rest_framework 1.0.1 → 1.1.0

data/lib/rest_framework/engine.rb

@@ -1,6 +1,6 @@
 class RESTFramework::Engine < Rails::Engine
-  initializer "rest_framework.assets" do
-    config.after_initialize do |app|
+  initializer "rest_framework.assets" do |app|
+    app.config.after_initialize do
       if RESTFramework.config.use_vendored_assets
         app.config.assets.precompile += [
           RESTFramework::EXTERNAL_CSS_NAME,
@@ -8,7 +8,11 @@ class RESTFramework::Engine < Rails::Engine
           *RESTFramework::EXTERNAL_UNSUMMARIZED_ASSETS.keys.map { |name| "rest_framework/#{name}" },
         ]
       end
+    end
+  end
 
+  initializer "rest_framework.register_api_renderer" do |app|
+    app.config.after_initialize do
       if RESTFramework.config.register_api_renderer
         ActionController::Renderers.add(:api) do |data, kwargs|
           render_api(data, **kwargs)
@@ -16,4 +20,10 @@ class RESTFramework::Engine < Rails::Engine
       end
     end
   end
+
+  initializer "rest_framework.deprecator" do |app|
+    if Rails::VERSION::MAJOR >= 8
+      app.deprecators[:rest_framework] = RESTFramework.deprecator
+    end
+  end
 end

data/lib/rest_framework/errors.rb

@@ -4,4 +4,3 @@ end
 require_relative "errors/base_error"
 
 require_relative "errors/nil_passed_to_render_api_error"
-require_relative "errors/unknown_model_error"

data/lib/rest_framework/filters/search_filter.rb

@@ -5,7 +5,7 @@ class RESTFramework::Filters::SearchFilter < RESTFramework::Filters::BaseFilter
       return search_fields&.map(&:to_s)
     end
 
-    columns = @controller.class.get_model.column_names
+    columns = @controller.class.model.column_names
     @controller.get_fields.select { |f|
       f.in?(RESTFramework.config.search_columns) && f.in?(columns)
     }
@@ -18,7 +18,7 @@ class RESTFramework::Filters::SearchFilter < RESTFramework::Filters::BaseFilter
     if search.present?
       if fields = self._get_fields.presence
         # MySQL doesn't support casting to VARCHAR, so we need to use CHAR instead.
-        data_type = if data.connection.adapter_name =~ /mysql/i
+        data_type = if data.connection.adapter_name =~ /mysql|trilogy/i
           "CHAR"
         else
           # Sufficient for both PostgreSQL and SQLite.

data/lib/rest_framework/mixins/base_controller_mixin.rb

@@ -1,390 +1,10 @@
-# This module provides the common functionality for any controller mixins, a `root` action, and
-# the ability to route arbitrary actions with `extra_actions`. This is also where `render_api` is
-# implemented.
 module RESTFramework::Mixins::BaseControllerMixin
-  RRF_BASE_CONFIG = {
-    extra_actions: nil,
-    extra_member_actions: nil,
-    singleton_controller: nil,
-
-    # Options related to metadata and display.
-    title: nil,
-    description: nil,
-    version: nil,
-    inflect_acronyms: [ "ID", "IDs", "REST", "API", "APIs" ].freeze,
-    openapi_include_children: false,
-
-    # Options related to serialization.
-    rescue_unknown_format_with: :json,
-    serializer_class: nil,
-    serialize_to_json: true,
-    serialize_to_xml: true,
-
-    # Options related to pagination.
-    paginator_class: nil,
-    page_size: 20,
-    page_query_param: "page",
-    page_size_query_param: "page_size",
-    max_page_size: nil,
-
-    # Option to disable serializer adapters by default, mainly introduced because Active Model
-    # Serializers will do things like serialize `[]` into `{"":[]}`.
-    disable_adapters_by_default: true,
-
-    # Custom integrations (reduces serializer performance due to method calls).
-    enable_action_text: false,
-    enable_active_storage: false,
-  }
-
-  # Default action for API root.
-  def root
-    render(api: { message: "This is the API root." })
-  end
-
-  module ClassMethods
-    # By default, this is the name of the controller class, titleized and with any custom inflection
-    # acronyms applied.
-    def get_title
-      self.title || RESTFramework::Utils.inflect(
-        self.name.demodulize.chomp("Controller").titleize(keep_id_suffix: true),
-        self.inflect_acronyms,
-      )
-    end
-
-    # Get a label from a field/column name, titleized and inflected.
-    def label_for(s)
-      RESTFramework::Utils.inflect(s.to_s.titleize(keep_id_suffix: true), self.inflect_acronyms)
-    end
-
-    # Define any behavior to execute at the end of controller definition.
-    # :nocov:
-    def rrf_finalize
-      if RESTFramework.config.freeze_config
-        self::RRF_BASE_CONFIG.keys.each { |k|
-          v = self.send(k)
-          v.freeze if v.is_a?(Hash) || v.is_a?(Array)
-        }
-      end
-    end
-    # :nocov:
-
-    def openapi_response_content_types
-      @openapi_response_content_types ||= [
-        "text/html",
-        self.serialize_to_json ? "application/json" : nil,
-        self.serialize_to_xml ? "application/xml" : nil,
-      ].compact
-    end
-
-    def openapi_request_content_types
-      @openapi_request_content_types ||= [
-        "application/json",
-        "application/x-www-form-urlencoded",
-        "multipart/form-data",
-      ]
-    end
-
-    def openapi_paths(routes, tag)
-      resp_cts = self.openapi_response_content_types
-      req_cts = self.openapi_request_content_types
-
-      routes.group_by { |r| r[:concat_path] }.map { |concat_path, routes|
-        [
-          concat_path.gsub(/:([0-9A-Za-z_-]+)/, "{\\1}"),
-          routes.map { |route|
-            metadata = RESTFramework::ROUTE_METADATA[route[:path]] || {}
-            summary = metadata.delete(:label).presence || self.label_for(route[:action])
-            description = metadata.delete(:description).presence
-            extra_action = RESTFramework::EXTRA_ACTION_ROUTES.include?(route[:path])
-            error_response = { "$ref" => "#/components/responses/BadRequest" }
-            not_found_response = { "$ref" => "#/components/responses/NotFound" }
-            spec = { tags: [ tag ], summary: summary, description: description }.compact
-
-            # All routes should have a successful response.
-            spec[:responses] = {
-              200 => { content: resp_cts.map { |ct| [ ct, {} ] }.to_h, description: "Success" },
-            }
-
-            # Builtin POST, PUT, PATCH, and DELETE should have a 400 and 404 response.
-            if route[:verb].in?([ "POST", "PUT", "PATCH", "DELETE" ]) && !extra_action
-              spec[:responses][400] = error_response
-              spec[:responses][404] = not_found_response
-            end
-
-            # All POST, PUT, PATCH should have a request body.
-            if route[:verb].in?([ "POST", "PUT", "PATCH" ])
-              spec[:requestBody] ||= { content: req_cts.map { |ct| [ ct, {} ] }.to_h }
-            end
-
-            # Add remaining metadata as an extension.
-            spec["x-rrf-metadata"] = metadata if metadata.present?
-
-            next route[:verb].downcase, spec
-          }.to_h.merge(
-            {
-              parameters: routes.first[:route].required_parts.map { |p|
-                {
-                  name: p,
-                  in: "path",
-                  required: true,
-                  schema: { type: "integer" },
-                }
-              },
-            },
-          ),
-        ]
-      }.to_h
-    end
-
-    def openapi_document(request, route_group_name, routes)
-      server = request.base_url + request.original_fullpath.gsub(/\?.*/, "")
-
-      {
-        openapi: "3.1.1",
-        info: {
-          title: self.get_title,
-          description: self.description,
-          version: self.version.to_s,
-        }.compact,
-        servers: [ { url: server } ],
-        paths: self.openapi_paths(routes, route_group_name),
-        tags: [ { name: route_group_name, description: self.description }.compact ],
-        components: {
-          schemas: {
-            "Error" => {
-              type: "object",
-              required: [ "message" ],
-              properties: {
-                message: { type: "string" },
-                errors: { type: "object" },
-                exception: { type: "string" },
-              },
-            },
-          },
-          responses: {
-            "BadRequest": {
-              description: "Bad Request",
-              content: self.openapi_response_content_types.map { |ct|
-                [
-                  ct,
-                  ct == "text/html" ? {} : { schema: { "$ref" => "#/components/schemas/Error" } },
-                ]
-              }.to_h,
-            },
-            "NotFound": {
-              description: "Not Found",
-              content: self.openapi_response_content_types.map { |ct|
-                [
-                  ct,
-                  ct == "text/html" ? {} : { schema: { "$ref" => "#/components/schemas/Error" } },
-                ]
-              }.to_h,
-            },
-          },
-        },
-      }.compact
-    end
-  end
-
   def self.included(base)
-    return unless base.is_a?(Class)
-
-    base.extend(ClassMethods)
-
-    # By default, the layout should be set to `rest_framework`.
-    base.layout("rest_framework")
-
-    # Add class attributes unless they already exist.
-    RRF_BASE_CONFIG.each do |a, default|
-      next if base.respond_to?(a)
-
-      # Don't leak class attributes to the instance to avoid conflicting with action methods.
-      base.class_attribute(a, default: default, instance_accessor: false)
-    end
-
-    # Alias `extra_actions` to `extra_collection_actions`.
-    unless base.respond_to?(:extra_collection_actions)
-      base.singleton_class.alias_method(:extra_collection_actions, :extra_actions)
-      base.singleton_class.alias_method(:extra_collection_actions=, :extra_actions=)
-    end
-
-    # Skip CSRF since this is an API.
-    begin
-      base.skip_before_action(:verify_authenticity_token)
-    rescue
-      nil
-    end
-
-    # Handle some common exceptions.
-    unless RESTFramework.config.disable_rescue_from
-      base.rescue_from(
-        ActionController::ParameterMissing,
-        ActionController::UnpermittedParameters,
-        ActionDispatch::Http::Parameters::ParseError,
-        ActiveRecord::AssociationTypeMismatch,
-        ActiveRecord::NotNullViolation,
-        ActiveRecord::RecordNotFound,
-        ActiveRecord::RecordInvalid,
-        ActiveRecord::RecordNotSaved,
-        ActiveRecord::RecordNotDestroyed,
-        ActiveRecord::RecordNotUnique,
-        ActiveModel::UnknownAttributeError,
-        with: :rrf_error_handler,
-      )
-    end
-
-    # Use `TracePoint` hook to automatically call `rrf_finalize`.
-    if RESTFramework.config.auto_finalize
-      # :nocov:
-      TracePoint.trace(:end) do |t|
-        next if base != t.self
-
-        base.rrf_finalize
-
-        # It's important to disable the trace once we've found the end of the base class definition,
-        # for performance.
-        t.disable
-      end
-      # :nocov:
-    end
-  end
-
-  def get_serializer_class
-    self.class.serializer_class
-  end
-
-  # Serialize the given data using the `serializer_class`.
-  def serialize(data, **kwargs)
-    RESTFramework::Utils.wrap_ams(self.get_serializer_class).new(
-      data, controller: self, **kwargs
-    ).serialize
-  end
-
-  def rrf_error_handler(e)
-    status = case e
-    when ActiveRecord::RecordNotFound
-      404
-    else
-      400
-    end
-
-    render(
-      api: {
-        message: e.message,
-        errors: e.try(:record).try(:errors),
-        exception: RESTFramework.config.show_backtrace ? e.full_message : nil,
-      }.compact,
-      status: status,
+    RESTFramework.deprecator.warn(
+      "BaseControllerMixin is deprecated; use RESTFramework::Controller instead.",
     )
-  end
-
-  def route_groups
-    @route_groups ||= RESTFramework::Utils.get_routes(Rails.application.routes, request)
-  end
-
-  # Render a browsable API for `html` format, along with basic `json`/`xml` formats, and with
-  # support or passing custom `kwargs` to the underlying `render` calls.
-  def render_api(payload, **kwargs)
-    html_kwargs = kwargs.delete(:html_kwargs) || {}
-    json_kwargs = kwargs.delete(:json_kwargs) || {}
-    xml_kwargs = kwargs.delete(:xml_kwargs) || {}
-
-    # Raise helpful error if payload is nil. Usually this happens when a record is not found (e.g.,
-    # when passing something like `User.find_by(id: some_id)` to `render_api`). The caller should
-    # actually be calling `find_by!` to raise ActiveRecord::RecordNotFound and allowing the REST
-    # framework to catch this error and return an appropriate error response.
-    if payload.nil?
-      raise RESTFramework::NilPassedToRenderAPIError
-    end
-
-    # If `payload` is an `ActiveRecord::Relation` or `ActiveRecord::Base`, then serialize it.
-    if payload.is_a?(ActiveRecord::Base) || payload.is_a?(ActiveRecord::Relation)
-      payload = self.serialize(payload)
-    end
-
-    # Do not use any adapters by default, if configured.
-    if self.class.disable_adapters_by_default && !kwargs.key?(:adapter)
-      kwargs[:adapter] = nil
-    end
-
-    # Flag to track if we had to rescue unknown format.
-    already_rescued_unknown_format = false
-
-    begin
-      respond_to do |format|
-        if payload == ""
-          format.json { head(kwargs[:status] || :no_content) } if self.class.serialize_to_json
-          format.xml { head(kwargs[:status] || :no_content) } if self.class.serialize_to_xml
-        else
-          format.json {
-            render(json: payload, **kwargs.merge(json_kwargs))
-          } if self.class.serialize_to_json
-          format.xml {
-            render(xml: payload, **kwargs.merge(xml_kwargs))
-          } if self.class.serialize_to_xml
-          # TODO: possibly support more formats here if supported?
-        end
-        format.html {
-          @payload = payload
-          if payload == ""
-            @json_payload = "" if self.class.serialize_to_json
-            @xml_payload = "" if self.class.serialize_to_xml
-          else
-            @json_payload = payload.to_json if self.class.serialize_to_json
-            @xml_payload = payload.to_xml if self.class.serialize_to_xml
-          end
-          @title ||= self.class.get_title
-          @description ||= self.class.description
-          self.route_groups
-          begin
-            render(**kwargs.merge(html_kwargs))
-          rescue ActionView::MissingTemplate
-            # A view is not required, so just use `html: ""`.
-            render(html: "", layout: true, **kwargs.merge(html_kwargs))
-          end
-        }
-      end
-    rescue ActionController::UnknownFormat
-      if !already_rescued_unknown_format && rescue_format = self.class.rescue_unknown_format_with
-        request.format = rescue_format
-        already_rescued_unknown_format = true
-        retry
-      else
-        raise
-      end
-    end
-  end
-
-  # Compatibility alias for deprecated `api_response`.
-  alias_method :api_response, :render_api
-
-  def openapi_document
-    first, *rest = self.route_groups.to_a
-    document = self.class.openapi_document(request, *first)
-
-    if self.class.openapi_include_children
-      rest.each do |route_group_name, routes|
-        controller = "#{routes.first[:route].defaults[:controller]}_controller".camelize.constantize
-        child_document = controller.openapi_document(request, route_group_name, routes)
-
-        # Merge child paths and tags into the parent document.
-        document[:paths].merge!(child_document[:paths])
-        document[:tags] += child_document[:tags]
-
-        # If the child document has schemas, merge them into the parent document.
-        if schemas = child_document.dig(:components, :schemas)  # rubocop:disable Style/Next
-          document[:components] ||= {}
-          document[:components][:schemas] ||= {}
-          document[:components][:schemas].merge!(schemas)
-        end
-      end
-    end
-
-    document
-  end
 
-  def options
-    render(api: self.openapi_document)
+    base.include(RESTFramework::Controller)
   end
 end
 

data/lib/rest_framework/mixins/bulk_model_controller_mixin.rb

@@ -1,91 +1,50 @@
-require_relative "model_controller_mixin"
-
-# Mixin for creating records in bulk. This is unique compared to update/destroy because we overload
-# the existing `create` action to support bulk creation.
 module RESTFramework::Mixins::BulkCreateModelMixin
-  # While bulk update/destroy are obvious because they create new router endpoints, bulk create
-  # overloads the existing collection `POST` endpoint, so we add a special key to the OpenAPI
-  # metadata to indicate bulk create is supported.
-  def openapi_document
-    super.merge({ "x-rrf-bulk-create": true })
-  end
-
-  def create
-    if params[:_json].is_a?(Array)
-      records = self.create_all!
-      serialized_records = self.bulk_serialize(records)
-      return render(api: serialized_records)
-    end
-
-    super
-  end
-
-  # Perform the `create` call, and return the collection of (possibly) created records.
-  def create_all!
-    create_data = self.get_create_params(bulk_mode: true)[:_json]
+  def self.included(base)
+    RESTFramework.deprecator.warn(<<~TXT).squish
+      BulkCreateModelMixin is deprecated; set the `bulk = true` class attribute instead.
+    TXT
 
-    # Perform bulk create in a transaction.
-    ActiveRecord::Base.transaction { self.create_from.create(create_data) }
+    base.bulk = true
   end
 end
 
 # Mixin for updating records in bulk.
 module RESTFramework::Mixins::BulkUpdateModelMixin
-  def update_all
-    records = self.update_all!
-    serialized_records = self.bulk_serialize(records)
-    render(api: serialized_records)
-  end
-
-  # Perform the `update` call and return the collection of (possibly) updated records.
-  def update_all!
-    pk = self.class.get_model.primary_key
-    data = if params[:_json].is_a?(Array)
-      self.get_create_params(bulk_mode: :update)[:_json].index_by { |r| r[pk] }
-    else
-      create_params = self.get_create_params
-      { create_params[pk] => create_params }
-    end
+  def self.included(base)
+    RESTFramework.deprecator.warn(<<~TXT).squish
+      BulkUpdateModelMixin is deprecated; set the `bulk = true`, and `excluded_actions` class
+      attributes instead.
+    TXT
 
-    # Perform bulk update in a transaction.
-    ActiveRecord::Base.transaction { self.get_recordset.update(data.keys, data.values) }
+    base.bulk = true
+    base.excluded_actions = (base.excluded_actions - [ :update_all ]).freeze
   end
 end
 
 # Mixin for destroying records in bulk.
 module RESTFramework::Mixins::BulkDestroyModelMixin
-  def destroy_all
-    if params[:_json].is_a?(Array)
-      records = self.destroy_all!
-      serialized_records = self.bulk_serialize(records)
-      return render(api: serialized_records)
-    end
-
-    render(
-      api: { message: "Bulk destroy requires an array of primary keys as input." }, status: 400,
-    )
-  end
-
-  # Perform the `destroy!` call and return the destroyed (and frozen) record.
-  def destroy_all!
-    pk = self.class.get_model.primary_key
-    destroy_data = self.request.request_parameters[:_json]
+  def self.included(base)
+    RESTFramework.deprecator.warn(<<~TXT).squish
+      BulkDestroyModelMixin is deprecated; set the `bulk = true`, and `excluded_actions` class
+      attributes instead.
+    TXT
 
-    # Perform bulk destroy in a transaction.
-    ActiveRecord::Base.transaction { self.get_recordset.where(pk => destroy_data).destroy_all }
+    base.bulk = true
+    base.excluded_actions = (base.excluded_actions - [ :destroy_all ]).freeze
   end
 end
 
 # Mixin that includes all the CRUD bulk mixins.
 module RESTFramework::Mixins::BulkModelControllerMixin
-  include RESTFramework::Mixins::ModelControllerMixin
-
-  include RESTFramework::Mixins::BulkCreateModelMixin
-  include RESTFramework::Mixins::BulkUpdateModelMixin
-  include RESTFramework::Mixins::BulkDestroyModelMixin
-
   def self.included(base)
-    RESTFramework::Mixins::ModelControllerMixin.included(base)
+    RESTFramework.deprecator.warn(<<~TXT).squish
+      BulkModelControllerMixin is deprecated; use RESTFramework::Controller and set the `model` and
+      `bulk = true` class attributes instead.
+    TXT
+
+    base.include(RESTFramework::Controller)
+    base.model = RESTFramework::Utils.get_model(base)
+    base.bulk = true
   end
 end