import os
from uliweb import manage
from uliweb.manage import make_simple_application
from json import loads as json_loads
from nose import with_setup

def setup():
    os.chdir('demo')

    manage.call('uliweb syncdb -v')
    manage.call('uliweb reset -v -y')
    manage.call('uliweb dbinit -v')

def pre_call_as(username):
    from uliweb import models
    User = models.user
    user = User.get(User.c.username==username)
    def pre_call(request):
        request.user = user
    return pre_call

def test_apijson_get():
    """
    >>> application = make_simple_application(project_dir='.')
    >>> handler = application.handler()

    >>> #bad json
    >>> data ='''{
    ... ,,,
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': 'not json data in the request'}

    >>> #query self user
    >>> data ='''{
    ... "user":{
    ...         "@role":"OWNER"
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'user': {'username': 'admin', 'nickname': 'Administrator', 'email': 'admin@localhost', 'is_superuser': True, 'last_login': None, 'date_join': '2018-01-01 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 1}}

    >>> #query with id
    >>> data ='''{
    ... "user":{
    ...         "@role":"ADMIN",
    ...         "id": 2
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'user': {'username': 'usera', 'nickname': 'User A', 'email': 'usera@localhost', 'is_superuser': False, 'last_login': None, 'date_join': '2018-02-02 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 2}}

    >>> #query with @column
    >>> data ='''{
    ... "user":{
    ...         "@role":"OWNER",
    ...         "@column": "id,username,email,nickname,is_superuser"
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'user': {'username': 'admin', 'nickname': 'Administrator', 'email': 'admin@localhost', 'is_superuser': True, 'id': 1}}

    >>> #query with @column which have a non existing column name
    >>> data ='''{
    ... "user":{
    ...         "@role":"OWNER",
    ...         "@column": "id,username,email,nickname,is_superuser,nonexisting"
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'user': {'username': 'admin', 'nickname': 'Administrator', 'email': 'admin@localhost', 'is_superuser': True, 'id': 1}}

    >>> #query with a non existing column property
    >>> data ='''{
    ... "user":{
    ...         "nonexisting": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'user' have no attribute 'nonexisting'"}

    >>> #query one with a non existing model
    >>> data ='''{
    ... "nonexist":{
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "model 'nonexist' not found"}

    >>> #query one with a non expose model
    >>> data ='''{
    ... "role":{
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'role' not accessible"}

    >>> #query one with UNKNOWN role (expected ok)
    >>> data ='''{
    ... "moment":{
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}}

    >>> #query one with UNKNOWN role (expected fail)
    >>> data ='''{
    ... "privacy":{
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'privacy' not accessible by role 'UNKNOWN'"}

    >>> #query one without user but use a non-UNKNOWN role
    >>> data ='''{
    ... "publicnotice":{
    ...         "@role":"OWNER",
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "no login user for role 'OWNER'"}

    >>> #query one with OWNER but cannot filter with OWNER
    >>> data ='''{
    ... "publicnotice":{
    ...         "@role":"OWNER",
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'publicnotice' cannot filter with owner"}

    >>> #query one with OWNER which will use owner_condition() to filter
    >>> data ='''{
    ... "moment":{
    ...         "@role":"OWNER"
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    Moment: owner_condition
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}}

    >>> #query one with UNKNOWN
    >>> data ='''{
    ... "publicnotice":{
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'publicnotice': {'date': '2018-12-09 00:00:00', 'content': 'notice: a', 'id': 1}}

    >>> #query array with a non expose model
    >>> data ='''{
    ... "[]":{
    ...         "role": {"@role":"ADMIN"}
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'role' not accessible by apijson"}

    >>> #query array with a non existing model
    >>> data ='''{
    ... "[]":{
    ...         "nonexisting": {"@role":"ADMIN"}
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "model 'nonexisting' not found"}

    >>> #query array with a non existing role
    >>> data ='''{
    ... "[]":{
    ...         "user": {"@role":"NONEXISTING"}
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'user' not accessible by role 'NONEXISTING'"}

    >>> #query array with a role user don't have
    >>> data ='''{
    ... "[]":{
    ...         "user": {"@role":"ADMIN"}
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "user doesn't have role 'ADMIN'"}

    >>> #query array with no permission
    >>> data ='''{
    ... "[]":{
    ...         "user": {"@role":"superuser"}
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'user' not accessible by role 'superuser'"}

    >>> #query array
    >>> data ='''{
    ... "[]":{
    ...         "user": {"@role":"ADMIN"}
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'admin', 'nickname': 'Administrator', 'email': 'admin@localhost', 'is_superuser': True, 'last_login': None, 'date_join': '2018-01-01 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 1}}, {'user': {'username': 'usera', 'nickname': 'User A', 'email': 'usera@localhost', 'is_superuser': False, 'last_login': None, 'date_join': '2018-02-02 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 2}}, {'user': {'username': 'userb', 'nickname': 'User B', 'email': 'userb@localhost', 'is_superuser': False, 'last_login': None, 'date_join': '2018-03-03 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 3}}, {'user': {'username': 'userc', 'nickname': 'User C', 'email': 'userc@localhost', 'is_superuser': False, 'last_login': None, 'date_join': '2018-04-04 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 4}}]}

    >>> #query array
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@role":"ADMIN",
    ...             "@column":"id,username,nickname,email"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'admin', 'nickname': 'Administrator', 'email': 'admin@localhost', 'id': 1}}, {'user': {'username': 'usera', 'nickname': 'User A', 'email': 'usera@localhost', 'id': 2}}, {'user': {'username': 'userb', 'nickname': 'User B', 'email': 'userb@localhost', 'id': 3}}, {'user': {'username': 'userc', 'nickname': 'User C', 'email': 'userc@localhost', 'id': 4}}]}

    >>> #query array with non existing role
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@role":"NONEXISTING",
    ...             "@column":"id,username,nickname,email"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'user' not accessible by role 'NONEXISTING'"}

    >>> #query array with UNKNOWN
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@column":"id,username,nickname,email"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'user' not accessible by role 'UNKNOWN'"}

    >>> #query array without login user
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@role":"ADMIN",
    ...             "@column":"id,username,nickname,email"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "no login user for role 'ADMIN'"}

    >>> #query array with a role which the user doesn't really have
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@role":"ADMIN",
    ...             "@column":"id,username,nickname,email"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "user doesn't have role 'ADMIN'"}

    >>> #query array with @count
    >>> data ='''{
    ... "[]":{
    ...         "@count":3,
    ...         "user": {
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'admin', 'nickname': 'Administrator', 'email': 'admin@localhost', 'is_superuser': True, 'last_login': None, 'date_join': '2018-01-01 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 1}}, {'user': {'username': 'usera', 'nickname': 'User A', 'email': 'usera@localhost', 'is_superuser': False, 'last_login': None, 'date_join': '2018-02-02 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 2}}, {'user': {'username': 'userb', 'nickname': 'User B', 'email': 'userb@localhost', 'is_superuser': False, 'last_login': None, 'date_join': '2018-03-03 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 3}}]}

    >>> #query array ,@count is bad param
    >>> data ='''{
    ... "[]":{
    ...         "@count":"bad",
    ...         "user": {
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "@count should be an int, but get 'bad'"}

    >>> #query array with @count and @page
    >>> data ='''{
    ... "[]":{
    ...         "@count":2,
    ...         "@page":1,
    ...         "user": {
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'userb', 'nickname': 'User B', 'email': 'userb@localhost', 'is_superuser': False, 'last_login': None, 'date_join': '2018-03-03 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 3}}, {'user': {'username': 'userc', 'nickname': 'User C', 'email': 'userc@localhost', 'is_superuser': False, 'last_login': None, 'date_join': '2018-04-04 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 4}}]}

    >>> #query array with @count and @page, @page bad param
    >>> data ='''{
    ... "[]":{
    ...         "@count":2,
    ...         "@page":"bad",
    ...         "user": {
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "@page should be an int, but get 'bad'"}

    >>> #query array with @count and @page, @page <0
    >>> data ='''{
    ... "[]":{
    ...         "@count":2,
    ...         "@page":-2,
    ...         "user": {
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "page should >0, but get '-2'"}

    >>> #query array with @count/@page/@query, @query bad param
    >>> data ='''{
    ... "[]":{
    ...         "@count":2,
    ...         "@page":1,
    ...         "@query":3,
    ...         "user": {
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "bad param 'query': 3"}

    >>> #query array with @count/@page/@query, @query = 0
    >>> data ='''{
    ... "[]":{
    ...         "@count":2,
    ...         "@page":1,
    ...         "@query":0,
    ...         "user": {
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'userb', 'nickname': 'User B', 'email': 'userb@localhost', 'is_superuser': False, 'last_login': None, 'date_join': '2018-03-03 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 3}}, {'user': {'username': 'userc', 'nickname': 'User C', 'email': 'userc@localhost', 'is_superuser': False, 'last_login': None, 'date_join': '2018-04-04 00:00:00', 'image': '', 'active': False, 'locked': False, 'deleted': False, 'auth_type': 'default', 'timezone': '', 'id': 4}}]}

    >>> #query array with OWNER but cannot filter with OWNER
    >>> data ='''{
    ...    "[]":{
    ...         "publicnotice": {
    ...             "@role":"OWNER"
    ...         }
    ...    }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'publicnotice' cannot filter with owner"}

    >>> #query array with OWNER
    >>> data ='''{
    ...    "[]":{
    ...         "comment": {
    ...             "@role":"OWNER"
    ...         }
    ...    }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'comment': {'user_id': 1, 'to_id': 3, 'moment_id': 1, 'date': '2018-11-01 00:00:00', 'content': 'comment from admin', 'id': 1}}]}

    >>> #query array with OWNER, the model using owner_condition
    >>> data ='''{
    ...    "[]":{
    ...         "moment": {
    ...             "@role":"OWNER"
    ...         }
    ...    }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    Moment: owner_condition
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}}]}

    >>> #query array with some filter column
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "username":"admin"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'admin', 'nickname': 'Administrator', 'email': 'admin@localhost', 'id': 1}}]}

    >>> #query array with reference, @query = 1
    >>> data ='''{
    ...     "[]":{
    ...         "@count":2,
    ...         "@page":0,
    ...         "@query":1,
    ...         "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN"
    ...         }
    ...     },
    ...     "total@":"/[]/total"
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'total': 4}

    >>> #query array with reference, @query = 2
    >>> data ='''{
    ...     "[]":{
    ...         "@count":2,
    ...         "@page":0,
    ...         "@query":2,
    ...         "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN"
    ...         }
    ...     },
    ...     "total@":"/[]/total"
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'userc', 'nickname': 'User C', 'email': 'userc@localhost', 'id': 4}}, {'user': {'username': 'userb', 'nickname': 'User B', 'email': 'userb@localhost', 'id': 3}}], 'total': 4}

    >>> #query array with @order +
    >>> data ='''{
    ...     "[]":{
    ...         "@count":2,
    ...         "@page":0,
    ...         "@query":2,
    ...         "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id+",
    ...             "@role":"ADMIN"
    ...         }
    ...     },
    ...     "total@":"/[]/total"
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'admin', 'nickname': 'Administrator', 'email': 'admin@localhost', 'id': 1}}, {'user': {'username': 'usera', 'nickname': 'User A', 'email': 'usera@localhost', 'id': 2}}], 'total': 4}

    >>> #query array with @order having a non existing column
    >>> data ='''{
    ...     "[]":{
    ...         "@count":2,
    ...         "@page":0,
    ...         "@query":2,
    ...         "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"nonexist+",
    ...             "@role":"ADMIN"
    ...         }
    ...     },
    ...     "total@":"/[]/total"
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'user' doesn't have column 'nonexist'"}

    >>> #query array with @expr
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "@expr":["username$","|","nickname$"],
    ...             "username$":"%b%",
    ...             "nickname$":"%c%"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'userc', 'nickname': 'User C', 'email': 'userc@localhost', 'id': 4}}, {'user': {'username': 'userb', 'nickname': 'User B', 'email': 'userb@localhost', 'id': 3}}]}

    >>> #query array with @expr, bad param which is not list
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "@expr":{},
    ...             "username$":"%b%",
    ...             "nickname$":"%c%"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "only accept array in @expr, but get 'OrderedDict()'"}

    >>> #query array with @expr, bad param which is an empty list
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "@expr":[],
    ...             "username$":"%b%",
    ...             "nickname$":"%c%"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "only accept 2 or 3 items in @expr, but get '[]'"}

    >>> #query array with @expr, bad param which is >3 items list
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "@expr":["username$","|","username$","|","nickname$"],
    ...             "username$":"%b%",
    ...             "nickname$":"%c%"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "only accept 2 or 3 items in @expr, but get '['username$', '|', 'username$', '|', 'nickname$']'"}

    >>> #query array with @expr, bad param which have bad operator
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "@expr":["username$","*","nickname$"],
    ...             "username$":"%b%",
    ...             "nickname$":"%c%"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "unknown operator: '*'"}

    >>> #query array with @expr, bad expr: & only 1 parameter
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "@expr":["&","nickname$"],
    ...             "username$":"%b%",
    ...             "nickname$":"%c%"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'&'(and) expression need 3 items, but get '['&', 'nickname$']'"}

    >>> #query array with @expr, bad expr: | only 1 parameter
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "@expr":["|","nickname$"],
    ...             "username$":"%b%",
    ...             "nickname$":"%c%"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'|'(or) expression need 3 items, but get '['|', 'nickname$']'"}

    >>> #query array with @expr, bad expr: | only 1 parameter
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "@expr":["username$","!","nickname$"],
    ...             "username$":"%b%",
    ...             "nickname$":"%c%"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'!'(not) expression need 2 items, but get '['username$', '!', 'nickname$']'"}

    >>> #query array with like
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "username$":"%b%"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'userb', 'nickname': 'User B', 'email': 'userb@localhost', 'id': 3}}]}

    >>> #query array with like, but gave a nonexist column
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "nonexist$":"%b%"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "model does not have column: 'nonexist'"}

    >>> #query array with a nonexist column
    >>> data ='''{
    ...   "[]":{
    ...     "@count":4,
    ...     "@page":0,
    ...     "user":{
    ...             "@column":"id,username,nickname,email",
    ...             "@order":"id-",
    ...             "@role":"ADMIN",
    ...             "nonexist":1
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "non-existent column or not support item: 'nonexist'"}

    >>> #query array, {} with list
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "id{}": [1, 2]
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}}, {'moment': {'user_id': 3, 'date': '2018-11-02 00:00:00', 'content': 'test moment from b', 'picture_list': '[]', 'id': 2}}]}

    >>> #query array, !{} with list
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "id!{}": [1, 2]
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 4, 'date': '2018-11-06 00:00:00', 'content': 'test moment from c', 'picture_list': '[]', 'id': 3}}]}

    >>> #query array, {} with a non-exist column name
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "nonexist{}": [1, 2]
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "model does not have column: 'nonexist'"}

    >>> #query array, {} >=
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "id{}": ">=2"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 3, 'date': '2018-11-02 00:00:00', 'content': 'test moment from b', 'picture_list': '[]', 'id': 2}}, {'moment': {'user_id': 4, 'date': '2018-11-06 00:00:00', 'content': 'test moment from c', 'picture_list': '[]', 'id': 3}}]}

    >>> #query array, {} =
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "id{}": "=2"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 3, 'date': '2018-11-02 00:00:00', 'content': 'test moment from b', 'picture_list': '[]', 'id': 2}}]}

    >>> #query array, {} >
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "id{}": ">2"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 4, 'date': '2018-11-06 00:00:00', 'content': 'test moment from c', 'picture_list': '[]', 'id': 3}}]}

    >>> #query array, {} <=
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "id{}": "<=2"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}}, {'moment': {'user_id': 3, 'date': '2018-11-02 00:00:00', 'content': 'test moment from b', 'picture_list': '[]', 'id': 2}}]}

    >>> #query array, {} <
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "id{}": "<2"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}}]}

    >>> #query array, {} <= with datetime
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "date{}": "<='2018-11-02 00:00'"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}}, {'moment': {'user_id': 3, 'date': '2018-11-02 00:00:00', 'content': 'test moment from b', 'picture_list': '[]', 'id': 2}}]}

    >>> #query array, {} >= with datetime
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "date{}": ">='2018-11-02 00:00'"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 3, 'date': '2018-11-02 00:00:00', 'content': 'test moment from b', 'picture_list': '[]', 'id': 2}}, {'moment': {'user_id': 4, 'date': '2018-11-06 00:00:00', 'content': 'test moment from c', 'picture_list': '[]', 'id': 3}}]}

    >>> #query array, {} >= with a invalid datetime
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "date{}": ">='2018-11-42 00:00'"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "''2018-11-42 00:00'' cannot convert to datetime"}

    >>> #query array, !{} <
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "id!{}": "<2"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 3, 'date': '2018-11-02 00:00:00', 'content': 'test moment from b', 'picture_list': '[]', 'id': 2}}, {'moment': {'user_id': 4, 'date': '2018-11-06 00:00:00', 'content': 'test moment from c', 'picture_list': '[]', 'id': 3}}]}

    >>> #query array, {} !=
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "id{}": "!=2"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}}, {'moment': {'user_id': 4, 'date': '2018-11-06 00:00:00', 'content': 'test moment from c', 'picture_list': '[]', 'id': 3}}]}

    >>> #query array, {} with wrong operator
    >>> data ='''{
    ... "[]":{
    ...         "moment": {
    ...             "id{}": "%=2"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "not support '%=2'"}

    >>> #query array, {} condition list
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@role": "ADMIN",
    ...             "id{}": "<=2,>3",
    ...             "@column": "username,nickname,id"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'admin', 'nickname': 'Administrator', 'id': 1}}, {'user': {'username': 'usera', 'nickname': 'User A', 'id': 2}}, {'user': {'username': 'userc', 'nickname': 'User C', 'id': 4}}]}

    >>> #query array, |{} condition list
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@role": "ADMIN",
    ...             "id|{}": "<=2,>3",
    ...             "@column": "username,nickname,id"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'admin', 'nickname': 'Administrator', 'id': 1}}, {'user': {'username': 'usera', 'nickname': 'User A', 'id': 2}}, {'user': {'username': 'userc', 'nickname': 'User C', 'id': 4}}]}

    >>> #query array, &{} condition list
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@role": "ADMIN",
    ...             "id&{}": ">2,<=4",
    ...             "@column": "username,nickname,id"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'userb', 'nickname': 'User B', 'id': 3}}, {'user': {'username': 'userc', 'nickname': 'User C', 'id': 4}}]}

    >>> #query array, &{} condition list
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@role": "ADMIN",
    ...             "date_join&{}": ">='2018-1-1 00:00',<='2018-2-2 00:00'",
    ...             "@column": "username,nickname,id,date_join"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'admin', 'nickname': 'Administrator', 'date_join': '2018-01-01 00:00:00', 'id': 1}}, {'user': {'username': 'usera', 'nickname': 'User A', 'date_join': '2018-02-02 00:00:00', 'id': 2}}]}

    >>> #query array, {} multiple condition to a same field
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@role": "ADMIN",
    ...             "id&{}": ">2,<=4",
    ...             "id{}": "!=3",
    ...             "@column": "username,nickname,id"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'userc', 'nickname': 'User C', 'id': 4}}]}

    >>> #query array, !{} condition list
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@role": "ADMIN",
    ...             "id!{}": ">2,<=4",
    ...             "@column": "username,nickname,id"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'!' not supported in condition list"}

    >>> #query array, |{} condition list, item more than 2
    >>> data ='''{
    ... "[]":{
    ...         "user": {
    ...             "@role": "ADMIN",
    ...             "id|{}": "=1,=2,>=4",
    ...             "@column": "username,id"
    ...         }
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'user': {'username': 'admin', 'id': 1}}, {'user': {'username': 'usera', 'id': 2}}, {'user': {'username': 'userc', 'id': 4}}]}

    >>> #Association query: Two tables, one to one,ref path is absolute path
    >>> data ='''{
    ...     "moment":{},
    ...     "user":{
    ...     "@column": "id,username,email",
    ...     "id@": "moment/user_id"
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}, 'user': {'username': 'usera', 'email': 'usera@localhost', 'id': 2}}

    >>> #Association query: Two tables, one is array, one is single, there is a abs reference to array
    >>> data ='''{
    ...     "moment[]":{"moment":{"@count":3}},
    ...     "user":{
    ...     "@column": "id,username,email",
    ...     "id@": "moment[]/1/moment/user_id"
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment[]': [{'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}}, {'moment': {'user_id': 3, 'date': '2018-11-02 00:00:00', 'content': 'test moment from b', 'picture_list': '[]', 'id': 2}}, {'moment': {'user_id': 4, 'date': '2018-11-06 00:00:00', 'content': 'test moment from c', 'picture_list': '[]', 'id': 3}}], 'user': {'username': 'userb', 'email': 'userb@localhost', 'id': 3}}

    >>> #Association query: Two tables, one is array, one is single, there is a rel reference to array
    >>> data ='''{
    ...     "moment[]":{"moment":{"@count":3}},
    ...     "user":{
    ...     "@column": "id,username,email",
    ...     "id@": "/moment[]/1/moment/user_id"
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment[]': [{'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}}, {'moment': {'user_id': 3, 'date': '2018-11-02 00:00:00', 'content': 'test moment from b', 'picture_list': '[]', 'id': 2}}, {'moment': {'user_id': 4, 'date': '2018-11-06 00:00:00', 'content': 'test moment from c', 'picture_list': '[]', 'id': 3}}], 'user': {'username': 'userb', 'email': 'userb@localhost', 'id': 3}}

    >>> #Association query: Two tables, one to one,ref path is relative path
    >>> data ='''{
    ...     "moment":{},
    ...     "user":{
    ...     "@column": "id,username,email",
    ...     "id@": "/moment/user_id"
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'test moment', 'picture_list': '[]', 'id': 1}, 'user': {'username': 'usera', 'email': 'usera@localhost', 'id': 2}}
    """

def test_apijson_head():
    """
    >>> application = make_simple_application(project_dir='.')
    >>> handler = application.handler()

    >>> #apijson head
    >>> data ='''{
    ...     "moment": {
    ...         "user_id": 2
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/head', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'code': 200, 'msg': 'success', 'count': 1}}

    >>> #apijson head, with a nonexistant model
    >>> data ='''{
    ...     "nonexist": {
    ...         "user_id": 2
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/head', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "model 'nonexist' not found"}

    >>> #apijson head, without permission of HEAD
    >>> data ='''{
    ...     "privacy": {
    ...         "@role":"LOGIN",
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/head', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "role 'LOGIN' not have permission HEAD for 'privacy'"}

    >>> #apijson head, without user
    >>> data ='''{
    ...     "privacy": {
    ...         "@role":"ADMIN",
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/head', data=data, middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "user doesn't have role 'ADMIN'"}

    >>> #apijson head, without user and @role
    >>> data ='''{
    ...     "privacy": {
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/head', data=data, middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "role 'UNKNOWN' not have permission HEAD for 'privacy'"}

    >>> #apijson head, user don't have role
    >>> data ='''{
    ...     "privacy": {
    ...         "@role":"ADMIN",
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/head', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "user doesn't have role 'ADMIN'"}

    >>> #apijson head, with OWNER
    >>> data ='''{
    ...     "moment": {
    ...         "@role":"OWNER"
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/head', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    Moment: owner_condition
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'code': 200, 'msg': 'success', 'count': 1}}

    >>> #apijson head, with OWNER but cannot filter with OWNER
    >>> data ='''{
    ...     "publicnotice": {
    ...         "@role":"OWNER"
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/head', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'publicnotice' cannot filter with owner"}

    >>> #apijson head, with a nonexistant column
    >>> data ='''{
    ...     "moment": {
    ...         "nonexist": 2
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/head', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'moment' don't have field 'nonexist'"}
    """

def test_apijson_post():
    """
    >>> application = make_simple_application(project_dir='.')
    >>> handler = application.handler()

    >>> #apijson post, without @tag
    >>> data ='''{
    ...     "moment": {
    ...         "content": "new moment for test",
    ...         "picture_list": ["http://static.oschina.net/uploads/user/48/96331_50.jpg"]
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/post', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'tag' parameter is needed"}

    >>> #apijson post
    >>> data ='''{
    ...     "moment": {
    ...         "content": "new moment for test",
    ...         "picture_list": ["http://static.oschina.net/uploads/user/48/96331_50.jpg"]
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/post', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'id': 4, 'count': 1, 'code': 200, 'message': 'success'}}

    >>> #apijson post to a non exist model
    >>> data ='''{
    ...     "nonexist": {
    ...         "content": "new moment for test",
    ...         "picture_list": ["http://static.oschina.net/uploads/user/48/96331_50.jpg"]
    ...     },
    ...     "@tag": "nonexist"
    ... }'''
    >>> r = handler.post('/apijson/post', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "model 'nonexist' not found"}

    >>> #apijson post, tag is model which not define in APIJSON_REQUESTS
    >>> data ='''{
    ...     "moment": {
    ...         "content": "new moment for test",
    ...         "picture_list": ["http://static.oschina.net/uploads/user/48/96331_50.jpg"]
    ...     },
    ...     "@tag": "role"
    ... }'''
    >>> r = handler.post('/apijson/post', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "tag 'role' not found"}

    >>> #apijson post, tag is model which not define in APIJSON_REQUESTS
    >>> data ='''{
    ...     "user": {
    ...         "username": "test"
    ...     },
    ...     "@tag": "user"
    ... }'''
    >>> r = handler.post('/apijson/post', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "tag 'user' not found"}
    """

def test_apijson_put():
    """
    >>> application = make_simple_application(project_dir='.')
    >>> handler = application.handler()

    >>> #apijson put
    >>> data ='''{
    ...     "moment": {
    ...         "id": 1,
    ...         "content": "moment content after change"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'id': 1, 'code': 200, 'msg': 'success', 'count': 1}}

    >>> #apijson put, with @role
    >>> data ='''{
    ...     "moment": {
    ...         "@role": "ADMIN",
    ...         "id": 1,
    ...         "content": "moment content after change 2"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'id': 1, 'code': 200, 'msg': 'success', 'count': 1}}

    >>> #apijson put, model not exists
    >>> data ='''{
    ...     "nonexist": {
    ...         "@role": "ADMIN",
    ...         "id": 1,
    ...         "content": "moment content after change 2"
    ...     },
    ...     "@tag": "nonexist"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "model 'nonexist' not found"}

    >>> #apijson put, with a model no tag
    >>> data ='''{
    ...     "norequesttag": {
    ...         "user_id": 1,
    ...         "content": "test"
    ...     },
    ...     "@tag": "norequesttag"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "tag 'norequesttag' not found"}

    >>> #apijson put, test ADD in put
    >>> data ='''{
    ...     "moment": {
    ...         "id": 2,
    ...         "content": "moment content after change"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': 'no permission'}

    >>> #apijson put, without id
    >>> data ='''{
    ...     "moment": {
    ...         "content": "moment content after change"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': 'id param needed'}

    >>> #apijson put, with id not integer
    >>> data ='''{
    ...     "moment": {
    ...         "id": "abc",
    ...         "content": "moment content after change"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "id 'abc' cannot convert to integer"}

    >>> #apijson put, with a id cannot find record
    >>> data ='''{
    ...     "moment": {
    ...         "id": 100,
    ...         "content": "moment content after change"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "cannot find record which id = '100'"}

    >>> #apijson put, with a role which have no permission
    >>> data ='''{
    ...     "moment": {
    ...         "@role": "LOGIN",
    ...         "id": 1,
    ...         "content": "moment content after change"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'moment' not accessible by role 'LOGIN'"}

    >>> #apijson put, with UNKNOWN role
    >>> data ='''{
    ...     "publicnotice": {
    ...         "@role": "UNKNOWN",
    ...         "id": 1,
    ...         "content": "content after change"
    ...     },
    ...     "@tag": "publicnotice"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'publicnotice': {'id': 1, 'code': 200, 'msg': 'success', 'count': 1}}

    >>> #apijson put, OWNER but not login
    >>> data ='''{
    ...     "moment": {
    ...         "id": 1,
    ...         "content": "moment content after change"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'OWNER' need login user"}

    >>> #apijson put, with a role not permission
    >>> data ='''{
    ...     "moment": {
    ...         "@role": "superuser",
    ...         "id": 1,
    ...         "content": "moment content after change"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'moment' not accessible by role 'superuser'"}

    >>> #apijson put, with a field DISALLOWed
    >>> data ='''{
    ...     "comment": {
    ...         "id": 2,
    ...         "user_id": 2,
    ...         "content": "content after change"
    ...     },
    ...     "@tag": "comment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "request 'comment' disallow 'user_id'"}


    >>> #apijson put, without a field in NECESSARY
    >>> data ='''{
    ...     "moment": {
    ...         "id": 1
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "request 'moment' have not necessary field 'content'"}

    >>> #apijson put, with a non exist field
    >>> data ='''{
    ...     "moment": {
    ...         "id": 1,
    ...         "content": "moment content after change",
    ...         "noexist": "test"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'moment' don't have field 'noexist'"}

    >>> #apijson put, and check get result
    >>> data ='''{
    ...     "moment": {
    ...         "id": 1,
    ...         "content": "check 789"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'id': 1, 'code': 200, 'msg': 'success', 'count': 1}}
    >>> data ='''{
    ... "moment":{
    ...         "id": %s
    ...     }
    ... }'''%(d['moment']['id'])
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'user_id': 2, 'date': '2018-11-01 00:00:00', 'content': 'check 789', 'picture_list': '[]', 'id': 1}}

    >>> #apijson put, and check get result
    >>> data ='''{
    ...     "moment": {
    ...         "id": 1,
    ...         "content": "check 789"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/put', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': 'failed when updating, maybe no change', 'moment': {'id': 1, 'code': 400, 'msg': 'failed when updating, maybe no change', 'count': 0}}
    """

def test_apijson_delete():
    """
    >>> application = make_simple_application(project_dir='.')
    >>> handler = application.handler()

    >>> #apijson delete
    >>> data ='''{
    ...     "moment": {
    ...         "id": 1
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/delete', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': {'id': 1, 'code': 200, 'message': 'success', 'count': 1}}
    >>> data ='''{
    ...     "moment": {
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'moment': None}

    >>> #apijson delete, without @tag
    >>> data ='''{
    ...     "moment": {
    ...         "content": "new moment for test"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/post', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> data ='''{
    ...     "moment": {
    ...         "id": %s
    ...     }
    ... }'''%(d["moment"]["id"])
    >>> r = handler.post('/apijson/delete', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "'tag' parameter is needed"}

    >>> #apijson delete, with non exist model
    >>> data ='''{
    ...     "nonexist": {
    ...         "id": 1
    ...     },
    ...     "@tag": "nonexist"
    ... }'''
    >>> r = handler.post('/apijson/delete', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "model 'nonexist' not found"}

    >>> #apijson delete, try to delete other's moment
    >>> data ='''{
    ...     "moment": {
    ...         "id": 2
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/delete', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': 'no role to access the data'}

    >>> #apijson delete, without id
    >>> data ='''{
    ...     "moment": {
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/delete', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': 'id param needed'}

    >>> #apijson delete, id not int
    >>> data ='''{
    ...     "moment": {
    ...         "id": "abc"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/delete', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "id 'abc' cannot convert to integer"}

    >>> #apijson delete
    >>> data ='''{
    ...     "moment": {
    ...         "id": 100
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/delete', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "cannot find record id = '100'"}

    >>> #apijson delete, with a role having no permission
    >>> data ='''{
    ...     "moment": {
    ...         "content": "new moment for test"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/post', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> data ='''{
    ...     "moment": {
    ...         "@role": "UNKNOWN",
    ...         "id": %s
    ...     },
    ...     "@tag": "moment"
    ... }'''%(d["moment"]["id"])
    >>> r = handler.post('/apijson/delete', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "role 'UNKNOWN' has no permission to access the data"}

    >>> #apijson delete, with OWNER but not login
    >>> data ='''{
    ...     "moment": {
    ...         "content": "new moment for test"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/post', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> data ='''{
    ...     "moment": {
    ...         "id": %s
    ...     },
    ...     "@tag": "moment"
    ... }'''%(d["moment"]["id"])
    >>> r = handler.post('/apijson/delete', data=data, middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': 'no role to access the data'}

    >>> #apijson delete, with UNKNOWN role
    >>> data ='''{
    ...     "publicnotice": {
    ...         "@role": "UNKNOWN",
    ...         "id": 1
    ...     },
    ...     "@tag": "publicnotice"
    ... }'''
    >>> r = handler.post('/apijson/delete', data=data, middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'publicnotice': {'id': 1, 'code': 200, 'message': 'success', 'count': 1}}

    >>> #apijson delete, with a role which have no permission
    >>> data ='''{
    ...     "moment": {
    ...         "content": "new moment for test"
    ...     },
    ...     "@tag": "moment"
    ... }'''
    >>> r = handler.post('/apijson/post', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> data ='''{
    ...     "moment": {
    ...         "@role": "superuser",
    ...         "id": %s
    ...     },
    ...     "@tag": "moment"
    ... }'''%(d["moment"]["id"])
    >>> r = handler.post('/apijson/delete', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': "role 'superuser' has no permission to access the data"}
    """

def test_apijson_permission():
    """
    >>> application = make_simple_application(project_dir='.')
    >>> handler = application.handler()

    >>> #apijson get, query with id, access with owner
    >>> data ='''{
    ... "comment2":{
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'comment2': {'user_id': 1, 'to_id': 3, 'moment_id': 1, 'date': '2018-11-01 00:00:00', 'content': 'comment from admin', 'id': 1}}

    >>> #apijson get, query with id, access other's comment, expect empty result
    >>> data ='''{
    ... "comment2":{
    ...         "id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("userb"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'comment2': None}

    >>> #apijson get, query array
    >>> data ='''{
    ... "comment2":{
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("usera"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'comment2': {'user_id': 2, 'to_id': 3, 'moment_id': 1, 'date': '2018-12-01 00:00:00', 'content': 'comment from usera to userb', 'id': 2}}

    >>> #apijson get, query one with admin as OWNER
    >>> data ='''{
    ... "comment2":{
    ...        "@role":"OWNER"
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'comment2': {'user_id': 1, 'to_id': 3, 'moment_id': 1, 'date': '2018-11-01 00:00:00', 'content': 'comment from admin', 'id': 1}}

    >>> #apijson get, query one with admin as ADMIN
    >>> data ='''{
    ... "comment2":{
    ...        "@role":"ADMIN",
    ...        "user_id": 2
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'comment2': {'user_id': 2, 'to_id': 3, 'moment_id': 1, 'date': '2018-12-01 00:00:00', 'content': 'comment from usera to userb', 'id': 2}}

    >>> #apijson get, query array
    >>> data ='''{
    ... "[]":{
    ...         "comment2": {"@role":"ADMIN"}
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/get', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', '[]': [{'comment2': {'user_id': 1, 'to_id': 3, 'moment_id': 1, 'date': '2018-11-01 00:00:00', 'content': 'comment from admin', 'id': 1}}, {'comment2': {'user_id': 2, 'to_id': 3, 'moment_id': 1, 'date': '2018-12-01 00:00:00', 'content': 'comment from usera to userb', 'id': 2}}, {'comment2': {'user_id': 3, 'to_id': 2, 'moment_id': 2, 'date': '2018-12-02 00:00:00', 'content': 'comment from userb to usera', 'id': 3}}, {'comment2': {'user_id': 4, 'to_id': 2, 'moment_id': 3, 'date': '2018-12-09 00:00:00', 'content': 'comment from userc to usera', 'id': 4}}]}

    >>> #apijson head
    >>> data ='''{
    ...     "comment2": {
    ...         "user_id": 1
    ...     }
    ... }'''
    >>> r = handler.post('/apijson/head', data=data, pre_call=pre_call_as("userc"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'comment2': {'code': 200, 'msg': 'success', 'count': 0}}

    >>> #apijson delete with a user which have no permission
    >>> data ='''{
    ...     "comment2": {
    ...         "id": 1
    ...     },
    ...     "@tag": "comment2"
    ... }'''
    >>> r = handler.post('/apijson/delete', data=data, pre_call=pre_call_as("userc"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 400, 'msg': 'no permission'}

    >>> #apijson delete with permission, ADMIN
    >>> data ='''{
    ...     "comment2": {
    ...         "id": 1
    ...     },
    ...     "@tag": "comment2"
    ... }'''
    >>> r = handler.post('/apijson/delete', data=data, pre_call=pre_call_as("admin"), middlewares=[])
    >>> d = json_loads(r.data)
    >>> print(d)
    {'code': 200, 'msg': 'success', 'comment2': {'id': 1, 'code': 200, 'message': 'success', 'count': 1}}
    """