model-api 0.8.3 → 0.8.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3bdc8741b309bfe1b4d504a67b34a7101ffc3486
-  data.tar.gz: c1519aa053d77afb3d1eff0f1861be9a4fc5a804
+  metadata.gz: 14b9b0dc45ee29320fa640f6b209b5481b5f75b7
+  data.tar.gz: 9f693375afd6e922b43eaaad1fc0f02ae6f5908e
 SHA512:
-  metadata.gz: 708e946d85d6516b2dda287d2c5ad4fffe1b302a597bfbcc5f424308a8c1209b0ec9ba65ab388fa527da1488d2de2512c095172e7ffcfa21e28c90e4398af5c4
-  data.tar.gz: 08fe91d60003278e4e5ce049570fdca9f00be075779f35e7c57627be9a7ce678fdadd9eef0cabbde8b6d0cf3e5b43b85e37e091d786955d4cf6d1ce82ef2be34
+  metadata.gz: f7c8fbbe1fd448f4abfa12b38707b7e15d018a025f2456b7d52cde0ac81212eeff4a3039e9a677386cb3d61795ca89ebdf2c43c80d49f58ab7adfc7e75487c31
+  data.tar.gz: 350cd78aae1b10b904b187b06fbcefb69e1ef57adb306ef8273ea3545fce57704ec0fde053562d4828f6755dd8688e9e08ad585f4d5f8456ca3d539ef96e3e1e

data/lib/model-api/base_controller.rb

@@ -4,45 +4,45 @@ module ModelApi
       def model_class
         nil
       end
-
+      
       def base_api_options
         {}
       end
-
+      
       def base_admin_api_options
         base_api_options.merge(admin_only: true)
       end
     end
-
+    
     def self.included(base)
       base.extend(ClassMethods)
-
+      
       base.send(:include, InstanceMethods)
-
+      
       base.send(:before_filter, :common_headers)
-
+      
       base.send(:rescue_from, Exception, with: :unhandled_exception)
       base.send(:respond_to, :json, :xml)
     end
-
+    
     module InstanceMethods
       SIMPLE_ID_REGEX = /\A[0-9]+\Z/
       UUID_REGEX = /\A[0-9A-Za-z]{8}-?[0-9A-Za-z]{4}-?[0-9A-Za-z]{4}-?[0-9A-Za-z]{4}-?[0-9A-Za-z]\
           {12}\Z/x
       DEFAULT_PAGE_SIZE = 100
-
+      
       protected
-
+      
       def model_class
         self.class.model_class
       end
-
+      
       def render_collection(collection, opts = {})
         return unless ensure_admin_if_admin_only(opts)
         opts = prepare_options(opts)
         opts[:operation] ||= :index
         return unless validate_read_operation(collection, opts[:operation], opts)
-
+        
         coll_route = opts[:collection_route] || self
         collection_links = { self: coll_route }
         collection = process_collection_includes(collection, opts)
@@ -50,19 +50,19 @@ module ModelApi
         collection, _result_sorts = sort_collection(collection, find_sort_params, opts)
         collection, collection_links, opts = paginate_collection(collection,
             collection_links, opts, coll_route)
-
+        
         opts[:collection_links] = collection_links.merge(opts[:collection_links] || {})
             .reverse_merge(common_response_links(opts))
         add_collection_object_route(opts)
         ModelApi::Renderer.render(self, collection, opts)
       end
-
+      
       def render_object(obj, opts = {})
         return unless ensure_admin_if_admin_only(opts)
         opts = prepare_options(opts)
         klass = Utils.find_class(obj, opts)
         object_route = opts[:object_route] || self
-
+        
         opts[:object_links] = { self: object_route }
         if obj.is_a?(ActiveRecord::Base)
           return unless validate_read_operation(obj, opts[:operation], opts)
@@ -75,12 +75,12 @@ module ModelApi
           obj = ModelApi::Utils.ext_value(obj, opts) unless opts[:raw_output]
           opts[:object_links].merge!(opts[:links] || {})
         end
-
+        
         opts[:operation] ||= :show
         opts[:object_links].reverse_merge!(common_response_links(opts))
         ModelApi::Renderer.render(self, obj, opts)
       end
-
+      
       def do_create(opts = {})
         klass = opts[:model_class] || model_class
         return unless ensure_admin_if_admin_only(opts)
@@ -91,19 +91,19 @@ module ModelApi
         return bad_payload(class: klass) if opts[:bad_payload]
         create_and_render_object(obj, opts)
       end
-
+      
       def prepare_object_for_create(klass, opts = {})
         opts = prepare_options(opts)
         get_updated_object(klass, get_operation(:create, opts), opts)
       end
-
+      
       def create_and_render_object(obj, opts = {})
         opts = prepare_options(opts)
         object_link_options = opts[:object_link_options]
         object_link_options[:action] = :show
         save_and_render_object(obj, get_operation(:create, opts), opts.merge(location_header: true))
       end
-
+      
       def do_update(obj, opts = {})
         return unless ensure_admin_if_admin_only(opts)
         obj, opts = prepare_object_for_update(obj, opts)
@@ -113,17 +113,17 @@ module ModelApi
         end
         update_and_render_object(obj, opts)
       end
-
+      
       def prepare_object_for_update(obj, opts = {})
         opts = prepare_options(opts)
         get_updated_object(obj, get_operation(:update, opts), opts)
       end
-
+      
       def update_and_render_object(obj, opts = {})
         opts = prepare_options(opts)
         save_and_render_object(obj, get_operation(:update, opts), opts)
       end
-
+      
       def save_and_render_object(obj, operation, opts = {})
         status, msgs = Utils.process_updated_model_save(obj, operation, opts)
         add_hateoas_links_for_updated_object(operation, opts)
@@ -131,31 +131,31 @@ module ModelApi
         ModelApi::Renderer.render(self, successful ? obj : opts[:request_obj],
             opts.merge(status: status, operation: :show, messages: msgs))
       end
-
+      
       def do_destroy(obj, opts = {})
         return unless ensure_admin_if_admin_only(opts)
         opts = prepare_options(opts)
         obj = obj.first if obj.is_a?(ActiveRecord::Relation)
-
+        
         add_hateoas_links_for_update(opts)
         unless obj.present?
           return not_found(opts.merge(class: klass, field: :id))
         end
-
+        
         operation = opts[:operation] = get_operation(:destroy, opts)
         Utils.validate_operation(obj, operation, opts)
         response_status, errs_or_msgs = Utils.process_object_destroy(obj, operation, opts)
-
+        
         add_hateoas_links_for_updated_object(operation, opts)
         klass = Utils.find_class(obj, opts)
         ModelApi::Renderer.render(self, obj, opts.merge(status: response_status,
             root: ModelApi::Utils.model_name(klass).singular, messages: errs_or_msgs))
       end
-
+      
       def common_response_links(_opts = {})
         {}
       end
-
+      
       def prepare_options(opts)
         opts = opts.symbolize_keys
         opts[:user] = user = filter_by_user
@@ -166,7 +166,7 @@ module ModelApi
             request.query_parameters.to_h.symbolize_keys
         opts
       end
-
+      
       def id_info(opts = {})
         id_info = {}
         id_info[:id_attribute] = (opts[:id_attribute] || :id).to_sym
@@ -174,7 +174,7 @@ module ModelApi
         id_info[:id_value] = (opts[:id_value] || params[id_info[:id_param]]).to_s
         id_info
       end
-
+      
       def api_query(opts = {})
         klass = opts[:model_class] || model_class
         unless klass < ActiveRecord::Base
@@ -191,7 +191,7 @@ module ModelApi
         end
         Utils.apply_context(query, opts)
       end
-
+      
       def common_object_query(opts = {})
         klass = opts[:model_class] || model_class
         coll_query = Utils.apply_context(api_query(opts), opts)
@@ -215,7 +215,7 @@ module ModelApi
         end
         query
       end
-
+      
       def collection_query(opts = {})
         opts = base_api_options.merge(opts)
         klass = opts[:model_class] || model_class
@@ -226,11 +226,11 @@ module ModelApi
         end
         query
       end
-
+      
       def object_query(opts = {})
         common_object_query(base_api_options.merge(opts))
       end
-
+      
       def user_query(query, opts = {})
         user = opts[:user] || filter_by_user
         klass = opts[:model_class] || model_class
@@ -249,23 +249,23 @@ module ModelApi
         end
         query
       end
-
+      
       def base_api_options
         self.class.base_api_options
       end
-
+      
       def base_admin_api_options
         base_api_options.merge(admin_only: true)
       end
-
+      
       def ensure_admin
         return true if current_user.try(:admin_api_user?)
-
+        
         # Mask presence of endpoint if user is not authorized to access it
         not_found
         false
       end
-
+      
       def unhandled_exception(err)
         return if handle_api_exceptions(err)
         error_id = LogUtils.log_and_notify(err)
@@ -285,7 +285,7 @@ module ModelApi
         ModelApi::Renderer.render(self, error_details, root: :error_details,
             status: :internal_server_error)
       end
-
+      
       def handle_api_exceptions(err)
         if err.is_a?(ModelApi::NotFoundException)
           not_found(field: err.field, message: err.message)
@@ -296,23 +296,23 @@ module ModelApi
         end
         true
       end
-
+      
       def doorkeeper_unauthorized_render_options(error: nil)
         { json: unauthorized(error: 'Not authorized to access resource', message: error.description,
             format: :json, generate_body_only: true) }
       end
-
+      
       # Indicates whether user has access to data they do not own.
       def admin_access?
         false
       end
-
+      
       # Indicates whether API should render administrator-only content in API responses
       def admin_content?
         param = request.query_parameters[:admin]
         param.present? && param.to_i != 0 && admin_access?
       end
-
+      
       def resource_parent_id(parent_model_class, opts = {})
         id_info = id_info(opts.reverse_merge(id_param: "#{parent_model_class.name.underscore}_id"))
         model_name = parent_model_class.model_name.human
@@ -333,7 +333,7 @@ module ModelApi
         end
         parent_id
       end
-
+      
       def simple_error(status, error, opts = {})
         opts = opts.dup
         klass = opts[:class]
@@ -357,14 +357,14 @@ module ModelApi
         ModelApi::Renderer.render(self, opts[:request_obj], opts.merge(status: status,
             messages: errs_or_msgs))
       end
-
+      
       def not_found(opts = {})
         opts = opts.dup
         opts[:message] ||= 'No resource found at the path provided or matching the criteria ' \
             'specified'
         simple_error(:not_found, opts.delete(:error) || 'No resource found', opts)
       end
-
+      
       def bad_payload(opts = {})
         opts = opts.dup
         format = opts[:format] || identify_format
@@ -373,24 +373,24 @@ module ModelApi
         simple_error(:bad_request, opts.delete(:error) || 'Missing/invalid request body (payload)',
             opts)
       end
-
+      
       def bad_request(error, message, opts = {})
         opts[:message] = message || 'This request is invalid for the resource in its present state'
         simple_error(:bad_request, error || 'Invalid API request', opts)
       end
-
+      
       def unauthorized(opts = {})
         opts = opts.dup
         opts[:message] ||= 'Missing one or more privileges required to complete request'
         simple_error(:unauthorized, opts.delete(:error) || 'Not authorized', opts)
       end
-
+      
       def not_implemented(opts = {})
         opts = opts.dup
         opts[:message] ||= 'This API feature is presently unavailable'
         simple_error(:not_implemented, opts.delete(:error) || 'Not implemented', opts)
       end
-
+      
       def validate_read_operation(obj, operation, opts = {})
         status, errors = Utils.validate_operation(obj, operation, opts)
         return true if status.nil? && errors.nil?
@@ -403,7 +403,7 @@ module ModelApi
         simple_error(status, errors, opts)
         false
       end
-
+      
       def current_user
         return @devise_user if @devise_user.present?
         return @current_user if instance_variable_defined?(:@current_user)
@@ -413,7 +413,7 @@ module ModelApi
         end
         @current_user = User.find(doorkeeper_token.resource_owner_id)
       end
-
+      
       def filter_by_user
         if admin_access?
           if (user_id = request.query_parameters[:user_id] ||
@@ -427,23 +427,23 @@ module ModelApi
         end
         current_user
       end
-
+      
       def common_headers
         ModelApi::Utils.common_http_headers.each do |k, v|
           response.headers[k] = v
         end
       end
-
+      
       def identify_format
         format = self.request.format.symbol rescue :json
         format == :xml ? :xml : :json
       end
-
+      
       def ensure_admin_if_admin_only(opts = {})
         return true unless opts[:admin_only]
         ensure_admin
       end
-
+      
       def get_operation(default_operation, opts = {})
         if opts.key?(:operation)
           return opts[:operation]
@@ -459,7 +459,7 @@ module ModelApi
           return default_operation
         end
       end
-
+      
       def get_updated_object(obj_or_class, operation, opts = {})
         opts = opts.symbolize_keys
         opts[:operation] = operation
@@ -488,15 +488,15 @@ module ModelApi
         ModelApi::Utils.invoke_callback(model_metadata[:after_initialize], obj, opts)
         [obj, opts]
       end
-
+      
       private
-
+      
       def find_filter_params
         request.query_parameters.reject do |param, _value|
           %w(access_token sort_by admin).include?(param)
         end
       end
-
+      
       def find_sort_params
         sort_by = params[:sort_by]
         return {} if sort_by.blank?
@@ -507,7 +507,7 @@ module ModelApi
           process_simple_sort_params(sort_by)
         end
       end
-
+      
       def process_json_sort_params(sort_by)
         sort_params = {}
         sort_json_obj = (JSON.parse(sort_by) rescue {})
@@ -526,7 +526,7 @@ module ModelApi
         end
         sort_params
       end
-
+      
       def process_simple_sort_params(sort_by)
         sort_params = {}
         sort_by.split(',').each do |key|
@@ -558,7 +558,7 @@ module ModelApi
         end
         sort_params
       end
-
+      
       def process_collection_includes(collection, opts = {})
         klass = Utils.find_class(collection, opts)
         metadata = ModelApi::Utils.filtered_ext_attrs(klass, opts[:operation] || :index, opts)
@@ -574,7 +574,7 @@ module ModelApi
         collection = collection.includes(includes) if includes.present?
         collection
       end
-
+      
       def filter_collection(collection, filter_params, opts = {})
         return [collection, {}] if filter_params.blank? # Don't filter if no filter params
         klass = opts[:class] || Utils.find_class(collection, opts)
@@ -594,7 +594,7 @@ module ModelApi
         end
         [collection, result_filters]
       end
-
+      
       def process_filter_params(filter_params, klass, opts = {})
         assoc_values = {}
         filter_metadata = {}
@@ -614,7 +614,7 @@ module ModelApi
         end
         [assoc_values, filter_metadata, attr_values]
       end
-
+      
       # rubocop:disable Metrics/ParameterLists
       def process_filter_assoc_param(attr, metadata, assoc_values, value, opts)
         attr_elems = attr.split('.')
@@ -626,7 +626,7 @@ module ModelApi
         assoc_filter_params = (assoc_values[key] ||= {})
         assoc_filter_params[attr_elems[1..-1].join('.')] = value
       end
-
+      
       def process_filter_attr_param(attr, metadata, filter_metadata, attr_values, value, opts)
         attr = attr.strip.to_sym
         attr_metadata = metadata[attr] ||
@@ -636,8 +636,9 @@ module ModelApi
         filter_metadata[key] = attr_metadata
         attr_values[key] = value
       end
+      
       # rubocop:enable Metrics/ParameterLists
-
+      
       def apply_filter_param(attr_metadata, collection, opts = {})
         raw_value = (opts[:attr_values] || params)[attr_metadata[:key]]
         filter_table = opts[:filter_table]
@@ -670,7 +671,7 @@ module ModelApi
         end
         collection
       end
-
+      
       def sort_collection(collection, sort_params, opts = {})
         return [collection, {}] if sort_params.blank? # Don't filter if no filter params
         klass = opts[:class] || Utils.find_class(collection, opts)
@@ -696,7 +697,7 @@ module ModelApi
         end
         [collection, result_sorts]
       end
-
+      
       def process_sort_params(sort_params, klass, opts)
         metadata = ModelApi::Utils.filtered_ext_attrs(klass, :sort, opts)
         assoc_sorts = {}
@@ -724,7 +725,7 @@ module ModelApi
         end
         [assoc_sorts, attr_sorts, result_sorts]
       end
-
+      
       # Intentionally disabling parameter list length check for private / internal method
       # rubocop:disable Metrics/ParameterLists
       def process_sort_param_assoc(attr, metadata, sort_order, assoc_sorts, opts)
@@ -736,9 +737,9 @@ module ModelApi
         assoc_sort_params = (assoc_sorts[key] ||= {})
         assoc_sort_params[attr_elems[1..-1].join('.')] = sort_order
       end
-
+      
       # rubocop:enable Metrics/ParameterLists
-
+      
       def filter_process_param(raw_value, attr_metadata, opts)
         raw_value = raw_value.to_s.strip
         array = nil
@@ -758,7 +759,7 @@ module ModelApi
         operator, value = parse_filter_operator(raw_value)
         [[operator, ModelApi::Utils.transform_value(value, attr_metadata[:parse], opts)]]
       end
-
+      
       def filter_process_param_array(array, attr_metadata, opts)
         operator_value_pairs = []
         equals_values = []
@@ -774,7 +775,7 @@ module ModelApi
         operator_value_pairs << ['=', equals_values.uniq] if equals_values.present?
         operator_value_pairs
       end
-
+      
       def parse_filter_operator(value)
         value = value.to_s.strip
         if (operator = value.scan(/\A(>=|<=|!=|<>)[[:space:]]*\w/).flatten.first).present?
@@ -784,7 +785,7 @@ module ModelApi
         end
         ['=', value]
       end
-
+      
       def format_value_for_query(column, value, klass)
         return value.map { |v| format_value_for_query(column, v, klass) } if value.is_a?(Array)
         column_metadata = klass.columns_hash[column.to_s]
@@ -804,7 +805,7 @@ module ModelApi
         end
         value.to_s
       end
-
+      
       def params_array(raw_value)
         index = 0
         array = []
@@ -814,37 +815,37 @@ module ModelApi
         end
         array
       end
-
+      
       def paginate_collection(collection, collection_links, opts, coll_route)
         collection_size = collection.count
         page_size = (params[:page_size] || DEFAULT_PAGE_SIZE).to_i
         page = [params[:page].to_i, 1].max
-        page_count = [(collection_size - 1) / page_size, 1].max
+        page_count = [(collection_size + page_size - 1) / page_size, 1].max
         page = page_count if page > page_count
         offset = (page - 1) * page_size
-
+        
         opts = opts.dup
         opts[:count] ||= collection_size
         opts[:page] ||= page
         opts[:page_size] ||= page_size
         opts[:page_count] ||= page_count
-
+        
         response.headers['X-Total-Count'] = collection_size.to_s
-
+        
         opts[:collection_link_options] = (opts[:collection_link_options] || {})
             .reject { |k, _v| [:page].include?(k.to_sym) }
         opts[:object_link_options] = (opts[:object_link_options] || {})
             .reject { |k, _v| [:page, :page_size].include?(k.to_sym) }
-
+        
         if collection_size > page_size
           opts[:collection_link_options][:page] = page
           Utils.add_pagination_links(collection_links, coll_route, page, page_count)
           collection = collection.limit(page_size).offset(offset)
         end
-
+        
         [collection, collection_links, opts]
       end
-
+      
       def resolve_key_to_column(klass, attr_metadata)
         return nil unless klass.respond_to?(:columns_hash)
         columns_hash = klass.columns_hash
@@ -855,7 +856,7 @@ module ModelApi
         return nil unless render_method.is_a?(String)
         columns_hash.include?(render_method) ? render_method : nil
       end
-
+      
       def add_collection_object_route(opts)
         object_route = opts[:object_route]
         unless object_route.present?
@@ -873,31 +874,31 @@ module ModelApi
         return if object_route.blank?
         opts[:object_links] = (opts[:object_links] || {}).merge(self: object_route)
       end
-
+      
       def add_hateoas_links_for_update(opts)
         object_route = opts[:object_route] || self
         links = { self: object_route }.reverse_merge(common_response_links(opts))
         opts[:links] = links.merge(opts[:links] || {})
       end
-
+      
       def add_hateoas_links_for_updated_object(_operation, opts)
         object_route = opts[:object_route] || self
         object_links = { self: object_route }
         opts[:object_links] = object_links.merge(opts[:object_links] || {})
       end
-
+      
       def verify_update_request_body(request_body, format, opts = {})
         if request.format.symbol.nil? && format.present?
           opts[:format] ||= format
         end
-
+        
         if request_body.is_a?(Array)
           fail 'Expected object, but collection provided'
         elsif !request_body.is_a?(Hash)
           fail 'Expected object'
         end
       end
-
+      
       def filtered_by_foreign_key?(query)
         fk_cache = self.class.instance_variable_get(:@foreign_key_cache)
         self.class.instance_variable_set(:@foreign_key_cache, fk_cache = {}) if fk_cache.nil?
@@ -914,13 +915,13 @@ module ModelApi
             "#{e.backtrace.join("\n")}"
       end
     end
-
+    
     class Utils
       def self.find_class(obj, opts = {})
         return nil if obj.nil?
         opts[:class] || (obj.respond_to?(:klass) ? obj.klass : obj.class)
       end
-
+      
       def self.add_pagination_links(collection_links, coll_route, page, last_page)
         if page < last_page
           collection_links[:next] = [coll_route, { page: (page + 1) }]
@@ -929,7 +930,7 @@ module ModelApi
         collection_links[:first] = [coll_route, { page: 1 }]
         collection_links[:last] = [coll_route, { page: last_page }]
       end
-
+      
       def self.object_from_req_body(root_elem, req_body, format)
         if format == :json
           request_obj = req_body
@@ -945,7 +946,7 @@ module ModelApi
         fail 'Invalid request format' unless request_obj.present?
         request_obj
       end
-
+      
       def self.apply_updates(obj, req_obj, operation, opts = {})
         opts = opts.merge(object: opts[:object] || obj)
         metadata = ModelApi::Utils.filtered_ext_attrs(opts[:api_attr_metadata] ||
@@ -961,7 +962,7 @@ module ModelApi
           update_api_attr(obj, attr, value, opts.merge(attr_metadata: attr_metadata))
         end
       end
-
+      
       def self.set_context_attrs(obj, opts = {})
         klass = (obj.class < ActiveRecord::Base ? obj.class : nil)
         (opts[:context] || {}).each do |key, value|
@@ -986,7 +987,7 @@ module ModelApi
           end
         end
       end
-
+      
       def self.process_updated_model_save(obj, operation, opts = {})
         opts = opts.dup
         opts[:operation] = operation
@@ -1015,7 +1016,7 @@ module ModelApi
         end
         [suggested_response_status, object_errors]
       end
-
+      
       def self.extract_msgs_for_error(obj, opts = {})
         object_errors = []
         attr_prefix = opts[:attr_prefix] || ''
@@ -1043,7 +1044,7 @@ module ModelApi
         end
         object_errors
       end
-
+      
       # rubocop:disable Metrics/MethodLength
       def self.extract_assoc_error_msgs(obj, attr, opts)
         object_errors = []
@@ -1085,12 +1086,11 @@ module ModelApi
         end
         object_errors
       end
-
       # rubocop:enable Metrics/MethodLength
-
+      
       def self.process_object_destroy(obj, operation, opts)
         soft_delete = obj.errors.present? ? false : object_destroy(obj, opts)
-
+        
         if obj.errors.blank? && (soft_delete || obj.destroyed?)
           response_status = :ok
           object_errors = []
@@ -1107,10 +1107,10 @@ module ModelApi
             }
           end
         end
-
+        
         [response_status, object_errors]
       end
-
+      
       def self.object_destroy(obj, opts = {})
         klass = find_class(obj)
         object_id = obj.send(opts[:id_attribute] || :id)
@@ -1134,7 +1134,7 @@ module ModelApi
         Rails.logger.warn "Error destroying #{klass.name} \"#{object_id}\": \"#{e.message}\")."
         false
       end
-
+      
       def self.set_api_attr(obj, attr, value, opts)
         attr_metadata = opts[:attr_metadata]
         internal_field = attr_metadata[:key] || attr
@@ -1147,7 +1147,7 @@ module ModelApi
         end
         obj.send(setter, value)
       end
-
+      
       def self.update_api_attr(obj, attr, value, opts = {})
         attr_metadata = opts[:attr_metadata]
         begin
@@ -1174,7 +1174,7 @@ module ModelApi
           handle_api_setter_exception(e, obj, attr_metadata, opts)
         end
       end
-
+      
       def self.update_has_many_assoc(obj, attr, value, opts = {})
         attr_metadata = opts[:attr_metadata]
         assoc = attr_metadata[:association]
@@ -1190,7 +1190,7 @@ module ModelApi
         assoc_objs = []
         value_array.each_with_index do |assoc_payload, index|
           opts[:ignored_fields].clear if opts.include?(:ignored_fields)
-          assoc_objs << update_has_many_assoc_obj(assoc_class, assoc_payload,
+          assoc_objs << update_has_many_assoc_obj(obj, assoc, assoc_class, assoc_payload,
               opts.merge(model_metadata: model_metadata))
           if opts[:ignored_fields].present?
             external_attr = ModelApi::Utils.ext_attr(attr, attr_metadata)
@@ -1199,8 +1199,8 @@ module ModelApi
         end
         set_api_attr(obj, attr, assoc_objs, opts)
       end
-
-      def self.update_has_many_assoc_obj(assoc_class, assoc_payload, opts = {})
+      
+      def self.update_has_many_assoc_obj(parent_obj, assoc, assoc_class, assoc_payload, opts = {})
         model_metadata = opts[:model_metadata] || ModelApi::Utils.model_metadata(assoc_class)
         assoc_obj = find_by_id_attrs(model_metadata[:id_attributes], assoc_class, assoc_payload)
         assoc_obj = assoc_obj.first unless assoc_obj.nil? || assoc_obj.count != 1
@@ -1214,14 +1214,21 @@ module ModelApi
           assoc_oper = :update
           opts[:update_opts] ||= opts.merge(api_attr_metadata: ModelApi::Utils.filtered_attrs(
               assoc_class, :update, opts))
+          
           assoc_opts = opts[:update_opts]
         end
+        if (inverse_assoc = assoc.options[:inverse_of]).present? &&
+            assoc_obj.respond_to?("#{inverse_assoc}=")
+          assoc_obj.send("#{inverse_assoc}=", parent_obj)
+        elsif !parent_obj.new_record? && assoc_obj.respond_to?("#{assoc.foreign_key}=")
+          assoc_obj.send("#{assoc.foreign_key}=", obj.id)
+        end
         apply_updates(assoc_obj, assoc_payload, assoc_oper, assoc_opts)
         ModelApi::Utils.invoke_callback(model_metadata[:after_initialize], assoc_obj,
             assoc_opts.merge(operation: assoc_oper).freeze)
         assoc_obj
       end
-
+      
       def self.update_belongs_to_assoc(obj, attr, value, opts = {})
         attr_metadata = opts[:attr_metadata]
         assoc = attr_metadata[:association]
@@ -1247,7 +1254,7 @@ module ModelApi
         end
         set_api_attr(obj, attr, assoc_obj, opts)
       end
-
+      
       def self.find_by_id_attrs(id_attributes, assoc_class, assoc_payload)
         return nil unless id_attributes.present?
         query = nil
@@ -1260,7 +1267,7 @@ module ModelApi
         end
         query
       end
-
+      
       def self.apply_context(query, opts = {})
         context = opts[:context]
         return query if context.nil?
@@ -1271,7 +1278,7 @@ module ModelApi
         end
         query
       end
-
+      
       def self.handle_api_setter_exception(e, obj, attr_metadata, opts = {})
         return unless attr_metadata.is_a?(Hash)
         on_exception = attr_metadata[:on_exception]
@@ -1292,7 +1299,7 @@ module ModelApi
           break
         end
       end
-
+      
       def self.add_ignored_field(ignored_fields, attr, value, attr_metadata)
         return unless ignored_fields.is_a?(Array)
         attr_metadata ||= {}
@@ -1300,7 +1307,7 @@ module ModelApi
         return unless external_attr.present?
         ignored_fields << { external_attr => value }
       end
-
+      
       def self.validate_operation(obj, operation, opts = {})
         klass = find_class(obj, opts)
         model_metadata = opts[:api_model_metadata] || ModelApi::Utils.model_metadata(klass)
@@ -1312,7 +1319,7 @@ module ModelApi
           ModelApi::Utils.invoke_callback(model_metadata[:"validate_#{operation}"], obj, opts)
         end
       end
-
+      
       def self.validate_preserving_existing_errors(obj)
         if obj.errors.present?
           errors = obj.errors.messages.dup
@@ -1324,7 +1331,7 @@ module ModelApi
           obj.valid?
         end
       end
-
+      
       def self.class_or_sti_subclass(klass, req_body, operation, opts = {})
         metadata = ModelApi::Utils.filtered_attrs(klass, :create, opts)
         if operation == :create && (attr_metadata = metadata[:type]).is_a?(Hash) &&

data/lib/model-api/renderer.rb

@@ -85,7 +85,7 @@ module ModelApi
           end
         end
         opts = ModelApi::Utils.contextual_metadata_opts(attr_metadata, opts)
-        opts[:operation] = :show
+        opts[:operation] ||= :show
         if value.respond_to?(:map)
           return value.map do |elem|
             elem.is_a?(ActiveRecord::Base) ? serializable_object(elem, opts) : elem

data/model-api.gemspec

@@ -3,7 +3,7 @@ $:.unshift lib unless $:.include?(lib)
 
 Gem::Specification.new do |s|
   s.name = 'model-api'
-  s.version = '0.8.3'
+  s.version = '0.8.4'
   s.summary = 'Create easy REST API\'s using metadata inside your ActiveRecord models'
   s.description = 'Ruby gem allowing Ruby on Rails developers to create REST API’s using ' \
       'metadata defined inside their ActiveRecord models.'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: model-api
 version: !ruby/object:Gem::Version
-  version: 0.8.3
+  version: 0.8.4
 platform: ruby
 authors:
 - Matthew Mead
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-06-22 00:00:00.000000000 Z
+date: 2016-09-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails