Skip to content
This page View Markdown Open in ChatGPT Open in Claude

Hash data

Answers the hash of the body : an HMAC-SHA256, keyed with the nonce of the default secret (or its secret when there is no nonce). A text is hashed as it is, exactly like the hashing conversion of a schema hashes a column. So the hash of a tax id made here equals the one stored in the table, and finds the row.

In short

  • Send a value, get its hash as a hex text.
  • The same value and the same secret always give the same hash.
  • Use it to look up a column that the schema stores hashed.
Method POST
URL /api/system-api/admin/hash-data : admin is the user path of your account
Body the value to hash : a string, or any JSON
Answer data : the hash, a hex string
From code g.sys.system.hash

The call

Body : a string
"Joseph"
Body : an object (hashed as its JSON text)
{ "name": "Joseph" }
Answer
{ "success": true, "statusCode": 200, "data": "be2a6a457cc36a48e4e231411d8d6498213f7ffb6d1e03066dd7fbaa6ec9402e" }
  • The algorithm is hashingAlgorithm of the secret : SHA256 is the one supported.
  • The same value always gives the same hash for the same secret, which is the point : hash a value on the way in and compare hashes on the way out.

Look up a hashed column

Find the customer whose tax id (hashed in the table) is known
const taxId = g.req.body.taxId;
const digest = await g.sys.system.hash(taxId);
const suppliers = await g.sys.db.query({ instance: 'mongodb', database: 'shop', collection: 'suppliers', find: { tax_id_hash: digest } });
Find the customer whose tax id (hashed in the table) is known
tax_id = g.req.body.taxId
digest = await g.sys.system.hash(tax_id)
suppliers = await g.sys.db.query('mongodb', 'shop', 'suppliers', find={'tax_id_hash': digest})
Find the customer whose tax id (hashed in the table) is known
$taxId = $g->req->body->taxId;
$digest = $g->sys->system->hash($taxId);
$suppliers = $g->sys->db->query('mongodb', 'shop', 'suppliers', find: ['tax_id_hash' => $digest]);
Find the customer whose tax id (hashed in the table) is known
var taxId = g.Req.Body.GetString("taxId");
var digest = await g.Sys.System.Hash(taxId);
var suppliers = await g.Sys.Db.Query(new Query("mongodb", "shop", "suppliers") { Find = new JsonObject { ["tax_id_hash"] = digest } });
Find the customer whose tax id (hashed in the table) is known
taxId := g.Req.Body().String("taxId")
digest, err := g.Sys.System.Hash(taxId)
if err != nil {
    return nil, err
}
suppliers, err := g.Sys.Db.Query(am.Query{Instance: "mongodb", Database: "shop", Collection: "suppliers", Find: am.M{"tax_id_hash": digest}})
if err != nil {
    return nil, err
}
Find the customer whose tax id (hashed in the table) is known
let tax_id = g.req.body()["taxId"].clone();
let digest = g.sys.system.hash(tax_id)?;
let suppliers = g.sys.db.query(Query::new("mongodb", "shop", "suppliers").find(json!({ "tax_id_hash": digest })))?;
Find the customer whose tax id (hashed in the table) is known
String taxId = g.req.getBody().getString("taxId");
String digest = g.sys.system.hash(taxId);
List<JsonObject> suppliers = g.sys.db.query(new Query("mongodb", "shop", "suppliers").find(Map.of("tax_id_hash", digest)));
Find the customer whose tax id (hashed in the table) is known
val taxId = g.req.body.getString("taxId")
val digest = g.sys.system.hash(taxId)
val suppliers = g.sys.db.query(Query("mongodb", "shop", "suppliers").find(mapOf("tax_id_hash" to digest)))
  • Keep an encrypted copy of the value in another field when you also need to read it back : encryption is reversible, hashing is not.

Access, headers and errors

  • Over HTTP, a system API answers only once its settings open it : TOKEN_ACCESS (the token of an API user whose group grants this system API) or IS_PUBLIC. Without settings it is NO_ACCESS : only your code (g.sys) and the admin panel reach it.
  • The settings can also keep the answer in the cache, or ask for the token of a person (authProviders). Pre and post hooks run around it, as around any API.
  • It takes the request headers and answers the envelope. 401 : no valid token, or the API is NO_ACCESS. 403 : no group grants it. 400 : the body is wrong, and the message names the key.

Related : All APIs · System API settings · System APIs from code