api-regulator 0.1.21 → 0.1.23

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 712a8be4e5ef4c7528a09aa3f7370f2e5f8024ae15954066ac52663a0c4b5958
-  data.tar.gz: '09e89ba29c1a970bdedcc1a266ae045b2435dd6f5fb8f1ad66c84cae3007aae1'
+  metadata.gz: 2954fc88571b8b3d2086405b0b6973f0202debe1284408531b4a079ba9d86c9c
+  data.tar.gz: 0267527b762872e05fe3a84d7145e39958f4616240dc590d3e10f3996650d387
 SHA512:
-  metadata.gz: 340219f8c1b4ee3e5bf6c7fe0889ef32f0056f87615a8b4beea9bca235667f2310bc9d0d510a15982ce78d7b79281449c26bb09dc5839f549fdbb2e7d32fb9cf
-  data.tar.gz: 0d9a361b19a8922cf927a06c66abbf5007e08f790af02c9d30154f9bfa97316e98672fd12d6786374a4660f88b4e8426539b7e1114a2b8d72eced0c9f907e197
+  metadata.gz: '06548a9e1bce09a019c2c0e105e3bf34aeabd737dc5f4f802ae3903c0dc0eaae3dfaf841d75d1624948dfc90f465909d6807764a83d6a70c9b9b4922c2c828a9'
+  data.tar.gz: d6a151ef312d62ab88bddc1875645fac23945ed37b5afc0fecb8494700e1443849f38172c89c94434c3ecacb413391078bdffd9e2177417bd629cc02559e1c9f

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    api-regulator (0.1.21)
+    api-regulator (0.1.23)
       activemodel (~> 8.0)
       activesupport (~> 8.0)
 
@@ -123,10 +123,10 @@ GEM
     net-smtp (0.5.1)
       net-protocol
     nio4r (2.7.4)
-    nokogiri (1.18.2)
+    nokogiri (1.18.3)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
-    nokogiri (1.18.2-arm64-darwin)
+    nokogiri (1.18.3-arm64-darwin)
       racc (~> 1.4)
     pp (0.6.2)
       prettyprint
@@ -199,18 +199,18 @@ GEM
       rspec-support (~> 3.10)
     rspec-support (3.13.2)
     securerandom (0.4.1)
-    stringio (3.1.2)
+    stringio (3.1.5)
     thor (1.3.2)
     timeout (0.4.3)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
-    uri (1.0.2)
+    uri (1.0.3)
     useragent (0.16.11)
     websocket-driver (0.7.7)
       base64
       websocket-extensions (>= 0.1.0)
     websocket-extensions (0.1.5)
-    zeitwerk (2.7.1)
+    zeitwerk (2.7.2)
 
 PLATFORMS
   arm64-darwin-23

data/lib/api_regulator/controller_mixin.rb

@@ -37,12 +37,25 @@ module ApiRegulator
 
       body_params = api_definition.params.select(&:body?)
       permitted_body = body_params.each_with_object({}) do |param, hash|
-        if param.type == :object
+        case param.type
+        when :array
+          allowed_params = [build_permitted_keys(param.children)]
+
+          if param.required?
+            nested = params.expect(param.name => allowed_params).map { |set| set.to_h.symbolize_keys }
+            hash[param.name.to_sym] = nested
+          else
+            nested = params.permit(param.name => allowed_params).map { |set| set.to_h.symbolize_keys }
+            hash.merge!(nested)
+          end
+        when :object
+          allowed_params = build_permitted_keys(param.children)
+
           if param.required?
-            nested = params.expect(param.name => build_permitted_keys(param.children)).to_h.symbolize_keys
+            nested = params.expect(param.name => allowed_params).to_h.symbolize_keys
             hash[param.name.to_sym] = nested
           else
-            nested = params.permit(param.name => build_permitted_keys(param.children)).to_h.symbolize_keys
+            nested = params.permit(param.name => allowed_params).to_h.symbolize_keys
             hash.merge!(nested)
           end
         else

data/lib/api_regulator/validator.rb

@@ -124,6 +124,11 @@ module ApiRegulator
         return
       end
 
+      if max = param.options.dig(:length, :maximum)
+        errors.add(attribute, "must have a max size of #{max}") if raw_value.length > max
+        return
+      end
+
       raw_value.each_with_index do |value, index|
         unless value.is_a?(Hash) || value.is_a?(ActionController::Parameters)
           errors.add("#{attribute}[#{index}]", "must be a hash")
@@ -355,8 +360,9 @@ module ApiRegulator
       allowed_arbitrary_keys = params.flat_map(&:allowed_arbitrary_keys).compact
       extras = []
       actual_keys.each do |key|
-        next if allowed_keys.include?(key.gsub(/\[\d+\]/, "[]"))
-        next if allowed_arbitrary_keys.any? { |aribitrary_key| key.starts_with?(aribitrary_key) }
+        deindexed_key = key.gsub(/\[\d+\]/, "[]")
+        next if allowed_keys.include?(deindexed_key)
+        next if allowed_arbitrary_keys.any? { |aribitrary_key| deindexed_key.starts_with?(aribitrary_key) }
         extras << key
       end
       extras

data/lib/api_regulator/version.rb

@@ -1,3 +1,3 @@
 module ApiRegulator
-  VERSION = "0.1.21"
+  VERSION = "0.1.23"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: api-regulator
 version: !ruby/object:Gem::Version
-  version: 0.1.21
+  version: 0.1.23
 platform: ruby
 authors:
 - Geoff Massanek
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-02-14 00:00:00.000000000 Z
+date: 2025-02-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport