apicasso 0.6.0 → 0.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '008a3e92922e32986a11c43d51478f4dd3eb8e44e287abf9027952c6415b00d3'
-  data.tar.gz: 146ae0b052be05e8f9a9dbf5c32563d39469e6887c1343d4c4e8ac70206c0708
+  metadata.gz: 9f97d82fa4adce27dc1554104e77c6b6feef8b18278ff7d0b4976ab50b3d41b5
+  data.tar.gz: dc5780ab2577de9344c1c108101184c38f58ac6a1c85213eae437287f9aadc92
 SHA512:
-  metadata.gz: 93ae0a99e84f211f429d6daa80ba0f8690fb7903c155ad6e769f8cef18e8ee2ae8b52783460af857e464d750822a9d2876d23d75fb88323890a817597a950e08
-  data.tar.gz: 8ff1d500a8daea84d2b6137cc8a7cefcbf5b71097d9263f8c7a1588ac7c1d7f3efbd1a48b43b9f7156611b9510c8c3f615d1c9af4801c492443401c891e6ea8a
+  metadata.gz: b0fe68e61a194f736b710fc8ed39194520f2e8d515937886f085fa4eb4c50ca96d699001d894db8c2e8df039611b18cec7faa3900040c7b99dec61a250890615
+  data.tar.gz: b8a454334bbf8825563d2f1c81aab99d971b1cab0d840a70dc1c99ac59579342eca245e47182f193446979f3a76e0d9d745dabcb3bd67617bb019ba3c8f5cb47

data/app/controllers/apicasso/apidocs_controller.rb

@@ -4,7 +4,7 @@ module Apicasso
   # Controller used to generate an application Swagger JSON, used by
   # SwaggerUI to generate beautiful API documentation
   class ApidocsController < Apicasso::ApplicationController
-    skip_before_action :restrict_access
+    skip_before_action :restrict_access, :klasses_allowed, :set_root_resource
 
     include Swagger::Blocks
     # Default application settings for documentation generation.

data/app/controllers/apicasso/application_controller.rb

@@ -7,9 +7,7 @@ module Apicasso
   class ApplicationController < ActionController::API
     include ActionController::HttpAuthentication::Token::ControllerMethods
     prepend_before_action :restrict_access
-    prepend_before_action :klasses_allowed
     before_action :set_root_resource
-    before_action :bad_request?
     after_action :register_api_request
 
     include SqlSecurity
@@ -162,11 +160,6 @@ module Apicasso
       uri.to_s
     end
 
-    # Check for a bad request to be more secure
-    def klasses_allowed
-      raise ActionController::BadRequest.new('Bad hacker, stop be bully or I will tell to your mom!') unless descendants_included?
-    end
-
     # Check if it's a descendant model allowed
     def descendants_included?
       DESCENDANTS_UNDERSCORED.include?(param_attribute.to_s.underscore)
@@ -188,11 +181,5 @@ module Apicasso
       authorize! opts[:action], opts[:resource] if opts[:resource].present?
       authorize! opts[:action], opts[:object] if opts[:object].present?
     end
-
-    # Check for SQL injection before requests and
-    # raise a exception when find
-    def bad_request?
-      raise ActionController::BadRequest.new('Bad hacker, stop be bully or I will tell to your mom!') unless sql_injection(resource)
-    end
   end
 end

data/app/controllers/apicasso/crud_controller.rb

@@ -3,6 +3,8 @@
 module Apicasso
   # Controller to consume read-only data to be used on client's frontend
   class CrudController < Apicasso::ApplicationController
+    prepend_before_action :klasses_allowed
+    before_action :bad_request?
     before_action :set_object, except: %i[index create schema]
     before_action :set_nested_resource, only: %i[nested_index]
     before_action :set_records, only: %i[index]
@@ -224,5 +226,16 @@ module Apicasso
         end
       end.compact
     end
+
+    # Check for SQL injection before requests and
+    # raise a exception when find
+    def bad_request?
+      raise ActionController::BadRequest.new('Bad hacker, stop be bully or I will tell to your mom!') unless sql_injection(resource)
+    end
+
+    # Check for a bad request to be more secure
+    def klasses_allowed
+      raise ActionController::BadRequest.new('Bad hacker, stop be bully or I will tell to your mom!') unless descendants_included?
+    end
   end
 end

data/lib/apicasso/version.rb

@@ -1,3 +1,3 @@
 module Apicasso
-  VERSION = '0.6.0'.freeze
+  VERSION = '0.6.1'.freeze
 end