spree_api 1.0.7 → 1.1.0.rc1

data/app/assets/stylesheets/admin/spree.css

@@ -1,6 +0,0 @@
-/*
- *= require admin/spree_core
- *= require admin/spree_auth
- *= require admin/spree_api
- *= require admin/spree_promo
-*/

data/app/assets/stylesheets/admin/spree_api.css

@@ -1,4 +0,0 @@
-/*
- *= require admin/spree_core
- *= require admin/spree_auth
-*/

data/app/assets/stylesheets/store/spree.css

@@ -1,6 +0,0 @@
-/*
- *= require store/spree_core
- *= require store/spree_auth
- *= require store/spree_api
- *= require store/spree_promo
-*/

data/app/assets/stylesheets/store/spree_api.css

@@ -1,4 +0,0 @@
-/*
- *= require store/spree_core
- *= require store/spree_auth
-*/

data/app/controllers/spree/admin/users_controller_decorator.rb

@@ -1,17 +0,0 @@
-Spree::Admin::UsersController.class_eval do
-  before_filter :load_roles, :only => [:edit, :new, :update, :create, :generate_api_key, :clear_api_key]
-
-  def generate_api_key
-    if @user.generate_api_key!
-      flash.notice = t('api.key_generated')
-    end
-    redirect_to edit_admin_user_path(@user)
-  end
-
-  def clear_api_key
-    if @user.clear_api_key!
-      flash.notice = t('api.key_cleared')
-    end
-    redirect_to edit_admin_user_path(@user)
-  end
-end

data/app/controllers/spree/api/base_controller.rb

@@ -1,172 +0,0 @@
-class Spree::Api::BaseController < Spree::BaseController
-  before_filter :check_http_authorization
-  before_filter :load_resource
-  skip_before_filter :verify_authenticity_token, :if => lambda { admin_token_passed_in_headers }
-
-  respond_to :json
-
-  def index
-    respond_with(@collection) do |format|
-      format.json { render :json => @collection.to_json(collection_serialization_options) }
-    end
-  end
-
-  def show
-    respond_with(@object) do |format|
-      format.json { render :json => @object.to_json(object_serialization_options) }
-    end
-  end
-
-  def create
-    if @object.save
-      render :text => "Resource created\n", :status => 201, :location => object_url
-    else
-      respond_with(@object.errors, :status => 422)
-    end
-  end
-
-  def update
-    if @object.update_attributes(params[object_name])
-      render :nothing => true
-    else
-      respond_with(@object.errors, :status => 422)
-    end
-  end
-
-  def admin_token_passed_in_headers
-    request.headers['HTTP_AUTHORIZATION'].present?
-  end
-
-  def access_denied
-    render :text => 'access_denied', :status => 401
-  end
-
-  # Generic action to handle firing of state events on an object
-  def event
-    valid_events = model_class.state_machine.events.map(&:name)
-    valid_events_for_object = @object ? @object.state_transitions.map(&:event) : []
-
-    if params[:e].blank?
-      errors = t('api.errors.missing_event')
-    elsif valid_events_for_object.include?(params[:e].to_sym)
-      @object.send("#{params[:e]}!")
-      errors = nil
-    elsif valid_events.include?(params[:e].to_sym)
-      errors = t('api.errors.invalid_event_for_object', :events => valid_events_for_object.join(','))
-    else
-      errors = t('api.errors.invalid_event', :events => valid_events.join(','))
-    end
-
-    respond_to do |wants|
-      wants.json do
-        if errors.blank?
-          render :nothing => true
-        else
-          render :json => errors.to_json, :status => 422
-        end
-      end
-    end
-  end
-
-  protected
-    def model_class
-      "Spree::#{controller_name.classify}".constantize
-    end
-
-    def object_name
-      controller_name.singularize
-    end
-
-    def load_resource
-      if member_action?
-        @object ||= load_resource_instance
-        instance_variable_set("@#{object_name}", @object)
-      else
-        @collection ||= collection
-        instance_variable_set("@#{controller_name}", @collection)
-      end
-    end
-
-    def load_resource_instance
-      if new_actions.include?(params[:action].to_sym)
-        build_resource
-      elsif params[:id]
-        find_resource
-      end
-    end
-
-    def parent
-      nil
-    end
-
-    def find_resource
-      if parent.present?
-        parent.send(controller_name).find(params[:id])
-      else
-        model_class.includes(eager_load_associations).find(params[:id])
-      end
-    end
-
-    def build_resource
-      if parent.present?
-        parent.send(controller_name).build(params[object_name])
-      else
-        model_class.new(params[object_name])
-      end
-    end
-
-    def collection
-      return @search unless @search.nil?
-      params[:search] = {} if params[:search].blank?
-      params[:search][:meta_sort] = 'created_at.desc' if params[:search][:meta_sort].blank?
-
-      scope = parent.present? ? parent.send(controller_name) : model_class.scoped
-
-      @search = scope.metasearch(params[:search]).relation.limit(100)
-      @search
-    end
-
-    def collection_serialization_options
-      {}
-    end
-
-    def object_serialization_options
-      {}
-    end
-
-    def eager_load_associations
-      nil
-    end
-
-    def object_errors
-      {:errors => object.errors.full_messages}
-    end
-
-    def object_url(object = nil, options = {})
-      target = object ? object : @object
-      if parent.present?
-        send "admin_#{parent[:model_name]}_#{object_name}_url", parent, target, options
-      else
-        send "admin_#{object_name}_url", target, options
-      end
-    end
-
-    def collection_actions
-      [:index]
-    end
-
-    def member_action?
-      !collection_actions.include? params[:action].to_sym
-    end
-
-    def new_actions
-      [:new, :create]
-    end
-
-  private
-    def check_http_authorization
-      if request.headers['HTTP_AUTHORIZATION'].blank?
-        render :text => "Access Denied\n", :status => 401
-      end
-    end
-end

data/app/controllers/spree/api/countries_controller.rb

@@ -1,3 +0,0 @@
-class Spree::Api::CountriesController < Spree::Api::BaseController
-  before_filter :access_denied, :except => [:index, :show]
-end

data/app/controllers/spree/api/inventory_units_controller.rb

@@ -1,18 +0,0 @@
-class Spree::Api::InventoryUnitsController < Spree::Api::BaseController
-  private
-    def parent
-      if params[:order_id]
-        @parent = Spree::Order.find_by_param(params[:order_id])
-      elsif params[:shipment_id]
-        @parent = Spree::Shipment.find_by_param(params[:shipment_id])
-      end
-    end
-
-    def parent_data
-      [params[:order_id], params[:shipment_id]].compact
-    end
-
-    def eager_load_associations
-      [:variant]
-    end
-end

data/app/controllers/spree/api/line_items_controller.rb

@@ -1,20 +0,0 @@
-class Spree::Api::LineItemsController < Spree::Api::BaseController
-  private
-    def parent
-      if params[:order_id]
-        @parent ||= Spree::Order.find_by_param(params[:order_id])
-      end
-    end
-
-    def parent_data
-      params[:order_id]
-    end
-
-    def collection_serialization_options
-      { :include => [:variant], :methods => [:description] }
-    end
-
-    def object_serialization_options
-      collection_serialization_options
-    end
-end

data/app/controllers/spree/api/orders_controller.rb

@@ -1,19 +0,0 @@
-class Spree::Api::OrdersController < Spree::Api::BaseController
-  before_filter :access_denied, :except => [:index, :show]
-  authorize_resource :class => Spree::Order
-
-  private
-    def find_resource
-      Spree::Order.find_by_param(params[:id])
-    end
-
-    def object_serialization_options
-      { :include => {
-          :bill_address => { :include => [:country, :state] },
-          :ship_address => { :include => [:country, :state] },
-          :shipments => { :include => [:shipping_method, :address] },
-          :line_items => { :include => [:variant] }
-          }
-      }
-    end
-end

data/app/controllers/spree/api/products_controller.rb

@@ -1,14 +0,0 @@
-class Spree::Api::ProductsController < Spree::Api::BaseController
-  include Spree::Core::Search
-
-  private
-    def collection
-      params[:per_page] ||= 100
-      @searcher = Spree::Config.searcher_class.new(params)
-      @collection = @searcher.retrieve_products
-    end
-
-    def object_serialization_options
-      { :include => [:master, :variants, :taxons] }
-    end
-end

data/app/controllers/spree/api/shipments_controller.rb

@@ -1,35 +0,0 @@
-class Spree::Api::ShipmentsController < Spree::Api::BaseController
-  private
-    def parent
-      if params[:order_id]
-        @parent ||= Spree::Order.find_by_param(params[:order_id])
-      end
-    end
-
-    def collection_serialization_options
-      { :include => { :shipping_method => {}, :address => {}, :inventory_units => { :include => :variant } },
-        :except => [:shipping_method_id, :address_id] }
-    end
-
-    def object_serialization_options
-      { :include =>  {
-          :shipping_method => {},
-          :address => { :include => [:country, :state] },
-          :inventory_units => {
-            :include => {
-              :variant => {
-                :include => {
-                  :product => { :only => [:name] }
-                }
-              }
-            }
-          }
-        },
-        :except => [:shipping_method_id, :address_id]
-      }
-    end
-
-    def eager_load_associations
-      [:shipping_method, :address, { :inventory_units => [:variant] }]
-    end
-end

data/app/controllers/spree/api/states_controller.rb

@@ -1,8 +0,0 @@
-class Spree::Api::StatesController < Spree::Api::BaseController
-  before_filter :access_denied, :except => [:index, :show]
-
-  private
-    def parent
-      @parent ||= Spree::Country.find(params[:country_id])
-    end
-end

data/app/models/line_item_decorator.rb

@@ -1,7 +0,0 @@
-Spree::LineItem.class_eval do
-  def description
-    d = variant.product.name.clone
-    d << " (#{variant.options_text})" unless variant.option_values.empty?
-    d
-  end
-end

data/app/models/order_decorator.rb

@@ -1,9 +0,0 @@
-Spree::Order.class_eval do
-  def self.find_by_param(param)
-    if param.to_i > 0
-      Spree::Order.find(param)
-    else
-      Spree::Order.where(:number => param).first
-    end
-  end
-end

data/app/models/shipment_decorator.rb

@@ -1,9 +0,0 @@
-Spree::Shipment.class_eval do
-  def self.find_by_param(param)
-    if param.to_i > 0
-      Spree::Shipment.find(param)
-    else
-      Spree::Shipment.where(:number => param).first
-    end
-  end
-end

data/app/models/user_decorator.rb

@@ -1,19 +0,0 @@
-Spree::User.class_eval do
-  def clear_api_key!
-    self.update_attribute(:authentication_token, "")
-  end
-
-  def generate_api_key!
-    self.reset_authentication_token!
-  end
-
-  #def self.authenticate_with_http(username, password)
-  #  logger.debug(username)
-  #  self.authenticate_with_token(:auth_token => username)
-  #end
-
-  private
-    def secure_digest(*args)
-      Digest::SHA1.hexdigest(args.flatten.join('--'))
-    end
-end

data/app/overrides/api_admin_user_edit_form.rb

@@ -1,6 +0,0 @@
-Deface::Override.new(:virtual_path => "spree/admin/users/edit",
-                     :name => "api_admin_user_edit_form",
-                     :insert_after => "[data-hook='admin_user_edit_form'], #admin_user_edit_form[data-hook]",
-                     :partial => "spree/admin/users/api_fields",
-                     :disabled => false)
-

data/app/views/spree/admin/users/_api_fields.html.erb

@@ -1,16 +0,0 @@
-<h2><%= t('api.access') %></h2>
-
-<% if @user.authentication_token.present? %>
-  <p><strong><%= t('api.key') %></strong> <%= @user.authentication_token %></p>
-  <%= form_tag spree.clear_api_key_admin_user_path(@user), :method => :put do %>
-    <%= button t('api.clear_key') %>
-  <% end %>
-  <%= form_tag spree.generate_api_key_admin_user_path(@user), :method => :put do %>
-    <%= button t('api.regenerate_key') %>
-  <% end %>
-<% else %>
-  <p><%= t('api.no_key') %></p>
-  <%= form_tag spree.generate_api_key_admin_user_path(@user), :method => :put do %>
-    <%= button t('api.generate_key') %>
-  <% end %>
-<% end %>