marty 0.5.12

data/app/controllers/marty/components_controller.rb~

@@ -0,0 +1,37 @@
+class Marty::ComponentsController < Marty::ApplicationController
+  # This is useful for individual component testing.  Note that the
+  # appropriate route needs to be defined.
+  # <base_url>/components/<ComponentCamelCaseName>
+  def index
+    component = params[:component]
+
+    return redirect_to root_path unless component
+
+    format, req_disposition, title =
+      params[:format], params[:disposition], params[:reptitle]
+
+    if format && Marty::ContentHandler::GEN_FORMATS.member?(format)
+      klass = component.constantize
+
+      raise "bad component" unless klass < Netzke::Base
+
+      inst = klass.new
+      return unless inst.respond_to?(:export_content)
+
+      title ||= component
+
+      res, type, disposition, filename =
+        inst.export_content(format, title, params)
+
+      return send_data(res,
+                       type:        type,
+                       filename:    filename,
+                       disposition: req_disposition || disposition,
+                       )
+    end
+
+    cname = component.gsub("::", "_").underscore
+    render layout: true,
+    inline: "<%= netzke :#{cname}, class_name: '#{component}', height: 650 %>"
+  end
+end

data/app/controllers/marty/job_controller.rb

@@ -0,0 +1,28 @@
+class Marty::JobController < ActionController::Base
+  def download
+    job_id = params["job_id"]
+
+    promise = Marty::Promise.find_by_id(job_id)
+
+    if promise
+      format = promise.cformat
+      # somewhat hacky: if result has "result" key, it's used as the
+      # content.
+      data = promise.result["result"] || promise.result
+      title = promise.title
+    else
+      format = "json"
+      data = {error: "Job not found: #{job_id}"}
+      title = "error"
+    end
+
+    res, type, disposition, filename =
+      Marty::ContentHandler.export(data, format, title)
+
+    send_data(res,
+              type:        type,
+              filename:    filename,
+              disposition: disposition,
+              )
+  end
+end

data/app/controllers/marty/job_controller.rb~

@@ -0,0 +1,28 @@
+class Marty::JobController < ActionController::Base
+  def download
+    job_id = params["job_id"]
+
+    promise = Marty::Promise.find_by_id(job_id)
+
+    if promise
+      format = promise.cformat
+      # somewhat hacky: if result has "result" key, it's used as the
+      # content.
+      data = promise.result["result"] || promise.result
+      title = promise.title
+    else
+      format = "json"
+      data = {error: "Job not found: #{job_id}"}
+      title = "error"
+    end
+
+    res, type, disposition, filename =
+      Marty::ContentHandler.export(data, format, title)
+
+    send_data(res,
+              type:		type,
+              filename:		filename,
+              disposition:	disposition,
+              )
+  end
+end

data/app/controllers/marty/rpc_controller.rb

@@ -0,0 +1,64 @@
+class Marty::RpcController < ActionController::Base
+  respond_to :json, :csv
+
+  def evaluate
+    res = do_eval(params["script"],
+                  params["tag"],
+                  params["node"],
+                  params["attrs"] || "[]",
+                  params["params"] || "{}",
+                  params["api_key"] || nil,
+                  )
+
+    respond_to do |format|
+      format.json { send_data res.to_json }
+      format.csv  {
+        # SEMI-HACKY: strip outer list if there's only one element.
+        res = res[0] if res.is_a?(Array) && res.length==1
+        send_data Marty::DataExporter.to_csv(res)
+      }
+    end
+
+  end
+
+  private
+
+  def do_eval(sname, tag, node, attrs, params, api_key)
+    return {error: "Bad attrs"} unless attrs.is_a?(String)
+
+    begin
+      attrs = ActiveSupport::JSON.decode(attrs)
+    rescue MultiJson::DecodeError
+      return {error: "Malformed attrs"}
+    end
+
+    return {error: "Malformed attrs"} unless
+      attrs.is_a?(Array) && attrs.all? {|x| x.is_a? String}
+
+    return {error: "Bad params"} unless params.is_a?(String)
+
+    begin
+      params = ActiveSupport::JSON.decode(params)
+    rescue MultiJson::DecodeError
+      return {error: "Malformed params"}
+    end
+
+    return {error: "Malformed params"} unless params.is_a?(Hash)
+
+    return {error: "Permission denied" } unless
+      Marty::ApiAuth.authorized?(sname, api_key)
+
+    begin
+      engine = Marty::ScriptSet.new(tag).get_engine(sname)
+    rescue => e
+      return {error: "Can't get engine: #{sname || 'nil'} with tag: " +
+              "#{tag || 'nil'}; message: #{e.message}"}
+    end
+
+    begin
+      engine.evaluate_attrs(node, attrs, params)
+    rescue => exc
+      Delorean::Engine.grok_runtime_exception(exc)
+    end
+  end
+end

data/app/controllers/marty/rpc_controller.rb~

@@ -0,0 +1,61 @@
+class Marty::RpcController < ActionController::Base
+  respond_to :json, :csv
+
+  def evaluate
+    res = do_eval(params["script"],
+                  params["version"],
+                  params["node"],
+                  params["attrs"] || "[]",
+                  params["params"] || "{}",
+                  )
+
+    respond_to do |format|
+      format.json { send_data res.to_json }
+      format.csv  {
+        # SEMI-HACKY: strip outer list if there's only one element.
+        res = res[0] if res.is_a?(Array) && res.length==1
+        send_data Marty::DataExporter.to_csv(res)
+      }
+    end
+
+  end
+
+  private
+
+  def do_eval(sname, version, node, attrs, params)
+    return {error: "Bad attrs"} if !attrs.is_a?(String)
+
+    begin
+      attrs = ActiveSupport::JSON.decode(attrs)
+    rescue MultiJson::DecodeError
+      return {error: "Malformed attrs"}
+    end
+
+    return {error: "Malformed attrs"} unless
+      attrs.is_a?(Array) && attrs.all? {|x| x.is_a? String}
+
+    return {error: "Bad params"} if !params.is_a?(String)
+
+    begin
+      params = ActiveSupport::JSON.decode(params)
+    rescue MultiJson::DecodeError
+      return {error: "Malformed params"}
+    end
+
+    return {error: "Malformed params"} unless
+      params.is_a?(Hash)
+
+    script = Marty::Script.find_script(sname, version)
+
+    return {error: "Can't find #{sname} version #{version}"} unless script
+
+    engine = Marty::ScriptSet.get_engine(script)
+
+    begin
+      engine.evaluate_attrs(node, attrs, params)
+    rescue => exc
+      Delorean::Engine.grok_runtime_exception(exc)
+    end
+  end
+
+end

data/app/helpers/marty/application_helper.rb

@@ -0,0 +1,4 @@
+module Marty
+  module ApplicationHelper
+  end
+end

data/app/helpers/marty/script_set.rb

@@ -0,0 +1,57 @@
+class Marty::ScriptSet < Delorean::AbstractContainer
+  # ScriptSet acts as a process-wide cache for Delorean
+  # engines. FIXME: rewrite as Singleton.
+
+  attr_reader :tag
+
+  def self.clear_cache
+    @@engines, @@dengines, @@dengines_dt = {}, {}, nil
+  end
+
+  clear_cache
+
+  def initialize(tag=nil)
+    @tag = Marty::Tag.map_to_tag(tag)
+    super()
+  end
+
+  def parse_check(sname, body)
+    engine = Delorean::Engine.new(sname, self)
+    engine.parse(body)
+    engine
+  end
+
+  def get_engine(sname)
+    raise "bad sname #{sname}" unless sname.is_a?(String)
+
+    if tag.isdev?
+      # FIXME: there are race conditions here if a script changes in
+      # the middle of a DEV import sequence. But, DEV imports are
+      # hacky/rare anyway.  So, don't bother for now.
+
+      max_dt = Marty::Script.
+        order("created_dt DESC").limit(1).pluck(:created_dt).first
+
+      @@dengines_dt ||= max_dt
+
+      # reset dengine cache if a script has changed
+      @@dengines = {} if max_dt > @@dengines_dt
+
+      engine = @@dengines[sname]
+
+      return engine if engine
+
+      script = Marty::Script.find_script(sname, tag) || raise("No such script")
+
+      @@dengines[sname] = parse_check(sname, script.body)
+    else
+      engine = @@engines[[tag.id, sname]]
+
+      return engine if engine
+
+      script = Marty::Script.find_script(sname, tag) || raise("No such script")
+
+      @@engines[[tag.id, sname]] = parse_check(sname, script.body)
+    end
+  end
+end

data/app/helpers/marty/script_set.rb~

@@ -0,0 +1,59 @@
+class Marty::ScriptSet < Delorean::AbstractContainer
+  # ScriptSet acts as a process-wide cache for Delorean
+  # engines. FIXME: rewrite as Singleton.
+
+  @@engines, @@dengines, @@dengines_dt = {}, {}, nil
+
+  attr_reader :tag
+
+  def self.clear_cache
+    @@engines, @@dengines, @@dengines_dt = {}, {}, nil
+  end
+
+  def initialize(tag=nil)
+    @tag = Marty::Tag.map_to_tag(tag)
+    super()
+  end
+
+  def parse_check(sname, body)
+    engine = Delorean::Engine.new(sname, self)
+    engine.parse(body)
+    engine
+  end
+
+  def get_engine(sname)
+    raise "bad sname #{sname}" unless sname.is_a?(String)
+
+    script = Marty::Script.find_script(sname, tag)
+
+    raise "No such script" unless script
+
+    if tag.isdev?
+      # FIXME: there are race conditions here if a script changes in
+      # the middle of a DEV import sequence. But, DEV imports are
+      # hacky/rare anyway.  So, don't bother for now.
+
+      max_dt = Marty::Script.
+        where("created_dt <> 'infinity'").
+        order("created_dt DESC").limit(1).pluck(:created_dt).first
+
+      @@dengines_dt ||= max_dt
+
+      # reset dengine cache if a script has changed
+      @@dengines = {} if max_dt > @@dengines_dt
+
+      engine = @@dengines[sname]
+
+      return engine if engine
+
+      @@dengines[sname] = engine = parse_check(sname, script.body)
+    else
+      engine = @@engines[[tag.id, sname]]
+
+      return engine if engine
+
+      @@engines[[tag.id, sname]] = engine = parse_check(sname, script.body)
+    end
+    engine
+  end
+end

data/app/models/marty/api_auth.rb

@@ -0,0 +1,44 @@
+require 'mcfly'
+
+class Marty::ApiAuth < Marty::Base
+  has_mcfly
+
+  KEY_SIZE = 19
+
+  def self.generate_key
+    SecureRandom.hex(KEY_SIZE)
+  end
+
+  class ApiAuthValidator < ActiveModel::Validator
+    def validate(api)
+      api.errors[:base] =
+        "API Key length must be #{KEY_SIZE*2}" if
+        api.api_key && api.api_key.length != KEY_SIZE*2
+
+      api.errors[:base] =
+        "Script Name must reference a valid script" if
+        Marty::Script.find_script(api.script_name, nil).nil?
+    end
+  end
+
+  before_validation do
+    self.api_key = Marty::ApiAuth.generate_key if
+      self.api_key.nil? || self.api_key.length == 0
+  end
+
+  validates_presence_of :app_name, :api_key, :script_name
+
+  validates_with ApiAuthValidator
+
+  mcfly_validates_uniqueness_of :api_key, scope: [:script_name]
+  validates_uniqueness_of :app_name, scope: [:script_name,
+                                             :obsoleted_dt]
+
+  def self.authorized?(script_name, api_key)
+    is_secured = where(script_name: script_name,
+                       obsoleted_dt: 'infinity').exists?
+    !is_secured || where(api_key: api_key,
+                         script_name: script_name,
+                         obsoleted_dt: 'infinity').exists?
+  end
+end

data/app/models/marty/api_auth.rb~

@@ -0,0 +1,48 @@
+require 'mcfly'
+
+class Marty::ApiAuth < Marty::Base
+  has_mcfly
+
+  KEY_SIZE = 19
+
+  def self.generate_key
+    SecureRandom.hex(KEY_SIZE)
+  end
+
+  class ApiAuthValidator < ActiveModel::Validator
+    def validate(api)
+      api.errors[:base] =
+        "API Key length must be #{KEY_SIZE*2}" if
+        api.api_key && api.api_key.length != KEY_SIZE*2
+
+      api.errors[:base] =
+        "Script Name must reference a valid script" if
+        Marty::Script.find_script(api.script_name, nil).nil?
+    end
+  end
+
+  before_validation do
+    self.api_key = Marty::ApiAuth.generate_key if
+      self.api_key.nil? || self.api_key.length == 0
+  end
+
+<<<<<<< HEAD
+  # attr_accessible :app_name, :api_key, :script_name
+=======
+>>>>>>> master
+  validates_presence_of :app_name, :api_key, :script_name
+
+  validates_with ApiAuthValidator
+
+  mcfly_validates_uniqueness_of :api_key, scope: [:script_name]
+  validates_uniqueness_of :app_name, scope: [:script_name,
+                                             :obsoleted_dt]
+
+  def self.authorized?(script_name, api_key)
+    is_secured = where(script_name: script_name,
+                       obsoleted_dt: 'infinity').exists?
+    !is_secured || where(api_key: api_key,
+                         script_name: script_name,
+                         obsoleted_dt: 'infinity').exists?
+  end
+end