model_driven_api 3.2.12 → 3.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 783c3a65595fcf6be92e75ed07e95a15f21a94d4a13185fcb361208fb0000745
-  data.tar.gz: ac89122f2f5bfe2bcddf0f0d07b793a03b3603f29d201f05a65973430d8d27e0
+  metadata.gz: 0751f2c240c15ab7130628b14469555a3fb1abf74e80fba20c86b6a588c4d2db
+  data.tar.gz: 573b9acc768a3162a449e3c70890a1ab5be0e2b124eca9d0d3f6a25fc9928aba
 SHA512:
-  metadata.gz: 5d8f288cded49fc7fe8015a9bd2b3f5cb429a2da2e05d55b8ad87caf12f1138556903ff57c706253293cb66f7d53b6cfd05cb078eb3d1781acfaa765c4919a52
-  data.tar.gz: 303e03a07dda2e3eb295c21db0363c8214dfc8835559b2d43f01dfd1e385f6361d3c227f856fbc92c04eb03cb89b223ffc8ac20ea4bb686f2831c14c3ad1dc41
+  metadata.gz: ace22af5f8fd756d69b251d4576997e907e38c275706960aa3b31a2149c63744506792f5995e604b0ec68fd08f8bae2f256e4013a43af7ae10a10474c018eaba
+  data.tar.gz: 961a3a7b3378981df8078b6b7369cc8eb1fb3cada953553de4e2cf2f677583ec6050a968bd3d6d85b483279ca9d24b9796ae06f5d8448bec944f6ca2fc601d2a

data/app/commands/authorize_api_request.rb

@@ -25,16 +25,16 @@ class AuthorizeApiRequest
     end
     
     def decoded_auth_token
-        Rails.logger.debug "AuthorizeApiRequest: http_auth_header -> #{http_auth_header}"
+        Rails.logger.debug "AuthorizeApiRequest: decoded_auth_token -> http_auth_header -> #{http_auth_header}"
         @decoded_auth_token ||= JsonWebToken.decode(http_auth_header)
         @decoded_auth_token
     end
     
     def http_auth_header
-        Rails.logger.debug "AuthorizeApiRequest: Authorization -> #{headers['Authorization']}"
+        Rails.logger.debug "AuthorizeApiRequest: http_auth_header - Authorization -> #{headers['Authorization']}"
         if headers['Authorization'].present?
             token = headers['Authorization'].split(' ').last
-            Rails.logger.debug "AuthorizeApiRequest: token -> #{token}"
+            Rails.logger.debug "AuthorizeApiRequest: http_auth_header - token -> #{token}"
             return token
         else
             errors.add(:token, "Missing token")

data/app/controllers/api/v2/info_controller.rb

@@ -61,15 +61,18 @@ class Api::V2::InfoController < Api::V2::ApplicationController
   end
 
   def compute_type(model, key)
+    Rails.logger.debug "compute_type #{model} #{key}"
     # if it's a file, a date or a text, then return string
     instance = model.new
     # If it's a method, it is a peculiar case, in which we have to return "object" and additionalProperties: true
     return "method" if model.methods.include?(:json_attrs) && model.json_attrs && model.json_attrs.include?(:methods) && model.json_attrs[:methods].include?(key.to_sym)
     # If it's not the case of a method, then it's a field
     method_class = instance.send(key).class.to_s
+    Rails.logger.debug "compute_type #{model} #{key} #{method_class}"
     method_key = model.columns_hash[key]
     
     # Not columns
+    return nil if method_key.nil?
     return "object" if method_class == "ActiveStorage::Attached::One"
     return "array" if method_class == "ActiveStorage::Attached::Many" || method_class == "Array" || method_class.ends_with?("Array") || method_class.ends_with?("Collection") || method_class.ends_with?("Relation") || method_class.ends_with?("Set") || method_class.ends_with?("List") || method_class.ends_with?("Queue") || method_class.ends_with?("Stack") || method_class.ends_with?("ActiveRecord_Associations_CollectionProxy")
     
@@ -132,7 +135,7 @@ class Api::V2::InfoController < Api::V2::ApplicationController
         [k, { "type": "array", "items": { "type": "object", "properties": properties } }] rescue nil
       else
         [k, { "type": type }]
-      end
+      end unless type.blank?
     end.compact.to_h
   end
   

data/config/routes.rb

@@ -21,7 +21,7 @@ Rails.application.routes.draw do
                 end
 
                 namespace :raw do
-                post :sql
+                    post :sql
                 end
 
                 post "authenticate" => "authentication#authenticate"

data/lib/json_web_token.rb

@@ -1,6 +1,6 @@
 class JsonWebToken
   class << self
-    def encode(payload, expiry = 15.minutes.from_now.to_i)
+    def encode(payload, expiry = ENV.fetch('SESSION_TIMEOUT_IN_MINUTES', 31).to_i.minutes.from_now.to_i)
       result = ::JWT.encode(payload.merge(exp: expiry), ::Rails.application.credentials.dig(:secret_key_base).presence||ENV["SECRET_KEY_BASE"])
       # Store the created token into the DB for later checks if is invalid
       # In a public environment management, without login, it has no interest, so I don't pollute the DB
@@ -10,11 +10,12 @@ class JsonWebToken
     
     def decode(token)
       # Check if the passed token is present and valid into the UsedToken 
-      raise "Token is invalidated by new login" unless UsedToken.exists?(token: token, is_valid: true) if ENV["ALLOW_MULTISESSIONS"] == "false"
+      raise "Token is invalidated by new login" if !UsedToken.exists?(token: token, is_valid: true) && ENV["ALLOW_MULTISESSIONS"] == "false"
       body = ::JWT.decode(token, ::Rails.application.credentials.dig(:secret_key_base).presence||ENV["SECRET_KEY_BASE"])[0]
+      Rails.logger.debug "JsonWebToken: decode -> body -> #{body}"
       ::HashWithIndifferentAccess.new body
-    rescue
-      nil
+    # rescue
+    #   nil
     end
   end
 end

data/lib/model_driven_api/version.rb

@@ -1,3 +1,3 @@
 module ModelDrivenApi
-  VERSION = "3.2.12".freeze
+  VERSION = "3.3.1".freeze
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: model_driven_api
 version: !ruby/object:Gem::Version
-  version: 3.2.12
+  version: 3.3.1
 platform: ruby
 authors:
 - Gabriele Tassoni
 bindir: bin
 cert_chain: []
-date: 2025-03-20 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thecore_backend_commons
@@ -167,7 +167,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.2
+rubygems_version: 3.6.7
 specification_version: 4
 summary: Convention based RoR engine which uses DB schema introspection to create
   REST APIs.