cuba-api 0.6.2 → 0.6.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 08d01480616570cd7a09d1f5da7a869037be9c2c
-  data.tar.gz: 6ef17555b198ffac42def04e185ad4033706d4aa
+  metadata.gz: 10e2d38b71c73518d8dc210febc45beb6839678e
+  data.tar.gz: 3021c0638361a9ec6891a48a34f0aee6d413eef8
 SHA512:
-  metadata.gz: 5a71e0b5d9b846a001f6d8d74c723bc9eab62033e82ba7f19dbbb0073d6c8fd2ea2967994578679757db2ef76867cf8b2dfb5e57c078a49f5f20b774ec9243cd
-  data.tar.gz: 901b16bf0da46243f5007eae69178d4adb84862a17dd2b92654f56891d3ecd6a860b042e98c993439fad92f276e53f60fd35c87a8314375d5fc163a7038c59c7
+  metadata.gz: c7e2615360b8c22f90d11d9cc24e0108326b6e9e676da31edc713bbdece45c218cf79d82c4a9486c007d80f5af0db2d1dd27e5d02c379dd905173a8ef73578f3
+  data.tar.gz: 6c7676016b48332b795e2640dc899f506c05cd47eff024014ef2bac23ac9cc99ef8e4ff7c41b64aef540bafd97791f18315aa878af7d24f8b1d4f87a63997ecb

data/README.md

@@ -5,7 +5,7 @@ cuba-api
 * [![Dependency Status](https://gemnasium.com/mkristian/cuba-api.png)](https://gemnasium.com/mkristian/cuba-api)
 * [![Code Climate](https://codeclimate.com/github/mkristian/cuba-api.png)](https://codeclimate.com/github/mkristian/cuba-api)
 
-these are just a handful for [cuba](https://github.com/soveran/cuba) to use cuba as API server.
+these are just a handful plugins for [cuba](https://github.com/soveran/cuba) it as API server.
 
 security
 --------

data/lib/cuba_api.rb

@@ -31,6 +31,25 @@ require 'cuba_api/aspects/response_status'
 
 class CubaAPI < Cuba
 
+  class Response < Cuba::Response
+
+    def self.new
+      Thread.current[ :cuba_api_response ] ||= super
+    end
+
+    def initialize( status = 404,
+                    headers = { "Content-Type" => "text/plain; charset=utf-8" } )
+      super
+    end
+
+    def finish
+      Thread.current[ :cuba_api_response ] = nil
+      super
+    end
+  end
+
+  settings[ :res ] = CubaAPI::Response
+
   plugin CubaApi::Config
   plugin CubaApi::Loggers
   plugin CubaApi::Aspects

data/lib/cuba_api/guard.rb

@@ -22,6 +22,10 @@
 
 require 'ixtlan/user_management/guard'
 
+# TODO move to upstream
+class Ixtlan::UserManagement::GuardException < StandardError
+end
+
 # TODO move to upstream
 class Ixtlan::UserManagement::Permission
   attribute :parent, Ixtlan::UserManagement::Permission
@@ -48,7 +52,11 @@ module CubaApi
     end
 
     def current_groups
-      current_user.groups
+      if current_user
+        current_user.groups 
+      else
+        []
+      end
     end
 
     def allowed_associations
@@ -56,12 +64,18 @@ module CubaApi
     end
 
     def on_context( name, &block )
-      guard.check_parent( name, guard_context )
       on name do
         begin
+          guard.check_parent( name, guard_context )
           old = guard_context
           guard_context( name )
           yield( *captures )
+        rescue Ixtlan::UserManagement::GuardException
+          if respond_to?( :authenticated? ) && authenticated?
+            no_body :not_found
+          else
+            no_body :forbidden
+          end
         ensure
           guard_context( old )
         end

data/spec/guard_spec.rb

@@ -81,7 +81,7 @@ describe CubaApi::Guard do
 
   describe 'guarded context with nested context' do
     
-    it 'should raise error' do
+    it 'should response forbidden' do
       env = { 'PATH_INFO' => '/users/accounts',
            'SCRIPT_NAME' => '/users/accounts' }
 
@@ -94,7 +94,8 @@ describe CubaApi::Guard do
       end
 
       env[ 'REQUEST_METHOD' ] = 'GET'
-      lambda{ Cuba.call( env ) }.must_raise RuntimeError
+      status, _, _ = Cuba.call( env )
+      status.must.eq 403
     end
 
     it 'allow all' do
@@ -124,10 +125,9 @@ describe CubaApi::Guard do
 
   describe 'guarded context with association' do
 
-    let( :env ) do
-      { 'PATH_INFO' => '/users/42',
-        'SCRIPT_NAME' => '/users/42',
-      }
+   before do
+     env[ 'PATH_INFO' ] = '/users/42'
+     env[ 'SCRIPT_NAME'] = '/users/42'
     end
 
     it 'denies all requests without associated id' do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cuba-api
 version: !ruby/object:Gem::Version
-  version: 0.6.2
+  version: 0.6.3
 platform: ruby
 authors:
 - Christian Meier
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2013-12-13 00:00:00.000000000 Z
+date: 2014-02-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: cuba