			}
-		}
-	}
-
-	return nil
-}

apis/record_helpers_test.go

@@ -13,13 +13,10 @@ import (
 	"github.com/pocketbase/pocketbase/tests"
 )
 
-func TestRequestInfo(t *testing.T) {
-	t.Parallel()
-
+func TestRequestData(t *testing.T) {
 	e := echo.New()
 	req := httptest.NewRequest(http.MethodPost, "/?test=123", strings.NewReader(`{"test":456}`))
 	req.Header.Set(echo.HeaderContentType, echo.MIMEApplicationJSON)
-	req.Header.Set("X-Token-Test", "123")
 	rec := httptest.NewRecorder()
 	c := e.NewContext(req, rec)
 
@@ -31,22 +28,16 @@ func TestRequestInfo(t *testing.T) {
 	dummyAdmin.Id = "id2"
 	c.Set(apis.ContextAdminKey, dummyAdmin)
 
-	result := apis.RequestInfo(c)
+	result := apis.RequestData(c)
 
 	if result == nil {
-		t.Fatal("Expected *models.RequestInfo instance, got nil")
+		t.Fatal("Expected *models.RequestData instance, got nil")
 	}
 
 	if result.Method != http.MethodPost {
 		t.Fatalf("Expected Method %v, got %v", http.MethodPost, result.Method)
 	}
 
-	rawHeaders, _ := json.Marshal(result.Headers)
-	expectedHeaders := `{"content_type":"application/json","x_token_test":"123"}`
-	if v := string(rawHeaders); v != expectedHeaders {
-		t.Fatalf("Expected Query %v, got %v", expectedHeaders, v)
-	}
-
 	rawQuery, _ := json.Marshal(result.Query)
 	expectedQuery := `{"test":"123"}`
 	if v := string(rawQuery); v != expectedQuery {
@@ -69,8 +60,6 @@ func TestRequestInfo(t *testing.T) {
 }
 
 func TestRecordAuthResponse(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -87,11 +76,6 @@ func TestRecordAuthResponse(t *testing.T) {
 		t.Fatal(err)
 	}
 
-	unverifiedAuthRecord, err := app.Dao().FindRecordById("clients", "o1y0dd0spd786md")
-	if err != nil {
-		t.Fatal(err)
-	}
-
 	scenarios := []struct {
 		name               string
 		record             *models.Record
@@ -106,11 +90,6 @@ func TestRecordAuthResponse(t *testing.T) {
 			record:      nonAuthRecord,
 			expectError: true,
 		},
-		{
-			name:        "valid auth record but with unverified email in onlyVerified collection",
-			record:      unverifiedAuthRecord,
-			expectError: true,
-		},
 		{
 			name:        "valid auth record - without meta",
 			record:      authRecord,
@@ -193,8 +172,6 @@ func TestRecordAuthResponse(t *testing.T) {
 }
 
 func TestEnrichRecords(t *testing.T) {
-	t.Parallel()
-
 	e := echo.New()
 	req := httptest.NewRequest(http.MethodGet, "/?expand=rel_many", nil)
 	req.Header.Set(echo.HeaderContentType, echo.MIMEApplicationJSON)

apis/serve.go

@@ -1,288 +0,0 @@
-package apis
-
-import (
-	"context"
-	"crypto/tls"
-	"log"
-	"net"
-	"net/http"
-	"path/filepath"
-	"strings"
-	"sync"
-	"time"
-
-	"github.com/fatih/color"
-	"github.com/labstack/echo/v5"
-	"github.com/labstack/echo/v5/middleware"
-	"github.com/pocketbase/dbx"
-	"github.com/pocketbase/pocketbase/core"
-	"github.com/pocketbase/pocketbase/migrations"
-	"github.com/pocketbase/pocketbase/migrations/logs"
-	"github.com/pocketbase/pocketbase/tools/list"
-	"github.com/pocketbase/pocketbase/tools/migrate"
-	"golang.org/x/crypto/acme"
-	"golang.org/x/crypto/acme/autocert"
-)
-
-// ServeConfig defines a configuration struct for apis.Serve().
-type ServeConfig struct {
-	// ShowStartBanner indicates whether to show or hide the server start console message.
-	ShowStartBanner bool
-
-	// HttpAddr is the TCP address to listen for the HTTP server (eg. `127.0.0.1:80`).
-	HttpAddr string
-
-	// HttpsAddr is the TCP address to listen for the HTTPS server (eg. `127.0.0.1:443`).
-	HttpsAddr string
-
-	// Optional domains list to use when issuing the TLS certificate.
-	//
-	// If not set, the host from the bound server address will be used.
-	//
-	// For convenience, for each "non-www" domain a "www" entry and
-	// redirect will be automatically added.
-	CertificateDomains []string
-
-	// AllowedOrigins is an optional list of CORS origins (default to "*").
-	AllowedOrigins []string
-}
-
-// Serve starts a new app web server.
-//
-// NB! The app should be bootstrapped before starting the web server.
-//
-// Example:
-//
-//	app.Bootstrap()
-//	apis.Serve(app, apis.ServeConfig{
-//		HttpAddr:        "127.0.0.1:8080",
-//		ShowStartBanner: false,
-//	})
-func Serve(app core.App, config ServeConfig) (*http.Server, error) {
-	if len(config.AllowedOrigins) == 0 {
-		config.AllowedOrigins = []string{"*"}
-	}
-
-	// ensure that the latest migrations are applied before starting the server
-	if err := runMigrations(app); err != nil {
-		return nil, err
-	}
-
-	// reload app settings in case a new default value was set with a migration
-	// (or if this is the first time the init migration was executed)
-	if err := app.RefreshSettings(); err != nil {
-		color.Yellow("=====================================")
-		color.Yellow("WARNING: Settings load error! \n%v", err)
-		color.Yellow("Fallback to the application defaults.")
-		color.Yellow("=====================================")
-	}
-
-	router, err := InitApi(app)
-	if err != nil {
-		return nil, err
-	}
-
-	// configure cors
-	router.Use(middleware.CORSWithConfig(middleware.CORSConfig{
-		Skipper:      middleware.DefaultSkipper,
-		AllowOrigins: config.AllowedOrigins,
-		AllowMethods: []string{http.MethodGet, http.MethodHead, http.MethodPut, http.MethodPatch, http.MethodPost, http.MethodDelete},
-	}))
-
-	// start http server
-	// ---
-	mainAddr := config.HttpAddr
-	if config.HttpsAddr != "" {
-		mainAddr = config.HttpsAddr
-	}
-
-	var wwwRedirects []string
-
-	// extract the host names for the certificate host policy
-	hostNames := config.CertificateDomains
-	if len(hostNames) == 0 {
-		host, _, _ := net.SplitHostPort(mainAddr)
-		hostNames = append(hostNames, host)
-	}
-	for _, host := range hostNames {
-		if strings.HasPrefix(host, "www.") {
-			continue // explicitly set www host
-		}
-
-		wwwHost := "www." + host
-		if !list.ExistInSlice(wwwHost, hostNames) {
-			hostNames = append(hostNames, wwwHost)
-			wwwRedirects = append(wwwRedirects, wwwHost)
-		}
-	}
-
-	// implicit www->non-www redirect(s)
-	if len(wwwRedirects) > 0 {
-		router.Pre(func(next echo.HandlerFunc) echo.HandlerFunc {
-			return func(c echo.Context) error {
-				host := c.Request().Host
-
-				if strings.HasPrefix(host, "www.") && list.ExistInSlice(host, wwwRedirects) {
-					return c.Redirect(
-						http.StatusTemporaryRedirect,
-						(c.Scheme() + "://" + host[4:] + c.Request().RequestURI),
-					)
-				}
-
-				return next(c)
-			}
-		})
-	}
-
-	certManager := &autocert.Manager{
-		Prompt:     autocert.AcceptTOS,
-		Cache:      autocert.DirCache(filepath.Join(app.DataDir(), ".autocert_cache")),
-		HostPolicy: autocert.HostWhitelist(hostNames...),
-	}
-
-	// base request context used for cancelling long running requests
-	// like the SSE connections
-	baseCtx, cancelBaseCtx := context.WithCancel(context.Background())
-	defer cancelBaseCtx()
-
-	server := &http.Server{
-		TLSConfig: &tls.Config{
-			MinVersion:     tls.VersionTLS12,
-			GetCertificate: certManager.GetCertificate,
-			NextProtos:     []string{acme.ALPNProto},
-		},
-		ReadTimeout:       10 * time.Minute,
-		ReadHeaderTimeout: 30 * time.Second,
-		// WriteTimeout: 60 * time.Second, // breaks sse!
-		Handler: router,
-		Addr:    mainAddr,
-		BaseContext: func(l net.Listener) context.Context {
-			return baseCtx
-		},
-		ErrorLog: log.New(&serverErrorLogWriter{app: app}, "", 0),
-	}
-
-	serveEvent := &core.ServeEvent{
-		App:         app,
-		Router:      router,
-		Server:      server,
-		CertManager: certManager,
-	}
-	if err := app.OnBeforeServe().Trigger(serveEvent); err != nil {
-		return nil, err
-	}
-
-	if config.ShowStartBanner {
-		schema := "http"
-		addr := server.Addr
-
-		if config.HttpsAddr != "" {
-			schema = "https"
-
-			if len(config.CertificateDomains) > 0 {
-				addr = config.CertificateDomains[0]
-			}
-		}
-
-		date := new(strings.Builder)
-		log.New(date, "", log.LstdFlags).Print()
-
-		bold := color.New(color.Bold).Add(color.FgGreen)
-		bold.Printf(
-			"%s Server started at %s\n",
-			strings.TrimSpace(date.String()),
-			color.CyanString("%s://%s", schema, addr),
-		)
-
-		regular := color.New()
-		regular.Printf("├─ REST API: %s\n", color.CyanString("%s://%s/api/", schema, addr))
-		regular.Printf("└─ Admin UI: %s\n", color.CyanString("%s://%s/_/", schema, addr))
-	}
-
-	// WaitGroup to block until server.ShutDown() returns because Serve and similar methods exit immediately.
-	// Note that the WaitGroup would not do anything if the app.OnTerminate() hook isn't triggered.
-	var wg sync.WaitGroup
-
-	// try to gracefully shutdown the server on app termination
-	app.OnTerminate().Add(func(e *core.TerminateEvent) error {
-		cancelBaseCtx()
-
-		ctx, cancel := context.WithTimeout(context.Background(), 3*time.Second)
-		defer cancel()
-
-		wg.Add(1)
-		server.Shutdown(ctx)
-		if e.IsRestart {
-			// wait for execve and other handlers up to 5 seconds before exit
-			time.AfterFunc(5*time.Second, func() {
-				wg.Done()
-			})
-		} else {
-			wg.Done()
-		}
-
-		return nil
-	})
-
-	// wait for the graceful shutdown to complete before exit
-	defer wg.Wait()
-
-	// ---
-	// @todo consider removing the server return value because it is
-	// not really useful when combined with the blocking serve calls
-	// ---
-
-	// start HTTPS server
-	if config.HttpsAddr != "" {
-		// if httpAddr is set, start an HTTP server to redirect the traffic to the HTTPS version
-		if config.HttpAddr != "" {
-			go http.ListenAndServe(config.HttpAddr, certManager.HTTPHandler(nil))
-		}
-
-		return server, server.ListenAndServeTLS("", "")
-	}
-
-	// OR start HTTP server
-	return server, server.ListenAndServe()
-}
-
-type migrationsConnection struct {
-	DB             *dbx.DB
-	MigrationsList migrate.MigrationsList
-}
-
-func runMigrations(app core.App) error {
-	connections := []migrationsConnection{
-		{
-			DB:             app.DB(),
-			MigrationsList: migrations.AppMigrations,
-		},
-		{
-			DB:             app.LogsDB(),
-			MigrationsList: logs.LogsMigrations,
-		},
-	}
-
-	for _, c := range connections {
-		runner, err := migrate.NewRunner(c.DB, c.MigrationsList)
-		if err != nil {
-			return err
-		}
-
-		if _, err := runner.Up(); err != nil {
-			return err
-		}
-	}
-
-	return nil
-}
-
-type serverErrorLogWriter struct {
-	app core.App
-}
-
-func (s *serverErrorLogWriter) Write(p []byte) (int, error) {
-	s.app.Logger().Debug(strings.TrimSpace(string(p)))
-
-	return len(p), nil
-}

apis/settings.go

@@ -1,13 +1,16 @@
 package apis
 
 import (
+	"fmt"
+	"log"
 	"net/http"
 
+	validation "github.com/go-ozzo/ozzo-validation/v4"
 	"github.com/labstack/echo/v5"
-	validation "github.com/pocketbase/ozzo-validation/v4"
 	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/forms"
 	"github.com/pocketbase/pocketbase/models/settings"
+	"github.com/pocketbase/pocketbase/tools/security"
 )
 
 // bindSettingsApi registers the settings api endpoints.
@@ -19,7 +22,6 @@ func bindSettingsApi(app core.App, rg *echo.Group) {
 	subGroup.PATCH("", api.set)
 	subGroup.POST("/test/s3", api.testS3)
 	subGroup.POST("/test/email", api.testEmail)
-	subGroup.POST("/apple/generate-client-secret", api.generateAppleClientSecret)
 }
 
 type settingsApi struct {
@@ -37,10 +39,6 @@ func (api *settingsApi) list(c echo.Context) error {
 	event.RedactedSettings = settings
 
 	return api.app.OnSettingsListRequest().Trigger(event, func(e *core.SettingsListEvent) error {
-		if e.HttpContext.Response().Committed {
-			return nil
-		}
-
 		return e.HttpContext.JSON(http.StatusOK, e.RedactedSettings)
 	})
 }
@@ -58,7 +56,7 @@ func (api *settingsApi) set(c echo.Context) error {
 	event.OldSettings = api.app.Settings()
 
 	// update the settings
-	return form.Submit(func(next forms.InterceptorNextFunc[*settings.Settings]) forms.InterceptorNextFunc[*settings.Settings] {
+	submitErr := form.Submit(func(next forms.InterceptorNextFunc[*settings.Settings]) forms.InterceptorNextFunc[*settings.Settings] {
 		return func(s *settings.Settings) error {
 			event.NewSettings = s
 
@@ -67,40 +65,47 @@ func (api *settingsApi) set(c echo.Context) error {
 					return NewBadRequestError("An error occurred while submitting the form.", err)
 				}
 
-				return api.app.OnSettingsAfterUpdateRequest().Trigger(event, func(e *core.SettingsUpdateEvent) error {
-					if e.HttpContext.Response().Committed {
-						return nil
-					}
+				redactedSettings, err := api.app.Settings().RedactClone()
+				if err != nil {
+					return NewBadRequestError("", err)
+				}
 
-					redactedSettings, err := api.app.Settings().RedactClone()
-					if err != nil {
-						return NewBadRequestError("", err)
-					}
-
-					return e.HttpContext.JSON(http.StatusOK, redactedSettings)
-				})
+				return e.HttpContext.JSON(http.StatusOK, redactedSettings)
 			})
 		}
 	})
+
+	if submitErr == nil {
+		if err := api.app.OnSettingsAfterUpdateRequest().Trigger(event); err != nil && api.app.IsDebug() {
+			log.Println(err)
+		}
+	}
+
+	return submitErr
 }
 
 func (api *settingsApi) testS3(c echo.Context) error {
-	form := forms.NewTestS3Filesystem(api.app)
-
-	// load request
-	if err := c.Bind(form); err != nil {
-		return NewBadRequestError("An error occurred while loading the submitted data.", err)
+	if !api.app.Settings().S3.Enabled {
+		return NewBadRequestError("S3 storage is not enabled.", nil)
 	}
 
-	// send
-	if err := form.Submit(); err != nil {
-		// form error
-		if fErr, ok := err.(validation.Errors); ok {
-			return NewBadRequestError("Failed to test the S3 filesystem.", fErr)
-		}
+	fs, err := api.app.NewFilesystem()
+	if err != nil {
+		return NewBadRequestError("Failed to initialize the S3 storage. Raw error: \n"+err.Error(), nil)
+	}
+	defer fs.Close()
 
-		// mailer error
-		return NewBadRequestError("Failed to test the S3 filesystem. Raw error: \n"+err.Error(), nil)
+	testPrefix := "pb_settings_test_" + security.PseudorandomString(5)
+	testFileKey := testPrefix + "/test.txt"
+
+	// try to upload a test file
+	if err := fs.Upload([]byte("test"), testFileKey); err != nil {
+		return NewBadRequestError("Failed to upload a test file. Raw error: \n"+err.Error(), nil)
+	}
+
+	// test prefix deletion (ensures that both bucket list and delete works)
+	if errs := fs.DeletePrefix(testPrefix); len(errs) > 0 {
+		return NewBadRequestError(fmt.Sprintf("Failed to delete a test file. Raw error: %v", errs), nil)
 	}
 
 	return c.NoContent(http.StatusNoContent)
@@ -116,8 +121,8 @@ func (api *settingsApi) testEmail(c echo.Context) error {
 
 	// send
 	if err := form.Submit(); err != nil {
-		// form error
 		if fErr, ok := err.(validation.Errors); ok {
+			// form error
 			return NewBadRequestError("Failed to send the test email.", fErr)
 		}
 
@@ -127,28 +132,3 @@ func (api *settingsApi) testEmail(c echo.Context) error {
 
 	return c.NoContent(http.StatusNoContent)
 }
-
-func (api *settingsApi) generateAppleClientSecret(c echo.Context) error {
-	form := forms.NewAppleClientSecretCreate(api.app)
-
-	// load request
-	if err := c.Bind(form); err != nil {
-		return NewBadRequestError("An error occurred while loading the submitted data.", err)
-	}
-
-	// generate
-	secret, err := form.Submit()
-	if err != nil {
-		// form error
-		if fErr, ok := err.(validation.Errors); ok {
-			return NewBadRequestError("Invalid client secret data.", fErr)
-		}
-
-		// secret generation error
-		return NewBadRequestError("Failed to generate client secret. Raw error: \n"+err.Error(), nil)
-	}
-
-	return c.JSON(http.StatusOK, map[string]any{
-		"secret": secret,
-	})
-}

apis/settings_test.go

@@ -1,25 +1,15 @@
 package apis_test
 
 import (
-	"crypto/ecdsa"
-	"crypto/elliptic"
-	"crypto/rand"
-	"crypto/x509"
-	"encoding/pem"
-	"errors"
-	"fmt"
 	"net/http"
 	"strings"
 	"testing"
 
 	"github.com/labstack/echo/v5"
-	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/tests"
 )
 
 func TestSettingsList(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -51,15 +41,12 @@ func TestSettingsList(t *testing.T) {
 				`"logs":{`,
 				`"smtp":{`,
 				`"s3":{`,
-				`"backups":{`,
 				`"adminAuthToken":{`,
 				`"adminPasswordResetToken":{`,
-				`"adminFileToken":{`,
 				`"recordAuthToken":{`,
 				`"recordPasswordResetToken":{`,
 				`"recordEmailChangeToken":{`,
 				`"recordVerificationToken":{`,
-				`"recordFileToken":{`,
 				`"emailAuth":{`,
 				`"googleAuth":{`,
 				`"facebookAuth":{`,
@@ -74,18 +61,8 @@ func TestSettingsList(t *testing.T) {
 				`"stravaAuth":{`,
 				`"giteeAuth":{`,
 				`"livechatAuth":{`,
+				`"authentikAuth":{`,
 				`"giteaAuth":{`,
-				`"oidcAuth":{`,
-				`"oidc2Auth":{`,
-				`"oidc3Auth":{`,
-				`"appleAuth":{`,
-				`"instagramAuth":{`,
-				`"vkAuth":{`,
-				`"yandexAuth":{`,
-				`"patreonAuth":{`,
-				`"mailcowAuth":{`,
-				`"bitbucketAuth":{`,
-				`"planningcenterAuth":{`,
 				`"secret":"******"`,
 				`"clientSecret":"******"`,
 			},
@@ -101,8 +78,6 @@ func TestSettingsList(t *testing.T) {
 }
 
 func TestSettingsSet(t *testing.T) {
-	t.Parallel()
-
 	validData := `{"meta":{"appName":"update_test"}}`
 
 	scenarios := []tests.ApiScenario{
@@ -139,15 +114,12 @@ func TestSettingsSet(t *testing.T) {
 				`"logs":{`,
 				`"smtp":{`,
 				`"s3":{`,
-				`"backups":{`,
 				`"adminAuthToken":{`,
 				`"adminPasswordResetToken":{`,
-				`"adminFileToken":{`,
 				`"recordAuthToken":{`,
 				`"recordPasswordResetToken":{`,
 				`"recordEmailChangeToken":{`,
 				`"recordVerificationToken":{`,
-				`"recordFileToken":{`,
 				`"emailAuth":{`,
 				`"googleAuth":{`,
 				`"facebookAuth":{`,
@@ -161,18 +133,8 @@ func TestSettingsSet(t *testing.T) {
 				`"stravaAuth":{`,
 				`"giteeAuth":{`,
 				`"livechatAuth":{`,
+				`"authentikAuth":{`,
 				`"giteaAuth":{`,
-				`"oidcAuth":{`,
-				`"oidc2Auth":{`,
-				`"oidc3Auth":{`,
-				`"appleAuth":{`,
-				`"instagramAuth":{`,
-				`"vkAuth":{`,
-				`"yandexAuth":{`,
-				`"patreonAuth":{`,
-				`"mailcowAuth":{`,
-				`"bitbucketAuth":{`,
-				`"planningcenterAuth":{`,
 				`"secret":"******"`,
 				`"clientSecret":"******"`,
 				`"appName":"acme_test"`,
@@ -212,15 +174,12 @@ func TestSettingsSet(t *testing.T) {
 				`"logs":{`,
 				`"smtp":{`,
 				`"s3":{`,
-				`"backups":{`,
 				`"adminAuthToken":{`,
 				`"adminPasswordResetToken":{`,
-				`"adminFileToken":{`,
 				`"recordAuthToken":{`,
 				`"recordPasswordResetToken":{`,
 				`"recordEmailChangeToken":{`,
 				`"recordVerificationToken":{`,
-				`"recordFileToken":{`,
 				`"emailAuth":{`,
 				`"googleAuth":{`,
 				`"facebookAuth":{`,
@@ -235,18 +194,8 @@ func TestSettingsSet(t *testing.T) {
 				`"stravaAuth":{`,
 				`"giteeAuth":{`,
 				`"livechatAuth":{`,
+				`"authentikAuth":{`,
 				`"giteaAuth":{`,
-				`"oidcAuth":{`,
-				`"oidc2Auth":{`,
-				`"oidc3Auth":{`,
-				`"appleAuth":{`,
-				`"instagramAuth":{`,
-				`"vkAuth":{`,
-				`"yandexAuth":{`,
-				`"patreonAuth":{`,
-				`"mailcowAuth":{`,
-				`"bitbucketAuth":{`,
-				`"planningcenterAuth":{`,
 				`"secret":"******"`,
 				`"clientSecret":"******"`,
 				`"appName":"update_test"`,
@@ -258,28 +207,6 @@ func TestSettingsSet(t *testing.T) {
 				"OnSettingsAfterUpdateRequest":  1,
 			},
 		},
-		{
-			Name:   "OnSettingsAfterUpdateRequest error response",
-			Method: http.MethodPatch,
-			Url:    "/api/settings",
-			Body:   strings.NewReader(validData),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			BeforeTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
-				app.OnSettingsAfterUpdateRequest().Add(func(e *core.SettingsUpdateEvent) error {
-					return errors.New("error")
-				})
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-			ExpectedEvents: map[string]int{
-				"OnModelBeforeUpdate":           1,
-				"OnModelAfterUpdate":            1,
-				"OnSettingsBeforeUpdateRequest": 1,
-				"OnSettingsAfterUpdateRequest":  1,
-			},
-		},
 	}
 
 	for _, scenario := range scenarios {
@@ -288,8 +215,6 @@ func TestSettingsSet(t *testing.T) {
 }
 
 func TestSettingsTestS3(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:            "unauthorized",
@@ -309,44 +234,14 @@ func TestSettingsTestS3(t *testing.T) {
 			ExpectedContent: []string{`"data":{}`},
 		},
 		{
-			Name:   "authorized as admin (missing body + no s3)",
+			Name:   "authorized as admin (no s3)",
 			Method: http.MethodPost,
 			Url:    "/api/settings/test/s3",
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"data":{`,
-				`"filesystem":{`,
-			},
-		},
-		{
-			Name:   "authorized as admin (invalid filesystem)",
-			Method: http.MethodPost,
-			Url:    "/api/settings/test/s3",
-			Body:   strings.NewReader(`{"filesystem":"invalid"}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"data":{`,
-				`"filesystem":{`,
-			},
-		},
-		{
-			Name:   "authorized as admin (valid filesystem and no s3)",
-			Method: http.MethodPost,
-			Url:    "/api/settings/test/s3",
-			Body:   strings.NewReader(`{"filesystem":"storage"}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"data":{}`,
-			},
+			ExpectedStatus:  400,
+			ExpectedContent: []string{`"data":{}`},
 		},
 	}
 
@@ -356,8 +251,6 @@ func TestSettingsTestS3(t *testing.T) {
 }
 
 func TestSettingsTestEmail(t *testing.T) {
-	t.Parallel()
-
 	scenarios := []tests.ApiScenario{
 		{
 			Name:   "unauthorized",
@@ -420,17 +313,13 @@ func TestSettingsTestEmail(t *testing.T) {
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				if app.TestMailer.TotalSend != 1 {
 					t.Fatalf("[verification] Expected 1 sent email, got %d", app.TestMailer.TotalSend)
 				}
 
-				if len(app.TestMailer.LastMessage.To) != 1 {
-					t.Fatalf("[verification] Expected 1 recipient, got %v", app.TestMailer.LastMessage.To)
-				}
-
-				if app.TestMailer.LastMessage.To[0].Address != "test@example.com" {
-					t.Fatalf("[verification] Expected the email to be sent to %s, got %s", "test@example.com", app.TestMailer.LastMessage.To[0].Address)
+				if app.TestMailer.LastMessage.To.Address != "test@example.com" {
+					t.Fatalf("[verification] Expected the email to be sent to %s, got %s", "test@example.com", app.TestMailer.LastMessage.To.Address)
 				}
 
 				if !strings.Contains(app.TestMailer.LastMessage.HTML, "Verify") {
@@ -455,17 +344,13 @@ func TestSettingsTestEmail(t *testing.T) {
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				if app.TestMailer.TotalSend != 1 {
 					t.Fatalf("[password-reset] Expected 1 sent email, got %d", app.TestMailer.TotalSend)
 				}
 
-				if len(app.TestMailer.LastMessage.To) != 1 {
-					t.Fatalf("[password-reset] Expected 1 recipient, got %v", app.TestMailer.LastMessage.To)
-				}
-
-				if app.TestMailer.LastMessage.To[0].Address != "test@example.com" {
-					t.Fatalf("[password-reset] Expected the email to be sent to %s, got %s", "test@example.com", app.TestMailer.LastMessage.To[0].Address)
+				if app.TestMailer.LastMessage.To.Address != "test@example.com" {
+					t.Fatalf("[password-reset] Expected the email to be sent to %s, got %s", "test@example.com", app.TestMailer.LastMessage.To.Address)
 				}
 
 				if !strings.Contains(app.TestMailer.LastMessage.HTML, "Reset password") {
@@ -490,17 +375,13 @@ func TestSettingsTestEmail(t *testing.T) {
 			RequestHeaders: map[string]string{
 				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
 			},
-			AfterTestFunc: func(t *testing.T, app *tests.TestApp, res *http.Response) {
+			AfterTestFunc: func(t *testing.T, app *tests.TestApp, e *echo.Echo) {
 				if app.TestMailer.TotalSend != 1 {
 					t.Fatalf("[email-change] Expected 1 sent email, got %d", app.TestMailer.TotalSend)
 				}
 
-				if len(app.TestMailer.LastMessage.To) != 1 {
-					t.Fatalf("[email-change] Expected 1 recipient, got %v", app.TestMailer.LastMessage.To)
-				}
-
-				if app.TestMailer.LastMessage.To[0].Address != "test@example.com" {
-					t.Fatalf("[email-change] Expected the email to be sent to %s, got %s", "test@example.com", app.TestMailer.LastMessage.To[0].Address)
+				if app.TestMailer.LastMessage.To.Address != "test@example.com" {
+					t.Fatalf("[email-change] Expected the email to be sent to %s, got %s", "test@example.com", app.TestMailer.LastMessage.To.Address)
 				}
 
 				if !strings.Contains(app.TestMailer.LastMessage.HTML, "Confirm new email") {
@@ -520,118 +401,3 @@ func TestSettingsTestEmail(t *testing.T) {
 		scenario.Test(t)
 	}
 }
-
-func TestGenerateAppleClientSecret(t *testing.T) {
-	t.Parallel()
-
-	key, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	encodedKey, err := x509.MarshalPKCS8PrivateKey(key)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	privatePem := pem.EncodeToMemory(
-		&pem.Block{
-			Type:  "PRIVATE KEY",
-			Bytes: encodedKey,
-		},
-	)
-
-	scenarios := []tests.ApiScenario{
-		{
-			Name:            "unauthorized",
-			Method:          http.MethodPost,
-			Url:             "/api/settings/apple/generate-client-secret",
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as auth record",
-			Method: http.MethodPost,
-			Url:    "/api/settings/apple/generate-client-secret",
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiJ9.eyJpZCI6IjRxMXhsY2xtZmxva3UzMyIsInR5cGUiOiJhdXRoUmVjb3JkIiwiY29sbGVjdGlvbklkIjoiX3BiX3VzZXJzX2F1dGhfIiwiZXhwIjoyMjA4OTg1MjYxfQ.UwD8JvkbQtXpymT09d7J6fdA0aP9g4FJ1GPh_ggEkzc",
-			},
-			ExpectedStatus:  401,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as admin (invalid body)",
-			Method: http.MethodPost,
-			Url:    "/api/settings/apple/generate-client-secret",
-			Body:   strings.NewReader(`{`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus:  400,
-			ExpectedContent: []string{`"data":{}`},
-		},
-		{
-			Name:   "authorized as admin (empty json)",
-			Method: http.MethodPost,
-			Url:    "/api/settings/apple/generate-client-secret",
-			Body:   strings.NewReader(`{}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"clientId":{"code":"validation_required"`,
-				`"teamId":{"code":"validation_required"`,
-				`"keyId":{"code":"validation_required"`,
-				`"privateKey":{"code":"validation_required"`,
-				`"duration":{"code":"validation_required"`,
-			},
-		},
-		{
-			Name:   "authorized as admin (invalid data)",
-			Method: http.MethodPost,
-			Url:    "/api/settings/apple/generate-client-secret",
-			Body: strings.NewReader(`{
-				"clientId": "",
-				"teamId": "123456789",
-				"keyId": "123456789",
-				"privateKey": "invalid",
-				"duration": -1
-			}`),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 400,
-			ExpectedContent: []string{
-				`"clientId":{"code":"validation_required"`,
-				`"teamId":{"code":"validation_length_invalid"`,
-				`"keyId":{"code":"validation_length_invalid"`,
-				`"privateKey":{"code":"validation_match_invalid"`,
-				`"duration":{"code":"validation_min_greater_equal_than_required"`,
-			},
-		},
-		{
-			Name:   "authorized as admin (valid data)",
-			Method: http.MethodPost,
-			Url:    "/api/settings/apple/generate-client-secret",
-			Body: strings.NewReader(fmt.Sprintf(`{
-				"clientId": "123",
-				"teamId": "1234567890",
-				"keyId": "1234567891",
-				"privateKey": %q,
-				"duration": 1
-			}`, privatePem)),
-			RequestHeaders: map[string]string{
-				"Authorization": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6InN5d2JoZWNuaDQ2cmhtMCIsInR5cGUiOiJhZG1pbiIsImV4cCI6MjIwODk4NTI2MX0.M1m--VOqGyv0d23eeUc0r9xE8ZzHaYVmVFw1VZW6gT8",
-			},
-			ExpectedStatus: 200,
-			ExpectedContent: []string{
-				`"secret":"`,
-			},
-		},
-	}
-
-	for _, scenario := range scenarios {
-		scenario.Test(t)
-	}
-}

cmd/admin.go

@@ -1,141 +0,0 @@
-package cmd
-
-import (
-	"errors"
-	"fmt"
-
-	"github.com/fatih/color"
-	"github.com/pocketbase/ozzo-validation/v4/is"
-	"github.com/pocketbase/pocketbase/core"
-	"github.com/pocketbase/pocketbase/models"
-	"github.com/spf13/cobra"
-)
-
-// NewAdminCommand creates and returns new command for managing
-// admin accounts (create, update, delete).
-func NewAdminCommand(app core.App) *cobra.Command {
-	command := &cobra.Command{
-		Use:   "admin",
-		Short: "Manages admin accounts",
-	}
-
-	command.AddCommand(adminCreateCommand(app))
-	command.AddCommand(adminUpdateCommand(app))
-	command.AddCommand(adminDeleteCommand(app))
-
-	return command
-}
-
-func adminCreateCommand(app core.App) *cobra.Command {
-	command := &cobra.Command{
-		Use:          "create",
-		Example:      "admin create test@example.com 1234567890",
-		Short:        "Creates a new admin account",
-		SilenceUsage: true,
-		RunE: func(command *cobra.Command, args []string) error {
-			if len(args) != 2 {
-				return errors.New("Missing email and password arguments.")
-			}
-
-			if args[0] == "" || is.EmailFormat.Validate(args[0]) != nil {
-				return errors.New("Missing or invalid email address.")
-			}
-
-			if len(args[1]) < 8 {
-				return errors.New("The password must be at least 8 chars long.")
-			}
-
-			admin := &models.Admin{}
-			admin.Email = args[0]
-			admin.SetPassword(args[1])
-
-			if !app.Dao().HasTable(admin.TableName()) {
-				return errors.New("Migration are not initialized yet. Please run 'migrate up' and try again.")
-			}
-
-			if err := app.Dao().SaveAdmin(admin); err != nil {
-				return fmt.Errorf("Failed to create new admin account: %v", err)
-			}
-
-			color.Green("Successfully created new admin %s!", admin.Email)
-			return nil
-		},
-	}
-
-	return command
-}
-
-func adminUpdateCommand(app core.App) *cobra.Command {
-	command := &cobra.Command{
-		Use:          "update",
-		Example:      "admin update test@example.com 1234567890",
-		Short:        "Changes the password of a single admin account",
-		SilenceUsage: true,
-		RunE: func(command *cobra.Command, args []string) error {
-			if len(args) != 2 {
-				return errors.New("Missing email and password arguments.")
-			}
-
-			if args[0] == "" || is.EmailFormat.Validate(args[0]) != nil {
-				return errors.New("Missing or invalid email address.")
-			}
-
-			if len(args[1]) < 8 {
-				return errors.New("The new password must be at least 8 chars long.")
-			}
-
-			if !app.Dao().HasTable((&models.Admin{}).TableName()) {
-				return errors.New("Migration are not initialized yet. Please run 'migrate up' and try again.")
-			}
-
-			admin, err := app.Dao().FindAdminByEmail(args[0])
-			if err != nil {
-				return fmt.Errorf("Admin with email %s doesn't exist.", args[0])
-			}
-
-			admin.SetPassword(args[1])
-
-			if err := app.Dao().SaveAdmin(admin); err != nil {
-				return fmt.Errorf("Failed to change admin %s password: %v", admin.Email, err)
-			}
-
-			color.Green("Successfully changed admin %s password!", admin.Email)
-			return nil
-		},
-	}
-
-	return command
-}
-
-func adminDeleteCommand(app core.App) *cobra.Command {
-	command := &cobra.Command{
-		Use:          "delete",
-		Example:      "admin delete test@example.com",
-		Short:        "Deletes an existing admin account",
-		SilenceUsage: true,
-		RunE: func(command *cobra.Command, args []string) error {
-			if len(args) == 0 || args[0] == "" || is.EmailFormat.Validate(args[0]) != nil {
-				return errors.New("Invalid or missing email address.")
-			}
-
-			if !app.Dao().HasTable((&models.Admin{}).TableName()) {
-				return errors.New("Migration are not initialized yet. Please run 'migrate up' and try again.")
-			}
-
-			admin, err := app.Dao().FindAdminByEmail(args[0])
-			if err != nil {
-				color.Yellow("Admin %s is already deleted.", args[0])
-				return nil
-			}
-
-			if err := app.Dao().DeleteAdmin(admin); err != nil {
-				return fmt.Errorf("Failed to delete admin %s: %v", admin.Email, err)
-			}
-
-			color.Green("Successfully deleted admin %s!", admin.Email)
-			return nil
-		},
-	}
-
-	return command
-}

cmd/admin_test.go

@@ -1,221 +0,0 @@
-package cmd_test
-
-import (
-	"testing"
-
-	"github.com/pocketbase/pocketbase/cmd"
-	"github.com/pocketbase/pocketbase/tests"
-)
-
-func TestAdminCreateCommand(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	scenarios := []struct {
-		name        string
-		email       string
-		password    string
-		expectError bool
-	}{
-		{
-			"empty email and password",
-			"",
-			"",
-			true,
-		},
-		{
-			"empty email",
-			"",
-			"1234567890",
-			true,
-		},
-		{
-			"invalid email",
-			"invalid",
-			"1234567890",
-			true,
-		},
-		{
-			"duplicated email",
-			"test@example.com",
-			"1234567890",
-			true,
-		},
-		{
-			"empty password",
-			"test@example.com",
-			"",
-			true,
-		},
-		{
-			"short password",
-			"test_new@example.com",
-			"1234567",
-			true,
-		},
-		{
-			"valid email and password",
-			"test_new@example.com",
-			"12345678",
-			false,
-		},
-	}
-
-	for _, s := range scenarios {
-		command := cmd.NewAdminCommand(app)
-		command.SetArgs([]string{"create", s.email, s.password})
-
-		err := command.Execute()
-
-		hasErr := err != nil
-		if s.expectError != hasErr {
-			t.Errorf("[%s] Expected hasErr %v, got %v (%v)", s.name, s.expectError, hasErr, err)
-		}
-
-		if hasErr {
-			continue
-		}
-
-		// check whether the admin account was actually created
-		admin, err := app.Dao().FindAdminByEmail(s.email)
-		if err != nil {
-			t.Errorf("[%s] Failed to fetch created admin %s: %v", s.name, s.email, err)
-		} else if !admin.ValidatePassword(s.password) {
-			t.Errorf("[%s] Expected the admin password to match", s.name)
-		}
-	}
-}
-
-func TestAdminUpdateCommand(t *testing.T) {
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	scenarios := []struct {
-		name        string
-		email       string
-		password    string
-		expectError bool
-	}{
-		{
-			"empty email and password",
-			"",
-			"",
-			true,
-		},
-		{
-			"empty email",
-			"",
-			"1234567890",
-			true,
-		},
-		{
-			"invalid email",
-			"invalid",
-			"1234567890",
-			true,
-		},
-		{
-			"nonexisting admin",
-			"test_missing@example.com",
-			"1234567890",
-			true,
-		},
-		{
-			"empty password",
-			"test@example.com",
-			"",
-			true,
-		},
-		{
-			"short password",
-			"test_new@example.com",
-			"1234567",
-			true,
-		},
-		{
-			"valid email and password",
-			"test@example.com",
-			"12345678",
-			false,
-		},
-	}
-
-	for _, s := range scenarios {
-		command := cmd.NewAdminCommand(app)
-		command.SetArgs([]string{"update", s.email, s.password})
-
-		err := command.Execute()
-
-		hasErr := err != nil
-		if s.expectError != hasErr {
-			t.Errorf("[%s] Expected hasErr %v, got %v (%v)", s.name, s.expectError, hasErr, err)
-		}
-
-		if hasErr {
-			continue
-		}
-
-		// check whether the admin password was actually changed
-		admin, err := app.Dao().FindAdminByEmail(s.email)
-		if err != nil {
-			t.Errorf("[%s] Failed to fetch admin %s: %v", s.name, s.email, err)
-		} else if !admin.ValidatePassword(s.password) {
-			t.Errorf("[%s] Expected the admin password to match", s.name)
-		}
-	}
-}
-
-func TestAdminDeleteCommand(t *testing.T) {
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	scenarios := []struct {
-		name        string
-		email       string
-		expectError bool
-	}{
-		{
-			"empty email",
-			"",
-			true,
-		},
-		{
-			"invalid email",
-			"invalid",
-			true,
-		},
-		{
-			"nonexisting admin",
-			"test_missing@example.com",
-			false,
-		},
-		{
-			"existing admin",
-			"test@example.com",
-			false,
-		},
-	}
-
-	for _, s := range scenarios {
-		command := cmd.NewAdminCommand(app)
-		command.SetArgs([]string{"delete", s.email})
-
-		err := command.Execute()
-
-		hasErr := err != nil
-		if s.expectError != hasErr {
-			t.Errorf("[%s] Expected hasErr %v, got %v (%v)", s.name, s.expectError, hasErr, err)
-		}
-
-		if hasErr {
-			continue
-		}
-
-		// check whether the admin account was actually deleted
-		if _, err := app.Dao().FindAdminByEmail(s.email); err == nil {
-			t.Errorf("[%s] Expected the admin account to be deleted", s.name)
-		}
-	}
-}

cmd/serve.go

@@ -1,12 +1,24 @@
 package cmd
 
 import (
-	"errors"
+	"crypto/tls"
+	"log"
+	"net"
 	"net/http"
+	"path/filepath"
+	"time"
 
+	"github.com/fatih/color"
+	"github.com/labstack/echo/v5/middleware"
+	"github.com/pocketbase/dbx"
 	"github.com/pocketbase/pocketbase/apis"
 	"github.com/pocketbase/pocketbase/core"
+	"github.com/pocketbase/pocketbase/migrations"
+	"github.com/pocketbase/pocketbase/migrations/logs"
+	"github.com/pocketbase/pocketbase/tools/migrate"
 	"github.com/spf13/cobra"
+	"golang.org/x/crypto/acme"
+	"golang.org/x/crypto/acme/autocert"
 )
 
 // NewServeCommand creates and returns new command responsible for
@@ -17,38 +29,91 @@ func NewServeCommand(app core.App, showStartBanner bool) *cobra.Command {
 	var httpsAddr string
 
 	command := &cobra.Command{
-		Use:          "serve [domain(s)]",
-		Args:         cobra.ArbitraryArgs,
-		Short:        "Starts the web server (default to 127.0.0.1:8090 if no domain is specified)",
-		SilenceUsage: true,
-		RunE: func(command *cobra.Command, args []string) error {
-			// set default listener addresses if at least one domain is specified
-			if len(args) > 0 {
-				if httpAddr == "" {
-					httpAddr = "0.0.0.0:80"
+		Use:   "serve",
+		Short: "Starts the web server (default to 127.0.0.1:8090)",
+		Run: func(command *cobra.Command, args []string) {
+			// ensure that the latest migrations are applied before starting the server
+			if err := runMigrations(app); err != nil {
+				panic(err)
+			}
+
+			// reload app settings in case a new default value was set with a migration
+			// (or if this is the first time the init migration was executed)
+			if err := app.RefreshSettings(); err != nil {
+				color.Yellow("=====================================")
+				color.Yellow("WARNING: Settings load error! \n%v", err)
+				color.Yellow("Fallback to the application defaults.")
+				color.Yellow("=====================================")
+			}
+
+			router, err := apis.InitApi(app)
+			if err != nil {
+				panic(err)
+			}
+
+			// configure cors
+			router.Use(middleware.CORSWithConfig(middleware.CORSConfig{
+				Skipper:      middleware.DefaultSkipper,
+				AllowOrigins: allowedOrigins,
+				AllowMethods: []string{http.MethodGet, http.MethodHead, http.MethodPut, http.MethodPatch, http.MethodPost, http.MethodDelete},
+			}))
+
+			// start http server
+			// ---
+			mainAddr := httpAddr
+			if httpsAddr != "" {
+				mainAddr = httpsAddr
+			}
+
+			mainHost, _, _ := net.SplitHostPort(mainAddr)
+
+			certManager := autocert.Manager{
+				Prompt:     autocert.AcceptTOS,
+				Cache:      autocert.DirCache(filepath.Join(app.DataDir(), ".autocert_cache")),
+				HostPolicy: autocert.HostWhitelist(mainHost, "www."+mainHost),
+			}
+
+			serverConfig := &http.Server{
+				TLSConfig: &tls.Config{
+					GetCertificate: certManager.GetCertificate,
+					NextProtos:     []string{acme.ALPNProto},
+				},
+				ReadTimeout:       5 * time.Minute,
+				ReadHeaderTimeout: 30 * time.Second,
+				// WriteTimeout: 60 * time.Second, // breaks sse!
+				Handler: router,
+				Addr:    mainAddr,
+			}
+
+			if showStartBanner {
+				schema := "http"
+				if httpsAddr != "" {
+					schema = "https"
 				}
-				if httpsAddr == "" {
-					httpsAddr = "0.0.0.0:443"
+				regular := color.New()
+				bold := color.New(color.Bold).Add(color.FgGreen)
+				bold.Printf("> Server started at: %s\n", color.CyanString("%s://%s", schema, serverConfig.Addr))
+				regular.Printf("  - REST API: %s\n", color.CyanString("%s://%s/api/", schema, serverConfig.Addr))
+				regular.Printf("  - Admin UI: %s\n", color.CyanString("%s://%s/_/", schema, serverConfig.Addr))
+			}
+
+			var serveErr error
+			if httpsAddr != "" {
+				// if httpAddr is set, start an HTTP server to redirect the traffic to the HTTPS version
+				if httpAddr != "" {
+					go http.ListenAndServe(httpAddr, certManager.HTTPHandler(nil))
 				}
+
+				// start HTTPS server
+				serveErr = serverConfig.ListenAndServeTLS("", "")
 			} else {
-				if httpAddr == "" {
-					httpAddr = "127.0.0.1:8090"
-				}
+				// start HTTP server
+				serveErr = serverConfig.ListenAndServe()
 			}
 
-			_, err := apis.Serve(app, apis.ServeConfig{
-				HttpAddr:           httpAddr,
-				HttpsAddr:          httpsAddr,
-				ShowStartBanner:    showStartBanner,
-				AllowedOrigins:     allowedOrigins,
-				CertificateDomains: args,
-			})
-
-			if errors.Is(err, http.ErrServerClosed) {
-				return nil
+			if serveErr != http.ErrServerClosed {
+				log.Fatalln(serveErr)
 			}
-
-			return err
 		},
 	}
 
@@ -62,16 +127,47 @@ func NewServeCommand(app core.App, showStartBanner bool) *cobra.Command {
 	command.PersistentFlags().StringVar(
 		&httpAddr,
 		"http",
-		"",
-		"TCP address to listen for the HTTP server\n(if domain args are specified - default to 0.0.0.0:80, otherwise - default to 127.0.0.1:8090)",
+		"127.0.0.1:8090",
+		"api HTTP server address",
 	)
 
 	command.PersistentFlags().StringVar(
 		&httpsAddr,
 		"https",
 		"",
-		"TCP address to listen for the HTTPS server\n(if domain args are specified - default to 0.0.0.0:443, otherwise - default to empty string, aka. no TLS)\nThe incoming HTTP traffic also will be auto redirected to the HTTPS version",
+		"api HTTPS server address (auto TLS via Let's Encrypt)\nthe incoming --http address traffic also will be redirected to this address",
 	)
 
 	return command
 }
+
+type migrationsConnection struct {
+	DB             *dbx.DB
+	MigrationsList migrate.MigrationsList
+}
+
+func runMigrations(app core.App) error {
+	connections := []migrationsConnection{
+		{
+			DB:             app.DB(),
+			MigrationsList: migrations.AppMigrations,
+		},
+		{
+			DB:             app.LogsDB(),
+			MigrationsList: logs.LogsMigrations,
+		},
+	}
+
+	for _, c := range connections {
+		runner, err := migrate.NewRunner(c.DB, c.MigrationsList)
+		if err != nil {
+			return err
+		}
+
+		if _, err := runner.Up(); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}

cmd/temp_upgrade.go

@@ -0,0 +1,444 @@
+package cmd
+
+import (
+	"errors"
+	"fmt"
+	"regexp"
+	"strings"
+
+	"github.com/fatih/color"
+	"github.com/pocketbase/dbx"
+	"github.com/pocketbase/pocketbase/core"
+	"github.com/pocketbase/pocketbase/daos"
+	"github.com/pocketbase/pocketbase/models"
+	"github.com/pocketbase/pocketbase/models/schema"
+	"github.com/pocketbase/pocketbase/tools/types"
+	"github.com/spf13/cobra"
+)
+
+// Temporary console command to update the pb_data structure to be compatible with the v0.8.0 changes.
+//
+// NB! It will be removed in v0.9+
+func NewTempUpgradeCommand(app core.App) *cobra.Command {
+	command := &cobra.Command{
+		Use:   "upgrade",
+		Short: "Upgrades your existing pb_data to be compatible with the v0.8.x changes",
+		Long: `
+Upgrades your existing pb_data to be compatible with the v0.8.x changes
+Prerequisites and caveats:
+- already upgraded to v0.7.*
+- no existing users collection
+- existing profiles collection fields like email, username, verified, etc. will be renamed to username2, email2, etc.
+`,
+		Run: func(command *cobra.Command, args []string) {
+			if err := upgrade(app); err != nil {
+				color.Red("Error: %v", err)
+			}
+		},
+	}
+
+	return command
+}
+
+func upgrade(app core.App) error {
+	if _, err := app.Dao().FindCollectionByNameOrId("users"); err == nil {
+		return errors.New("It seems that you've already upgraded or have an existing 'users' collection.")
+	}
+
+	return app.Dao().RunInTransaction(func(txDao *daos.Dao) error {
+		if err := migrateCollections(txDao); err != nil {
+			return err
+		}
+
+		if err := migrateUsers(app, txDao); err != nil {
+			return err
+		}
+
+		if err := resetMigrationsTable(txDao); err != nil {
+			return err
+		}
+
+		bold := color.New(color.Bold).Add(color.FgGreen)
+		bold.Println("The pb_data upgrade completed successfully!")
+		bold.Println("You can now start the application as usual with the 'serve' command.")
+		bold.Println("Please review the migrated collection API rules and fields in the Admin UI and apply the necessary changes in your client-side code.")
+		fmt.Println()
+
+		return nil
+	})
+}
+
+// -------------------------------------------------------------------
+
+func migrateCollections(txDao *daos.Dao) error {
+	// add new collection columns
+	if _, err := txDao.DB().AddColumn("_collections", "type", "TEXT DEFAULT 'base' NOT NULL").Execute(); err != nil {
+		return err
+	}
+	if _, err := txDao.DB().AddColumn("_collections", "options", "JSON DEFAULT '{}' NOT NULL").Execute(); err != nil {
+		return err
+	}
+
+	ruleReplacements := []struct {
+		old string
+		new string
+	}{
+		{"expand", "expand2"},
+		{"collecitonId", "collectionId2"},
+		{"collecitonName", "collectionName2"},
+		{"profile.userId", "profile.id"},
+
+		// @collection.*
+		{"@collection.profiles.userId", "@collection.users.id"},
+		{"@collection.profiles.username", "@collection.users.username2"},
+		{"@collection.profiles.email", "@collection.users.email2"},
+		{"@collection.profiles.emailVisibility", "@collection.users.emailVisibility2"},
+		{"@collection.profiles.verified", "@collection.users.verified2"},
+		{"@collection.profiles.tokenKey", "@collection.users.tokenKey2"},
+		{"@collection.profiles.passwordHash", "@collection.users.passwordHash2"},
+		{"@collection.profiles.lastResetSentAt", "@collection.users.lastResetSentAt2"},
+		{"@collection.profiles.lastVerificationSentAt", "@collection.users.lastVerificationSentAt2"},
+		{"@collection.profiles.", "@collection.users."},
+
+		// @request.*
+		{"@request.user.profile.userId", "@request.auth.id"},
+		{"@request.user.profile.username", "@request.auth.username2"},
+		{"@request.user.profile.email", "@request.auth.email2"},
+		{"@request.user.profile.emailVisibility", "@request.auth.emailVisibility2"},
+		{"@request.user.profile.verified", "@request.auth.verified2"},
+		{"@request.user.profile.tokenKey", "@request.auth.tokenKey2"},
+		{"@request.user.profile.passwordHash", "@request.auth.passwordHash2"},
+		{"@request.user.profile.lastResetSentAt", "@request.auth.lastResetSentAt2"},
+		{"@request.user.profile.lastVerificationSentAt", "@request.auth.lastVerificationSentAt2"},
+		{"@request.user.profile.", "@request.auth."},
+		{"@request.user", "@request.auth"},
+	}
+
+	collections := []*models.Collection{}
+	if err := txDao.CollectionQuery().All(&collections); err != nil {
+		return err
+	}
+
+	for _, collection := range collections {
+		collection.Type = models.CollectionTypeBase
+		collection.NormalizeOptions()
+
+		// rename profile fields
+		// ---
+		fieldsToRename := []string{
+			"collectionId",
+			"collectionName",
+			"expand",
+		}
+		if collection.Name == "profiles" {
+			fieldsToRename = append(fieldsToRename,
+				"username",
+				"email",
+				"emailVisibility",
+				"verified",
+				"tokenKey",
+				"passwordHash",
+				"lastResetSentAt",
+				"lastVerificationSentAt",
+			)
+		}
+		for _, name := range fieldsToRename {
+			f := collection.Schema.GetFieldByName(name)
+			if f != nil {
+				color.Blue("[%s - renamed field]", collection.Name)
+				color.Yellow(" - old: %s", f.Name)
+				color.Green(" - new: %s2", f.Name)
+				fmt.Println()
+				f.Name += "2"
+			}
+		}
+		// ---
+
+		// replace rule fields
+		// ---
+		rules := map[string]*string{
+			"ListRule":   collection.ListRule,
+			"ViewRule":   collection.ViewRule,
+			"CreateRule": collection.CreateRule,
+			"UpdateRule": collection.UpdateRule,
+			"DeleteRule": collection.DeleteRule,
+		}
+
+		for ruleKey, rule := range rules {
+			if rule == nil || *rule == "" {
+				continue
+			}
+
+			originalRule := *rule
+
+			for _, replacement := range ruleReplacements {
+				re := regexp.MustCompile(regexp.QuoteMeta(replacement.old) + `\b`)
+				*rule = re.ReplaceAllString(*rule, replacement.new)
+			}
+
+			*rule = replaceReversedLikes(*rule)
+
+			if originalRule != *rule {
+				color.Blue("[%s - replaced %s]:", collection.Name, ruleKey)
+				color.Yellow(" - old: %s", strings.TrimSpace(originalRule))
+				color.Green(" - new: %s", strings.TrimSpace(*rule))
+				fmt.Println()
+			}
+		}
+		// ---
+
+		if err := txDao.SaveCollection(collection); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+func migrateUsers(app core.App, txDao *daos.Dao) error {
+	color.Blue(`[merging "_users" and "profiles"]:`)
+
+	profilesCollection, err := txDao.FindCollectionByNameOrId("profiles")
+	if err != nil {
+		return err
+	}
+
+	originalProfilesCollectionId := profilesCollection.Id
+
+	// change the profiles collection id to something else since we will be using
+	// it for the new users collection in order to avoid renaming the storage dir
+	_, idRenameErr := txDao.DB().NewQuery(fmt.Sprintf(
+		`UPDATE {{_collections}}
+			SET id = '%s'
+			WHERE id = '%s';
+		`,
+		(originalProfilesCollectionId + "__old__"),
+		originalProfilesCollectionId,
+	)).Execute()
+	if idRenameErr != nil {
+		return idRenameErr
+	}
+
+	// refresh profiles collection
+	profilesCollection, err = txDao.FindCollectionByNameOrId("profiles")
+	if err != nil {
+		return err
+	}
+
+	usersSchema, _ := profilesCollection.Schema.Clone()
+	userIdField := usersSchema.GetFieldByName("userId")
+	if userIdField != nil {
+		usersSchema.RemoveField(userIdField.Id)
+	}
+
+	usersCollection := &models.Collection{}
+	usersCollection.MarkAsNew()
+	usersCollection.Id = originalProfilesCollectionId
+	usersCollection.Name = "users"
+	usersCollection.Type = models.CollectionTypeAuth
+	usersCollection.Schema = *usersSchema
+	usersCollection.CreateRule = types.Pointer("")
+	if profilesCollection.ListRule != nil && *profilesCollection.ListRule != "" {
+		*profilesCollection.ListRule = strings.ReplaceAll(*profilesCollection.ListRule, "userId", "id")
+		usersCollection.ListRule = profilesCollection.ListRule
+	}
+	if profilesCollection.ViewRule != nil && *profilesCollection.ViewRule != "" {
+		*profilesCollection.ViewRule = strings.ReplaceAll(*profilesCollection.ViewRule, "userId", "id")
+		usersCollection.ViewRule = profilesCollection.ViewRule
+	}
+	if profilesCollection.UpdateRule != nil && *profilesCollection.UpdateRule != "" {
+		*profilesCollection.UpdateRule = strings.ReplaceAll(*profilesCollection.UpdateRule, "userId", "id")
+		usersCollection.UpdateRule = profilesCollection.UpdateRule
+	}
+	if profilesCollection.DeleteRule != nil && *profilesCollection.DeleteRule != "" {
+		*profilesCollection.DeleteRule = strings.ReplaceAll(*profilesCollection.DeleteRule, "userId", "id")
+		usersCollection.DeleteRule = profilesCollection.DeleteRule
+	}
+
+	// set auth options
+	settings := app.Settings()
+	authOptions := usersCollection.AuthOptions()
+	authOptions.ManageRule = nil
+	authOptions.AllowOAuth2Auth = true
+	authOptions.AllowUsernameAuth = false
+	authOptions.AllowEmailAuth = settings.EmailAuth.Enabled
+	authOptions.MinPasswordLength = settings.EmailAuth.MinPasswordLength
+	authOptions.OnlyEmailDomains = settings.EmailAuth.OnlyDomains
+	authOptions.ExceptEmailDomains = settings.EmailAuth.ExceptDomains
+	// twitter currently is the only provider that doesn't return an email
+	authOptions.RequireEmail = !settings.TwitterAuth.Enabled
+
+	usersCollection.SetOptions(authOptions)
+
+	if err := txDao.SaveCollection(usersCollection); err != nil {
+		return err
+	}
+
+	// copy the original users
+	_, usersErr := txDao.DB().NewQuery(`
+		INSERT INTO {{users}} (id, created, updated, username, email, emailVisibility, verified, tokenKey, passwordHash, lastResetSentAt, lastVerificationSentAt)
+		SELECT id, created, updated, ("u_" || id), email, false, verified, tokenKey, passwordHash, lastResetSentAt, lastVerificationSentAt
+		FROM {{_users}};
+	`).Execute()
+	if usersErr != nil {
+		return usersErr
+	}
+
+	// generate the profile fields copy statements
+	sets := []string{"id = p.id"}
+	for _, f := range usersSchema.Fields() {
+		sets = append(sets, fmt.Sprintf("%s = p.%s", f.Name, f.Name))
+	}
+
+	// copy profile fields
+	_, copyProfileErr := txDao.DB().NewQuery(fmt.Sprintf(`
+		UPDATE {{users}} as u
+		SET %s
+		FROM {{profiles}} as p
+		WHERE u.id = p.userId;
+	`, strings.Join(sets, ", "))).Execute()
+	if copyProfileErr != nil {
+		return copyProfileErr
+	}
+
+	profileRecords, err := txDao.FindRecordsByExpr("profiles")
+	if err != nil {
+		return err
+	}
+
+	// update all profiles and users fields to point to the new users collection
+	collections := []*models.Collection{}
+	if err := txDao.CollectionQuery().All(&collections); err != nil {
+		return err
+	}
+	for _, collection := range collections {
+		var hasChanges bool
+
+		for _, f := range collection.Schema.Fields() {
+			f.InitOptions()
+
+			if f.Type == schema.FieldTypeUser {
+				if collection.Name == "profiles" && f.Name == "userId" {
+					continue
+				}
+
+				hasChanges = true
+
+				// change the user field to a relation field
+				options, _ := f.Options.(*schema.UserOptions)
+				f.Type = schema.FieldTypeRelation
+				f.Options = &schema.RelationOptions{
+					CollectionId:  usersCollection.Id,
+					MaxSelect:     &options.MaxSelect,
+					CascadeDelete: options.CascadeDelete,
+				}
+
+				for _, p := range profileRecords {
+					pId := p.Id
+					pUserId := p.GetString("userId")
+					// replace all user record id references with the profile id
+					_, replaceErr := txDao.DB().NewQuery(fmt.Sprintf(`
+						UPDATE %s
+						SET [[%s]] = REPLACE([[%s]], '%s', '%s')
+						WHERE [[%s]] LIKE ('%%%s%%');
+					`, collection.Name, f.Name, f.Name, pUserId, pId, f.Name, pUserId)).Execute()
+					if replaceErr != nil {
+						return replaceErr
+					}
+				}
+			}
+		}
+
+		if hasChanges {
+			if err := txDao.Save(collection); err != nil {
+				return err
+			}
+		}
+	}
+
+	if err := migrateExternalAuths(txDao, originalProfilesCollectionId); err != nil {
+		return err
+	}
+
+	// drop _users table
+	if _, err := txDao.DB().DropTable("_users").Execute(); err != nil {
+		return err
+	}
+
+	// drop profiles table
+	if _, err := txDao.DB().DropTable("profiles").Execute(); err != nil {
+		return err
+	}
+
+	// delete profiles collection
+	if err := txDao.Delete(profilesCollection); err != nil {
+		return err
+	}
+
+	color.Green(` - Successfully merged "_users" and "profiles" into a new collection "users".`)
+	fmt.Println()
+
+	return nil
+}
+
+func migrateExternalAuths(txDao *daos.Dao, userCollectionId string) error {
+	_, alterErr := txDao.DB().NewQuery(`
+		-- crate new externalAuths table
+		CREATE TABLE {{_newExternalAuths}} (
+			[[id]]           TEXT PRIMARY KEY,
+			[[collectionId]] TEXT NOT NULL,
+			[[recordId]]     TEXT NOT NULL,
+			[[provider]]     TEXT NOT NULL,
+			[[providerId]]   TEXT NOT NULL,
+			[[created]]      TEXT DEFAULT "" NOT NULL,
+			[[updated]]      TEXT DEFAULT "" NOT NULL,
+			---
+			FOREIGN KEY ([[collectionId]]) REFERENCES {{_collections}} ([[id]]) ON UPDATE CASCADE ON DELETE CASCADE
+		);
+
+		-- copy all data from the old table to the new one
+		INSERT INTO {{_newExternalAuths}}
+		SELECT auth.id, "` + userCollectionId + `" as collectionId, [[profiles.id]] as recordId, auth.provider, auth.providerId, auth.created, auth.updated
+		FROM {{_externalAuths}} auth
+		INNER JOIN {{profiles}} on [[profiles.userId]] = [[auth.userId]];
+
+		-- drop old table
+		DROP TABLE {{_externalAuths}};
+
+		-- rename new table
+		ALTER TABLE {{_newExternalAuths}} RENAME TO {{_externalAuths}};
+
+		-- create named indexes
+		CREATE UNIQUE INDEX _externalAuths_record_provider_idx on {{_externalAuths}} ([[collectionId]], [[recordId]], [[provider]]);
+		CREATE UNIQUE INDEX _externalAuths_provider_providerId_idx on {{_externalAuths}} ([[provider]], [[providerId]]);
+	`).Execute()
+
+	return alterErr
+}
+
+func resetMigrationsTable(txDao *daos.Dao) error {
+	// reset the migration state to the new init
+	_, err := txDao.DB().Delete("_migrations", dbx.HashExp{
+		"file": "1661586591_add_externalAuths_table.go",
+	}).Execute()
+
+	return err
+}
+
+var reverseLikeRegex = regexp.MustCompile(`(['"]\w*['"])\s*(\~|!~)\s*([\w\@\.]*)`)
+
+func replaceReversedLikes(rule string) string {
+	parts := reverseLikeRegex.FindAllStringSubmatch(rule, -1)
+
+	for _, p := range parts {
+		if len(p) != 4 {
+			continue
+		}
+
+		newPart := fmt.Sprintf("%s %s %s", p[3], p[2], p[1])
+
+		rule = strings.ReplaceAll(rule, p[0], newPart)
+	}
+
+	return rule
+}

core/app.go

@@ -4,9 +4,6 @@
 package core
 
 import (
-	"context"
-	"log/slog"
-
 	"github.com/pocketbase/dbx"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/models/settings"
@@ -49,9 +46,6 @@ type App interface {
 	// the users table from LogsDao will result in error.
 	LogsDao() *daos.Dao
 
-	// Logger returns the active app logger.
-	Logger() *slog.Logger
-
 	// DataDir returns the app data directory path.
 	DataDir() string
 
@@ -59,38 +53,28 @@ type App interface {
 	// (used for settings encryption).
 	EncryptionEnv() string
 
-	// IsDev returns whether the app is in dev mode.
-	IsDev() bool
+	// IsDebug returns whether the app is in debug mode
+	// (showing more detailed error logs, executed sql statements, etc.).
+	IsDebug() bool
 
 	// Settings returns the loaded app settings.
 	Settings() *settings.Settings
 
-	// Deprecated: Use app.Store() instead.
+	// Cache returns the app internal cache store.
 	Cache() *store.Store[any]
 
-	// Store returns the app runtime store.
-	Store() *store.Store[any]
-
 	// SubscriptionsBroker returns the app realtime subscriptions broker instance.
 	SubscriptionsBroker() *subscriptions.Broker
 
 	// NewMailClient creates and returns a configured app mail client.
 	NewMailClient() mailer.Mailer
 
-	// NewFilesystem creates and returns a configured filesystem.System instance
-	// for managing regular app files (eg. collection uploads).
+	// NewFilesystem creates and returns a configured filesystem.System instance.
 	//
-	// NB! Make sure to call Close() on the returned result
+	// NB! Make sure to call `Close()` on the returned result
 	// after you are done working with it.
 	NewFilesystem() (*filesystem.System, error)
 
-	// NewBackupsFilesystem creates and returns a configured filesystem.System instance
-	// for managing app backups.
-	//
-	// NB! Make sure to call Close() on the returned result
-	// after you are done working with it.
-	NewBackupsFilesystem() (*filesystem.System, error)
-
 	// RefreshSettings reinitializes and reloads the stored application settings.
 	RefreshSettings() error
 
@@ -108,50 +92,25 @@ type App interface {
 	// (eg. closing db connections).
 	ResetBootstrapState() error
 
-	// CreateBackup creates a new backup of the current app pb_data directory.
-	//
-	// Backups can be stored on S3 if it is configured in app.Settings().Backups.
-	//
-	// Please refer to the godoc of the specific core.App implementation
-	// for details on the backup procedures.
-	CreateBackup(ctx context.Context, name string) error
-
-	// RestoreBackup restores the backup with the specified name and restarts
-	// the current running application process.
-	//
-	// The safely perform the restore it is recommended to have free disk space
-	// for at least 2x the size of the restored pb_data backup.
-	//
-	// Please refer to the godoc of the specific core.App implementation
-	// for details on the restore procedures.
-	//
-	// NB! This feature is experimental and currently is expected to work only on UNIX based systems.
-	RestoreBackup(ctx context.Context, name string) error
-
-	// Restart restarts the current running application process.
-	//
-	// Currently it is relying on execve so it is supported only on UNIX based systems.
-	Restart() error
-
 	// ---------------------------------------------------------------
 	// App event hooks
 	// ---------------------------------------------------------------
 
-	// OnBeforeBootstrap hook is triggered before initializing the main
+	// OnBeforeBootstrap hook is triggered before initializing the base
 	// application resources (eg. before db open and initial settings load).
 	OnBeforeBootstrap() *hook.Hook[*BootstrapEvent]
 
-	// OnAfterBootstrap hook is triggered after initializing the main
+	// OnAfterBootstrap hook is triggered after initializing the base
 	// application resources (eg. after db open and initial settings load).
 	OnAfterBootstrap() *hook.Hook[*BootstrapEvent]
 
 	// OnBeforeServe hook is triggered before serving the internal router (echo),
-	// allowing you to adjust its options and attach new routes or middlewares.
+	// allowing you to adjust its options and attach new routes.
 	OnBeforeServe() *hook.Hook[*ServeEvent]
 
 	// OnBeforeApiError hook is triggered right before sending an error API
 	// response to the client, allowing you to further modify the error data
-	// or to return a completely different API response.
+	// or to return a completely different API response (using [hook.StopPropagation]).
 	OnBeforeApiError() *hook.Hook[*ApiErrorEvent]
 
 	// OnAfterApiError hook is triggered right after sending an error API
@@ -159,16 +118,12 @@ type App interface {
 	// It could be used to log the final API error in external services.
 	OnAfterApiError() *hook.Hook[*ApiErrorEvent]
 
-	// OnTerminate hook is triggered when the app is in the process
-	// of being terminated (eg. on SIGTERM signal).
-	OnTerminate() *hook.Hook[*TerminateEvent]
-
 	// ---------------------------------------------------------------
 	// Dao event hooks
 	// ---------------------------------------------------------------
 
 	// OnModelBeforeCreate hook is triggered before inserting a new
-	// model in the DB, allowing you to modify or validate the stored data.
+	// entry in the DB, allowing you to modify or validate the stored data.
 	//
 	// If the optional "tags" list (table names and/or the Collection id for Record models)
 	// is specified, then all event handlers registered via the created hook
@@ -176,7 +131,7 @@ type App interface {
 	OnModelBeforeCreate(tags ...string) *hook.TaggedHook[*ModelEvent]
 
 	// OnModelAfterCreate hook is triggered after successfully
-	// inserting a new model in the DB.
+	// inserting a new entry in the DB.
 	//
 	// If the optional "tags" list (table names and/or the Collection id for Record models)
 	// is specified, then all event handlers registered via the created hook
@@ -184,7 +139,7 @@ type App interface {
 	OnModelAfterCreate(tags ...string) *hook.TaggedHook[*ModelEvent]
 
 	// OnModelBeforeUpdate hook is triggered before updating existing
-	// model in the DB, allowing you to modify or validate the stored data.
+	// entry in the DB, allowing you to modify or validate the stored data.
 	//
 	// If the optional "tags" list (table names and/or the Collection id for Record models)
 	// is specified, then all event handlers registered via the created hook
@@ -192,7 +147,7 @@ type App interface {
 	OnModelBeforeUpdate(tags ...string) *hook.TaggedHook[*ModelEvent]
 
 	// OnModelAfterUpdate hook is triggered after successfully updating
-	// existing model in the DB.
+	// existing entry in the DB.
 	//
 	// If the optional "tags" list (table names and/or the Collection id for Record models)
 	// is specified, then all event handlers registered via the created hook
@@ -200,15 +155,15 @@ type App interface {
 	OnModelAfterUpdate(tags ...string) *hook.TaggedHook[*ModelEvent]
 
 	// OnModelBeforeDelete hook is triggered before deleting an
-	// existing model from the DB.
+	// existing entry from the DB.
 	//
 	// If the optional "tags" list (table names and/or the Collection id for Record models)
 	// is specified, then all event handlers registered via the created hook
 	// will be triggered and called only if their event data origin matches the tags.
 	OnModelBeforeDelete(tags ...string) *hook.TaggedHook[*ModelEvent]
 
-	// OnModelAfterDelete hook is triggered after successfully deleting an
-	// existing model from the DB.
+	// OnModelAfterDelete is triggered after successfully deleting an
+	// existing entry from the DB.
 	//
 	// If the optional "tags" list (table names and/or the Collection id for Record models)
 	// is specified, then all event handlers registered via the created hook
@@ -219,18 +174,22 @@ type App interface {
 	// Mailer event hooks
 	// ---------------------------------------------------------------
 
-	// OnMailerBeforeAdminResetPasswordSend hook is triggered right
-	// before sending a password reset email to an admin, allowing you
-	// to inspect and customize the email message that is being sent.
+	// OnMailerBeforeAdminResetPasswordSend hook is triggered right before
+	// sending a password reset email to an admin.
+	//
+	// Could be used to send your own custom email template if
+	// [hook.StopPropagation] is returned in one of its listeners.
 	OnMailerBeforeAdminResetPasswordSend() *hook.Hook[*MailerAdminEvent]
 
 	// OnMailerAfterAdminResetPasswordSend hook is triggered after
 	// admin password reset email was successfully sent.
 	OnMailerAfterAdminResetPasswordSend() *hook.Hook[*MailerAdminEvent]
 
-	// OnMailerBeforeRecordResetPasswordSend hook is triggered right
-	// before sending a password reset email to an auth record, allowing
-	// you to inspect and customize the email message that is being sent.
+	// OnMailerBeforeRecordResetPasswordSend hook is triggered right before
+	// sending a password reset email to an auth record.
+	//
+	// Could be used to send your own custom email template if
+	// [hook.StopPropagation] is returned in one of its listeners.
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -245,9 +204,11 @@ type App interface {
 	// triggered and called only if their event data origin matches the tags.
 	OnMailerAfterRecordResetPasswordSend(tags ...string) *hook.TaggedHook[*MailerRecordEvent]
 
-	// OnMailerBeforeRecordVerificationSend hook is triggered right
-	// before sending a verification email to an auth record, allowing
-	// you to inspect and customize the email message that is being sent.
+	// OnMailerBeforeRecordVerificationSend hook is triggered right before
+	// sending a verification email to an auth record.
+	//
+	// Could be used to send your own custom email template if
+	// [hook.StopPropagation] is returned in one of its listeners.
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -263,8 +224,10 @@ type App interface {
 	OnMailerAfterRecordVerificationSend(tags ...string) *hook.TaggedHook[*MailerRecordEvent]
 
 	// OnMailerBeforeRecordChangeEmailSend hook is triggered right before
-	// sending a confirmation new address email to an auth record, allowing
-	// you to inspect and customize the email message that is being sent.
+	// sending a confirmation new address email to an auth record.
+	//
+	// Could be used to send your own custom email template if
+	// [hook.StopPropagation] is returned in one of its listeners.
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -291,14 +254,14 @@ type App interface {
 	// SSE client connection.
 	OnRealtimeDisconnectRequest() *hook.Hook[*RealtimeDisconnectEvent]
 
-	// OnRealtimeBeforeMessageSend hook is triggered right before sending
+	// OnRealtimeBeforeMessage hook is triggered right before sending
 	// an SSE message to a client.
 	//
 	// Returning [hook.StopPropagation] will prevent sending the message.
 	// Returning any other non-nil error will close the realtime connection.
 	OnRealtimeBeforeMessageSend() *hook.Hook[*RealtimeMessageEvent]
 
-	// OnRealtimeAfterMessageSend hook is triggered right after sending
+	// OnRealtimeBeforeMessage hook is triggered right after sending
 	// an SSE message to a client.
 	OnRealtimeAfterMessageSend() *hook.Hook[*RealtimeMessageEvent]
 
@@ -326,7 +289,8 @@ type App interface {
 	// Settings update request (after request data load and before settings persistence).
 	//
 	// Could be used to additionally validate the request data or
-	// implement completely different persistence behavior.
+	// implement completely different persistence behavior
+	// (returning [hook.StopPropagation]).
 	OnSettingsBeforeUpdateRequest() *hook.Hook[*SettingsUpdateEvent]
 
 	// OnSettingsAfterUpdateRequest hook is triggered after each
@@ -343,25 +307,6 @@ type App interface {
 	// returning it to the client.
 	OnFileDownloadRequest(tags ...string) *hook.TaggedHook[*FileDownloadEvent]
 
-	// OnFileBeforeTokenRequest hook is triggered before each file
-	// token API request.
-	//
-	// If no token or model was submitted, e.Model and e.Token will be empty,
-	// allowing you to implement your own custom model file auth implementation.
-	//
-	// If the optional "tags" list (Collection ids or names) is specified,
-	// then all event handlers registered via the created hook will be
-	// triggered and called only if their event data origin matches the tags.
-	OnFileBeforeTokenRequest(tags ...string) *hook.TaggedHook[*FileTokenEvent]
-
-	// OnFileAfterTokenRequest hook is triggered after each
-	// successful file token API request.
-	//
-	// If the optional "tags" list (Collection ids or names) is specified,
-	// then all event handlers registered via the created hook will be
-	// triggered and called only if their event data origin matches the tags.
-	OnFileAfterTokenRequest(tags ...string) *hook.TaggedHook[*FileTokenEvent]
-
 	// ---------------------------------------------------------------
 	// Admin API event hooks
 	// ---------------------------------------------------------------
@@ -380,7 +325,7 @@ type App interface {
 	// Admin create request (after request data load and before model persistence).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different persistence behavior.
+	// completely different persistence behavior (returning [hook.StopPropagation]).
 	OnAdminBeforeCreateRequest() *hook.Hook[*AdminCreateEvent]
 
 	// OnAdminAfterCreateRequest hook is triggered after each
@@ -391,7 +336,7 @@ type App interface {
 	// Admin update request (after request data load and before model persistence).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different persistence behavior.
+	// completely different persistence behavior (returning [hook.StopPropagation]).
 	OnAdminBeforeUpdateRequest() *hook.Hook[*AdminUpdateEvent]
 
 	// OnAdminAfterUpdateRequest hook is triggered after each
@@ -402,7 +347,7 @@ type App interface {
 	// Admin delete request (after model load and before actual deletion).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different delete behavior.
+	// completely different delete behavior (returning [hook.StopPropagation]).
 	OnAdminBeforeDeleteRequest() *hook.Hook[*AdminDeleteEvent]
 
 	// OnAdminAfterDeleteRequest hook is triggered after each
@@ -431,7 +376,7 @@ type App interface {
 	// auth refresh API request (right before generating a new auth token).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different auth refresh behavior.
+	// completely different auth refresh behavior (returning [hook.StopPropagation]).
 	OnAdminBeforeAuthRefreshRequest() *hook.Hook[*AdminAuthRefreshEvent]
 
 	// OnAdminAfterAuthRefreshRequest hook is triggered after each
@@ -442,7 +387,7 @@ type App interface {
 	// request password reset API request (after request data load and before sending the reset email).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different password reset behavior.
+	// completely different password reset behavior (returning [hook.StopPropagation]).
 	OnAdminBeforeRequestPasswordResetRequest() *hook.Hook[*AdminRequestPasswordResetEvent]
 
 	// OnAdminAfterRequestPasswordResetRequest hook is triggered after each
@@ -453,7 +398,7 @@ type App interface {
 	// confirm password reset API request (after request data load and before persistence).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different persistence behavior.
+	// completely different persistence behavior (returning [hook.StopPropagation]).
 	OnAdminBeforeConfirmPasswordResetRequest() *hook.Hook[*AdminConfirmPasswordResetEvent]
 
 	// OnAdminAfterConfirmPasswordResetRequest hook is triggered after each
@@ -479,7 +424,7 @@ type App interface {
 	// auth with password API request (after request data load and before password validation).
 	//
 	// Could be used to implement for example a custom password validation
-	// or to locate a different Record model (by reassigning [RecordAuthWithPasswordEvent.Record]).
+	// or to locate a different Record identity (by assigning [RecordAuthWithPasswordEvent.Record]).
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -497,11 +442,11 @@ type App interface {
 	// OnRecordBeforeAuthWithOAuth2Request hook is triggered before each Record
 	// OAuth2 sign-in/sign-up API request (after token exchange and before external provider linking).
 	//
-	// If the [RecordAuthWithOAuth2Event.Record] is not set, then the OAuth2
+	// If the [RecordAuthWithOAuth2Event.Record] is nil, then the OAuth2
 	// request will try to create a new auth Record.
 	//
 	// To assign or link a different existing record model you can
-	// change the [RecordAuthWithOAuth2Event.Record] field.
+	// overwrite/modify the [RecordAuthWithOAuth2Event.Record] field.
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -520,7 +465,7 @@ type App interface {
 	// auth refresh API request (right before generating a new auth token).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different auth refresh behavior.
+	// completely different auth refresh behavior (returning [hook.StopPropagation]).
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -535,39 +480,11 @@ type App interface {
 	// triggered and called only if their event data origin matches the tags.
 	OnRecordAfterAuthRefreshRequest(tags ...string) *hook.TaggedHook[*RecordAuthRefreshEvent]
 
-	// OnRecordListExternalAuthsRequest hook is triggered on each API record external auths list request.
-	//
-	// Could be used to validate or modify the response before returning it to the client.
-	//
-	// If the optional "tags" list (Collection ids or names) is specified,
-	// then all event handlers registered via the created hook will be
-	// triggered and called only if their event data origin matches the tags.
-	OnRecordListExternalAuthsRequest(tags ...string) *hook.TaggedHook[*RecordListExternalAuthsEvent]
-
-	// OnRecordBeforeUnlinkExternalAuthRequest hook is triggered before each API record
-	// external auth unlink request (after models load and before the actual relation deletion).
-	//
-	// Could be used to additionally validate the request data or implement
-	// completely different delete behavior.
-	//
-	// If the optional "tags" list (Collection ids or names) is specified,
-	// then all event handlers registered via the created hook will be
-	// triggered and called only if their event data origin matches the tags.
-	OnRecordBeforeUnlinkExternalAuthRequest(tags ...string) *hook.TaggedHook[*RecordUnlinkExternalAuthEvent]
-
-	// OnRecordAfterUnlinkExternalAuthRequest hook is triggered after each
-	// successful API record external auth unlink request.
-	//
-	// If the optional "tags" list (Collection ids or names) is specified,
-	// then all event handlers registered via the created hook will be
-	// triggered and called only if their event data origin matches the tags.
-	OnRecordAfterUnlinkExternalAuthRequest(tags ...string) *hook.TaggedHook[*RecordUnlinkExternalAuthEvent]
-
 	// OnRecordBeforeRequestPasswordResetRequest hook is triggered before each Record
 	// request password reset API request (after request data load and before sending the reset email).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different password reset behavior.
+	// completely different password reset behavior (returning [hook.StopPropagation]).
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -586,7 +503,7 @@ type App interface {
 	// confirm password reset API request (after request data load and before persistence).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different persistence behavior.
+	// completely different persistence behavior (returning [hook.StopPropagation]).
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -605,7 +522,7 @@ type App interface {
 	// request verification API request (after request data load and before sending the verification email).
 	//
 	// Could be used to additionally validate the loaded request data or implement
-	// completely different verification behavior.
+	// completely different verification behavior (returning [hook.StopPropagation]).
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -624,7 +541,7 @@ type App interface {
 	// confirm verification API request (after request data load and before persistence).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different persistence behavior.
+	// completely different persistence behavior (returning [hook.StopPropagation]).
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -643,7 +560,7 @@ type App interface {
 	// (after request data load and before sending the email link to confirm the change).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different request email change behavior.
+	// completely different request email change behavior (returning [hook.StopPropagation]).
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -662,7 +579,7 @@ type App interface {
 	// confirm email change API request (after request data load and before persistence).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different persistence behavior.
+	// completely different persistence behavior (returning [hook.StopPropagation]).
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -677,6 +594,34 @@ type App interface {
 	// triggered and called only if their event data origin matches the tags.
 	OnRecordAfterConfirmEmailChangeRequest(tags ...string) *hook.TaggedHook[*RecordConfirmEmailChangeEvent]
 
+	// OnRecordListExternalAuthsRequest hook is triggered on each API record external auths list request.
+	//
+	// Could be used to validate or modify the response before returning it to the client.
+	//
+	// If the optional "tags" list (Collection ids or names) is specified,
+	// then all event handlers registered via the created hook will be
+	// triggered and called only if their event data origin matches the tags.
+	OnRecordListExternalAuthsRequest(tags ...string) *hook.TaggedHook[*RecordListExternalAuthsEvent]
+
+	// OnRecordBeforeUnlinkExternalAuthRequest hook is triggered before each API record
+	// external auth unlink request (after models load and before the actual relation deletion).
+	//
+	// Could be used to additionally validate the request data or implement
+	// completely different delete behavior (returning [hook.StopPropagation]).
+	//
+	// If the optional "tags" list (Collection ids or names) is specified,
+	// then all event handlers registered via the created hook will be
+	// triggered and called only if their event data origin matches the tags.
+	OnRecordBeforeUnlinkExternalAuthRequest(tags ...string) *hook.TaggedHook[*RecordUnlinkExternalAuthEvent]
+
+	// OnRecordAfterUnlinkExternalAuthRequest hook is triggered after each
+	// successful API record external auth unlink request.
+	//
+	// If the optional "tags" list (Collection ids or names) is specified,
+	// then all event handlers registered via the created hook will be
+	// triggered and called only if their event data origin matches the tags.
+	OnRecordAfterUnlinkExternalAuthRequest(tags ...string) *hook.TaggedHook[*RecordUnlinkExternalAuthEvent]
+
 	// ---------------------------------------------------------------
 	// Record CRUD API event hooks
 	// ---------------------------------------------------------------
@@ -703,7 +648,7 @@ type App interface {
 	// create request (after request data load and before model persistence).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different persistence behavior.
+	// completely different persistence behavior (returning [hook.StopPropagation]).
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -722,7 +667,7 @@ type App interface {
 	// update request (after request data load and before model persistence).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different persistence behavior.
+	// completely different persistence behavior (returning [hook.StopPropagation]).
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -741,7 +686,7 @@ type App interface {
 	// delete request (after model load and before actual deletion).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different delete behavior.
+	// completely different delete behavior (returning [hook.StopPropagation]).
 	//
 	// If the optional "tags" list (Collection ids or names) is specified,
 	// then all event handlers registered via the created hook will be
@@ -774,7 +719,7 @@ type App interface {
 	// create request (after request data load and before model persistence).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different persistence behavior.
+	// completely different persistence behavior (returning [hook.StopPropagation]).
 	OnCollectionBeforeCreateRequest() *hook.Hook[*CollectionCreateEvent]
 
 	// OnCollectionAfterCreateRequest hook is triggered after each
@@ -785,7 +730,7 @@ type App interface {
 	// update request (after request data load and before model persistence).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different persistence behavior.
+	// completely different persistence behavior (returning [hook.StopPropagation]).
 	OnCollectionBeforeUpdateRequest() *hook.Hook[*CollectionUpdateEvent]
 
 	// OnCollectionAfterUpdateRequest hook is triggered after each
@@ -796,7 +741,7 @@ type App interface {
 	// Collection delete request (after model load and before actual deletion).
 	//
 	// Could be used to additionally validate the request data or implement
-	// completely different delete behavior.
+	// completely different delete behavior (returning [hook.StopPropagation]).
 	OnCollectionBeforeDeleteRequest() *hook.Hook[*CollectionDeleteEvent]
 
 	// OnCollectionAfterDeleteRequest hook is triggered after each
@@ -807,7 +752,7 @@ type App interface {
 	// collections import request (after request data load and before the actual import).
 	//
 	// Could be used to additionally validate the imported collections or
-	// to implement completely different import behavior.
+	// to implement completely different import behavior (returning [hook.StopPropagation]).
 	OnCollectionsBeforeImportRequest() *hook.Hook[*CollectionsImportEvent]
 
 	// OnCollectionsAfterImportRequest hook is triggered after each

core/base.go

@@ -5,12 +5,8 @@ import (
 	"database/sql"
 	"errors"
 	"log"
-	"log/slog"
 	"os"
 	"path/filepath"
-	"runtime"
-	"strings"
-	"syscall"
 	"time"
 
 	"github.com/fatih/color"
@@ -20,35 +16,25 @@ import (
 	"github.com/pocketbase/pocketbase/models/settings"
 	"github.com/pocketbase/pocketbase/tools/filesystem"
 	"github.com/pocketbase/pocketbase/tools/hook"
-	"github.com/pocketbase/pocketbase/tools/logger"
 	"github.com/pocketbase/pocketbase/tools/mailer"
 	"github.com/pocketbase/pocketbase/tools/routine"
-	"github.com/pocketbase/pocketbase/tools/security"
 	"github.com/pocketbase/pocketbase/tools/store"
 	"github.com/pocketbase/pocketbase/tools/subscriptions"
-	"github.com/pocketbase/pocketbase/tools/types"
-	"github.com/spf13/cast"
 )
 
 const (
-	DefaultDataMaxOpenConns int = 120
+	DefaultDataMaxOpenConns int = 100
 	DefaultDataMaxIdleConns int = 20
 	DefaultLogsMaxOpenConns int = 10
 	DefaultLogsMaxIdleConns int = 2
-
-	LocalStorageDirName string = "storage"
-	LocalBackupsDirName string = "backups"
-	LocalTempDirName    string = ".pb_temp_to_delete" // temp pb_data sub directory that will be deleted on each app.Bootstrap()
 )
 
 var _ App = (*BaseApp)(nil)
 
 // BaseApp implements core.App and defines the base PocketBase app structure.
 type BaseApp struct {
-	// @todo consider introducing a mutex to allow safe concurrent config changes during runtime
-
 	// configurable parameters
-	isDev            bool
+	isDebug          bool
 	dataDir          string
 	encryptionEnv    string
 	dataMaxOpenConns int
@@ -57,12 +43,11 @@ type BaseApp struct {
 	logsMaxIdleConns int
 
 	// internals
-	store               *store.Store[any]
+	cache               *store.Store[any]
 	settings            *settings.Settings
 	dao                 *daos.Dao
 	logsDao             *daos.Dao
 	subscriptionsBroker *subscriptions.Broker
-	logger              *slog.Logger
 
 	// app event hooks
 	onBeforeBootstrap *hook.Hook[*BootstrapEvent]
@@ -70,7 +55,6 @@ type BaseApp struct {
 	onBeforeServe     *hook.Hook[*ServeEvent]
 	onBeforeApiError  *hook.Hook[*ApiErrorEvent]
 	onAfterApiError   *hook.Hook[*ApiErrorEvent]
-	onTerminate       *hook.Hook[*TerminateEvent]
 
 	// dao event hooks
 	onModelBeforeCreate *hook.Hook[*ModelEvent]
@@ -104,9 +88,7 @@ type BaseApp struct {
 	onSettingsAfterUpdateRequest  *hook.Hook[*SettingsUpdateEvent]
 
 	// file api event hooks
-	onFileDownloadRequest    *hook.Hook[*FileDownloadEvent]
-	onFileBeforeTokenRequest *hook.Hook[*FileTokenEvent]
-	onFileAfterTokenRequest  *hook.Hook[*FileTokenEvent]
+	onFileDownloadRequest *hook.Hook[*FileDownloadEvent]
 
 	// admin api event hooks
 	onAdminsListRequest                      *hook.Hook[*AdminsListEvent]
@@ -176,9 +158,9 @@ type BaseApp struct {
 
 // BaseAppConfig defines a BaseApp configuration option
 type BaseAppConfig struct {
-	IsDev            bool
 	DataDir          string
 	EncryptionEnv    string
+	IsDebug          bool
 	DataMaxOpenConns int // default to 500
 	DataMaxIdleConns int // default 20
 	LogsMaxOpenConns int // default to 100
@@ -189,16 +171,16 @@ type BaseAppConfig struct {
 // configured with the provided arguments.
 //
 // To initialize the app, you need to call `app.Bootstrap()`.
-func NewBaseApp(config BaseAppConfig) *BaseApp {
+func NewBaseApp(config *BaseAppConfig) *BaseApp {
 	app := &BaseApp{
-		isDev:               config.IsDev,
 		dataDir:             config.DataDir,
+		isDebug:             config.IsDebug,
 		encryptionEnv:       config.EncryptionEnv,
 		dataMaxOpenConns:    config.DataMaxOpenConns,
 		dataMaxIdleConns:    config.DataMaxIdleConns,
 		logsMaxOpenConns:    config.LogsMaxOpenConns,
 		logsMaxIdleConns:    config.LogsMaxIdleConns,
-		store:               store.New[any](nil),
+		cache:               store.New[any](nil),
 		settings:            settings.New(),
 		subscriptionsBroker: subscriptions.NewBroker(),
 
@@ -208,7 +190,6 @@ func NewBaseApp(config BaseAppConfig) *BaseApp {
 		onBeforeServe:     &hook.Hook[*ServeEvent]{},
 		onBeforeApiError:  &hook.Hook[*ApiErrorEvent]{},
 		onAfterApiError:   &hook.Hook[*ApiErrorEvent]{},
-		onTerminate:       &hook.Hook[*TerminateEvent]{},
 
 		// dao event hooks
 		onModelBeforeCreate: &hook.Hook[*ModelEvent]{},
@@ -242,9 +223,7 @@ func NewBaseApp(config BaseAppConfig) *BaseApp {
 		onSettingsAfterUpdateRequest:  &hook.Hook[*SettingsUpdateEvent]{},
 
 		// file API event hooks
-		onFileDownloadRequest:    &hook.Hook[*FileDownloadEvent]{},
-		onFileBeforeTokenRequest: &hook.Hook[*FileTokenEvent]{},
-		onFileAfterTokenRequest:  &hook.Hook[*FileTokenEvent]{},
+		onFileDownloadRequest: &hook.Hook[*FileDownloadEvent]{},
 
 		// admin API event hooks
 		onAdminsListRequest:                      &hook.Hook[*AdminsListEvent]{},
@@ -323,17 +302,6 @@ func (app *BaseApp) IsBootstrapped() bool {
 	return app.dao != nil && app.logsDao != nil && app.settings != nil
 }
 
-// Logger returns the default app logger.
-//
-// If the application is not bootstrapped yet, fallbacks to slog.Default().
-func (app *BaseApp) Logger() *slog.Logger {
-	if app.logger == nil {
-		return slog.Default()
-	}
-
-	return app.logger
-}
-
 // Bootstrap initializes the application
 // (aka. create data dir, open db connections, load settings, etc.).
 //
@@ -363,17 +331,14 @@ func (app *BaseApp) Bootstrap() error {
 		return err
 	}
 
-	if err := app.initLogger(); err != nil {
-		return err
-	}
-
 	// we don't check for an error because the db migrations may have not been executed yet
 	app.RefreshSettings()
 
-	// cleanup the pb_data temp directory (if any)
-	os.RemoveAll(filepath.Join(app.DataDir(), LocalTempDirName))
+	if err := app.OnAfterBootstrap().Trigger(event); err != nil && app.IsDebug() {
+		log.Println(err)
+	}
 
-	return app.OnAfterBootstrap().Trigger(event)
+	return nil
 }
 
 // ResetBootstrapState takes care for releasing initialized app resources
@@ -399,6 +364,7 @@ func (app *BaseApp) ResetBootstrapState() error {
 
 	app.dao = nil
 	app.logsDao = nil
+	app.settings = nil
 
 	return nil
 }
@@ -462,11 +428,10 @@ func (app *BaseApp) EncryptionEnv() string {
 	return app.encryptionEnv
 }
 
-// IsDev returns whether the app is in dev mode.
-//
-// When enabled logs, executed sql statements, etc. are printed to the stderr.
-func (app *BaseApp) IsDev() bool {
-	return app.isDev
+// IsDebug returns whether the app is in debug mode
+// (showing more detailed error logs, executed sql statements, etc.).
+func (app *BaseApp) IsDebug() bool {
+	return app.isDebug
 }
 
 // Settings returns the loaded app settings.
@@ -474,15 +439,9 @@ func (app *BaseApp) Settings() *settings.Settings {
 	return app.settings
 }
 
-// Deprecated: Use app.Store() instead.
+// Cache returns the app internal cache store.
 func (app *BaseApp) Cache() *store.Store[any] {
-	color.Yellow("app.Store() is soft-deprecated. Please replace it with app.Store().")
-	return app.Store()
-}
-
-// Store returns the app internal runtime store.
-func (app *BaseApp) Store() *store.Store[any] {
-	return app.store
+	return app.cache
 }
 
 // SubscriptionsBroker returns the app realtime subscriptions broker instance.
@@ -501,7 +460,6 @@ func (app *BaseApp) NewMailClient() mailer.Mailer {
 			Password:   app.Settings().Smtp.Password,
 			Tls:        app.Settings().Smtp.Tls,
 			AuthMethod: app.Settings().Smtp.AuthMethod,
-			LocalName:  app.Settings().Smtp.LocalName,
 		}
 	}
 
@@ -509,13 +467,12 @@ func (app *BaseApp) NewMailClient() mailer.Mailer {
 }
 
 // NewFilesystem creates a new local or S3 filesystem instance
-// for managing regular app files (eg. collection uploads)
 // based on the current app settings.
 //
-// NB! Make sure to call Close() on the returned result
+// NB! Make sure to call `Close()` on the returned result
 // after you are done working with it.
 func (app *BaseApp) NewFilesystem() (*filesystem.System, error) {
-	if app.settings != nil && app.settings.S3.Enabled {
+	if app.settings.S3.Enabled {
 		return filesystem.NewS3(
 			app.settings.S3.Bucket,
 			app.settings.S3.Region,
@@ -527,54 +484,7 @@ func (app *BaseApp) NewFilesystem() (*filesystem.System, error) {
 	}
 
 	// fallback to local filesystem
-	return filesystem.NewLocal(filepath.Join(app.DataDir(), LocalStorageDirName))
-}
-
-// NewFilesystem creates a new local or S3 filesystem instance
-// for managing app backups based on the current app settings.
-//
-// NB! Make sure to call Close() on the returned result
-// after you are done working with it.
-func (app *BaseApp) NewBackupsFilesystem() (*filesystem.System, error) {
-	if app.settings != nil && app.settings.Backups.S3.Enabled {
-		return filesystem.NewS3(
-			app.settings.Backups.S3.Bucket,
-			app.settings.Backups.S3.Region,
-			app.settings.Backups.S3.Endpoint,
-			app.settings.Backups.S3.AccessKey,
-			app.settings.Backups.S3.Secret,
-			app.settings.Backups.S3.ForcePathStyle,
-		)
-	}
-
-	// fallback to local filesystem
-	return filesystem.NewLocal(filepath.Join(app.DataDir(), LocalBackupsDirName))
-}
-
-// Restart restarts (aka. replaces) the current running application process.
-//
-// NB! It relies on execve which is supported only on UNIX based systems.
-func (app *BaseApp) Restart() error {
-	if runtime.GOOS == "windows" {
-		return errors.New("restart is not supported on windows")
-	}
-
-	execPath, err := os.Executable()
-	if err != nil {
-		return err
-	}
-
-	return app.OnTerminate().Trigger(&TerminateEvent{
-		App:       app,
-		IsRestart: true,
-	}, func(e *TerminateEvent) error {
-		e.App.ResetBootstrapState()
-
-		// attempt to restart the bootstrap process in case execve returns an error for some reason
-		defer e.App.Bootstrap()
-
-		return syscall.Exec(execPath, os.Args, os.Environ())
-	})
+	return filesystem.NewLocal(filepath.Join(app.DataDir(), "storage"))
 }
 
 // RefreshSettings reinitializes and reloads the stored application settings.
@@ -586,7 +496,7 @@ func (app *BaseApp) RefreshSettings() error {
 	encryptionKey := os.Getenv(app.EncryptionEnv())
 
 	storedSettings, err := app.Dao().FindSettings(encryptionKey)
-	if err != nil && !errors.Is(err, sql.ErrNoRows) {
+	if err != nil && err != sql.ErrNoRows {
 		return err
 	}
 
@@ -600,13 +510,6 @@ func (app *BaseApp) RefreshSettings() error {
 		return err
 	}
 
-	// reload handler level (if initialized)
-	if app.Logger() != nil {
-		if h, ok := app.Logger().Handler().(*logger.BatchHandler); ok {
-			h.SetLevel(app.getLoggerMinLevel())
-		}
-	}
-
 	return nil
 }
 
@@ -634,10 +537,6 @@ func (app *BaseApp) OnAfterApiError() *hook.Hook[*ApiErrorEvent] {
 	return app.onAfterApiError
 }
 
-func (app *BaseApp) OnTerminate() *hook.Hook[*TerminateEvent] {
-	return app.onTerminate
-}
-
 // -------------------------------------------------------------------
 // Dao event hooks
 // -------------------------------------------------------------------
@@ -754,14 +653,6 @@ func (app *BaseApp) OnFileDownloadRequest(tags ...string) *hook.TaggedHook[*File
 	return hook.NewTaggedHook(app.onFileDownloadRequest, tags...)
 }
 
-func (app *BaseApp) OnFileBeforeTokenRequest(tags ...string) *hook.TaggedHook[*FileTokenEvent] {
-	return hook.NewTaggedHook(app.onFileBeforeTokenRequest, tags...)
-}
-
-func (app *BaseApp) OnFileAfterTokenRequest(tags ...string) *hook.TaggedHook[*FileTokenEvent] {
-	return hook.NewTaggedHook(app.onFileAfterTokenRequest, tags...)
-}
-
 // -------------------------------------------------------------------
 // Admin API event hooks
 // -------------------------------------------------------------------
@@ -1026,7 +917,7 @@ func (app *BaseApp) initLogsDB() error {
 	}
 	concurrentDB.DB().SetMaxOpenConns(maxOpenConns)
 	concurrentDB.DB().SetMaxIdleConns(maxIdleConns)
-	concurrentDB.DB().SetConnMaxIdleTime(3 * time.Minute)
+	concurrentDB.DB().SetConnMaxIdleTime(5 * time.Minute)
 
 	nonconcurrentDB, err := connectDB(filepath.Join(app.DataDir(), "logs.db"))
 	if err != nil {
@@ -1034,7 +925,7 @@ func (app *BaseApp) initLogsDB() error {
 	}
 	nonconcurrentDB.DB().SetMaxOpenConns(1)
 	nonconcurrentDB.DB().SetMaxIdleConns(1)
-	nonconcurrentDB.DB().SetConnMaxIdleTime(3 * time.Minute)
+	nonconcurrentDB.DB().SetConnMaxIdleTime(5 * time.Minute)
 
 	app.logsDao = daos.NewMultiDB(concurrentDB, nonconcurrentDB)
 
@@ -1057,7 +948,7 @@ func (app *BaseApp) initDataDB() error {
 	}
 	concurrentDB.DB().SetMaxOpenConns(maxOpenConns)
 	concurrentDB.DB().SetMaxIdleConns(maxIdleConns)
-	concurrentDB.DB().SetConnMaxIdleTime(3 * time.Minute)
+	concurrentDB.DB().SetConnMaxIdleTime(5 * time.Minute)
 
 	nonconcurrentDB, err := connectDB(filepath.Join(app.DataDir(), "data.db"))
 	if err != nil {
@@ -1065,16 +956,17 @@ func (app *BaseApp) initDataDB() error {
 	}
 	nonconcurrentDB.DB().SetMaxOpenConns(1)
 	nonconcurrentDB.DB().SetMaxIdleConns(1)
-	nonconcurrentDB.DB().SetConnMaxIdleTime(3 * time.Minute)
+	nonconcurrentDB.DB().SetConnMaxIdleTime(5 * time.Minute)
 
-	if app.IsDev() {
+	if app.IsDebug() {
 		nonconcurrentDB.QueryLogFunc = func(ctx context.Context, t time.Duration, sql string, rows *sql.Rows, err error) {
 			color.HiBlack("[%.2fms] %v\n", float64(t.Milliseconds()), sql)
 		}
+		concurrentDB.QueryLogFunc = nonconcurrentDB.QueryLogFunc
+
 		nonconcurrentDB.ExecLogFunc = func(ctx context.Context, t time.Duration, sql string, result sql.Result, err error) {
 			color.HiBlack("[%.2fms] %v\n", float64(t.Milliseconds()), sql)
 		}
-		concurrentDB.QueryLogFunc = nonconcurrentDB.QueryLogFunc
 		concurrentDB.ExecLogFunc = nonconcurrentDB.ExecLogFunc
 	}
 
@@ -1086,58 +978,37 @@ func (app *BaseApp) initDataDB() error {
 func (app *BaseApp) createDaoWithHooks(concurrentDB, nonconcurrentDB dbx.Builder) *daos.Dao {
 	dao := daos.NewMultiDB(concurrentDB, nonconcurrentDB)
 
-	dao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
-		e := new(ModelEvent)
-		e.Dao = eventDao
-		e.Model = m
-
-		return app.OnModelBeforeCreate().Trigger(e, func(e *ModelEvent) error {
-			return action()
-		})
+	dao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
+		return app.OnModelBeforeCreate().Trigger(&ModelEvent{eventDao, m})
 	}
 
-	dao.AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
-		e := new(ModelEvent)
-		e.Dao = eventDao
-		e.Model = m
-
-		return app.OnModelAfterCreate().Trigger(e)
+	dao.AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) {
+		err := app.OnModelAfterCreate().Trigger(&ModelEvent{eventDao, m})
+		if err != nil && app.isDebug {
+			log.Println(err)
+		}
 	}
 
-	dao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
-		e := new(ModelEvent)
-		e.Dao = eventDao
-		e.Model = m
-
-		return app.OnModelBeforeUpdate().Trigger(e, func(e *ModelEvent) error {
-			return action()
-		})
+	dao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
+		return app.OnModelBeforeUpdate().Trigger(&ModelEvent{eventDao, m})
 	}
 
-	dao.AfterUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
-		e := new(ModelEvent)
-		e.Dao = eventDao
-		e.Model = m
-
-		return app.OnModelAfterUpdate().Trigger(e)
+	dao.AfterUpdateFunc = func(eventDao *daos.Dao, m models.Model) {
+		err := app.OnModelAfterUpdate().Trigger(&ModelEvent{eventDao, m})
+		if err != nil && app.isDebug {
+			log.Println(err)
+		}
 	}
 
-	dao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
-		e := new(ModelEvent)
-		e.Dao = eventDao
-		e.Model = m
-
-		return app.OnModelBeforeDelete().Trigger(e, func(e *ModelEvent) error {
-			return action()
-		})
+	dao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
+		return app.OnModelBeforeDelete().Trigger(&ModelEvent{eventDao, m})
 	}
 
-	dao.AfterDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
-		e := new(ModelEvent)
-		e.Dao = eventDao
-		e.Model = m
-
-		return app.OnModelAfterDelete().Trigger(e)
+	dao.AfterDeleteFunc = func(eventDao *daos.Dao, m models.Model) {
+		err := app.OnModelAfterDelete().Trigger(&ModelEvent{eventDao, m})
+		if err != nil && app.isDebug {
+			log.Println(err)
+		}
 	}
 
 	return dao
@@ -1162,147 +1033,22 @@ func (app *BaseApp) registerDefaultHooks() {
 	// try to delete the storage files from deleted Collection, Records, etc. model
 	app.OnModelAfterDelete().Add(func(e *ModelEvent) error {
 		if m, ok := e.Model.(models.FilesManager); ok && m.BaseFilesPath() != "" {
-			// ensure that there is a trailing slash so that the list iterator could start walking from the prefix
-			// (https://github.com/pocketbase/pocketbase/discussions/5246#discussioncomment-10128955)
-			prefix := strings.TrimRight(m.BaseFilesPath(), "/") + "/"
+			prefix := m.BaseFilesPath()
 
 			// run in the background for "optimistic" delete to avoid
 			// blocking the delete transaction
-			routine.FireAndForget(func() {
-				if err := deletePrefix(prefix); err != nil {
-					app.Logger().Error(
-						"Failed to delete storage prefix (non critical error; usually could happen because of S3 api limits)",
-						slog.String("prefix", prefix),
-						slog.String("error", err.Error()),
-					)
-				}
-			})
-		}
-
-		return nil
-	})
-
-	if err := app.initAutobackupHooks(); err != nil {
-		app.Logger().Error("Failed to init auto backup hooks", slog.String("error", err.Error()))
-	}
-
-	registerCachedCollectionsAppHooks(app)
-}
-
-// getLoggerMinLevel returns the logger min level based on the
-// app configurations (dev mode, settings, etc.).
-//
-// If not in dev mode - returns the level from the app settings.
-//
-// If the app is in dev mode it returns -9999 level allowing to print
-// practically all logs to the terminal.
-// In this case DB logs are still filtered but the checks for the min level are done
-// in the BatchOptions.BeforeAddFunc instead of the slog.Handler.Enabled() method.
-func (app *BaseApp) getLoggerMinLevel() slog.Level {
-	var minLevel slog.Level
-
-	if app.IsDev() {
-		minLevel = -9999
-	} else if app.Settings() != nil {
-		minLevel = slog.Level(app.Settings().Logs.MinLevel)
-	}
-
-	return minLevel
-}
-
-func (app *BaseApp) initLogger() error {
-	duration := 3 * time.Second
-	ticker := time.NewTicker(duration)
-	done := make(chan bool)
-
-	handler := logger.NewBatchHandler(logger.BatchOptions{
-		Level:     app.getLoggerMinLevel(),
-		BatchSize: 200,
-		BeforeAddFunc: func(ctx context.Context, log *logger.Log) bool {
-			if app.IsDev() {
-				printLog(log)
-
-				// manually check the log level and skip if necessary
-				if log.Level < slog.Level(app.Settings().Logs.MinLevel) {
-					return false
-				}
-			}
-
-			ticker.Reset(duration)
-
-			return app.Settings().Logs.MaxDays > 0
-		},
-		WriteFunc: func(ctx context.Context, logs []*logger.Log) error {
-			if !app.IsBootstrapped() || app.Settings().Logs.MaxDays == 0 {
-				return nil
-			}
-
-			// write the accumulated logs
-			// (note: based on several local tests there is no significant performance difference between small number of separate write queries vs 1 big INSERT)
-			app.LogsDao().RunInTransaction(func(txDao *daos.Dao) error {
-				model := &models.Log{}
-				for _, l := range logs {
-					model.MarkAsNew()
-					// note: using pseudorandom for a slightly better performance
-					model.Id = security.PseudorandomStringWithAlphabet(models.DefaultIdLength, models.DefaultIdAlphabet)
-					model.Level = int(l.Level)
-					model.Message = l.Message
-					model.Data = l.Data
-					model.Created, _ = types.ParseDateTime(l.Time)
-					model.Updated = model.Created
-
-					if err := txDao.SaveLog(model); err != nil {
-						log.Println("Failed to write log", model, err)
-					}
-				}
-
-				return nil
-			})
-
-			// @todo replace with cron so that it doesn't rely on the logs write
 			//
-			// delete old logs
-			// ---
-			now := time.Now()
-			lastLogsDeletedAt := cast.ToTime(app.Store().Get("lastLogsDeletedAt"))
-			if now.Sub(lastLogsDeletedAt).Hours() >= 6 {
-				deleteErr := app.LogsDao().DeleteOldLogs(now.AddDate(0, 0, -1*app.Settings().Logs.MaxDays))
-				if deleteErr == nil {
-					app.Store().Set("lastLogsDeletedAt", now)
-				} else {
-					log.Println("Logs delete failed", deleteErr)
+			// @todo consider creating a bg process queue so that the
+			// call could be "retried" in case of a failure.
+			routine.FireAndForget(func() {
+				if err := deletePrefix(prefix); err != nil && app.IsDebug() {
+					// non critical error - only log for debug
+					// (usually could happen because of S3 api limits)
+					log.Println(err)
 				}
-			}
-
-			return nil
-		},
-	})
-
-	routine.FireAndForget(func() {
-		ctx := context.Background()
-
-		for {
-			select {
-			case <-done:
-				return
-			case <-ticker.C:
-				handler.WriteAll(ctx)
-			}
+			})
 		}
-	})
-
-	app.logger = slog.New(handler)
-
-	app.OnTerminate().PreAdd(func(e *TerminateEvent) error {
-		// write all remaining logs before ticker.Stop to avoid races with ResetBootstrap user calls
-		handler.WriteAll(context.Background())
-
-		ticker.Stop()
-
-		done <- true
 
 		return nil
 	})
-
-	return nil
 }

core/base_backup.go

@@ -1,377 +0,0 @@
-package core
-
-import (
-	"context"
-	"errors"
-	"fmt"
-	"io"
-	"log/slog"
-	"os"
-	"path/filepath"
-	"runtime"
-	"sort"
-	"time"
-
-	"github.com/pocketbase/pocketbase/daos"
-	"github.com/pocketbase/pocketbase/models"
-	"github.com/pocketbase/pocketbase/tools/archive"
-	"github.com/pocketbase/pocketbase/tools/cron"
-	"github.com/pocketbase/pocketbase/tools/filesystem"
-	"github.com/pocketbase/pocketbase/tools/inflector"
-	"github.com/pocketbase/pocketbase/tools/osutils"
-	"github.com/pocketbase/pocketbase/tools/security"
-)
-
-// Deprecated: Replaced with StoreKeyActiveBackup.
-const CacheKeyActiveBackup string = "@activeBackup"
-
-const StoreKeyActiveBackup string = "@activeBackup"
-
-// CreateBackup creates a new backup of the current app pb_data directory.
-//
-// If name is empty, it will be autogenerated.
-// If backup with the same name exists, the new backup file will replace it.
-//
-// The backup is executed within a transaction, meaning that new writes
-// will be temporary "blocked" until the backup file is generated.
-//
-// To safely perform the backup, it is recommended to have free disk space
-// for at least 2x the size of the pb_data directory.
-//
-// By default backups are stored in pb_data/backups
-// (the backups directory itself is excluded from the generated backup).
-//
-// When using S3 storage for the uploaded collection files, you have to
-// take care manually to backup those since they are not part of the pb_data.
-//
-// Backups can be stored on S3 if it is configured in app.Settings().Backups.
-func (app *BaseApp) CreateBackup(ctx context.Context, name string) error {
-	if app.Store().Has(StoreKeyActiveBackup) {
-		return errors.New("try again later - another backup/restore operation has already been started")
-	}
-
-	if name == "" {
-		name = app.generateBackupName("pb_backup_")
-	}
-
-	app.Store().Set(StoreKeyActiveBackup, name)
-	defer app.Store().Remove(StoreKeyActiveBackup)
-
-	// root dir entries to exclude from the backup generation
-	exclude := []string{LocalBackupsDirName, LocalTempDirName}
-
-	// make sure that the special temp directory exists
-	// note: it needs to be inside the current pb_data to avoid "cross-device link" errors
-	localTempDir := filepath.Join(app.DataDir(), LocalTempDirName)
-	if err := os.MkdirAll(localTempDir, os.ModePerm); err != nil {
-		return fmt.Errorf("failed to create a temp dir: %w", err)
-	}
-
-	// Archive pb_data in a temp directory, exluding the "backups" and the temp dirs.
-	//
-	// Run in transaction to temporary block other writes (transactions uses the NonconcurrentDB connection).
-	// ---
-	tempPath := filepath.Join(localTempDir, "pb_backup_"+security.PseudorandomString(4))
-	createErr := app.Dao().RunInTransaction(func(dataTXDao *daos.Dao) error {
-		return app.LogsDao().RunInTransaction(func(logsTXDao *daos.Dao) error {
-			// run manual checkpoint and truncate the WAL files
-			// (errors are ignored because it is not that important and the PRAGMA may not be supported by the used driver)
-			dataTXDao.DB().NewQuery("PRAGMA wal_checkpoint(TRUNCATE)").Execute()
-			logsTXDao.DB().NewQuery("PRAGMA wal_checkpoint(TRUNCATE)").Execute()
-
-			return archive.Create(app.DataDir(), tempPath, exclude...)
-		})
-	})
-	if createErr != nil {
-		return createErr
-	}
-	defer os.Remove(tempPath)
-
-	// Persist the backup in the backups filesystem.
-	// ---
-	fsys, err := app.NewBackupsFilesystem()
-	if err != nil {
-		return err
-	}
-	defer fsys.Close()
-
-	fsys.SetContext(ctx)
-
-	file, err := filesystem.NewFileFromPath(tempPath)
-	if err != nil {
-		return err
-	}
-	file.OriginalName = name
-	file.Name = file.OriginalName
-
-	if err := fsys.UploadFile(file, file.Name); err != nil {
-		return err
-	}
-
-	return nil
-}
-
-// RestoreBackup restores the backup with the specified name and restarts
-// the current running application process.
-//
-// NB! This feature is experimental and currently is expected to work only on UNIX based systems.
-//
-// To safely perform the restore it is recommended to have free disk space
-// for at least 2x the size of the restored pb_data backup.
-//
-// The performed steps are:
-//
-//  1. Download the backup with the specified name in a temp location
-//     (this is in case of S3; otherwise it creates a temp copy of the zip)
-//
-//  2. Extract the backup in a temp directory inside the app "pb_data"
-//     (eg. "pb_data/.pb_temp_to_delete/pb_restore").
-//
-//  3. Move the current app "pb_data" content (excluding the local backups and the special temp dir)
-//     under another temp sub dir that will be deleted on the next app start up
-//     (eg. "pb_data/.pb_temp_to_delete/old_pb_data").
-//     This is because on some environments it may not be allowed
-//     to delete the currently open "pb_data" files.
-//
-//  4. Move the extracted dir content to the app "pb_data".
-//
-//  5. Restart the app (on successful app bootstap it will also remove the old pb_data).
-//
-// If a failure occure during the restore process the dir changes are reverted.
-// If for whatever reason the revert is not possible, it panics.
-func (app *BaseApp) RestoreBackup(ctx context.Context, name string) error {
-	if runtime.GOOS == "windows" {
-		return errors.New("restore is not supported on windows")
-	}
-
-	if app.Store().Has(StoreKeyActiveBackup) {
-		return errors.New("try again later - another backup/restore operation has already been started")
-	}
-
-	app.Store().Set(StoreKeyActiveBackup, name)
-	defer app.Store().Remove(StoreKeyActiveBackup)
-
-	fsys, err := app.NewBackupsFilesystem()
-	if err != nil {
-		return err
-	}
-	defer fsys.Close()
-
-	fsys.SetContext(ctx)
-
-	// fetch the backup file in a temp location
-	br, err := fsys.GetFile(name)
-	if err != nil {
-		return err
-	}
-	defer br.Close()
-
-	// make sure that the special temp directory exists
-	// note: it needs to be inside the current pb_data to avoid "cross-device link" errors
-	localTempDir := filepath.Join(app.DataDir(), LocalTempDirName)
-	if err := os.MkdirAll(localTempDir, os.ModePerm); err != nil {
-		return fmt.Errorf("failed to create a temp dir: %w", err)
-	}
-
-	// create a temp zip file from the blob.Reader and try to extract it
-	tempZip, err := os.CreateTemp(localTempDir, "pb_restore_zip")
-	if err != nil {
-		return err
-	}
-	defer os.Remove(tempZip.Name())
-
-	if _, err := io.Copy(tempZip, br); err != nil {
-		return err
-	}
-
-	extractedDataDir := filepath.Join(localTempDir, "pb_restore_"+security.PseudorandomString(4))
-	defer os.RemoveAll(extractedDataDir)
-	if err := archive.Extract(tempZip.Name(), extractedDataDir); err != nil {
-		return err
-	}
-
-	// ensure that a database file exists
-	extractedDB := filepath.Join(extractedDataDir, "data.db")
-	if _, err := os.Stat(extractedDB); err != nil {
-		return fmt.Errorf("data.db file is missing or invalid: %w", err)
-	}
-
-	// remove the extracted zip file since we no longer need it
-	// (this is in case the app restarts and the defer calls are not called)
-	if err := os.Remove(tempZip.Name()); err != nil {
-		app.Logger().Debug(
-			"[RestoreBackup] Failed to remove the temp zip backup file",
-			slog.String("file", tempZip.Name()),
-			slog.String("error", err.Error()),
-		)
-	}
-
-	// root dir entries to exclude from the backup restore
-	exclude := []string{LocalBackupsDirName, LocalTempDirName}
-
-	// move the current pb_data content to a special temp location
-	// that will hold the old data between dirs replace
-	// (the temp dir will be automatically removed on the next app start)
-	oldTempDataDir := filepath.Join(localTempDir, "old_pb_data_"+security.PseudorandomString(4))
-	if err := osutils.MoveDirContent(app.DataDir(), oldTempDataDir, exclude...); err != nil {
-		return fmt.Errorf("failed to move the current pb_data content to a temp location: %w", err)
-	}
-
-	// move the extracted archive content to the app's pb_data
-	if err := osutils.MoveDirContent(extractedDataDir, app.DataDir(), exclude...); err != nil {
-		return fmt.Errorf("failed to move the extracted archive content to pb_data: %w", err)
-	}
-
-	revertDataDirChanges := func() error {
-		if err := osutils.MoveDirContent(app.DataDir(), extractedDataDir, exclude...); err != nil {
-			return fmt.Errorf("failed to revert the extracted dir change: %w", err)
-		}
-
-		if err := osutils.MoveDirContent(oldTempDataDir, app.DataDir(), exclude...); err != nil {
-			return fmt.Errorf("failed to revert old pb_data dir change: %w", err)
-		}
-
-		return nil
-	}
-
-	// restart the app
-	if err := app.Restart(); err != nil {
-		if revertErr := revertDataDirChanges(); revertErr != nil {
-			panic(revertErr)
-		}
-
-		return fmt.Errorf("failed to restart the app process: %w", err)
-	}
-
-	return nil
-}
-
-// initAutobackupHooks registers the autobackup app serve hooks.
-func (app *BaseApp) initAutobackupHooks() error {
-	c := cron.New()
-	isServe := false
-
-	loadJob := func() {
-		c.Stop()
-
-		// make sure that app.Settings() is always up to date
-		//
-		// @todo remove with the refactoring as core.App and daos.Dao will be one.
-		if err := app.RefreshSettings(); err != nil {
-			app.Logger().Debug(
-				"[Backup cron] Failed to get the latest app settings",
-				slog.String("error", err.Error()),
-			)
-		}
-
-		rawSchedule := app.Settings().Backups.Cron
-		if rawSchedule == "" || !isServe || !app.IsBootstrapped() {
-			return
-		}
-
-		c.Add("@autobackup", rawSchedule, func() {
-			const autoPrefix = "@auto_pb_backup_"
-
-			name := app.generateBackupName(autoPrefix)
-
-			if err := app.CreateBackup(context.Background(), name); err != nil {
-				app.Logger().Debug(
-					"[Backup cron] Failed to create backup",
-					slog.String("name", name),
-					slog.String("error", err.Error()),
-				)
-			}
-
-			maxKeep := app.Settings().Backups.CronMaxKeep
-
-			if maxKeep == 0 {
-				return // no explicit limit
-			}
-
-			fsys, err := app.NewBackupsFilesystem()
-			if err != nil {
-				app.Logger().Debug(
-					"[Backup cron] Failed to initialize the backup filesystem",
-					slog.String("error", err.Error()),
-				)
-				return
-			}
-			defer fsys.Close()
-
-			files, err := fsys.List(autoPrefix)
-			if err != nil {
-				app.Logger().Debug(
-					"[Backup cron] Failed to list autogenerated backups",
-					slog.String("error", err.Error()),
-				)
-				return
-			}
-
-			if maxKeep >= len(files) {
-				return // nothing to remove
-			}
-
-			// sort desc
-			sort.Slice(files, func(i, j int) bool {
-				return files[i].ModTime.After(files[j].ModTime)
-			})
-
-			// keep only the most recent n auto backup files
-			toRemove := files[maxKeep:]
-
-			for _, f := range toRemove {
-				if err := fsys.Delete(f.Key); err != nil {
-					app.Logger().Debug(
-						"[Backup cron] Failed to remove old autogenerated backup",
-						slog.String("key", f.Key),
-						slog.String("error", err.Error()),
-					)
-				}
-			}
-		})
-
-		// restart the ticker
-		c.Start()
-	}
-
-	// load on app serve
-	app.OnBeforeServe().Add(func(e *ServeEvent) error {
-		isServe = true
-		loadJob()
-		return nil
-	})
-
-	// stop the ticker on app termination
-	app.OnTerminate().Add(func(e *TerminateEvent) error {
-		c.Stop()
-		return nil
-	})
-
-	// reload on app settings change
-	app.OnModelAfterUpdate((&models.Param{}).TableName()).Add(func(e *ModelEvent) error {
-		p := e.Model.(*models.Param)
-		if p == nil || p.Key != models.ParamAppSettings {
-			return nil
-		}
-
-		loadJob()
-
-		return nil
-	})
-
-	return nil
-}
-
-func (app *BaseApp) generateBackupName(prefix string) string {
-	appName := inflector.Snakecase(app.Settings().Meta.AppName)
-	if len(appName) > 50 {
-		appName = appName[:50]
-	}
-
-	return fmt.Sprintf(
-		"%s%s_%s.zip",
-		prefix,
-		appName,
-		time.Now().UTC().Format("20060102150405"),
-	)
-}

core/base_backup_test.go

@@ -1,164 +0,0 @@
-package core_test
-
-import (
-	"context"
-	"fmt"
-	"io/fs"
-	"os"
-	"path/filepath"
-	"strings"
-	"testing"
-
-	"github.com/pocketbase/pocketbase/core"
-	"github.com/pocketbase/pocketbase/tests"
-	"github.com/pocketbase/pocketbase/tools/archive"
-	"github.com/pocketbase/pocketbase/tools/list"
-)
-
-func TestCreateBackup(t *testing.T) {
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	// set some long app name with spaces and special characters
-	app.Settings().Meta.AppName = "test @! " + strings.Repeat("a", 100)
-
-	expectedAppNamePrefix := "test_" + strings.Repeat("a", 45)
-
-	// test pending error
-	app.Store().Set(core.StoreKeyActiveBackup, "")
-	if err := app.CreateBackup(context.Background(), "test.zip"); err == nil {
-		t.Fatal("Expected pending error, got nil")
-	}
-	app.Store().Remove(core.StoreKeyActiveBackup)
-
-	// create with auto generated name
-	if err := app.CreateBackup(context.Background(), ""); err != nil {
-		t.Fatal("Failed to create a backup with autogenerated name")
-	}
-
-	// create with custom name
-	if err := app.CreateBackup(context.Background(), "custom"); err != nil {
-		t.Fatal("Failed to create a backup with custom name")
-	}
-
-	// create new with the same name (aka. replace)
-	if err := app.CreateBackup(context.Background(), "custom"); err != nil {
-		t.Fatal("Failed to create and replace a backup with the same name")
-	}
-
-	backupsDir := filepath.Join(app.DataDir(), core.LocalBackupsDirName)
-
-	entries, err := os.ReadDir(backupsDir)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	expectedFiles := []string{
-		`^pb_backup_` + expectedAppNamePrefix + `_\w+\.zip$`,
-		`^pb_backup_` + expectedAppNamePrefix + `_\w+\.zip.attrs$`,
-		"custom",
-		"custom.attrs",
-	}
-
-	if len(entries) != len(expectedFiles) {
-		names := getEntryNames(entries)
-		t.Fatalf("Expected %d backup files, got %d: \n%v", len(expectedFiles), len(entries), names)
-	}
-
-	for i, entry := range entries {
-		if !list.ExistInSliceWithRegex(entry.Name(), expectedFiles) {
-			t.Fatalf("[%d] Missing backup file %q", i, entry.Name())
-		}
-
-		if strings.HasSuffix(entry.Name(), ".attrs") {
-			continue
-		}
-
-		path := filepath.Join(backupsDir, entry.Name())
-
-		if err := verifyBackupContent(app, path); err != nil {
-			t.Fatalf("[%d] Failed to verify backup content: %v", i, err)
-		}
-	}
-}
-
-func TestRestoreBackup(t *testing.T) {
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	// create a initial test backup to ensure that there are at least 1
-	// backup file and that the generated zip doesn't contain the backups dir
-	if err := app.CreateBackup(context.Background(), "initial"); err != nil {
-		t.Fatal("Failed to create test initial backup")
-	}
-
-	// create test backup
-	if err := app.CreateBackup(context.Background(), "test"); err != nil {
-		t.Fatal("Failed to create test backup")
-	}
-
-	// test pending error
-	app.Store().Set(core.StoreKeyActiveBackup, "")
-	if err := app.RestoreBackup(context.Background(), "test"); err == nil {
-		t.Fatal("Expected pending error, got nil")
-	}
-	app.Store().Remove(core.StoreKeyActiveBackup)
-
-	// missing backup
-	if err := app.RestoreBackup(context.Background(), "missing"); err == nil {
-		t.Fatal("Expected missing error, got nil")
-	}
-}
-
-// -------------------------------------------------------------------
-
-func verifyBackupContent(app core.App, path string) error {
-	dir, err := os.MkdirTemp("", "backup_test")
-	if err != nil {
-		return err
-	}
-	defer os.RemoveAll(dir)
-
-	if err := archive.Extract(path, dir); err != nil {
-		return err
-	}
-
-	expectedRootEntries := []string{
-		"storage",
-		"data.db",
-		"data.db-shm",
-		"data.db-wal",
-		"logs.db",
-		"logs.db-shm",
-		"logs.db-wal",
-		".gitignore",
-	}
-
-	entries, err := os.ReadDir(dir)
-	if err != nil {
-		return err
-	}
-
-	if len(entries) != len(expectedRootEntries) {
-		names := getEntryNames(entries)
-		return fmt.Errorf("Expected %d backup files, got %d: \n%v", len(expectedRootEntries), len(entries), names)
-	}
-
-	for _, entry := range entries {
-		if !list.ExistInSliceWithRegex(entry.Name(), expectedRootEntries) {
-			return fmt.Errorf("Didn't expect %q entry", entry.Name())
-		}
-	}
-
-	return nil
-}
-
-func getEntryNames(entries []fs.DirEntry) []string {
-	names := make([]string, len(entries))
-
-	for i, entry := range entries {
-		names[i] = entry.Name()
-	}
-
-	return names
-}

core/base_settings_test.go

@@ -20,7 +20,7 @@ func TestBaseAppRefreshSettings(t *testing.T) {
 	// check if the new settings are saved in the db
 	app.ResetEventCalls()
 	if err := app.RefreshSettings(); err != nil {
-		t.Fatalf("Failed to refresh the settings after delete: %v", err)
+		t.Fatal("Failed to refresh the settings after delete")
 	}
 	testEventCalls(t, app, map[string]int{
 		"OnModelBeforeCreate": 1,

core/base_test.go

@@ -1,35 +1,20 @@
 package core
 
 import (
-	"context"
-	"database/sql"
-	"fmt"
-	"log/slog"
 	"os"
-	"strings"
 	"testing"
-	"time"
 
-	"github.com/pocketbase/dbx"
-	"github.com/pocketbase/pocketbase/daos"
-	"github.com/pocketbase/pocketbase/migrations"
-	"github.com/pocketbase/pocketbase/migrations/logs"
-	"github.com/pocketbase/pocketbase/models"
-	"github.com/pocketbase/pocketbase/tools/list"
-	"github.com/pocketbase/pocketbase/tools/logger"
 	"github.com/pocketbase/pocketbase/tools/mailer"
-	"github.com/pocketbase/pocketbase/tools/migrate"
-	"github.com/pocketbase/pocketbase/tools/types"
 )
 
 func TestNewBaseApp(t *testing.T) {
 	const testDataDir = "./pb_base_app_test_data_dir/"
 	defer os.RemoveAll(testDataDir)
 
-	app := NewBaseApp(BaseAppConfig{
+	app := NewBaseApp(&BaseAppConfig{
 		DataDir:       testDataDir,
 		EncryptionEnv: "test_env",
-		IsDev:         true,
+		IsDebug:       true,
 	})
 
 	if app.dataDir != testDataDir {
@@ -40,12 +25,12 @@ func TestNewBaseApp(t *testing.T) {
 		t.Fatalf("expected encryptionEnv test_env, got %q", app.dataDir)
 	}
 
-	if !app.isDev {
-		t.Fatalf("expected isDev true, got %v", app.isDev)
+	if !app.isDebug {
+		t.Fatalf("expected isDebug true, got %v", app.isDebug)
 	}
 
-	if app.store == nil {
-		t.Fatal("expected store to be set, got nil")
+	if app.cache == nil {
+		t.Fatal("expected cache to be set, got nil")
 	}
 
 	if app.settings == nil {
@@ -61,9 +46,10 @@ func TestBaseAppBootstrap(t *testing.T) {
 	const testDataDir = "./pb_base_app_test_data_dir/"
 	defer os.RemoveAll(testDataDir)
 
-	app := NewBaseApp(BaseAppConfig{
+	app := NewBaseApp(&BaseAppConfig{
 		DataDir:       testDataDir,
 		EncryptionEnv: "pb_test_env",
+		IsDebug:       false,
 	})
 	defer app.ResetBootstrapState()
 
@@ -71,6 +57,7 @@ func TestBaseAppBootstrap(t *testing.T) {
 		t.Fatal("Didn't expect the application to be bootstrapped.")
 	}
 
+	// bootstrap
 	if err := app.Bootstrap(); err != nil {
 		t.Fatal(err)
 	}
@@ -119,14 +106,6 @@ func TestBaseAppBootstrap(t *testing.T) {
 		t.Fatal("Expected app.settings to be initialized, got nil.")
 	}
 
-	if app.logger == nil {
-		t.Fatal("Expected app.logger to be initialized, got nil.")
-	}
-
-	if _, ok := app.logger.Handler().(*logger.BatchHandler); !ok {
-		t.Fatal("Expected app.logger handler to be initialized.")
-	}
-
 	// reset
 	if err := app.ResetBootstrapState(); err != nil {
 		t.Fatal(err)
@@ -139,16 +118,20 @@ func TestBaseAppBootstrap(t *testing.T) {
 	if app.logsDao != nil {
 		t.Fatalf("Expected app.logsDao to be nil, got %v.", app.logsDao)
 	}
+
+	if app.settings != nil {
+		t.Fatalf("Expected app.settings to be nil, got %v.", app.settings)
+	}
 }
 
 func TestBaseAppGetters(t *testing.T) {
 	const testDataDir = "./pb_base_app_test_data_dir/"
 	defer os.RemoveAll(testDataDir)
 
-	app := NewBaseApp(BaseAppConfig{
+	app := NewBaseApp(&BaseAppConfig{
 		DataDir:       testDataDir,
 		EncryptionEnv: "pb_test_env",
-		IsDev:         true,
+		IsDebug:       false,
 	})
 	defer app.ResetBootstrapState()
 
@@ -180,20 +163,16 @@ func TestBaseAppGetters(t *testing.T) {
 		t.Fatalf("Expected app.EncryptionEnv %v, got %v", app.EncryptionEnv(), app.encryptionEnv)
 	}
 
-	if app.isDev != app.IsDev() {
-		t.Fatalf("Expected app.IsDev %v, got %v", app.IsDev(), app.isDev)
+	if app.isDebug != app.IsDebug() {
+		t.Fatalf("Expected app.IsDebug %v, got %v", app.IsDebug(), app.isDebug)
 	}
 
 	if app.settings != app.Settings() {
 		t.Fatalf("Expected app.Settings %v, got %v", app.Settings(), app.settings)
 	}
 
-	if app.store != app.Store() {
-		t.Fatalf("Expected app.Store %v, got %v", app.Store(), app.store)
-	}
-
-	if app.logger != app.Logger() {
-		t.Fatalf("Expected app.Logger %v, got %v", app.Logger(), app.logger)
+	if app.cache != app.Cache() {
+		t.Fatalf("Expected app.Cache %v, got %v", app.Cache(), app.cache)
 	}
 
 	if app.subscriptionsBroker != app.SubscriptionsBroker() {
@@ -206,11 +185,14 @@ func TestBaseAppGetters(t *testing.T) {
 }
 
 func TestBaseAppNewMailClient(t *testing.T) {
-	app, cleanup, err := initTestBaseApp()
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer cleanup()
+	const testDataDir = "./pb_base_app_test_data_dir/"
+	defer os.RemoveAll(testDataDir)
+
+	app := NewBaseApp(&BaseAppConfig{
+		DataDir:       testDataDir,
+		EncryptionEnv: "pb_test_env",
+		IsDebug:       false,
+	})
 
 	client1 := app.NewMailClient()
 	if val, ok := client1.(*mailer.Sendmail); !ok {
@@ -226,11 +208,14 @@ func TestBaseAppNewMailClient(t *testing.T) {
 }
 
 func TestBaseAppNewFilesystem(t *testing.T) {
-	app, cleanup, err := initTestBaseApp()
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer cleanup()
+	const testDataDir = "./pb_base_app_test_data_dir/"
+	defer os.RemoveAll(testDataDir)
+
+	app := NewBaseApp(&BaseAppConfig{
+		DataDir:       testDataDir,
+		EncryptionEnv: "pb_test_env",
+		IsDebug:       false,
+	})
 
 	// local
 	local, localErr := app.NewFilesystem()
@@ -251,391 +236,3 @@ func TestBaseAppNewFilesystem(t *testing.T) {
 		t.Fatalf("Expected nil s3 filesystem, got %v", s3)
 	}
 }
-
-func TestBaseAppNewBackupsFilesystem(t *testing.T) {
-	app, cleanup, err := initTestBaseApp()
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer cleanup()
-
-	// local
-	local, localErr := app.NewBackupsFilesystem()
-	if localErr != nil {
-		t.Fatal(localErr)
-	}
-	if local == nil {
-		t.Fatal("Expected local backups filesystem instance, got nil")
-	}
-
-	// misconfigured s3
-	app.Settings().Backups.S3.Enabled = true
-	s3, s3Err := app.NewBackupsFilesystem()
-	if s3Err == nil {
-		t.Fatal("Expected S3 error, got nil")
-	}
-	if s3 != nil {
-		t.Fatalf("Expected nil s3 backups filesystem, got %v", s3)
-	}
-}
-
-func TestBaseAppLoggerWrites(t *testing.T) {
-	app, cleanup, err := initTestBaseApp()
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer cleanup()
-
-	const logsThreshold = 200
-
-	totalLogs := func(app App, t *testing.T) int {
-		var total int
-
-		err := app.LogsDao().LogQuery().Select("count(*)").Row(&total)
-		if err != nil {
-			t.Fatalf("Failed to fetch total logs: %v", err)
-		}
-
-		return total
-	}
-
-	t.Run("disabled logs retention", func(t *testing.T) {
-		app.Settings().Logs.MaxDays = 0
-
-		for i := 0; i < logsThreshold+1; i++ {
-			app.Logger().Error("test")
-		}
-
-		if total := totalLogs(app, t); total != 0 {
-			t.Fatalf("Expected no logs, got %d", total)
-		}
-	})
-
-	t.Run("test batch logs writes", func(t *testing.T) {
-		app.Settings().Logs.MaxDays = 1
-
-		for i := 0; i < logsThreshold-1; i++ {
-			app.Logger().Error("test")
-		}
-
-		if total := totalLogs(app, t); total != 0 {
-			t.Fatalf("Expected no logs, got %d", total)
-		}
-
-		// should trigger batch write
-		app.Logger().Error("test")
-
-		// should be added for the next batch write
-		app.Logger().Error("test")
-
-		if total := totalLogs(app, t); total != logsThreshold {
-			t.Fatalf("Expected %d logs, got %d", logsThreshold, total)
-		}
-
-		// wait for ~3 secs to check the timer trigger
-		time.Sleep(3200 * time.Millisecond)
-		if total := totalLogs(app, t); total != logsThreshold+1 {
-			t.Fatalf("Expected %d logs, got %d", logsThreshold+1, total)
-		}
-	})
-
-	t.Run("test batch logs delete", func(t *testing.T) {
-		app.Settings().Logs.MaxDays = 2
-
-		deleteQueries := 0
-
-		// reset
-		app.Store().Set("lastLogsDeletedAt", time.Now())
-		if err := app.LogsDao().DeleteOldLogs(time.Now()); err != nil {
-			t.Fatal(err)
-		}
-
-		db := app.LogsDao().NonconcurrentDB().(*dbx.DB)
-		db.ExecLogFunc = func(ctx context.Context, t time.Duration, sql string, result sql.Result, err error) {
-			if strings.Contains(sql, "DELETE") {
-				deleteQueries++
-			}
-		}
-
-		// trigger batch write (A)
-		expectedLogs := logsThreshold
-		for i := 0; i < expectedLogs; i++ {
-			app.Logger().Error("testA")
-		}
-
-		if total := totalLogs(app, t); total != expectedLogs {
-			t.Fatalf("[batch write A] Expected %d logs, got %d", expectedLogs, total)
-		}
-
-		// mark the A inserted logs as 2-day expired
-		aExpiredDate, err := types.ParseDateTime(time.Now().AddDate(0, 0, -2))
-		if err != nil {
-			t.Fatal(err)
-		}
-		_, err = app.LogsDao().NonconcurrentDB().NewQuery("UPDATE _logs SET created={:date}, updated={:date}").Bind(dbx.Params{
-			"date": aExpiredDate.String(),
-		}).Execute()
-		if err != nil {
-			t.Fatalf("Failed to mock logs timestamp fields: %v", err)
-		}
-
-		// simulate recently deleted logs
-		app.Store().Set("lastLogsDeletedAt", time.Now().Add(-5*time.Hour))
-
-		// trigger batch write (B)
-		for i := 0; i < logsThreshold; i++ {
-			app.Logger().Error("testB")
-		}
-
-		expectedLogs = 2 * logsThreshold
-
-		// note: even though there are expired logs it shouldn't perform the delete operation because of the lastLogsDeledAt time
-		if total := totalLogs(app, t); total != expectedLogs {
-			t.Fatalf("[batch write B] Expected %d logs, got %d", expectedLogs, total)
-		}
-
-		// mark the B inserted logs as 1-day expired to ensure that they will not be deleted
-		bExpiredDate, err := types.ParseDateTime(time.Now().AddDate(0, 0, -1))
-		if err != nil {
-			t.Fatal(err)
-		}
-		_, err = app.LogsDao().NonconcurrentDB().NewQuery("UPDATE _logs SET created={:date}, updated={:date} where message='testB'").Bind(dbx.Params{
-			"date": bExpiredDate.String(),
-		}).Execute()
-		if err != nil {
-			t.Fatalf("Failed to mock logs timestamp fields: %v", err)
-		}
-
-		// should trigger delete on the next batch write
-		app.Store().Set("lastLogsDeletedAt", time.Now().Add(-6*time.Hour))
-
-		// trigger batch write (C)
-		for i := 0; i < logsThreshold; i++ {
-			app.Logger().Error("testC")
-		}
-
-		expectedLogs = 2 * logsThreshold // only B and C logs should remain
-
-		if total := totalLogs(app, t); total != expectedLogs {
-			t.Fatalf("[batch write C] Expected %d logs, got %d", expectedLogs, total)
-		}
-
-		if deleteQueries != 1 {
-			t.Fatalf("Expected DeleteOldLogs to be called %d, got %d", 1, deleteQueries)
-		}
-	})
-}
-
-func TestBaseAppRefreshSettingsLoggerMinLevelEnabled(t *testing.T) {
-	app, cleanup, err := initTestBaseApp()
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer cleanup()
-
-	handler, ok := app.Logger().Handler().(*logger.BatchHandler)
-	if !ok {
-		t.Fatalf("Expected BatchHandler, got %v", app.Logger().Handler())
-	}
-
-	scenarios := []struct {
-		name  string
-		isDev bool
-		level int
-		// level->enabled map
-		expectations map[int]bool
-	}{
-		{
-			"dev mode",
-			true,
-			4,
-			map[int]bool{
-				3: true,
-				4: true,
-				5: true,
-			},
-		},
-		{
-			"nondev mode",
-			false,
-			4,
-			map[int]bool{
-				3: false,
-				4: true,
-				5: true,
-			},
-		},
-	}
-
-	for _, s := range scenarios {
-		t.Run(s.name, func(t *testing.T) {
-			app.isDev = s.isDev
-
-			app.Settings().Logs.MinLevel = s.level
-
-			if err := app.Dao().SaveSettings(app.Settings()); err != nil {
-				t.Fatalf("Failed to save settings: %v", err)
-			}
-
-			if err := app.RefreshSettings(); err != nil {
-				t.Fatalf("Failed to refresh app settings: %v", err)
-			}
-
-			for level, enabled := range s.expectations {
-				if v := handler.Enabled(nil, slog.Level(level)); v != enabled {
-					t.Fatalf("Expected level %d Enabled() to be %v, got %v", level, enabled, v)
-				}
-			}
-		})
-	}
-}
-
-func TestBaseAppLoggerLevelDevPrint(t *testing.T) {
-	app, cleanup, err := initTestBaseApp()
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer cleanup()
-
-	testLogLevel := 4
-
-	app.Settings().Logs.MinLevel = testLogLevel
-	if err := app.Dao().SaveSettings(app.Settings()); err != nil {
-		t.Fatal(err)
-	}
-
-	scenarios := []struct {
-		name            string
-		isDev           bool
-		levels          []int
-		printedLevels   []int
-		persistedLevels []int
-	}{
-		{
-			"dev mode",
-			true,
-			[]int{testLogLevel - 1, testLogLevel, testLogLevel + 1},
-			[]int{testLogLevel - 1, testLogLevel, testLogLevel + 1},
-			[]int{testLogLevel, testLogLevel + 1},
-		},
-		{
-			"nondev mode",
-			false,
-			[]int{testLogLevel - 1, testLogLevel, testLogLevel + 1},
-			[]int{},
-			[]int{testLogLevel, testLogLevel + 1},
-		},
-	}
-
-	for _, s := range scenarios {
-		t.Run(s.name, func(t *testing.T) {
-			var printedLevels []int
-			var persistedLevels []int
-
-			app.isDev = s.isDev
-
-			// trigger slog handler min level refresh
-			if err := app.RefreshSettings(); err != nil {
-				t.Fatal(err)
-			}
-
-			// track printed logs
-			originalPrintLog := printLog
-			defer func() {
-				printLog = originalPrintLog
-			}()
-			printLog = func(log *logger.Log) {
-				printedLevels = append(printedLevels, int(log.Level))
-			}
-
-			// track persisted logs
-			app.LogsDao().AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
-				l, ok := m.(*models.Log)
-				if ok {
-					persistedLevels = append(persistedLevels, l.Level)
-				}
-				return nil
-			}
-
-			// write and persist logs
-			for _, l := range s.levels {
-				app.Logger().Log(nil, slog.Level(l), "test")
-			}
-			handler, ok := app.Logger().Handler().(*logger.BatchHandler)
-			if !ok {
-				t.Fatalf("Expected BatchHandler, got %v", app.Logger().Handler())
-			}
-			if err := handler.WriteAll(nil); err != nil {
-				t.Fatalf("Failed to write all logs: %v", err)
-			}
-
-			// check persisted log levels
-			if len(s.persistedLevels) != len(persistedLevels) {
-				t.Fatalf("Expected persisted levels \n%v\ngot\n%v", s.persistedLevels, persistedLevels)
-			}
-			for _, l := range persistedLevels {
-				if !list.ExistInSlice(l, s.persistedLevels) {
-					t.Fatalf("Missing expected persisted level %v in %v", l, persistedLevels)
-				}
-			}
-
-			// check printed log levels
-			if len(s.printedLevels) != len(printedLevels) {
-				t.Fatalf("Expected printed levels \n%v\ngot\n%v", s.printedLevels, printedLevels)
-			}
-			for _, l := range printedLevels {
-				if !list.ExistInSlice(l, s.printedLevels) {
-					t.Fatalf("Missing expected printed level %v in %v", l, printedLevels)
-				}
-			}
-		})
-	}
-}
-
-// -------------------------------------------------------------------
-
-// note: make sure to call `defer cleanup()` when the app is no longer needed.
-func initTestBaseApp() (app *BaseApp, cleanup func(), err error) {
-	testDataDir, err := os.MkdirTemp("", "test_base_app")
-	if err != nil {
-		return nil, nil, err
-	}
-
-	cleanup = func() {
-		os.RemoveAll(testDataDir)
-	}
-
-	app = NewBaseApp(BaseAppConfig{
-		DataDir: testDataDir,
-	})
-
-	initErr := func() error {
-		if err := app.Bootstrap(); err != nil {
-			return fmt.Errorf("bootstrap error: %w", err)
-		}
-
-		logsRunner, err := migrate.NewRunner(app.LogsDB(), logs.LogsMigrations)
-		if err != nil {
-			return fmt.Errorf("logsRunner error: %w", err)
-		}
-		if _, err := logsRunner.Up(); err != nil {
-			return fmt.Errorf("logsRunner migrations execution error: %w", err)
-		}
-
-		dataRunner, err := migrate.NewRunner(app.DB(), migrations.AppMigrations)
-		if err != nil {
-			return fmt.Errorf("logsRunner error: %w", err)
-		}
-		if _, err := dataRunner.Up(); err != nil {
-			return fmt.Errorf("dataRunner migrations execution error: %w", err)
-		}
-
-		return nil
-	}()
-	if initErr != nil {
-		cleanup()
-		return nil, nil, initErr
-	}
-
-	return app, cleanup, nil
-}

core/collections_cache.go

@@ -1,72 +0,0 @@
-package core
-
-// -------------------------------------------------------------------
-// This is a small optimization ported from the [ongoing refactoring branch](https://github.com/pocketbase/pocketbase/discussions/4355).
-//
-// @todo remove after the refactoring is finalized.
-// -------------------------------------------------------------------
-
-import (
-	"strings"
-
-	"github.com/pocketbase/pocketbase/models"
-)
-
-const storeCachedCollectionsKey = "@cachedCollectionsContext"
-
-func registerCachedCollectionsAppHooks(app App) {
-	collectionsChangeFunc := func(e *ModelEvent) error {
-		if _, ok := e.Model.(*models.Collection); !ok {
-			return nil
-		}
-
-		_ = ReloadCachedCollections(app)
-
-		return nil
-	}
-	app.OnModelAfterCreate().Add(collectionsChangeFunc)
-	app.OnModelAfterUpdate().Add(collectionsChangeFunc)
-	app.OnModelAfterDelete().Add(collectionsChangeFunc)
-	app.OnBeforeServe().Add(func(e *ServeEvent) error {
-		_ = ReloadCachedCollections(e.App)
-		return nil
-	})
-}
-
-func ReloadCachedCollections(app App) error {
-	collections := []*models.Collection{}
-
-	err := app.Dao().CollectionQuery().All(&collections)
-	if err != nil {
-		return err
-	}
-
-	app.Store().Set(storeCachedCollectionsKey, collections)
-
-	return nil
-}
-
-func FindCachedCollectionByNameOrId(app App, nameOrId string) (*models.Collection, error) {
-	// retrieve from the app cache
-	// ---
-	collections, _ := app.Store().Get(storeCachedCollectionsKey).([]*models.Collection)
-	for _, c := range collections {
-		if strings.EqualFold(c.Name, nameOrId) || c.Id == nameOrId {
-			return c, nil
-		}
-	}
-
-	// retrieve from the database
-	// ---
-	found, err := app.Dao().FindCollectionByNameOrId(nameOrId)
-	if err != nil {
-		return nil, err
-	}
-
-	err = ReloadCachedCollections(app)
-	if err != nil {
-		app.Logger().Warn("Failed to reload collections cache", "error", err)
-	}
-
-	return found, nil
-}

core/db.go

@@ -0,0 +1,20 @@
+package core
+
+import (
+	"github.com/pocketbase/dbx"
+)
+
+func initPragmas(db *dbx.DB) error {
+	// note: the busy_timeout pragma must be first because
+	// the connection needs to be set to block on busy before WAL mode
+	// is set in case it hasn't been already set by another connection
+	_, err := db.NewQuery(`
+		PRAGMA busy_timeout       = 10000;
+		PRAGMA journal_mode       = WAL;
+		PRAGMA journal_size_limit = 200000000;
+		PRAGMA synchronous        = NORMAL;
+		PRAGMA foreign_keys       = TRUE;
+	`).Execute()
+
+	return err
+}

core/db_cgo.go

@@ -3,48 +3,20 @@
 package core
 
 import (
-	"database/sql"
-
-	"github.com/mattn/go-sqlite3"
 	"github.com/pocketbase/dbx"
+	_ "github.com/mattn/go-sqlite3"
 )
 
-func init() {
-	// Registers the sqlite3 driver with a ConnectHook so that we can
-	// initialize the default PRAGMAs.
-	//
-	// Note 1: we don't define the PRAGMA as part of the dsn string
-	// because not all pragmas are available.
-	//
-	// Note 2: the busy_timeout pragma must be first because
-	// the connection needs to be set to block on busy before WAL mode
-	// is set in case it hasn't been already set by another connection.
-	sql.Register("pb_sqlite3",
-		&sqlite3.SQLiteDriver{
-			ConnectHook: func(conn *sqlite3.SQLiteConn) error {
-				_, err := conn.Exec(`
-					PRAGMA busy_timeout       = 10000;
-					PRAGMA journal_mode       = WAL;
-					PRAGMA journal_size_limit = 200000000;
-					PRAGMA synchronous        = NORMAL;
-					PRAGMA foreign_keys       = ON;
-					PRAGMA temp_store         = MEMORY;
-					PRAGMA cache_size         = -16000;
-				`, nil)
-
-				return err
-			},
-		},
-	)
-
-	dbx.BuilderFuncMap["pb_sqlite3"] = dbx.BuilderFuncMap["sqlite3"]
-}
-
 func connectDB(dbPath string) (*dbx.DB, error) {
-	db, err := dbx.Open("pb_sqlite3", dbPath)
+	db, err := dbx.Open("sqlite3", dbPath)
 	if err != nil {
 		return nil, err
 	}
 
+	if err := initPragmas(db); err != nil {
+		db.Close()
+		return nil, err
+	}
+
 	return db, nil
 }

core/db_nocgo.go

@@ -8,15 +8,15 @@ import (
 )
 
 func connectDB(dbPath string) (*dbx.DB, error) {
-	// Note: the busy_timeout pragma must be first because
-	// the connection needs to be set to block on busy before WAL mode
-	// is set in case it hasn't been already set by another connection.
-	pragmas := "?_pragma=busy_timeout(10000)&_pragma=journal_mode(WAL)&_pragma=journal_size_limit(200000000)&_pragma=synchronous(NORMAL)&_pragma=foreign_keys(ON)&_pragma=temp_store(MEMORY)&_pragma=cache_size(-16000)"
-
-	db, err := dbx.Open("sqlite", dbPath+pragmas)
+	db, err := dbx.Open("sqlite", dbPath)
 	if err != nil {
 		return nil, err
 	}
 
+	if err := initPragmas(db); err != nil {
+		db.Close()
+		return nil, err
+	}
+
 	return db, nil
 }

core/events.go

@@ -1,44 +1,19 @@
 package core
 
 import (
-	"net/http"
-	"time"
-
-	"github.com/labstack/echo/v5"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/models/schema"
 	"github.com/pocketbase/pocketbase/models/settings"
 	"github.com/pocketbase/pocketbase/tools/auth"
-	"github.com/pocketbase/pocketbase/tools/filesystem"
 	"github.com/pocketbase/pocketbase/tools/hook"
 	"github.com/pocketbase/pocketbase/tools/mailer"
 	"github.com/pocketbase/pocketbase/tools/search"
 	"github.com/pocketbase/pocketbase/tools/subscriptions"
-	"golang.org/x/crypto/acme/autocert"
+
+	"github.com/labstack/echo/v5"
 )
 
-var (
-	_ hook.Tagger = (*BaseModelEvent)(nil)
-	_ hook.Tagger = (*BaseCollectionEvent)(nil)
-)
-
-type BaseModelEvent struct {
-	Model models.Model
-}
-
-func (e *BaseModelEvent) Tags() []string {
-	if e.Model == nil {
-		return nil
-	}
-
-	if r, ok := e.Model.(*models.Record); ok && r.Collection() != nil {
-		return []string{r.Collection().Id, r.Collection().Name}
-	}
-
-	return []string{e.Model.TableName()}
-}
-
 type BaseCollectionEvent struct {
 	Collection *models.Collection
 }
@@ -69,16 +44,9 @@ type BootstrapEvent struct {
 	App App
 }
 
-type TerminateEvent struct {
-	App       App
-	IsRestart bool
-}
-
 type ServeEvent struct {
-	App         App
-	Router      *echo.Echo
-	Server      *http.Server
-	CertManager *autocert.Manager
+	App    App
+	Router *echo.Echo
 }
 
 type ApiErrorEvent struct {
@@ -90,10 +58,23 @@ type ApiErrorEvent struct {
 // Model DAO events data
 // -------------------------------------------------------------------
 
-type ModelEvent struct {
-	BaseModelEvent
+var _ hook.Tagger = (*ModelEvent)(nil)
 
-	Dao *daos.Dao
+type ModelEvent struct {
+	Dao   *daos.Dao
+	Model models.Model
+}
+
+func (e *ModelEvent) Tags() []string {
+	if e.Model == nil {
+		return nil
+	}
+
+	if r, ok := e.Model.(*models.Record); ok && r.Collection() != nil {
+		return []string{r.Collection().Id, r.Collection().Name}
+	}
+
+	return []string{e.Model.TableName()}
 }
 
 // -------------------------------------------------------------------
@@ -123,7 +104,6 @@ type MailerAdminEvent struct {
 type RealtimeConnectEvent struct {
 	HttpContext echo.Context
 	Client      subscriptions.Client
-	IdleTimeout time.Duration
 }
 
 type RealtimeDisconnectEvent struct {
@@ -180,17 +160,15 @@ type RecordViewEvent struct {
 type RecordCreateEvent struct {
 	BaseCollectionEvent
 
-	HttpContext   echo.Context
-	Record        *models.Record
-	UploadedFiles map[string][]*filesystem.File
+	HttpContext echo.Context
+	Record      *models.Record
 }
 
 type RecordUpdateEvent struct {
 	BaseCollectionEvent
 
-	HttpContext   echo.Context
-	Record        *models.Record
-	UploadedFiles map[string][]*filesystem.File
+	HttpContext echo.Context
+	Record      *models.Record
 }
 
 type RecordDeleteEvent struct {
@@ -225,12 +203,9 @@ type RecordAuthWithPasswordEvent struct {
 type RecordAuthWithOAuth2Event struct {
 	BaseCollectionEvent
 
-	HttpContext    echo.Context
-	ProviderName   string
-	ProviderClient auth.Provider
-	Record         *models.Record
-	OAuth2User     *auth.AuthUser
-	IsNewRecord    bool
+	HttpContext echo.Context
+	Record      *models.Record
+	OAuth2User  *auth.AuthUser
 }
 
 type RecordAuthRefreshEvent struct {
@@ -399,13 +374,6 @@ type CollectionsImportEvent struct {
 // File API events data
 // -------------------------------------------------------------------
 
-type FileTokenEvent struct {
-	BaseModelEvent
-
-	HttpContext echo.Context
-	Token       string
-}
-
 type FileDownloadEvent struct {
 	BaseCollectionEvent
 

core/log_printer.go

@@ -1,67 +0,0 @@
-package core
-
-import (
-	"fmt"
-	"log/slog"
-	"strings"
-
-	"github.com/fatih/color"
-	"github.com/pocketbase/pocketbase/tools/logger"
-	"github.com/pocketbase/pocketbase/tools/store"
-	"github.com/spf13/cast"
-)
-
-var cachedColors = store.New[*color.Color](nil)
-
-// getColor returns [color.Color] object and cache it (if not already).
-func getColor(attrs ...color.Attribute) (c *color.Color) {
-	cacheKey := fmt.Sprint(attrs)
-	if c = cachedColors.Get(cacheKey); c == nil {
-		c = color.New(attrs...)
-		cachedColors.Set(cacheKey, c)
-	}
-	return
-}
-
-// printLog prints the provided log to the stderr.
-// (note: defined as variable to overwriting in the tests)
-var printLog = func(log *logger.Log) {
-	var str strings.Builder
-
-	switch log.Level {
-	case slog.LevelDebug:
-		str.WriteString(getColor(color.Bold, color.FgHiBlack).Sprint("DEBUG "))
-		str.WriteString(getColor(color.FgWhite).Sprint(log.Message))
-	case slog.LevelInfo:
-		str.WriteString(getColor(color.Bold, color.FgWhite).Sprint("INFO "))
-		str.WriteString(getColor(color.FgWhite).Sprint(log.Message))
-	case slog.LevelWarn:
-		str.WriteString(getColor(color.Bold, color.FgYellow).Sprint("WARN "))
-		str.WriteString(getColor(color.FgYellow).Sprint(log.Message))
-	case slog.LevelError:
-		str.WriteString(getColor(color.Bold, color.FgRed).Sprint("ERROR "))
-		str.WriteString(getColor(color.FgRed).Sprint(log.Message))
-	default:
-		str.WriteString(getColor(color.Bold, color.FgCyan).Sprintf("[%d] ", log.Level))
-		str.WriteString(getColor(color.FgCyan).Sprint(log.Message))
-	}
-
-	str.WriteString("\n")
-
-	if v, ok := log.Data["type"]; ok && cast.ToString(v) == "request" {
-		padding := 0
-		keys := []string{"error", "details"}
-		for _, k := range keys {
-			if v := log.Data[k]; v != nil {
-				str.WriteString(getColor(color.FgHiRed).Sprintf("%s└─ %v", strings.Repeat(" ", padding), v))
-				str.WriteString("\n")
-				padding += 3
-			}
-		}
-	} else if len(log.Data) > 0 {
-		str.WriteString(getColor(color.FgHiBlack).Sprintf("└─ %v", log.Data))
-		str.WriteString("\n")
-	}
-
-	fmt.Print(str.String())
-}

daos/admin.go

@@ -46,9 +46,9 @@ func (dao *Dao) FindAdminByEmail(email string) (*models.Admin, error) {
 	return model, nil
 }
 
-// FindAdminByToken finds the admin associated with the provided JWT.
+// FindAdminByToken finds the admin associated with the provided JWT token.
 //
-// Returns an error if the JWT is invalid or expired.
+// Returns an error if the JWT token is invalid or expired.
 func (dao *Dao) FindAdminByToken(token string, baseTokenKey string) (*models.Admin, error) {
 	// @todo consider caching the unverified claims
 	unverifiedClaims, err := security.ParseUnverifiedJWT(token)
@@ -59,7 +59,7 @@ func (dao *Dao) FindAdminByToken(token string, baseTokenKey string) (*models.Adm
 	// check required claims
 	id, _ := unverifiedClaims["id"].(string)
 	if id == "" {
-		return nil, errors.New("missing or invalid token claims")
+		return nil, errors.New("Missing or invalid token claims.")
 	}
 
 	admin, err := dao.FindAdminById(id)
@@ -116,7 +116,7 @@ func (dao *Dao) DeleteAdmin(admin *models.Admin) error {
 	}
 
 	if total == 1 {
-		return errors.New("you cannot delete the only existing admin")
+		return errors.New("You cannot delete the only existing admin.")
 	}
 
 	return dao.Delete(admin)

daos/admin_test.go

@@ -8,8 +8,6 @@ import (
 )
 
 func TestAdminQuery(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -22,8 +20,6 @@ func TestAdminQuery(t *testing.T) {
 }
 
 func TestFindAdminById(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -51,8 +47,6 @@ func TestFindAdminById(t *testing.T) {
 }
 
 func TestFindAdminByEmail(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -82,8 +76,6 @@ func TestFindAdminByEmail(t *testing.T) {
 }
 
 func TestFindAdminByToken(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -139,8 +131,6 @@ func TestFindAdminByToken(t *testing.T) {
 }
 
 func TestTotalAdmins(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -165,8 +155,6 @@ func TestTotalAdmins(t *testing.T) {
 }
 
 func TestIsAdminEmailUnique(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -192,8 +180,6 @@ func TestIsAdminEmailUnique(t *testing.T) {
 }
 
 func TestDeleteAdmin(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -239,8 +225,6 @@ func TestDeleteAdmin(t *testing.T) {
 }
 
 func TestSaveAdmin(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 

daos/base.go

@@ -4,54 +4,51 @@
 package daos
 
 import (
+	"context"
 	"errors"
-	"fmt"
+	"strings"
+	"sync"
 	"time"
 
 	"github.com/pocketbase/dbx"
 	"github.com/pocketbase/pocketbase/models"
+	"golang.org/x/sync/semaphore"
 )
 
+const DefaultMaxFailRetries = 5
+
 // New creates a new Dao instance with the provided db builder
 // (for both async and sync db operations).
 func New(db dbx.Builder) *Dao {
 	return NewMultiDB(db, db)
 }
 
-// NewMultiDB creates a new Dao instance with the provided dedicated
+// New creates a new Dao instance with the provided dedicated
 // async and sync db builders.
 func NewMultiDB(concurrentDB, nonconcurrentDB dbx.Builder) *Dao {
 	return &Dao{
-		concurrentDB:      concurrentDB,
-		nonconcurrentDB:   nonconcurrentDB,
-		MaxLockRetries:    8,
-		ModelQueryTimeout: 30 * time.Second,
+		concurrentDB:    concurrentDB,
+		nonconcurrentDB: nonconcurrentDB,
 	}
 }
 
 // Dao handles various db operations.
-//
-// You can think of Dao as a repository and service layer in one.
+// Think of Dao as a repository and service layer in one.
 type Dao struct {
 	// in a transaction both refer to the same *dbx.TX instance
 	concurrentDB    dbx.Builder
 	nonconcurrentDB dbx.Builder
 
-	// MaxLockRetries specifies the default max "database is locked" auto retry attempts.
-	MaxLockRetries int
+	// @todo delete after removing Block and Continue
+	sem *semaphore.Weighted
+	mux sync.RWMutex
 
-	// ModelQueryTimeout is the default max duration of a running ModelQuery().
-	//
-	// This field has no effect if an explicit query context is already specified.
-	ModelQueryTimeout time.Duration
-
-	// write hooks
-	BeforeCreateFunc func(eventDao *Dao, m models.Model, action func() error) error
-	AfterCreateFunc  func(eventDao *Dao, m models.Model) error
-	BeforeUpdateFunc func(eventDao *Dao, m models.Model, action func() error) error
-	AfterUpdateFunc  func(eventDao *Dao, m models.Model) error
-	BeforeDeleteFunc func(eventDao *Dao, m models.Model, action func() error) error
-	AfterDeleteFunc  func(eventDao *Dao, m models.Model) error
+	BeforeCreateFunc func(eventDao *Dao, m models.Model) error
+	AfterCreateFunc  func(eventDao *Dao, m models.Model)
+	BeforeUpdateFunc func(eventDao *Dao, m models.Model) error
+	AfterUpdateFunc  func(eventDao *Dao, m models.Model)
+	BeforeDeleteFunc func(eventDao *Dao, m models.Model) error
+	AfterDeleteFunc  func(eventDao *Dao, m models.Model)
 }
 
 // DB returns the default dao db builder (*dbx.DB or *dbx.TX).
@@ -77,39 +74,55 @@ func (dao *Dao) NonconcurrentDB() dbx.Builder {
 	return dao.nonconcurrentDB
 }
 
-// Clone returns a new Dao with the same configuration options as the current one.
-func (dao *Dao) Clone() *Dao {
-	clone := *dao
+// Deprecated: Will be removed in the next releases. Use [Dao.NonconcurrentDB()] instead.
+//
+// Block acquires a lock and blocks all other go routines that uses
+// the Dao instance until dao.Continue() is called, effectively making
+// the concurrent requests to perform synchronous db operations.
+//
+// This method should be used only as a last resort and as a workaround
+// for the SQLITE_BUSY error when mixing read&write in a transaction.
+//
+// Example:
+//
+// 	func someLongRunningTransaction() error {
+// 		ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
+// 		defer cancel()
+// 		if err := app.Dao().Block(ctx); err != nil {
+// 			return err
+// 		}
+// 		defer app.Dao().Continue()
+//
+// 		return app.Dao().RunInTransaction(func (txDao *daos.Dao) error {
+// 			// some long running read&write transaction...
+// 		})
+// 	}
+func (dao *Dao) Block(ctx context.Context) error {
+	if dao.sem == nil {
+		dao.mux.Lock()
+		dao.sem = semaphore.NewWeighted(1)
+		dao.mux.Unlock()
+	}
 
-	return &clone
+	return dao.sem.Acquire(ctx, 1)
 }
 
-// WithoutHooks returns a new Dao with the same configuration options
-// as the current one, but without create/update/delete hooks.
-func (dao *Dao) WithoutHooks() *Dao {
-	clone := dao.Clone()
+// Deprecated: Will be removed in the next releases. Use [Dao.NonconcurrentDB()] instead.
+//
+// Continue releases the previously acquired Block() lock.
+func (dao *Dao) Continue() {
+	if dao.sem == nil {
+		return
+	}
 
-	clone.BeforeCreateFunc = nil
-	clone.AfterCreateFunc = nil
-	clone.BeforeUpdateFunc = nil
-	clone.AfterUpdateFunc = nil
-	clone.BeforeDeleteFunc = nil
-	clone.AfterDeleteFunc = nil
-
-	return clone
+	dao.sem.Release(1)
 }
 
-// ModelQuery creates a new preconfigured select query with preset
-// SELECT, FROM and other common fields based on the provided model.
+// ModelQuery creates a new query with preset Select and From fields
+// based on the provided model argument.
 func (dao *Dao) ModelQuery(m models.Model) *dbx.SelectQuery {
 	tableName := m.TableName()
-
-	return dao.DB().
-		Select("{{" + tableName + "}}.*").
-		From(tableName).
-		WithBuildHook(func(query *dbx.Query) {
-			query.WithExecHook(execLockRetry(dao.ModelQueryTimeout, dao.MaxLockRetries))
-		})
+	return dao.DB().Select("{{" + tableName + "}}.*").From(tableName)
 }
 
 // FindById finds a single db record with the specified id and
@@ -119,9 +132,9 @@ func (dao *Dao) FindById(m models.Model, id string) error {
 }
 
 type afterCallGroup struct {
-	Model    models.Model
-	EventDao *Dao
 	Action   string
+	EventDao *Dao
+	Model    models.Model
 }
 
 // RunInTransaction wraps fn into a transaction.
@@ -135,8 +148,6 @@ func (dao *Dao) RunInTransaction(fn func(txDao *Dao) error) error {
 		// ---
 		// create a new dao with the same hooks to avoid semaphore deadlock when nesting
 		txDao := New(txOrDB)
-		txDao.MaxLockRetries = dao.MaxLockRetries
-		txDao.ModelQueryTimeout = dao.ModelQueryTimeout
 		txDao.BeforeCreateFunc = dao.BeforeCreateFunc
 		txDao.BeforeUpdateFunc = dao.BeforeUpdateFunc
 		txDao.BeforeDeleteFunc = dao.BeforeDeleteFunc
@@ -152,69 +163,56 @@ func (dao *Dao) RunInTransaction(fn func(txDao *Dao) error) error {
 			txDao := New(tx)
 
 			if dao.BeforeCreateFunc != nil {
-				txDao.BeforeCreateFunc = func(eventDao *Dao, m models.Model, action func() error) error {
-					return dao.BeforeCreateFunc(eventDao, m, action)
+				txDao.BeforeCreateFunc = func(eventDao *Dao, m models.Model) error {
+					return dao.BeforeCreateFunc(eventDao, m)
 				}
 			}
 			if dao.BeforeUpdateFunc != nil {
-				txDao.BeforeUpdateFunc = func(eventDao *Dao, m models.Model, action func() error) error {
-					return dao.BeforeUpdateFunc(eventDao, m, action)
+				txDao.BeforeUpdateFunc = func(eventDao *Dao, m models.Model) error {
+					return dao.BeforeUpdateFunc(eventDao, m)
 				}
 			}
 			if dao.BeforeDeleteFunc != nil {
-				txDao.BeforeDeleteFunc = func(eventDao *Dao, m models.Model, action func() error) error {
-					return dao.BeforeDeleteFunc(eventDao, m, action)
+				txDao.BeforeDeleteFunc = func(eventDao *Dao, m models.Model) error {
+					return dao.BeforeDeleteFunc(eventDao, m)
 				}
 			}
 
 			if dao.AfterCreateFunc != nil {
-				txDao.AfterCreateFunc = func(eventDao *Dao, m models.Model) error {
-					afterCalls = append(afterCalls, afterCallGroup{m, eventDao, "create"})
-					return nil
+				txDao.AfterCreateFunc = func(eventDao *Dao, m models.Model) {
+					afterCalls = append(afterCalls, afterCallGroup{"create", eventDao, m})
 				}
 			}
 			if dao.AfterUpdateFunc != nil {
-				txDao.AfterUpdateFunc = func(eventDao *Dao, m models.Model) error {
-					afterCalls = append(afterCalls, afterCallGroup{m, eventDao, "update"})
-					return nil
+				txDao.AfterUpdateFunc = func(eventDao *Dao, m models.Model) {
+					afterCalls = append(afterCalls, afterCallGroup{"update", eventDao, m})
 				}
 			}
 			if dao.AfterDeleteFunc != nil {
-				txDao.AfterDeleteFunc = func(eventDao *Dao, m models.Model) error {
-					afterCalls = append(afterCalls, afterCallGroup{m, eventDao, "delete"})
-					return nil
+				txDao.AfterDeleteFunc = func(eventDao *Dao, m models.Model) {
+					afterCalls = append(afterCalls, afterCallGroup{"delete", eventDao, m})
 				}
 			}
 
 			return fn(txDao)
 		})
-		if txError != nil {
-			return txError
-		}
 
-		// execute after event calls on successful transaction
-		// (note: using the non-transaction dao to allow following queries in the after hooks)
-		var errs []error
-		for _, call := range afterCalls {
-			var err error
-			switch call.Action {
-			case "create":
-				err = dao.AfterCreateFunc(dao, call.Model)
-			case "update":
-				err = dao.AfterUpdateFunc(dao, call.Model)
-			case "delete":
-				err = dao.AfterDeleteFunc(dao, call.Model)
-			}
-
-			if err != nil {
-				errs = append(errs, err)
+		if txError == nil {
+			// execute after event calls on successful transaction
+			// (note: using the non-transaction dao to allow following queries in the after hooks)
+			for _, call := range afterCalls {
+				switch call.Action {
+				case "create":
+					dao.AfterCreateFunc(dao, call.Model)
+				case "update":
+					dao.AfterUpdateFunc(dao, call.Model)
+				case "delete":
+					dao.AfterDeleteFunc(dao, call.Model)
+				}
 			}
 		}
-		if len(errs) > 0 {
-			return fmt.Errorf("after transaction errors: %w", errors.Join(errs...))
-		}
 
-		return nil
+		return txError
 	}
 
 	return errors.New("failed to start transaction (unknown dao.NonconcurrentDB() instance)")
@@ -226,41 +224,36 @@ func (dao *Dao) Delete(m models.Model) error {
 		return errors.New("ID is not set")
 	}
 
-	return dao.lockRetry(func(retryDao *Dao) error {
-		action := func() error {
-			if err := retryDao.NonconcurrentDB().Model(m).Delete(); err != nil {
+	return dao.failRetry(func(retryDao *Dao) error {
+		if retryDao.BeforeDeleteFunc != nil {
+			if err := retryDao.BeforeDeleteFunc(retryDao, m); err != nil {
 				return err
 			}
-
-			if retryDao.AfterDeleteFunc != nil {
-				retryDao.AfterDeleteFunc(retryDao, m)
-			}
-
-			return nil
 		}
 
-		if retryDao.BeforeDeleteFunc != nil {
-			return retryDao.BeforeDeleteFunc(retryDao, m, action)
+		if err := retryDao.NonconcurrentDB().Model(m).Delete(); err != nil {
+			return err
 		}
 
-		return action()
-	})
+		if retryDao.AfterDeleteFunc != nil {
+			retryDao.AfterDeleteFunc(retryDao, m)
+		}
+
+		return nil
+	}, DefaultMaxFailRetries)
 }
 
-// Save persists the provided model in the database.
-//
-// If m.IsNew() is true, the method will perform a create, otherwise an update.
-// To explicitly mark a model for update you can use m.MarkAsNotNew().
+// Save upserts (update or create if primary key is not set) the provided model.
 func (dao *Dao) Save(m models.Model) error {
 	if m.IsNew() {
-		return dao.lockRetry(func(retryDao *Dao) error {
+		return dao.failRetry(func(retryDao *Dao) error {
 			return retryDao.create(m)
-		})
+		}, DefaultMaxFailRetries)
 	}
 
-	return dao.lockRetry(func(retryDao *Dao) error {
+	return dao.failRetry(func(retryDao *Dao) error {
 		return retryDao.update(m)
-	})
+	}, DefaultMaxFailRetries)
 }
 
 func (dao *Dao) update(m models.Model) error {
@@ -274,35 +267,35 @@ func (dao *Dao) update(m models.Model) error {
 
 	m.RefreshUpdated()
 
-	action := func() error {
-		if v, ok := any(m).(models.ColumnValueMapper); ok {
-			dataMap := v.ColumnValueMap()
-
-			_, err := dao.NonconcurrentDB().Update(
-				m.TableName(),
-				dataMap,
-				dbx.HashExp{"id": m.GetId()},
-			).Execute()
-
-			if err != nil {
-				return err
-			}
-		} else if err := dao.NonconcurrentDB().Model(m).Update(); err != nil {
+	if dao.BeforeUpdateFunc != nil {
+		if err := dao.BeforeUpdateFunc(dao, m); err != nil {
 			return err
 		}
+	}
 
-		if dao.AfterUpdateFunc != nil {
-			return dao.AfterUpdateFunc(dao, m)
+	if v, ok := any(m).(models.ColumnValueMapper); ok {
+		dataMap := v.ColumnValueMap()
+
+		_, err := dao.NonconcurrentDB().Update(
+			m.TableName(),
+			dataMap,
+			dbx.HashExp{"id": m.GetId()},
+		).Execute()
+
+		if err != nil {
+			return err
+		}
+	} else {
+		if err := dao.NonconcurrentDB().Model(m).Update(); err != nil {
+			return err
 		}
-
-		return nil
 	}
 
-	if dao.BeforeUpdateFunc != nil {
-		return dao.BeforeUpdateFunc(dao, m, action)
+	if dao.AfterUpdateFunc != nil {
+		dao.AfterUpdateFunc(dao, m)
 	}
 
-	return action()
+	return nil
 }
 
 func (dao *Dao) create(m models.Model) error {
@@ -322,51 +315,64 @@ func (dao *Dao) create(m models.Model) error {
 		m.RefreshUpdated()
 	}
 
-	action := func() error {
-		if v, ok := any(m).(models.ColumnValueMapper); ok {
-			dataMap := v.ColumnValueMap()
-			if _, ok := dataMap["id"]; !ok {
-				dataMap["id"] = m.GetId()
-			}
-
-			_, err := dao.NonconcurrentDB().Insert(m.TableName(), dataMap).Execute()
-			if err != nil {
-				return err
-			}
-		} else if err := dao.NonconcurrentDB().Model(m).Insert(); err != nil {
+	if dao.BeforeCreateFunc != nil {
+		if err := dao.BeforeCreateFunc(dao, m); err != nil {
 			return err
 		}
+	}
 
-		// clears the "new" model flag
-		m.MarkAsNotNew()
-
-		if dao.AfterCreateFunc != nil {
-			return dao.AfterCreateFunc(dao, m)
+	if v, ok := any(m).(models.ColumnValueMapper); ok {
+		dataMap := v.ColumnValueMap()
+		if _, ok := dataMap["id"]; !ok {
+			dataMap["id"] = m.GetId()
 		}
 
-		return nil
+		_, err := dao.NonconcurrentDB().Insert(m.TableName(), dataMap).Execute()
+		if err != nil {
+			return err
+		}
+	} else {
+		if err := dao.NonconcurrentDB().Model(m).Insert(); err != nil {
+			return err
+		}
 	}
 
-	if dao.BeforeCreateFunc != nil {
-		return dao.BeforeCreateFunc(dao, m, action)
+	// clears the "new" model flag
+	m.MarkAsNotNew()
+
+	if dao.AfterCreateFunc != nil {
+		dao.AfterCreateFunc(dao, m)
 	}
 
-	return action()
+	return nil
 }
 
-func (dao *Dao) lockRetry(op func(retryDao *Dao) error) error {
+func (dao *Dao) failRetry(op func(retryDao *Dao) error, maxRetries int) error {
 	retryDao := dao
+	attempts := 1
 
-	return baseLockRetry(func(attempt int) error {
-		if attempt == 2 {
-			// assign new Dao without the before hooks to avoid triggering
-			// the already fired before callbacks multiple times
-			retryDao = NewMultiDB(dao.concurrentDB, dao.nonconcurrentDB)
-			retryDao.AfterCreateFunc = dao.AfterCreateFunc
-			retryDao.AfterUpdateFunc = dao.AfterUpdateFunc
-			retryDao.AfterDeleteFunc = dao.AfterDeleteFunc
-		}
+Retry:
+	if attempts == 2 {
+		// assign new Dao without the before hooks to avoid triggering
+		// the already fired before callbacks multiple times
+		retryDao = NewMultiDB(dao.concurrentDB, dao.nonconcurrentDB)
+		retryDao.AfterCreateFunc = dao.AfterCreateFunc
+		retryDao.AfterUpdateFunc = dao.AfterUpdateFunc
+		retryDao.AfterDeleteFunc = dao.AfterDeleteFunc
+	}
 
-		return op(retryDao)
-	}, dao.MaxLockRetries)
+	// execute
+	err := op(retryDao)
+
+	if err != nil &&
+		attempts < maxRetries &&
+		// note: we are checking the err message so that we can handle both the cgo and noncgo errors
+		strings.Contains(err.Error(), "database is locked") {
+		// wait and retry
+		time.Sleep(time.Duration(200*attempts) * time.Millisecond)
+		attempts++
+		goto Retry
+	}
+
+	return err
 }

daos/base_retry.go

@@ -1,65 +0,0 @@
-package daos
-
-import (
-	"context"
-	"database/sql"
-	"errors"
-	"fmt"
-	"strings"
-	"time"
-
-	"github.com/pocketbase/dbx"
-)
-
-// default retries intervals (in ms)
-var defaultRetryIntervals = []int{100, 250, 350, 500, 700, 1000}
-
-func execLockRetry(timeout time.Duration, maxRetries int) dbx.ExecHookFunc {
-	return func(q *dbx.Query, op func() error) error {
-		if q.Context() == nil {
-			cancelCtx, cancel := context.WithTimeout(context.Background(), timeout)
-			defer func() {
-				cancel()
-				//nolint:staticcheck
-				q.WithContext(nil) // reset
-			}()
-			q.WithContext(cancelCtx)
-		}
-
-		execErr := baseLockRetry(func(attempt int) error {
-			return op()
-		}, maxRetries)
-		if execErr != nil && !errors.Is(execErr, sql.ErrNoRows) {
-			execErr = fmt.Errorf("%w; failed query: %s", execErr, q.SQL())
-		}
-
-		return execErr
-	}
-}
-
-func baseLockRetry(op func(attempt int) error, maxRetries int) error {
-	attempt := 1
-
-Retry:
-	err := op(attempt)
-
-	if err != nil &&
-		attempt <= maxRetries &&
-		// we are checking the err message to handle both the cgo and noncgo errors
-		strings.Contains(err.Error(), "database is locked") {
-		// wait and retry
-		time.Sleep(getDefaultRetryInterval(attempt))
-		attempt++
-		goto Retry
-	}
-
-	return err
-}
-
-func getDefaultRetryInterval(attempt int) time.Duration {
-	if attempt < 0 || attempt > len(defaultRetryIntervals)-1 {
-		return time.Duration(defaultRetryIntervals[len(defaultRetryIntervals)-1]) * time.Millisecond
-	}
-
-	return time.Duration(defaultRetryIntervals[attempt]) * time.Millisecond
-}

daos/base_retry_test.go

@@ -1,64 +0,0 @@
-package daos
-
-import (
-	"errors"
-	"testing"
-)
-
-func TestGetDefaultRetryInterval(t *testing.T) {
-	t.Parallel()
-
-	if i := getDefaultRetryInterval(-1); i.Milliseconds() != 1000 {
-		t.Fatalf("Expected 1000ms, got %v", i)
-	}
-
-	if i := getDefaultRetryInterval(999); i.Milliseconds() != 1000 {
-		t.Fatalf("Expected 1000ms, got %v", i)
-	}
-
-	if i := getDefaultRetryInterval(3); i.Milliseconds() != 500 {
-		t.Fatalf("Expected 500ms, got %v", i)
-	}
-}
-
-func TestBaseLockRetry(t *testing.T) {
-	t.Parallel()
-
-	scenarios := []struct {
-		err              error
-		failUntilAttempt int
-		expectedAttempts int
-	}{
-		{nil, 3, 1},
-		{errors.New("test"), 3, 1},
-		{errors.New("database is locked"), 3, 3},
-	}
-
-	for i, s := range scenarios {
-		lastAttempt := 0
-
-		err := baseLockRetry(func(attempt int) error {
-			lastAttempt = attempt
-
-			if attempt < s.failUntilAttempt {
-				return s.err
-			}
-
-			return nil
-		}, s.failUntilAttempt+2)
-
-		if lastAttempt != s.expectedAttempts {
-			t.Errorf("[%d] Expected lastAttempt to be %d, got %d", i, s.expectedAttempts, lastAttempt)
-		}
-
-		if s.failUntilAttempt == s.expectedAttempts && err != nil {
-			t.Errorf("[%d] Expected nil, got err %v", i, err)
-			continue
-		}
-
-		if s.failUntilAttempt != s.expectedAttempts && s.err != nil && err == nil {
-			t.Errorf("[%d] Expected error %q, got nil", i, s.err)
-			continue
-		}
-	}
-}

daos/base_test.go

@@ -3,7 +3,6 @@ package daos_test
 import (
 	"errors"
 	"testing"
-	"time"
 
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/models"
@@ -40,161 +39,6 @@ func TestNewMultiDB(t *testing.T) {
 	}
 }
 
-func TestDaoClone(t *testing.T) {
-	testApp, _ := tests.NewTestApp()
-	defer testApp.Cleanup()
-
-	hookCalls := map[string]int{}
-
-	dao := daos.NewMultiDB(testApp.Dao().ConcurrentDB(), testApp.Dao().NonconcurrentDB())
-	dao.MaxLockRetries = 1
-	dao.ModelQueryTimeout = 2
-	dao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
-		hookCalls["BeforeDeleteFunc"]++
-		return action()
-	}
-	dao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
-		hookCalls["BeforeUpdateFunc"]++
-		return action()
-	}
-	dao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
-		hookCalls["BeforeCreateFunc"]++
-		return action()
-	}
-	dao.AfterDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
-		hookCalls["AfterDeleteFunc"]++
-		return nil
-	}
-	dao.AfterUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
-		hookCalls["AfterUpdateFunc"]++
-		return nil
-	}
-	dao.AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
-		hookCalls["AfterCreateFunc"]++
-		return nil
-	}
-
-	clone := dao.Clone()
-	clone.MaxLockRetries = 3
-	clone.ModelQueryTimeout = 4
-	clone.AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
-		hookCalls["NewAfterCreateFunc"]++
-		return nil
-	}
-
-	if dao.MaxLockRetries == clone.MaxLockRetries {
-		t.Fatal("Expected different MaxLockRetries")
-	}
-
-	if dao.ModelQueryTimeout == clone.ModelQueryTimeout {
-		t.Fatal("Expected different ModelQueryTimeout")
-	}
-
-	emptyAction := func() error { return nil }
-
-	// trigger hooks
-	dao.BeforeDeleteFunc(nil, nil, emptyAction)
-	dao.BeforeUpdateFunc(nil, nil, emptyAction)
-	dao.BeforeCreateFunc(nil, nil, emptyAction)
-	dao.AfterDeleteFunc(nil, nil)
-	dao.AfterUpdateFunc(nil, nil)
-	dao.AfterCreateFunc(nil, nil)
-	clone.BeforeDeleteFunc(nil, nil, emptyAction)
-	clone.BeforeUpdateFunc(nil, nil, emptyAction)
-	clone.BeforeCreateFunc(nil, nil, emptyAction)
-	clone.AfterDeleteFunc(nil, nil)
-	clone.AfterUpdateFunc(nil, nil)
-	clone.AfterCreateFunc(nil, nil)
-
-	expectations := []struct {
-		hook  string
-		total int
-	}{
-		{"BeforeDeleteFunc", 2},
-		{"BeforeUpdateFunc", 2},
-		{"BeforeCreateFunc", 2},
-		{"AfterDeleteFunc", 2},
-		{"AfterUpdateFunc", 2},
-		{"AfterCreateFunc", 1},
-		{"NewAfterCreateFunc", 1},
-	}
-
-	for _, e := range expectations {
-		if hookCalls[e.hook] != e.total {
-			t.Errorf("Expected %s to be caleed %d", e.hook, e.total)
-		}
-	}
-}
-
-func TestDaoWithoutHooks(t *testing.T) {
-	testApp, _ := tests.NewTestApp()
-	defer testApp.Cleanup()
-
-	hookCalls := map[string]int{}
-
-	dao := daos.NewMultiDB(testApp.Dao().ConcurrentDB(), testApp.Dao().NonconcurrentDB())
-	dao.MaxLockRetries = 1
-	dao.ModelQueryTimeout = 2
-	dao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
-		hookCalls["BeforeDeleteFunc"]++
-		return action()
-	}
-	dao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
-		hookCalls["BeforeUpdateFunc"]++
-		return action()
-	}
-	dao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
-		hookCalls["BeforeCreateFunc"]++
-		return action()
-	}
-	dao.AfterDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
-		hookCalls["AfterDeleteFunc"]++
-		return nil
-	}
-	dao.AfterUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
-		hookCalls["AfterUpdateFunc"]++
-		return nil
-	}
-	dao.AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
-		hookCalls["AfterCreateFunc"]++
-		return nil
-	}
-
-	new := dao.WithoutHooks()
-
-	if new.MaxLockRetries != dao.MaxLockRetries {
-		t.Fatalf("Expected MaxLockRetries %d, got %d", new.Clone().MaxLockRetries, dao.MaxLockRetries)
-	}
-
-	if new.ModelQueryTimeout != dao.ModelQueryTimeout {
-		t.Fatalf("Expected ModelQueryTimeout %d, got %d", new.Clone().ModelQueryTimeout, dao.ModelQueryTimeout)
-	}
-
-	if new.BeforeDeleteFunc != nil {
-		t.Fatal("Expected BeforeDeleteFunc to be nil")
-	}
-
-	if new.BeforeUpdateFunc != nil {
-		t.Fatal("Expected BeforeUpdateFunc to be nil")
-	}
-
-	if new.BeforeCreateFunc != nil {
-		t.Fatal("Expected BeforeCreateFunc to be nil")
-	}
-
-	if new.AfterDeleteFunc != nil {
-		t.Fatal("Expected AfterDeleteFunc to be nil")
-	}
-
-	if new.AfterUpdateFunc != nil {
-		t.Fatal("Expected AfterUpdateFunc to be nil")
-	}
-
-	if new.AfterCreateFunc != nil {
-		t.Fatal("Expected AfterCreateFunc to be nil")
-	}
-}
-
 func TestDaoModelQuery(t *testing.T) {
 	testApp, _ := tests.NewTestApp()
 	defer testApp.Cleanup()
@@ -227,24 +71,6 @@ func TestDaoModelQuery(t *testing.T) {
 	}
 }
 
-func TestDaoModelQueryCancellation(t *testing.T) {
-	testApp, _ := tests.NewTestApp()
-	defer testApp.Cleanup()
-
-	dao := daos.New(testApp.DB())
-
-	m := &models.Admin{}
-
-	if err := dao.ModelQuery(m).One(m); err != nil {
-		t.Fatalf("Failed to execute control query: %v", err)
-	}
-
-	dao.ModelQueryTimeout = 0 * time.Millisecond
-	if err := dao.ModelQuery(m).One(m); err == nil {
-		t.Fatal("Expected to be cancelled, got nil")
-	}
-}
-
 func TestDaoFindById(t *testing.T) {
 	testApp, _ := tests.NewTestApp()
 	defer testApp.Cleanup()
@@ -490,13 +316,12 @@ func TestDaoRetryCreate(t *testing.T) {
 	retryBeforeCreateHookCalls := 0
 	retryAfterCreateHookCalls := 0
 	retryDao := daos.New(testApp.DB())
-	retryDao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	retryDao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
 		retryBeforeCreateHookCalls++
 		return errors.New("database is locked")
 	}
-	retryDao.AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
+	retryDao.AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) {
 		retryAfterCreateHookCalls++
-		return nil
 	}
 
 	model := &models.Admin{Email: "new@example.com"}
@@ -517,7 +342,7 @@ func TestDaoRetryCreate(t *testing.T) {
 	// with non-locking error
 	retryBeforeCreateHookCalls = 0
 	retryAfterCreateHookCalls = 0
-	retryDao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	retryDao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
 		retryBeforeCreateHookCalls++
 		return errors.New("non-locking error")
 	}
@@ -549,13 +374,12 @@ func TestDaoRetryUpdate(t *testing.T) {
 	retryBeforeUpdateHookCalls := 0
 	retryAfterUpdateHookCalls := 0
 	retryDao := daos.New(testApp.DB())
-	retryDao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	retryDao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
 		retryBeforeUpdateHookCalls++
 		return errors.New("database is locked")
 	}
-	retryDao.AfterUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
+	retryDao.AfterUpdateFunc = func(eventDao *daos.Dao, m models.Model) {
 		retryAfterUpdateHookCalls++
-		return nil
 	}
 
 	if err := retryDao.Save(model); err != nil {
@@ -575,7 +399,7 @@ func TestDaoRetryUpdate(t *testing.T) {
 	// with non-locking error
 	retryBeforeUpdateHookCalls = 0
 	retryAfterUpdateHookCalls = 0
-	retryDao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	retryDao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
 		retryBeforeUpdateHookCalls++
 		return errors.New("non-locking error")
 	}
@@ -601,13 +425,12 @@ func TestDaoRetryDelete(t *testing.T) {
 	retryBeforeDeleteHookCalls := 0
 	retryAfterDeleteHookCalls := 0
 	retryDao := daos.New(testApp.DB())
-	retryDao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	retryDao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
 		retryBeforeDeleteHookCalls++
 		return errors.New("database is locked")
 	}
-	retryDao.AfterDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
+	retryDao.AfterDeleteFunc = func(eventDao *daos.Dao, m models.Model) {
 		retryAfterDeleteHookCalls++
-		return nil
 	}
 
 	model, _ := retryDao.FindAdminByEmail("test@example.com")
@@ -628,7 +451,7 @@ func TestDaoRetryDelete(t *testing.T) {
 	// with non-locking error
 	retryBeforeDeleteHookCalls = 0
 	retryAfterDeleteHookCalls = 0
-	retryDao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	retryDao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
 		retryBeforeDeleteHookCalls++
 		return errors.New("non-locking error")
 	}
@@ -655,13 +478,13 @@ func TestDaoBeforeHooksError(t *testing.T) {
 
 	baseDao := testApp.Dao()
 
-	baseDao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	baseDao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
 		return errors.New("before_create")
 	}
-	baseDao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	baseDao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
 		return errors.New("before_update")
 	}
-	baseDao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	baseDao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
 		return errors.New("before_delete")
 	}
 
@@ -700,30 +523,27 @@ func TestDaoTransactionHooksCallsOnFailure(t *testing.T) {
 
 	baseDao := testApp.Dao()
 
-	baseDao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	baseDao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
 		beforeCreateFuncCalls++
-		return action()
+		return nil
 	}
-	baseDao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	baseDao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
 		beforeUpdateFuncCalls++
-		return action()
+		return nil
 	}
-	baseDao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	baseDao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
 		beforeDeleteFuncCalls++
-		return action()
+		return nil
 	}
 
-	baseDao.AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
+	baseDao.AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) {
 		afterCreateFuncCalls++
-		return nil
 	}
-	baseDao.AfterUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
+	baseDao.AfterUpdateFunc = func(eventDao *daos.Dao, m models.Model) {
 		afterUpdateFuncCalls++
-		return nil
 	}
-	baseDao.AfterDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
+	baseDao.AfterDeleteFunc = func(eventDao *daos.Dao, m models.Model) {
 		afterDeleteFuncCalls++
-		return nil
 	}
 
 	existingModel, _ := testApp.Dao().FindAdminByEmail("test@example.com")
@@ -791,30 +611,27 @@ func TestDaoTransactionHooksCallsOnSuccess(t *testing.T) {
 
 	baseDao := testApp.Dao()
 
-	baseDao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	baseDao.BeforeCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
 		beforeCreateFuncCalls++
-		return action()
+		return nil
 	}
-	baseDao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	baseDao.BeforeUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
 		beforeUpdateFuncCalls++
-		return action()
+		return nil
 	}
-	baseDao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model, action func() error) error {
+	baseDao.BeforeDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
 		beforeDeleteFuncCalls++
-		return action()
+		return nil
 	}
 
-	baseDao.AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) error {
+	baseDao.AfterCreateFunc = func(eventDao *daos.Dao, m models.Model) {
 		afterCreateFuncCalls++
-		return nil
 	}
-	baseDao.AfterUpdateFunc = func(eventDao *daos.Dao, m models.Model) error {
+	baseDao.AfterUpdateFunc = func(eventDao *daos.Dao, m models.Model) {
 		afterUpdateFuncCalls++
-		return nil
 	}
-	baseDao.AfterDeleteFunc = func(eventDao *daos.Dao, m models.Model) error {
+	baseDao.AfterDeleteFunc = func(eventDao *daos.Dao, m models.Model) {
 		afterDeleteFuncCalls++
-		return nil
 	}
 
 	existingModel, _ := testApp.Dao().FindAdminByEmail("test@example.com")

daos/collection.go

@@ -1,8 +1,6 @@
 package daos
 
 import (
-	"bytes"
-	"encoding/json"
 	"errors"
 	"fmt"
 	"strings"
@@ -121,7 +119,7 @@ func (dao *Dao) FindCollectionReferences(collection *models.Collection, excludeI
 // - is referenced as part of a relation field in another collection
 func (dao *Dao) DeleteCollection(collection *models.Collection) error {
 	if collection.System {
-		return fmt.Errorf("system collection %q cannot be deleted", collection.Name)
+		return fmt.Errorf("System collection %q cannot be deleted.", collection.Name)
 	}
 
 	// ensure that there aren't any existing references.
@@ -131,39 +129,21 @@ func (dao *Dao) DeleteCollection(collection *models.Collection) error {
 		return err
 	}
 	if total := len(result); total > 0 {
-		names := make([]string, 0, len(result))
-		for ref := range result {
-			names = append(names, ref.Name)
-		}
-		return fmt.Errorf("the collection %q has external relation field references (%s)", collection.Name, strings.Join(names, ", "))
+		return fmt.Errorf("The collection %q has external relation field references (%d).", collection.Name, total)
 	}
 
 	return dao.RunInTransaction(func(txDao *Dao) error {
-		// delete the related view or records table
-		if collection.IsView() {
-			if err := txDao.DeleteView(collection.Name); err != nil {
-				return err
-			}
-		} else {
-			if err := txDao.DeleteTable(collection.Name); err != nil {
-				return err
-			}
-		}
-
-		// trigger views resave to check for dependencies
-		if err := txDao.resaveViewsWithChangedSchema(collection.Id); err != nil {
-			return fmt.Errorf("the collection has a view dependency - %w", err)
+		// delete the related records table
+		if err := txDao.DeleteTable(collection.Name); err != nil {
+			return err
 		}
 
 		return txDao.Delete(collection)
 	})
 }
 
-// SaveCollection persists the provided Collection model and updates
+// SaveCollection upserts the provided Collection model and updates
 // its related records table schema.
-//
-// If collection.IsNew() is true, the method will perform a create, otherwise an update.
-// To explicitly mark a collection for update you can use collection.MarkAsNotNew().
 func (dao *Dao) SaveCollection(collection *models.Collection) error {
 	var oldCollection *models.Collection
 
@@ -177,41 +157,20 @@ func (dao *Dao) SaveCollection(collection *models.Collection) error {
 		}
 	}
 
-	txErr := dao.RunInTransaction(func(txDao *Dao) error {
+	return dao.RunInTransaction(func(txDao *Dao) error {
 		// set default collection type
 		if collection.Type == "" {
 			collection.Type = models.CollectionTypeBase
 		}
 
-		switch collection.Type {
-		case models.CollectionTypeView:
-			if err := txDao.saveViewCollection(collection, oldCollection); err != nil {
-				return err
-			}
-		default:
-			// persist the collection model
-			if err := txDao.Save(collection); err != nil {
-				return err
-			}
-
-			// sync the changes with the related records table
-			if err := txDao.SyncRecordTableSchema(collection, oldCollection); err != nil {
-				return err
-			}
+		// persist the collection model
+		if err := txDao.Save(collection); err != nil {
+			return err
 		}
 
-		return nil
+		// sync the changes with the related records table
+		return txDao.SyncRecordTableSchema(collection, oldCollection)
 	})
-
-	if txErr != nil {
-		return txErr
-	}
-
-	// trigger an update for all views with changed schema as a result of the current collection save
-	// (ignoring view errors to allow users to update the query from the UI)
-	dao.resaveViewsWithChangedSchema(collection.Id)
-
-	return nil
 }
 
 // ImportCollections imports the provided collections list within a single transaction.
@@ -224,15 +183,15 @@ func (dao *Dao) SaveCollection(collection *models.Collection) error {
 func (dao *Dao) ImportCollections(
 	importedCollections []*models.Collection,
 	deleteMissing bool,
-	afterSync func(txDao *Dao, mappedImported, mappedExisting map[string]*models.Collection) error,
+	beforeRecordsSync func(txDao *Dao, mappedImported, mappedExisting map[string]*models.Collection) error,
 ) error {
 	if len(importedCollections) == 0 {
-		return errors.New("no collections to import")
+		return errors.New("No collections to import")
 	}
 
 	return dao.RunInTransaction(func(txDao *Dao) error {
 		existingCollections := []*models.Collection{}
-		if err := txDao.CollectionQuery().OrderBy("updated ASC").All(&existingCollections); err != nil {
+		if err := txDao.CollectionQuery().OrderBy("created ASC").All(&existingCollections); err != nil {
 			return err
 		}
 		mappedExisting := make(map[string]*models.Collection, len(existingCollections))
@@ -263,11 +222,11 @@ func (dao *Dao) ImportCollections(
 
 				// extend existing schema
 				if !deleteMissing {
-					schemaClone, _ := existing.Schema.Clone()
+					schema, _ := existing.Schema.Clone()
 					for _, f := range imported.Schema.Fields() {
-						schemaClone.AddField(f) // add or replace
+						schema.AddField(f) // add or replace
 					}
-					imported.Schema = *schemaClone
+					imported.Schema = *schema
 				}
 			} else {
 				imported.MarkAsNew()
@@ -285,18 +244,7 @@ func (dao *Dao) ImportCollections(
 				}
 
 				if existing.System {
-					return fmt.Errorf("system collection %q cannot be deleted", existing.Name)
-				}
-
-				// delete the related records table or view
-				if existing.IsView() {
-					if err := txDao.DeleteView(existing.Name); err != nil {
-						return err
-					}
-				} else {
-					if err := txDao.DeleteTable(existing.Name); err != nil {
-						return err
-					}
+					return fmt.Errorf("System collection %q cannot be deleted.", existing.Name)
 				}
 
 				// delete the collection
@@ -313,188 +261,33 @@ func (dao *Dao) ImportCollections(
 			}
 		}
 
-		// sync record tables
-		for _, imported := range importedCollections {
-			if imported.IsView() {
-				continue
+		if beforeRecordsSync != nil {
+			if err := beforeRecordsSync(txDao, mappedImported, mappedExisting); err != nil {
+				return err
 			}
+		}
 
+		// delete the record tables of the deleted collections
+		if deleteMissing {
+			for _, existing := range existingCollections {
+				if mappedImported[existing.GetId()] != nil {
+					continue // exist
+				}
+
+				if err := txDao.DeleteTable(existing.Name); err != nil {
+					return err
+				}
+			}
+		}
+
+		// sync the upserted collections with the related records table
+		for _, imported := range importedCollections {
 			existing := mappedExisting[imported.GetId()]
-
 			if err := txDao.SyncRecordTableSchema(imported, existing); err != nil {
 				return err
 			}
 		}
 
-		// sync views
-		for _, imported := range importedCollections {
-			if !imported.IsView() {
-				continue
-			}
-
-			existing := mappedExisting[imported.GetId()]
-
-			if err := txDao.saveViewCollection(imported, existing); err != nil {
-				return err
-			}
-		}
-
-		if afterSync != nil {
-			if err := afterSync(txDao, mappedImported, mappedExisting); err != nil {
-				return err
-			}
-		}
-
-		return nil
-	})
-}
-
-// saveViewCollection persists the provided View collection changes:
-//   - deletes the old related SQL view (if any)
-//   - creates a new SQL view with the latest newCollection.Options.Query
-//   - generates a new schema based on newCollection.Options.Query
-//   - updates newCollection.Schema based on the generated view table info and query
-//   - saves the newCollection
-//
-// This method returns an error if newCollection is not a "view".
-func (dao *Dao) saveViewCollection(newCollection, oldCollection *models.Collection) error {
-	if !newCollection.IsView() {
-		return errors.New("not a view collection")
-	}
-
-	return dao.RunInTransaction(func(txDao *Dao) error {
-		query := newCollection.ViewOptions().Query
-
-		// generate collection schema from the query
-		viewSchema, err := txDao.CreateViewSchema(query)
-		if err != nil {
-			return err
-		}
-
-		// delete old renamed view
-		if oldCollection != nil {
-			if err := txDao.DeleteView(oldCollection.Name); err != nil {
-				return err
-			}
-		}
-
-		// wrap view query if necessary
-		query, err = txDao.normalizeViewQueryId(query)
-		if err != nil {
-			return fmt.Errorf("failed to normalize view query id: %w", err)
-		}
-
-		// (re)create the view
-		if err := txDao.SaveView(newCollection.Name, query); err != nil {
-			return err
-		}
-
-		newCollection.Schema = viewSchema
-
-		return txDao.Save(newCollection)
-	})
-}
-
-// @todo consider removing once custom id types are supported
-//
-// normalizeViewQueryId wraps (if necessary) the provided view query
-// with a subselect to ensure that the id column is a text since
-// currently we don't support non-string model ids
-// (see https://github.com/pocketbase/pocketbase/issues/3110).
-func (dao *Dao) normalizeViewQueryId(query string) (string, error) {
-	query = strings.Trim(strings.TrimSpace(query), ";")
-
-	parsed, err := dao.parseQueryToFields(query)
-	if err != nil {
-		return "", err
-	}
-
-	needWrapping := true
-
-	idField := parsed[schema.FieldNameId]
-	if idField != nil && idField.field != nil &&
-		idField.field.Type != schema.FieldTypeJson &&
-		idField.field.Type != schema.FieldTypeNumber &&
-		idField.field.Type != schema.FieldTypeBool {
-		needWrapping = false
-	}
-
-	if !needWrapping {
-		return query, nil // no changes needed
-	}
-
-	// raw parse to preserve the columns order
-	rawParsed := new(identifiersParser)
-	if err := rawParsed.parse(query); err != nil {
-		return "", err
-	}
-
-	columns := make([]string, 0, len(rawParsed.columns))
-	for _, col := range rawParsed.columns {
-		if col.alias == schema.FieldNameId {
-			columns = append(columns, fmt.Sprintf("cast([[%s]] as text) [[%s]]", col.alias, col.alias))
-		} else {
-			columns = append(columns, "[["+col.alias+"]]")
-		}
-	}
-
-	query = fmt.Sprintf("SELECT %s FROM (%s)", strings.Join(columns, ","), query)
-
-	return query, nil
-}
-
-// resaveViewsWithChangedSchema updates all view collections with changed schemas.
-func (dao *Dao) resaveViewsWithChangedSchema(excludeIds ...string) error {
-	collections, err := dao.FindCollectionsByType(models.CollectionTypeView)
-	if err != nil {
-		return err
-	}
-
-	return dao.RunInTransaction(func(txDao *Dao) error {
-		for _, collection := range collections {
-			if len(excludeIds) > 0 && list.ExistInSlice(collection.Id, excludeIds) {
-				continue
-			}
-
-			// clone the existing schema so that it is safe for temp modifications
-			oldSchema, err := collection.Schema.Clone()
-			if err != nil {
-				return err
-			}
-
-			// generate a new schema from the query
-			newSchema, err := txDao.CreateViewSchema(collection.ViewOptions().Query)
-			if err != nil {
-				return err
-			}
-
-			// unset the schema field ids to exclude from the comparison
-			for _, f := range oldSchema.Fields() {
-				f.Id = ""
-			}
-			for _, f := range newSchema.Fields() {
-				f.Id = ""
-			}
-
-			encodedNewSchema, err := json.Marshal(newSchema)
-			if err != nil {
-				return err
-			}
-
-			encodedOldSchema, err := json.Marshal(oldSchema)
-			if err != nil {
-				return err
-			}
-
-			if bytes.EqualFold(encodedNewSchema, encodedOldSchema) {
-				continue // no changes
-			}
-
-			if err := txDao.saveViewCollection(collection, nil); err != nil {
-				return err
-			}
-		}
-
 		return nil
 	})
 }

daos/collection_test.go

@@ -6,18 +6,14 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/pocketbase/dbx"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/models/schema"
 	"github.com/pocketbase/pocketbase/tests"
 	"github.com/pocketbase/pocketbase/tools/list"
-	"github.com/pocketbase/pocketbase/tools/types"
 )
 
 func TestCollectionQuery(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -30,8 +26,6 @@ func TestCollectionQuery(t *testing.T) {
 }
 
 func TestFindCollectionsByType(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -51,24 +45,22 @@ func TestFindCollectionsByType(t *testing.T) {
 
 		hasErr := err != nil
 		if hasErr != scenario.expectError {
-			t.Errorf("[%d] Expected hasErr to be %v, got %v (%v)", i, scenario.expectError, hasErr, err)
+			t.Errorf("(%d) Expected hasErr to be %v, got %v (%v)", i, scenario.expectError, hasErr, err)
 		}
 
 		if len(collections) != scenario.expectTotal {
-			t.Errorf("[%d] Expected %d collections, got %d", i, scenario.expectTotal, len(collections))
+			t.Errorf("(%d) Expected %d collections, got %d", i, scenario.expectTotal, len(collections))
 		}
 
 		for _, c := range collections {
 			if c.Type != scenario.collectionType {
-				t.Errorf("[%d] Expected collection with type %s, got %s: \n%v", i, scenario.collectionType, c.Type, c)
+				t.Errorf("(%d) Expected collection with type %s, got %s: \n%v", i, scenario.collectionType, c.Type, c)
 			}
 		}
 	}
 }
 
 func TestFindCollectionByNameOrId(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -88,18 +80,16 @@ func TestFindCollectionByNameOrId(t *testing.T) {
 
 		hasErr := err != nil
 		if hasErr != scenario.expectError {
-			t.Errorf("[%d] Expected hasErr to be %v, got %v (%v)", i, scenario.expectError, hasErr, err)
+			t.Errorf("(%d) Expected hasErr to be %v, got %v (%v)", i, scenario.expectError, hasErr, err)
 		}
 
 		if model != nil && model.Id != scenario.nameOrId && !strings.EqualFold(model.Name, scenario.nameOrId) {
-			t.Errorf("[%d] Expected model with identifier %s, got %v", i, scenario.nameOrId, model)
+			t.Errorf("(%d) Expected model with identifier %s, got %v", i, scenario.nameOrId, model)
 		}
 	}
 }
 
 func TestIsCollectionNameUnique(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -118,14 +108,12 @@ func TestIsCollectionNameUnique(t *testing.T) {
 	for i, scenario := range scenarios {
 		result := app.Dao().IsCollectionNameUnique(scenario.name, scenario.excludeId)
 		if result != scenario.expected {
-			t.Errorf("[%d] Expected %v, got %v", i, scenario.expected, result)
+			t.Errorf("(%d) Expected %v, got %v", i, scenario.expected, result)
 		}
 	}
 }
 
 func TestFindCollectionReferences(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -153,11 +141,9 @@ func TestFindCollectionReferences(t *testing.T) {
 		"rel_one_no_cascade",
 		"rel_one_no_cascade_required",
 		"rel_one_cascade",
-		"rel_one_unique",
 		"rel_many_no_cascade",
 		"rel_many_no_cascade_required",
 		"rel_many_cascade",
-		"rel_many_unique",
 	}
 
 	for col, fields := range result {
@@ -169,51 +155,31 @@ func TestFindCollectionReferences(t *testing.T) {
 		}
 		for i, f := range fields {
 			if !list.ExistInSlice(f.Name, expectedFields) {
-				t.Fatalf("[%d] Didn't expect field %v", i, f)
+				t.Fatalf("(%d) Didn't expect field %v", i, f)
 			}
 		}
 	}
 }
 
 func TestDeleteCollection(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
-	colUnsaved := &models.Collection{}
-
-	colAuth, err := app.Dao().FindCollectionByNameOrId("users")
+	c0 := &models.Collection{}
+	c1, err := app.Dao().FindCollectionByNameOrId("clients")
 	if err != nil {
 		t.Fatal(err)
 	}
-
-	colReferenced, err := app.Dao().FindCollectionByNameOrId("demo2")
+	c2, err := app.Dao().FindCollectionByNameOrId("demo2")
 	if err != nil {
 		t.Fatal(err)
 	}
-
-	colSystem, err := app.Dao().FindCollectionByNameOrId("demo3")
+	c3, err := app.Dao().FindCollectionByNameOrId("demo1")
 	if err != nil {
 		t.Fatal(err)
 	}
-	colSystem.System = true
-	if err := app.Dao().Save(colSystem); err != nil {
-		t.Fatal(err)
-	}
-
-	colBase, err := app.Dao().FindCollectionByNameOrId("demo1")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	colView1, err := app.Dao().FindCollectionByNameOrId("view1")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	colView2, err := app.Dao().FindCollectionByNameOrId("view2")
-	if err != nil {
+	c3.System = true
+	if err := app.Dao().Save(c3); err != nil {
 		t.Fatal(err)
 	}
 
@@ -221,52 +187,23 @@ func TestDeleteCollection(t *testing.T) {
 		model       *models.Collection
 		expectError bool
 	}{
-		{colUnsaved, true},
-		{colReferenced, true},
-		{colSystem, true},
-		{colBase, true},  // depend on view1, view2 and view2
-		{colView1, true}, // view2 depend on it
-		{colView2, false},
-		{colView1, false}, // no longer has dependent collections
-		{colBase, false},  // no longer has dependent views
-		{colAuth, false},  // should delete also its related external auths
+		{c0, true},
+		{c1, false},
+		{c2, true}, // is part of a reference
+		{c3, true}, // system
 	}
 
-	for i, s := range scenarios {
-		err := app.Dao().DeleteCollection(s.model)
-
+	for i, scenario := range scenarios {
+		err := app.Dao().DeleteCollection(scenario.model)
 		hasErr := err != nil
-		if hasErr != s.expectError {
-			t.Errorf("[%d] Expected hasErr %v, got %v (%v)", i, s.expectError, hasErr, err)
-			continue
-		}
 
-		if hasErr {
-			continue
-		}
-
-		if app.Dao().HasTable(s.model.Name) {
-			t.Errorf("[%d] Expected table/view %s to be deleted", i, s.model.Name)
-		}
-
-		// check if the external auths were deleted
-		if s.model.IsAuth() {
-			var total int
-			err := app.Dao().ExternalAuthQuery().
-				Select("count(*)").
-				AndWhere(dbx.HashExp{"collectionId": s.model.Id}).
-				Row(&total)
-
-			if err != nil || total > 0 {
-				t.Fatalf("[%d] Expected external auths to be deleted, got %v (%v)", i, total, err)
-			}
+		if hasErr != scenario.expectError {
+			t.Errorf("(%d) Expected hasErr %v, got %v", i, scenario.expectError, hasErr)
 		}
 	}
 }
 
 func TestSaveCollectionCreate(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -297,7 +234,7 @@ func TestSaveCollectionCreate(t *testing.T) {
 	}
 
 	// check if the records table has the schema fields
-	columns, err := app.Dao().TableColumns(collection.Name)
+	columns, err := app.Dao().GetTableColumns(collection.Name)
 	if err != nil {
 		t.Fatal(err)
 	}
@@ -307,14 +244,12 @@ func TestSaveCollectionCreate(t *testing.T) {
 	}
 	for i, c := range columns {
 		if !list.ExistInSlice(c, expectedColumns) {
-			t.Fatalf("[%d] Didn't expect record column %s", i, c)
+			t.Fatalf("(%d) Didn't expect record column %s", i, c)
 		}
 	}
 }
 
 func TestSaveCollectionUpdate(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -338,7 +273,7 @@ func TestSaveCollectionUpdate(t *testing.T) {
 
 	// check if the records table has the schema fields
 	expectedColumns := []string{"id", "created", "updated", "title_update", "test", "files"}
-	columns, err := app.Dao().TableColumns(collection.Name)
+	columns, err := app.Dao().GetTableColumns(collection.Name)
 	if err != nil {
 		t.Fatal(err)
 	}
@@ -347,189 +282,12 @@ func TestSaveCollectionUpdate(t *testing.T) {
 	}
 	for i, c := range columns {
 		if !list.ExistInSlice(c, expectedColumns) {
-			t.Fatalf("[%d] Didn't expect record column %s", i, c)
+			t.Fatalf("(%d) Didn't expect record column %s", i, c)
 		}
 	}
 }
 
-// indirect update of a field used in view should cause view(s) update
-func TestSaveCollectionIndirectViewsUpdate(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	collection, err := app.Dao().FindCollectionByNameOrId("demo1")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	// update MaxSelect fields
-	{
-		relMany := collection.Schema.GetFieldByName("rel_many")
-		relManyOpt := relMany.Options.(*schema.RelationOptions)
-		relManyOpt.MaxSelect = types.Pointer(1)
-
-		fileOne := collection.Schema.GetFieldByName("file_one")
-		fileOneOpt := fileOne.Options.(*schema.FileOptions)
-		fileOneOpt.MaxSelect = 10
-
-		if err := app.Dao().SaveCollection(collection); err != nil {
-			t.Fatal(err)
-		}
-	}
-
-	// check view1 schema
-	{
-		view1, err := app.Dao().FindCollectionByNameOrId("view1")
-		if err != nil {
-			t.Fatal(err)
-		}
-
-		relMany := view1.Schema.GetFieldByName("rel_many")
-		relManyOpt := relMany.Options.(*schema.RelationOptions)
-		if relManyOpt.MaxSelect == nil || *relManyOpt.MaxSelect != 1 {
-			t.Fatalf("Expected view1.rel_many MaxSelect to be %d, got %v", 1, relManyOpt.MaxSelect)
-		}
-
-		fileOne := view1.Schema.GetFieldByName("file_one")
-		fileOneOpt := fileOne.Options.(*schema.FileOptions)
-		if fileOneOpt.MaxSelect != 10 {
-			t.Fatalf("Expected view1.file_one MaxSelect to be %d, got %v", 10, fileOneOpt.MaxSelect)
-		}
-	}
-
-	// check view2 schema
-	{
-		view2, err := app.Dao().FindCollectionByNameOrId("view2")
-		if err != nil {
-			t.Fatal(err)
-		}
-
-		relMany := view2.Schema.GetFieldByName("rel_many")
-		relManyOpt := relMany.Options.(*schema.RelationOptions)
-		if relManyOpt.MaxSelect == nil || *relManyOpt.MaxSelect != 1 {
-			t.Fatalf("Expected view2.rel_many MaxSelect to be %d, got %v", 1, relManyOpt.MaxSelect)
-		}
-	}
-}
-
-func TestSaveCollectionViewWrapping(t *testing.T) {
-	t.Parallel()
-
-	viewName := "test_wrapping"
-
-	scenarios := []struct {
-		name     string
-		query    string
-		expected string
-	}{
-		{
-			"no wrapping - text field",
-			"select text as id, bool from demo1",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (select text as id, bool from demo1)",
-		},
-		{
-			"no wrapping - id field",
-			"select text as id, bool from demo1",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (select text as id, bool from demo1)",
-		},
-		{
-			"no wrapping - relation field",
-			"select rel_one as id, bool from demo1",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (select rel_one as id, bool from demo1)",
-		},
-		{
-			"no wrapping - select field",
-			"select select_many as id, bool from demo1",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (select select_many as id, bool from demo1)",
-		},
-		{
-			"no wrapping - email field",
-			"select email as id, bool from demo1",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (select email as id, bool from demo1)",
-		},
-		{
-			"no wrapping - datetime field",
-			"select datetime as id, bool from demo1",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (select datetime as id, bool from demo1)",
-		},
-		{
-			"no wrapping - url field",
-			"select url as id, bool from demo1",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (select url as id, bool from demo1)",
-		},
-		{
-			"wrapping - bool field",
-			"select bool as id, text as txt, url from demo1",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (SELECT cast(`id` as text) `id`,`txt`,`url` FROM (select bool as id, text as txt, url from demo1))",
-		},
-		{
-			"wrapping - bool field (different order)",
-			"select text as txt, url, bool as id from demo1",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (SELECT `txt`,`url`,cast(`id` as text) `id` FROM (select text as txt, url, bool as id from demo1))",
-		},
-		{
-			"wrapping - json field",
-			"select json as id, text, url from demo1",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (SELECT cast(`id` as text) `id`,`text`,`url` FROM (select json as id, text, url from demo1))",
-		},
-		{
-			"wrapping - numeric id",
-			"select 1 as id",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (SELECT cast(`id` as text) `id` FROM (select 1 as id))",
-		},
-		{
-			"wrapping - expresion",
-			"select ('test') as id",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (SELECT cast(`id` as text) `id` FROM (select ('test') as id))",
-		},
-		{
-			"no wrapping - cast as text",
-			"select cast('test' as text) as id",
-			"CREATE VIEW `test_wrapping` AS SELECT * FROM (select cast('test' as text) as id)",
-		},
-	}
-
-	for _, s := range scenarios {
-		t.Run(s.name, func(t *testing.T) {
-			app, _ := tests.NewTestApp()
-			defer app.Cleanup()
-
-			collection := &models.Collection{
-				Name: viewName,
-				Type: models.CollectionTypeView,
-				Options: types.JsonMap{
-					"query": s.query,
-				},
-			}
-
-			err := app.Dao().SaveCollection(collection)
-			if err != nil {
-				t.Fatal(err)
-			}
-
-			var sql string
-
-			rowErr := app.Dao().DB().NewQuery("SELECT sql FROM sqlite_master WHERE type='view' AND name={:name}").
-				Bind(dbx.Params{"name": viewName}).
-				Row(&sql)
-			if rowErr != nil {
-				t.Fatalf("Failed to retrieve view sql: %v", rowErr)
-			}
-
-			if sql != s.expected {
-				t.Fatalf("Expected query \n%v, \ngot \n%v", s.expected, sql)
-			}
-		})
-	}
-}
-
 func TestImportCollections(t *testing.T) {
-	t.Parallel()
-
-	totalCollections := 11
-
 	scenarios := []struct {
 		name                   string
 		jsonData               string
@@ -544,7 +302,7 @@ func TestImportCollections(t *testing.T) {
 			name:                   "empty collections",
 			jsonData:               `[]`,
 			expectError:            true,
-			expectCollectionsCount: totalCollections,
+			expectCollectionsCount: 8,
 		},
 		{
 			name: "minimal collection import",
@@ -554,7 +312,7 @@ func TestImportCollections(t *testing.T) {
 			]`,
 			deleteMissing:          false,
 			expectError:            false,
-			expectCollectionsCount: totalCollections + 2,
+			expectCollectionsCount: 10,
 		},
 		{
 			name: "minimal collection import + failed beforeRecordsSync",
@@ -566,7 +324,7 @@ func TestImportCollections(t *testing.T) {
 			},
 			deleteMissing:          false,
 			expectError:            true,
-			expectCollectionsCount: totalCollections,
+			expectCollectionsCount: 8,
 		},
 		{
 			name: "minimal collection import + successful beforeRecordsSync",
@@ -578,7 +336,7 @@ func TestImportCollections(t *testing.T) {
 			},
 			deleteMissing:          false,
 			expectError:            false,
-			expectCollectionsCount: totalCollections + 1,
+			expectCollectionsCount: 9,
 		},
 		{
 			name: "new + update + delete system collection",
@@ -614,7 +372,7 @@ func TestImportCollections(t *testing.T) {
 			]`,
 			deleteMissing:          true,
 			expectError:            true,
-			expectCollectionsCount: totalCollections,
+			expectCollectionsCount: 8,
 		},
 		{
 			name: "new + update + delete non-system collection",
@@ -657,7 +415,7 @@ func TestImportCollections(t *testing.T) {
 				},
 				{
 					"id":"wsmn24bux7wo113",
-					"name":"demo1_rename",
+					"name":"demo",
 					"schema":[
 						{
 							"id":"_2hlxbmp",
@@ -684,19 +442,11 @@ func TestImportCollections(t *testing.T) {
 							"type":"bool"
 						}
 					]
-				},
-				{
-					"id": "test_new_view",
-					"name": "new_view",
-					"type": "view",
-					"options": {
-						"query": "select id from demo2"
-					}
 				}
 			]`,
 			deleteMissing:          true,
 			expectError:            false,
-			expectCollectionsCount: 4,
+			expectCollectionsCount: 3,
 		},
 		{
 			name: "test with deleteMissing: false",
@@ -751,15 +501,15 @@ func TestImportCollections(t *testing.T) {
 			]`,
 			deleteMissing:          false,
 			expectError:            false,
-			expectCollectionsCount: totalCollections + 1,
+			expectCollectionsCount: 9,
 			afterTestFunc: func(testApp *tests.TestApp, resultCollections []*models.Collection) {
 				expectedCollectionFields := map[string]int{
 					"nologin":    1,
 					"demo1":      15,
 					"demo2":      2,
 					"demo3":      2,
-					"demo4":      13,
-					"demo5":      6,
+					"demo4":      11,
+					"demo5":      5,
 					"new_import": 1,
 				}
 				for name, expectedCount := range expectedCollectionFields {
@@ -776,38 +526,37 @@ func TestImportCollections(t *testing.T) {
 		},
 	}
 
-	for _, s := range scenarios {
-		t.Run(s.name, func(t *testing.T) {
-			testApp, _ := tests.NewTestApp()
-			defer testApp.Cleanup()
+	for _, scenario := range scenarios {
+		testApp, _ := tests.NewTestApp()
+		defer testApp.Cleanup()
 
-			importedCollections := []*models.Collection{}
+		importedCollections := []*models.Collection{}
 
-			// load data
-			loadErr := json.Unmarshal([]byte(s.jsonData), &importedCollections)
-			if loadErr != nil {
-				t.Fatalf("Failed to load  data: %v", loadErr)
-			}
+		// load data
+		loadErr := json.Unmarshal([]byte(scenario.jsonData), &importedCollections)
+		if loadErr != nil {
+			t.Fatalf("[%s] Failed to load  data: %v", scenario.name, loadErr)
+			continue
+		}
 
-			err := testApp.Dao().ImportCollections(importedCollections, s.deleteMissing, s.beforeRecordsSync)
+		err := testApp.Dao().ImportCollections(importedCollections, scenario.deleteMissing, scenario.beforeRecordsSync)
 
-			hasErr := err != nil
-			if hasErr != s.expectError {
-				t.Fatalf("Expected hasErr to be %v, got %v (%v)", s.expectError, hasErr, err)
-			}
+		hasErr := err != nil
+		if hasErr != scenario.expectError {
+			t.Errorf("[%s] Expected hasErr to be %v, got %v (%v)", scenario.name, scenario.expectError, hasErr, err)
+		}
 
-			// check collections count
-			collections := []*models.Collection{}
-			if err := testApp.Dao().CollectionQuery().All(&collections); err != nil {
-				t.Fatal(err)
-			}
-			if len(collections) != s.expectCollectionsCount {
-				t.Fatalf("Expected %d collections, got %d", s.expectCollectionsCount, len(collections))
-			}
+		// check collections count
+		collections := []*models.Collection{}
+		if err := testApp.Dao().CollectionQuery().All(&collections); err != nil {
+			t.Fatal(err)
+		}
+		if len(collections) != scenario.expectCollectionsCount {
+			t.Errorf("[%s] Expected %d collections, got %d", scenario.name, scenario.expectCollectionsCount, len(collections))
+		}
 
-			if s.afterTestFunc != nil {
-				s.afterTestFunc(testApp, collections)
-			}
-		})
+		if scenario.afterTestFunc != nil {
+			scenario.afterTestFunc(testApp, collections)
+		}
 	}
 }

daos/external_auth.go

@@ -12,8 +12,8 @@ func (dao *Dao) ExternalAuthQuery() *dbx.SelectQuery {
 	return dao.ModelQuery(&models.ExternalAuth{})
 }
 
-// FindAllExternalAuthsByRecord returns all ExternalAuth models
-// linked to the provided auth record.
+/// FindAllExternalAuthsByRecord returns all ExternalAuth models
+/// linked to the provided auth record.
 func (dao *Dao) FindAllExternalAuthsByRecord(authRecord *models.Record) ([]*models.ExternalAuth, error) {
 	auths := []*models.ExternalAuth{}
 
@@ -32,16 +32,16 @@ func (dao *Dao) FindAllExternalAuthsByRecord(authRecord *models.Record) ([]*mode
 	return auths, nil
 }
 
-// FindExternalAuthByRecordAndProvider returns the first available
-// ExternalAuth model for the specified record data and provider.
-func (dao *Dao) FindExternalAuthByRecordAndProvider(authRecord *models.Record, provider string) (*models.ExternalAuth, error) {
+// FindExternalAuthByProvider returns the first available
+// ExternalAuth model for the specified provider and providerId.
+func (dao *Dao) FindExternalAuthByProvider(provider, providerId string) (*models.ExternalAuth, error) {
 	model := &models.ExternalAuth{}
 
 	err := dao.ExternalAuthQuery().
+		AndWhere(dbx.Not(dbx.HashExp{"providerId": ""})). // exclude empty providerIds
 		AndWhere(dbx.HashExp{
-			"collectionId": authRecord.Collection().Id,
-			"recordId":     authRecord.Id,
-			"provider":     provider,
+			"provider":   provider,
+			"providerId": providerId,
 		}).
 		Limit(1).
 		One(model)
@@ -53,14 +53,17 @@ func (dao *Dao) FindExternalAuthByRecordAndProvider(authRecord *models.Record, p
 	return model, nil
 }
 
-// FindFirstExternalAuthByExpr returns the first available
-// ExternalAuth model that satisfies the non-nil expression.
-func (dao *Dao) FindFirstExternalAuthByExpr(expr dbx.Expression) (*models.ExternalAuth, error) {
+// FindExternalAuthByRecordAndProvider returns the first available
+// ExternalAuth model for the specified record data and provider.
+func (dao *Dao) FindExternalAuthByRecordAndProvider(authRecord *models.Record, provider string) (*models.ExternalAuth, error) {
 	model := &models.ExternalAuth{}
 
 	err := dao.ExternalAuthQuery().
-		AndWhere(dbx.Not(dbx.HashExp{"providerId": ""})). // exclude empty providerIds
-		AndWhere(expr).
+		AndWhere(dbx.HashExp{
+			"collectionId": authRecord.Collection().Id,
+			"recordId":     authRecord.Id,
+			"provider":     provider,
+		}).
 		Limit(1).
 		One(model)
 

daos/external_auth_test.go

@@ -3,14 +3,11 @@ package daos_test
 import (
 	"testing"
 
-	"github.com/pocketbase/dbx"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/tests"
 )
 
 func TestExternalAuthQuery(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -23,8 +20,6 @@ func TestExternalAuthQuery(t *testing.T) {
 }
 
 func TestFindAllExternalAuthsByRecord(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -61,25 +56,25 @@ func TestFindAllExternalAuthsByRecord(t *testing.T) {
 	}
 }
 
-func TestFindFirstExternalAuthByExpr(t *testing.T) {
-	t.Parallel()
-
+func TestFindExternalAuthByProvider(t *testing.T) {
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
 	scenarios := []struct {
-		expr       dbx.Expression
+		provider   string
+		providerId string
 		expectedId string
 	}{
-		{dbx.HashExp{"provider": "github", "providerId": ""}, ""},
-		{dbx.HashExp{"provider": "github", "providerId": "id1"}, ""},
-		{dbx.HashExp{"provider": "github", "providerId": "id2"}, ""},
-		{dbx.HashExp{"provider": "google", "providerId": "test123"}, "clmflokuq1xl341"},
-		{dbx.HashExp{"provider": "gitlab", "providerId": "test123"}, "dlmflokuq1xl342"},
+		{"", "", ""},
+		{"github", "", ""},
+		{"github", "id1", ""},
+		{"github", "id2", ""},
+		{"google", "test123", "clmflokuq1xl341"},
+		{"gitlab", "test123", "dlmflokuq1xl342"},
 	}
 
 	for i, s := range scenarios {
-		auth, err := app.Dao().FindFirstExternalAuthByExpr(s.expr)
+		auth, err := app.Dao().FindExternalAuthByProvider(s.provider, s.providerId)
 
 		hasErr := err != nil
 		expectErr := s.expectedId == ""
@@ -95,8 +90,6 @@ func TestFindFirstExternalAuthByExpr(t *testing.T) {
 }
 
 func TestFindExternalAuthByRecordAndProvider(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -133,8 +126,6 @@ func TestFindExternalAuthByRecordAndProvider(t *testing.T) {
 }
 
 func TestSaveExternalAuth(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -156,11 +147,7 @@ func TestSaveExternalAuth(t *testing.T) {
 	}
 
 	// check if it was really saved
-	foundAuth, err := app.Dao().FindFirstExternalAuthByExpr(dbx.HashExp{
-		"collectionId": "v851q4r790rhknl",
-		"provider":     "test",
-		"providerId":   "test_id",
-	})
+	foundAuth, err := app.Dao().FindExternalAuthByProvider("test", "test_id")
 	if err != nil {
 		t.Fatal(err)
 	}
@@ -171,8 +158,6 @@ func TestSaveExternalAuth(t *testing.T) {
 }
 
 func TestDeleteExternalAuth(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 

daos/log.go

@@ -1,67 +0,0 @@
-package daos
-
-import (
-	"time"
-
-	"github.com/pocketbase/dbx"
-	"github.com/pocketbase/pocketbase/models"
-	"github.com/pocketbase/pocketbase/tools/types"
-)
-
-// LogQuery returns a new Log select query.
-func (dao *Dao) LogQuery() *dbx.SelectQuery {
-	return dao.ModelQuery(&models.Log{})
-}
-
-// FindLogById finds a single Log entry by its id.
-func (dao *Dao) FindLogById(id string) (*models.Log, error) {
-	model := &models.Log{}
-
-	err := dao.LogQuery().
-		AndWhere(dbx.HashExp{"id": id}).
-		Limit(1).
-		One(model)
-
-	if err != nil {
-		return nil, err
-	}
-
-	return model, nil
-}
-
-type LogsStatsItem struct {
-	Total int            `db:"total" json:"total"`
-	Date  types.DateTime `db:"date" json:"date"`
-}
-
-// LogsStats returns hourly grouped requests logs statistics.
-func (dao *Dao) LogsStats(expr dbx.Expression) ([]*LogsStatsItem, error) {
-	result := []*LogsStatsItem{}
-
-	query := dao.LogQuery().
-		Select("count(id) as total", "strftime('%Y-%m-%d %H:00:00', created) as date").
-		GroupBy("date")
-
-	if expr != nil {
-		query.AndWhere(expr)
-	}
-
-	err := query.All(&result)
-
-	return result, err
-}
-
-// DeleteOldLogs delete all requests that are created before createdBefore.
-func (dao *Dao) DeleteOldLogs(createdBefore time.Time) error {
-	formattedDate := createdBefore.UTC().Format(types.DefaultDateLayout)
-	expr := dbx.NewExp("[[created]] <= {:date}", dbx.Params{"date": formattedDate})
-
-	_, err := dao.NonconcurrentDB().Delete((&models.Log{}).TableName(), expr).Execute()
-
-	return err
-}
-
-// SaveLog upserts the provided Log model.
-func (dao *Dao) SaveLog(log *models.Log) error {
-	return dao.Save(log)
-}

daos/param_test.go

@@ -11,8 +11,6 @@ import (
 )
 
 func TestParamQuery(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -25,8 +23,6 @@ func TestParamQuery(t *testing.T) {
 }
 
 func TestFindParamByKey(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -54,8 +50,6 @@ func TestFindParamByKey(t *testing.T) {
 }
 
 func TestSaveParam(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -98,8 +92,6 @@ func TestSaveParam(t *testing.T) {
 }
 
 func TestSaveParamEncrypted(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -134,8 +126,6 @@ func TestSaveParamEncrypted(t *testing.T) {
 }
 
 func TestDeleteParam(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 

daos/record.go

@@ -1,133 +1,26 @@
 package daos
 
 import (
-	"context"
-	"database/sql"
 	"errors"
 	"fmt"
-	"sort"
 	"strings"
 
 	"github.com/pocketbase/dbx"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/models/schema"
-	"github.com/pocketbase/pocketbase/resolvers"
 	"github.com/pocketbase/pocketbase/tools/inflector"
 	"github.com/pocketbase/pocketbase/tools/list"
-	"github.com/pocketbase/pocketbase/tools/search"
 	"github.com/pocketbase/pocketbase/tools/security"
 	"github.com/pocketbase/pocketbase/tools/types"
 	"github.com/spf13/cast"
 )
 
-// RecordQuery returns a new Record select query from a collection model, id or name.
-//
-// In case a collection id or name is provided and that collection doesn't
-// actually exists, the generated query will be created with a cancelled context
-// and will fail once an executor (Row(), One(), All(), etc.) is called.
-func (dao *Dao) RecordQuery(collectionModelOrIdentifier any) *dbx.SelectQuery {
-	var tableName string
-	var collection *models.Collection
-	var collectionErr error
-	switch c := collectionModelOrIdentifier.(type) {
-	case *models.Collection:
-		collection = c
-		tableName = collection.Name
-	case models.Collection:
-		collection = &c
-		tableName = collection.Name
-	case string:
-		collection, collectionErr = dao.FindCollectionByNameOrId(c)
-		if collection != nil {
-			tableName = collection.Name
-		}
-	default:
-		collectionErr = errors.New("unsupported collection identifier, must be collection model, id or name")
-	}
-
-	// update with some fake table name for easier debugging
-	if tableName == "" {
-		tableName = "@@__invalidCollectionModelOrIdentifier"
-	}
-
+// RecordQuery returns a new Record select query.
+func (dao *Dao) RecordQuery(collection *models.Collection) *dbx.SelectQuery {
+	tableName := collection.Name
 	selectCols := fmt.Sprintf("%s.*", dao.DB().QuoteSimpleColumnName(tableName))
 
-	query := dao.DB().Select(selectCols).From(tableName)
-
-	// in case of an error attach a new context and cancel it immediately with the error
-	if collectionErr != nil {
-		// @todo consider changing to WithCancelCause when upgrading
-		// the min Go requirement to 1.20, so that we can pass the error
-		ctx, cancelFunc := context.WithCancel(context.Background())
-		query.WithContext(ctx)
-		cancelFunc()
-	}
-
-	return query.WithBuildHook(func(q *dbx.Query) {
-		q.WithExecHook(execLockRetry(dao.ModelQueryTimeout, dao.MaxLockRetries)).
-			WithOneHook(func(q *dbx.Query, a any, op func(b any) error) error {
-				switch v := a.(type) {
-				case *models.Record:
-					if v == nil {
-						return op(a)
-					}
-
-					row := dbx.NullStringMap{}
-					if err := op(&row); err != nil {
-						return err
-					}
-
-					record := models.NewRecordFromNullStringMap(collection, row)
-
-					*v = *record
-
-					return nil
-				default:
-					return op(a)
-				}
-			}).
-			WithAllHook(func(q *dbx.Query, sliceA any, op func(sliceB any) error) error {
-				switch v := sliceA.(type) {
-				case *[]*models.Record:
-					if v == nil {
-						return op(sliceA)
-					}
-
-					rows := []dbx.NullStringMap{}
-					if err := op(&rows); err != nil {
-						return err
-					}
-
-					records := models.NewRecordsFromNullStringMaps(collection, rows)
-
-					*v = records
-
-					return nil
-				case *[]models.Record:
-					if v == nil {
-						return op(sliceA)
-					}
-
-					rows := []dbx.NullStringMap{}
-					if err := op(&rows); err != nil {
-						return err
-					}
-
-					records := models.NewRecordsFromNullStringMaps(collection, rows)
-
-					nonPointers := make([]models.Record, len(records))
-					for i, r := range records {
-						nonPointers[i] = *r
-					}
-
-					*v = nonPointers
-
-					return nil
-				default:
-					return op(sliceA)
-				}
-			})
-	})
+	return dao.DB().Select(selectCols).From(tableName)
 }
 
 // FindRecordById finds the Record model by its id.
@@ -141,8 +34,10 @@ func (dao *Dao) FindRecordById(
 		return nil, err
 	}
 
+	tableName := collection.Name
+
 	query := dao.RecordQuery(collection).
-		AndWhere(dbx.HashExp{collection.Name + ".id": recordId})
+		AndWhere(dbx.HashExp{tableName + ".id": recordId})
 
 	for _, filter := range optFilters {
 		if filter == nil {
@@ -153,13 +48,12 @@ func (dao *Dao) FindRecordById(
 		}
 	}
 
-	record := &models.Record{}
-
-	if err := query.Limit(1).One(record); err != nil {
+	row := dbx.NullStringMap{}
+	if err := query.Limit(1).One(row); err != nil {
 		return nil, err
 	}
 
-	return record, nil
+	return models.NewRecordFromNullStringMap(collection, row), nil
 }
 
 // FindRecordsByIds finds all Record models by the provided ids.
@@ -189,13 +83,12 @@ func (dao *Dao) FindRecordsByIds(
 		}
 	}
 
-	records := make([]*models.Record, 0, len(recordIds))
-
-	if err := query.All(&records); err != nil {
+	rows := make([]dbx.NullStringMap, 0, len(recordIds))
+	if err := query.All(&rows); err != nil {
 		return nil, err
 	}
 
-	return records, nil
+	return models.NewRecordsFromNullStringMaps(collection, rows), nil
 }
 
 // FindRecordsByExpr finds all records by the specified db expression.
@@ -210,7 +103,12 @@ func (dao *Dao) FindRecordsByIds(
 //	expr2 := dbx.NewExp("LOWER(username) = {:username}", dbx.Params{"username": "test"})
 //	dao.FindRecordsByExpr("example", expr1, expr2)
 func (dao *Dao) FindRecordsByExpr(collectionNameOrId string, exprs ...dbx.Expression) ([]*models.Record, error) {
-	query := dao.RecordQuery(collectionNameOrId)
+	collection, err := dao.FindCollectionByNameOrId(collectionNameOrId)
+	if err != nil {
+		return nil, err
+	}
+
+	query := dao.RecordQuery(collection)
 
 	// add only the non-nil expressions
 	for _, expr := range exprs {
@@ -219,140 +117,35 @@ func (dao *Dao) FindRecordsByExpr(collectionNameOrId string, exprs ...dbx.Expres
 		}
 	}
 
-	var records []*models.Record
+	rows := []dbx.NullStringMap{}
 
-	if err := query.All(&records); err != nil {
+	if err := query.All(&rows); err != nil {
 		return nil, err
 	}
 
-	return records, nil
+	return models.NewRecordsFromNullStringMaps(collection, rows), nil
 }
 
 // FindFirstRecordByData returns the first found record matching
 // the provided key-value pair.
-func (dao *Dao) FindFirstRecordByData(
-	collectionNameOrId string,
-	key string,
-	value any,
-) (*models.Record, error) {
-	record := &models.Record{}
-
-	err := dao.RecordQuery(collectionNameOrId).
-		AndWhere(dbx.HashExp{inflector.Columnify(key): value}).
-		Limit(1).
-		One(record)
-	if err != nil {
-		return nil, err
-	}
-
-	return record, nil
-}
-
-// FindRecordsByFilter returns limit number of records matching the
-// provided string filter.
-//
-// NB! Use the last "params" argument to bind untrusted user variables!
-//
-// The sort argument is optional and can be empty string OR the same format
-// used in the web APIs, eg. "-created,title".
-//
-// If the limit argument is <= 0, no limit is applied to the query and
-// all matching records are returned.
-//
-// Example:
-//
-//	dao.FindRecordsByFilter(
-//		"posts",
-//		"title ~ {:title} && visible = {:visible}",
-//		"-created",
-//		10,
-//		0,
-//		dbx.Params{"title": "lorem ipsum", "visible": true}
-//	)
-func (dao *Dao) FindRecordsByFilter(
-	collectionNameOrId string,
-	filter string,
-	sort string,
-	limit int,
-	offset int,
-	params ...dbx.Params,
-) ([]*models.Record, error) {
+func (dao *Dao) FindFirstRecordByData(collectionNameOrId string, key string, value any) (*models.Record, error) {
 	collection, err := dao.FindCollectionByNameOrId(collectionNameOrId)
 	if err != nil {
 		return nil, err
 	}
 
-	q := dao.RecordQuery(collection)
+	row := dbx.NullStringMap{}
 
-	// build a fields resolver and attach the generated conditions to the query
-	// ---
-	resolver := resolvers.NewRecordFieldResolver(
-		dao,
-		collection, // the base collection
-		nil,        // no request data
-		true,       // allow searching hidden/protected fields like "email"
-	)
+	err = dao.RecordQuery(collection).
+		AndWhere(dbx.HashExp{inflector.Columnify(key): value}).
+		Limit(1).
+		One(row)
 
-	expr, err := search.FilterData(filter).BuildExpr(resolver, params...)
-	if err != nil || expr == nil {
-		return nil, errors.New("invalid or empty filter expression")
-	}
-	q.AndWhere(expr)
-
-	if sort != "" {
-		for _, sortField := range search.ParseSortFromString(sort) {
-			expr, err := sortField.BuildExpr(resolver)
-			if err != nil {
-				return nil, err
-			}
-			if expr != "" {
-				q.AndOrderBy(expr)
-			}
-		}
-	}
-
-	resolver.UpdateQuery(q) // attaches any adhoc joins and aliases
-	// ---
-
-	if offset > 0 {
-		q.Offset(int64(offset))
-	}
-
-	if limit > 0 {
-		q.Limit(int64(limit))
-	}
-
-	records := []*models.Record{}
-
-	if err := q.All(&records); err != nil {
-		return nil, err
-	}
-
-	return records, nil
-}
-
-// FindFirstRecordByFilter returns the first available record matching the provided filter.
-//
-// NB! Use the last params argument to bind untrusted user variables!
-//
-// Example:
-//
-//	dao.FindFirstRecordByFilter("posts", "slug={:slug} && status='public'", dbx.Params{"slug": "test"})
-func (dao *Dao) FindFirstRecordByFilter(
-	collectionNameOrId string,
-	filter string,
-	params ...dbx.Params,
-) (*models.Record, error) {
-	result, err := dao.FindRecordsByFilter(collectionNameOrId, filter, "", 1, 0, params...)
 	if err != nil {
 		return nil, err
 	}
 
-	if len(result) == 0 {
-		return nil, sql.ErrNoRows
-	}
-
-	return result[0], nil
+	return models.NewRecordFromNullStringMap(collection, row), nil
 }
 
 // IsRecordValueUnique checks if the provided key-value pair is a unique Record value.
@@ -384,9 +177,9 @@ func (dao *Dao) IsRecordValueUnique(
 		var normalizedVal any
 		switch val := value.(type) {
 		case []string:
-			normalizedVal = append(types.JsonArray[string]{}, val...)
+			normalizedVal = append(types.JsonArray{}, list.ToInterfaceSlice(val)...)
 		case []any:
-			normalizedVal = append(types.JsonArray[any]{}, val...)
+			normalizedVal = append(types.JsonArray{}, val...)
 		default:
 			normalizedVal = val
 		}
@@ -408,9 +201,9 @@ func (dao *Dao) IsRecordValueUnique(
 	return query.Row(&exists) == nil && !exists
 }
 
-// FindAuthRecordByToken finds the auth record associated with the provided JWT.
+// FindAuthRecordByToken finds the auth record associated with the provided JWT token.
 //
-// Returns an error if the JWT is invalid, expired or not associated to an auth collection record.
+// Returns an error if the JWT token is invalid, expired or not associated to an auth collection record.
 func (dao *Dao) FindAuthRecordByToken(token string, baseTokenKey string) (*models.Record, error) {
 	unverifiedClaims, err := security.ParseUnverifiedJWT(token)
 	if err != nil {
@@ -430,7 +223,7 @@ func (dao *Dao) FindAuthRecordByToken(token string, baseTokenKey string) (*model
 	}
 
 	if !record.Collection().IsAuth() {
-		return nil, errors.New("the token is not associated to an auth collection record")
+		return nil, errors.New("The token is not associated to an auth collection record.")
 	}
 
 	verificationKey := record.TokenKey() + baseTokenKey
@@ -455,17 +248,18 @@ func (dao *Dao) FindAuthRecordByEmail(collectionNameOrId string, email string) (
 		return nil, fmt.Errorf("%q is not an auth collection", collectionNameOrId)
 	}
 
-	record := &models.Record{}
+	row := dbx.NullStringMap{}
 
 	err = dao.RecordQuery(collection).
 		AndWhere(dbx.HashExp{schema.FieldNameEmail: email}).
 		Limit(1).
-		One(record)
+		One(row)
+
 	if err != nil {
 		return nil, err
 	}
 
-	return record, nil
+	return models.NewRecordFromNullStringMap(collection, row), nil
 }
 
 // FindAuthRecordByUsername finds the auth record associated with the provided username (case insensitive).
@@ -480,19 +274,20 @@ func (dao *Dao) FindAuthRecordByUsername(collectionNameOrId string, username str
 		return nil, fmt.Errorf("%q is not an auth collection", collectionNameOrId)
 	}
 
-	record := &models.Record{}
+	row := dbx.NullStringMap{}
 
 	err = dao.RecordQuery(collection).
 		AndWhere(dbx.NewExp("LOWER([["+schema.FieldNameUsername+"]])={:username}", dbx.Params{
 			"username": strings.ToLower(username),
 		})).
 		Limit(1).
-		One(record)
+		One(row)
+
 	if err != nil {
 		return nil, err
 	}
 
-	return record, nil
+	return models.NewRecordFromNullStringMap(collection, row), nil
 }
 
 // SuggestUniqueAuthRecordUsername checks if the provided username is unique
@@ -523,69 +318,8 @@ func (dao *Dao) SuggestUniqueAuthRecordUsername(
 	return username
 }
 
-// CanAccessRecord checks if a record is allowed to be accessed by the
-// specified requestInfo and accessRule.
-//
-// Rule and db checks are ignored in case requestInfo.Admin is set.
-//
-// The returned error indicate that something unexpected happened during
-// the check (eg. invalid rule or db error).
-//
-// The method always return false on invalid access rule or db error.
-//
-// Example:
-//
-//	requestInfo := apis.RequestInfo(c /* echo.Context */)
-//	record, _ := dao.FindRecordById("example", "RECORD_ID")
-//	rule := types.Pointer("@request.auth.id != '' || status = 'public'")
-//	// ... or use one of the record collection's rule, eg. record.Collection().ViewRule
-//
-//	if ok, _ := dao.CanAccessRecord(record, requestInfo, rule); ok { ... }
-func (dao *Dao) CanAccessRecord(record *models.Record, requestInfo *models.RequestInfo, accessRule *string) (bool, error) {
-	if requestInfo.Admin != nil {
-		// admins can access everything
-		return true, nil
-	}
-
-	if accessRule == nil {
-		// only admins can access this record
-		return false, nil
-	}
-
-	if *accessRule == "" {
-		// empty public rule, aka. everyone can access
-		return true, nil
-	}
-
-	var exists bool
-
-	query := dao.RecordQuery(record.Collection()).
-		Select("(1)").
-		AndWhere(dbx.HashExp{record.Collection().Name + ".id": record.Id})
-
-	// parse and apply the access rule filter
-	resolver := resolvers.NewRecordFieldResolver(dao, record.Collection(), requestInfo, true)
-	expr, err := search.FilterData(*accessRule).BuildExpr(resolver)
-	if err != nil {
-		return false, err
-	}
-	resolver.UpdateQuery(query)
-	query.AndWhere(expr)
-
-	if err := query.Limit(1).Row(&exists); err != nil && !errors.Is(err, sql.ErrNoRows) {
-		return false, err
-	}
-
-	return exists, nil
-}
-
-// SaveRecord persists the provided Record model in the database.
-//
-// If record.IsNew() is true, the method will perform a create, otherwise an update.
-// To explicitly mark a record for update you can use record.MarkAsNotNew().
+// SaveRecord upserts the provided Record model.
 func (dao *Dao) SaveRecord(record *models.Record) error {
-	var needToDeleteExternalAuths bool
-
 	if record.Collection().IsAuth() {
 		if record.Username() == "" {
 			return errors.New("unable to save auth record without username")
@@ -606,44 +340,9 @@ func (dao *Dao) SaveRecord(record *models.Record) error {
 				return errors.New("the auth record ID must be unique across all auth collections")
 			}
 		}
-
-		if !record.IsNew() && record.Verified() {
-			lastSavedRecord, err := dao.FindRecordById(record.Collection().Id, record.Id)
-			if err != nil {
-				return err
-			}
-
-			// in case upgrading from "unverified" -> "verified" mark all pre-existing OAuth2 links
-			// for deletion since there is no reliable way to verify that they weren't created by an attacker
-			if !lastSavedRecord.Verified() && record.Verified() {
-				needToDeleteExternalAuths = true
-			}
-		}
 	}
 
-	if !needToDeleteExternalAuths {
-		return dao.Save(record)
-	}
-
-	return dao.RunInTransaction(func(txDao *Dao) error {
-		externalAuths, err := txDao.FindAllExternalAuthsByRecord(record)
-		if err != nil {
-			return err
-		}
-		if len(externalAuths) > 0 {
-			// delete all pre-existing external auths
-			for _, ea := range externalAuths {
-				if err := txDao.DeleteExternalAuth(ea); err != nil {
-					return err
-				}
-			}
-
-			// force refresh tokens reset (if not already)
-			record.RefreshTokenKey()
-		}
-
-		return txDao.Save(record)
-	})
+	return dao.Save(record)
 }
 
 // DeleteRecord deletes the provided Record model.
@@ -694,61 +393,42 @@ func (dao *Dao) DeleteRecord(record *models.Record) error {
 //
 // NB! This method is expected to be called inside a transaction.
 func (dao *Dao) cascadeRecordDelete(mainRecord *models.Record, refs map[*models.Collection][]*schema.SchemaField) error {
-	// @todo consider changing refs to a slice
-	//
-	// Sort the refs keys to ensure that the cascade events firing order is always the same.
-	// This is not necessary for the operation to function correctly but it helps having deterministic output during testing.
-	sortedRefKeys := make([]*models.Collection, 0, len(refs))
-	for k := range refs {
-		sortedRefKeys = append(sortedRefKeys, k)
-	}
-	sort.Slice(sortedRefKeys, func(i, j int) bool {
-		return sortedRefKeys[i].Name < sortedRefKeys[j].Name
-	})
-
-	for _, refCollection := range sortedRefKeys {
-		fields, ok := refs[refCollection]
-
-		if refCollection.IsView() || !ok {
-			continue // skip missing or view collections
-		}
-
-		refTableName := inflector.Columnify(refCollection.Name)
+	uniqueJsonEachAlias := "__je__" + security.PseudorandomString(4)
 
+	for refCollection, fields := range refs {
 		for _, field := range fields {
-			prefixedFieldName := refTableName + "." + inflector.Columnify(field.Name)
+			recordTableName := inflector.Columnify(refCollection.Name)
+			prefixedFieldName := recordTableName + "." + inflector.Columnify(field.Name)
 
-			query := dao.DB().Select(refTableName + ".id").From(refTableName)
-
-			if opt, ok := field.Options.(schema.MultiValuer); !ok || !opt.IsMultiple() {
-				query.AndWhere(dbx.HashExp{prefixedFieldName: mainRecord.Id})
-			} else {
-				query.AndWhere(dbx.Exists(dbx.NewExp(fmt.Sprintf(
-					`SELECT 1 FROM json_each(CASE WHEN json_valid([[%s]]) THEN [[%s]] ELSE json_array([[%s]]) END) {{__je__}} WHERE [[__je__.value]]={:jevalue}`,
-					prefixedFieldName, prefixedFieldName, prefixedFieldName,
-				), dbx.Params{
-					"jevalue": mainRecord.Id,
-				})))
-			}
+			// @todo optimize single relation lookup in v0.12+
+			query := dao.RecordQuery(refCollection).
+				Distinct(true).
+				InnerJoin(fmt.Sprintf(
+					// note: the case is used to normalize the value access
+					`json_each(CASE WHEN json_valid([[%s]]) THEN [[%s]] ELSE json_array([[%s]]) END) as {{%s}}`,
+					prefixedFieldName, prefixedFieldName, prefixedFieldName, uniqueJsonEachAlias,
+				), dbx.HashExp{uniqueJsonEachAlias + ".value": mainRecord.Id})
 
 			if refCollection.Id == mainRecord.Collection().Id {
-				query.AndWhere(dbx.Not(dbx.HashExp{refTableName + ".id": mainRecord.Id}))
+				query.AndWhere(dbx.Not(dbx.HashExp{recordTableName + ".id": mainRecord.Id}))
 			}
 
 			// trigger cascade for each batchSize rel items until there is none
-			batchSize := 8000
-			refIds := make([]string, 0, batchSize)
+			batchSize := 4000
+			rows := make([]dbx.NullStringMap, 0, batchSize)
 			for {
-				if err := query.Limit(int64(batchSize)).Column(&refIds); err != nil {
+				if err := query.Limit(int64(batchSize)).All(&rows); err != nil {
 					return err
 				}
 
-				total := len(refIds)
+				total := len(rows)
 				if total == 0 {
 					break
 				}
 
-				err := dao.deleteRefRecords(mainRecord, refCollection, refIds, field)
+				refRecords := models.NewRecordsFromNullStringMaps(refCollection, rows)
+
+				err := dao.deleteRefRecords(mainRecord, refRecords, field)
 				if err != nil {
 					return err
 				}
@@ -757,7 +437,7 @@ func (dao *Dao) cascadeRecordDelete(mainRecord *models.Record, refs map[*models.
 					break // no more items
 				}
 
-				refIds = refIds[:0] // keep allocated memory
+				rows = rows[:0] // keep allocated memory
 			}
 		}
 	}
@@ -770,26 +450,13 @@ func (dao *Dao) cascadeRecordDelete(mainRecord *models.Record, refs map[*models.
 // just unset the record id from any relation field values (if they are not required).
 //
 // NB! This method is expected to be called inside a transaction.
-func (dao *Dao) deleteRefRecords(
-	mainRecord *models.Record,
-	refCollection *models.Collection,
-	refIds []string,
-	field *schema.SchemaField,
-) error {
+func (dao *Dao) deleteRefRecords(mainRecord *models.Record, refRecords []*models.Record, field *schema.SchemaField) error {
 	options, _ := field.Options.(*schema.RelationOptions)
 	if options == nil {
 		return errors.New("relation field options are not initialized")
 	}
 
-	for _, refId := range refIds {
-		refRecord, err := dao.FindRecordById(refCollection.Name, refId)
-		if err != nil {
-			if errors.Is(err, sql.ErrNoRows) {
-				continue // already deleted
-			}
-			return err
-		}
-
+	for _, refRecord := range refRecords {
 		ids := refRecord.GetStringSlice(field.Name)
 
 		// unset the record id

daos/record_expand.go

@@ -3,22 +3,19 @@ package daos
 import (
 	"errors"
 	"fmt"
-	"log"
 	"regexp"
 	"strings"
 
 	"github.com/pocketbase/dbx"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/models/schema"
-	"github.com/pocketbase/pocketbase/tools/dbutils"
+	"github.com/pocketbase/pocketbase/tools/inflector"
 	"github.com/pocketbase/pocketbase/tools/list"
 	"github.com/pocketbase/pocketbase/tools/security"
 	"github.com/pocketbase/pocketbase/tools/types"
 )
 
 // MaxExpandDepth specifies the max allowed nested expand depth path.
-//
-// @todo Consider eventually reusing resolvers.maxNestedRels
 const MaxExpandDepth = 6
 
 // ExpandFetchFunc defines the function that is used to fetch the expanded relation records.
@@ -26,27 +23,21 @@ type ExpandFetchFunc func(relCollection *models.Collection, relIds []string) ([]
 
 // ExpandRecord expands the relations of a single Record model.
 //
-// If optFetchFunc is not set, then a default function will be used
-// that returns all relation records.
-//
 // Returns a map with the failed expand parameters and their errors.
-func (dao *Dao) ExpandRecord(record *models.Record, expands []string, optFetchFunc ExpandFetchFunc) map[string]error {
-	return dao.ExpandRecords([]*models.Record{record}, expands, optFetchFunc)
+func (dao *Dao) ExpandRecord(record *models.Record, expands []string, fetchFunc ExpandFetchFunc) map[string]error {
+	return dao.ExpandRecords([]*models.Record{record}, expands, fetchFunc)
 }
 
 // ExpandRecords expands the relations of the provided Record models list.
 //
-// If optFetchFunc is not set, then a default function will be used
-// that returns all relation records.
-//
 // Returns a map with the failed expand parameters and their errors.
-func (dao *Dao) ExpandRecords(records []*models.Record, expands []string, optFetchFunc ExpandFetchFunc) map[string]error {
+func (dao *Dao) ExpandRecords(records []*models.Record, expands []string, fetchFunc ExpandFetchFunc) map[string]error {
 	normalized := normalizeExpands(expands)
 
 	failed := map[string]error{}
 
 	for _, expand := range normalized {
-		if err := dao.expandRecords(records, expand, optFetchFunc, 1); err != nil {
+		if err := dao.expandRecords(records, expand, fetchFunc, 1); err != nil {
 			failed[expand] = err
 		}
 	}
@@ -54,21 +45,16 @@ func (dao *Dao) ExpandRecords(records []*models.Record, expands []string, optFet
 	return failed
 }
 
-// Deprecated
-var indirectExpandRegexOld = regexp.MustCompile(`^(\w+)\((\w+)\)$`)
-
-var indirectExpandRegex = regexp.MustCompile(`^(\w+)_via_(\w+)$`)
+var indirectExpandRegex = regexp.MustCompile(`^(\w+)\((\w+)\)$`)
 
 // notes:
-// - if fetchFunc is nil, dao.FindRecordsByIds will be used
+// - fetchFunc must be non-nil func
 // - all records are expected to be from the same collection
 // - if MaxExpandDepth is reached, the function returns nil ignoring the remaining expand path
+// - indirect expands are supported only with single relation fields
 func (dao *Dao) expandRecords(records []*models.Record, expandPath string, fetchFunc ExpandFetchFunc, recursionLevel int) error {
 	if fetchFunc == nil {
-		// load a default fetchFunc
-		fetchFunc = func(relCollection *models.Collection, relIds []string) ([]*models.Record, error) {
-			return dao.FindRecordsByIds(relCollection.Id, relIds)
-		}
+		return errors.New("Relation records fetchFunc is not set.")
 	}
 
 	if expandPath == "" || recursionLevel > MaxExpandDepth || len(records) == 0 {
@@ -82,87 +68,70 @@ func (dao *Dao) expandRecords(records []*models.Record, expandPath string, fetch
 	var relCollection *models.Collection
 
 	parts := strings.SplitN(expandPath, ".", 2)
-	var matches []string
-
-	// @todo remove the old syntax support
-	if strings.Contains(parts[0], "(") {
-		matches = indirectExpandRegexOld.FindStringSubmatch(parts[0])
-		if len(matches) == 3 {
-			log.Printf(
-				"%s expand format is deprecated and will be removed in the future. Consider replacing it with %s_via_%s.\n",
-				matches[0],
-				matches[1],
-				matches[2],
-			)
-		}
-	} else {
-		matches = indirectExpandRegex.FindStringSubmatch(parts[0])
-	}
+	matches := indirectExpandRegex.FindStringSubmatch(parts[0])
 
 	if len(matches) == 3 {
 		indirectRel, _ := dao.FindCollectionByNameOrId(matches[1])
 		if indirectRel == nil {
-			return fmt.Errorf("couldn't find back-related collection %q", matches[1])
+			return fmt.Errorf("Couldn't find indirect related collection %q.", matches[1])
 		}
 
 		indirectRelField := indirectRel.Schema.GetFieldByName(matches[2])
 		if indirectRelField == nil || indirectRelField.Type != schema.FieldTypeRelation {
-			return fmt.Errorf("couldn't find back-relation field %q in collection %q", matches[2], indirectRel.Name)
+			return fmt.Errorf("Couldn't find indirect relation field %q in collection %q.", matches[2], mainCollection.Name)
 		}
 
 		indirectRelField.InitOptions()
 		indirectRelFieldOptions, _ := indirectRelField.Options.(*schema.RelationOptions)
 		if indirectRelFieldOptions == nil || indirectRelFieldOptions.CollectionId != mainCollection.Id {
-			return fmt.Errorf("invalid back-relation field path %q", parts[0])
+			return fmt.Errorf("Invalid indirect relation field path %q.", parts[0])
+		}
+		if indirectRelFieldOptions.MaxSelect != nil && *indirectRelFieldOptions.MaxSelect != 1 {
+			// for now don't allow multi-relation indirect fields expand
+			// due to eventual poor query performance with large data sets.
+			return fmt.Errorf("Multi-relation fields cannot be indirectly expanded in %q.", parts[0])
 		}
 
-		// add the related id(s) as a dynamic relation field value to
-		// allow further expand checks at later stage in a more unified manner
-		prepErr := func() error {
-			q := dao.DB().Select("id").
-				From(indirectRel.Name).
-				Limit(1000) // the limit is arbitrary chosen and may change in the future
+		recordIds := make([]any, len(records))
+		for i, record := range records {
+			recordIds[i] = record.Id
+		}
 
-			if indirectRelFieldOptions.IsMultiple() {
-				q.AndWhere(dbx.Exists(dbx.NewExp(fmt.Sprintf(
-					"SELECT 1 FROM %s je WHERE je.value = {:id}",
-					dbutils.JsonEach(indirectRelField.Name),
-				))))
-			} else {
-				q.AndWhere(dbx.NewExp("[[" + indirectRelField.Name + "]] = {:id}"))
+		// @todo after the index optimizations consider allowing
+		// indirect expand for multi-relation fields
+		indirectRecords, err := dao.FindRecordsByExpr(
+			indirectRel.Id,
+			dbx.In(inflector.Columnify(matches[2]), recordIds...),
+		)
+		if err != nil {
+			return err
+		}
+		mappedIndirectRecordIds := make(map[string][]string, len(indirectRecords))
+		for _, indirectRecord := range indirectRecords {
+			recId := indirectRecord.GetString(matches[2])
+			if recId != "" {
+				mappedIndirectRecordIds[recId] = append(mappedIndirectRecordIds[recId], indirectRecord.Id)
 			}
+		}
 
-			pq := q.Build().Prepare()
-
-			for _, record := range records {
-				var relIds []string
-
-				err := pq.Bind(dbx.Params{"id": record.Id}).Column(&relIds)
-				if err != nil {
-					return errors.Join(err, pq.Close())
-				}
-
-				if len(relIds) > 0 {
-					record.Set(parts[0], relIds)
-				}
+		// add the indirect relation ids as a new relation field value
+		for _, record := range records {
+			relIds, ok := mappedIndirectRecordIds[record.Id]
+			if ok && len(relIds) > 0 {
+				record.Set(parts[0], relIds)
 			}
-
-			return pq.Close()
-		}()
-		if prepErr != nil {
-			return prepErr
 		}
 
 		relFieldOptions = &schema.RelationOptions{
 			MaxSelect:    nil,
 			CollectionId: indirectRel.Id,
 		}
-		if dbutils.HasSingleColumnUniqueIndex(indirectRelField.Name, indirectRel.Indexes) {
+		if indirectRelField.Unique {
 			relFieldOptions.MaxSelect = types.Pointer(1)
 		}
-		// indirect/back relation
+		// indirect relation
 		relField = &schema.SchemaField{
-			Id:      "_" + parts[0] + security.PseudorandomString(3),
+			Id:      "indirect_" + security.PseudorandomString(5),
 			Type:    schema.FieldTypeRelation,
 			Name:    parts[0],
 			Options: relFieldOptions,
@@ -300,14 +269,3 @@ func normalizeExpands(paths []string) []string {
 
 	return list.ToUniqueStringSlice(result)
 }
-
-func isRelFieldUnique(collection *models.Collection, fieldName string) bool {
-	for _, idx := range collection.Indexes {
-		parsed := dbutils.ParseIndex(idx)
-		if parsed.Unique && len(parsed.Columns) == 1 && strings.EqualFold(parsed.Columns[0].Name, fieldName) {
-			return true
-		}
-	}
-
-	return false
-}

daos/record_expand_test.go

@@ -14,8 +14,6 @@ import (
 )
 
 func TestExpandRecords(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -50,6 +48,15 @@ func TestExpandRecords(t *testing.T) {
 			0,
 			0,
 		},
+		{
+			"empty fetchFunc",
+			"demo4",
+			[]string{"i9naidtvr6qsgb4", "qzaqccwrmva4o1n"},
+			[]string{"self_rel_one", "self_rel_many.self_rel_one"},
+			nil,
+			0,
+			2,
+		},
 		{
 			"fetchFunc with error",
 			"demo4",
@@ -94,19 +101,6 @@ func TestExpandRecords(t *testing.T) {
 			0,
 			1,
 		},
-		{
-			"with nil fetchfunc",
-			"users",
-			[]string{
-				"bgs820n361vj1qd",
-				"4q1xlclmfloku33",
-				"oap640cot4yru2s", // no rels
-			},
-			[]string{"rel"},
-			nil,
-			2,
-			0,
-		},
 		{
 			"expand normalizations",
 			"demo4",
@@ -138,19 +132,6 @@ func TestExpandRecords(t *testing.T) {
 			2,
 			0,
 		},
-		{
-			"with nil fetchfunc",
-			"users",
-			[]string{
-				"bgs820n361vj1qd",
-				"4q1xlclmfloku33",
-				"oap640cot4yru2s", // no rels
-			},
-			[]string{"rel"},
-			nil,
-			2,
-			0,
-		},
 		{
 			"maxExpandDepth reached",
 			"demo4",
@@ -163,7 +144,7 @@ func TestExpandRecords(t *testing.T) {
 			0,
 		},
 		{
-			"simple back single relation field expand (deprecated syntax)",
+			"simple indirect expand",
 			"demo3",
 			[]string{"lcl9d87w22ml6jy"},
 			[]string{"demo4(rel_one_no_cascade_required)"},
@@ -174,22 +155,11 @@ func TestExpandRecords(t *testing.T) {
 			0,
 		},
 		{
-			"simple back expand via single relation field",
-			"demo3",
-			[]string{"lcl9d87w22ml6jy"},
-			[]string{"demo4_via_rel_one_no_cascade_required"},
-			func(c *models.Collection, ids []string) ([]*models.Record, error) {
-				return app.Dao().FindRecordsByIds(c.Id, ids, nil)
-			},
-			1,
-			0,
-		},
-		{
-			"nested back expand via single relation field",
+			"nested indirect expand",
 			"demo3",
 			[]string{"lcl9d87w22ml6jy"},
 			[]string{
-				"demo4_via_rel_one_no_cascade_required.self_rel_many.self_rel_many.self_rel_one",
+				"demo4(rel_one_no_cascade_required).self_rel_many.self_rel_many.self_rel_one",
 			},
 			func(c *models.Collection, ids []string) ([]*models.Record, error) {
 				return app.Dao().FindRecordsByIds(c.Id, ids, nil)
@@ -197,19 +167,6 @@ func TestExpandRecords(t *testing.T) {
 			5,
 			0,
 		},
-		{
-			"nested back expand via multiple relation field",
-			"demo3",
-			[]string{"lcl9d87w22ml6jy"},
-			[]string{
-				"demo4_via_rel_many_no_cascade_required.self_rel_many.rel_many_no_cascade_required.demo4_via_rel_many_no_cascade_required",
-			},
-			func(c *models.Collection, ids []string) ([]*models.Record, error) {
-				return app.Dao().FindRecordsByIds(c.Id, ids, nil)
-			},
-			7,
-			0,
-		},
 		{
 			"expand multiple relations sharing a common path",
 			"demo4",
@@ -248,8 +205,6 @@ func TestExpandRecords(t *testing.T) {
 }
 
 func TestExpandRecord(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -273,6 +228,15 @@ func TestExpandRecord(t *testing.T) {
 			0,
 			0,
 		},
+		{
+			"empty fetchFunc",
+			"demo4",
+			"i9naidtvr6qsgb4",
+			[]string{"self_rel_one", "self_rel_many.self_rel_one"},
+			nil,
+			0,
+			2,
+		},
 		{
 			"fetchFunc with error",
 			"demo4",
@@ -356,7 +320,7 @@ func TestExpandRecord(t *testing.T) {
 			0,
 		},
 		{
-			"simple indirect expand via single relation field (deprecated syntax)",
+			"simple indirect expand",
 			"demo3",
 			"lcl9d87w22ml6jy",
 			[]string{"demo4(rel_one_no_cascade_required)"},
@@ -367,18 +331,7 @@ func TestExpandRecord(t *testing.T) {
 			0,
 		},
 		{
-			"simple indirect expand via single relation field",
-			"demo3",
-			"lcl9d87w22ml6jy",
-			[]string{"demo4_via_rel_one_no_cascade_required"},
-			func(c *models.Collection, ids []string) ([]*models.Record, error) {
-				return app.Dao().FindRecordsByIds(c.Id, ids, nil)
-			},
-			1,
-			0,
-		},
-		{
-			"nested indirect expand via single relation field",
+			"nested indirect expand",
 			"demo3",
 			"lcl9d87w22ml6jy",
 			[]string{
@@ -390,19 +343,6 @@ func TestExpandRecord(t *testing.T) {
 			5,
 			0,
 		},
-		{
-			"nested indirect expand via single relation field",
-			"demo3",
-			"lcl9d87w22ml6jy",
-			[]string{
-				"demo4_via_rel_many_no_cascade_required.self_rel_many.rel_many_no_cascade_required.demo4_via_rel_many_no_cascade_required",
-			},
-			func(c *models.Collection, ids []string) ([]*models.Record, error) {
-				return app.Dao().FindRecordsByIds(c.Id, ids, nil)
-			},
-			7,
-			0,
-		},
 	}
 
 	for _, s := range scenarios {
@@ -422,59 +362,3 @@ func TestExpandRecord(t *testing.T) {
 		}
 	}
 }
-
-func TestIndirectExpandSingeVsArrayResult(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	record, err := app.Dao().FindRecordById("demo3", "7nwo8tuiatetxdm")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	// non-unique indirect expand
-	{
-		errs := app.Dao().ExpandRecord(record, []string{"demo4_via_rel_one_cascade"}, func(c *models.Collection, ids []string) ([]*models.Record, error) {
-			return app.Dao().FindRecordsByIds(c.Id, ids, nil)
-		})
-		if len(errs) > 0 {
-			t.Fatal(errs)
-		}
-
-		result, ok := record.Expand()["demo4_via_rel_one_cascade"].([]*models.Record)
-		if !ok {
-			t.Fatalf("Expected the expanded result to be a slice, got %v", result)
-		}
-	}
-
-	// unique indirect expand
-	{
-		// mock a unique constraint for the rel_one_cascade field
-		// ---
-		demo4, err := app.Dao().FindCollectionByNameOrId("demo4")
-		if err != nil {
-			t.Fatal(err)
-		}
-
-		demo4.Indexes = append(demo4.Indexes, "create unique index idx_unique_expand on demo4 (rel_one_cascade)")
-
-		if err := app.Dao().SaveCollection(demo4); err != nil {
-			t.Fatalf("Failed to mock unique constraint: %v", err)
-		}
-		// ---
-
-		errs := app.Dao().ExpandRecord(record, []string{"demo4_via_rel_one_cascade"}, func(c *models.Collection, ids []string) ([]*models.Record, error) {
-			return app.Dao().FindRecordsByIds(c.Id, ids, nil)
-		})
-		if len(errs) > 0 {
-			t.Fatal(errs)
-		}
-
-		result, ok := record.Expand()["demo4_via_rel_one_cascade"].(*models.Record)
-		if !ok {
-			t.Fatalf("Expected the expanded result to be a single model, got %v", result)
-		}
-	}
-}

daos/record_table_sync.go

@@ -2,14 +2,11 @@ package daos
 
 import (
 	"fmt"
-	"strconv"
 	"strings"
 
-	"github.com/pocketbase/dbx"
-	validation "github.com/pocketbase/ozzo-validation/v4"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/models/schema"
-	"github.com/pocketbase/pocketbase/tools/dbutils"
+	"github.com/pocketbase/pocketbase/tools/list"
 	"github.com/pocketbase/pocketbase/tools/security"
 )
 
@@ -18,68 +15,70 @@ import (
 //
 // If `oldCollection` is null, then only `newCollection` is used to create the record table.
 func (dao *Dao) SyncRecordTableSchema(newCollection *models.Collection, oldCollection *models.Collection) error {
-	return dao.RunInTransaction(func(txDao *Dao) error {
-		// create
-		// -----------------------------------------------------------
-		if oldCollection == nil {
-			cols := map[string]string{
-				schema.FieldNameId:      "TEXT PRIMARY KEY DEFAULT ('r'||lower(hex(randomblob(7)))) NOT NULL",
-				schema.FieldNameCreated: "TEXT DEFAULT (strftime('%Y-%m-%d %H:%M:%fZ')) NOT NULL",
-				schema.FieldNameUpdated: "TEXT DEFAULT (strftime('%Y-%m-%d %H:%M:%fZ')) NOT NULL",
-			}
-
-			if newCollection.IsAuth() {
-				cols[schema.FieldNameUsername] = "TEXT NOT NULL"
-				cols[schema.FieldNameEmail] = "TEXT DEFAULT '' NOT NULL"
-				cols[schema.FieldNameEmailVisibility] = "BOOLEAN DEFAULT FALSE NOT NULL"
-				cols[schema.FieldNameVerified] = "BOOLEAN DEFAULT FALSE NOT NULL"
-				cols[schema.FieldNameTokenKey] = "TEXT NOT NULL"
-				cols[schema.FieldNamePasswordHash] = "TEXT NOT NULL"
-				cols[schema.FieldNameLastResetSentAt] = "TEXT DEFAULT '' NOT NULL"
-				cols[schema.FieldNameLastVerificationSentAt] = "TEXT DEFAULT '' NOT NULL"
-				cols[schema.FieldNameLastLoginAlertSentAt] = "TEXT DEFAULT '' NOT NULL"
-			}
-
-			// ensure that the new collection has an id
-			if !newCollection.HasId() {
-				newCollection.RefreshId()
-				newCollection.MarkAsNew()
-			}
-
-			tableName := newCollection.Name
-
-			// add schema field definitions
-			for _, field := range newCollection.Schema.Fields() {
-				cols[field.Name] = field.ColDefinition()
-			}
-
-			// create table
-			if _, err := txDao.DB().CreateTable(tableName, cols).Execute(); err != nil {
-				return err
-			}
-
-			// add named unique index on the email and tokenKey columns
-			if newCollection.IsAuth() {
-				_, err := txDao.DB().NewQuery(fmt.Sprintf(
-					`
-					CREATE UNIQUE INDEX _%s_username_idx ON {{%s}} ([[username]]);
-					CREATE UNIQUE INDEX _%s_email_idx ON {{%s}} ([[email]]) WHERE [[email]] != '';
-					CREATE UNIQUE INDEX _%s_tokenKey_idx ON {{%s}} ([[tokenKey]]);
-					`,
-					newCollection.Id, tableName,
-					newCollection.Id, tableName,
-					newCollection.Id, tableName,
-				)).Execute()
-				if err != nil {
-					return err
-				}
-			}
-
-			return txDao.createCollectionIndexes(newCollection)
+	// create
+	if oldCollection == nil {
+		cols := map[string]string{
+			schema.FieldNameId:      "TEXT PRIMARY KEY NOT NULL",
+			schema.FieldNameCreated: "TEXT DEFAULT '' NOT NULL",
+			schema.FieldNameUpdated: "TEXT DEFAULT '' NOT NULL",
 		}
 
-		// update
-		// -----------------------------------------------------------
+		if newCollection.IsAuth() {
+			cols[schema.FieldNameUsername] = "TEXT NOT NULL"
+			cols[schema.FieldNameEmail] = "TEXT DEFAULT '' NOT NULL"
+			cols[schema.FieldNameEmailVisibility] = "BOOLEAN DEFAULT FALSE NOT NULL"
+			cols[schema.FieldNameVerified] = "BOOLEAN DEFAULT FALSE NOT NULL"
+			cols[schema.FieldNameTokenKey] = "TEXT NOT NULL"
+			cols[schema.FieldNamePasswordHash] = "TEXT NOT NULL"
+			cols[schema.FieldNameLastResetSentAt] = "TEXT DEFAULT '' NOT NULL"
+			cols[schema.FieldNameLastVerificationSentAt] = "TEXT DEFAULT '' NOT NULL"
+		}
+
+		// ensure that the new collection has an id
+		if !newCollection.HasId() {
+			newCollection.RefreshId()
+			newCollection.MarkAsNew()
+		}
+
+		tableName := newCollection.Name
+
+		// add schema field definitions
+		for _, field := range newCollection.Schema.Fields() {
+			cols[field.Name] = field.ColDefinition()
+		}
+
+		// create table
+		if _, err := dao.DB().CreateTable(tableName, cols).Execute(); err != nil {
+			return err
+		}
+
+		// add named index on the base `created` column
+		if _, err := dao.DB().CreateIndex(tableName, "_"+newCollection.Id+"_created_idx", "created").Execute(); err != nil {
+			return err
+		}
+
+		// add named unique index on the email and tokenKey columns
+		if newCollection.IsAuth() {
+			_, err := dao.DB().NewQuery(fmt.Sprintf(
+				`
+				CREATE UNIQUE INDEX _%s_username_idx ON {{%s}} ([[username]]);
+				CREATE UNIQUE INDEX _%s_email_idx ON {{%s}} ([[email]]) WHERE [[email]] != '';
+				CREATE UNIQUE INDEX _%s_tokenKey_idx ON {{%s}} ([[tokenKey]]);
+				`,
+				newCollection.Id, tableName,
+				newCollection.Id, tableName,
+				newCollection.Id, tableName,
+			)).Execute()
+			if err != nil {
+				return err
+			}
+		}
+
+		return nil
+	}
+
+	// update
+	return dao.RunInTransaction(func(txDao *Dao) error {
 		oldTableName := oldCollection.Name
 		newTableName := newCollection.Name
 		oldSchema := oldCollection.Schema
@@ -87,14 +86,9 @@ func (dao *Dao) SyncRecordTableSchema(newCollection *models.Collection, oldColle
 		deletedFieldNames := []string{}
 		renamedFieldNames := map[string]string{}
 
-		// drop old indexes (if any)
-		if err := txDao.dropCollectionIndex(oldCollection); err != nil {
-			return err
-		}
-
 		// check for renamed table
 		if !strings.EqualFold(oldTableName, newTableName) {
-			_, err := txDao.DB().RenameTable("{{"+oldTableName+"}}", "{{"+newTableName+"}}").Execute()
+			_, err := txDao.DB().RenameTable(oldTableName, newTableName).Execute()
 			if err != nil {
 				return err
 			}
@@ -108,7 +102,7 @@ func (dao *Dao) SyncRecordTableSchema(newCollection *models.Collection, oldColle
 
 			_, err := txDao.DB().DropColumn(newTableName, oldField.Name).Execute()
 			if err != nil {
-				return fmt.Errorf("failed to drop column %s - %w", oldField.Name, err)
+				return err
 			}
 
 			deletedFieldNames = append(deletedFieldNames, oldField.Name)
@@ -131,7 +125,7 @@ func (dao *Dao) SyncRecordTableSchema(newCollection *models.Collection, oldColle
 				// add
 				_, err := txDao.DB().AddColumn(newTableName, tempName, field.ColDefinition()).Execute()
 				if err != nil {
-					return fmt.Errorf("failed to add column %s - %w", field.Name, err)
+					return err
 				}
 			} else if oldField.Name != field.Name {
 				tempName := field.Name + security.PseudorandomString(5)
@@ -140,7 +134,7 @@ func (dao *Dao) SyncRecordTableSchema(newCollection *models.Collection, oldColle
 				// rename
 				_, err := txDao.DB().RenameColumn(newTableName, oldField.Name, tempName).Execute()
 				if err != nil {
-					return fmt.Errorf("failed to rename column %s - %w", oldField.Name, err)
+					return err
 				}
 
 				renamedFieldNames[oldField.Name] = field.Name
@@ -155,207 +149,50 @@ func (dao *Dao) SyncRecordTableSchema(newCollection *models.Collection, oldColle
 			}
 		}
 
-		if err := txDao.normalizeSingleVsMultipleFieldChanges(newCollection, oldCollection); err != nil {
-			return err
-		}
-
-		return txDao.createCollectionIndexes(newCollection)
+		return txDao.syncCollectionReferences(newCollection, renamedFieldNames, deletedFieldNames)
 	})
 }
 
-func (dao *Dao) normalizeSingleVsMultipleFieldChanges(newCollection, oldCollection *models.Collection) error {
-	if newCollection.IsView() || oldCollection == nil {
-		return nil // view or not an update
+func (dao *Dao) syncCollectionReferences(collection *models.Collection, renamedFieldNames map[string]string, deletedFieldNames []string) error {
+	if len(renamedFieldNames) == 0 && len(deletedFieldNames) == 0 {
+		return nil // nothing to sync
 	}
 
-	return dao.RunInTransaction(func(txDao *Dao) error {
-		// temporary disable the schema error checks to prevent view and trigger errors
-		// when "altering" (aka. deleting and recreating) the non-normalized columns
-		if _, err := txDao.DB().NewQuery("PRAGMA writable_schema = ON").Execute(); err != nil {
-			return err
-		}
-		// executed with defer to make sure that the pragma is always reverted
-		// in case of an error and when nested transactions are used
-		defer txDao.DB().NewQuery("PRAGMA writable_schema = RESET").Execute()
+	refs, err := dao.FindCollectionReferences(collection)
+	if err != nil {
+		return err
+	}
 
-		for _, newField := range newCollection.Schema.Fields() {
-			// allow to continue even if there is no old field for the cases
-			// when a new field is added and there are already inserted data
-			var isOldMultiple bool
-			if oldField := oldCollection.Schema.GetFieldById(newField.Id); oldField != nil {
-				if opt, ok := oldField.Options.(schema.MultiValuer); ok {
-					isOldMultiple = opt.IsMultiple()
+	for refCollection, refFields := range refs {
+		for _, refField := range refFields {
+			options, _ := refField.Options.(*schema.RelationOptions)
+			if options == nil {
+				continue
+			}
+
+			// remove deleted (if any)
+			newDisplayFields := list.SubtractSlice(options.DisplayFields, deletedFieldNames)
+
+			for old, new := range renamedFieldNames {
+				for i, name := range newDisplayFields {
+					if name == old {
+						newDisplayFields[i] = new
+					}
 				}
 			}
 
-			var isNewMultiple bool
-			if opt, ok := newField.Options.(schema.MultiValuer); ok {
-				isNewMultiple = opt.IsMultiple()
-			}
+			// has changes
+			if len(list.SubtractSlice(options.DisplayFields, newDisplayFields)) > 0 {
+				options.DisplayFields = newDisplayFields
 
-			if isOldMultiple == isNewMultiple {
-				continue // no change
-			}
-
-			// update the column definition by:
-			// 1. inserting a new column with the new definition
-			// 2. copy normalized values from the original column to the new one
-			// 3. drop the original column
-			// 4. rename the new column to the original column
-			// -------------------------------------------------------
-
-			originalName := newField.Name
-			tempName := "_" + newField.Name + security.PseudorandomString(5)
-
-			_, err := txDao.DB().AddColumn(newCollection.Name, tempName, newField.ColDefinition()).Execute()
-			if err != nil {
-				return err
-			}
-
-			var copyQuery *dbx.Query
-
-			if !isOldMultiple && isNewMultiple {
-				// single -> multiple (convert to array)
-				copyQuery = txDao.DB().NewQuery(fmt.Sprintf(
-					`UPDATE {{%s}} set [[%s]] = (
-							CASE
-								WHEN COALESCE([[%s]], '') = ''
-								THEN '[]'
-								ELSE (
-									CASE
-										WHEN json_valid([[%s]]) AND json_type([[%s]]) == 'array'
-										THEN [[%s]]
-										ELSE json_array([[%s]])
-									END
-								)
-							END
-						)`,
-					newCollection.Name,
-					tempName,
-					originalName,
-					originalName,
-					originalName,
-					originalName,
-					originalName,
-				))
-			} else {
-				// multiple -> single (keep only the last element)
-				//
-				// note: for file fields the actual file objects are not
-				// deleted allowing additional custom handling via migration
-				copyQuery = txDao.DB().NewQuery(fmt.Sprintf(
-					`UPDATE {{%s}} set [[%s]] = (
-						CASE
-							WHEN COALESCE([[%s]], '[]') = '[]'
-							THEN ''
-							ELSE (
-								CASE
-									WHEN json_valid([[%s]]) AND json_type([[%s]]) == 'array'
-									THEN COALESCE(json_extract([[%s]], '$[#-1]'), '')
-									ELSE [[%s]]
-								END
-							)
-						END
-					)`,
-					newCollection.Name,
-					tempName,
-					originalName,
-					originalName,
-					originalName,
-					originalName,
-					originalName,
-				))
-			}
-
-			// copy the normalized values
-			if _, err := copyQuery.Execute(); err != nil {
-				return err
-			}
-
-			// drop the original column
-			if _, err := txDao.DB().DropColumn(newCollection.Name, originalName).Execute(); err != nil {
-				return err
-			}
-
-			// rename the new column back to the original
-			if _, err := txDao.DB().RenameColumn(newCollection.Name, tempName, originalName).Execute(); err != nil {
-				return err
+				// direct collection save to prevent self-referencing
+				// recursion and unnecessary records table sync checks
+				if err := dao.Save(refCollection); err != nil {
+					return err
+				}
 			}
 		}
-
-		// revert the pragma and reload the schema
-		_, revertErr := txDao.DB().NewQuery("PRAGMA writable_schema = RESET").Execute()
-
-		return revertErr
-	})
-}
-
-func (dao *Dao) dropCollectionIndex(collection *models.Collection) error {
-	if collection.IsView() {
-		return nil // views don't have indexes
 	}
 
-	return dao.RunInTransaction(func(txDao *Dao) error {
-		for _, raw := range collection.Indexes {
-			parsed := dbutils.ParseIndex(raw)
-
-			if !parsed.IsValid() {
-				continue
-			}
-
-			if _, err := txDao.DB().NewQuery(fmt.Sprintf("DROP INDEX IF EXISTS [[%s]]", parsed.IndexName)).Execute(); err != nil {
-				return err
-			}
-		}
-
-		return nil
-	})
-}
-
-func (dao *Dao) createCollectionIndexes(collection *models.Collection) error {
-	if collection.IsView() {
-		return nil // views don't have indexes
-	}
-
-	return dao.RunInTransaction(func(txDao *Dao) error {
-		// drop new indexes in case a duplicated index name is used
-		if err := txDao.dropCollectionIndex(collection); err != nil {
-			return err
-		}
-
-		// upsert new indexes
-		//
-		// note: we are returning validation errors because the indexes cannot be
-		//       validated in a form, aka. before persisting the related collection
-		//       record table changes
-		errs := validation.Errors{}
-		for i, idx := range collection.Indexes {
-			parsed := dbutils.ParseIndex(idx)
-
-			// ensure that the index is always for the current collection
-			parsed.TableName = collection.Name
-
-			if !parsed.IsValid() {
-				errs[strconv.Itoa(i)] = validation.NewError(
-					"validation_invalid_index_expression",
-					"Invalid CREATE INDEX expression.",
-				)
-				continue
-			}
-
-			if _, err := txDao.DB().NewQuery(parsed.Build()).Execute(); err != nil {
-				errs[strconv.Itoa(i)] = validation.NewError(
-					"validation_invalid_index_expression",
-					fmt.Sprintf("Failed to create index %s - %v.", parsed.IndexName, err.Error()),
-				)
-				continue
-			}
-		}
-
-		if len(errs) > 0 {
-			return validation.Errors{"indexes": errs}
-		}
-
-		return nil
-	})
+	return nil
 }

daos/record_table_sync_test.go

@@ -1,21 +1,15 @@
 package daos_test
 
 import (
-	"bytes"
-	"encoding/json"
 	"testing"
 
-	"github.com/pocketbase/dbx"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/models/schema"
 	"github.com/pocketbase/pocketbase/tests"
 	"github.com/pocketbase/pocketbase/tools/list"
-	"github.com/pocketbase/pocketbase/tools/types"
 )
 
 func TestSyncRecordTableSchema(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -42,17 +36,15 @@ func TestSyncRecordTableSchema(t *testing.T) {
 			Type: schema.FieldTypeEmail,
 		},
 	)
-	updatedCollection.Indexes = types.JsonArray[string]{"create index idx_title_renamed on anything (title_renamed)"}
 
 	scenarios := []struct {
-		name                 string
-		newCollection        *models.Collection
-		oldCollection        *models.Collection
-		expectedColumns      []string
-		expectedIndexesCount int
+		newCollection     *models.Collection
+		oldCollection     *models.Collection
+		expectedTableName string
+		expectedColumns   []string
 	}{
+		// new base collection
 		{
-			"new base collection",
 			&models.Collection{
 				Name: "new_table",
 				Schema: schema.NewSchema(
@@ -63,11 +55,11 @@ func TestSyncRecordTableSchema(t *testing.T) {
 				),
 			},
 			nil,
+			"new_table",
 			[]string{"id", "created", "updated", "test"},
-			0,
 		},
+		// new auth collection
 		{
-			"new auth collection",
 			&models.Collection{
 				Name: "new_table_auth",
 				Type: models.CollectionTypeAuth,
@@ -77,247 +69,51 @@ func TestSyncRecordTableSchema(t *testing.T) {
 						Type: schema.FieldTypeText,
 					},
 				),
-				Indexes: types.JsonArray[string]{"create index idx_auth_test on anything (email, username)"},
 			},
 			nil,
+			"new_table_auth",
 			[]string{
 				"id", "created", "updated", "test",
 				"username", "email", "verified", "emailVisibility",
-				"tokenKey", "passwordHash", "lastResetSentAt", "lastVerificationSentAt", "lastLoginAlertSentAt",
+				"tokenKey", "passwordHash", "lastResetSentAt", "lastVerificationSentAt",
 			},
-			4,
 		},
+		// no changes
 		{
-			"no changes",
 			oldCollection,
 			oldCollection,
+			"demo3",
 			[]string{"id", "created", "updated", "title", "active"},
-			3,
 		},
+		// renamed table, deleted column, renamed columnd and new column
 		{
-			"renamed table, deleted column, renamed columnd and new column",
 			updatedCollection,
 			oldCollection,
+			"demo_renamed",
 			[]string{"id", "created", "updated", "title_renamed", "new_field"},
-			1,
 		},
 	}
 
-	for _, s := range scenarios {
-		err := app.Dao().SyncRecordTableSchema(s.newCollection, s.oldCollection)
+	for i, scenario := range scenarios {
+		err := app.Dao().SyncRecordTableSchema(scenario.newCollection, scenario.oldCollection)
 		if err != nil {
-			t.Errorf("[%s] %v", s.name, err)
+			t.Errorf("(%d) %v", i, err)
 			continue
 		}
 
-		if !app.Dao().HasTable(s.newCollection.Name) {
-			t.Errorf("[%s] Expected table %s to exist", s.name, s.newCollection.Name)
+		if !app.Dao().HasTable(scenario.newCollection.Name) {
+			t.Errorf("(%d) Expected table %s to exist", i, scenario.newCollection.Name)
 		}
 
-		cols, _ := app.Dao().TableColumns(s.newCollection.Name)
-		if len(cols) != len(s.expectedColumns) {
-			t.Errorf("[%s] Expected columns %v, got %v", s.name, s.expectedColumns, cols)
+		cols, _ := app.Dao().GetTableColumns(scenario.newCollection.Name)
+		if len(cols) != len(scenario.expectedColumns) {
+			t.Errorf("(%d) Expected columns %v, got %v", i, scenario.expectedColumns, cols)
 		}
 
 		for _, c := range cols {
-			if !list.ExistInSlice(c, s.expectedColumns) {
-				t.Errorf("[%s] Couldn't find column %s in %v", s.name, c, s.expectedColumns)
+			if !list.ExistInSlice(c, scenario.expectedColumns) {
+				t.Errorf("(%d) Couldn't find column %s in %v", i, c, scenario.expectedColumns)
 			}
 		}
-
-		indexes, _ := app.Dao().TableIndexes(s.newCollection.Name)
-
-		if totalIndexes := len(indexes); totalIndexes != s.expectedIndexesCount {
-			t.Errorf("[%s] Expected %d indexes, got %d:\n%v", s.name, s.expectedIndexesCount, totalIndexes, indexes)
-		}
-	}
-}
-
-func TestSingleVsMultipleValuesNormalization(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	collection, err := app.Dao().FindCollectionByNameOrId("demo1")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	// mock field changes
-	{
-		selectOneField := collection.Schema.GetFieldByName("select_one")
-		opt := selectOneField.Options.(*schema.SelectOptions)
-		opt.MaxSelect = 2
-	}
-	{
-		selectManyField := collection.Schema.GetFieldByName("select_many")
-		opt := selectManyField.Options.(*schema.SelectOptions)
-		opt.MaxSelect = 1
-	}
-	{
-		fileOneField := collection.Schema.GetFieldByName("file_one")
-		opt := fileOneField.Options.(*schema.FileOptions)
-		opt.MaxSelect = 2
-	}
-	{
-		fileManyField := collection.Schema.GetFieldByName("file_many")
-		opt := fileManyField.Options.(*schema.FileOptions)
-		opt.MaxSelect = 1
-	}
-	{
-		relOneField := collection.Schema.GetFieldByName("rel_one")
-		opt := relOneField.Options.(*schema.RelationOptions)
-		opt.MaxSelect = types.Pointer(2)
-	}
-	{
-		relManyField := collection.Schema.GetFieldByName("rel_many")
-		opt := relManyField.Options.(*schema.RelationOptions)
-		opt.MaxSelect = types.Pointer(1)
-	}
-	{
-		// new multivaluer field to check whether the array normalization
-		// will be applied for already inserted data
-		collection.Schema.AddField(&schema.SchemaField{
-			Name: "new_multiple",
-			Type: schema.FieldTypeSelect,
-			Options: &schema.SelectOptions{
-				Values:    []string{"a", "b", "c"},
-				MaxSelect: 3,
-			},
-		})
-	}
-
-	if err := app.Dao().SaveCollection(collection); err != nil {
-		t.Fatal(err)
-	}
-
-	// ensures that the writable schema was reverted to its expected default
-	var writableSchema bool
-	app.Dao().DB().NewQuery("PRAGMA writable_schema").Row(&writableSchema)
-	if writableSchema == true {
-		t.Fatalf("Expected writable_schema to be OFF, got %v", writableSchema)
-	}
-
-	// check whether the columns DEFAULT definition was updated
-	// ---------------------------------------------------------------
-	tableInfo, err := app.Dao().TableInfo(collection.Name)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	tableInfoExpectations := map[string]string{
-		"select_one":   `'[]'`,
-		"select_many":  `''`,
-		"file_one":     `'[]'`,
-		"file_many":    `''`,
-		"rel_one":      `'[]'`,
-		"rel_many":     `''`,
-		"new_multiple": `'[]'`,
-	}
-	for col, dflt := range tableInfoExpectations {
-		t.Run("check default for "+col, func(t *testing.T) {
-			var row *models.TableInfoRow
-			for _, r := range tableInfo {
-				if r.Name == col {
-					row = r
-					break
-				}
-			}
-			if row == nil {
-				t.Fatalf("Missing info for column %q", col)
-			}
-
-			if v := row.DefaultValue.String(); v != dflt {
-				t.Fatalf("Expected default value %q, got %q", dflt, v)
-			}
-		})
-	}
-
-	// check whether the values were normalized
-	// ---------------------------------------------------------------
-	type fieldsExpectation struct {
-		SelectOne   string `db:"select_one"`
-		SelectMany  string `db:"select_many"`
-		FileOne     string `db:"file_one"`
-		FileMany    string `db:"file_many"`
-		RelOne      string `db:"rel_one"`
-		RelMany     string `db:"rel_many"`
-		NewMultiple string `db:"new_multiple"`
-	}
-
-	fieldsScenarios := []struct {
-		recordId string
-		expected fieldsExpectation
-	}{
-		{
-			"imy661ixudk5izi",
-			fieldsExpectation{
-				SelectOne:   `[]`,
-				SelectMany:  ``,
-				FileOne:     `[]`,
-				FileMany:    ``,
-				RelOne:      `[]`,
-				RelMany:     ``,
-				NewMultiple: `[]`,
-			},
-		},
-		{
-			"al1h9ijdeojtsjy",
-			fieldsExpectation{
-				SelectOne:   `["optionB"]`,
-				SelectMany:  `optionB`,
-				FileOne:     `["300_Jsjq7RdBgA.png"]`,
-				FileMany:    ``,
-				RelOne:      `["84nmscqy84lsi1t"]`,
-				RelMany:     `oap640cot4yru2s`,
-				NewMultiple: `[]`,
-			},
-		},
-		{
-			"84nmscqy84lsi1t",
-			fieldsExpectation{
-				SelectOne:   `["optionB"]`,
-				SelectMany:  `optionC`,
-				FileOne:     `["test_d61b33QdDU.txt"]`,
-				FileMany:    `test_tC1Yc87DfC.txt`,
-				RelOne:      `[]`,
-				RelMany:     `oap640cot4yru2s`,
-				NewMultiple: `[]`,
-			},
-		},
-	}
-
-	for _, s := range fieldsScenarios {
-		t.Run("check fields for record "+s.recordId, func(t *testing.T) {
-			result := new(fieldsExpectation)
-
-			err := app.Dao().DB().Select(
-				"select_one",
-				"select_many",
-				"file_one",
-				"file_many",
-				"rel_one",
-				"rel_many",
-				"new_multiple",
-			).From(collection.Name).Where(dbx.HashExp{"id": s.recordId}).One(result)
-			if err != nil {
-				t.Fatalf("Failed to load record: %v", err)
-			}
-
-			encodedResult, err := json.Marshal(result)
-			if err != nil {
-				t.Fatalf("Failed to encode result: %v", err)
-			}
-
-			encodedExpectation, err := json.Marshal(s.expected)
-			if err != nil {
-				t.Fatalf("Failed to encode expectation: %v", err)
-			}
-
-			if !bytes.EqualFold(encodedExpectation, encodedResult) {
-				t.Fatalf("Expected \n%s, \ngot \n%s", encodedExpectation, encodedResult)
-			}
-		})
 	}
 }

daos/record_test.go

@@ -4,8 +4,8 @@ import (
 	"context"
 	"database/sql"
 	"errors"
+	"fmt"
 	"regexp"
-	"slices"
 	"strings"
 	"testing"
 	"time"
@@ -19,9 +19,7 @@ import (
 	"github.com/pocketbase/pocketbase/tools/types"
 )
 
-func TestRecordQueryWithDifferentCollectionValues(t *testing.T) {
-	t.Parallel()
-
+func TestRecordQuery(t *testing.T) {
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -30,128 +28,15 @@ func TestRecordQueryWithDifferentCollectionValues(t *testing.T) {
 		t.Fatal(err)
 	}
 
-	scenarios := []struct {
-		name          any
-		collection    any
-		expectedTotal int
-		expectError   bool
-	}{
-		{"with nil value", nil, 0, true},
-		{"with invalid or missing collection id/name", "missing", 0, true},
-		{"with pointer model", collection, 3, false},
-		{"with value model", *collection, 3, false},
-		{"with name", "demo1", 3, false},
-		{"with id", "wsmn24bux7wo113", 3, false},
-	}
+	expected := fmt.Sprintf("SELECT `%s`.* FROM `%s`", collection.Name, collection.Name)
 
-	for _, s := range scenarios {
-		var records []*models.Record
-		err := app.Dao().RecordQuery(s.collection).All(&records)
-
-		hasErr := err != nil
-		if hasErr != s.expectError {
-			t.Errorf("[%s] Expected hasError %v, got %v", s.name, s.expectError, hasErr)
-			continue
-		}
-
-		if total := len(records); total != s.expectedTotal {
-			t.Errorf("[%s] Expected %d records, got %d", s.name, s.expectedTotal, total)
-		}
-	}
-}
-
-func TestRecordQueryOneWithRecord(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	collection, err := app.Dao().FindCollectionByNameOrId("demo1")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	id := "84nmscqy84lsi1t"
-
-	q := app.Dao().RecordQuery(collection).
-		Where(dbx.HashExp{"id": id})
-
-	record := &models.Record{}
-	if err := q.One(record); err != nil {
-		t.Fatal(err)
-	}
-
-	if record.GetString("id") != id {
-		t.Fatalf("Expected record with id %q, got %q", id, record.GetString("id"))
-	}
-}
-
-func TestRecordQueryAllWithRecordsSlices(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	collection, err := app.Dao().FindCollectionByNameOrId("demo1")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	id1 := "84nmscqy84lsi1t"
-	id2 := "al1h9ijdeojtsjy"
-
-	{
-		records := []models.Record{}
-
-		q := app.Dao().RecordQuery(collection).
-			Where(dbx.HashExp{"id": []any{id1, id2}}).
-			OrderBy("created asc")
-
-		if err := q.All(&records); err != nil {
-			t.Fatal(err)
-		}
-
-		if len(records) != 2 {
-			t.Fatalf("Expected %d records, got %d", 2, len(records))
-		}
-
-		if records[0].Id != id1 {
-			t.Fatalf("Expected record with id %q, got %q", id1, records[0].Id)
-		}
-
-		if records[1].Id != id2 {
-			t.Fatalf("Expected record with id %q, got %q", id2, records[1].Id)
-		}
-	}
-
-	{
-		records := []*models.Record{}
-
-		q := app.Dao().RecordQuery(collection).
-			Where(dbx.HashExp{"id": []any{id1, id2}}).
-			OrderBy("created asc")
-
-		if err := q.All(&records); err != nil {
-			t.Fatal(err)
-		}
-
-		if len(records) != 2 {
-			t.Fatalf("Expected %d records, got %d", 2, len(records))
-		}
-
-		if records[0].Id != id1 {
-			t.Fatalf("Expected record with id %q, got %q", id1, records[0].Id)
-		}
-
-		if records[1].Id != id2 {
-			t.Fatalf("Expected record with id %q, got %q", id2, records[1].Id)
-		}
+	sql := app.Dao().RecordQuery(collection).Build().SQL()
+	if sql != expected {
+		t.Errorf("Expected sql %s, got %s", expected, sql)
 	}
 }
 
 func TestFindRecordById(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -212,8 +97,6 @@ func TestFindRecordById(t *testing.T) {
 }
 
 func TestFindRecordsByIds(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -305,8 +188,6 @@ func TestFindRecordsByIds(t *testing.T) {
 }
 
 func TestFindRecordsByExpr(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -377,8 +258,6 @@ func TestFindRecordsByExpr(t *testing.T) {
 }
 
 func TestFindFirstRecordByData(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -441,415 +320,7 @@ func TestFindFirstRecordByData(t *testing.T) {
 	}
 }
 
-func TestFindRecordsByFilter(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	scenarios := []struct {
-		name               string
-		collectionIdOrName string
-		filter             string
-		sort               string
-		limit              int
-		offset             int
-		params             []dbx.Params
-		expectError        bool
-		expectRecordIds    []string
-	}{
-		{
-			"missing collection",
-			"missing",
-			"id != ''",
-			"",
-			0,
-			0,
-			nil,
-			true,
-			nil,
-		},
-		{
-			"missing filter",
-			"demo2",
-			"",
-			"",
-			0,
-			0,
-			nil,
-			true,
-			nil,
-		},
-		{
-			"invalid filter",
-			"demo2",
-			"someMissingField > 1",
-			"",
-			0,
-			0,
-			nil,
-			true,
-			nil,
-		},
-		{
-			"simple filter",
-			"demo2",
-			"id != ''",
-			"",
-			0,
-			0,
-			nil,
-			false,
-			[]string{
-				"llvuca81nly1qls",
-				"achvryl401bhse3",
-				"0yxhwia2amd8gec",
-			},
-		},
-		{
-			"multi-condition filter with sort",
-			"demo2",
-			"id != '' && active=true",
-			"-created,title",
-			-1, // should behave the same as 0
-			0,
-			nil,
-			false,
-			[]string{
-				"0yxhwia2amd8gec",
-				"achvryl401bhse3",
-			},
-		},
-		{
-			"with limit and offset",
-			"demo2",
-			"id != ''",
-			"title",
-			2,
-			1,
-			nil,
-			false,
-			[]string{
-				"achvryl401bhse3",
-				"0yxhwia2amd8gec",
-			},
-		},
-		{
-			"with placeholder params",
-			"demo2",
-			"active = {:active}",
-			"",
-			10,
-			0,
-			[]dbx.Params{{"active": false}},
-			false,
-			[]string{
-				"llvuca81nly1qls",
-			},
-		},
-		{
-			"with json filter and sort",
-			"demo4",
-			"json_object != null && json_object.a.b = 'test'",
-			"-json_object.a",
-			10,
-			0,
-			[]dbx.Params{{"active": false}},
-			false,
-			[]string{
-				"i9naidtvr6qsgb4",
-			},
-		},
-	}
-
-	for _, s := range scenarios {
-		t.Run(s.name, func(t *testing.T) {
-			records, err := app.Dao().FindRecordsByFilter(
-				s.collectionIdOrName,
-				s.filter,
-				s.sort,
-				s.limit,
-				s.offset,
-				s.params...,
-			)
-
-			hasErr := err != nil
-			if hasErr != s.expectError {
-				t.Fatalf("[%s] Expected hasErr to be %v, got %v (%v)", s.name, s.expectError, hasErr, err)
-			}
-
-			if hasErr {
-				return
-			}
-
-			if len(records) != len(s.expectRecordIds) {
-				t.Fatalf("[%s] Expected %d records, got %d", s.name, len(s.expectRecordIds), len(records))
-			}
-
-			for i, id := range s.expectRecordIds {
-				if id != records[i].Id {
-					t.Fatalf("[%s] Expected record with id %q, got %q at index %d", s.name, id, records[i].Id, i)
-				}
-			}
-		})
-	}
-}
-
-func TestFindFirstRecordByFilter(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	scenarios := []struct {
-		name               string
-		collectionIdOrName string
-		filter             string
-		params             []dbx.Params
-		expectError        bool
-		expectRecordId     string
-	}{
-		{
-			"missing collection",
-			"missing",
-			"id != ''",
-			nil,
-			true,
-			"",
-		},
-		{
-			"missing filter",
-			"demo2",
-			"",
-			nil,
-			true,
-			"",
-		},
-		{
-			"invalid filter",
-			"demo2",
-			"someMissingField > 1",
-			nil,
-			true,
-			"",
-		},
-		{
-			"valid filter but no matches",
-			"demo2",
-			"id = 'test'",
-			nil,
-			true,
-			"",
-		},
-		{
-			"valid filter and multiple matches",
-			"demo2",
-			"id != ''",
-			nil,
-			false,
-			"llvuca81nly1qls",
-		},
-		{
-			"with placeholder params",
-			"demo2",
-			"active = {:active}",
-			[]dbx.Params{{"active": false}},
-			false,
-			"llvuca81nly1qls",
-		},
-	}
-
-	for _, s := range scenarios {
-		record, err := app.Dao().FindFirstRecordByFilter(s.collectionIdOrName, s.filter, s.params...)
-
-		hasErr := err != nil
-		if hasErr != s.expectError {
-			t.Errorf("[%s] Expected hasErr to be %v, got %v (%v)", s.name, s.expectError, hasErr, err)
-			continue
-		}
-
-		if hasErr {
-			continue
-		}
-
-		if record.Id != s.expectRecordId {
-			t.Errorf("[%s] Expected record with id %q, got %q", s.name, s.expectRecordId, record.Id)
-		}
-	}
-}
-
-func TestCanAccessRecord(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	admin, err := app.Dao().FindAdminByEmail("test@example.com")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	authRecord, err := app.Dao().FindAuthRecordByEmail("users", "test@example.com")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	record, err := app.Dao().FindRecordById("demo1", "imy661ixudk5izi")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	scenarios := []struct {
-		name        string
-		record      *models.Record
-		requestInfo *models.RequestInfo
-		rule        *string
-		expected    bool
-		expectError bool
-	}{
-		{
-			"as admin with nil rule",
-			record,
-			&models.RequestInfo{
-				Admin: admin,
-			},
-			nil,
-			true,
-			false,
-		},
-		{
-			"as admin with non-empty rule",
-			record,
-			&models.RequestInfo{
-				Admin: admin,
-			},
-			types.Pointer("id = ''"), // the filter rule should be ignored
-			true,
-			false,
-		},
-		{
-			"as admin with invalid rule",
-			record,
-			&models.RequestInfo{
-				Admin: admin,
-			},
-			types.Pointer("id ?!@ 1"), // the filter rule should be ignored
-			true,
-			false,
-		},
-		{
-			"as guest with nil rule",
-			record,
-			&models.RequestInfo{},
-			nil,
-			false,
-			false,
-		},
-		{
-			"as guest with empty rule",
-			record,
-			&models.RequestInfo{},
-			types.Pointer(""),
-			true,
-			false,
-		},
-		{
-			"as guest with invalid rule",
-			record,
-			&models.RequestInfo{},
-			types.Pointer("id ?!@ 1"),
-			false,
-			true,
-		},
-		{
-			"as guest with mismatched rule",
-			record,
-			&models.RequestInfo{},
-			types.Pointer("@request.auth.id != ''"),
-			false,
-			false,
-		},
-		{
-			"as guest with matched rule",
-			record,
-			&models.RequestInfo{
-				Data: map[string]any{"test": 1},
-			},
-			types.Pointer("@request.auth.id != '' || @request.data.test = 1"),
-			true,
-			false,
-		},
-		{
-			"as auth record with nil rule",
-			record,
-			&models.RequestInfo{
-				AuthRecord: authRecord,
-			},
-			nil,
-			false,
-			false,
-		},
-		{
-			"as auth record with empty rule",
-			record,
-			&models.RequestInfo{
-				AuthRecord: authRecord,
-			},
-			types.Pointer(""),
-			true,
-			false,
-		},
-		{
-			"as auth record with invalid rule",
-			record,
-			&models.RequestInfo{
-				AuthRecord: authRecord,
-			},
-			types.Pointer("id ?!@ 1"),
-			false,
-			true,
-		},
-		{
-			"as auth record with mismatched rule",
-			record,
-			&models.RequestInfo{
-				AuthRecord: authRecord,
-				Data:       map[string]any{"test": 1},
-			},
-			types.Pointer("@request.auth.id != '' && @request.data.test > 1"),
-			false,
-			false,
-		},
-		{
-			"as auth record with matched rule",
-			record,
-			&models.RequestInfo{
-				AuthRecord: authRecord,
-				Data:       map[string]any{"test": 2},
-			},
-			types.Pointer("@request.auth.id != '' && @request.data.test > 1"),
-			true,
-			false,
-		},
-	}
-
-	for _, s := range scenarios {
-		result, err := app.Dao().CanAccessRecord(s.record, s.requestInfo, s.rule)
-
-		if result != s.expected {
-			t.Errorf("[%s] Expected %v, got %v", s.name, s.expected, result)
-		}
-
-		hasErr := err != nil
-		if hasErr != s.expectError {
-			t.Errorf("[%s] Expected hasErr %v, got %v (%v)", s.name, s.expectError, hasErr, err)
-		}
-	}
-}
-
 func TestIsRecordValueUnique(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -899,8 +370,6 @@ func TestIsRecordValueUnique(t *testing.T) {
 }
 
 func TestFindAuthRecordByToken(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -963,8 +432,6 @@ func TestFindAuthRecordByToken(t *testing.T) {
 }
 
 func TestFindAuthRecordByEmail(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -996,8 +463,6 @@ func TestFindAuthRecordByEmail(t *testing.T) {
 }
 
 func TestFindAuthRecordByUsername(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -1030,8 +495,6 @@ func TestFindAuthRecordByUsername(t *testing.T) {
 }
 
 func TestSuggestUniqueAuthRecordUsername(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -1069,8 +532,6 @@ func TestSuggestUniqueAuthRecordUsername(t *testing.T) {
 }
 
 func TestSaveRecord(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -1104,8 +565,6 @@ func TestSaveRecord(t *testing.T) {
 }
 
 func TestSaveRecordWithIdFromOtherCollection(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -1138,8 +597,6 @@ func TestSaveRecordWithIdFromOtherCollection(t *testing.T) {
 }
 
 func TestDeleteRecord(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -1206,111 +663,17 @@ func TestDeleteRecord(t *testing.T) {
 	}
 	// ensure that the json rel fields were prefixed
 	joinedQueries := strings.Join(calledQueries, " ")
-	expectedRelManyPart := "SELECT `demo1`.`id` FROM `demo1` WHERE EXISTS (SELECT 1 FROM json_each(CASE WHEN json_valid([[demo1.rel_many]]) THEN [[demo1.rel_many]] ELSE json_array([[demo1.rel_many]]) END) {{__je__}} WHERE [[__je__.value]]='"
-	if !strings.Contains(joinedQueries, expectedRelManyPart) {
-		t.Fatalf("(rec3) Expected the cascade delete to call the query \n%v, got \n%v", expectedRelManyPart, calledQueries)
+	expectedRelManyJoin := "`demo1` INNER JOIN json_each(CASE WHEN json_valid([[demo1.rel_many]]) THEN [[demo1.rel_many]] ELSE json_array([[demo1.rel_many]]) END)"
+	if !strings.Contains(joinedQueries, expectedRelManyJoin) {
+		t.Fatalf("(rec3) Expected the cascade delete to call the query \n%v, got \n%v", expectedRelManyJoin, calledQueries)
 	}
-	expectedRelOnePart := "SELECT `demo1`.`id` FROM `demo1` WHERE (`demo1`.`rel_one`='"
-	if !strings.Contains(joinedQueries, expectedRelOnePart) {
-		t.Fatalf("(rec3) Expected the cascade delete to call the query \n%v, got \n%v", expectedRelOnePart, calledQueries)
-	}
-}
-
-func TestRecordDeleteWithMultipleRelationCascade(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	// create a mock collection with self referencing multiple relation field
-	// ---
-	collection := &models.Collection{}
-	collection.Name = "test"
-	collection.Type = models.CollectionTypeBase
-	err := app.Dao().SaveCollection(collection)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	collection.Schema.AddField(&schema.SchemaField{
-		Name:     "rels",
-		Type:     schema.FieldTypeRelation,
-		Required: true,
-		Options: &schema.RelationOptions{
-			MaxSelect:     types.Pointer(10),
-			CollectionId:  collection.Id,
-			CascadeDelete: true,
-		},
-	})
-
-	err = app.Dao().SaveCollection(collection)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	// create mock records
-	// ---
-	relsData := map[string][]string{
-		"a": nil,
-		"b": {"a"},
-		"c": {"a", "b"},
-		"d": {},
-		"e": {"c", "d"},
-	}
-	for id, rels := range relsData {
-		record := models.NewRecord(collection)
-		record.Set("id", id)
-		record.Set("rels", rels)
-		err = app.Dao().SaveRecord(record)
-		if err != nil {
-			t.Fatalf("failed to create mock record: %v", err)
-		}
-	}
-
-	// trigger cascade delete for the top record
-	// ---
-	aRecord, err := app.Dao().FindRecordById(collection.Name, "a")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	err = app.Dao().DeleteRecord(aRecord)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	// verify cascade delete
-	// ---
-	expectedRels := map[string][]string{
-		"d": {},
-		"e": {"d"},
-	}
-
-	allRecords, err := app.Dao().FindRecordsByExpr(collection.Name, nil)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	if len(allRecords) != len(expectedRels) {
-		t.Fatalf("Expected %d remaining records, got %d", len(expectedRels), len(allRecords))
-	}
-
-	for _, r := range allRecords {
-		expected, ok := expectedRels[r.Id]
-		if !ok {
-			t.Fatalf("Record %q wasn't found in %v", r.Id, expectedRels)
-		}
-
-		rels := r.GetStringSlice("rels")
-		if !slices.Equal(rels, expected) {
-			t.Fatalf("Record %q expected rels\n%v\ngot\n%v", r.Id, expected, rels)
-		}
+	expectedRelOneJoin := "`demo1` INNER JOIN json_each(CASE WHEN json_valid([[demo1.rel_one]]) THEN [[demo1.rel_one]] ELSE json_array([[demo1.rel_one]]) END)"
+	if !strings.Contains(joinedQueries, expectedRelOneJoin) {
+		t.Fatalf("(rec3) Expected the cascade delete to call the query \n%v, got \n%v", expectedRelOneJoin, calledQueries)
 	}
 }
 
 func TestDeleteRecordBatchProcessing(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 

daos/request.go

@@ -0,0 +1,70 @@
+package daos
+
+import (
+	"time"
+
+	"github.com/pocketbase/dbx"
+	"github.com/pocketbase/pocketbase/models"
+	"github.com/pocketbase/pocketbase/tools/types"
+)
+
+// RequestQuery returns a new Request logs select query.
+func (dao *Dao) RequestQuery() *dbx.SelectQuery {
+	return dao.ModelQuery(&models.Request{})
+}
+
+// FindRequestById finds a single Request log by its id.
+func (dao *Dao) FindRequestById(id string) (*models.Request, error) {
+	model := &models.Request{}
+
+	err := dao.RequestQuery().
+		AndWhere(dbx.HashExp{"id": id}).
+		Limit(1).
+		One(model)
+
+	if err != nil {
+		return nil, err
+	}
+
+	return model, nil
+}
+
+type RequestsStatsItem struct {
+	Total int            `db:"total" json:"total"`
+	Date  types.DateTime `db:"date" json:"date"`
+}
+
+// RequestsStats returns hourly grouped requests logs statistics.
+func (dao *Dao) RequestsStats(expr dbx.Expression) ([]*RequestsStatsItem, error) {
+	result := []*RequestsStatsItem{}
+
+	query := dao.RequestQuery().
+		Select("count(id) as total", "strftime('%Y-%m-%d %H:00:00', created) as date").
+		GroupBy("date")
+
+	if expr != nil {
+		query.AndWhere(expr)
+	}
+
+	err := query.All(&result)
+
+	return result, err
+}
+
+// DeleteOldRequests delete all requests that are created before createdBefore.
+func (dao *Dao) DeleteOldRequests(createdBefore time.Time) error {
+	m := models.Request{}
+	tableName := m.TableName()
+
+	formattedDate := createdBefore.UTC().Format(types.DefaultDateLayout)
+	expr := dbx.NewExp("[[created]] <= {:date}", dbx.Params{"date": formattedDate})
+
+	_, err := dao.DB().Delete(tableName, expr).Execute()
+
+	return err
+}
+
+// SaveRequest upserts the provided Request model.
+func (dao *Dao) SaveRequest(request *models.Request) error {
+	return dao.Save(request)
+}

daos/request_test.go

@@ -11,27 +11,23 @@ import (
 	"github.com/pocketbase/pocketbase/tools/types"
 )
 
-func TestLogQuery(t *testing.T) {
-	t.Parallel()
-
+func TestRequestQuery(t *testing.T) {
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
-	expected := "SELECT {{_logs}}.* FROM `_logs`"
+	expected := "SELECT {{_requests}}.* FROM `_requests`"
 
-	sql := app.Dao().LogQuery().Build().SQL()
+	sql := app.Dao().RequestQuery().Build().SQL()
 	if sql != expected {
 		t.Errorf("Expected sql %s, got %s", expected, sql)
 	}
 }
 
-func TestFindLogById(t *testing.T) {
-	t.Parallel()
-
+func TestFindRequestById(t *testing.T) {
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
-	tests.MockLogsData(app)
+	tests.MockRequestLogsData(app)
 
 	scenarios := []struct {
 		id          string
@@ -44,7 +40,7 @@ func TestFindLogById(t *testing.T) {
 	}
 
 	for i, scenario := range scenarios {
-		admin, err := app.LogsDao().FindLogById(scenario.id)
+		admin, err := app.LogsDao().FindRequestById(scenario.id)
 
 		hasErr := err != nil
 		if hasErr != scenario.expectError {
@@ -57,19 +53,17 @@ func TestFindLogById(t *testing.T) {
 	}
 }
 
-func TestLogsStats(t *testing.T) {
-	t.Parallel()
-
+func TestRequestsStats(t *testing.T) {
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
-	tests.MockLogsData(app)
+	tests.MockRequestLogsData(app)
 
 	expected := `[{"total":1,"date":"2022-05-01 10:00:00.000Z"},{"total":1,"date":"2022-05-02 10:00:00.000Z"}]`
 
 	now := time.Now().UTC().Format(types.DefaultDateLayout)
 	exp := dbx.NewExp("[[created]] <= {:date}", dbx.Params{"date": now})
-	result, err := app.LogsDao().LogsStats(exp)
+	result, err := app.LogsDao().RequestsStats(exp)
 	if err != nil {
 		t.Fatal(err)
 	}
@@ -80,22 +74,20 @@ func TestLogsStats(t *testing.T) {
 	}
 }
 
-func TestDeleteOldLogs(t *testing.T) {
-	t.Parallel()
-
+func TestDeleteOldRequests(t *testing.T) {
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
-	tests.MockLogsData(app)
+	tests.MockRequestLogsData(app)
 
 	scenarios := []struct {
 		date          string
 		expectedTotal int
 	}{
-		{"2022-01-01 10:00:00.000Z", 2}, // no logs to delete before that time
-		{"2022-05-01 11:00:00.000Z", 1}, // only 1 log should have left
-		{"2022-05-03 11:00:00.000Z", 0}, // no more logs should have left
-		{"2022-05-04 11:00:00.000Z", 0}, // no more logs should have left
+		{"2022-01-01 10:00:00.000Z", 2}, // no requests to delete before that time
+		{"2022-05-01 11:00:00.000Z", 1}, // only 1 request should have left
+		{"2022-05-03 11:00:00.000Z", 0}, // no more requests should have left
+		{"2022-05-04 11:00:00.000Z", 0}, // no more requests should have left
 	}
 
 	for i, scenario := range scenarios {
@@ -104,55 +96,53 @@ func TestDeleteOldLogs(t *testing.T) {
 			t.Errorf("(%d) Date error %v", i, dateErr)
 		}
 
-		deleteErr := app.LogsDao().DeleteOldLogs(date)
+		deleteErr := app.LogsDao().DeleteOldRequests(date)
 		if deleteErr != nil {
 			t.Errorf("(%d) Delete error %v", i, deleteErr)
 		}
 
-		// check total remaining logs
+		// check total remaining requests
 		var total int
-		countErr := app.LogsDao().LogQuery().Select("count(*)").Row(&total)
+		countErr := app.LogsDao().RequestQuery().Select("count(*)").Row(&total)
 		if countErr != nil {
 			t.Errorf("(%d) Count error %v", i, countErr)
 		}
 
 		if total != scenario.expectedTotal {
-			t.Errorf("(%d) Expected %d remaining logs, got %d", i, scenario.expectedTotal, total)
+			t.Errorf("(%d) Expected %d remaining requests, got %d", i, scenario.expectedTotal, total)
 		}
 	}
 }
 
-func TestSaveLog(t *testing.T) {
-	t.Parallel()
-
+func TestSaveRequest(t *testing.T) {
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
-	tests.MockLogsData(app)
+	tests.MockRequestLogsData(app)
 
-	// create new log
-	newLog := &models.Log{}
-	newLog.Level = -4
-	newLog.Data = types.JsonMap{}
-	createErr := app.LogsDao().SaveLog(newLog)
+	// create new request
+	newRequest := &models.Request{}
+	newRequest.Method = "get"
+	newRequest.Meta = types.JsonMap{}
+	createErr := app.LogsDao().SaveRequest(newRequest)
 	if createErr != nil {
 		t.Fatal(createErr)
 	}
 
 	// check if it was really created
-	existingLog, fetchErr := app.LogsDao().FindLogById(newLog.Id)
+	existingRequest, fetchErr := app.LogsDao().FindRequestById(newRequest.Id)
 	if fetchErr != nil {
 		t.Fatal(fetchErr)
 	}
 
-	existingLog.Level = 4
-	updateErr := app.LogsDao().SaveLog(existingLog)
+	existingRequest.Method = "post"
+	updateErr := app.LogsDao().SaveRequest(existingRequest)
 	if updateErr != nil {
 		t.Fatal(updateErr)
 	}
 	// refresh instance to check if it was really updated
-	existingLog, _ = app.LogsDao().FindLogById(existingLog.Id)
-	if existingLog.Level != 4 {
-		t.Fatalf("Expected log level to be %d, got %d", 4, existingLog.Level)
+	existingRequest, _ = app.LogsDao().FindRequestById(existingRequest.Id)
+	if existingRequest.Method != "post" {
+		t.Fatalf("Expected request method to be %s, got %s", "post", existingRequest.Method)
 	}
 }

daos/settings_test.go

@@ -8,8 +8,6 @@ import (
 )
 
 func TestSaveAndFindSettings(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 

daos/table.go

@@ -1,19 +1,16 @@
 package daos
 
 import (
-	"fmt"
-
 	"github.com/pocketbase/dbx"
-	"github.com/pocketbase/pocketbase/models"
 )
 
-// HasTable checks if a table (or view) with the provided name exists (case insensitive).
+// HasTable checks if a table with the provided name exists (case insensitive).
 func (dao *Dao) HasTable(tableName string) bool {
 	var exists bool
 
 	err := dao.DB().Select("count(*)").
 		From("sqlite_schema").
-		AndWhere(dbx.HashExp{"type": []any{"table", "view"}}).
+		AndWhere(dbx.HashExp{"type": "table"}).
 		AndWhere(dbx.NewExp("LOWER([[name]])=LOWER({:tableName})", dbx.Params{"tableName": tableName})).
 		Limit(1).
 		Row(&exists)
@@ -21,8 +18,8 @@ func (dao *Dao) HasTable(tableName string) bool {
 	return err == nil && exists
 }
 
-// TableColumns returns all column names of a single table by its name.
-func (dao *Dao) TableColumns(tableName string) ([]string, error) {
+// GetTableColumns returns all column names of a single table by its name.
+func (dao *Dao) GetTableColumns(tableName string) ([]string, error) {
 	columns := []string{}
 
 	err := dao.DB().NewQuery("SELECT name FROM PRAGMA_TABLE_INFO({:tableName})").
@@ -32,67 +29,9 @@ func (dao *Dao) TableColumns(tableName string) ([]string, error) {
 	return columns, err
 }
 
-// TableInfo returns the `table_info` pragma result for the specified table.
-func (dao *Dao) TableInfo(tableName string) ([]*models.TableInfoRow, error) {
-	info := []*models.TableInfoRow{}
-
-	err := dao.DB().NewQuery("SELECT * FROM PRAGMA_TABLE_INFO({:tableName})").
-		Bind(dbx.Params{"tableName": tableName}).
-		All(&info)
-	if err != nil {
-		return nil, err
-	}
-
-	// mattn/go-sqlite3 doesn't throw an error on invalid or missing table
-	// so we additionally have to check whether the loaded info result is nonempty
-	if len(info) == 0 {
-		return nil, fmt.Errorf("empty table info probably due to invalid or missing table %s", tableName)
-	}
-
-	return info, nil
-}
-
-// TableIndexes returns a name grouped map with all non empty index of the specified table.
-//
-// Note: This method doesn't return an error on nonexisting table.
-func (dao *Dao) TableIndexes(tableName string) (map[string]string, error) {
-	indexes := []struct {
-		Name string
-		Sql  string
-	}{}
-
-	err := dao.DB().Select("name", "sql").
-		From("sqlite_master").
-		AndWhere(dbx.NewExp("sql is not null")).
-		AndWhere(dbx.HashExp{
-			"type":     "index",
-			"tbl_name": tableName,
-		}).
-		All(&indexes)
-	if err != nil {
-		return nil, err
-	}
-
-	result := make(map[string]string, len(indexes))
-
-	for _, idx := range indexes {
-		result[idx.Name] = idx.Sql
-	}
-
-	return result, nil
-}
-
 // DeleteTable drops the specified table.
-//
-// This method is a no-op if a table with the provided name doesn't exist.
-//
-// Be aware that this method is vulnerable to SQL injection and the
-// "tableName" argument must come only from trusted input!
 func (dao *Dao) DeleteTable(tableName string) error {
-	_, err := dao.DB().NewQuery(fmt.Sprintf(
-		"DROP TABLE IF EXISTS {{%s}}",
-		tableName,
-	)).Execute()
+	_, err := dao.DB().DropTable(tableName).Execute()
 
 	return err
 }

daos/table_test.go

@@ -3,7 +3,6 @@ package daos_test
 import (
 	"context"
 	"database/sql"
-	"encoding/json"
 	"testing"
 	"time"
 
@@ -12,8 +11,6 @@ import (
 )
 
 func TestHasTable(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -26,20 +23,17 @@ func TestHasTable(t *testing.T) {
 		{"_admins", true},
 		{"demo3", true},
 		{"DEMO3", true}, // table names are case insensitives by default
-		{"view1", true}, // view
 	}
 
 	for i, scenario := range scenarios {
 		result := app.Dao().HasTable(scenario.tableName)
 		if result != scenario.expected {
-			t.Errorf("[%d] Expected %v, got %v", i, scenario.expected, result)
+			t.Errorf("(%d) Expected %v, got %v", i, scenario.expected, result)
 		}
 	}
 }
 
-func TestTableColumns(t *testing.T) {
-	t.Parallel()
-
+func TestGetTableColumns(t *testing.T) {
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -51,55 +45,22 @@ func TestTableColumns(t *testing.T) {
 		{"_params", []string{"id", "key", "value", "created", "updated"}},
 	}
 
-	for i, s := range scenarios {
-		columns, _ := app.Dao().TableColumns(s.tableName)
+	for i, scenario := range scenarios {
+		columns, _ := app.Dao().GetTableColumns(scenario.tableName)
 
-		if len(columns) != len(s.expected) {
-			t.Errorf("[%d] Expected columns %v, got %v", i, s.expected, columns)
-			continue
+		if len(columns) != len(scenario.expected) {
+			t.Errorf("(%d) Expected columns %v, got %v", i, scenario.expected, columns)
 		}
 
 		for _, c := range columns {
-			if !list.ExistInSlice(c, s.expected) {
-				t.Errorf("[%d] Didn't expect column %s", i, c)
+			if !list.ExistInSlice(c, scenario.expected) {
+				t.Errorf("(%d) Didn't expect column %s", i, c)
 			}
 		}
 	}
 }
 
-func TestTableInfo(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	scenarios := []struct {
-		tableName string
-		expected  string
-	}{
-		{"", "null"},
-		{"missing", "null"},
-		{
-			"_admins",
-			`[{"PK":1,"Index":0,"Name":"id","Type":"TEXT","NotNull":false,"DefaultValue":null},{"PK":0,"Index":1,"Name":"avatar","Type":"INTEGER","NotNull":true,"DefaultValue":0},{"PK":0,"Index":2,"Name":"email","Type":"TEXT","NotNull":true,"DefaultValue":null},{"PK":0,"Index":3,"Name":"tokenKey","Type":"TEXT","NotNull":true,"DefaultValue":null},{"PK":0,"Index":4,"Name":"passwordHash","Type":"TEXT","NotNull":true,"DefaultValue":null},{"PK":0,"Index":5,"Name":"lastResetSentAt","Type":"TEXT","NotNull":true,"DefaultValue":""},{"PK":0,"Index":6,"Name":"created","Type":"TEXT","NotNull":true,"DefaultValue":""},{"PK":0,"Index":7,"Name":"updated","Type":"TEXT","NotNull":true,"DefaultValue":""}]`,
-		},
-	}
-
-	for i, s := range scenarios {
-		rows, _ := app.Dao().TableInfo(s.tableName)
-
-		raw, _ := json.Marshal(rows)
-		rawStr := string(raw)
-
-		if rawStr != s.expected {
-			t.Errorf("[%d] Expected \n%v, \ngot \n%v", i, s.expected, rawStr)
-		}
-	}
-}
-
 func TestDeleteTable(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -108,24 +69,21 @@ func TestDeleteTable(t *testing.T) {
 		expectError bool
 	}{
 		{"", true},
-		{"test", false}, // missing tables are ignored
+		{"test", true},
 		{"_admins", false},
 		{"demo3", false},
 	}
 
-	for i, s := range scenarios {
-		err := app.Dao().DeleteTable(s.tableName)
-
+	for i, scenario := range scenarios {
+		err := app.Dao().DeleteTable(scenario.tableName)
 		hasErr := err != nil
-		if hasErr != s.expectError {
-			t.Errorf("[%d] Expected hasErr %v, got %v", i, s.expectError, hasErr)
+		if hasErr != scenario.expectError {
+			t.Errorf("(%d) Expected hasErr %v, got %v", i, scenario.expectError, hasErr)
 		}
 	}
 }
 
 func TestVacuum(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -149,47 +107,3 @@ func TestVacuum(t *testing.T) {
 		t.Fatalf("Expected VACUUM query, got %s", calledQueries[0])
 	}
 }
-
-func TestTableIndexes(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	scenarios := []struct {
-		table         string
-		expectError   bool
-		expectIndexes []string
-	}{
-		{
-			"missing",
-			false,
-			nil,
-		},
-		{
-			"demo2",
-			false,
-			[]string{"idx_demo2_created", "idx_unique_demo2_title", "idx_demo2_active"},
-		},
-	}
-
-	for _, s := range scenarios {
-		result, err := app.Dao().TableIndexes(s.table)
-
-		hasErr := err != nil
-		if hasErr != s.expectError {
-			t.Errorf("[%s] Expected hasErr %v, got %v", s.table, s.expectError, hasErr)
-		}
-
-		if len(s.expectIndexes) != len(result) {
-			t.Errorf("[%s] Expected %d indexes, got %d:\n%v", s.table, len(s.expectIndexes), len(result), result)
-			continue
-		}
-
-		for _, name := range s.expectIndexes {
-			if result[name] == "" {
-				t.Errorf("[%s] Missing index %q in \n%v", s.table, name, result)
-			}
-		}
-	}
-}

daos/view.go

@@ -1,629 +0,0 @@
-package daos
-
-import (
-	"errors"
-	"fmt"
-	"io"
-	"regexp"
-	"strings"
-
-	"github.com/pocketbase/dbx"
-	"github.com/pocketbase/pocketbase/models"
-	"github.com/pocketbase/pocketbase/models/schema"
-	"github.com/pocketbase/pocketbase/tools/inflector"
-	"github.com/pocketbase/pocketbase/tools/list"
-	"github.com/pocketbase/pocketbase/tools/security"
-	"github.com/pocketbase/pocketbase/tools/tokenizer"
-	"github.com/pocketbase/pocketbase/tools/types"
-)
-
-// DeleteView drops the specified view name.
-//
-// This method is a no-op if a view with the provided name doesn't exist.
-//
-// Be aware that this method is vulnerable to SQL injection and the
-// "name" argument must come only from trusted input!
-func (dao *Dao) DeleteView(name string) error {
-	_, err := dao.DB().NewQuery(fmt.Sprintf(
-		"DROP VIEW IF EXISTS {{%s}}",
-		name,
-	)).Execute()
-
-	return err
-}
-
-// SaveView creates (or updates already existing) persistent SQL view.
-//
-// Be aware that this method is vulnerable to SQL injection and the
-// "selectQuery" argument must come only from trusted input!
-func (dao *Dao) SaveView(name string, selectQuery string) error {
-	return dao.RunInTransaction(func(txDao *Dao) error {
-		// delete old view (if exists)
-		if err := txDao.DeleteView(name); err != nil {
-			return err
-		}
-
-		selectQuery = strings.Trim(strings.TrimSpace(selectQuery), ";")
-
-		// try to eagerly detect multiple inline statements
-		tk := tokenizer.NewFromString(selectQuery)
-		tk.Separators(';')
-		if queryParts, _ := tk.ScanAll(); len(queryParts) > 1 {
-			return errors.New("multiple statements are not supported")
-		}
-
-		// (re)create the view
-		//
-		// note: the query is wrapped in a secondary SELECT as a rudimentary
-		// measure to discourage multiple inline sql statements execution.
-		viewQuery := fmt.Sprintf("CREATE VIEW {{%s}} AS SELECT * FROM (%s)", name, selectQuery)
-		if _, err := txDao.DB().NewQuery(viewQuery).Execute(); err != nil {
-			return err
-		}
-
-		// fetch the view table info to ensure that the view was created
-		// because missing tables or columns won't return an error
-		if _, err := txDao.TableInfo(name); err != nil {
-			// manually cleanup previously created view in case the func
-			// is called in a nested transaction and the error is discarded
-			txDao.DeleteView(name)
-
-			return err
-		}
-
-		return nil
-	})
-}
-
-// CreateViewSchema creates a new view schema from the provided select query.
-//
-// There are some caveats:
-// - The select query must have an "id" column.
-// - Wildcard ("*") columns are not supported to avoid accidentally leaking sensitive data.
-func (dao *Dao) CreateViewSchema(selectQuery string) (schema.Schema, error) {
-	result := schema.NewSchema()
-
-	suggestedFields, err := dao.parseQueryToFields(selectQuery)
-	if err != nil {
-		return result, err
-	}
-
-	// note wrap in a transaction in case the selectQuery contains
-	// multiple statements allowing us to rollback on any error
-	txErr := dao.RunInTransaction(func(txDao *Dao) error {
-		tempView := "_temp_" + security.PseudorandomString(5)
-		// create a temp view with the provided query
-		if err := txDao.SaveView(tempView, selectQuery); err != nil {
-			return err
-		}
-		defer txDao.DeleteView(tempView)
-
-		// extract the generated view table info
-		info, err := txDao.TableInfo(tempView)
-		if err != nil {
-			return err
-		}
-
-		var hasId bool
-
-		for _, row := range info {
-			if row.Name == schema.FieldNameId {
-				hasId = true
-			}
-
-			if list.ExistInSlice(row.Name, schema.BaseModelFieldNames()) {
-				continue // skip base model fields since they are not part of the schema
-			}
-
-			var field *schema.SchemaField
-
-			if f, ok := suggestedFields[row.Name]; ok {
-				field = f.field
-			} else {
-				field = defaultViewField(row.Name)
-			}
-
-			result.AddField(field)
-		}
-
-		if !hasId {
-			return errors.New("missing required id column (you can use `(ROW_NUMBER() OVER()) as id` if you don't have one)")
-		}
-
-		return nil
-	})
-
-	return result, txErr
-}
-
-// FindRecordByViewFile returns the original models.Record of the
-// provided view collection file.
-func (dao *Dao) FindRecordByViewFile(
-	viewCollectionNameOrId string,
-	fileFieldName string,
-	filename string,
-) (*models.Record, error) {
-	view, err := dao.FindCollectionByNameOrId(viewCollectionNameOrId)
-	if err != nil {
-		return nil, err
-	}
-
-	if !view.IsView() {
-		return nil, errors.New("not a view collection")
-	}
-
-	var findFirstNonViewQueryFileField func(int) (*queryField, error)
-	findFirstNonViewQueryFileField = func(level int) (*queryField, error) {
-		// check the level depth to prevent infinite circular recursion
-		// (the limit is arbitrary and may change in the future)
-		if level > 5 {
-			return nil, errors.New("reached the max recursion level of view collection file field queries")
-		}
-
-		queryFields, err := dao.parseQueryToFields(view.ViewOptions().Query)
-		if err != nil {
-			return nil, err
-		}
-
-		for _, item := range queryFields {
-			if item.collection == nil ||
-				item.original == nil ||
-				item.field.Name != fileFieldName {
-				continue
-			}
-
-			if item.collection.IsView() {
-				view = item.collection
-				fileFieldName = item.original.Name
-				return findFirstNonViewQueryFileField(level + 1)
-			}
-
-			return item, nil
-		}
-
-		return nil, errors.New("no query file field found")
-	}
-
-	qf, err := findFirstNonViewQueryFileField(1)
-	if err != nil {
-		return nil, err
-	}
-
-	cleanFieldName := inflector.Columnify(qf.original.Name)
-
-	record := &models.Record{}
-
-	query := dao.RecordQuery(qf.collection).Limit(1)
-
-	if opt, ok := qf.original.Options.(schema.MultiValuer); !ok || !opt.IsMultiple() {
-		query.AndWhere(dbx.HashExp{cleanFieldName: filename})
-	} else {
-		query.InnerJoin(fmt.Sprintf(
-			`json_each(CASE WHEN json_valid([[%s]]) THEN [[%s]] ELSE json_array([[%s]]) END) as {{_je_file}}`,
-			cleanFieldName, cleanFieldName, cleanFieldName,
-		), dbx.HashExp{"_je_file.value": filename})
-	}
-
-	if err := query.One(record); err != nil {
-		return nil, err
-	}
-
-	return record, nil
-}
-
-// -------------------------------------------------------------------
-// Raw query to schema helpers
-// -------------------------------------------------------------------
-
-type queryField struct {
-	// field is the final resolved field.
-	field *schema.SchemaField
-
-	// collection refers to the original field's collection model.
-	// It could be nil if the found query field is not from a collection schema.
-	collection *models.Collection
-
-	// original is the original found collection field.
-	// It could be nil if the found query field is not from a collection schema.
-	original *schema.SchemaField
-}
-
-func defaultViewField(name string) *schema.SchemaField {
-	return &schema.SchemaField{
-		Name: name,
-		Type: schema.FieldTypeJson,
-		Options: &schema.JsonOptions{
-			MaxSize: 1, // the size doesn't matter in this case
-		},
-	}
-}
-
-var castRegex = regexp.MustCompile(`(?i)^cast\s*\(.*\s+as\s+(\w+)\s*\)$`)
-
-func (dao *Dao) parseQueryToFields(selectQuery string) (map[string]*queryField, error) {
-	p := new(identifiersParser)
-	if err := p.parse(selectQuery); err != nil {
-		return nil, err
-	}
-
-	collections, err := dao.findCollectionsByIdentifiers(p.tables)
-	if err != nil {
-		return nil, err
-	}
-
-	result := make(map[string]*queryField, len(p.columns))
-
-	var mainTable identifier
-
-	if len(p.tables) > 0 {
-		mainTable = p.tables[0]
-	}
-
-	for _, col := range p.columns {
-		// note: it should be safe to use the already parsed alias as there
-		// is no valid SQL where * column can be aliased to something else
-		if col.alias == "*" {
-			return nil, errors.New("wildcard columns (*) are not supported - manually type the collection field names you want the view query to have")
-		}
-
-		colLower := strings.ToLower(col.original)
-
-		// numeric aggregations
-		if strings.HasPrefix(colLower, "count(") || strings.HasPrefix(colLower, "total(") {
-			result[col.alias] = &queryField{
-				field: &schema.SchemaField{
-					Name: col.alias,
-					Type: schema.FieldTypeNumber,
-				},
-			}
-			continue
-		}
-
-		castMatch := castRegex.FindStringSubmatch(colLower)
-
-		// numeric casts
-		if len(castMatch) == 2 {
-			switch castMatch[1] {
-			case "real", "integer", "int", "decimal", "numeric":
-				result[col.alias] = &queryField{
-					field: &schema.SchemaField{
-						Name: col.alias,
-						Type: schema.FieldTypeNumber,
-					},
-				}
-				continue
-			case "text":
-				result[col.alias] = &queryField{
-					field: &schema.SchemaField{
-						Name: col.alias,
-						Type: schema.FieldTypeText,
-					},
-				}
-				continue
-			case "boolean", "bool":
-				result[col.alias] = &queryField{
-					field: &schema.SchemaField{
-						Name: col.alias,
-						Type: schema.FieldTypeBool,
-					},
-				}
-				continue
-			}
-		}
-
-		parts := strings.Split(col.original, ".")
-
-		var fieldName string
-		var collection *models.Collection
-
-		if len(parts) == 2 {
-			fieldName = parts[1]
-			collection = collections[parts[0]]
-		} else {
-			fieldName = parts[0]
-			collection = collections[mainTable.alias]
-		}
-
-		// fallback to the default field if the found column is not from a collection schema
-		if collection == nil {
-			result[col.alias] = &queryField{
-				field: defaultViewField(col.alias),
-			}
-			continue
-		}
-
-		// find the first field by name (case insensitive)
-		var field *schema.SchemaField
-		for _, f := range collection.Schema.Fields() {
-			if strings.EqualFold(f.Name, fieldName) {
-				field = f
-				break
-			}
-		}
-
-		if field != nil {
-			clone := *field
-			clone.Id = "" // unset to prevent duplications if the same field is aliased multiple times
-			clone.Name = col.alias
-			result[col.alias] = &queryField{
-				field:      &clone,
-				collection: collection,
-				original:   field,
-			}
-			continue
-		}
-
-		if fieldName == schema.FieldNameId {
-			// convert to relation since it is a direct id reference
-			result[col.alias] = &queryField{
-				field: &schema.SchemaField{
-					Name: col.alias,
-					Type: schema.FieldTypeRelation,
-					Options: &schema.RelationOptions{
-						MaxSelect:    types.Pointer(1),
-						CollectionId: collection.Id,
-					},
-				},
-				collection: collection,
-			}
-		} else if fieldName == schema.FieldNameCreated || fieldName == schema.FieldNameUpdated {
-			result[col.alias] = &queryField{
-				field: &schema.SchemaField{
-					Name: col.alias,
-					Type: schema.FieldTypeDate,
-				},
-				collection: collection,
-			}
-		} else if fieldName == schema.FieldNameUsername && collection.IsAuth() {
-			result[col.alias] = &queryField{
-				field: &schema.SchemaField{
-					Name: col.alias,
-					Type: schema.FieldTypeText,
-				},
-				collection: collection,
-			}
-		} else if fieldName == schema.FieldNameEmail && collection.IsAuth() {
-			result[col.alias] = &queryField{
-				field: &schema.SchemaField{
-					Name: col.alias,
-					Type: schema.FieldTypeEmail,
-				},
-				collection: collection,
-			}
-		} else if (fieldName == schema.FieldNameVerified || fieldName == schema.FieldNameEmailVisibility) && collection.IsAuth() {
-			result[col.alias] = &queryField{
-				field: &schema.SchemaField{
-					Name: col.alias,
-					Type: schema.FieldTypeBool,
-				},
-				collection: collection,
-			}
-		} else {
-			result[col.alias] = &queryField{
-				field:      defaultViewField(col.alias),
-				collection: collection,
-			}
-		}
-	}
-
-	return result, nil
-}
-
-func (dao *Dao) findCollectionsByIdentifiers(tables []identifier) (map[string]*models.Collection, error) {
-	names := make([]any, 0, len(tables))
-
-	for _, table := range tables {
-		if strings.Contains(table.alias, "(") {
-			continue // skip expressions
-		}
-		names = append(names, table.original)
-	}
-
-	if len(names) == 0 {
-		return nil, nil
-	}
-
-	result := make(map[string]*models.Collection, len(names))
-	collections := make([]*models.Collection, 0, len(names))
-
-	err := dao.CollectionQuery().
-		AndWhere(dbx.In("name", names...)).
-		All(&collections)
-	if err != nil {
-		return nil, err
-	}
-
-	for _, table := range tables {
-		for _, collection := range collections {
-			if collection.Name == table.original {
-				result[table.alias] = collection
-			}
-		}
-	}
-
-	return result, nil
-}
-
-// -------------------------------------------------------------------
-// Raw query identifiers parser
-// -------------------------------------------------------------------
-
-var joinReplaceRegex = regexp.MustCompile(`(?im)\s+(inner join|outer join|left join|right join|join)\s+?`)
-var discardReplaceRegex = regexp.MustCompile(`(?im)\s+(where|group by|having|order|limit|with)\s+?`)
-var commentsReplaceRegex = regexp.MustCompile(`(?m)(\/\*[\s\S]+\*\/)|(--.+$)`)
-
-type identifier struct {
-	original string
-	alias    string
-}
-
-type identifiersParser struct {
-	columns []identifier
-	tables  []identifier
-}
-
-func (p *identifiersParser) parse(selectQuery string) error {
-	str := strings.Trim(strings.TrimSpace(selectQuery), ";")
-	str = commentsReplaceRegex.ReplaceAllString(str, "")
-	str = joinReplaceRegex.ReplaceAllString(str, " __pb_join__ ")
-	str = discardReplaceRegex.ReplaceAllString(str, " __pb_discard__ ")
-
-	tk := tokenizer.NewFromString(str)
-	tk.Separators(',', ' ', '\n', '\t')
-	tk.KeepSeparator(true)
-
-	var skip bool
-	var partType string
-	var activeBuilder *strings.Builder
-	var selectParts strings.Builder
-	var fromParts strings.Builder
-	var joinParts strings.Builder
-
-	for {
-		token, err := tk.Scan()
-		if err != nil {
-			if err != io.EOF {
-				return err
-			}
-			break
-		}
-
-		trimmed := strings.ToLower(strings.TrimSpace(token))
-
-		switch trimmed {
-		case "select":
-			skip = false
-			partType = "select"
-			activeBuilder = &selectParts
-		case "distinct":
-			continue // ignore as it is not important for the identifiers parsing
-		case "from":
-			skip = false
-			partType = "from"
-			activeBuilder = &fromParts
-		case "__pb_join__":
-			skip = false
-
-			// the previous part was also a join
-			if partType == "join" {
-				joinParts.WriteString(",")
-			}
-
-			partType = "join"
-			activeBuilder = &joinParts
-		case "__pb_discard__":
-			// skip following tokens
-			skip = true
-		default:
-			isJoin := partType == "join"
-
-			if isJoin && trimmed == "on" {
-				skip = true
-			}
-
-			if !skip && activeBuilder != nil {
-				activeBuilder.WriteString(" ")
-				activeBuilder.WriteString(token)
-			}
-		}
-	}
-
-	selects, err := extractIdentifiers(selectParts.String())
-	if err != nil {
-		return err
-	}
-
-	froms, err := extractIdentifiers(fromParts.String())
-	if err != nil {
-		return err
-	}
-
-	joins, err := extractIdentifiers(joinParts.String())
-	if err != nil {
-		return err
-	}
-
-	p.columns = selects
-	p.tables = froms
-	p.tables = append(p.tables, joins...)
-
-	return nil
-}
-
-func extractIdentifiers(rawExpression string) ([]identifier, error) {
-	rawTk := tokenizer.NewFromString(rawExpression)
-	rawTk.Separators(',')
-
-	rawIdentifiers, err := rawTk.ScanAll()
-	if err != nil {
-		return nil, err
-	}
-
-	result := make([]identifier, 0, len(rawIdentifiers))
-
-	for _, rawIdentifier := range rawIdentifiers {
-		tk := tokenizer.NewFromString(rawIdentifier)
-		tk.Separators(' ', '\n', '\t')
-
-		parts, err := tk.ScanAll()
-		if err != nil {
-			return nil, err
-		}
-
-		resolved, err := identifierFromParts(parts)
-		if err != nil {
-			return nil, err
-		}
-
-		result = append(result, resolved)
-	}
-
-	return result, nil
-}
-
-func identifierFromParts(parts []string) (identifier, error) {
-	var result identifier
-
-	switch len(parts) {
-	case 3:
-		if !strings.EqualFold(parts[1], "as") {
-			return result, fmt.Errorf(`invalid identifier part - expected "as", got %v`, parts[1])
-		}
-
-		result.original = parts[0]
-		result.alias = parts[2]
-	case 2:
-		result.original = parts[0]
-		result.alias = parts[1]
-	case 1:
-		subParts := strings.Split(parts[0], ".")
-		result.original = parts[0]
-		result.alias = subParts[len(subParts)-1]
-	default:
-		return result, fmt.Errorf(`invalid identifier parts %v`, parts)
-	}
-
-	result.original = trimRawIdentifier(result.original)
-
-	// we trim the single quote even though it is not a valid column quote character
-	// because SQLite allows it if the context expects an identifier and not string literal
-	// (https://www.sqlite.org/lang_keywords.html)
-	result.alias = trimRawIdentifier(result.alias, "'")
-
-	return result, nil
-}
-
-func trimRawIdentifier(rawIdentifier string, extraTrimChars ...string) string {
-	trimChars := "`\"[];"
-	if len(extraTrimChars) > 0 {
-		trimChars += strings.Join(extraTrimChars, "")
-	}
-
-	parts := strings.Split(rawIdentifier, ".")
-
-	for i := range parts {
-		parts[i] = strings.Trim(parts[i], trimChars)
-	}
-
-	return strings.Join(parts, ".")
-}

daos/view_test.go

@@ -1,645 +0,0 @@
-package daos_test
-
-import (
-	"encoding/json"
-	"fmt"
-	"testing"
-
-	"github.com/pocketbase/dbx"
-	"github.com/pocketbase/pocketbase/core"
-	"github.com/pocketbase/pocketbase/daos"
-	"github.com/pocketbase/pocketbase/models"
-	"github.com/pocketbase/pocketbase/models/schema"
-	"github.com/pocketbase/pocketbase/tests"
-	"github.com/pocketbase/pocketbase/tools/list"
-)
-
-func ensureNoTempViews(app core.App, t *testing.T) {
-	var total int
-
-	err := app.Dao().DB().Select("count(*)").
-		From("sqlite_schema").
-		AndWhere(dbx.HashExp{"type": "view"}).
-		AndWhere(dbx.NewExp(`[[name]] LIKE '%\_temp\_%' ESCAPE '\'`)).
-		Limit(1).
-		Row(&total)
-	if err != nil {
-		t.Fatalf("Failed to check for temp views: %v", err)
-	}
-
-	if total > 0 {
-		t.Fatalf("Expected all temp views to be deleted, got %d", total)
-	}
-}
-
-func TestDeleteView(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	scenarios := []struct {
-		viewName    string
-		expectError bool
-	}{
-		{"", true},
-		{"demo1", true},    // not a view table
-		{"missing", false}, // missing or already deleted
-		{"view1", false},   // existing
-		{"VieW1", false},   // view names are case insensitives
-	}
-
-	for i, s := range scenarios {
-		err := app.Dao().DeleteView(s.viewName)
-
-		hasErr := err != nil
-		if hasErr != s.expectError {
-			t.Errorf("[%d - %q] Expected hasErr %v, got %v (%v)", i, s.viewName, s.expectError, hasErr, err)
-		}
-	}
-
-	ensureNoTempViews(app, t)
-}
-
-func TestSaveView(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	scenarios := []struct {
-		scenarioName  string
-		viewName      string
-		query         string
-		expectError   bool
-		expectColumns []string
-	}{
-		{
-			"empty name and query",
-			"",
-			"",
-			true,
-			nil,
-		},
-		{
-			"empty name",
-			"",
-			"select * from _admins",
-			true,
-			nil,
-		},
-		{
-			"empty query",
-			"123Test",
-			"",
-			true,
-			nil,
-		},
-		{
-			"invalid query",
-			"123Test",
-			"123 456",
-			true,
-			nil,
-		},
-		{
-			"missing table",
-			"123Test",
-			"select id from missing",
-			true,
-			nil,
-		},
-		{
-			"non select query",
-			"123Test",
-			"drop table _admins",
-			true,
-			nil,
-		},
-		{
-			"multiple select queries",
-			"123Test",
-			"select *, count(id) as c  from _admins; select * from demo1;",
-			true,
-			nil,
-		},
-		{
-			"try to break the parent parenthesis",
-			"123Test",
-			"select *, count(id) as c  from `_admins`)",
-			true,
-			nil,
-		},
-		{
-			"simple select query (+ trimmed semicolon)",
-			"123Test",
-			";select *, count(id) as c  from _admins;",
-			false,
-			[]string{
-				"id", "created", "updated",
-				"passwordHash", "tokenKey", "email",
-				"lastResetSentAt", "avatar", "c",
-			},
-		},
-		{
-			"update old view with new query",
-			"123Test",
-			"select 1 as test from _admins",
-			false,
-			[]string{"test"},
-		},
-	}
-
-	for _, s := range scenarios {
-		t.Run(s.scenarioName, func(t *testing.T) {
-			err := app.Dao().SaveView(s.viewName, s.query)
-
-			hasErr := err != nil
-			if hasErr != s.expectError {
-				t.Fatalf("Expected hasErr %v, got %v (%v)", s.expectError, hasErr, err)
-			}
-
-			if hasErr {
-				return
-			}
-
-			infoRows, err := app.Dao().TableInfo(s.viewName)
-			if err != nil {
-				t.Fatalf("Failed to fetch table info for %s: %v", s.viewName, err)
-			}
-
-			if len(s.expectColumns) != len(infoRows) {
-				t.Fatalf("Expected %d columns, got %d", len(s.expectColumns), len(infoRows))
-			}
-
-			for _, row := range infoRows {
-				if !list.ExistInSlice(row.Name, s.expectColumns) {
-					t.Fatalf("Missing %q column in %v", row.Name, s.expectColumns)
-				}
-			}
-		})
-	}
-
-	ensureNoTempViews(app, t)
-}
-
-func TestCreateViewSchemaWithDiscardedNestedTransaction(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	app.Dao().RunInTransaction(func(txDao *daos.Dao) error {
-		_, err := txDao.CreateViewSchema("select id from missing")
-		if err == nil {
-			t.Fatal("Expected error, got nil")
-		}
-
-		return nil
-	})
-
-	ensureNoTempViews(app, t)
-}
-
-func TestCreateViewSchema(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	scenarios := []struct {
-		name         string
-		query        string
-		expectError  bool
-		expectFields map[string]string // name-type pairs
-	}{
-		{
-			"empty query",
-			"",
-			true,
-			nil,
-		},
-		{
-			"invalid query",
-			"test 123456",
-			true,
-			nil,
-		},
-		{
-			"missing table",
-			"select id from missing",
-			true,
-			nil,
-		},
-		{
-			"query with wildcard column",
-			"select a.id, a.* from demo1 a",
-			true,
-			nil,
-		},
-		{
-			"query without id",
-			"select text, url, created, updated from demo1",
-			true,
-			nil,
-		},
-		{
-			"wrapped query with wildcard column",
-			"select * from (select 1 as id)",
-			true,
-			nil,
-		},
-		{
-			"query with comments",
-			`
-				select
-				-- test single line
-				demo1.id,
-				demo1.text,
-				/* multi
-					line comment */
-				demo1.url, demo1.created, demo2.updated from demo1
-				-- comment before join
-				join demo2 ON (
-					-- comment inside join
-					demo2.id = demo1.id
-				)
-				-- comment before where
-				where (
-					-- comment inside where
-					demo2.id = demo1.id
-				)
-			`,
-			false,
-			map[string]string{
-				"text": schema.FieldTypeText,
-				"url":  schema.FieldTypeUrl,
-			},
-		},
-		{
-			"query with all fields and quoted identifiers",
-			`
-				select
-					"id",
-					"created",
-					"updated",
-					[text],
-					` + "`bool`" + `,
-					"url",
-					"select_one",
-					"select_many",
-					"file_one",
-					"demo1"."file_many",
-					` + "`demo1`." + "`number`" + ` number_alias,
-					"email",
-					"datetime",
-					"json",
-					"rel_one",
-					"rel_many",
-					'single_quoted_custom_literal' as 'single_quoted_column'
-				from demo1
-			`,
-			false,
-			map[string]string{
-				"text":                 schema.FieldTypeText,
-				"bool":                 schema.FieldTypeBool,
-				"url":                  schema.FieldTypeUrl,
-				"select_one":           schema.FieldTypeSelect,
-				"select_many":          schema.FieldTypeSelect,
-				"file_one":             schema.FieldTypeFile,
-				"file_many":            schema.FieldTypeFile,
-				"number_alias":         schema.FieldTypeNumber,
-				"email":                schema.FieldTypeEmail,
-				"datetime":             schema.FieldTypeDate,
-				"json":                 schema.FieldTypeJson,
-				"rel_one":              schema.FieldTypeRelation,
-				"rel_many":             schema.FieldTypeRelation,
-				"single_quoted_column": schema.FieldTypeJson,
-			},
-		},
-		{
-			"query with indirect relations fields",
-			"select a.id, b.id as bid, b.created from demo1 as a left join demo2 b",
-			false,
-			map[string]string{
-				"bid": schema.FieldTypeRelation,
-			},
-		},
-		{
-			"query with multiple froms, joins and style of aliasses",
-			`
-				select
-					a.id as id,
-					b.id as bid,
-					lj.id cid,
-					ij.id as did,
-					a.bool,
-					_admins.id as eid,
-					_admins.email
-				from demo1 a, demo2 as b
-				left join demo3 lj on lj.id = 123
-				inner join demo4 as ij on ij.id = 123
-				join _admins
-				where 1=1
-				group by a.id
-				limit 10
-			`,
-			false,
-			map[string]string{
-				"bid":   schema.FieldTypeRelation,
-				"cid":   schema.FieldTypeRelation,
-				"did":   schema.FieldTypeRelation,
-				"bool":  schema.FieldTypeBool,
-				"eid":   schema.FieldTypeJson, // not from collection
-				"email": schema.FieldTypeJson, // not from collection
-			},
-		},
-		{
-			"query with casts",
-			`select
-				a.id,
-				count(a.id) count,
-				cast(a.id as int) cast_int,
-				cast(a.id as integer) cast_integer,
-				cast(a.id as real) cast_real,
-				cast(a.id as decimal) cast_decimal,
-				cast(a.id as numeric) cast_numeric,
-				cast(a.id as text) cast_text,
-				cast(a.id as bool) cast_bool,
-				cast(a.id as boolean) cast_boolean,
-				avg(a.id) avg,
-				sum(a.id) sum,
-				total(a.id) total,
-				min(a.id) min,
-				max(a.id) max
-			from demo1 a`,
-			false,
-			map[string]string{
-				"count":        schema.FieldTypeNumber,
-				"total":        schema.FieldTypeNumber,
-				"cast_int":     schema.FieldTypeNumber,
-				"cast_integer": schema.FieldTypeNumber,
-				"cast_real":    schema.FieldTypeNumber,
-				"cast_decimal": schema.FieldTypeNumber,
-				"cast_numeric": schema.FieldTypeNumber,
-				"cast_text":    schema.FieldTypeText,
-				"cast_bool":    schema.FieldTypeBool,
-				"cast_boolean": schema.FieldTypeBool,
-				// json because they are nullable
-				"sum": schema.FieldTypeJson,
-				"avg": schema.FieldTypeJson,
-				"min": schema.FieldTypeJson,
-				"max": schema.FieldTypeJson,
-			},
-		},
-		{
-			"query with reserved auth collection fields",
-			`
-				select
-					a.id,
-					a.username,
-					a.email,
-					a.emailVisibility,
-					a.verified,
-					demo1.id relid
-				from users a
-				left join demo1
-			`,
-			false,
-			map[string]string{
-				"username":        schema.FieldTypeText,
-				"email":           schema.FieldTypeEmail,
-				"emailVisibility": schema.FieldTypeBool,
-				"verified":        schema.FieldTypeBool,
-				"relid":           schema.FieldTypeRelation,
-			},
-		},
-		{
-			"query with unknown fields and aliases",
-			`select
-				id,
-				id as id2,
-				text as text_alias,
-				url as url_alias,
-				"demo1"."bool" as bool_alias,
-				number as number_alias,
-				created created_alias,
-				updated updated_alias,
-				123 as custom
-			from demo1`,
-			false,
-			map[string]string{
-				"id2":           schema.FieldTypeRelation,
-				"text_alias":    schema.FieldTypeText,
-				"url_alias":     schema.FieldTypeUrl,
-				"bool_alias":    schema.FieldTypeBool,
-				"number_alias":  schema.FieldTypeNumber,
-				"created_alias": schema.FieldTypeDate,
-				"updated_alias": schema.FieldTypeDate,
-				"custom":        schema.FieldTypeJson,
-			},
-		},
-		{
-			"query with distinct and reordered id column",
-			`select distinct
-				id as id2,
-				id,
-				123 as custom
-			from demo1`,
-			false,
-			map[string]string{
-				"id2":    schema.FieldTypeRelation,
-				"custom": schema.FieldTypeJson,
-			},
-		},
-		{
-			"query with aliasing the same field multiple times",
-			`select
-				a.id as id,
-				a.text as alias1,
-				a.text as alias2,
-				b.text as alias3,
-				b.text as alias4
-			from demo1 a
-			left join demo1 as b`,
-			false,
-			map[string]string{
-				"alias1": schema.FieldTypeText,
-				"alias2": schema.FieldTypeText,
-				"alias3": schema.FieldTypeText,
-				"alias4": schema.FieldTypeText,
-			},
-		},
-	}
-
-	for _, s := range scenarios {
-		result, err := app.Dao().CreateViewSchema(s.query)
-
-		hasErr := err != nil
-		if hasErr != s.expectError {
-			t.Errorf("[%s] Expected hasErr %v, got %v (%v)", s.name, s.expectError, hasErr, err)
-			continue
-		}
-
-		if hasErr {
-			continue
-		}
-
-		if len(s.expectFields) != len(result.Fields()) {
-			serialized, _ := json.Marshal(result)
-			t.Errorf("[%s] Expected %d fields, got %d: \n%s", s.name, len(s.expectFields), len(result.Fields()), serialized)
-			continue
-		}
-
-		for name, typ := range s.expectFields {
-			field := result.GetFieldByName(name)
-
-			if field == nil {
-				t.Errorf("[%s] Expected to find field %s, got nil", s.name, name)
-				continue
-			}
-
-			if field.Type != typ {
-				t.Errorf("[%s] Expected field %s to be %q, got %s", s.name, name, typ, field.Type)
-				continue
-			}
-		}
-	}
-
-	ensureNoTempViews(app, t)
-}
-
-func TestFindRecordByViewFile(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	prevCollection, err := app.Dao().FindCollectionByNameOrId("demo1")
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	totalLevels := 6
-
-	// create collection view mocks
-	fileOneAlias := "file_one one0"
-	fileManyAlias := "file_many many0"
-	mockCollections := make([]*models.Collection, 0, totalLevels)
-	for i := 0; i <= totalLevels; i++ {
-		view := new(models.Collection)
-		view.Type = models.CollectionTypeView
-		view.Name = fmt.Sprintf("_test_view%d", i)
-		view.SetOptions(&models.CollectionViewOptions{
-			Query: fmt.Sprintf(
-				"select id, %s, %s from %s",
-				fileOneAlias,
-				fileManyAlias,
-				prevCollection.Name,
-			),
-		})
-
-		// save view
-		if err := app.Dao().SaveCollection(view); err != nil {
-			t.Fatalf("Failed to save view%d: %v", i, err)
-		}
-
-		mockCollections = append(mockCollections, view)
-		prevCollection = view
-		fileOneAlias = fmt.Sprintf("one%d one%d", i, i+1)
-		fileManyAlias = fmt.Sprintf("many%d many%d", i, i+1)
-	}
-
-	fileOneName := "test_d61b33QdDU.txt"
-	fileManyName := "test_QZFjKjXchk.txt"
-	expectedRecordId := "84nmscqy84lsi1t"
-
-	scenarios := []struct {
-		name               string
-		collectionNameOrId string
-		fileFieldName      string
-		filename           string
-		expectError        bool
-		expectRecordId     string
-	}{
-		{
-			"missing collection",
-			"missing",
-			"a",
-			fileOneName,
-			true,
-			"",
-		},
-		{
-			"non-view collection",
-			"demo1",
-			"file_one",
-			fileOneName,
-			true,
-			"",
-		},
-		{
-			"view collection after the max recursion limit",
-			mockCollections[totalLevels-1].Name,
-			fmt.Sprintf("one%d", totalLevels-1),
-			fileOneName,
-			true,
-			"",
-		},
-		{
-			"first view collection (single file)",
-			mockCollections[0].Name,
-			"one0",
-			fileOneName,
-			false,
-			expectedRecordId,
-		},
-		{
-			"first view collection (many files)",
-			mockCollections[0].Name,
-			"many0",
-			fileManyName,
-			false,
-			expectedRecordId,
-		},
-
-		{
-			"last view collection before the recursion limit (single file)",
-			mockCollections[totalLevels-2].Name,
-			fmt.Sprintf("one%d", totalLevels-2),
-			fileOneName,
-			false,
-			expectedRecordId,
-		},
-		{
-			"last view collection before the recursion limit (many files)",
-			mockCollections[totalLevels-2].Name,
-			fmt.Sprintf("many%d", totalLevels-2),
-			fileManyName,
-			false,
-			expectedRecordId,
-		},
-	}
-
-	for _, s := range scenarios {
-		record, err := app.Dao().FindRecordByViewFile(
-			s.collectionNameOrId,
-			s.fileFieldName,
-			s.filename,
-		)
-
-		hasErr := err != nil
-		if hasErr != s.expectError {
-			t.Errorf("[%s] Expected hasErr %v, got %v (%v)", s.name, s.expectError, hasErr, err)
-			continue
-		}
-
-		if hasErr {
-			continue
-		}
-
-		if record.Id != s.expectRecordId {
-			t.Errorf("[%s] Expected recordId %q, got %q", s.name, s.expectRecordId, record.Id)
-		}
-	}
-}

examples/base/main.go

@@ -5,12 +5,10 @@ import (
 	"os"
 	"path/filepath"
 	"strings"
-	"time"
 
 	"github.com/pocketbase/pocketbase"
 	"github.com/pocketbase/pocketbase/apis"
 	"github.com/pocketbase/pocketbase/core"
-	"github.com/pocketbase/pocketbase/plugins/ghupdate"
 	"github.com/pocketbase/pocketbase/plugins/jsvm"
 	"github.com/pocketbase/pocketbase/plugins/migratecmd"
 )
@@ -22,30 +20,6 @@ func main() {
 	// Optional plugin flags:
 	// ---------------------------------------------------------------
 
-	var hooksDir string
-	app.RootCmd.PersistentFlags().StringVar(
-		&hooksDir,
-		"hooksDir",
-		"",
-		"the directory with the JS app hooks",
-	)
-
-	var hooksWatch bool
-	app.RootCmd.PersistentFlags().BoolVar(
-		&hooksWatch,
-		"hooksWatch",
-		true,
-		"auto restart the app on pb_hooks file change",
-	)
-
-	var hooksPool int
-	app.RootCmd.PersistentFlags().IntVar(
-		&hooksPool,
-		"hooksPool",
-		25,
-		"the total prewarm goja.Runtime instances for the JS app hooks execution",
-	)
-
 	var migrationsDir string
 	app.RootCmd.PersistentFlags().StringVar(
 		&migrationsDir,
@@ -78,43 +52,24 @@ func main() {
 		"fallback the request to index.html on missing static path (eg. when pretty urls are used with SPA)",
 	)
 
-	var queryTimeout int
-	app.RootCmd.PersistentFlags().IntVar(
-		&queryTimeout,
-		"queryTimeout",
-		30,
-		"the default SELECT queries timeout in seconds",
-	)
-
 	app.RootCmd.ParseFlags(os.Args[1:])
 
 	// ---------------------------------------------------------------
 	// Plugins and hooks:
 	// ---------------------------------------------------------------
 
-	// load jsvm (hooks and migrations)
-	jsvm.MustRegister(app, jsvm.Config{
-		MigrationsDir: migrationsDir,
-		HooksDir:      hooksDir,
-		HooksWatch:    hooksWatch,
-		HooksPoolSize: hooksPool,
+	// load js pb_migrations
+	jsvm.MustRegisterMigrations(app, &jsvm.MigrationsOptions{
+		Dir: migrationsDir,
 	})
 
 	// migrate command (with js templates)
-	migratecmd.MustRegister(app, app.RootCmd, migratecmd.Config{
+	migratecmd.MustRegister(app, app.RootCmd, &migratecmd.Options{
 		TemplateLang: migratecmd.TemplateLangJS,
 		Automigrate:  automigrate,
 		Dir:          migrationsDir,
 	})
 
-	// GitHub selfupdate
-	ghupdate.MustRegister(app, app.RootCmd, ghupdate.Config{})
-
-	app.OnAfterBootstrap().PreAdd(func(e *core.BootstrapEvent) error {
-		app.Dao().ModelQueryTimeout = time.Duration(queryTimeout) * time.Second
-		return nil
-	})
-
 	app.OnBeforeServe().Add(func(e *core.ServeEvent) error {
 		// serves static files from the provided public dir (if exists)
 		e.Router.GET("/*", apis.StaticDirectoryHandler(os.DirFS(publicDir), indexFallback))
@@ -132,6 +87,5 @@ func defaultPublicDir() string {
 		// most likely ran with go run
 		return "./pb_public"
 	}
-
 	return filepath.Join(os.Args[0], "../pb_public")
 }

forms/admin_login.go

@@ -4,8 +4,8 @@ import (
 	"database/sql"
 	"errors"
 
-	validation "github.com/pocketbase/ozzo-validation/v4"
-	"github.com/pocketbase/ozzo-validation/v4/is"
+	validation "github.com/go-ozzo/ozzo-validation/v4"
+	"github.com/go-ozzo/ozzo-validation/v4/is"
 	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/models"

forms/admin_login_test.go

@@ -10,8 +10,6 @@ import (
 )
 
 func TestAdminLoginValidateAndSubmit(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -53,8 +51,6 @@ func TestAdminLoginValidateAndSubmit(t *testing.T) {
 }
 
 func TestAdminLoginInterceptors(t *testing.T) {
-	t.Parallel()
-
 	testApp, _ := tests.NewTestApp()
 	defer testApp.Cleanup()
 

forms/admin_password_reset_confirm.go

@@ -1,7 +1,7 @@
 package forms
 
 import (
-	validation "github.com/pocketbase/ozzo-validation/v4"
+	validation "github.com/go-ozzo/ozzo-validation/v4"
 	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/forms/validators"

forms/admin_password_reset_confirm_test.go

@@ -11,8 +11,6 @@ import (
 )
 
 func TestAdminPasswordResetConfirmValidateAndSubmit(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -101,8 +99,6 @@ func TestAdminPasswordResetConfirmValidateAndSubmit(t *testing.T) {
 }
 
 func TestAdminPasswordResetConfirmInterceptors(t *testing.T) {
-	t.Parallel()
-
 	testApp, _ := tests.NewTestApp()
 	defer testApp.Cleanup()
 

forms/admin_password_reset_request.go

@@ -2,11 +2,10 @@ package forms
 
 import (
 	"errors"
-	"fmt"
 	"time"
 
-	validation "github.com/pocketbase/ozzo-validation/v4"
-	"github.com/pocketbase/ozzo-validation/v4/is"
+	validation "github.com/go-ozzo/ozzo-validation/v4"
+	"github.com/go-ozzo/ozzo-validation/v4/is"
 	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/mails"
@@ -67,7 +66,7 @@ func (form *AdminPasswordResetRequest) Submit(interceptors ...InterceptorFunc[*m
 
 	admin, err := form.dao.FindAdminByEmail(form.Email)
 	if err != nil {
-		return fmt.Errorf("Failed to fetch admin with email %s: %w", form.Email, err)
+		return err
 	}
 
 	now := time.Now().UTC()
@@ -76,14 +75,14 @@ func (form *AdminPasswordResetRequest) Submit(interceptors ...InterceptorFunc[*m
 		return errors.New("You have already requested a password reset.")
 	}
 
+	// update last sent timestamp
+	admin.LastResetSentAt = types.NowDateTime()
+
 	return runInterceptors(admin, func(m *models.Admin) error {
 		if err := mails.SendAdminPasswordReset(form.app, m); err != nil {
 			return err
 		}
 
-		// update last sent timestamp
-		m.LastResetSentAt = types.NowDateTime()
-
 		return form.dao.SaveAdmin(m)
 	}, interceptors...)
 }

forms/admin_password_reset_request_test.go

@@ -10,8 +10,6 @@ import (
 )
 
 func TestAdminPasswordResetRequestValidateAndSubmit(t *testing.T) {
-	t.Parallel()
-
 	testApp, _ := tests.NewTestApp()
 	defer testApp.Cleanup()
 
@@ -76,8 +74,6 @@ func TestAdminPasswordResetRequestValidateAndSubmit(t *testing.T) {
 }
 
 func TestAdminPasswordResetRequestInterceptors(t *testing.T) {
-	t.Parallel()
-
 	testApp, _ := tests.NewTestApp()
 	defer testApp.Cleanup()
 
@@ -121,7 +117,7 @@ func TestAdminPasswordResetRequestInterceptors(t *testing.T) {
 		t.Fatalf("Expected interceptor2 to be called")
 	}
 
-	if interceptorLastResetSentAt.String() != admin.LastResetSentAt.String() {
-		t.Fatalf("Expected the form model to NOT be filled before calling the interceptors")
+	if interceptorLastResetSentAt.String() == admin.LastResetSentAt.String() {
+		t.Fatalf("Expected the form model to be filled before calling the interceptors")
 	}
 }

forms/admin_upsert.go

@@ -1,8 +1,8 @@
 package forms
 
 import (
-	validation "github.com/pocketbase/ozzo-validation/v4"
-	"github.com/pocketbase/ozzo-validation/v4/is"
+	validation "github.com/go-ozzo/ozzo-validation/v4"
+	"github.com/go-ozzo/ozzo-validation/v4/is"
 	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/forms/validators"

forms/admin_upsert_test.go

@@ -12,8 +12,6 @@ import (
 )
 
 func TestNewAdminUpsert(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -33,8 +31,6 @@ func TestNewAdminUpsert(t *testing.T) {
 }
 
 func TestAdminUpsertValidateAndSubmit(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -187,8 +183,6 @@ func TestAdminUpsertValidateAndSubmit(t *testing.T) {
 }
 
 func TestAdminUpsertSubmitInterceptors(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -237,8 +231,6 @@ func TestAdminUpsertSubmitInterceptors(t *testing.T) {
 }
 
 func TestAdminUpsertWithCustomId(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 

forms/apple_client_secret_create.go

@@ -1,87 +0,0 @@
-package forms
-
-import (
-	"regexp"
-	"strings"
-	"time"
-
-	"github.com/golang-jwt/jwt/v4"
-	validation "github.com/pocketbase/ozzo-validation/v4"
-	"github.com/pocketbase/pocketbase/core"
-)
-
-var privateKeyRegex = regexp.MustCompile(`(?m)-----BEGIN PRIVATE KEY----[\s\S]+-----END PRIVATE KEY-----`)
-
-// AppleClientSecretCreate is a form struct to generate a new Apple Client Secret.
-//
-// Reference: https://developer.apple.com/documentation/sign_in_with_apple/generate_and_validate_tokens
-type AppleClientSecretCreate struct {
-	app core.App
-
-	// ClientId is the identifier of your app (aka. Service ID).
-	ClientId string `form:"clientId" json:"clientId"`
-
-	// TeamId is a 10-character string associated with your developer account
-	// (usually could be found next to your name in the Apple Developer site).
-	TeamId string `form:"teamId" json:"teamId"`
-
-	// KeyId is a 10-character key identifier generated for the "Sign in with Apple"
-	// private key associated with your developer account.
-	KeyId string `form:"keyId" json:"keyId"`
-
-	// PrivateKey is the private key associated to your app.
-	// Usually wrapped within -----BEGIN PRIVATE KEY----- X -----END PRIVATE KEY-----.
-	PrivateKey string `form:"privateKey" json:"privateKey"`
-
-	// Duration specifies how long the generated JWT should be considered valid.
-	// The specified value must be in seconds and max 15777000 (~6months).
-	Duration int `form:"duration" json:"duration"`
-}
-
-// NewAppleClientSecretCreate creates a new [AppleClientSecretCreate] form with initializer
-// config created from the provided [core.App] instances.
-func NewAppleClientSecretCreate(app core.App) *AppleClientSecretCreate {
-	form := &AppleClientSecretCreate{
-		app: app,
-	}
-
-	return form
-}
-
-// Validate makes the form validatable by implementing [validation.Validatable] interface.
-func (form *AppleClientSecretCreate) Validate() error {
-	return validation.ValidateStruct(form,
-		validation.Field(&form.ClientId, validation.Required),
-		validation.Field(&form.TeamId, validation.Required, validation.Length(10, 10)),
-		validation.Field(&form.KeyId, validation.Required, validation.Length(10, 10)),
-		validation.Field(&form.PrivateKey, validation.Required, validation.Match(privateKeyRegex)),
-		validation.Field(&form.Duration, validation.Required, validation.Min(1), validation.Max(15777000)),
-	)
-}
-
-// Submit validates the form and returns a new Apple Client Secret JWT.
-func (form *AppleClientSecretCreate) Submit() (string, error) {
-	if err := form.Validate(); err != nil {
-		return "", err
-	}
-
-	signKey, err := jwt.ParseECPrivateKeyFromPEM([]byte(strings.TrimSpace(form.PrivateKey)))
-	if err != nil {
-		return "", err
-	}
-
-	now := time.Now()
-
-	claims := &jwt.RegisteredClaims{
-		Audience:  jwt.ClaimStrings{"https://appleid.apple.com"},
-		Subject:   form.ClientId,
-		Issuer:    form.TeamId,
-		IssuedAt:  jwt.NewNumericDate(now),
-		ExpiresAt: jwt.NewNumericDate(now.Add(time.Duration(form.Duration) * time.Second)),
-	}
-
-	token := jwt.NewWithClaims(jwt.SigningMethodES256, claims)
-	token.Header["kid"] = form.KeyId
-
-	return token.SignedString(signKey)
-}

forms/apple_client_secret_create_test.go

@@ -1,119 +0,0 @@
-package forms_test
-
-import (
-	"crypto/ecdsa"
-	"crypto/elliptic"
-	"crypto/rand"
-	"crypto/x509"
-	"encoding/json"
-	"encoding/pem"
-	"testing"
-
-	"github.com/golang-jwt/jwt/v4"
-	"github.com/pocketbase/pocketbase/forms"
-	"github.com/pocketbase/pocketbase/tests"
-)
-
-func TestAppleClientSecretCreateValidateAndSubmit(t *testing.T) {
-	t.Parallel()
-
-	app, _ := tests.NewTestApp()
-	defer app.Cleanup()
-
-	key, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	encodedKey, err := x509.MarshalPKCS8PrivateKey(key)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	privatePem := pem.EncodeToMemory(
-		&pem.Block{
-			Type:  "PRIVATE KEY",
-			Bytes: encodedKey,
-		},
-	)
-
-	scenarios := []struct {
-		name        string
-		formData    map[string]any
-		expectError bool
-	}{
-		{
-			"empty data",
-			map[string]any{},
-			true,
-		},
-		{
-			"invalid data",
-			map[string]any{
-				"clientId":   "",
-				"teamId":     "123456789",
-				"keyId":      "123456789",
-				"privateKey": "-----BEGIN PRIVATE KEY----- invalid -----END PRIVATE KEY-----",
-				"duration":   -1,
-			},
-			true,
-		},
-		{
-			"valid data",
-			map[string]any{
-				"clientId":   "123",
-				"teamId":     "1234567890",
-				"keyId":      "1234567891",
-				"privateKey": string(privatePem),
-				"duration":   1,
-			},
-			false,
-		},
-	}
-
-	for _, s := range scenarios {
-		form := forms.NewAppleClientSecretCreate(app)
-
-		rawData, marshalErr := json.Marshal(s.formData)
-		if marshalErr != nil {
-			t.Errorf("[%s] Failed to marshalize the scenario data: %v", s.name, marshalErr)
-			continue
-		}
-
-		// load data
-		loadErr := json.Unmarshal(rawData, form)
-		if loadErr != nil {
-			t.Errorf("[%s] Failed to load form data: %v", s.name, loadErr)
-			continue
-		}
-
-		secret, err := form.Submit()
-
-		hasErr := err != nil
-		if hasErr != s.expectError {
-			t.Errorf("[%s] Expected hasErr %v, got %v (%v)", s.name, s.expectError, hasErr, err)
-		}
-
-		if hasErr {
-			continue
-		}
-
-		if secret == "" {
-			t.Errorf("[%s] Expected non-empty secret", s.name)
-		}
-
-		claims := jwt.MapClaims{}
-		token, _, err := jwt.NewParser().ParseUnverified(secret, claims)
-		if err != nil {
-			t.Errorf("[%s] Failed to parse token: %v", s.name, err)
-		}
-
-		if alg := token.Header["alg"]; alg != "ES256" {
-			t.Errorf("[%s] Expected %q alg header, got %q", s.name, "ES256", alg)
-		}
-
-		if kid := token.Header["kid"]; kid != form.KeyId {
-			t.Errorf("[%s] Expected %q kid header, got %q", s.name, form.KeyId, kid)
-		}
-	}
-}

forms/backup_create.go

@@ -1,79 +0,0 @@
-package forms
-
-import (
-	"context"
-	"regexp"
-
-	validation "github.com/pocketbase/ozzo-validation/v4"
-	"github.com/pocketbase/pocketbase/core"
-)
-
-var backupNameRegex = regexp.MustCompile(`^[a-z0-9_-]+\.zip$`)
-
-// BackupCreate is a request form for creating a new app backup.
-type BackupCreate struct {
-	app core.App
-	ctx context.Context
-
-	Name string `form:"name" json:"name"`
-}
-
-// NewBackupCreate creates new BackupCreate request form.
-func NewBackupCreate(app core.App) *BackupCreate {
-	return &BackupCreate{
-		app: app,
-		ctx: context.Background(),
-	}
-}
-
-// SetContext replaces the default form context with the provided one.
-func (form *BackupCreate) SetContext(ctx context.Context) {
-	form.ctx = ctx
-}
-
-// Validate makes the form validatable by implementing [validation.Validatable] interface.
-func (form *BackupCreate) Validate() error {
-	return validation.ValidateStruct(form,
-		validation.Field(
-			&form.Name,
-			validation.Length(1, 100),
-			validation.Match(backupNameRegex),
-			validation.By(form.checkUniqueName),
-		),
-	)
-}
-
-func (form *BackupCreate) checkUniqueName(value any) error {
-	v, _ := value.(string)
-	if v == "" {
-		return nil // nothing to check
-	}
-
-	fsys, err := form.app.NewBackupsFilesystem()
-	if err != nil {
-		return err
-	}
-	defer fsys.Close()
-
-	fsys.SetContext(form.ctx)
-
-	if exists, err := fsys.Exists(v); err != nil || exists {
-		return validation.NewError("validation_backup_name_exists", "The backup file name is invalid or already exists.")
-	}
-
-	return nil
-}
-
-// Submit validates the form and creates the app backup.
-//
-// You can optionally provide a list of InterceptorFunc to further
-// modify the form behavior before creating the backup.
-func (form *BackupCreate) Submit(interceptors ...InterceptorFunc[string]) error {
-	if err := form.Validate(); err != nil {
-		return err
-	}
-
-	return runInterceptors(form.Name, func(name string) error {
-		return form.app.CreateBackup(form.ctx, name)
-	}, interceptors...)
-}

forms/backup_create_test.go

@@ -1,104 +0,0 @@
-package forms_test
-
-import (
-	"strings"
-	"testing"
-
-	validation "github.com/pocketbase/ozzo-validation/v4"
-	"github.com/pocketbase/pocketbase/forms"
-	"github.com/pocketbase/pocketbase/tests"
-)
-
-func TestBackupCreateValidateAndSubmit(t *testing.T) {
-	t.Parallel()
-
-	scenarios := []struct {
-		name           string
-		backupName     string
-		expectedErrors []string
-	}{
-		{
-			"invalid length",
-			strings.Repeat("a", 97) + ".zip",
-			[]string{"name"},
-		},
-		{
-			"valid length + invalid format",
-			strings.Repeat("a", 96),
-			[]string{"name"},
-		},
-		{
-			"valid length + valid format",
-			strings.Repeat("a", 96) + ".zip",
-			[]string{},
-		},
-		{
-			"auto generated name",
-			"",
-			[]string{},
-		},
-	}
-
-	for _, s := range scenarios {
-		t.Run(s.name, func(t *testing.T) {
-			app, _ := tests.NewTestApp()
-			defer app.Cleanup()
-
-			fsys, err := app.NewBackupsFilesystem()
-			if err != nil {
-				t.Fatal(err)
-			}
-			defer fsys.Close()
-
-			form := forms.NewBackupCreate(app)
-			form.Name = s.backupName
-
-			result := form.Submit()
-
-			// parse errors
-			errs, ok := result.(validation.Errors)
-			if !ok && result != nil {
-				t.Fatalf("Failed to parse errors %v", result)
-				return
-			}
-
-			// check errors
-			if len(errs) > len(s.expectedErrors) {
-				t.Fatalf("Expected error keys %v, got %v", s.expectedErrors, errs)
-			}
-			for _, k := range s.expectedErrors {
-				if _, ok := errs[k]; !ok {
-					t.Fatalf("Missing expected error key %q in %v", k, errs)
-				}
-			}
-
-			// retrieve all created backup files
-			files, err := fsys.List("")
-			if err != nil {
-				t.Fatal("Failed to retrieve backup files")
-				return
-			}
-
-			if result != nil {
-				if total := len(files); total != 0 {
-					t.Fatalf("Didn't expected backup files, found %d", total)
-				}
-				return
-			}
-
-			if total := len(files); total != 1 {
-				t.Fatalf("Expected 1 backup file, got %d", total)
-				return
-			}
-
-			if s.backupName == "" {
-				prefix := "pb_backup_"
-				if !strings.HasPrefix(files[0].Key, prefix) {
-					t.Fatalf("Expected the backup file, to have prefix %q: %q", prefix, files[0].Key)
-				}
-			} else if s.backupName != files[0].Key {
-				t.Fatalf("Expected backup file %q, got %q", s.backupName, files[0].Key)
-			}
-		})
-	}
-}

forms/backup_upload.go

@@ -1,85 +0,0 @@
-package forms
-
-import (
-	"context"
-
-	validation "github.com/pocketbase/ozzo-validation/v4"
-	"github.com/pocketbase/pocketbase/core"
-	"github.com/pocketbase/pocketbase/forms/validators"
-	"github.com/pocketbase/pocketbase/tools/filesystem"
-)
-
-// BackupUpload is a request form for uploading a new app backup.
-type BackupUpload struct {
-	app core.App
-	ctx context.Context
-
-	File *filesystem.File `json:"file"`
-}
-
-// NewBackupUpload creates new BackupUpload request form.
-func NewBackupUpload(app core.App) *BackupUpload {
-	return &BackupUpload{
-		app: app,
-		ctx: context.Background(),
-	}
-}
-
-// SetContext replaces the default form upload context with the provided one.
-func (form *BackupUpload) SetContext(ctx context.Context) {
-	form.ctx = ctx
-}
-
-// Validate makes the form validatable by implementing [validation.Validatable] interface.
-func (form *BackupUpload) Validate() error {
-	return validation.ValidateStruct(form,
-		validation.Field(
-			&form.File,
-			validation.Required,
-			validation.By(validators.UploadedFileMimeType([]string{"application/zip"})),
-			validation.By(form.checkUniqueName),
-		),
-	)
-}
-
-func (form *BackupUpload) checkUniqueName(value any) error {
-	v, _ := value.(*filesystem.File)
-	if v == nil {
-		return nil // nothing to check
-	}
-
-	fsys, err := form.app.NewBackupsFilesystem()
-	if err != nil {
-		return err
-	}
-	defer fsys.Close()
-
-	fsys.SetContext(form.ctx)
-
-	if exists, err := fsys.Exists(v.OriginalName); err != nil || exists {
-		return validation.NewError("validation_backup_name_exists", "Backup file with the specified name already exists.")
-	}
-
-	return nil
-}
-
-// Submit validates the form and upload the backup file.
-//
-// You can optionally provide a list of InterceptorFunc to further
-// modify the form behavior before uploading the backup.
-func (form *BackupUpload) Submit(interceptors ...InterceptorFunc[*filesystem.File]) error {
-	if err := form.Validate(); err != nil {
-		return err
-	}
-
-	return runInterceptors(form.File, func(file *filesystem.File) error {
-		fsys, err := form.app.NewBackupsFilesystem()
-		if err != nil {
-			return err
-		}
-
-		fsys.SetContext(form.ctx)
-
-		return fsys.UploadFile(file, file.OriginalName)
-	}, interceptors...)
-}

forms/backup_upload_test.go

@@ -1,120 +0,0 @@
-package forms_test
-
-import (
-	"archive/zip"
-	"bytes"
-	"testing"
-
-	validation "github.com/pocketbase/ozzo-validation/v4"
-	"github.com/pocketbase/pocketbase/forms"
-	"github.com/pocketbase/pocketbase/tests"
-	"github.com/pocketbase/pocketbase/tools/filesystem"
-)
-
-func TestBackupUploadValidateAndSubmit(t *testing.T) {
-	t.Parallel()
-
-	var zb bytes.Buffer
-	zw := zip.NewWriter(&zb)
-	if err := zw.Close(); err != nil {
-		t.Fatal(err)
-	}
-
-	f0, _ := filesystem.NewFileFromBytes([]byte("test"), "existing")
-	f1, _ := filesystem.NewFileFromBytes([]byte("456"), "nozip")
-	f2, _ := filesystem.NewFileFromBytes(zb.Bytes(), "existing")
-	f3, _ := filesystem.NewFileFromBytes(zb.Bytes(), "zip")
-
-	scenarios := []struct {
-		name           string
-		file           *filesystem.File
-		expectedErrors []string
-	}{
-		{
-			"missing file",
-			nil,
-			[]string{"file"},
-		},
-		{
-			"non-zip file",
-			f1,
-			[]string{"file"},
-		},
-		{
-			"zip file with non-unique name",
-			f2,
-			[]string{"file"},
-		},
-		{
-			"zip file with unique name",
-			f3,
-			[]string{},
-		},
-	}
-
-	for _, s := range scenarios {
-		t.Run(s.name, func(t *testing.T) {
-			app, _ := tests.NewTestApp()
-			defer app.Cleanup()
-
-			fsys, err := app.NewBackupsFilesystem()
-			if err != nil {
-				t.Fatal(err)
-			}
-			defer fsys.Close()
-			// create a dummy backup file to simulate existing backups
-			if err := fsys.UploadFile(f0, f0.OriginalName); err != nil {
-				t.Fatal(err)
-			}
-
-			form := forms.NewBackupUpload(app)
-			form.File = s.file
-
-			result := form.Submit()
-
-			// parse errors
-			errs, ok := result.(validation.Errors)
-			if !ok && result != nil {
-				t.Fatalf("Failed to parse errors %v", result)
-			}
-
-			// check errors
-			if len(errs) > len(s.expectedErrors) {
-				t.Fatalf("Expected error keys %v, got %v", s.expectedErrors, errs)
-			}
-			for _, k := range s.expectedErrors {
-				if _, ok := errs[k]; !ok {
-					t.Fatalf("Missing expected error key %q in %v", k, errs)
-				}
-			}
-
-			expectedFiles := []*filesystem.File{f0}
-			if result == nil {
-				expectedFiles = append(expectedFiles, s.file)
-			}
-
-			// retrieve all uploaded backup files
-			files, err := fsys.List("")
-			if err != nil {
-				t.Fatal("Failed to retrieve backup files")
-			}
-
-			if len(files) != len(expectedFiles) {
-				t.Fatalf("Expected %d files, got %d", len(expectedFiles), len(files))
-			}
-
-			for _, ef := range expectedFiles {
-				exists := false
-				for _, f := range files {
-					if f.Key == ef.OriginalName {
-						exists = true
-						break
-					}
-				}
-				if !exists {
-					t.Fatalf("Missing expected backup file %v", ef.OriginalName)
-				}
-			}
-		})
-	}
-}

forms/collection_upsert.go

@@ -4,17 +4,15 @@ import (
 	"encoding/json"
 	"fmt"
 	"regexp"
-	"strconv"
 	"strings"
 
-	validation "github.com/pocketbase/ozzo-validation/v4"
+	validation "github.com/go-ozzo/ozzo-validation/v4"
 	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/forms/validators"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/models/schema"
 	"github.com/pocketbase/pocketbase/resolvers"
-	"github.com/pocketbase/pocketbase/tools/dbutils"
 	"github.com/pocketbase/pocketbase/tools/list"
 	"github.com/pocketbase/pocketbase/tools/search"
 	"github.com/pocketbase/pocketbase/tools/types"
@@ -28,18 +26,17 @@ type CollectionUpsert struct {
 	dao        *daos.Dao
 	collection *models.Collection
 
-	Id         string                  `form:"id" json:"id"`
-	Type       string                  `form:"type" json:"type"`
-	Name       string                  `form:"name" json:"name"`
-	System     bool                    `form:"system" json:"system"`
-	Schema     schema.Schema           `form:"schema" json:"schema"`
-	Indexes    types.JsonArray[string] `form:"indexes" json:"indexes"`
-	ListRule   *string                 `form:"listRule" json:"listRule"`
-	ViewRule   *string                 `form:"viewRule" json:"viewRule"`
-	CreateRule *string                 `form:"createRule" json:"createRule"`
-	UpdateRule *string                 `form:"updateRule" json:"updateRule"`
-	DeleteRule *string                 `form:"deleteRule" json:"deleteRule"`
-	Options    types.JsonMap           `form:"options" json:"options"`
+	Id         string        `form:"id" json:"id"`
+	Type       string        `form:"type" json:"type"`
+	Name       string        `form:"name" json:"name"`
+	System     bool          `form:"system" json:"system"`
+	Schema     schema.Schema `form:"schema" json:"schema"`
+	ListRule   *string       `form:"listRule" json:"listRule"`
+	ViewRule   *string       `form:"viewRule" json:"viewRule"`
+	CreateRule *string       `form:"createRule" json:"createRule"`
+	UpdateRule *string       `form:"updateRule" json:"updateRule"`
+	DeleteRule *string       `form:"deleteRule" json:"deleteRule"`
+	Options    types.JsonMap `form:"options" json:"options"`
 }
 
 // NewCollectionUpsert creates a new [CollectionUpsert] form with initializer
@@ -60,7 +57,6 @@ func NewCollectionUpsert(app core.App, collection *models.Collection) *Collectio
 	form.Type = form.collection.Type
 	form.Name = form.collection.Name
 	form.System = form.collection.System
-	form.Indexes = form.collection.Indexes
 	form.ListRule = form.collection.ListRule
 	form.ViewRule = form.collection.ViewRule
 	form.CreateRule = form.collection.CreateRule
@@ -73,7 +69,7 @@ func NewCollectionUpsert(app core.App, collection *models.Collection) *Collectio
 	}
 
 	clone, _ := form.collection.Schema.Clone()
-	if clone != nil && form.Type != models.CollectionTypeView {
+	if clone != nil {
 		form.Schema = *clone
 	} else {
 		form.Schema = schema.Schema{}
@@ -90,16 +86,6 @@ func (form *CollectionUpsert) SetDao(dao *daos.Dao) {
 // Validate makes the form validatable by implementing [validation.Validatable] interface.
 func (form *CollectionUpsert) Validate() error {
 	isAuth := form.Type == models.CollectionTypeAuth
-	isView := form.Type == models.CollectionTypeView
-
-	// generate schema from the query (overwriting any explicit user defined schema)
-	if isView {
-		options := models.CollectionViewOptions{}
-		if err := decodeOptions(form.Options, &options); err != nil {
-			return err
-		}
-		form.Schema, _ = form.dao.CreateViewSchema(options.Query)
-	}
 
 	return validation.ValidateStruct(form,
 		validation.Field(
@@ -118,11 +104,7 @@ func (form *CollectionUpsert) Validate() error {
 		validation.Field(
 			&form.Type,
 			validation.Required,
-			validation.In(
-				models.CollectionTypeBase,
-				models.CollectionTypeAuth,
-				models.CollectionTypeView,
-			),
+			validation.In(models.CollectionTypeAuth, models.CollectionTypeBase),
 			validation.By(form.ensureNoTypeChange),
 		),
 		validation.Field(
@@ -132,52 +114,28 @@ func (form *CollectionUpsert) Validate() error {
 			validation.Match(collectionNameRegex),
 			validation.By(form.ensureNoSystemNameChange),
 			validation.By(form.checkUniqueName),
-			validation.By(form.checkForVia),
 		),
-		// validates using the type's own validation rules + some collection's specifics
+		// validates using the type's own validation rules + some collection's specific
 		validation.Field(
 			&form.Schema,
 			validation.By(form.checkMinSchemaFields),
 			validation.By(form.ensureNoSystemFieldsChange),
 			validation.By(form.ensureNoFieldsTypeChange),
 			validation.By(form.checkRelationFields),
-			validation.When(isAuth, validation.By(form.ensureNoAuthFieldName)),
+			validation.When(
+				isAuth,
+				validation.By(form.ensureNoAuthFieldName),
+			),
 		),
 		validation.Field(&form.ListRule, validation.By(form.checkRule)),
 		validation.Field(&form.ViewRule, validation.By(form.checkRule)),
-		validation.Field(
-			&form.CreateRule,
-			validation.When(isView, validation.Nil),
-			validation.By(form.checkRule),
-		),
-		validation.Field(
-			&form.UpdateRule,
-			validation.When(isView, validation.Nil),
-			validation.By(form.checkRule),
-		),
-		validation.Field(
-			&form.DeleteRule,
-			validation.When(isView, validation.Nil),
-			validation.By(form.checkRule),
-		),
-		validation.Field(&form.Indexes, validation.By(form.checkIndexes)),
+		validation.Field(&form.CreateRule, validation.By(form.checkRule)),
+		validation.Field(&form.UpdateRule, validation.By(form.checkRule)),
+		validation.Field(&form.DeleteRule, validation.By(form.checkRule)),
 		validation.Field(&form.Options, validation.By(form.checkOptions)),
 	)
 }
 
-func (form *CollectionUpsert) checkForVia(value any) error {
-	v, _ := value.(string)
-	if v == "" {
-		return nil
-	}
-
-	if strings.Contains(strings.ToLower(v), "_via_") {
-		return validation.NewError("validation_invalid_name", "The name of the collection cannot contain '_via_'.")
-	}
-
-	return nil
-}
-
 func (form *CollectionUpsert) checkUniqueName(value any) error {
 	v, _ := value.(string)
 
@@ -191,6 +149,11 @@ func (form *CollectionUpsert) checkUniqueName(value any) error {
 		return validation.NewError("validation_collection_name_id_duplicate", "The name must not match an existing collection id.")
 	}
 
+	// ensure that there is no existing table name with the same name
+	if (form.collection.IsNew() || !strings.EqualFold(v, form.collection.Name)) && form.dao.HasTable(v) {
+		return validation.NewError("validation_collection_name_table_exists", "The collection name must be also unique table name.")
+	}
+
 	return nil
 }
 
@@ -244,6 +207,14 @@ func (form *CollectionUpsert) ensureNoFieldsTypeChange(value any) error {
 func (form *CollectionUpsert) checkRelationFields(value any) error {
 	v, _ := value.(schema.Schema)
 
+	systemDisplayFields := schema.BaseModelFieldNames()
+	systemDisplayFields = append(systemDisplayFields,
+		schema.FieldNameUsername,
+		schema.FieldNameEmail,
+		schema.FieldNameEmailVisibility,
+		schema.FieldNameVerified,
+	)
+
 	for i, field := range v.Fields() {
 		if field.Type != schema.FieldTypeRelation {
 			continue
@@ -251,34 +222,13 @@ func (form *CollectionUpsert) checkRelationFields(value any) error {
 
 		options, _ := field.Options.(*schema.RelationOptions)
 		if options == nil {
-			return validation.Errors{fmt.Sprint(i): validation.Errors{
-				"options": validation.NewError(
-					"validation_schema_invalid_relation_field_options",
-					"The relation field has invalid field options.",
-				)},
-			}
+			continue
 		}
 
-		// prevent collectionId change
-		oldField := form.collection.Schema.GetFieldById(field.Id)
-		if oldField != nil {
-			oldOptions, _ := oldField.Options.(*schema.RelationOptions)
-			if oldOptions != nil && oldOptions.CollectionId != options.CollectionId {
-				return validation.Errors{fmt.Sprint(i): validation.Errors{
-					"options": validation.Errors{
-						"collectionId": validation.NewError(
-							"validation_field_relation_change",
-							"The relation collection cannot be changed.",
-						),
-					}},
-				}
-			}
-		}
-
-		relCollection, _ := form.dao.FindCollectionByNameOrId(options.CollectionId)
+		collection, err := form.dao.FindCollectionByNameOrId(options.CollectionId)
 
 		// validate collectionId
-		if relCollection == nil || relCollection.Id != options.CollectionId {
+		if err != nil || collection.Id != options.CollectionId {
 			return validation.Errors{fmt.Sprint(i): validation.Errors{
 				"options": validation.Errors{
 					"collectionId": validation.NewError(
@@ -289,16 +239,17 @@ func (form *CollectionUpsert) checkRelationFields(value any) error {
 			}
 		}
 
-		// allow only views to have relations to other views
-		// (see https://github.com/pocketbase/pocketbase/issues/3000)
-		if form.Type != models.CollectionTypeView && relCollection.IsView() {
-			return validation.Errors{fmt.Sprint(i): validation.Errors{
-				"options": validation.Errors{
-					"collectionId": validation.NewError(
-						"validation_field_non_view_base_relation_collection",
-						"Non view collections are not allowed to have a view relation.",
-					),
-				}},
+		// validate displayFields (if any)
+		for _, name := range options.DisplayFields {
+			if collection.Schema.GetFieldByName(name) == nil && !list.ExistInSlice(name, systemDisplayFields) {
+				return validation.Errors{fmt.Sprint(i): validation.Errors{
+					"options": validation.Errors{
+						"displayFields": validation.NewError(
+							"validation_field_invalid_relation_displayFields",
+							fmt.Sprintf("%q does not exist in the related %q collection.", name, collection.Name),
+						),
+					}},
+				}
 			}
 		}
 	}
@@ -337,15 +288,13 @@ func (form *CollectionUpsert) ensureNoAuthFieldName(value any) error {
 }
 
 func (form *CollectionUpsert) checkMinSchemaFields(value any) error {
-	v, _ := value.(schema.Schema)
+	if form.Type == models.CollectionTypeAuth {
+		return nil // auth collections doesn't require having additional schema fields
+	}
 
-	switch form.Type {
-	case models.CollectionTypeAuth, models.CollectionTypeView:
-		return nil // no schema fields constraint
-	default:
-		if len(v.Fields()) == 0 {
-			return validation.ErrRequired
-		}
+	v, ok := value.(schema.Schema)
+	if !ok || len(v.Fields()) == 0 {
+		return validation.ErrRequired
 	}
 
 	return nil
@@ -385,45 +334,7 @@ func (form *CollectionUpsert) checkRule(value any) error {
 
 	_, err := search.FilterData(*v).BuildExpr(r)
 	if err != nil {
-		return validation.NewError("validation_invalid_rule", "Invalid filter rule. Raw error: "+err.Error())
-	}
-
-	return nil
-}
-
-func (form *CollectionUpsert) checkIndexes(value any) error {
-	v, _ := value.(types.JsonArray[string])
-
-	if form.Type == models.CollectionTypeView && len(v) > 0 {
-		return validation.NewError(
-			"validation_indexes_not_supported",
-			"The collection doesn't support indexes.",
-		)
-	}
-
-	for i, rawIndex := range v {
-		parsed := dbutils.ParseIndex(rawIndex)
-
-		if !parsed.IsValid() {
-			return validation.Errors{
-				strconv.Itoa(i): validation.NewError(
-					"validation_invalid_index_expression",
-					"Invalid CREATE INDEX expression.",
-				),
-			}
-		}
-
-		// note: we don't check the index table because it is always
-		// overwritten by the daos.SyncRecordTableSchema to allow
-		// easier partial modifications (eg. changing only the collection name).
-		// if !strings.EqualFold(parsed.TableName, form.Name) {
-		// 	return validation.Errors{
-		// 		strconv.Itoa(i): validation.NewError(
-		// 			"validation_invalid_index_table",
-		// 			fmt.Sprintf("The index table must be the same as the collection name."),
-		// 		),
-		// 	}
-		// }
+		return validation.NewError("validation_invalid_rule", "Invalid filter rule.")
 	}
 
 	return nil
@@ -432,11 +343,15 @@ func (form *CollectionUpsert) checkIndexes(value any) error {
 func (form *CollectionUpsert) checkOptions(value any) error {
 	v, _ := value.(types.JsonMap)
 
-	switch form.Type {
-	case models.CollectionTypeAuth:
+	if form.Type == models.CollectionTypeAuth {
+		raw, err := v.MarshalJSON()
+		if err != nil {
+			return validation.NewError("validation_invalid_options", "Invalid options.")
+		}
+
 		options := models.CollectionAuthOptions{}
-		if err := decodeOptions(v, &options); err != nil {
-			return err
+		if err := json.Unmarshal(raw, &options); err != nil {
+			return validation.NewError("validation_invalid_options", "Invalid options.")
 		}
 
 		// check the generic validations
@@ -448,39 +363,6 @@ func (form *CollectionUpsert) checkOptions(value any) error {
 		if err := form.checkRule(options.ManageRule); err != nil {
 			return validation.Errors{"manageRule": err}
 		}
-	case models.CollectionTypeView:
-		options := models.CollectionViewOptions{}
-		if err := decodeOptions(v, &options); err != nil {
-			return err
-		}
-
-		// check the generic validations
-		if err := options.Validate(); err != nil {
-			return err
-		}
-
-		// check the query option
-		if _, err := form.dao.CreateViewSchema(options.Query); err != nil {
-			return validation.Errors{
-				"query": validation.NewError(
-					"validation_invalid_view_query",
-					fmt.Sprintf("Invalid query - %s", err.Error()),
-				),
-			}
-		}
-	}
-
-	return nil
-}
-
-func decodeOptions(options types.JsonMap, result any) error {
-	raw, err := options.MarshalJSON()
-	if err != nil {
-		return validation.NewError("validation_invalid_options", "Invalid options.")
-	}
-
-	if err := json.Unmarshal(raw, result); err != nil {
-		return validation.NewError("validation_invalid_options", "Invalid options.")
 	}
 
 	return nil
@@ -516,17 +398,7 @@ func (form *CollectionUpsert) Submit(interceptors ...InterceptorFunc[*models.Col
 		form.collection.Name = form.Name
 	}
 
-	// view schema is autogenerated on save and cannot have indexes
-	if !form.collection.IsView() {
-		form.collection.Schema = form.Schema
-
-		// normalize indexes format
-		form.collection.Indexes = make(types.JsonArray[string], len(form.Indexes))
-		for i, rawIdx := range form.Indexes {
-			form.collection.Indexes[i] = dbutils.ParseIndex(rawIdx).Build()
-		}
-	}
-
+	form.collection.Schema = form.Schema
 	form.collection.ListRule = form.ListRule
 	form.collection.ViewRule = form.ViewRule
 	form.collection.CreateRule = form.CreateRule

forms/collection_upsert_test.go

@@ -5,19 +5,16 @@ import (
 	"errors"
 	"testing"
 
-	validation "github.com/pocketbase/ozzo-validation/v4"
+	validation "github.com/go-ozzo/ozzo-validation/v4"
 	"github.com/pocketbase/pocketbase/forms"
 	"github.com/pocketbase/pocketbase/models"
 	"github.com/pocketbase/pocketbase/models/schema"
 	"github.com/pocketbase/pocketbase/tests"
-	"github.com/pocketbase/pocketbase/tools/dbutils"
 	"github.com/pocketbase/pocketbase/tools/security"
 	"github.com/spf13/cast"
 )
 
 func TestNewCollectionUpsert(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -25,7 +22,7 @@ func TestNewCollectionUpsert(t *testing.T) {
 	collection.Name = "test_name"
 	collection.Type = "test_type"
 	collection.System = true
-	listRule := "test_list"
+	listRule := "testview"
 	collection.ListRule = &listRule
 	viewRule := "test_view"
 	collection.ViewRule = &viewRule
@@ -90,8 +87,6 @@ func TestNewCollectionUpsert(t *testing.T) {
 }
 
 func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -103,19 +98,7 @@ func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
 	}{
 		{"empty create (base)", "", "{}", []string{"name", "schema"}},
 		{"empty create (auth)", "", `{"type":"auth"}`, []string{"name"}},
-		{"empty create (view)", "", `{"type":"view"}`, []string{"name", "options"}},
 		{"empty update", "demo2", "{}", []string{}},
-		{
-			"collection and field with _via_ names",
-			"",
-			`{
-				"name": "a_via_b",
-				"schema": [
-					{"name":"c_via_d","type":"text"}
-				]
-			}`,
-			[]string{"name", "schema"},
-		},
 		{
 			"create failure",
 			"",
@@ -130,10 +113,9 @@ func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
 				"viewRule": "missing = '123'",
 				"createRule": "missing = '123'",
 				"updateRule": "missing = '123'",
-				"deleteRule": "missing = '123'",
-				"indexes": ["create index '' on '' ()"]
+				"deleteRule": "missing = '123'"
 			}`,
-			[]string{"name", "type", "schema", "listRule", "viewRule", "createRule", "updateRule", "deleteRule", "indexes"},
+			[]string{"name", "type", "schema", "listRule", "viewRule", "createRule", "updateRule", "deleteRule"},
 		},
 		{
 			"create failure - existing name",
@@ -187,7 +169,26 @@ func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
 			[]string{"schema"},
 		},
 		{
-			"create failure - check auth options validators",
+			"create failure - missing relation display field",
+			"",
+			`{
+				"name": "test_new",
+				"type": "base",
+				"schema": [
+					{
+						"name":"test",
+						"type":"relation",
+						"options":{
+							"collectionId":"wsmn24bux7wo113",
+							"displayFields":["text", "missing"]
+						}
+					}
+				]
+			}`,
+			[]string{"schema"},
+		},
+		{
+			"create failure - check type options validators",
 			"",
 			`{
 				"name": "test_new",
@@ -199,16 +200,6 @@ func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
 			}`,
 			[]string{"options"},
 		},
-		{
-			"create failure - check view options validators",
-			"",
-			`{
-				"name": "test_new",
-				"type": "view",
-				"options": { "query": "invalid query" }
-			}`,
-			[]string{"options"},
-		},
 		{
 			"create success",
 			"",
@@ -232,8 +223,7 @@ func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
 				"viewRule": "test1='123' && emailVisibility = true",
 				"createRule": "test1='123' && email != ''",
 				"updateRule": "test1='123' && username != ''",
-				"deleteRule": "test1='123' && id != ''",
-				"indexes": ["create index idx_test_new on anything (test1)"]
+				"deleteRule": "test1='123' && id != ''"
 			}`,
 			[]string{},
 		},
@@ -244,10 +234,9 @@ func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
 				"schema": [
 					{"id":"a123456","name":"test1","type":"url"},
 					{"id":"b123456","name":"test2","type":"bool"}
-				],
-				"indexes": ["create index idx_test_new on test_new (test1)", "invalid"]
+				]
 			}`,
-			[]string{"schema", "indexes"},
+			[]string{"schema"},
 		},
 		{
 			"update success - rename fields to existing field names (aka. reusing field names)",
@@ -291,26 +280,6 @@ func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
 			}`,
 			[]string{"type"},
 		},
-		{
-			"update failure - changing relation collection",
-			"users",
-			`{
-				"schema": [
-					{
-						"id": "lkeigvv3",
-						"name": "rel",
-						"type": "relation",
-						"options": {
-							"collectionId": "wzlqyes4orhoygb",
-							"cascadeDelete": false,
-							"maxSelect": 1,
-							"displayFields": null
-						}
-					}
-				]
-			}`,
-			[]string{"schema"},
-		},
 		{
 			"update failure - all fields",
 			"demo2",
@@ -326,10 +295,9 @@ func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
 				"createRule": "missing = '123'",
 				"updateRule": "missing = '123'",
 				"deleteRule": "missing = '123'",
-				"options": {"test": 123},
-				"indexes": ["create index '' from demo2 on (id)"]
+				"options": {"test": 123}
 			}`,
-			[]string{"name", "type", "system", "schema", "listRule", "viewRule", "createRule", "updateRule", "deleteRule", "indexes"},
+			[]string{"name", "type", "system", "schema", "listRule", "viewRule", "createRule", "updateRule", "deleteRule"},
 		},
 		{
 			"update success - update all fields",
@@ -345,11 +313,7 @@ func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
 				"createRule": "test='123' && email != ''",
 				"updateRule": "test='123' && username != ''",
 				"deleteRule": "test='123' && id != ''",
-				"options": {"minPasswordLength": 10},
-				"indexes": [
-					"create index idx_clients_test1 on anything (id, email, test)",
-					"create unique index idx_clients_test2 on clients (id, username, email)"
-				]
+				"options": {"minPasswordLength": 10}
 			}`,
 			[]string{},
 		},
@@ -376,8 +340,7 @@ func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
 				"viewRule": null,
 				"createRule": null,
 				"updateRule": null,
-				"deleteRule": null,
-				"indexes": []
+				"deleteRule": null
 			}`,
 			[]string{},
 		},
@@ -393,284 +356,113 @@ func TestCollectionUpsertValidateAndSubmit(t *testing.T) {
 			}`,
 			[]string{},
 		},
-
-		// view tests
-		// -----------------------------------------------------------
-		{
-			"base->view relation",
-			"",
-			`{
-				"name": "test_view_relation",
-				"type": "base",
-				"schema": [
-					{
-						"name": "test",
-						"type": "relation",
-						"options":{
-							"collectionId": "v9gwnfh02gjq1q0"
-						}
-					}
-				]
-			}`,
-			[]string{"schema"}, // not allowed
-		},
-		{
-			"auth->view relation",
-			"",
-			`{
-				"name": "test_view_relation",
-				"type": "auth",
-				"schema": [
-					{
-						"name": "test",
-						"type": "relation",
-						"options": {
-							"collectionId": "v9gwnfh02gjq1q0"
-						}
-					}
-				]
-			}`,
-			[]string{"schema"}, // not allowed
-		},
-		{
-			"view->view relation",
-			"",
-			`{
-				"name": "test_view_relation",
-				"type": "view",
-				"options": {
-					"query": "select view1.id, view1.id as rel from view1"
-				}
-			}`,
-			[]string{}, // allowed
-		},
-		{
-			"view create failure",
-			"",
-			`{
-				"name": "upsert_view",
-				"type": "view",
-				"listRule": "id='123' && verified = true",
-				"viewRule": "id='123' && emailVisibility = true",
-				"schema": [
-					{"id":"abc123","name":"some invalid field name that will be overwritten !@#$","type":"bool"}
-				],
-				"options": {
-					"query": "select id, email from users; drop table _admins;"
-				},
-				"indexes": ["create index idx_test_view on upsert_view (id)"]
-			}`,
-			[]string{
-				"listRule",
-				"viewRule",
-				"options",
-				"indexes", // views don't have indexes
-			},
-		},
-		{
-			"view create success",
-			"",
-			`{
-				"name": "upsert_view",
-				"type": "view",
-				"listRule": "id='123' && verified = true",
-				"viewRule": "id='123' && emailVisibility = true",
-				"schema": [
-					{"id":"abc123","name":"some invalid field name that will be overwritten !@#$","type":"bool"}
-				],
-				"options": {
-					"query": "select id, emailVisibility, verified from users"
-				}
-			}`,
-			[]string{
-				// "schema", should be overwritten by an autogenerated from the query
-			},
-		},
-		{
-			"view update failure (schema autogeneration and rule fields check)",
-			"upsert_view",
-			`{
-				"name": "upsert_view_2",
-				"listRule": "id='456' && verified = true",
-				"viewRule": "id='456'",
-				"createRule": "id='123'",
-				"updateRule": "id='123'",
-				"deleteRule": "id='123'",
-				"schema": [
-					{"id":"abc123","name":"verified","type":"bool"}
-				],
-				"options": {
-					"query": "select 1 as id"
-				}
-			}`,
-			[]string{
-				"listRule",   // missing field (ignoring the old or explicit schema)
-				"createRule", // not allowed
-				"updateRule", // not allowed
-				"deleteRule", // not allowed
-			},
-		},
-		{
-			"view update failure (check query identifiers format)",
-			"upsert_view",
-			`{
-				"listRule": null,
-				"viewRule": null,
-				"options": {
-					"query": "select 1 as id, 2 as [invalid!@#]"
-				}
-			}`,
-			[]string{
-				"schema", // should fail due to invalid field name
-			},
-		},
-		{
-			"view update success",
-			"upsert_view",
-			`{
-				"listRule": null,
-				"viewRule": null,
-				"options": {
-					"query": "select 1 as id, 2 as valid"
-				}
-			}`,
-			[]string{},
-		},
 	}
 
 	for _, s := range scenarios {
-		t.Run(s.testName, func(t *testing.T) {
-			collection := &models.Collection{}
-			if s.existingName != "" {
-				var err error
-				collection, err = app.Dao().FindCollectionByNameOrId(s.existingName)
-				if err != nil {
-					t.Fatal(err)
-				}
+		collection := &models.Collection{}
+		if s.existingName != "" {
+			var err error
+			collection, err = app.Dao().FindCollectionByNameOrId(s.existingName)
+			if err != nil {
+				t.Fatal(err)
 			}
+		}
 
-			form := forms.NewCollectionUpsert(app, collection)
+		form := forms.NewCollectionUpsert(app, collection)
 
-			// load data
-			loadErr := json.Unmarshal([]byte(s.jsonData), form)
-			if loadErr != nil {
-				t.Fatalf("Failed to load form data: %v", loadErr)
+		// load data
+		loadErr := json.Unmarshal([]byte(s.jsonData), form)
+		if loadErr != nil {
+			t.Errorf("[%s] Failed to load form data: %v", s.testName, loadErr)
+			continue
+		}
+
+		interceptorCalls := 0
+		interceptor := func(next forms.InterceptorNextFunc[*models.Collection]) forms.InterceptorNextFunc[*models.Collection] {
+			return func(c *models.Collection) error {
+				interceptorCalls++
+				return next(c)
 			}
+		}
 
-			interceptorCalls := 0
-			interceptor := func(next forms.InterceptorNextFunc[*models.Collection]) forms.InterceptorNextFunc[*models.Collection] {
-				return func(c *models.Collection) error {
-					interceptorCalls++
-					return next(c)
-				}
+		// parse errors
+		result := form.Submit(interceptor)
+		errs, ok := result.(validation.Errors)
+		if !ok && result != nil {
+			t.Errorf("[%s] Failed to parse errors %v", s.testName, result)
+			continue
+		}
+
+		// check interceptor calls
+		expectInterceptorCalls := 1
+		if len(s.expectedErrors) > 0 {
+			expectInterceptorCalls = 0
+		}
+		if interceptorCalls != expectInterceptorCalls {
+			t.Errorf("[%s] Expected interceptor to be called %d, got %d", s.testName, expectInterceptorCalls, interceptorCalls)
+		}
+
+		// check errors
+		if len(errs) > len(s.expectedErrors) {
+			t.Errorf("[%s] Expected error keys %v, got %v", s.testName, s.expectedErrors, errs)
+		}
+		for _, k := range s.expectedErrors {
+			if _, ok := errs[k]; !ok {
+				t.Errorf("[%s] Missing expected error key %q in %v", s.testName, k, errs)
 			}
+		}
 
-			// parse errors
-			result := form.Submit(interceptor)
-			errs, ok := result.(validation.Errors)
-			if !ok && result != nil {
-				t.Fatalf("Failed to parse errors %v", result)
-			}
+		if len(s.expectedErrors) > 0 {
+			continue
+		}
 
-			// check interceptor calls
-			expectInterceptorCalls := 1
-			if len(s.expectedErrors) > 0 {
-				expectInterceptorCalls = 0
-			}
-			if interceptorCalls != expectInterceptorCalls {
-				t.Fatalf("Expected interceptor to be called %d, got %d", expectInterceptorCalls, interceptorCalls)
-			}
+		collection, _ = app.Dao().FindCollectionByNameOrId(form.Name)
+		if collection == nil {
+			t.Errorf("[%s] Expected to find collection %q, got nil", s.testName, form.Name)
+			continue
+		}
 
-			// check errors
-			if len(errs) > len(s.expectedErrors) {
-				t.Fatalf("Expected error keys %v, got %v", s.expectedErrors, errs)
-			}
-			for _, k := range s.expectedErrors {
-				if _, ok := errs[k]; !ok {
-					t.Fatalf("Missing expected error key %q in %v", k, errs)
-				}
-			}
+		if form.Name != collection.Name {
+			t.Errorf("[%s] Expected Name %q, got %q", s.testName, collection.Name, form.Name)
+		}
 
-			if len(s.expectedErrors) > 0 {
-				return
-			}
+		if form.Type != collection.Type {
+			t.Errorf("[%s] Expected Type %q, got %q", s.testName, collection.Type, form.Type)
+		}
 
-			collection, _ = app.Dao().FindCollectionByNameOrId(form.Name)
-			if collection == nil {
-				t.Fatalf("Expected to find collection %q, got nil", form.Name)
-			}
+		if form.System != collection.System {
+			t.Errorf("[%s] Expected System %v, got %v", s.testName, collection.System, form.System)
+		}
 
-			if form.Name != collection.Name {
-				t.Fatalf("Expected Name %q, got %q", collection.Name, form.Name)
-			}
+		if cast.ToString(form.ListRule) != cast.ToString(collection.ListRule) {
+			t.Errorf("[%s] Expected ListRule %v, got %v", s.testName, collection.ListRule, form.ListRule)
+		}
 
-			if form.Type != collection.Type {
-				t.Fatalf("Expected Type %q, got %q", collection.Type, form.Type)
-			}
+		if cast.ToString(form.ViewRule) != cast.ToString(collection.ViewRule) {
+			t.Errorf("[%s] Expected ViewRule %v, got %v", s.testName, collection.ViewRule, form.ViewRule)
+		}
 
-			if form.System != collection.System {
-				t.Fatalf("Expected System %v, got %v", collection.System, form.System)
-			}
+		if cast.ToString(form.CreateRule) != cast.ToString(collection.CreateRule) {
+			t.Errorf("[%s] Expected CreateRule %v, got %v", s.testName, collection.CreateRule, form.CreateRule)
+		}
 
-			if cast.ToString(form.ListRule) != cast.ToString(collection.ListRule) {
-				t.Fatalf("Expected ListRule %v, got %v", collection.ListRule, form.ListRule)
-			}
+		if cast.ToString(form.UpdateRule) != cast.ToString(collection.UpdateRule) {
+			t.Errorf("[%s] Expected UpdateRule %v, got %v", s.testName, collection.UpdateRule, form.UpdateRule)
+		}
 
-			if cast.ToString(form.ViewRule) != cast.ToString(collection.ViewRule) {
-				t.Fatalf("Expected ViewRule %v, got %v", collection.ViewRule, form.ViewRule)
-			}
+		if cast.ToString(form.DeleteRule) != cast.ToString(collection.DeleteRule) {
+			t.Errorf("[%s] Expected DeleteRule %v, got %v", s.testName, collection.DeleteRule, form.DeleteRule)
+		}
 
-			if cast.ToString(form.CreateRule) != cast.ToString(collection.CreateRule) {
-				t.Fatalf("Expected CreateRule %v, got %v", collection.CreateRule, form.CreateRule)
-			}
-
-			if cast.ToString(form.UpdateRule) != cast.ToString(collection.UpdateRule) {
-				t.Fatalf("Expected UpdateRule %v, got %v", collection.UpdateRule, form.UpdateRule)
-			}
-
-			if cast.ToString(form.DeleteRule) != cast.ToString(collection.DeleteRule) {
-				t.Fatalf("Expected DeleteRule %v, got %v", collection.DeleteRule, form.DeleteRule)
-			}
-
-			rawFormSchema, _ := form.Schema.MarshalJSON()
-			rawCollectionSchema, _ := collection.Schema.MarshalJSON()
-
-			if len(form.Schema.Fields()) != len(collection.Schema.Fields()) {
-				t.Fatalf("Expected Schema \n%v, \ngot \n%v", string(rawCollectionSchema), string(rawFormSchema))
-			}
-
-			for _, f := range form.Schema.Fields() {
-				if collection.Schema.GetFieldByName(f.Name) == nil {
-					t.Fatalf("Missing field %s \nin \n%v", f.Name, string(rawFormSchema))
-				}
-			}
-
-			// check indexes (if any)
-			allIndexes, _ := app.Dao().TableIndexes(form.Name)
-			for _, formIdx := range form.Indexes {
-				parsed := dbutils.ParseIndex(formIdx)
-				parsed.TableName = form.Name
-				normalizedIdx := parsed.Build()
-
-				var exists bool
-				for _, idx := range allIndexes {
-					if dbutils.ParseIndex(idx).Build() == normalizedIdx {
-						exists = true
-						continue
-					}
-				}
-
-				if !exists {
-					t.Fatalf("Missing index %s \nin \n%v", normalizedIdx, allIndexes)
-				}
-			}
-		})
+		formSchema, _ := form.Schema.MarshalJSON()
+		collectionSchema, _ := collection.Schema.MarshalJSON()
+		if string(formSchema) != string(collectionSchema) {
+			t.Errorf("[%s] Expected Schema %v, got %v", s.testName, string(collectionSchema), string(formSchema))
+		}
 	}
 }
 
 func TestCollectionUpsertSubmitInterceptors(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -721,8 +513,6 @@ func TestCollectionUpsertSubmitInterceptors(t *testing.T) {
 }
 
 func TestCollectionUpsertWithCustomId(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 

forms/collections_import.go

@@ -3,8 +3,9 @@ package forms
 import (
 	"encoding/json"
 	"fmt"
+	"log"
 
-	validation "github.com/pocketbase/ozzo-validation/v4"
+	validation "github.com/go-ozzo/ozzo-validation/v4"
 	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/models"
@@ -65,7 +66,7 @@ func (form *CollectionsImport) Submit(interceptors ...InterceptorFunc[[]*models.
 			importErr := txDao.ImportCollections(
 				collections,
 				form.DeleteMissing,
-				form.afterSync,
+				form.beforeRecordsSync,
 			)
 			if importErr == nil {
 				return nil
@@ -77,18 +78,21 @@ func (form *CollectionsImport) Submit(interceptors ...InterceptorFunc[[]*models.
 			}
 
 			// generic/db failure
+			if form.app.IsDebug() {
+				log.Println("Internal import failure:", importErr)
+			}
 			return validation.Errors{"collections": validation.NewError(
 				"collections_import_failure",
-				"Failed to import the collections configuration. Raw error:\n"+importErr.Error(),
+				"Failed to import the collections configuration.",
 			)}
 		})
 	}, interceptors...)
 }
 
-func (form *CollectionsImport) afterSync(txDao *daos.Dao, mappedNew, mappedOld map[string]*models.Collection) error {
+func (form *CollectionsImport) beforeRecordsSync(txDao *daos.Dao, mappedNew, mappedOld map[string]*models.Collection) error {
 	// refresh the actual persisted collections list
 	refreshedCollections := []*models.Collection{}
-	if err := txDao.CollectionQuery().OrderBy("updated ASC").All(&refreshedCollections); err != nil {
+	if err := txDao.CollectionQuery().OrderBy("created ASC").All(&refreshedCollections); err != nil {
 		return err
 	}
 

forms/collections_import_test.go

@@ -11,8 +11,6 @@ import (
 )
 
 func TestCollectionsImportValidate(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 
@@ -40,10 +38,6 @@ func TestCollectionsImportValidate(t *testing.T) {
 }
 
 func TestCollectionsImportSubmit(t *testing.T) {
-	t.Parallel()
-
-	totalCollections := 11
-
 	scenarios := []struct {
 		name                   string
 		jsonData               string
@@ -58,7 +52,7 @@ func TestCollectionsImportSubmit(t *testing.T) {
 				"collections": []
 			}`,
 			expectError:            true,
-			expectCollectionsCount: totalCollections,
+			expectCollectionsCount: 8,
 			expectEvents:           nil,
 		},
 		{
@@ -88,7 +82,7 @@ func TestCollectionsImportSubmit(t *testing.T) {
 				]
 			}`,
 			expectError:            true,
-			expectCollectionsCount: totalCollections,
+			expectCollectionsCount: 8,
 			expectEvents: map[string]int{
 				"OnModelBeforeCreate": 2,
 			},
@@ -107,7 +101,7 @@ func TestCollectionsImportSubmit(t *testing.T) {
 				]
 			}`,
 			expectError:            true,
-			expectCollectionsCount: totalCollections,
+			expectCollectionsCount: 8,
 			expectEvents: map[string]int{
 				"OnModelBeforeCreate": 2,
 			},
@@ -143,7 +137,7 @@ func TestCollectionsImportSubmit(t *testing.T) {
 				]
 			}`,
 			expectError:            false,
-			expectCollectionsCount: totalCollections + 3,
+			expectCollectionsCount: 11,
 			expectEvents: map[string]int{
 				"OnModelBeforeCreate": 3,
 				"OnModelAfterCreate":  3,
@@ -166,7 +160,7 @@ func TestCollectionsImportSubmit(t *testing.T) {
 				]
 			}`,
 			expectError:            true,
-			expectCollectionsCount: totalCollections,
+			expectCollectionsCount: 8,
 			expectEvents: map[string]int{
 				"OnModelBeforeCreate": 1,
 			},
@@ -208,9 +202,9 @@ func TestCollectionsImportSubmit(t *testing.T) {
 				]
 			}`,
 			expectError:            true,
-			expectCollectionsCount: totalCollections,
+			expectCollectionsCount: 8,
 			expectEvents: map[string]int{
-				"OnModelBeforeDelete": 1,
+				"OnModelBeforeDelete": 5,
 			},
 		},
 		{
@@ -219,7 +213,7 @@ func TestCollectionsImportSubmit(t *testing.T) {
 				"collections": [
 					{
 						"id":"sz5l5z67tg7gku0",
-						"name":"demo2_rename",
+						"name":"demo2",
 						"schema":[
 							{
 								"id":"_2hlxbmp",
@@ -259,7 +253,7 @@ func TestCollectionsImportSubmit(t *testing.T) {
 				]
 			}`,
 			expectError:            false,
-			expectCollectionsCount: totalCollections + 2,
+			expectCollectionsCount: 10,
 			expectEvents: map[string]int{
 				"OnModelBeforeUpdate": 1,
 				"OnModelAfterUpdate":  1,
@@ -347,126 +341,55 @@ func TestCollectionsImportSubmit(t *testing.T) {
 				"OnModelAfterUpdate":  2,
 				"OnModelBeforeCreate": 1,
 				"OnModelAfterCreate":  1,
-				"OnModelBeforeDelete": totalCollections - 2,
-				"OnModelAfterDelete":  totalCollections - 2,
-			},
-		},
-		{
-			name: "lazy system table name error",
-			jsonData: `{
-				"collections": [
-					{
-						"name": "_admins",
-						"schema": [
-							{
-								"id":"fz6iql2m",
-								"name":"active",
-								"type":"bool"
-							}
-						]
-					}
-				]
-			}`,
-			expectError:            true,
-			expectCollectionsCount: totalCollections,
-			expectEvents: map[string]int{
-				"OnModelBeforeCreate": 1,
-			},
-		},
-		{
-			name: "lazy view evaluation",
-			jsonData: `{
-				"collections": [
-					{
-						"name": "view_before",
-						"type": "view",
-						"options": {
-							"query": "select id, active from base_test"
-						}
-					},
-					{
-						"name": "base_test",
-						"schema": [
-							{
-								"id":"fz6iql2m",
-								"name":"active",
-								"type":"bool"
-							}
-						]
-					},
-					{
-						"name": "view_after_new",
-						"type": "view",
-						"options": {
-							"query": "select id, active from base_test"
-						}
-					},
-					{
-						"name": "view_after_old",
-						"type": "view",
-						"options": {
-							"query": "select id from demo1"
-						}
-					}
-				]
-			}`,
-			expectError:            false,
-			expectCollectionsCount: totalCollections + 4,
-			expectEvents: map[string]int{
-				"OnModelBeforeUpdate": 3,
-				"OnModelAfterUpdate":  3,
-				"OnModelBeforeCreate": 4,
-				"OnModelAfterCreate":  4,
+				"OnModelBeforeDelete": 6,
+				"OnModelAfterDelete":  6,
 			},
 		},
 	}
 
 	for _, s := range scenarios {
-		t.Run(s.name, func(t *testing.T) {
-			testApp, _ := tests.NewTestApp()
-			defer testApp.Cleanup()
+		testApp, _ := tests.NewTestApp()
+		defer testApp.Cleanup()
 
-			form := forms.NewCollectionsImport(testApp)
+		form := forms.NewCollectionsImport(testApp)
 
-			// load data
-			loadErr := json.Unmarshal([]byte(s.jsonData), form)
-			if loadErr != nil {
-				t.Fatalf("Failed to load form data: %v", loadErr)
-			}
+		// load data
+		loadErr := json.Unmarshal([]byte(s.jsonData), form)
+		if loadErr != nil {
+			t.Errorf("[%s] Failed to load form data: %v", s.name, loadErr)
+			continue
+		}
 
-			err := form.Submit()
+		err := form.Submit()
 
-			hasErr := err != nil
-			if hasErr != s.expectError {
-				t.Fatalf("Expected hasErr to be %v, got %v (%v)", s.expectError, hasErr, err)
-			}
+		hasErr := err != nil
+		if hasErr != s.expectError {
+			t.Errorf("[%s] Expected hasErr to be %v, got %v (%v)", s.name, s.expectError, hasErr, err)
+		}
 
-			// check collections count
-			collections := []*models.Collection{}
-			if err := testApp.Dao().CollectionQuery().All(&collections); err != nil {
-				t.Fatal(err)
-			}
-			if len(collections) != s.expectCollectionsCount {
-				t.Fatalf("Expected %d collections, got %d", s.expectCollectionsCount, len(collections))
-			}
+		// check collections count
+		collections := []*models.Collection{}
+		if err := testApp.Dao().CollectionQuery().All(&collections); err != nil {
+			t.Fatal(err)
+		}
+		if len(collections) != s.expectCollectionsCount {
+			t.Errorf("[%s] Expected %d collections, got %d", s.name, s.expectCollectionsCount, len(collections))
+		}
 
-			// check events
-			if len(testApp.EventCalls) > len(s.expectEvents) {
-				t.Fatalf("Expected events %v, got %v", s.expectEvents, testApp.EventCalls)
+		// check events
+		if len(testApp.EventCalls) > len(s.expectEvents) {
+			t.Errorf("[%s] Expected events %v, got %v", s.name, s.expectEvents, testApp.EventCalls)
+		}
+		for event, expectedCalls := range s.expectEvents {
+			actualCalls := testApp.EventCalls[event]
+			if actualCalls != expectedCalls {
+				t.Errorf("[%s] Expected event %s to be called %d, got %d", s.name, event, expectedCalls, actualCalls)
 			}
-			for event, expectedCalls := range s.expectEvents {
-				actualCalls := testApp.EventCalls[event]
-				if actualCalls != expectedCalls {
-					t.Fatalf("Expected event %s to be called %d, got %d", event, expectedCalls, actualCalls)
-				}
-			}
-		})
+		}
 	}
 }
 
 func TestCollectionsImportSubmitInterceptors(t *testing.T) {
-	t.Parallel()
-
 	app, _ := tests.NewTestApp()
 	defer app.Cleanup()
 

forms/realtime_subscribe.go

@@ -1,7 +1,7 @@
 package forms
 
 import (
-	validation "github.com/pocketbase/ozzo-validation/v4"
+	validation "github.com/go-ozzo/ozzo-validation/v4"
 )
 
 // RealtimeSubscribe is a realtime subscriptions request form.
@@ -19,9 +19,5 @@ func NewRealtimeSubscribe() *RealtimeSubscribe {
 func (form *RealtimeSubscribe) Validate() error {
 	return validation.ValidateStruct(form,
 		validation.Field(&form.ClientId, validation.Required, validation.Length(1, 255)),
-		validation.Field(&form.Subscriptions,
-			validation.Length(0, 1000),
-			validation.Each(validation.Length(0, 2500)),
-		),
 	)
 }

forms/realtime_subscribe_test.go

@@ -1,96 +1,31 @@
 package forms_test
 
 import (
-	"encoding/json"
-	"fmt"
 	"strings"
 	"testing"
 
-	validation "github.com/pocketbase/ozzo-validation/v4"
 	"github.com/pocketbase/pocketbase/forms"
 )
 
 func TestRealtimeSubscribeValidate(t *testing.T) {
-	t.Parallel()
-
-	validSubscriptionsLimit := make([]string, 1000)
-	for i := 0; i < len(validSubscriptionsLimit); i++ {
-		validSubscriptionsLimit[i] = fmt.Sprintf(`"%d"`, i)
-	}
-	invalidSubscriptionsLimit := make([]string, 1001)
-	for i := 0; i < len(invalidSubscriptionsLimit); i++ {
-		invalidSubscriptionsLimit[i] = fmt.Sprintf(`"%d"`, i)
-	}
-
 	scenarios := []struct {
-		name           string
-		data           string
-		expectedErrors []string
+		clientId    string
+		expectError bool
 	}{
-		{
-			"empty data",
-			`{}`,
-			[]string{"clientId"},
-		},
-		{
-			"clientId > max chars limit",
-			`{"clientId":"` + strings.Repeat("a", 256) + `"}`,
-			[]string{"clientId"},
-		},
-		{
-			"clientId <= max chars limit",
-			`{"clientId":"` + strings.Repeat("a", 255) + `"}`,
-			[]string{},
-		},
-		{
-			"total subscriptions > max limit",
-			`{"clientId":"test", "subscriptions":[` + strings.Join(invalidSubscriptionsLimit, ",") + `]}`,
-			[]string{"subscriptions"},
-		},
-		{
-			"total subscriptions <= max limit",
-			`{"clientId":"test", "subscriptions":[` + strings.Join(validSubscriptionsLimit, ",") + `]}`,
-			[]string{},
-		},
-		{
-			"single subscription > max limit",
-			`{"clientId":"test", "subscriptions":["abc", "` + strings.Repeat("a", 2501) + `"]}`,
-			[]string{"subscriptions"},
-		},
-		{
-			"single subscription <= max limit",
-			`{"clientId":"test", "subscriptions":["abc", "` + strings.Repeat("a", 2500) + `"]}`,
-			[]string{},
-		},
+		{"", true},
+		{strings.Repeat("a", 256), true},
+		{"test", false},
 	}
 
-	for _, s := range scenarios {
-		t.Run(s.name, func(t *testing.T) {
-			form := forms.NewRealtimeSubscribe()
+	for i, s := range scenarios {
+		form := forms.NewRealtimeSubscribe()
+		form.ClientId = s.clientId
 
-			err := json.Unmarshal([]byte(s.data), &form)
-			if err != nil {
-				t.Fatal(err)
-			}
+		err := form.Validate()
 
-			result := form.Validate()
-
-			// parse errors
-			errs, ok := result.(validation.Errors)
-			if !ok && result != nil {
-				t.Fatalf("Failed to parse errors %v", result)
-				return
-			}
-
-			// check errors
-			if len(errs) > len(s.expectedErrors) {
-				t.Fatalf("Expected error keys %v, got %v", s.expectedErrors, errs)
-			}
-			for _, k := range s.expectedErrors {
-				if _, ok := errs[k]; !ok {
-					t.Fatalf("Missing expected error key %q in %v", k, errs)
-				}
-			}
-		})
+		hasErr := err != nil
+		if hasErr != s.expectError {
+			t.Errorf("(%d) Expected hasErr to be %v, got %v (%v)", i, s.expectError, hasErr, err)
+		}
 	}
 }

forms/record_email_change_confirm.go

@@ -1,7 +1,7 @@
 package forms
 
 import (
-	validation "github.com/pocketbase/ozzo-validation/v4"
+	validation "github.com/go-ozzo/ozzo-validation/v4"
 	"github.com/pocketbase/pocketbase/core"
 	"github.com/pocketbase/pocketbase/daos"
 	"github.com/pocketbase/pocketbase/models"
@@ -128,8 +128,6 @@ func (form *RecordEmailChangeConfirm) Submit(interceptors ...InterceptorFunc[*mo
 
 	authRecord.SetEmail(newEmail)
 	authRecord.SetVerified(true)
-
-	// @todo consider removing if not necessary anymore
 	authRecord.RefreshTokenKey() // invalidate old tokens
 
 	interceptorsErr := runInterceptors(authRecord, func(m *models.Record) error {