restme 1.3.0 → 1.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a2993fdfed0cd616219142038db44085a76bd4f24e10f4ea758947527613a8d5
-  data.tar.gz: 8fa26f48ba3c9fab9bb72d95217e809245b8e0c22aa8aabee009a5aa9d340c60
+  metadata.gz: e2516a111b171a33790f33c9d1eb3e8b86235ee1098355fd6255874f7c3da4ee
+  data.tar.gz: 80480f4119cd76fb00617260768ca3bbb3bc4981cd2529a8c170e6b6d82b9460
 SHA512:
-  metadata.gz: f5b0089277d026cd4580caabe24402c690db46ba2631cdb12c55f4d51a8166a2afc728f82200a6c8c6fabb49b9b3077d163d6aac9697a2aa1d791dbddacb9115
-  data.tar.gz: 0d3525d0dbb9a0795396a96e681890698b3ba4bb6e646732880218b5aa378e00714f3125d54e6d656cc9c3f6242fa8aaa14f3c61451b936fac308d7ac0f25ebe
+  metadata.gz: 0321eb54e6fc00497b0d8b9edd93dc330b8baba2c902f1dae62b1fd9290634935344529fa3472c888145f173f52d74638a36cf7cd8f782b2b93caf0e2acc0d3f
+  data.tar.gz: fb28214a0996952bf2dab3bad2f405a18c482f4d3da32867dc3f1e981ee8b051ca624862b91795a3026ae980ef2327526b1e4b61fa2bc19787217bc051309546

data/README.md

@@ -28,7 +28,7 @@ gem 'restme'
 
 #### ℹ️ Current Version of gem require the following pré configs
  - Your controllers must be named using the plural form of the model (e.g., Product → ProductsController). Alternatively, you can manually set the model name by defining the MODEL_NAME constant (e.g., MODEL_NAME = "Product").
- - You must create a folder inside app named restfy to define controller rules for authorization, scoping, creation, updating, and field selection (see example below).
+ - You must create a folder inside app named restme to define controller rules for authorization, scoping, creation, updating, and field selection (see example below).
 
 
 <br>
@@ -239,6 +239,8 @@ module ProductsController::Field
    # These fields are always included in the response.
    MODEL_FIELDS_SELECT = %i[id].freeze
 
+   UNALLOWED_MODEL_FIELDS_SELECT = %i[internal_code].freeze
+
     NESTED_SELECTABLE_FIELDS = {
       unit: {},
       establishment: {},
@@ -329,8 +331,8 @@ http://localhost:3000/api/v1/products?per_page=12&page=1
 
 #### Field Selection (`fields_select`)
 
-You can select specific fields from your model, such as `id`, `name`, or `created_at`.  
-The resulting query will retrieve **only** the selected fields directly from the database, improving performance.
+You can select specific fields from your model, such as `id`, `name`, or `created_at`.
+The generated query will retrieve only the selected fields directly from the database, reducing unnecessary data loading and improving performance.
 
 Example:
 
@@ -338,6 +340,13 @@ Example:
 http://localhost:3000/api/v1/products?fields_select=id,name
 ```
 
+If you need to prevent a specific field from being returned in the response — even when it is selected — simply override the as_json method in the corresponding model:
+```ruby
+def as_json(options = {})
+  super({ except: [:name] }.merge(options))
+end
+```
+
 <br><br>
 
 

data/lib/restme/scope/field/attachable.rb

@@ -25,10 +25,13 @@ module Restme
 
         def define_attachment_methods
           attachment_fields_select.each do |attachment_field_name|
-            klass.class_eval do
-              define_method(:"#{attachment_field_name}_url") do
-                send(attachment_field_name).url
-              end
+            method_name = "#{attachment_field_name}_url"
+
+            next if klass.method_defined?(method_name)
+
+            klass.define_method(method_name) do
+              attachment = public_send(attachment_field_name)
+              attachment&.url
             end
           end
         end
@@ -50,10 +53,9 @@ module Restme
         def unallowed_attachment_fields_error
           return if unallowed_attachment_fields.blank?
 
-          render json: {
-            body: unallowed_attachment_fields,
-            message: "Selected not allowed attachment fields"
-          }, status: :bad_request
+          restme_scope_errors({ body: unallowed_attachment_fields, message: "Selected not allowed attachment fields" })
+
+          restme_scope_status(:bad_request)
         end
 
         def unallowed_attachment_fields

data/lib/restme/scope/field/rules.rb

@@ -38,21 +38,23 @@ module Restme
         end
 
         def select_selected_fields
-          @select_selected_fields ||= begin
-            fields = defined_fields_select | fields_select.split(",")
-
-            fields.map { |field| "#{klass.table_name}.#{field}" }.join(",")
-          end
+          @select_selected_fields ||= defined_fields_select | fields_select.split(",").map(&:to_s)
         end
 
         def model_attributes
-          @model_attributes ||= klass.attribute_names
+          @model_attributes ||= klass.attribute_names - unallowed_model_fields_select
         end
 
         def defined_fields_select
           return [] unless field_class_rules&.const_defined?(:MODEL_FIELDS_SELECT)
 
-          field_class_rules::MODEL_FIELDS_SELECT || []
+          (field_class_rules::MODEL_FIELDS_SELECT || []).map(&:to_s)
+        end
+
+        def unallowed_model_fields_select
+          return [] unless field_class_rules&.const_defined?(:UNALLOWED_MODEL_FIELDS_SELECT)
+
+          (field_class_rules::UNALLOWED_MODEL_FIELDS_SELECT || []).map(&:to_s)
         end
 
         def valid_nested_fields_select
@@ -108,7 +110,7 @@ module Restme
         end
 
         def field_class_rules
-          "#{controller_class.to_s.split("::").last}::Field::Rules".constantize
+          "#{controller_class.to_s.split("::").last}::Field::Rules".safe_constantize
         end
       end
     end

data/lib/restme/scope/rules.rb

@@ -30,6 +30,7 @@ module Restme
         unknown_sortable_fields_errors
         unallowed_filter_fields_errors
         unallowed_select_fields_errors
+        unallowed_attachment_fields_error
       ].freeze
 
       def pagination_response

data/lib/restme/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Restme
-  VERSION = "1.3.0"
+  VERSION = "1.3.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: restme
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 1.3.2
 platform: ruby
 authors:
 - everson-ever