mORMot Open Source

Hi AB.

I don't have problem with TBCD itself. Framework works correctly. My problem is in swagger.

I try my best not to waste your valuable time as much as possible. But in cases where I cannot solve the problem in any other way, I am forced to raise it here.

Wait. I made a mistake in my code.
After editing, it started working very quickly (less than a second).

My mistake was that I loaded the data in the restserver.create method, but I had set smOff and lmExclusive after the create method.

Thanks

I understand what you mean. I can create users (or groups) and add them to the ORM:

var bb := TAuthUser.Create;
bb.PasswordPlain := '2';
bb.IDValue := 10;
bb.LogonName := 'admin1';
bb.GroupRights := TAuthGroup(1);
Self.Server.Add(bb, True);

Let me explain my real problem.
I have an existing database that my customers use. Passwords are hashed with my own method and stored in the database. I don't know what the passwords are because they are hashed and saved in my existing users table in my MySQL database.

How can I use my own hashing method to verify that a user's password is correct?

I created a custom exception class containing error codes and messages for handling business errors. However, one limitation I'm facing is that I cannot access URI parameters in this scenario.

there is no Uri. but there are Url = roort\CustomerService\Delete

Ctxt.Call^.InBody is unterminated json. {"cust_code"

error reurned from mysql server

Cannot delete or update a parent row: a foreign key constraint fails (`passak_utf`.`scm_sorder_cust_item`, CONSTRAINT `scm_sorder_cust_item_fk1` FOREIGN KEY (`sale_order`, `sorder_line_no`) REFERENCES `scm_sorder_det` (`sale_order`, `line_no`) ON UPDATE CASCADE)

I find why:
in prevoius version mORMotClient.json was:

{
    "swagger": "2.0",
    "info": {
        "description": "Generated by PassakRestServer.exe  (2025-10-28 18:42:15) using mORMot 2.3.10853 at 2025-10-29 11:46:42",
        "title": "root API",
        "version": ""
    },
    "host": "localhost:8282",
    "basePath": "/root",
...

in new version :
"basePath": "/",

I don't know why this happen.

Thakns.
Let me find where can I activate full debug mode for fastmm4.

I know that
select CAST(code AS CHAR(10)) code,descr from table
solve the problem. but why there is difference between two functions?

hahahaha. it was easy!

thank you

I installed latest release and problem solved with ZeodLib 8.0.0 with mysql.

I watched many videos on YouTube about authentication implementation with C#.
These videos showed an authentication service that allows Swagger users to obtain a JWT token and then click the Authorize button to import it as 'Bearer + JWT'.
I also created a similar service that is accessible in the Swagger section, which completely solved the problem.

Thank you and AB for your help.

First of all, I put the Swagger.json.mustache file in a "templates" folder next to my REST server executable.
I don't remember where I found the Swagger.json.mustache file and copied it there.

Then, I added this line to my REST server startup procedure:

AddToServerWrapperMethod(MyRestServer,['templates','templates']);

After this step, the URL "http://localhost:8282/root/wrapper/" shows some links and information for me, including the mORMotClient.json file.

I shared my template file here:
https://gist.github.com/a-nouri/6bf970a … dac0a15c8a

Finally, I found out how to add the Authorize button to my Swagger template.
I added this to the Swagger.json.mustache file, something like this:

    "securityDefinitions": {
        "JWTAuth": {
            "type": "apiKey",
            "name": "Authorization",
            "in": "header",
            "description": "Enter your JWT token here. Example: Bearer eyJhbGciOiJIUzI1NiIs..."
        }
    },
    "security": [
        {
            "JWTAuth": []
        }
    ],

Then, I get the JWT token in the Delphi REST debugger or Postman and put it in the Authorization field as:
Bearer eyJhbGciOiJIUzI1...

The difficulty here is that it requires getting the JWT from the REST debugger and pasting it in. I can't find a way to supply the username and password directly on the Swagger page to get the JWT and automate this process.
By the way, this is a big step forward for me.
I learned how to create HTML for displaying Swagger:

  html := '''
    <!DOCTYPE html>
    <html lang="en">
    <head>
      <meta charset="utf-8" />
      <meta name="viewport" content="width=device-width, initial-scale=1" />
      <meta name="description" content="SwaggerUI" />
      <title>SwaggerUI</title>
      <link rel="stylesheet" href="https://unpkg.com/swagger-ui-dist@5.11.0/swagger-ui.css" />
    </head>
    <body>
    <div id="swagger-ui"></div>
    <script src="https://unpkg.com/swagger-ui-dist@5.11.0/swagger-ui-bundle.js" crossorigin></script>
    <script>
      window.onload = () => {
        window.ui = SwaggerUIBundle({
          url: '../wrapper/Swagger/mORMotClient.json',
          dom_id: '#swagger-ui',
        });
      };
    </script>
    </body>
    </html>
  ''';

I find the problem.
with sicShared it is ok.
sicPerSession produce wrong result.

My question is, what do we need this json model for?
{"result":{"Result":[{"cust_code":"0001",type":"domestic"}}}}
What is the need for two result statements in json? Maybe I don't know the reason for this.

AB

your gist link is not public.

I am using method 2. but I don't undrestand "don't publish the tables as REST"