strong_form 0.0.1

data/Rakefile

@@ -0,0 +1,28 @@
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rdoc/task'
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'StrongForm'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+Bundler::GemHelper.install_tasks
+
+require 'rake/testtask'
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'lib'
+  t.libs << 'test'
+  t.pattern = 'test/**/*_test.rb'
+  t.verbose = false
+end
+
+task default: :test

data/lib/strong_form.rb

@@ -0,0 +1,5 @@
+require 'strong_form/finder'
+require 'strong_form/form'
+require 'strong_form/record'
+require 'strong_form/tag'
+require 'strong_form/railtie' if defined?(Rails)

data/lib/strong_form/finder.rb

@@ -0,0 +1,16 @@
+module StrongForm
+  module Finder
+    def self.find_child_permitted_attributes(name, permitted_attributes)
+      # find the hash with the key `child_models_attributes`
+      attributes = permitted_attributes.find do |o|
+        o.is_a?(Hash) && o.keys.include?(name)
+      end
+
+      return [] unless attributes
+
+      attributes = attributes[name]
+      attributes = [attributes] unless attributes.is_a?(Array)
+      attributes
+    end
+  end
+end

data/lib/strong_form/form.rb

@@ -0,0 +1,56 @@
+module ActionView
+  module Helpers
+    module FormHelper
+      alias_method :orig_form_for, :form_for
+
+      attr_accessor :permitted_attributes
+
+      def form_for(record, options = {}, &block)
+        # explicilty passed
+        if options.key?(:permitted_attributes)
+          self.permitted_attributes = options.delete(:permitted_attributes)
+          record.permitted_attributes =
+            permitted_attributes if record.respond_to?(:permitted_attributes=)
+        # assigned to object
+        elsif record.respond_to?(:permitted_attributes)
+          self.permitted_attributes = record.permitted_attributes
+        end
+
+        orig_form_for(record, options, &block)
+      end
+
+      def assign_child_permitted_attributes!(
+        record_name, record_object, parent_permitted_attributes
+      )
+        if parent_permitted_attributes == true # parent allowed everything
+          record_object.permitted_attributes = parent_permitted_attributes
+          return
+        end
+
+        # search for nested attributes
+
+        # record_name is of the form `user[child_models_attributes][0]`
+        # try to extract `child_models_attributes`
+        permitted_name =
+          record_name.match(/.*?\[([^\]\[]+)\](\[[0-9]+\])?$/)[1].to_sym
+
+        # find the hash with the key `child_models_attributes`
+        record_object.permitted_attributes =
+          StrongForm::Finder.find_child_permitted_attributes(
+            permitted_name, parent_permitted_attributes
+          )
+      end
+      private :assign_child_permitted_attributes!
+
+      # https://github.com/rails/rails/blob/4-2-stable/actionview/lib/action_view/helpers/form_helper.rb#L712
+      def fields_for(record_name, record_object = nil, options = {}, &block)
+        assign_child_permitted_attributes!(
+          record_name, record_object, options[:parent_builder].object.permitted_attributes
+        ) if permitted_attributes && record_object.respond_to?(:permitted_attributes=) && record_object.permitted_attributes.nil?
+
+        builder = instantiate_builder(record_name, record_object, options)
+        capture(builder, &block)
+      end
+    end
+  end
+end

data/lib/strong_form/nested_form.rb

@@ -0,0 +1,38 @@
+module NestedForm
+  module BuilderMixin
+    alias_method :orig_link_to_add, :link_to_add
+    alias_method :orig_link_to_remove, :link_to_remove
+
+    def link_to_add(association, options = {}, &block)
+      if object.respond_to?(:permitted_attributes)
+        return unless object.permitted_nested_attributes?(association)
+
+        unless options[:model_object]
+          reflection = object.class.reflect_on_association(association)
+          options[:model_object] = reflection.klass.new
+        end
+
+        unless options[:model_object].permitted_attributes.present?
+          if object.permitted_attributes == true || object.permitted_attributes.nil?
+            options[:model_object].permitted_attributes = true
+          else
+            options[:model_object].permitted_attributes =
+              StrongForm::Finder.find_child_permitted_attributes(
+                "#{association}_attributes".to_sym, object.permitted_attributes
+              )
+          end
+        end
+      end
+
+      orig_link_to_add(association, options, &block)
+    end
+
+    def link_to_remove(*args, &block)
+      return if object.respond_to?(:permitted_attributes) &&
+                !object.permitted_attributes.nil? &&
+                object.permitted_attributes != true &&
+                !object.permitted_attributes.include?(:_destroy)
+      orig_link_to_remove(*args, &block)
+    end
+  end
+end

data/lib/strong_form/railtie.rb

@@ -0,0 +1,31 @@
+module StrongForm
+  def self.inject
+    ActiveRecord::Base.include StrongForm::Record
+
+    %w(
+      CheckBox
+      CollectionSelect
+      DateSelect
+      RadioButton
+      Select
+      TextArea
+      TextField
+      TimeZoneSelect
+    ).each do |klass|
+      "ActionView::Helpers::Tags::#{klass}"
+        .constantize.prepend StrongForm::Tag
+    end
+
+    defined?(NestedForm) && require('strong_form/nested_form')
+  end
+
+  class Railtie < Rails::Railtie
+    initializer 'strong_form.injects' do
+      if !Rails.env.test? && Rails.configuration.cache_classes
+        StrongForm.inject
+      else
+        ActionDispatch::Reloader.to_prepare { StrongForm.inject }
+      end
+    end
+  end
+end

data/lib/strong_form/record.rb

@@ -0,0 +1,16 @@
+module StrongForm
+  module Record
+    attr_accessor :permitted_attributes
+
+    # allows to check if nested attributes are allowed
+    #
+    # permitted_nested_attributes?(:addresses) is true if
+    # :addresses_attributes are permitted or everything is permitted
+    def permitted_nested_attributes?(attr)
+      permitted_attributes.nil? || permitted_attributes == true ||
+        permitted_attributes.any? do |o|
+        o.is_a?(Hash) && o.keys.include?("#{attr}_attributes".to_sym)
+      end
+    end
+  end
+end

data/lib/strong_form/tag.rb

@@ -0,0 +1,12 @@
+module StrongForm
+  module Tag
+    def render
+      if object.respond_to?(:permitted_attributes) && !object.permitted_attributes.nil?
+        (@html_options || @options)[:disabled] ||=
+          object.permitted_attributes != true &&
+          !object.permitted_attributes.include?(@method_name.to_sym)
+      end
+      super
+    end
+  end
+end

data/lib/strong_form/version.rb

@@ -0,0 +1,3 @@
+module StrongForm
+  VERSION = '0.0.1'
+end

data/lib/tasks/strong_form_tasks.rake

@@ -0,0 +1,4 @@
+# desc "Explaining what the task does"
+# task :strong_form do
+#   # Task goes here
+# end

data/spec/dummy/README.rdoc

@@ -0,0 +1,28 @@
+== README
+
+This README would normally document whatever steps are necessary to get the
+application up and running.
+
+Things you may want to cover:
+
+* Ruby version
+
+* System dependencies
+
+* Configuration
+
+* Database creation
+
+* Database initialization
+
+* How to run the test suite
+
+* Services (job queues, cache servers, search engines, etc.)
+
+* Deployment instructions
+
+* ...
+
+
+Please feel free to use a different markup language if you do not plan to run
+<tt>rake doc:app</tt>.

data/spec/dummy/Rakefile

@@ -0,0 +1,6 @@
+# Add your own tasks in files placed in lib/tasks ending in .rake,
+# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
+
+require File.expand_path('../config/application', __FILE__)
+
+Rails.application.load_tasks

data/spec/dummy/app/assets/javascripts/application.js

@@ -0,0 +1,13 @@
+// This is a manifest file that'll be compiled into application.js, which will include all the files
+// listed below.
+//
+// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
+// or any plugin's vendor/assets/javascripts directory can be referenced here using a relative path.
+//
+// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
+// compiled file.
+//
+// Read Sprockets README (https://github.com/rails/sprockets#sprockets-directives) for details
+// about supported directives.
+//
+//= require_tree .

data/spec/dummy/app/assets/stylesheets/application.css

@@ -0,0 +1,15 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or any plugin's vendor/assets/stylesheets directory can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the bottom of the
+ * compiled file so the styles you add here take precedence over styles defined in any styles
+ * defined in the other CSS/SCSS files in this directory. It is generally better to create a new
+ * file per style scope.
+ *
+ *= require_tree .
+ *= require_self
+ */

data/spec/dummy/app/controllers/application_controller.rb

@@ -0,0 +1,5 @@
+class ApplicationController < ActionController::Base
+  # Prevent CSRF attacks by raising an exception.
+  # For APIs, you may want to use :null_session instead.
+  protect_from_forgery with: :exception
+end

data/spec/dummy/app/controllers/base_controller.rb

@@ -0,0 +1,22 @@
+class BaseController < ApplicationController
+  def basic_form
+    @user = User.new
+  end
+
+  def fields_for
+    @user = User.new
+    @user.addresses.build
+    @user.build_tag
+  end
+
+  def deep_fields_for
+    @user = User.new
+    (@user.addresses.build).tags.build
+    @user.build_tag
+  end
+
+  def nested_form_gem
+    @user = User.new
+    @user.addresses.build
+  end
+end

data/spec/dummy/app/helpers/application_helper.rb

@@ -0,0 +1,2 @@
+module ApplicationHelper
+end

data/spec/dummy/app/models/address.rb

@@ -0,0 +1,6 @@
+class Address < ActiveRecord::Base
+  belongs_to :user
+
+  has_many :tags, as: :taggable
+  accepts_nested_attributes_for :tags
+end

data/spec/dummy/app/models/tag.rb

@@ -0,0 +1,3 @@
+class Tag < ActiveRecord::Base
+  belongs_to :taggable, polymorphic: true
+end

data/spec/dummy/app/models/user.rb

@@ -0,0 +1,7 @@
+class User < ActiveRecord::Base
+  has_many :addresses
+  accepts_nested_attributes_for :addresses
+
+  has_one :tag, as: :taggable
+  accepts_nested_attributes_for :tag
+end

data/spec/dummy/app/views/base/_address_fields.html.haml

@@ -0,0 +1,10 @@
+= f.text_field :country
+= f.text_field :city
+= f.text_field :street
+= f.text_area :description
+
+- if f.respond_to?(:link_to_remove)
+  = f.link_to_remove 'remove'
+
+= f.fields_for :tags do |tf|
+  = render 'tag_fields', f: tf

data/spec/dummy/app/views/base/_tag_fields.html.haml

@@ -0,0 +1,2 @@
+= f.text_field :name
+= f.text_area :description

data/spec/dummy/app/views/base/_user_fields.html.haml

@@ -0,0 +1,4 @@
+= f.text_field :first_name
+= f.text_field :last_name
+= f.select :gender, %i(m f)
+= f.text_area :description

data/spec/dummy/app/views/base/basic_form.html.haml

@@ -0,0 +1,2 @@
+= form_for @user, url: '/somewhere' do |f|
+  = render 'user_fields', f: f

data/spec/dummy/app/views/base/deep_fields_for.html.haml

@@ -0,0 +1,8 @@
+= form_for @user, url: '/somewhere' do |f|
+  = render 'user_fields', f: f
+
+  = f.fields_for :addresses do |af|
+    = render 'address_fields', f: af
+
+  = f.fields_for :tag do |tf|
+    = render 'tag_fields', f: tf

data/spec/dummy/app/views/base/fields_for.html.haml

@@ -0,0 +1,8 @@
+= form_for @user, url: '/somewhere' do |f|
+  = render 'user_fields', f: f
+
+  = f.fields_for :addresses do |af|
+    = render 'address_fields', f: af
+
+  = f.fields_for :tag do |tf|
+    = render 'tag_fields', f: tf

data/spec/dummy/app/views/base/nested_form_gem.html.haml

@@ -0,0 +1,7 @@
+= nested_form_for @user, url: '/somewhere' do |f|
+  = render 'user_fields', f: f
+
+  = f.fields_for :addresses do |af|
+    = render 'address_fields', f: af
+  = f.link_to_add :addresses do
+    Add

data/spec/dummy/app/views/layouts/application.html.haml

@@ -0,0 +1,10 @@
+!!!
+%html
+  %head
+    %meta{:content => "text/html; charset=UTF-8", "http-equiv" => "Content-Type"}/
+    %title Dummy
+    = stylesheet_link_tag    'application', media: 'all', 'data-turbolinks-track' => true
+    = javascript_include_tag 'application', 'data-turbolinks-track' => true
+    = csrf_meta_tags
+  %body
+    = yield

data/spec/dummy/bin/bundle

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../../Gemfile', __FILE__)
+load Gem.bin_path('bundler', 'bundle')

data/spec/dummy/bin/rails

@@ -0,0 +1,4 @@
+#!/usr/bin/env ruby
+APP_PATH = File.expand_path('../../config/application', __FILE__)
+require_relative '../config/boot'
+require 'rails/commands'

data/spec/dummy/bin/rake

@@ -0,0 +1,4 @@
+#!/usr/bin/env ruby
+require_relative '../config/boot'
+require 'rake'
+Rake.application.run

data/spec/dummy/bin/setup

@@ -0,0 +1,29 @@
+#!/usr/bin/env ruby
+require 'pathname'
+
+# path to your application root.
+APP_ROOT = Pathname.new File.expand_path('../../',  __FILE__)
+
+Dir.chdir APP_ROOT do
+  # This script is a starting point to setup your application.
+  # Add necessary setup steps to this file:
+
+  puts '== Installing dependencies =='
+  system 'gem install bundler --conservative'
+  system 'bundle check || bundle install'
+
+  # puts "\n== Copying sample files =="
+  # unless File.exist?("config/database.yml")
+  #   system "cp config/database.yml.sample config/database.yml"
+  # end
+
+  puts "\n== Preparing database =="
+  system 'bin/rake db:setup'
+
+  puts "\n== Removing old logs and tempfiles =="
+  system 'rm -f log/*'
+  system 'rm -rf tmp/cache'
+
+  puts "\n== Restarting application server =="
+  system 'touch tmp/restart.txt'
+end