hanami-controller 0.7.0 → 0.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 4e9a92b39aa9c373400fe07e64b270d3066af888
-  data.tar.gz: f146d4da77a9c4ced2bfdfea31826db63f0ef992
+  metadata.gz: 19ed324ba067df9dae1f836edc8232f5ab9ec658
+  data.tar.gz: 83d999e3d478d6b5048da0f57bc6ce9e4a3bd42e
 SHA512:
-  metadata.gz: 089577daf70c460f7bedaa4d613c65551b0a9bd10af1e7725e0654398ad81c8d5abd7df550f0cce0f97b73f5d00cbf3072f039753a1eb9255218b555705f7e57
-  data.tar.gz: 34ce5a95575dc90669f87469d5494c7b8208b9ac1efc1015c8f6078ca906178d0cdeed585b02f36c4eda64f4977d0a825d0785bfd4f65728da352821cac57df3
+  metadata.gz: 4df22338de1f7d4ec7fc609327917a905db7939f28dbb2113d54e1bc2394b6877bccecd94aba0047e3a745a8098a6341e9afc7fbd36a81b1cd56d2a494685140
+  data.tar.gz: dcb8ffe55c81813c9bd976a04cc840811b9ee0993f46ad76282d8e1f27eb58d9c069807c5f900afffacb9767d0ac900b55c2a49c0955c0c19a1a93e71488d300

data/CHANGELOG.md

@@ -1,6 +1,19 @@
 # Hanami::Controller
 Complete, fast and testable actions for Rack
 
+## v0.7.1 - 2016-10-06
+### Added
+- [Kyle Chong] Introduced `parsed_request_body` for action
+- [Luca Guidi] Introduced `Hanami::Action::BaseParams#each`
+
+### Fixed
+- [Ayleen McCann] Use default content type when `HTTP_ACCEPT` is `*/*`
+- [Kyle Chong] Don't stringify uploaded files
+- [Kyle Chong] Don't stringify params values when not necessary
+
+### Changed
+- [akhramov & Luca Guidi] Raise `Hanami::Controller::IllegalExposureError` when try to expose reserved words: `params`, and `flash`.
+
 ## v0.7.0 - 2016-07-22
 ### Added
 - [Luca Guidi] Introduced `Hanami::Action::Params#error_messages` which returns a flat collection of full error messages

data/lib/hanami/action/base_params.rb

@@ -124,6 +124,15 @@ module Hanami
       end
       alias_method :to_hash, :to_h
 
+      # Iterates through params
+      #
+      # @param blk [Proc]
+      #
+      # @since 0.7.1
+      def each(&blk)
+        to_h.each(&blk)
+      end
+
       private
 
       # @since 0.7.0

data/lib/hanami/action/exposable.rb

@@ -1,3 +1,5 @@
+require 'hanami/action/exposable/guard'
+
 module Hanami
   module Action
     # Exposures API
@@ -18,7 +20,9 @@ module Hanami
       def self.included(base)
         base.class_eval do
           extend ClassMethods
-          expose :params
+          include Guard
+
+          _expose :params
         end
       end
 
@@ -68,6 +72,10 @@ module Hanami
           end
         end
 
+        # Alias of #expose to be used in internal modules.
+        # #_expose is not watched by the Guard
+        alias _expose expose
+
         # Set of exposures attribute names
         #
         # @return [Array] the exposures attribute names

data/lib/hanami/action/exposable/guard.rb

@@ -0,0 +1,102 @@
+require 'hanami/controller/error'
+
+module Hanami
+  module Controller
+    # Exposure of reserved words
+    #
+    # @since 0.7.1
+    class IllegalExposureError < Error
+    end
+  end
+
+  module Action
+    module Exposable
+      # Guard for Exposures API.
+      # Prevents exposure of reserved words
+      #
+      # @since 0.7.1
+      #
+      # @see Hanami::Action::Exposable::Guard::ClassMethods#expose
+      # @see Hanami::Action::Exposable::Guard::ClassMethods#reserved_word?
+      module Guard
+        # Override Ruby's hook for modules.
+        # It prepends a guard for the exposures logic
+        #
+        # @param base [Class] the target action
+        #
+        # @since 0.7.1
+        # @api private
+        #
+        # @see http://www.ruby-doc.org/core-2.1.2/Module.html#method-i-included
+        def self.included(base)
+          class << base
+            prepend ClassMethods
+          end
+        end
+
+        # Exposures API Guard class methods
+        #
+        # @since 0.7.1
+        # @api private
+        module ClassMethods
+          # Prevents exposure if names contain a reserved word.
+          #
+          # @param names [Array<Symbol>] the name(s) of the attribute(s) to be
+          #   exposed
+          #
+          # @return [void]
+          #
+          # @since 0.7.1
+          def expose(*names)
+            detect_reserved_words!(names)
+
+            super
+          end
+
+          private
+
+          # Raises error if given names  contain a reserved word.
+          #
+          # @param names [Array<Symbol>] a list of names to be checked.
+          #
+          # @return [void]
+          #
+          # @raise [IllegalExposeError] if names contain one or more of reserved
+          #   words
+          #
+          # @since 0.7.1
+          # @api private
+          def detect_reserved_words!(names)
+            names.each do |name|
+              if reserved_word?(name)
+                raise Hanami::Controller::IllegalExposureError.new("#{name} is a reserved word. It cannot be exposed")
+              end
+            end
+          end
+
+          # Checks if a string is a reserved word
+          #
+          # Reserved word is a name of the method defined in one of the modules
+          # of a given namespace.
+          #
+          # @param name [Symbol] the word to be checked
+          # @param namespace [String] the namespace containing internal modules
+          #
+          # @return [true, false]
+          #
+          # @since 0.7.1
+          # @api private
+          def reserved_word?(name, namespace = 'Hanami')
+            if method_defined?(name) || private_method_defined?(name)
+              method_owner = instance_method(name).owner
+
+              Utils::String.new(method_owner).namespace == namespace
+            else
+              false
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/hanami/action/glue.rb

@@ -23,7 +23,7 @@ module Hanami
       # @api private
       # @since 0.3.0
       def self.included(base)
-        base.class_eval { expose(:format) if respond_to?(:expose) }
+        base.class_eval { _expose(:format) if respond_to?(:_expose) }
       end
 
       # Check if the current HTTP request is renderable.

data/lib/hanami/action/mime.rb

@@ -487,9 +487,13 @@ module Hanami
       # @see https://github.com/hanami/controller/issues/104
       def best_q_match(q_value_header, available_mimes)
         values = ::Rack::Utils.q_values(q_value_header)
-
         values = values.map do |req_mime, quality|
-          match = available_mimes.find { |am| ::Rack::Mime.match?(am, req_mime) }
+          if req_mime == DEFAULT_ACCEPT
+            # See https://github.com/hanami/controller/issues/167
+            match = default_content_type
+          else
+            match = available_mimes.find { |am| ::Rack::Mime.match?(am, req_mime) }
+          end
           next unless match
           [match, quality]
         end.compact

data/lib/hanami/action/params.rb

@@ -90,6 +90,15 @@ module Hanami
         end
       end
 
+      # Returns true if no validation errors are found,
+      # false otherwise.
+      #
+      # @return [TrueClass, FalseClass]
+      #
+      # @since 0.7.0
+      #
+      # @example
+      #   params.valid? # => true
       def valid?
         @result.success?
       end
@@ -106,32 +115,9 @@ module Hanami
 
       private
 
-      # @since 0.7.0
-      # @api private
-      def _extract_params
-        # FIXME: this is required for dry-v whitelisting
-        stringify!(super)
-      end
-
       def _params
         @result.output.merge(_router_params)
       end
-
-      def stringify!(result)
-        result.keys.each do |key|
-          value = result.delete(key)
-          result[key.to_s] = case value
-                             when ::Hash
-                               stringify!(value)
-                             when ::Array
-                               value.map(&:to_s)
-                             else
-                               value.to_s
-                             end
-        end
-
-        result
-      end
     end
   end
 end

data/lib/hanami/action/rack.rb

@@ -42,6 +42,9 @@ module Hanami
       # @api private
       HEAD = 'HEAD'.freeze
 
+      # The key that returns router parsed body from the Rack env
+      ROUTER_PARSED_BODY = 'router.parsed_body'.freeze
+
       # Override Ruby's hook for modules.
       # It includes basic Hanami::Action modules to the given class.
       #
@@ -202,6 +205,10 @@ module Hanami
         @request ||= ::Hanami::Action::Request.new(@_env)
       end
 
+      def parsed_request_body
+        @_env.fetch(ROUTER_PARSED_BODY, nil)
+      end
+
       private
 
       # Sets the HTTP status code for the response

data/lib/hanami/action/session.rb

@@ -26,7 +26,7 @@ module Hanami
       # @api private
       def self.included(action)
         action.class_eval do
-          expose :session
+          _expose :session
         end
       end
 

data/lib/hanami/controller/version.rb

@@ -3,6 +3,6 @@ module Hanami
     # Defines the version
     #
     # @since 0.1.0
-    VERSION = '0.7.0'.freeze
+    VERSION = '0.7.1'.freeze
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hanami-controller
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.7.1
 platform: ruby
 authors:
 - Luca Guidi
@@ -10,7 +10,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-07-22 00:00:00.000000000 Z
+date: 2016-10-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -115,6 +115,7 @@ files:
 - lib/hanami/action/cookie_jar.rb
 - lib/hanami/action/cookies.rb
 - lib/hanami/action/exposable.rb
+- lib/hanami/action/exposable/guard.rb
 - lib/hanami/action/flash.rb
 - lib/hanami/action/glue.rb
 - lib/hanami/action/head.rb