tribeca_cms 0.1.1

data/app/controllers/locomotive/api/base_controller.rb

@@ -0,0 +1,50 @@
+module Locomotive
+  module Api
+    class BaseController < ApplicationController
+
+      include Locomotive::Routing::SiteDispatcher
+      include Locomotive::ActionController::LocaleHelpers
+
+      skip_before_filter :verify_authenticity_token
+
+      before_filter :require_account
+
+      before_filter :require_site
+
+      before_filter :set_locale
+
+      before_filter :set_current_thread_variables
+
+      self.responder = Locomotive::ActionController::Responder # custom responder
+
+      respond_to :json, :xml
+
+      protected
+
+      def set_current_thread_variables
+        Thread.current[:account]  = current_locomotive_account
+        Thread.current[:site]     = current_site
+      end
+
+      def current_ability
+        @current_ability ||= Ability.new(current_locomotive_account, current_site)
+      end
+
+      def require_account
+        authenticate_locomotive_account!
+      end
+
+      def set_locale
+        ::Mongoid::Fields::I18n.locale = params[:locale] || current_site.default_locale
+        ::I18n.locale = ::Mongoid::Fields::I18n.locale
+
+        self.setup_i18n_fallbacks
+      end
+
+      def self.description
+        { overall: 'No documentation', actions: {} }
+      end
+
+    end
+  end
+end

data/app/controllers/locomotive/api/content_assets_controller.rb

@@ -0,0 +1,39 @@
+module Locomotive
+  module Api
+    class ContentAssetsController < BaseController
+
+      load_and_authorize_resource :class => Locomotive::ContentAsset
+
+      def index
+        @content_assets = current_site.content_assets
+        respond_with(@content_assets)
+      end
+
+      def show
+        @content_asset = current_site.content_assets.find(params[:id])
+        respond_with(@content_asset)
+      end
+
+      def create
+        @content_asset = current_site.content_assets.new
+        @content_asset.from_presenter(params[:content_asset])
+        @content_asset.save
+        respond_with @content_asset, :location => main_app.locomotive_api_content_assets_url
+      end
+
+      def update
+        @content_asset = current_site.content_assets.find(params[:id])
+        @content_asset.from_presenter(params[:content_asset])
+        @content_asset.save
+        respond_with @content_asset, :location => main_app.locomotive_api_content_assets_url
+      end
+
+      def destroy
+        @content_asset = current_site.content_assets.find(params[:id])
+        @content_asset.destroy
+        respond_with @content_asset
+      end
+
+    end
+  end
+end

data/app/controllers/locomotive/api/content_entries_controller.rb

@@ -0,0 +1,45 @@
+module Locomotive
+  module Api
+    class ContentEntriesController < BaseController
+
+      before_filter :set_content_type
+
+      def index
+        @content_entries = @content_type.ordered_entries
+        respond_with @content_entries
+      end
+
+      def show
+        @content_entry = @content_type.entries.any_of({ :_id => params[:id] }, { :_slug => params[:id] }).first
+        respond_with @content_entry, :status => @content_entry ? :ok : :not_found
+      end
+
+      def create
+        @content_entry = @content_type.entries.build
+        @content_entry_presenter = @content_entry.to_presenter
+        @content_entry_presenter.update_attributes(params[:content_entry])
+        respond_with @content_entry, :location => main_app.locomotive_api_content_entries_url(@content_type.slug)
+      end
+
+      def update
+        @content_entry = @content_type.entries.find(params[:id])
+        @content_entry_presenter = @content_entry.to_presenter
+        @content_entry_presenter.update_attributes(params[:content_entry])
+        respond_with @content_entry, :location => main_app.locomotive_api_content_entries_url(@content_type.slug)
+      end
+
+      def destroy
+        @content_entry = @content_type.entries.find(params[:id])
+        @content_entry.destroy
+        respond_with @content_entry, :location => main_app.locomotive_api_content_entries_url(@content_type.slug)
+      end
+
+      protected
+
+      def set_content_type
+        @content_type ||= current_site.content_types.where(:slug => params[:slug]).first
+      end
+
+    end
+  end
+end

data/app/controllers/locomotive/api/content_types_controller.rb

@@ -0,0 +1,39 @@
+module Locomotive
+  module Api
+    class ContentTypesController < BaseController
+
+      load_and_authorize_resource :class => Locomotive::ContentType
+
+      def index
+        @content_types = current_site.content_types.order_by([[:name, :asc]])
+        respond_with(@content_types)
+      end
+
+      def show
+        @content_type = current_site.content_types.find(params[:id])
+        respond_with @content_type
+      end
+
+      def create
+        @content_type = current_site.content_types.new
+        @content_type.from_presenter(params[:content_type])
+        @content_type.save
+        respond_with @content_type, :location => main_app.locomotive_api_content_types_url
+      end
+
+      def update
+        @content_type = current_site.content_types.find(params[:id])
+        @content_type.from_presenter(params[:content_type])
+        @content_type.save
+        respond_with @content_type, :location => main_app.locomotive_api_content_types_url
+      end
+
+      def destroy
+        @content_type = current_site.content_types.find(params[:id])
+        @content_type.destroy
+        respond_with @content_type
+      end
+
+    end
+  end
+end

data/app/controllers/locomotive/api/current_site_controller.rb

@@ -0,0 +1,58 @@
+module Locomotive
+  module Api
+    class CurrentSiteController < BaseController
+
+      def show
+        @site = current_site
+        authorize! :show, @site
+        respond_with(@site)
+      end
+
+      def update
+      	@site = current_site
+      	authorize! :update, @site
+      	@site.update_attributes(params[:site])
+      	respond_with(@site)
+      end
+
+      def destroy
+        @site = current_site
+        authorize! :destroy, @site
+        @site.destroy
+        respond_with(@site)
+      end
+
+      def self.description
+        {
+          overall: %{Manage the current site related to the domain name used to make the API call},
+          actions: {
+            show: {
+              description: %{Return the attributes of the current site},
+              response: Locomotive::SitePresenter.getters_to_hash,
+              example: {
+                command: %{curl 'http://mysite.com/locomotive/api/tokens.json'},
+                response: %(TODO)
+              }
+            },
+            update: {
+              description: %{Update the current site},
+              params: Locomotive::SitePresenter.setters_to_hash,
+              example: {
+                command: %{curl -d '...' -X UPDATE 'http://mysite.com/locomotive/api/current_site.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            },
+            destroy: {
+              description: %{Delete the current site},
+              example: {
+                command: %{curl -X DELETE 'http://mysite.com/locomotive/api/current_site.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            }
+          }
+        }
+      end
+
+    end
+  end
+end

data/app/controllers/locomotive/api/documentation_controller.rb

@@ -0,0 +1,15 @@
+require 'locomotive/misc/api_documentation'
+
+module Locomotive
+  module Api
+
+    class DocumentationController < ApplicationController
+
+      def show
+        render text: Locomotive::Misc::ApiDocumentation.generate
+      end
+
+    end
+
+  end
+end

data/app/controllers/locomotive/api/memberships_controller.rb

@@ -0,0 +1,97 @@
+module Locomotive
+  module Api
+    class MembershipsController < BaseController
+
+      # It's an embedded document, so we'll just load manually
+      before_filter :load_membership,   :only => [:show, :update, :destroy]
+      before_filter :load_memberships,  :only => [:index]
+
+      authorize_resource :class => Locomotive::Membership
+
+      def index
+        respond_with(@memberships)
+      end
+
+      def show
+        respond_with(@membership)
+      end
+
+      def create
+        @membership = current_site.memberships.new
+        @membership.from_presenter(params[:membership].merge(:role => 'author')) # force author by default
+        @membership.save
+        respond_with(@membership)
+      end
+
+      def update
+        @membership.from_presenter(params[:membership])
+        @membership.save
+        respond_with(@membership)
+      end
+
+      def destroy
+        @membership.destroy
+        respond_with(@membership)
+      end
+
+      protected
+
+      def load_membership
+        @membership ||= load_memberships.find(params[:id])
+      end
+
+      def load_memberships
+        @memberships ||= current_site.memberships
+      end
+
+      def self.description
+        {
+          overall: %{Manage the memberships of an account for the current site},
+          actions: {
+            index: {
+              description: %{Return all the memberships of the current site},
+              example: {
+                command: %{curl 'http://mysite.com/locomotive/api/memberships.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            },
+            show: {
+              description: %{Return the attributes of a membership},
+              response: Locomotive::MembershipPresenter.getters_to_hash,
+              example: {
+                command: %{curl 'http://mysite.com/locomotive/api/memberships/4244af4ef0000002.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            },
+            create: {
+              description: %{Create a membership},
+              params: Locomotive::MembershipPresenter.setters_to_hash,
+              example: {
+                command: %{curl -d '...' 'http://mysite.com/locomotive/api/memberships.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            },
+            update: {
+              description: %{Update a membership},
+              params: Locomotive::MembershipPresenter.setters_to_hash,
+              example: {
+                command: %{curl -d '...' -X UPDATE 'http://mysite.com/locomotive/api/memberships/4244af4ef0000002.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            },
+            destroy: {
+              description: %{Delete a membership},
+              example: {
+                command: %{curl -X DELETE 'http://mysite.com/locomotive/api/memberships/4244af4ef0000002.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            }
+          }
+        }
+      end
+
+    end
+
+  end
+end
+

data/app/controllers/locomotive/api/my_account_controller.rb

@@ -0,0 +1,35 @@
+module Locomotive
+  module Api
+    class MyAccountController < BaseController
+
+      skip_load_and_authorize_resource
+
+      skip_before_filter :require_site, :set_locale, :set_current_thread_variables
+
+      def show
+        respond_with(current_locomotive_account)
+      end
+
+      protected
+
+      def self.description
+        {
+          overall: %{Manage the current account (my account)},
+          actions: {
+            show: {
+              description: %{Return the attributes of my account},
+              response: Locomotive::AccountPresenter.getters_to_hash,
+              example: {
+                command: %{curl 'http://mysite.com/locomotive/api/my_account.json'},
+                response: %(TODO)
+              }
+            }
+          }
+        }
+      end
+
+    end
+
+  end
+end
+

data/app/controllers/locomotive/api/pages_controller.rb

@@ -0,0 +1,41 @@
+module Locomotive
+  module Api
+    class PagesController < BaseController
+
+      load_and_authorize_resource :class => Locomotive::Page
+
+      def index
+        @pages = current_site.pages.order_by([[:depth, :asc], [:position, :asc]])
+        respond_with(@pages)
+      end
+
+      def show
+        @page = current_site.pages.find(params[:id])
+        respond_with(@page)
+      end
+
+      def create
+        @page = current_site.pages.new
+        @page.from_presenter(params[:page])
+        @page.save
+        respond_with @page, :location => main_app.locomotive_api_pages_url
+      end
+
+      def update
+        @page = current_site.pages.find(params[:id])
+        @page.from_presenter(params[:page])
+        @page.save
+        respond_with @page, :location => main_app.locomotive_api_pages_url
+      end
+
+      def destroy
+        @page = current_site.pages.find(params[:id])
+        @page.destroy
+        respond_with @page
+      end
+
+    end
+
+  end
+end
+

data/app/controllers/locomotive/api/sites_controller.rb

@@ -0,0 +1,93 @@
+module Locomotive
+  module Api
+    class SitesController < BaseController
+
+      skip_before_filter :require_site, :set_locale, :set_current_thread_variables
+
+      load_and_authorize_resource :class => Locomotive::Site
+
+      # We make an exception for the index action, we don't use the ability
+      # object, we just return the sites owned by the current account.
+      skip_load_and_authorize_resource :only => :index
+
+      def index
+        @sites = self.current_locomotive_account.sites.all
+        respond_with(@sites)
+      end
+
+      def show
+        respond_with(@site)
+      end
+
+      def create
+        @site = Locomotive::Site.from_presenter(params[:site])
+        @site.memberships.build :account => self.current_locomotive_account, :role => 'admin'
+        @site.save
+        respond_with(@site)
+      end
+
+      def update
+        @site = Locomotive::Site.find(params[:id])
+        @site.from_presenter(params[:site])
+        @site.save
+        respond_with @site
+      end
+
+      def destroy
+        @site.destroy
+        respond_with(@site)
+      end
+
+      protected
+
+      def self.description
+        {
+          overall: %{Manage the sites for which the logged in user is admin},
+          actions: {
+            index: {
+              description: %{Return all the sites},
+              example: {
+                command: %{curl 'http://mysite.com/locomotive/api/sites.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            },
+            show: {
+              description: %{Return the attributes of a site},
+              response: Locomotive::SitePresenter.getters_to_hash,
+              example: {
+                command: %{curl 'http://mysite.com/locomotive/api/sites/4244af4ef0000002.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            },
+            create: {
+              description: %{Create a site},
+              params: Locomotive::SitePresenter.setters_to_hash,
+              example: {
+                command: %{curl -d '...' 'http://mysite.com/locomotive/api/sites.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            },
+            update: {
+              description: %{Update a site},
+              params: Locomotive::SitePresenter.setters_to_hash,
+              example: {
+                command: %{curl -d '...' -X UPDATE 'http://mysite.com/locomotive/api/sites/4244af4ef0000002.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            },
+            destroy: {
+              description: %{Delete a site},
+              example: {
+                command: %{curl -X DELETE 'http://mysite.com/locomotive/api/sites/4244af4ef0000002.json?auth_token=dtsjkqs1TJrWiSiJt2gg'},
+                response: %(TODO)
+              }
+            }
+          }
+        }
+      end
+
+    end
+
+  end
+end
+