restaurant 0.1.2 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: b3f1d76c4e2e076ae74aab8564275da04ef24a55
-  data.tar.gz: d86e4d33694c9faba170aeec9deb699cb78be05c
+  metadata.gz: 7b71b7b9e2f1badd422562dbd949f97726687e86
+  data.tar.gz: a062a4d399caec20cc4632c4b18944202b8d1fda
 SHA512:
-  metadata.gz: 996b518bb2182fed86fd59e97ec8ae4f01a1d5c8570cc03c2132ee005c27d5a615226ae7ca8d99bb96046bc96151a4c0d4bcd75753b82efac759fa8daaf93fc0
-  data.tar.gz: ac833d067a1e7be9a37c95a1e2632c631394c29b9a2ebbc68214b63713bff71c60c02be4c9e65f883a6da247d2d254911b2377faeaf780a4211f267ea3ab7824
+  metadata.gz: 9f2b51e1b30de2786cb3ce4578073b6832a4e21863e84caf0e96886f65bd8eda8b42c7c980db443c5f6d8bde9ed69696d36a9437548d53f6b7800ddf5ab724b3
+  data.tar.gz: 04dbbaa38de272c411809c1a4d887feb24fe5b6a7fb0f4b80c62b2cb5b2148ba043bacedbaeb2e9ff6ca36ae5a84ce44241ca8b67eb7a651c0e6efd5b02a6e3a

data/README.md

@@ -90,7 +90,7 @@ module V1
 end
 ```
 
-### authentication & authorization
+### authentication
 Restaurant does not provide any auth layer, but it's easy to add it to your application.  
 Here is a short example to authenticate users with [doorkeeper](https://github.com/applicake/doorkeeper).
 
@@ -115,12 +115,52 @@ irb(main):002:0> app.get "/v2/recipes"
 => 401
 irb(main):003:0> application = Doorkeeper::Application.create(name: "example", redirect_uri: "http://example.com")
 => #<Doorkeeper::Application ...>
-irb(main):004:0> create = application.access_tokens.create
+irb(main):004:0> token = application.access_tokens.create
 => #<Doorkeeper::AccessToken ...>
 irb(main):005:0> app.get "/v2/recipes", access_token: token.token
 => 200
-irb(main):006:0> JSON.parse(app.response.body)
-=> [...]
+```
+
+### authorization
+Here is an example of a scope-based authorization system.
+
+```
+$ vi app/controllers/application_controller.rb
+class ApplicationController < ActionController::Base
+  doorkeeper_for :all
+  before_filter :require_authorization
+
+  private
+
+  def require_authorization
+    head 403 unless has_authorization?
+  end
+
+  def has_authorization?
+    doorkeeper_token.scopes.any? do |scope|
+      if role = Mongoid.default_session["roles"].find(:scope => scope).first
+        if action_names = role[resources_name]
+          action_names.include?(action_name)
+        end
+      end
+    end
+  end
+end
+
+$ rails c
+irb(main):001:0> app.accept = "application/json"
+irb(main):002:0> application = Doorkeeper::Application.create(name: "example", redirect_uri: "http://example.com")
+=> #<Doorkeeper::Application ...>
+irb(main):003:0> token = application.access_tokens.create(scopes: "admin")
+=> #<Doorkeeper::AccessToken ...>
+irb(main):004:0> app.get "/v2/recipes", access_token: token.token
+=> 403
+irb(main):005:0> Mongoid.default_session["roles"].insert(scope: "admin", recipes: ["index", "show"])
+=> nil
+irb(main):006:0> app.get "/v2/recipes", access_token: token.token
+=> 200
+irb(main):007:0> app.post "/v2/recipes", access_token: token.token, recipe: { title: "created" }
+=> 403
 ```
 
 ## More

data/lib/restaurant/actions.rb

@@ -2,6 +2,8 @@ module Restaurant
   module Actions
     def self.included(base)
       base.before_filter :require_valid_id, :require_resource, :only => [:show, :update, :destroy]
+      base.before_filter :add_created_at, :only => :create
+      base.before_filter :add_updated_at, :only => :update
     end
 
     def index
@@ -48,7 +50,7 @@ module Restaurant
     end
 
     def resource_params
-      params[resource_name] || {}
+      @resource_params ||= params[resource_name] || {}
     end
 
     def resource_id
@@ -66,31 +68,27 @@ module Restaurant
     end
 
     def sort_params
-      if params[:sort]
-        Hash[
-          params[:sort].map do |key, value|
-            [key, value.to_i]
-          end
-        ]
-      else
-        {}
-      end
+      Hash[(params[:sort] || []).map {|key, value| [key, value.to_i] }]
     end
 
     def skip_params
-      (page - 1) * per_page
+      ([params[:page].to_i, 1].max - 1) * per_page
     end
 
     def limit_params
       per_page
     end
 
-    def page
-      [params[:page].to_i, 1].max
-    end
-
     def per_page
       10
     end
+
+    def add_created_at
+      resource_params[:created_at] = resource_params[:updated_at] = Time.now
+    end
+
+    def add_updated_at
+      resource_params[:updated_at] = Time.now
+    end
   end
 end

data/lib/restaurant/version.rb

@@ -1,3 +1,3 @@
 module Restaurant
-  VERSION = "0.1.2"
+  VERSION = "0.1.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: restaurant
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.1.3
 platform: ruby
 authors:
 - Ryo Nakamura