apress-api 1.22.0

data/app/jobs/apress/api/event_handler_enqueueing_job.rb

@@ -0,0 +1,19 @@
+module Apress
+  module Api
+    class EventHandlerEnqueueingJob
+      include Resque::Integration
+
+      queue :api_callbacks
+
+      def self.perform(handler, event_params)
+        job = handler.camelize.constantize
+
+        if job.respond_to?(:enqueue)
+          job.enqueue(event_params)
+        else
+          Resque.enqueue(job, event_params)
+        end
+      end
+    end
+  end
+end

data/app/jobs/apress/api/fire_callback_job.rb

@@ -0,0 +1,25 @@
+module Apress
+  module Api
+    class FireCallbackJob
+      include Resque::Integration
+      extend Resque::Plugins::ExponentialBackoff
+
+      queue :api_callbacks
+
+      @retry_exceptions = {
+        Apress::Api::Callbacks::FireCallbackError => [1, 60, 300, 3600],
+        Apress::Api::Callbacks::RepeatCallbackError => 300
+      }
+      @ignore_exceptions = [Apress::Api::Callbacks::RepeatCallbackError]
+
+      def self.perform(service, event, params)
+        callback_class = "#{service}_client/fire_callback".camelize.constantize
+
+        callback_class.call!(
+          event: event,
+          params: params
+        )
+      end
+    end
+  end
+end

data/app/models/apress/api/client.rb

@@ -0,0 +1,60 @@
+module Apress
+  module Api
+    class Client < ActiveRecord::Base
+      self.table_name = "api_clients"
+
+      validates :access_id, presence: true
+      validates :secret_token, presence: true
+      validates :secret_token_expire_at, presence: true
+      validates :refresh_token, presence: true
+      validates :refresh_token_expire_at, presence: true
+
+      before_validation :generate_access_id, on: :create
+      before_validation :regenerate_tokens, on: :create
+
+      def regenerate_tokens
+        generate_secret_token
+        set_secret_token_expiration
+        generate_refresh_token
+        set_refresh_token_expiration
+      end
+
+      def regenerate_tokens!
+        regenerate_tokens
+        save!
+      end
+
+      def refresh_token_expired?
+        refresh_token_expire_at < Time.now.utc
+      end
+
+      def secret_token_expired?
+        secret_token_expire_at < Time.now.utc
+      end
+
+      private
+
+      def generate_access_id
+        self.access_id = SecureRandom.uuid
+      end
+
+      def generate_secret_token
+        self.secret_token = ::ApiAuth.generate_secret_key
+      end
+
+      def set_secret_token_expiration
+        self.secret_token_expire_at = Rails.application.config.api[:secret_token_ttl].from_now
+      end
+
+      def generate_refresh_token
+        self.refresh_token = ::ApiAuth.generate_secret_key
+      end
+
+      def set_refresh_token_expiration
+        self.refresh_token_expire_at = Rails.application.config.api[:refresh_token_ttl].from_now
+      end
+
+      ActiveSupport.run_load_hooks(:"apress/api/client", self)
+    end
+  end
+end

data/app/policies/apress/api/callback_policy.rb

@@ -0,0 +1,15 @@
+module Apress
+  module Api
+    class CallbackPolicy
+      attr_reader :client
+
+      def initialize(client, _callback)
+        @client = client
+      end
+
+      def create?
+        Apress::Api::Callbacks::Config.allowed_client?(client)
+      end
+    end
+  end
+end

data/app/services/apress/api/auth_service.rb

@@ -0,0 +1,37 @@
+module Apress
+  module Api
+    class AuthService
+      rattr_initialize :request
+
+      attr_reader :client
+
+      delegate :query_parameters, to: :request
+
+      # Find Client by access_id, check sercret_key
+      #
+      # Returns boolean
+      def call
+        return false unless access_id
+
+        @client = Apress::Api::Client.find_by_access_id(access_id)
+        return false unless client
+
+        return false if client.secret_token_expired?
+
+        return true if not_check_signature?
+        ::ApiAuth.authentic?(request, client.secret_token)
+      end
+
+      def access_id
+        @access_id ||= ApiAuth.access_id(request) || query_parameters[:access_id]
+      end
+
+      private
+
+      def not_check_signature?
+        check_signature = query_parameters[:check_signature]
+        check_signature.present? && check_signature.to_i.zero? && (Rails.env.staging? || !Rails.env.production?)
+      end
+    end
+  end
+end

data/app/views/apress/api/shared/_exception.json.jbuilder

@@ -0,0 +1,4 @@
+json.error do
+  json.message exception.message
+  json.backtrace exception.backtrace
+end

data/app/views/apress/api/shared/error.json.jbuilder

@@ -0,0 +1,5 @@
+json.status @status
+
+if @exception && show_errors?
+  json.partial! partial: "apress/api/shared/exception", locals: {exception: @exception}
+end

data/app/views/apress/api/shared/parameter_missing_errors.json.jbuilder

@@ -0,0 +1,9 @@
+json.status @status
+
+json.errors do
+  json.array! @errors do |error|
+    error.each do |k, v|
+      json.set! k, v
+    end
+  end
+end

data/app/views/apress/api/shared/unprocessable_errors.json.jbuilder

@@ -0,0 +1,9 @@
+json.status @status
+
+json.errors do
+  json.array! @errors do |error|
+    error.each do |k, v|
+      json.set! k, v
+    end
+  end
+end

data/app/views/apress/api/v1/clients/_client.json.jbuilder

@@ -0,0 +1,2 @@
+json.(client, :id, :access_id, :secret_token_expire_at, :refresh_token_expire_at, :user_agent,
+              :updated_at, :created_at)

data/app/views/apress/api/v1/tokens/create.json.jbuilder

@@ -0,0 +1,4 @@
+json.client do
+  json.partial! partial: "apress/api/v1/clients/client", locals: {client: @client}
+  json.(@client, :secret_token, :refresh_token)
+end

data/apress-api.gemspec

@@ -0,0 +1,46 @@
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'apress/api/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = "apress-api"
+  spec.version       = Apress::Api::VERSION
+  spec.authors       = ["merkushin"]
+  spec.email         = ["merkushin.m.s@gmail.com"]
+  spec.summary       = "Apress-Api"
+  spec.homepage      = "https://github.com/abak-press/apress-api"
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files -z`.split("\x0")
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ["lib"]
+
+  spec.add_runtime_dependency "rails", ">= 3.1.0", "< 6.0.0"
+  spec.add_runtime_dependency 'pg'
+  spec.add_runtime_dependency "api-auth", ">= 1.3.1"
+  spec.add_runtime_dependency "oj", ">= 2.9.9"
+  spec.add_runtime_dependency "multi_json", ">= 1.11.2"
+  spec.add_runtime_dependency "jbuilder", ">= 2.3.1"
+  spec.add_runtime_dependency "attr_extras", ">= 4.4.0"
+  spec.add_runtime_dependency 'swagger-core', '>= 0.3.0'
+  spec.add_runtime_dependency 'interactor'
+  spec.add_runtime_dependency 'pundit'
+
+  spec.add_runtime_dependency 'resque-integration'
+  spec.add_runtime_dependency 'apress-documentation', '>= 0.2.0'
+
+  spec.add_development_dependency "bundler", "~> 1.7"
+  spec.add_development_dependency "rake", "~> 10.0"
+  spec.add_development_dependency "rspec", ">= 3.2"
+  spec.add_development_dependency "rspec-rails", ">= 3.2"
+  spec.add_development_dependency "combustion", ">= 0.5.4"
+  spec.add_development_dependency "appraisal"
+  spec.add_development_dependency "timecop"
+  spec.add_development_dependency "simplecov", ">= 0.9"
+  spec.add_development_dependency "factory_girl_rails", ">= 4.5"
+  spec.add_development_dependency "json-schema"
+  spec.add_development_dependency "test-unit"
+  spec.add_development_dependency "mock_redis"
+  spec.add_development_dependency 'pry-byebug'
+end

data/config/routes.rb

@@ -0,0 +1,17 @@
+Rails.application.routes.draw do
+  current_api_routes = lambda do
+    resources :clients, only: [] do
+      resources :tokens, only: [:create]
+    end
+
+    post 'callbacks/:service' => 'callbacks#create'
+  end
+
+  scope module: "apress", constraints: {domain: :current} do
+    namespace :api do
+      scope module: :v1, &current_api_routes
+      namespace :v1, &current_api_routes
+      resource :deprecated_version, only: :show
+    end
+  end
+end

data/db/migrate/20150716000000_create_api_clients.rb

@@ -0,0 +1,38 @@
+if Rails::VERSION::MAJOR > 4
+  MIGRATION_CLASS = ActiveRecord::Migration[4.2]
+else
+  MIGRATION_CLASS = ActiveRecord::Migration
+end
+
+class CreateApiClients < MIGRATION_CLASS
+  def up
+    create_table :api_clients do |t|
+      t.string :access_id, null: false, limit: 36
+      t.string :secret_token, null: false
+      t.datetime :secret_token_expire_at, null: false
+      t.string :refresh_token, null: false
+      t.datetime :refresh_token_expire_at, null: false
+      t.string :user_agent
+      t.timestamps null: false
+    end
+
+    execute <<-SQL
+      COMMENT ON TABLE api_clients IS 'Пользователи API';
+      COMMENT ON COLUMN api_clients.access_id IS 'Уникальный ID пользователя';
+      COMMENT ON COLUMN api_clients.secret_token IS 'Секретный ключ для подписи запроса';
+      COMMENT ON COLUMN api_clients.secret_token_expire_at IS 'Время протухания';
+      COMMENT ON COLUMN api_clients.refresh_token IS 'Ключ для получения нового секретного ключа';
+      COMMENT ON COLUMN api_clients.refresh_token_expire_at IS 'Время протухания';
+      COMMENT ON COLUMN api_clients.user_agent IS 'User-Agent пользователя';
+
+      ALTER TABLE api_clients
+        ADD CONSTRAINT uniq_api_clients_on_access_id
+        UNIQUE(access_id)
+        DEFERRABLE INITIALLY DEFERRED;
+    SQL
+  end
+
+  def down
+    drop_table :api_clients
+  end
+end

data/dip.yml

@@ -0,0 +1,48 @@
+version: '1'
+
+environment:
+  DOCKER_RUBY_VERSION: 2.2
+  RUBY_IMAGE_TAG: 2.2-latest
+  POSTGRES_IMAGE_TAG: 9.6-0.7.0
+  COMPOSE_FILE_EXT: development
+  RAILS_ENV: test
+  APRESS_GEMS_CREDENTIALS: ""
+
+compose:
+  files:
+    - docker-compose.yml
+    - docker-compose.${COMPOSE_FILE_EXT}.yml
+
+interaction:
+  sh:
+    service: app
+
+  irb:
+    service: app
+    command: irb
+
+  bundle:
+    service: app
+    command: bundle
+
+  rake:
+    service: app
+    command: bundle exec rake
+
+  appraisal:
+    service: app
+    command: bundle exec appraisal
+
+  rspec:
+    service: app
+    command: bundle exec appraisal bundle exec rspec
+
+  clean:
+    service: app
+    command: rm -f Gemfile.lock gemfiles/*.gemfile.*
+
+provision:
+  - docker volume create --name bundler_data
+  - dip clean
+  - dip bundle install
+  - dip appraisal install

data/docker-compose.development.yml

@@ -0,0 +1,18 @@
+version: '2'
+
+services:
+  app:
+    volumes:
+      - .:/app
+      - ../:/localgems
+      - ssh-data:/ssh:ro
+      - bundler-data:/bundle
+
+volumes:
+  bundler-data:
+    external:
+      name: bundler_data
+
+  ssh-data:
+    external:
+      name: ssh_data

data/docker-compose.drone.yml

@@ -0,0 +1,7 @@
+version: '2'
+
+services:
+  app:
+    volumes:
+      - .:/app
+      - /bundle:/bundle

data/docker-compose.yml

@@ -0,0 +1,20 @@
+version: '2'
+
+services:
+  app:
+    image: abakpress/ruby-app:$RUBY_IMAGE_TAG
+    environment:
+      - SSH_AUTH_SOCK=/ssh/auth/sock
+      - BUNDLE_PATH=/bundle/$DOCKER_RUBY_VERSION
+      - BUNDLE_CONFIG=/app/.bundle/config
+      - TEST_DB_HOST=db
+      - TEST_DB_NAME=docker
+      - TEST_DB_USERNAME=postgres
+    command: bash
+    depends_on:
+      - db
+
+  db:
+    image: abakpress/postgres-db:$POSTGRES_IMAGE_TAG
+    environment:
+      - POSTGRES_DB=docker

data/lib/apress-api.rb

@@ -0,0 +1 @@
+require 'apress/api'

data/lib/apress/api.rb

@@ -0,0 +1,25 @@
+require 'rails'
+require "active_support"
+require "active_support/lazy_load_patch" if ActiveSupport::VERSION::MAJOR == 3 && ActiveSupport::VERSION::MINOR == 1
+require "multi_json"
+require "jbuilder"
+require "api_auth"
+require "attr_extras"
+require "addressable"
+require 'interactor'
+require 'pundit'
+require 'swagger/blocks'
+require 'resque/integration'
+require 'apress/documentation'
+require "apress/api/version"
+require "apress/api/engine"
+
+module Apress
+  module Api
+    module Swagger
+      def self.const_missing(name)
+        ::Apress::Documentation::Swagger.const_get(name)
+      end
+    end
+  end
+end