Function update

src/rest.js:276–324

(config, auth, className, restWhere, restObject, clientSDK, context)

// REST API is supposed to return.
// Usually, this is just updatedAt.
function update(config, auth, className, restWhere, restObject, clientSDK, context) {
  enforceRoleSecurity('update', className, auth, config);

  return Promise.resolve()
    .then(async () => {
      const hasTriggers = checkTriggers(className, config, ['beforeSave', 'afterSave']);
      const hasLiveQuery = checkLiveQuery(className, config);
      if (hasTriggers || hasLiveQuery) {
        // Do not use find, as it runs the before finds
        // Use master auth when protectedFieldsTriggerExempt is true to bypass
        // protectedFields filtering, so triggers see the full original object
        const queryAuth = config.protectedFieldsTriggerExempt ? Auth.master(config) : auth;
        const query = await RestQuery({
          method: RestQuery.Method.get,
          config,
          auth: queryAuth,
          className,
          restWhere,
          runAfterFind: false,
          runBeforeFind: false,
          context,
        });
        return query.execute({
          op: 'update',
        });
      }
      return Promise.resolve({});
    })
    .then(({ results }) => {
      var originalRestObject;
      if (results && results.length) {
        originalRestObject = results[0];
      }
      return new RestWrite(
        config,
        auth,
        className,
        restWhere,
        restObject,
        originalRestObject,
        clientSDK,
        context,
        'update'
      ).execute();
    })
    .catch(error => {
      handleSessionMissingError(error, className, auth, config);
    });
}

function handleSessionMissingError(error, className, auth, config) {
  // If we're trying to update a user without / with bad session token