model_driven_api 3.2.7 → 3.2.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6355671a58c563bf10480491a193f8d0f3777a87aeda572ce8cd5aef9202ee71
-  data.tar.gz: fc2dc537d4da4cba5fec9979ccf480bad7d8a1c28fefc8e3c23716c8363f0dca
+  metadata.gz: 66f79849229a707224dc7cfdb61e3cb53995e2ba6e4b01c7485f9b1115791dfb
+  data.tar.gz: d5ba4ba9e7e4c0d750683c230e63d3f3d9f7785c64e4fee8da96f06ea52dc1b5
 SHA512:
-  metadata.gz: 168b2156b31846474aea51786fd2adb19c421b80898ada6a6d58f08a1a29c7dcd864eb96e08a087bae9272032c96cf7a4238d4075d030238e65a9231488e29fb
-  data.tar.gz: 3e572dd6a73561db3d595c29ecb9ae817afd54715418fe1ea666bee383ede1c97f6bb0642e76fdd2927015487bb0efe37afd526ff6cd94aa4036fff655ce6b3f
+  metadata.gz: '0578ec016dc2dd7fcee4eef1fed2fcd765ed13a9a1391383911fbeb336b2a8654efee5d043a3a803dd2af83440a83048315b9034873bd19f155bd3326f4d51ae'
+  data.tar.gz: 484370bc4395eeb5782180875f470784ca02dcf1b3431da82e491b21545aef86f2d254744fbbe5be5675f09dd2e30ed85ceb77051c9d78cd7b40dfe731015c3a

data/app/commands/authorize_api_request.rb

@@ -14,17 +14,28 @@ class AuthorizeApiRequest
     attr_reader :headers
     
     def api_user
+        Rails.logger.debug "AuthorizeApiRequest: api_user -> #{decoded_auth_token}"
         @api_user ||= User.find(decoded_auth_token[:user_id]) if decoded_auth_token
-        @api_user || errors.add(:token, "Invalid token") && nil
+        if @api_user
+            return @api_user
+        else
+            errors.add(:token, "Invalid token")
+            return nil
+        end
     end
     
     def decoded_auth_token
+        Rails.logger.debug "AuthorizeApiRequest: http_auth_header -> #{http_auth_header}"
         @decoded_auth_token ||= JsonWebToken.decode(http_auth_header)
+        @decoded_auth_token
     end
     
     def http_auth_header
+        Rails.logger.debug "AuthorizeApiRequest: Authorization -> #{headers['Authorization']}"
         if headers['Authorization'].present?
-            return headers['Authorization'].split(' ').last
+            token = headers['Authorization'].split(' ').last
+            Rails.logger.debug "AuthorizeApiRequest: token -> #{token}"
+            return token
         else
             errors.add(:token, "Missing token")
         end

data/app/controllers/api/v2/application_controller.rb

@@ -195,9 +195,11 @@ class Api::V2::ApplicationController < ActionController::API
     @current_user = nil
     Settings.ns(:security).allowed_authorization_headers.split(",").each do |header|
       # puts "Found header #{header}: #{request.headers[header]}"
-      check_authorization("Authorize#{header}".constantize.call(request))
+      check_authorization("Authorize#{header}".constantize.call(request)) unless @current_user
     end
 
+    Rails.logger.debug("Checking for authorization with AuthorizeApiRequest if current_user not already present -> current_user: #{@current_user}")
+
     check_authorization AuthorizeApiRequest.call(request) unless @current_user
     return unauthenticated!(OpenStruct.new({ message: @auth_errors })) unless @current_user
 
@@ -240,6 +242,7 @@ class Api::V2::ApplicationController < ActionController::API
   end
 
   def check_authorization(cmd)
+    Rails.logger.debug("Checking authorization: #{cmd.inspect}")
     if cmd.success?
       @current_user = cmd.result
     else

data/lib/model_driven_api/version.rb

@@ -1,3 +1,3 @@
 module ModelDrivenApi
-  VERSION = "3.2.7".freeze
+  VERSION = "3.2.8".freeze
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: model_driven_api
 version: !ruby/object:Gem::Version
-  version: 3.2.7
+  version: 3.2.8
 platform: ruby
 authors:
 - Gabriele Tassoni
 bindir: bin
 cert_chain: []
-date: 2025-01-16 00:00:00.000000000 Z
+date: 2025-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thecore_backend_commons