RubyGems - halorgium-actionpack - Versions diffs - 3.0.pre - Mend

halorgium-actionpack 3.0.pre

Files changed (154) hide show

data/CHANGELOG +5179 -0
data/MIT-LICENSE +21 -0
data/README +409 -0
data/lib/abstract_controller.rb +16 -0
data/lib/abstract_controller/base.rb +158 -0
data/lib/abstract_controller/callbacks.rb +113 -0
data/lib/abstract_controller/exceptions.rb +12 -0
data/lib/abstract_controller/helpers.rb +151 -0
data/lib/abstract_controller/layouts.rb +250 -0
data/lib/abstract_controller/localized_cache.rb +49 -0
data/lib/abstract_controller/logger.rb +61 -0
data/lib/abstract_controller/rendering_controller.rb +188 -0
data/lib/action_controller.rb +72 -0
data/lib/action_controller/base.rb +168 -0
data/lib/action_controller/caching.rb +80 -0
data/lib/action_controller/caching/actions.rb +163 -0
data/lib/action_controller/caching/fragments.rb +116 -0
data/lib/action_controller/caching/pages.rb +154 -0
data/lib/action_controller/caching/sweeping.rb +97 -0
data/lib/action_controller/deprecated.rb +4 -0
data/lib/action_controller/deprecated/integration_test.rb +2 -0
data/lib/action_controller/deprecated/performance_test.rb +1 -0
data/lib/action_controller/dispatch/dispatcher.rb +57 -0
data/lib/action_controller/metal.rb +129 -0
data/lib/action_controller/metal/benchmarking.rb +73 -0
data/lib/action_controller/metal/compatibility.rb +145 -0
data/lib/action_controller/metal/conditional_get.rb +86 -0
data/lib/action_controller/metal/configuration.rb +28 -0
data/lib/action_controller/metal/cookies.rb +105 -0
data/lib/action_controller/metal/exceptions.rb +55 -0
data/lib/action_controller/metal/filter_parameter_logging.rb +77 -0
data/lib/action_controller/metal/flash.rb +162 -0
data/lib/action_controller/metal/head.rb +27 -0
data/lib/action_controller/metal/helpers.rb +115 -0
data/lib/action_controller/metal/hide_actions.rb +47 -0
data/lib/action_controller/metal/http_authentication.rb +312 -0
data/lib/action_controller/metal/layouts.rb +171 -0
data/lib/action_controller/metal/mime_responds.rb +317 -0
data/lib/action_controller/metal/rack_convenience.rb +27 -0
data/lib/action_controller/metal/redirector.rb +22 -0
data/lib/action_controller/metal/render_options.rb +103 -0
data/lib/action_controller/metal/rendering_controller.rb +57 -0
data/lib/action_controller/metal/request_forgery_protection.rb +108 -0
data/lib/action_controller/metal/rescuable.rb +13 -0
data/lib/action_controller/metal/responder.rb +200 -0
data/lib/action_controller/metal/session.rb +15 -0
data/lib/action_controller/metal/session_management.rb +45 -0
data/lib/action_controller/metal/streaming.rb +188 -0
data/lib/action_controller/metal/testing.rb +39 -0
data/lib/action_controller/metal/url_for.rb +41 -0
data/lib/action_controller/metal/verification.rb +130 -0
data/lib/action_controller/middleware.rb +38 -0
data/lib/action_controller/notifications.rb +10 -0
data/lib/action_controller/polymorphic_routes.rb +183 -0
data/lib/action_controller/record_identifier.rb +91 -0
data/lib/action_controller/testing/process.rb +111 -0
data/lib/action_controller/testing/test_case.rb +345 -0
data/lib/action_controller/translation.rb +13 -0
data/lib/action_controller/url_rewriter.rb +204 -0
data/lib/action_controller/vendor/html-scanner.rb +16 -0
data/lib/action_controller/vendor/html-scanner/html/document.rb +68 -0
data/lib/action_controller/vendor/html-scanner/html/node.rb +537 -0
data/lib/action_controller/vendor/html-scanner/html/sanitizer.rb +176 -0
data/lib/action_controller/vendor/html-scanner/html/selector.rb +828 -0
data/lib/action_controller/vendor/html-scanner/html/tokenizer.rb +105 -0
data/lib/action_controller/vendor/html-scanner/html/version.rb +11 -0
data/lib/action_dispatch.rb +70 -0
data/lib/action_dispatch/http/headers.rb +33 -0
data/lib/action_dispatch/http/mime_type.rb +231 -0
data/lib/action_dispatch/http/mime_types.rb +23 -0
data/lib/action_dispatch/http/request.rb +539 -0
data/lib/action_dispatch/http/response.rb +290 -0
data/lib/action_dispatch/http/status_codes.rb +42 -0
data/lib/action_dispatch/http/utils.rb +20 -0
data/lib/action_dispatch/middleware/callbacks.rb +50 -0
data/lib/action_dispatch/middleware/params_parser.rb +79 -0
data/lib/action_dispatch/middleware/rescue.rb +26 -0
data/lib/action_dispatch/middleware/session/abstract_store.rb +208 -0
data/lib/action_dispatch/middleware/session/cookie_store.rb +235 -0
data/lib/action_dispatch/middleware/session/mem_cache_store.rb +47 -0
data/lib/action_dispatch/middleware/show_exceptions.rb +143 -0
data/lib/action_dispatch/middleware/stack.rb +116 -0
data/lib/action_dispatch/middleware/static.rb +44 -0
data/lib/action_dispatch/middleware/string_coercion.rb +29 -0
data/lib/action_dispatch/middleware/templates/rescues/_request_and_response.erb +24 -0
data/lib/action_dispatch/middleware/templates/rescues/_trace.erb +26 -0
data/lib/action_dispatch/middleware/templates/rescues/diagnostics.erb +10 -0
data/lib/action_dispatch/middleware/templates/rescues/layout.erb +29 -0
data/lib/action_dispatch/middleware/templates/rescues/missing_template.erb +2 -0
data/lib/action_dispatch/middleware/templates/rescues/routing_error.erb +10 -0
data/lib/action_dispatch/middleware/templates/rescues/template_error.erb +21 -0
data/lib/action_dispatch/middleware/templates/rescues/unknown_action.erb +2 -0
data/lib/action_dispatch/routing.rb +381 -0
data/lib/action_dispatch/routing/deprecated_mapper.rb +878 -0
data/lib/action_dispatch/routing/mapper.rb +327 -0
data/lib/action_dispatch/routing/route.rb +49 -0
data/lib/action_dispatch/routing/route_set.rb +497 -0
data/lib/action_dispatch/testing/assertions.rb +8 -0
data/lib/action_dispatch/testing/assertions/dom.rb +35 -0
data/lib/action_dispatch/testing/assertions/model.rb +19 -0
data/lib/action_dispatch/testing/assertions/response.rb +145 -0
data/lib/action_dispatch/testing/assertions/routing.rb +144 -0
data/lib/action_dispatch/testing/assertions/selector.rb +639 -0
data/lib/action_dispatch/testing/assertions/tag.rb +123 -0
data/lib/action_dispatch/testing/integration.rb +504 -0
data/lib/action_dispatch/testing/performance_test.rb +15 -0
data/lib/action_dispatch/testing/test_request.rb +83 -0
data/lib/action_dispatch/testing/test_response.rb +131 -0
data/lib/action_pack.rb +24 -0
data/lib/action_pack/version.rb +9 -0
data/lib/action_view.rb +58 -0
data/lib/action_view/base.rb +308 -0
data/lib/action_view/context.rb +44 -0
data/lib/action_view/erb/util.rb +48 -0
data/lib/action_view/helpers.rb +62 -0
data/lib/action_view/helpers/active_model_helper.rb +306 -0
data/lib/action_view/helpers/ajax_helper.rb +68 -0
data/lib/action_view/helpers/asset_tag_helper.rb +830 -0
data/lib/action_view/helpers/atom_feed_helper.rb +198 -0
data/lib/action_view/helpers/cache_helper.rb +39 -0
data/lib/action_view/helpers/capture_helper.rb +168 -0
data/lib/action_view/helpers/date_helper.rb +988 -0
data/lib/action_view/helpers/debug_helper.rb +38 -0
data/lib/action_view/helpers/form_helper.rb +1102 -0
data/lib/action_view/helpers/form_options_helper.rb +600 -0
data/lib/action_view/helpers/form_tag_helper.rb +495 -0
data/lib/action_view/helpers/javascript_helper.rb +208 -0
data/lib/action_view/helpers/number_helper.rb +311 -0
data/lib/action_view/helpers/prototype_helper.rb +1309 -0
data/lib/action_view/helpers/raw_output_helper.rb +9 -0
data/lib/action_view/helpers/record_identification_helper.rb +20 -0
data/lib/action_view/helpers/record_tag_helper.rb +58 -0
data/lib/action_view/helpers/sanitize_helper.rb +259 -0
data/lib/action_view/helpers/scriptaculous_helper.rb +226 -0
data/lib/action_view/helpers/tag_helper.rb +151 -0
data/lib/action_view/helpers/text_helper.rb +594 -0
data/lib/action_view/helpers/translation_helper.rb +39 -0
data/lib/action_view/helpers/url_helper.rb +639 -0
data/lib/action_view/locale/en.yml +117 -0
data/lib/action_view/paths.rb +80 -0
data/lib/action_view/render/partials.rb +342 -0
data/lib/action_view/render/rendering.rb +134 -0
data/lib/action_view/safe_buffer.rb +28 -0
data/lib/action_view/template/error.rb +101 -0
data/lib/action_view/template/handler.rb +36 -0
data/lib/action_view/template/handlers.rb +52 -0
data/lib/action_view/template/handlers/builder.rb +17 -0
data/lib/action_view/template/handlers/erb.rb +53 -0
data/lib/action_view/template/handlers/rjs.rb +18 -0
data/lib/action_view/template/resolver.rb +165 -0
data/lib/action_view/template/template.rb +131 -0
data/lib/action_view/template/text.rb +38 -0
data/lib/action_view/test_case.rb +163 -0
metadata +236 -0

data/lib/action_controller/metal/rack_convenience.rb ADDED Viewed

@@ -0,0 +1,27 @@
+module ActionController
+  module RackConvenience
+    extend ActiveSupport::Concern
+    included do
+      delegate :headers, :status=, :location=, :content_type=,
+               :status, :location, :content_type, :to => "@_response"
+      attr_internal :request
+    end
+    def dispatch(action, env)
+      @_request = ActionDispatch::Request.new(env)
+      @_response = ActionDispatch::Response.new
+      @_response.request = request
+      super
+    end
+    def params
+      @_params ||= @_request.parameters
+    end
+    def response_body=(body)
+      response.body = body if response
+      super
+    end
+  end
+end

data/lib/action_controller/metal/redirector.rb ADDED Viewed

@@ -0,0 +1,22 @@
+module ActionController
+  class RedirectBackError < AbstractController::Error #:nodoc:
+    DEFAULT_MESSAGE = 'No HTTP_REFERER was set in the request to this action, so redirect_to :back could not be called successfully. If this is a test, make sure to specify request.env["HTTP_REFERER"].'
+    def initialize(message = nil)
+      super(message || DEFAULT_MESSAGE)
+    end
+  end
+  module Redirector
+    extend ActiveSupport::Concern
+    include AbstractController::Logger
+    def redirect_to(url, status) #:doc:
+      raise AbstractController::DoubleRenderError if response_body
+      logger.info("Redirected to #{url}") if logger && logger.info?
+      self.status = status
+      self.location = url.gsub(/[\r\n]/, '')
+      self.response_body = "<html><body>You are being <a href=\"#{ERB::Util.h(url)}\">redirected</a>.</body></html>"
+    end
+  end
+end

data/lib/action_controller/metal/render_options.rb ADDED Viewed

@@ -0,0 +1,103 @@
+module ActionController
+  module RenderOptions
+    extend ActiveSupport::Concern
+    included do
+      extlib_inheritable_accessor :_renderers
+      self._renderers = []
+    end
+    module ClassMethods
+      def _write_render_options
+        renderers = _renderers.map do |r|
+          <<-RUBY_EVAL
+            if options.key?(:#{r})
+              _process_options(options)
+              return render_#{r}(options[:#{r}], options)
+            end
+          RUBY_EVAL
+        end
+        class_eval <<-RUBY_EVAL, __FILE__, __LINE__ + 1
+          def _handle_render_options(options)
+            #{renderers.join}
+          end
+        RUBY_EVAL
+      end
+      def _add_render_option(name)
+        _renderers << name
+        _write_render_options
+      end
+    end
+    def render_to_body(options)
+      _handle_render_options(options) || super
+    end
+  end
+  module RenderOption #:nodoc:
+    def self.extended(base)
+      base.extend ActiveSupport::Concern
+      base.send :include, ::ActionController::RenderOptions
+      def base.register_renderer(name)
+        included { _add_render_option(name) }
+      end
+    end
+  end
+  module RenderOptions
+    module Json
+      extend RenderOption
+      register_renderer :json
+      def render_json(json, options)
+        json = ActiveSupport::JSON.encode(json) unless json.respond_to?(:to_str)
+        json = "#{options[:callback]}(#{json})" unless options[:callback].blank?
+        self.content_type ||= Mime::JSON
+        self.response_body = json
+      end
+    end
+    module Js
+      extend RenderOption
+      register_renderer :js
+      def render_js(js, options)
+        self.content_type ||= Mime::JS
+        self.response_body  = js.respond_to?(:to_js) ? js.to_js : js
+      end
+    end
+    module Xml
+      extend RenderOption
+      register_renderer :xml
+      def render_xml(xml, options)
+        self.content_type ||= Mime::XML
+        self.response_body  = xml.respond_to?(:to_xml) ? xml.to_xml : xml
+      end
+    end
+    module RJS
+      extend RenderOption
+      register_renderer :update
+      def render_update(proc, options)
+        generator = ActionView::Helpers::PrototypeHelper::JavaScriptGenerator.new(view_context, &proc)
+        self.content_type = Mime::JS
+        self.response_body = generator.to_s
+      end
+    end
+    module All
+      extend ActiveSupport::Concern
+      include ActionController::RenderOptions::Json
+      include ActionController::RenderOptions::Js
+      include ActionController::RenderOptions::Xml
+      include ActionController::RenderOptions::RJS
+    end
+  end
+end

data/lib/action_controller/metal/rendering_controller.rb ADDED Viewed

@@ -0,0 +1,57 @@
+module ActionController
+  module RenderingController
+    extend ActiveSupport::Concern
+    included do
+      include AbstractController::RenderingController
+      include AbstractController::LocalizedCache
+    end
+    def process_action(*)
+      self.formats = request.formats.map {|x| x.to_sym}
+      super
+    end
+    def render(options)
+      super
+      self.content_type ||= options[:_template].mime_type.to_s
+      response_body
+    end
+    def render_to_body(options)
+      _process_options(options)
+      if options.key?(:partial)
+        options[:partial] = action_name if options[:partial] == true
+        options[:_details] = {:formats => formats}
+      end
+      super
+    end
+    private
+      def _prefix
+        controller_path
+      end
+      def _determine_template(options)
+        if (options.keys & [:partial, :file, :template, :text, :inline]).empty?
+          options[:_template_name] ||= options[:action]
+          options[:_prefix] = _prefix
+        end
+        super
+      end
+      def format_for_text
+        formats.first
+      end
+      def _process_options(options)
+        status, content_type, location = options.values_at(:status, :content_type, :location)
+        self.status = status if status
+        self.content_type = content_type if content_type
+        self.headers["Location"] = url_for(location) if location
+      end
+  end
+end

data/lib/action_controller/metal/request_forgery_protection.rb ADDED Viewed

@@ -0,0 +1,108 @@
+module ActionController #:nodoc:
+  class InvalidAuthenticityToken < ActionControllerError #:nodoc:
+  end
+  module RequestForgeryProtection
+    extend ActiveSupport::Concern
+    include AbstractController::Helpers, Session
+    included do
+      # Sets the token parameter name for RequestForgery. Calling +protect_from_forgery+
+      # sets it to <tt>:authenticity_token</tt> by default.
+      cattr_accessor :request_forgery_protection_token
+      # Controls whether request forgergy protection is turned on or not. Turned off by default only in test mode.
+      class_inheritable_accessor :allow_forgery_protection
+      self.allow_forgery_protection = true
+      helper_method :form_authenticity_token
+      helper_method :protect_against_forgery?
+    end
+    # Protecting controller actions from CSRF attacks by ensuring that all forms are coming from the current
+    # web application, not a forged link from another site, is done by embedding a token based on a random
+    # string stored in the session (which an attacker wouldn't know) in all forms and Ajax requests generated
+    # by Rails and then verifying the authenticity of that token in the controller.  Only HTML/JavaScript
+    # requests are checked, so this will not protect your XML API (presumably you'll have a different
+    # authentication scheme there anyway).  Also, GET requests are not protected as these should be
+    # idempotent anyway.
+    #
+    # This is turned on with the <tt>protect_from_forgery</tt> method, which will check the token and raise an
+    # ActionController::InvalidAuthenticityToken if it doesn't match what was expected. You can customize the
+    # error message in production by editing public/422.html.  A call to this method in ApplicationController is
+    # generated by default in post-Rails 2.0 applications.
+    #
+    # The token parameter is named <tt>authenticity_token</tt> by default. If you are generating an HTML form
+    # manually (without the use of Rails' <tt>form_for</tt>, <tt>form_tag</tt> or other helpers), you have to
+    # include a hidden field named like that and set its value to what is returned by
+    # <tt>form_authenticity_token</tt>.
+    #
+    # Request forgery protection is disabled by default in test environment. If you are upgrading from Rails
+    # 1.x, add this to config/environments/test.rb:
+    #
+    #   # Disable request forgery protection in test environment
+    #   config.action_controller.allow_forgery_protection = false
+    #
+    # == Learn more about CSRF (Cross-Site Request Forgery) attacks
+    #
+    # Here are some resources:
+    # * http://isc.sans.org/diary.html?storyid=1750
+    # * http://en.wikipedia.org/wiki/Cross-site_request_forgery
+    #
+    # Keep in mind, this is NOT a silver-bullet, plug 'n' play, warm security blanket for your rails application.
+    # There are a few guidelines you should follow:
+    #
+    # * Keep your GET requests safe and idempotent.  More reading material:
+    #   * http://www.xml.com/pub/a/2002/04/24/deviant.html
+    #   * http://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html#sec9.1.1
+    #   * Make sure the session cookies that Rails creates are non-persistent.  Check in Firefox and look
+    #     for "Expires: at end of session"
+    #
+    module ClassMethods
+      # Turn on request forgery protection. Bear in mind that only non-GET, HTML/JavaScript requests are checked.
+      #
+      # Example:
+      #
+      #   class FooController < ApplicationController
+      #     protect_from_forgery :except => :index
+      #
+      #     # you can disable csrf protection on controller-by-controller basis:
+      #     skip_before_filter :verify_authenticity_token
+      #   end
+      #
+      # Valid Options:
+      #
+      # * <tt>:only/:except</tt> - Passed to the <tt>before_filter</tt> call.  Set which actions are verified.
+      def protect_from_forgery(options = {})
+        self.request_forgery_protection_token ||= :authenticity_token
+        before_filter :verify_authenticity_token, options
+      end
+    end
+    protected
+      # The actual before_filter that is used.  Modify this to change how you handle unverified requests.
+      def verify_authenticity_token
+        verified_request? || raise(ActionController::InvalidAuthenticityToken)
+      end
+      # Returns true or false if a request is verified.  Checks:
+      #
+      # * is the format restricted?  By default, only HTML requests are checked.
+      # * is it a GET request?  Gets should be safe and idempotent
+      # * Does the form_authenticity_token match the given token value from the params?
+      def verified_request?
+        !protect_against_forgery? || request.forgery_whitelisted? ||
+          form_authenticity_token == params[request_forgery_protection_token]
+      end
+      # Sets the token value for the current session.
+      def form_authenticity_token
+        session[:_csrf_token] ||= ActiveSupport::SecureRandom.base64(32)
+      end
+      def protect_against_forgery?
+        allow_forgery_protection
+      end
+  end
+end

data/lib/action_controller/metal/rescuable.rb ADDED Viewed

@@ -0,0 +1,13 @@
+module ActionController #:nodoc:
+  module Rescue
+    extend ActiveSupport::Concern
+    include ActiveSupport::Rescuable
+    private
+      def process_action(*args)
+        super
+      rescue Exception => exception
+        rescue_with_handler(exception) || raise(exception)
+      end
+  end
+end

data/lib/action_controller/metal/responder.rb ADDED Viewed

@@ -0,0 +1,200 @@
+module ActionController #:nodoc:
+  # Responder is responsible to expose a resource for different mime requests,
+  # usually depending on the HTTP verb. The responder is triggered when
+  # respond_with is called. The simplest case to study is a GET request:
+  #
+  #   class PeopleController < ApplicationController
+  #     respond_to :html, :xml, :json
+  #
+  #     def index
+  #       @people = Person.find(:all)
+  #       respond_with(@people)
+  #     end
+  #   end
+  #
+  # When a request comes, for example with format :xml, three steps happen:
+  #
+  #   1) respond_with searches for a template at people/index.xml;
+  #
+  #   2) if the template is not available, it will create a responder, passing
+  #      the controller and the resource and invoke :to_xml on it;
+  #
+  #   3) if the responder does not respond_to :to_xml, call to_format on it.
+  #
+  # === Builtin HTTP verb semantics
+  #
+  # Rails default responder holds semantics for each HTTP verb. Depending on the
+  # content type, verb and the resource status, it will behave differently.
+  #
+  # Using Rails default responder, a POST request for creating an object could
+  # be written as:
+  #
+  #   def create
+  #     @user = User.new(params[:user])
+  #     flash[:notice] = 'User was successfully created.' if @user.save
+  #     respond_with(@user)
+  #   end
+  #
+  # Which is exactly the same as:
+  #
+  #   def create
+  #     @user = User.new(params[:user])
+  #
+  #     respond_to do |format|
+  #       if @user.save
+  #         flash[:notice] = 'User was successfully created.'
+  #         format.html { redirect_to(@user) }
+  #         format.xml { render :xml => @user, :status => :created, :location => @user }
+  #       else
+  #         format.html { render :action => "new" }
+  #         format.xml { render :xml => @user.errors, :status => :unprocessable_entity }
+  #       end
+  #     end
+  #   end
+  #
+  # The same happens for PUT and DELETE requests.
+  #
+  # === Nested resources
+  #
+  # You can given nested resource as you do in form_for and polymorphic_url.
+  # Consider the project has many tasks example. The create action for
+  # TasksController would be like:
+  #
+  #   def create
+  #     @project = Project.find(params[:project_id])
+  #     @task = @project.comments.build(params[:task])
+  #     flash[:notice] = 'Task was successfully created.' if @task.save
+  #     respond_with(@project, @task)
+  #   end
+  #
+  # Giving an array of resources, you ensure that the responder will redirect to
+  # project_task_url instead of task_url.
+  #
+  # Namespaced and singleton resources requires a symbol to be given, as in
+  # polymorphic urls. If a project has one manager which has many tasks, it
+  # should be invoked as:
+  #
+  #   respond_with(@project, :manager, @task)
+  #
+  # Check polymorphic_url documentation for more examples.
+  #
+  class Responder
+    attr_reader :controller, :request, :format, :resource, :resources, :options
+    def initialize(controller, resources, options={})
+      @controller = controller
+      @request = controller.request
+      @format = controller.formats.first
+      @resource = resources.is_a?(Array) ? resources.last : resources
+      @resources = resources
+      @options = options
+      @default_response = options.delete(:default_response)
+    end
+    delegate :head, :render, :redirect_to,   :to => :controller
+    delegate :get?, :post?, :put?, :delete?, :to => :request
+    # Undefine :to_json since it's defined on Object
+    undef_method(:to_json) if method_defined?(:to_json)
+    # Initializes a new responder an invoke the proper format. If the format is
+    # not defined, call to_format.
+    #
+    def self.call(*args)
+      responder = new(*args)
+      method = :"to_#{responder.format}"
+      responder.respond_to?(method) ? responder.send(method) : responder.to_format
+    end
+    # HTML format does not render the resource, it always attempt to render a
+    # template.
+    #
+    def to_html
+      default_render
+    rescue ActionView::MissingTemplate
+      if get?
+        raise
+      elsif has_errors?
+        render :action => default_action
+      else
+        redirect_to resource_location
+      end
+    end
+    # All others formats follow the procedure below. First we try to render a
+    # template, if the template is not available, we verify if the resource
+    # responds to :to_format and display it.
+    #
+    def to_format
+      default_render
+    rescue ActionView::MissingTemplate
+      raise unless resourceful?
+      if get?
+        display resource
+      elsif has_errors?
+        display resource.errors, :status => :unprocessable_entity
+      elsif post?
+        display resource, :status => :created, :location => resource_location
+      else
+        head :ok
+      end
+    end
+  protected
+    # Checks whether the resource responds to the current format or not.
+    #
+    def resourceful?
+      resource.respond_to?(:"to_#{format}")
+    end
+    # Returns the resource location by retrieving it from the options or
+    # returning the resources array.
+    #
+    def resource_location
+      options[:location] || resources
+    end
+    # If a given response block was given, use it, otherwise call render on
+    # controller.
+    #
+    def default_render
+      @default_response.call
+    end
+    # display is just a shortcut to render a resource with the current format.
+    #
+    #   display @user, :status => :ok
+    #
+    # For xml request is equivalent to:
+    #
+    #   render :xml => @user, :status => :ok
+    #
+    # Options sent by the user are also used:
+    #
+    #   respond_with(@user, :status => :created)
+    #   display(@user, :status => :ok)
+    #
+    # Results in:
+    #
+    #   render :xml => @user, :status => :created
+    #
+    def display(resource, given_options={})
+      controller.render given_options.merge!(options).merge!(format => resource)
+    end
+    # Check if the resource has errors or not.
+    #
+    def has_errors?
+      resource.respond_to?(:errors) && !resource.errors.empty?
+    end
+    # By default, render the :edit action for html requests with failure, unless
+    # the verb is post.
+    #
+    def default_action
+      request.post? ? :new : :edit
+    end
+  end
+end