hub_kernel-api 0.2.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1ff8bff7f1990c004e388aac6bbfe08f93f6007263653962a93ee7589d185a24
-  data.tar.gz: f79790b1f3a26080b561ce6968142c39aa584742b0a5e037a231165ed00fd0d2
+  metadata.gz: 86e1e73789993ac38e72f3707d5ff990ad680a180ea5c9b49afb8dbccc4ad2e0
+  data.tar.gz: '02937a7e3d0b5eb5979c316a32cb7dede99749b0d559b5846ff090a5c700fc64'
 SHA512:
-  metadata.gz: 3d9ee144416f2ab53a5f66aa0e590ab7a784cec6519a49d89336c3dfe0df53bf6ce9ace1cda27644e9e5616ccf08f33bde8e5b04a30b8bc356153ccbffbc716f
-  data.tar.gz: fe2a86a74e9e47f6b78b3093d6ac29bd766d706b3b3024762a89f3e80d2936be896d90633b2860f78700cce2f25674035fd8e939d94472e5bd7967850e81993b
+  metadata.gz: b8c5ba3ed71d2dbb8690ac63f7bded2b1cc9a3d9ef7e3592f65fe533402a6cbf8da8a7193e93e184bea3b6fa2bfa304e421ea16c9601bbbe8382c3524801fd29
+  data.tar.gz: 1ff6097cfa70e00947054dc7b3c788923f94ef5e11ec731869f42f30c08f315d2ba498b3452808f5cba9a021cb3336b07aae9849b930f57c8a43293226391430

data/README.md

@@ -43,6 +43,7 @@ return value under `answer`.
 | The method answers | 200 | `{"answer": ...}` |
 | The hub is not served, the method is not exposed, the verb is wrong, or the host's permission check refuses | 404 | `{"error": "Not found"}` |
 | The hub refuses, or a required value is missing | 422 | `{"error": "<reason>"}` |
+| A permitted call sends a value the method is not listed with | 422 | `{"error": "<method> does not take <values>"}` |
 | A record the call names does not exist | 404 | `{"error": "No <record> has the id <id>"}` |
 
 ## Installation

data/app/controllers/hub_kernel/api/hub_calls_controller.rb

@@ -1,12 +1,15 @@
 module HubKernel
   module Api
     class HubCallsController < HubKernel::Api.base_controller.constantize
+      wrap_parameters false
+
       rescue_from ActionController::RoutingError, HubKernel::NotAllowed, with: :not_found
       rescue_from HubKernel::Refused, HubKernel::MissingArgumentError, with: :refused
       rescue_from ActiveRecord::RecordNotFound, with: :missing_record
 
       def answer
         raise ActionController::RoutingError, "Not found" unless asked_with_the_right_verb?
+        return refuse_unlisted_values if unlisted_values.any?
 
         render json: { answer: hub.call_exposed(params[:name], values: values, person: caller_person, account: caller_account) }
       end
@@ -17,6 +20,16 @@ module HubKernel
 
       def asked_with_the_right_verb? = hub.exposed(params[:name])&.writes == request.post?
 
+      def refuse_unlisted_values
+        raise HubKernel::NotAllowed unless permitted?
+
+        refused(HubKernel::Refused.new("#{params[:name]} does not take #{unlisted_values.join(", ")}"))
+      end
+
+      def permitted? = hub.exposures_for(person: caller_person, account: caller_account).any? { |exposure| exposure.name.to_s == params[:name] }
+
+      def unlisted_values = values.keys - hub.exposed(params[:name]).takes
+
       def values = request.query_parameters.merge(request.request_parameters).deep_symbolize_keys
 
       def caller_person = send(HubKernel::Api.person_method)

data/lib/hub_kernel/api/version.rb

@@ -1,5 +1,5 @@
 module HubKernel
   module Api
-    VERSION = "0.2.0"
+    VERSION = "0.3.0"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hub_kernel-api
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - tylercschneider
@@ -29,14 +29,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.11'
+        version: '0.18'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.11'
+        version: '0.18'
 description: 'hub_kernel-api gives any hub built on hub_kernel a JSON API: the host
   lists the hubs it serves, and every call goes through the host''s sign-in, permission
   check and account scope.'