active_record_api-rest 1.0.10 → 1.0.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5725a7eed108dec0d342fede5c8c2009f4eb34fd00f66ee5bc320ac72d8bd596
-  data.tar.gz: 72f6903479ce6fc8b2a7f37d583cdb55f9ac039aea541ff76e312d2a755fd024
+  metadata.gz: 4ab132ecc0b2f3ccd7c4c151674e9c2623450c674fb88aee69e4277f9510a7ba
+  data.tar.gz: d2e16fa7cb20a80c1104f2f71f576a0791e585d52e8f227d54eb3d79472d0417
 SHA512:
-  metadata.gz: 80fda6094d96f54182dc0f137296d7f9400b553aca15e7c408267ec85b91acce507b67b062eccc5603159c9628f63b7790c8b54db6a28a933eb0b8a398ba7c7b
-  data.tar.gz: 0b41e08348262252dfa058d03aafeed3fb5e83c454e1ea0751058b022599b78b8634cd00ac293b9706332830206f91105bd17cd458f1224ca19ef2bb5429b065
+  metadata.gz: 6bbd71ac2d4987ac9c54a3eb840d71b536959c1f47aa1116124a4f805477e1c4f0300548ab28714ba1f14338156dcaf202662d18bf4cf62aa046b66f66db5798
+  data.tar.gz: c22e0faaae9fea5191fdf34449368fe8533ca85de1fe7111bb6aa6b8c419ae5bb6782cfaa357bfd186fbf6bc163134154524249886b8bd0e65e192e03ab4dac0

data/lib/active_record_api/rest/controller.rb

@@ -24,7 +24,7 @@ module ActiveRecordApi
       end
 
       def update
-        if model.update(resource_params)
+        if model.update(filtered_params)
           redirect_to_model
         else
           render json: model.errors, status: :unprocessable_entity
@@ -39,7 +39,11 @@ module ActiveRecordApi
       protected
 
       def redirect_to_model
-        redirect_to "#{protocol}://#{request.host_with_port}#{request.path}/#{model.id}", status: :see_other
+        if request.path.include?(model.id)
+          redirect_to "#{protocol}#{request.host_with_port}#{request.path}", status: :see_other
+        else
+          redirect_to "#{protocol}#{request.host_with_port}#{request.path}/#{model.id}", status: :see_other
+        end
       end
 
       def protocol
@@ -52,14 +56,8 @@ module ActiveRecordApi
         render json: { base: "Extra parameters are not allow: #{not_allowed_params.join(', ')}" }, status: :unprocessable_entity
       end
 
-      def resource_params
-        @resource_params ||= filtered_params.reject do |column_name|
-          column_name.to_s == 'id'
-        end
-      end
-
       def not_allowed_params
-        @not_allowed_params ||= ((params.keys.map(&:to_sym) - [:controller, :action, :id, controller_name.singularize.to_sym]) - resource_params.keys.map(&:to_sym))
+        @not_allowed_params ||= ((params.keys.map(&:to_sym) - [:controller, :action, :id, :created_at, :updated_at, controller_name.singularize.to_sym]) - filtered_params.keys.map(&:to_sym))
       end
 
       def load_model
@@ -80,7 +78,7 @@ module ActiveRecordApi
       end
 
       def filtered_params
-        @filtered_params ||= params.permit(allowed_params).to_h
+        @simple_params = params.permit!.to_h.select! { |key, _value| allowed_params.include?(key.to_sym) }
       end
 
       def allowed_params
@@ -92,7 +90,7 @@ module ActiveRecordApi
           else
             col
           end
-        end
+        end - %i[created_at updated_at id]
       end
 
       def column_definition(column_name)

data/lib/active_record_api/rest/version.rb

@@ -2,6 +2,6 @@
 
 module ActiveRecordApi
   module Rest
-    VERSION = '1.0.10'.freeze
+    VERSION = '1.0.11'.freeze
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: active_record_api-rest
 version: !ruby/object:Gem::Version
-  version: 1.0.10
+  version: 1.0.11
 platform: ruby
 authors:
 - Full Measure Education
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-04-09 00:00:00.000000000 Z
+date: 2019-04-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler