solidus_api 4.8.0 → 4.8.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f4ff5000b131bd3d2fce8bc9e81165d860447f4c5a94d5364852af656fa4de8d
-  data.tar.gz: b46b662948606c65253e766a0b207ea00ad473aa217811b70a0d4bdee2c69c8a
+  metadata.gz: d263182b8d9ee2d2072f32c87022a1e0883b1522b898db8dadab534674cf70ce
+  data.tar.gz: 9c4036c14c41532ff348e3a444e8c720c589914ad3641f0e9f5132c21792c925
 SHA512:
-  metadata.gz: 8519bddff6d7f9b5dc478d19a1ef09b7f68473a89f94ab044c5c45e462bf93e72986888f2a6e5bc2dd0075f43d41330da07e0e9ba6955f751720f24a61fffbed
-  data.tar.gz: d0ee7c6a4d2584a00bbeb88e8442c3d6985e1c6f66590007458744cd3f11a2a9bbe9a06b88eddcba449dd7cf0d8fa239e513380ae9df3466fffb0726c8391ca1
+  metadata.gz: 5ee813760d0c3f5f2c1c15b276587ab109e8897b80ac71f014b064a5eb02628e07fbcab21c674539fd668d0b5e864d06eaf6e1600278978ec6565724ba99d869
+  data.tar.gz: 357c9e20c2accc9a98b78b408d440063b82fc2787f887061188981eb3fd788224cebdf3c76da59aa986f56b2894d9298833989c16252ac2aba3f3fa19098d8b6

data/app/controllers/spree/api/addresses_controller.rb

@@ -15,7 +15,7 @@ module Spree
         authorize! :update, @order, order_token
         find_address
 
-        success = @order.update({"#{@order_source}_attributes" => address_params})
+        success = @order.contents.update_cart({"#{@order_source}_attributes" => address_params})
         @address = @order.send(@order_source)
 
         if success

data/app/controllers/spree/api/orders_controller.rb

@@ -121,6 +121,7 @@ module Spree
         if params[:order]
           normalize_params
           prevent_customer_metadata_update
+          prevent_line_item_variant_update
           params.require(:order).permit(permitted_order_attributes)
         else
           {}
@@ -133,6 +134,16 @@ module Spree
         params[:order]&.delete(:customer_metadata)
       end
 
+      def prevent_line_item_variant_update
+        line_items_attributes = params[:order][:line_items_attributes]
+        return unless line_items_attributes
+
+        line_items_attributes = line_items_attributes.values unless line_items_attributes.is_a?(Array)
+        line_items_attributes.each do |line_item_attributes|
+          line_item_attributes.delete(:variant_id) if line_item_attributes[:id].present?
+        end
+      end
+
       def normalize_params
         if params[:order][:payments]
           payments_params = params[:order].delete(:payments)

data/app/controllers/spree/api/products_controller.rb

@@ -15,8 +15,7 @@ module Spree
 
         @products = @products.includes(products_includes)
         @products = paginate(@products.distinct)
-        expires_in 15.minutes, public: true
-        headers["Surrogate-Control"] = "max-age=#{15.minutes}"
+        set_cache_headers
         respond_with(@products)
       end
 
@@ -25,9 +24,7 @@ module Spree
 
       def show
         @product = find_product(params[:id])
-        expires_in 15.minutes, public: true
-        headers["Surrogate-Control"] = "max-age=#{15.minutes}"
-        headers["Surrogate-Key"] = "product_id=1"
+        set_cache_headers(surrogate_key: "product_id=#{@product.id}")
         respond_with(@product)
       end
 
@@ -115,6 +112,14 @@ module Spree
 
       def variants_includes = {stock_items: :stock_location, images: Spree::Image.attachment_preloads}
 
+      def set_cache_headers(surrogate_key: nil)
+        return if current_api_user
+
+        expires_in 15.minutes, public: true
+        headers["Surrogate-Control"] = "max-age=#{15.minutes}"
+        headers["Surrogate-Key"] = surrogate_key if surrogate_key
+      end
+
       def product_params
         product_params = params.require(:product).permit(permitted_product_attributes)
         if product_params[:taxon_ids].present?

data/app/controllers/spree/api/shipments_controller.rb

@@ -99,7 +99,10 @@ module Spree
       end
 
       def transfer_to_shipment
-        @desired_shipment ||= Spree::Shipment.find_by!(number: params[:target_shipment_number])
+        unless @desired_shipment
+          @desired_shipment = @original_shipment.order.shipments.find_by!(number: params[:target_shipment_number])
+          authorize! :update, @desired_shipment
+        end
 
         fulfilment_changer = Spree::FulfilmentChanger.new(
           current_shipment: @original_shipment,

data/app/views/spree/api/line_items/_line_item.json.jbuilder

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-json.cache! [I18n.locale, line_item] do
+json.cache! [I18n.locale, line_item, line_item_attributes, variant_attributes] do
   json.call(line_item, *line_item_attributes)
   json.single_display_amount(line_item.single_display_amount.to_s)
   json.display_amount(line_item.display_amount.to_s)

data/app/views/spree/api/orders/_order.json.jbuilder

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-json.cache! [I18n.locale, order] do
+json.cache! [I18n.locale, order, order_attributes] do
   json.call(order, *order_attributes)
   json.display_item_total(order.display_item_total.to_s)
   json.total_quantity(order.line_items.to_a.sum(&:quantity))

data/app/views/spree/api/shipments/_big.json.jbuilder

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-json.cache! [I18n.locale, shipment] do
+json.cache! [I18n.locale, shipment, shipment_attributes, line_item_attributes, order_attributes, variant_attributes] do
   json.call(shipment, *shipment_attributes)
   json.partial!("spree/api/shipments/small", shipment:)
   json.inventory_units(shipment.inventory_units) do |inventory_unit|

data/app/views/spree/api/shipments/_small.json.jbuilder

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-json.cache! [I18n.locale, shipment] do
+json.cache! [I18n.locale, shipment, shipment_attributes] do
   json.call(shipment, *shipment_attributes)
   json.order_id(shipment.order.number)
   json.stock_location_name(shipment.stock_location.name)

data/app/views/spree/api/shipments/show.json.jbuilder

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-json.cache! [I18n.locale, @shipment] do
+json.cache! [I18n.locale, @shipment, shipment_attributes, variant_attributes] do
   json.call(@shipment, *shipment_attributes)
   json.order_id(@shipment.order.number)
   json.stock_location_name(@shipment.stock_location.name)

data/app/views/spree/api/variants/_big.json.jbuilder

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-json.cache! [I18n.locale, Spree::StockLocation.accessible_by(current_ability), variant] do
+json.cache! [I18n.locale, Spree::StockLocation.accessible_by(current_ability), variant, variant_attributes] do
   json.call(variant, *variant_attributes)
   json.partial!("spree/api/variants/small", variant:)
   json.variant_properties(variant.variant_properties) do |variant_property|

data/app/views/spree/api/variants/_small.json.jbuilder

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-json.cache! [I18n.locale, current_pricing_options, variant] do
+json.cache! [I18n.locale, current_pricing_options, variant, variant_attributes] do
   json.call(variant, *variant_attributes)
   json.price(variant.price_for_options(current_pricing_options)&.amount)
   json.display_price(variant.price_for_options(current_pricing_options)&.money&.to_s)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: solidus_api
 version: !ruby/object:Gem::Version
-  version: 4.8.0
+  version: 4.8.1
 platform: ruby
 authors:
 - Solidus Team
@@ -57,14 +57,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.8.0
+        version: 4.8.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.8.0
+        version: 4.8.1
 description: REST API for the Solidus e-commerce framework.
 email: contact@solidus.io
 executables: []
@@ -272,7 +272,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 1.8.23
 requirements: []
-rubygems_version: 4.0.20
+rubygems_version: 4.0.10
 specification_version: 4
 summary: REST API for the Solidus e-commerce framework.
 test_files: []