rao-api-resources_controller 0.0.48.pre → 0.0.49.pre

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cc5902a08fb2d5bb7d71e7cff3235f41c6a24a2f10c22c72d85ed161a5b79689
-  data.tar.gz: 7bf5109b3949fcfbf37af6de82126fed7899eb18fa65a571b9361555fad878b4
+  metadata.gz: 7502d725f38fe2455137199dc9ae053918c5f94621ad475b26166290de74d3e6
+  data.tar.gz: 201c4dc8a40768f51cc941998c140d043c333096884df865eee73d7f27e1b476
 SHA512:
-  metadata.gz: ed4f2cb90c0da490ab9cd5bd47b56bc725b2a540ad56bc55d7aaced3edd30c3f9390af80376e01bf4f8163292f405b9e73c9e31e41115e81c3f013a58371a264
-  data.tar.gz: fdca91415be7fea9647d88b26138838066a9d78a6139e328cf0863edf092ca7d4f44cd49826eb7241a258e39ddab548de171ce04a9103a3495c5274953e6e032
+  metadata.gz: 5a59c63daf6e4b05bb82dd7f9ced2dcceb1faef3bf23fc709149944d43b8a4fd6500af38055ac20bfa4f54902808af81ea54a34663726d832ae119cc99e4434d
+  data.tar.gz: 3571ce0c54415b95c17df3683e6437262885631f046965561774bbffcae8ee26803f8b94a673a7e5e8bc1d162f2352e3113c9afacfed6e1bea514300500c0cf1

data/README.md

@@ -42,6 +42,35 @@ module Api
 end
 ```
 
+### Sorting collections
+
+You can specify the sorting via the params "sort_by" and "sort_direction".
+
+### Including associated records
+
+See rao-query.
+
+### Filtering collections
+
+See rao-query.
+
+### Using the modules instead inheritance
+
+Sometimes you want your controller to inherit from a specific controller. In
+that case you can't use Rao::Api::ResourcesController::Base as the base controller.
+Instead of using inheritance you can include the needed modules directly:
+
+    class CountriesController < ApplicationController
+      include Rao::Api::ResourcesController::RestActionsConcern
+      include Rao::Api::ResourcesController::ResourcesConcern
+      include Rao::Api::ResourcesController::SerializationConcern
+      include Rao::Api::ResourcesController::CountActionConcern
+      include Rao::Api::ResourcesController::DestroyAllActionConcern
+      include Rao::Api::ResourcesController::DeleteAllActionConcern
+      include Rao::Api::ResourcesController::FirstActionConcern
+      include Rao::Api::ResourcesController::LastActionConcern
+      include Rao::Api::ResourcesController::ExceptionHandlingConcern
+    end
 
 ## Installation
 Add this line to your application's Gemfile:

data/app/concerns/rao/api/resource_controller/exception_handling_concern.rb

@@ -0,0 +1,42 @@
+module Rao
+  module Api
+    module ResourceController::ExceptionHandlingConcern
+      extend ActiveSupport::Concern
+
+      included do
+        rescue_from Exception do |exception|
+          handle_exception(exception)
+        end
+
+        rescue_from ActiveRecord::RecordNotFound do |exception|
+          handle_404(exception)
+        end
+      end
+
+      private
+
+      def handle_404(exception = nil)
+        respond_to do |format|
+          format.json { render json: { error: (exception.try(:message) || 'Not found') }, status: 404 }
+        end
+      end
+
+      def handle_exception(exception)
+        if Rails.env.development? || Rails.env.test?
+          error = { message: exception.message }
+
+          error[:application_trace] = Rails.backtrace_cleaner.clean(exception.backtrace)
+          error[:full_trace] = exception.backtrace
+
+          respond_to do |format|
+            format.json { render json: error, status: 500 }
+          end
+        else
+          respond_to do |format|
+            format.json { render json: { error: 'Internal server error.' }, status: 500 }
+          end
+        end
+      end
+    end
+  end
+end

data/app/concerns/rao/api/resource_controller/resource_concern.rb

@@ -0,0 +1,11 @@
+module Rao
+  module Api
+    module ResourceController::ResourceConcern
+      extend ActiveSupport::Concern
+
+      def resource_class
+        self.class.resource_class
+      end
+    end
+  end
+end

data/app/concerns/rao/api/resource_controller/rest_actions_concern.rb

@@ -0,0 +1,87 @@
+module Rao
+  module Api
+    module ResourceController::RestActionsConcern
+      extend ActiveSupport::Concern
+
+      included do
+        include ActionController::MimeResponds
+
+        respond_to :json
+
+        before_action :load_resource_for_show, only: [:show]
+        before_action :load_resource, only: [:update, :destroy, :delete]
+        before_action :initialize_resource_for_create, only: [:create]
+      end
+
+      def show
+        respond_to do |format|
+          if @resource.nil?
+            format.json { render json: { error: "Couldn't find #{resource_class} with ID=#{params[:id]}" }, status: :not_found }
+          else
+            format.json { render json: serialize_resource(@resource), status: :ok }
+          end
+        end
+      end
+
+      def create
+        respond_to do |format|
+          if @resource.save
+            format.json { render json: serialize_resource(@resource), status: :created }
+          else
+            format.json { render json: { errors: serialize_errors(@resource.errors) }, status: 422 }
+          end
+        end
+      end
+
+      def update
+        respond_to do |format|
+          if @resource.update(permitted_params)
+            format.json { render json: serialize_resource(@resource) }
+          else
+            format.json { render json: { errors: serialize_errors(@resource.errors) }, status: 422 }
+          end
+        end
+      end
+
+      def destroy
+        @resource.destroy
+        respond_to do |format|
+          format.json { render json: serialize_resource(@resource) }
+        end
+      end
+
+      def delete
+        @resource.delete
+        respond_to do |format|
+          format.json { render json: serialize_resource(@resource) }
+        end
+      end
+
+      private
+
+      def load_resource
+        raise "Please define #load_resource in #{self.class.name} and tell me how to load @resource."
+      end
+
+      def load_resource_for_show
+        begin
+          @resource = load_resource
+        rescue ActiveRecord::RecordNotFound
+          @resource = nil
+        end
+      end
+
+      def initialize_resource
+        @resource = resource_class.new
+      end
+
+      def initialize_resource_for_create
+        @resource = resource_class.new(permitted_params)
+      end
+
+      def permitted_params
+        raise "not implemented"
+      end
+    end
+  end
+end

data/app/concerns/rao/api/resource_controller/serialization_concern.rb

@@ -0,0 +1,19 @@
+module Rao
+  module Api
+    module ResourceController::SerializationConcern
+      extend ActiveSupport::Concern
+
+      private
+
+      def serialize_resource(resource)
+        json = resource.as_json
+        json[:errors] = serialize_errors(resource.errors) if resource.errors.any?
+        json
+      end
+
+      def serialize_errors(errors)
+        errors.as_json(full_messages: true)
+      end
+    end
+  end
+end

data/app/concerns/rao/api/resources_controller/rest_actions_concern.rb

@@ -49,7 +49,7 @@ module Rao
 
       def update
         respond_to do |format|
-          if @resource.update_attributes(permitted_params)
+          if @resource.update(permitted_params)
             format.json { render json: serialize_resource(@resource) }
           else
             format.json { render json: { errors: serialize_errors(@resource.errors) }, status: 422 }

data/app/concerns/rao/api/resources_controller/sorting_concern.rb

@@ -0,0 +1,30 @@
+module Rao
+  module Api
+    module ResourcesController::SortingConcern
+      private
+
+      def load_collection_scope
+        add_order_scope(super)
+      end
+
+      def add_order_scope(base_scope)
+        if params[:sort_by].present?
+          if params[:sort_by].include?(' ') || params[:sort_direction].include?(' ')
+            raise "Possible SQL Injection attempt while trying to sort by #{params[:sort_by]} #{params[:sort_direction]}"
+          end
+
+          sort_by        = params[:sort_by]
+          sort_direction = (params[:sort_direction] || :asc)
+
+          if sort_by.include?('.')
+            base_scope.reorder("#{sort_by} #{sort_direction}")
+          else
+            base_scope.reorder(sort_by => sort_direction)
+          end
+        else
+          base_scope
+        end
+      end
+    end
+  end
+end

data/app/controllers/rao/api/resource_controller/base.rb

@@ -0,0 +1,12 @@
+module Rao
+  module Api
+    module ResourceController
+      class Base < Rao::Api::ResourcesController::Configuration.resources_controller_base_class_name.constantize
+        include RestActionsConcern
+        include ResourceConcern
+        include SerializationConcern
+        include ExceptionHandlingConcern
+      end
+    end
+  end
+end

data/app/controllers/rao/api/resources_controller/base.rb

@@ -11,6 +11,7 @@ module Rao
         include FirstActionConcern
         include LastActionConcern
         include ExceptionHandlingConcern
+        include SortingConcern
       end
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rao-api-resources_controller
 version: !ruby/object:Gem::Version
-  version: 0.0.48.pre
+  version: 0.0.49.pre
 platform: ruby
 authors:
 - Roberto Vasquez Angel
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-07-21 00:00:00.000000000 Z
+date: 2023-04-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -160,6 +160,10 @@ files:
 - MIT-LICENSE
 - README.md
 - Rakefile
+- app/concerns/rao/api/resource_controller/exception_handling_concern.rb
+- app/concerns/rao/api/resource_controller/resource_concern.rb
+- app/concerns/rao/api/resource_controller/rest_actions_concern.rb
+- app/concerns/rao/api/resource_controller/serialization_concern.rb
 - app/concerns/rao/api/resources_controller/count_action_concern.rb
 - app/concerns/rao/api/resources_controller/delete_all_action_concern.rb
 - app/concerns/rao/api/resources_controller/destroy_all_action_concern.rb
@@ -169,6 +173,8 @@ files:
 - app/concerns/rao/api/resources_controller/resources_concern.rb
 - app/concerns/rao/api/resources_controller/rest_actions_concern.rb
 - app/concerns/rao/api/resources_controller/serialization_concern.rb
+- app/concerns/rao/api/resources_controller/sorting_concern.rb
+- app/controllers/rao/api/resource_controller/base.rb
 - app/controllers/rao/api/resources_controller/base.rb
 - config/locales/de.yml
 - config/locales/en.yml
@@ -199,7 +205,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 1.3.1
 requirements: []
-rubygems_version: 3.2.24
+rubygems_version: 3.4.11
 signing_key: 
 specification_version: 4
 summary: API Resources Controller for Ruby on Rails.