authorized_transaction 0.1.1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f8b9da68dd1a43d4d19dcc4807d59f74491103ae83c4c873e446ab04b3831df8
-  data.tar.gz: 0ff63e29f5e467493f9c9adc8f0ad0a325b53fcf3dfa8ce7450375736ab09cf2
+  metadata.gz: 2a61369cc8e832baee931ff87c611c90147efc38a9db24cc75a779e97cc47c92
+  data.tar.gz: ce349d060ebb6eb9b239699d293c08340e7f71519d944830b85d1f88da7c3f53
 SHA512:
-  metadata.gz: aef44d1aebf710cca279f523732c366b1a343a1bdf6fbcc366752af723ba51ea84b152a186729c05f8f09799bc18923309f233e12d1455bcfee8491c5ff67365
-  data.tar.gz: b6438ea5d977df7a4af99a03663bd3929944e0f74bb26efe93e46c11ff3f7254d7aa2c22bea8a8552b83d59c20ba991bfe103eb1b1243af8d6b4cd68bc9067ec
+  metadata.gz: f7d30b70db64e01ebfa4c5c62603bcbddba90a8ccbd0bfe9af2350b23b103bf11647530fa6e4d530cb166f23d8d45f1a8151e012f6c2a89faf825b4bbfd20dfd
+  data.tar.gz: 741ec7d1d10449d903c0f9ffea37fad0e6eeb48762e357c549adffbd82f2a9e3b86f29bbfa9e81a9b1e410517702a1f2f246af86b2ffc91b03522acadca9fee8

data/CHANGELOG.md

@@ -0,0 +1,9 @@
+# Changelog
+
+## 0.2.0
+
+- Add configuration via `ResourceAllowHeader.configure`
+
+## 0.1.0
+
+:baby: Initial version

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    authorized_transaction (0.1.1)
+    authorized_transaction (0.2.0)
       activerecord (>= 4.0.0)
       activesupport (>= 4.0.0)
 

data/README.md

@@ -1,6 +1,6 @@
 # AuthorizedTransaction
 
-[![Build Status: master](https://travis-ci.com/XPBytes/authorized_transaction.svg)](https://travis-ci.com/XPBytes/authorized_transaction) 
+[![Build Status: master](https://travis-ci.com/XPBytes/authorized_transaction.svg)](https://travis-ci.com/XPBytes/authorized_transaction)
 [![Gem Version](https://badge.fury.io/rb/authorized_transaction.svg)](https://badge.fury.io/rb/authorized_transaction)
 [![MIT license](http://img.shields.io/badge/license-MIT-brightgreen.svg)](http://opensource.org/licenses/MIT)
 
@@ -29,6 +29,10 @@ Wrap whatever you want to be authorized in an `authorized_transaction` block:
 ```ruby
 require 'authorized_transaction'
 
+class ApiController < ActionController::API
+  include AuthorizedTransaction
+end
+
 class BookController < ApiController
   def create
     book = authorized_transaction { CreateAndReturnBook.call(params) }
@@ -54,7 +58,7 @@ Authorization work on single resources, or enumerables:
 ```ruby
 class Book::SignatureController < ApiController
   def show
-    _, signature = authorized_transaction do 
+    _, signature = authorized_transaction do
         [FindBook.call(params), FindSignature.call(params)]
     end
     render json: signature, status: :created
@@ -62,6 +66,17 @@ class Book::SignatureController < ApiController
 end
 ```
 
+### Configuration
+
+In an initializer you can set procs in order to change the default behaviour:
+
+```ruby
+AuthorizedTransaction.configure do |this|
+  this.implicit_action_proc = proc { |controller| controller.action_name.to_sym }
+  this.authorize_proc = proc { |action, resource, controller| action == :whatever || controller.can?(action, resource) }
+end
+```
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake test` to run the tests. You can

data/lib/authorized_transaction.rb

@@ -2,11 +2,18 @@ require "authorized_transaction/version"
 
 require 'active_record'
 require 'active_support/concern'
+require 'active_support/core_ext/module/attribute_accessors'
 
 module AuthorizedTransaction
   extend ActiveSupport::Concern
   class Error < StandardError; end
 
+  mattr_accessor :authorize_proc, :implicit_action_proc, :implicit_action_key
+
+  def self.configure
+    yield self
+  end
+
   class TransactionUnauthorized < RuntimeError
     attr_reader :action, :resource
 
@@ -21,10 +28,6 @@ module AuthorizedTransaction
     attr_writer :action, :resource
   end
 
-  def implicit_action
-    params[:action]
-  end
-
   included do
     ##
     # Wraps a block in a transaction after which the authorization check runs, using the controller action as default
@@ -55,9 +58,27 @@ module AuthorizedTransaction
 
     def authorize!(action, resource)
       Array(resource).each do |r|
-        next if can?(action, r)
+        next if authorized?(action, r)
         raise TransactionUnauthorized.new(action, r)
       end
     end
   end
+
+  private
+
+  def implicit_action
+    if implicit_action_proc.respond_to?(:call)
+      return implicit_action_proc(self)
+    end
+
+    params[implicit_action_key || :action]
+  end
+
+  def authorized?(action, resource)
+    if authorize_proc.respond_to?(:call)
+      return authorize_proc(action, resource, self)
+    end
+
+    can?(action, resource)
+  end
 end

data/lib/authorized_transaction/version.rb

@@ -1,3 +1,3 @@
 module AuthorizedTransaction
-  VERSION = "0.1.1"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: authorized_transaction
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.0
 platform: ruby
 authors:
 - Derk-Jan Karrenbeld
@@ -95,6 +95,7 @@ files:
 - ".idea/modules.xml"
 - ".idea/vcs.xml"
 - ".travis.yml"
+- CHANGELOG.md
 - CODE_OF_CONDUCT.md
 - Gemfile
 - Gemfile.lock