Class: IntrospectiveGrape::API

Inherits:
Grape::API::Instance
  • Object
show all
Extended by:
CreateHelpers, Doc, Filters, Helpers, SnakeParams, Traversal
Includes:
Grape::Kaminari
Defined in:
lib/introspective_grape/api.rb

Overview

rubocop:disable Metrics/ClassLength

Constant Summary collapse

PLURAL_REFLECTIONS = 
[ActiveRecord::Reflection::HasManyReflection, ActiveRecord::Reflection::HasManyReflection].freeze
PG2RUBY =

mapping of activerecord/postgres ‘type’s to ruby data classes, where they differ

{ datetime: DateTime }.freeze

Constants included from Helpers

Helpers::API_ACTIONS

Class Method Summary collapse

Methods included from Helpers

all_or_none, authentication_method, authentication_method=, default_includes, exclude_actions, include_actions, paginate, pagination, skip_presence_validations, whitelist

Methods included from CreateHelpers

add_new_records_to_root_record, create_new_record

Methods included from Filters

apply_filter_params, apply_filters, apply_simple_filter, custom_filter, custom_filters, declare_filter_params, declare_simple_filter, default_sort, filter_doc, filter_on, filters, humanize_date_range, identifier_filter?, simple_filters, special_filter_enabled?, timestamp_filter

Methods included from Traversal

find_leaf, find_leaves, verify_record_found, verify_records_found

Methods included from Doc

create_documentation, destroy_documentation, index_documentation, show_documentation, update_documentation

Methods included from SnakeParams

snake_params_before_validation

Class Method Details

.add_destroy_param(dsl, model, reflection, action) ⇒ Object 



449
450
451
452
453
454
455
456
457
458
 
# File 'lib/introspective_grape/api.rb', line 449

def add_destroy_param(dsl, model, reflection, action)
  return if action == :create

  raise "#{model} does not accept nested attributes for #{reflection}" unless model.nested_attributes_options[reflection.to_sym]

  return unless model.nested_attributes_options[reflection.to_sym][:allow_destroy]

  # If destruction is allowed append the _destroy field
  dsl.optional '_destroy', type: Integer
end

.build_nested_attributes(routes, hash) ⇒ Object 



306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
 
# File 'lib/introspective_grape/api.rb', line 306

def build_nested_attributes(routes, hash)
  # Recursively re-express the flat attributes hash from nested routes as nested
  # attributes that can be used to perform an update on the root model.

  # do nothing if the params are already nested.
  return {} if routes.blank? || hash[routes.first.param]

  route  = routes.shift
  # change 'x_id' to 'x_attributes': { id: id, y_attributes: {} }
  id      = hash.delete route.key
  attributes = id ? { id: id } : {}

  attributes.merge!( hash ) if routes.blank? # assign param values to the last reference

  if route.many? # nest it in an array if it is a has_many association
    { route.param => [attributes.merge( build_nested_attributes(routes, hash) )] }
  else
    { route.param => attributes.merge( build_nested_attributes(routes, hash) ) }
  end
end

.build_routes(routes, model, reflection_name = nil) ⇒ Object 



277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
 
# File 'lib/introspective_grape/api.rb', line 277

def build_routes(routes, model, reflection_name=nil)
  routes = routes.clone
  # routes: the existing routes array passed from the parent
  # model:  the model being manipulated in this leaf
  # reflection_name: the association name from the original strong_params declaration
  #
  # Constructs an array representation of the route's models and their associations,
  # a /root/:rootId/branch/:branchId/leaf/:leafId path would have flat array like
  # [root, branch, leaf] representing the path structure and its models, used to
  # manipulate ActiveRecord relationships and params hashes and so on.
  parent_model = routes.last&.model
  return routes if model == parent_model

  name        = reflection_name || model.name.underscore
  reflection  = parent_model&.reflections&.fetch(reflection_name)
  swagger_key = IntrospectiveGrape.config.camelize_parameters ? "#{name.singularize.camelize(:lower)}Id" : "#{name.singularize}_id"

  routes.push OpenStruct.new( # rubocop:disable Style/OpenStructUse
    klass: self, name: name, param: "#{name}_attributes", model: model,
    many?: plural?(parent_model, reflection),
    key: "#{name.singularize}_id".to_sym,
    swagger_key: swagger_key, reflection: reflection
  )
end

.check_model_for_type(model, field) ⇒ Object 



428
429
430
 
# File 'lib/introspective_grape/api.rb', line 428

def check_model_for_type(model, field)
  (model.try(:grape_param_types) || {}).with_indifferent_access[field]
end

.convert_nested_params_hash(dsl, routes) ⇒ Object

rubocop:enable Metrics/AbcSize



229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
 
# File 'lib/introspective_grape/api.rb', line 229

def convert_nested_params_hash(dsl, routes)
  root  = routes.first
  klass = self
  dsl.after_validation do
    next unless params[root.key] # there was no one, nothing to see

    # After Grape validates its parameters:
    # 1) Find the root model instance for the API if its passed (implicitly either
    #    an update/destroy on the root node or it's a nested route
    # 2) For nested endpoints convert the params hash into Rails-compliant nested
    #    attributes, to be passed to the root instance for update. This keeps
    #    behavior consistent between bulk and single record updates.
    @model = root.model.includes( root.klass.default_includes(root.model) ).find(params[root.key])
    @params.merge!( klass.merge_nested_params(routes, params) )
  end
end

.db_type_constant(db_type) ⇒ Object 



432
433
434
435
436
437
438
 
# File 'lib/introspective_grape/api.rb', line 432

def db_type_constant(db_type)
  begin
    db_type.to_s.camelize.constantize
  rescue StandardError
    nil
  end
end

.define_create(dsl, routes, model, api_params) ⇒ Object 



175
176
177
178
179
180
181
182
183
184
185
186
187
188
 
# File 'lib/introspective_grape/api.rb', line 175

def define_create(dsl, routes, model, api_params)
  name  = routes.last.name.singularize
  klass = routes.first.klass
  dsl.desc "create a #{name}" do
    detail klass.create_documentation(name)
  end
  dsl.params do
    klass.generate_params(self, :create, model, api_params, true)
  end
  dsl.post do
    representation = @model ? klass.add_new_records_to_root_record(self, routes, params, @model) : klass.create_new_record(self, routes, params)
    present representation, with: "#{klass}::#{model}Entity".constantize
  end
end

.define_destroy(dsl, routes, model, _api_params) ⇒ Object 



213
214
215
216
217
218
219
220
221
222
223
224
225
226
 
# File 'lib/introspective_grape/api.rb', line 213

def define_destroy(dsl, routes, model, _api_params)
  klass = routes.first.klass
  name  = routes.last.name.singularize
  dsl.desc "destroy a #{name}" do
    detail klass.destroy_documentation(name)
  end
  dsl.params do
    requires routes.last.swagger_key, type: klass.param_type(model, model.primary_key)
  end
  dsl.delete ":#{routes.last.swagger_key}" do
    authorize @model, :destroy?
    present status: (klass.find_leaf(routes, @model, params).destroy ? true : false)
  end
end

.define_endpoints(routes, api_params) ⇒ Object 



258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
 
# File 'lib/introspective_grape/api.rb', line 258

def define_endpoints(routes, api_params)
  # De-reference these as local variables from their class scope, or when we make
  # calls to the API they will be whatever they were last set to by the recursive
  # calls to "nest_routes".
  routes     = routes.clone
  api_params = api_params.clone
  model      = routes.last.model || return

  # We define the param keys for ID fields in camelcase for swagger's URL substitution,
  # they'll come back in snake case in the params hash, the API as a whole is agnostic:
  namespace = routes[0..-2].map {|p| "#{p.name.pluralize}/:#{p.swagger_key}/" }.join + routes.last.name.pluralize

  klass      = self # the 'resource' block changes the context to the Grape::API::Instance...
  resource namespace do
    klass.convert_nested_params_hash(self, routes)
    klass.define_restful_api(self, routes, model, api_params)
  end
end

.define_index(dsl, routes, model, api_params) ⇒ Object 



135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
 
# File 'lib/introspective_grape/api.rb', line 135

def define_index(dsl, routes, model, api_params)
  root  = routes.first
  klass = routes.first.klass
  name  = routes.last.name.pluralize
  simple_filters(klass, model, api_params)

  dsl.desc "list #{name}" do
    detail klass.index_documentation(name)
  end
  dsl.params do
    klass.declare_filter_params(self, klass, model, api_params)
    use :pagination, per_page: klass.pagination[:per_page]||25, max_per_page: klass.pagination[:max_per_page], offset: klass.pagination[:offset]||0 if klass.pagination
  end
  dsl.get '/' do
    # Invoke the policy for the action, defined in the policy classes for the model:
    authorize root.model.new, :index?

    # Nested route indexes need to be scoped by the API's top level policy class:
    records = policy_scope( root.model.includes(klass.default_includes(root.model)) )
    records = klass.apply_filter_params(klass, model, api_params, params, records)
    records = records.map {|r| klass.find_leaves( routes, r, params ) }.flatten.compact.uniq

    # paginate the records using Kaminari
    records = paginate(Kaminari.paginate_array(records)) if klass.pagination
    present records, with: "#{klass}::#{model}Entity".constantize
  end
end

.define_restful_api(dsl, routes, model, api_params) ⇒ Object 



251
252
253
254
255
256
 
# File 'lib/introspective_grape/api.rb', line 251

def define_restful_api(dsl, routes, model, api_params)
  # declare index, show, update, create, and destroy methods:
  API_ACTIONS.each do |action|
    send("define_#{action}", dsl, routes, model, api_params) unless exclude_actions(model).include?(action)
  end
end

.define_routes(routes, api_params) ⇒ Object 



113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
 
# File 'lib/introspective_grape/api.rb', line 113

def define_routes(routes, api_params)
  define_endpoints(routes, api_params)
  # recursively define endpoints
  model = routes.last.model || return

  api_params.select {|a| a.is_a?(Hash) }.each do |nested|
    # Recursively add RESTful nested routes for every nested model:
    nested.each do |r, fields|
      # Look at model.reflections to find the association's class name:
      reflection_name = r.to_s.sub(/_attributes$/, '')
      begin
        relation = model.reflections[reflection_name].class_name.constantize
      rescue StandardError
        Rails.logger.fatal "Can't find associated model for #{r} on #{model}"
      end

      next_routes = build_routes(routes, relation, reflection_name)
      define_routes(next_routes, fields)
    end
  end
end

.define_show(dsl, routes, model, _api_params) ⇒ Object 



163
164
165
166
167
168
169
170
171
172
173
 
# File 'lib/introspective_grape/api.rb', line 163

def define_show(dsl, routes, model, _api_params)
  name  = routes.last.name.singularize
  klass = routes.first.klass
  dsl.desc "retrieve a #{name}" do
    detail klass.show_documentation(name)
  end
  dsl.get ":#{routes.last.swagger_key}" do
    authorize @model, :show?
    present klass.find_leaf(routes, @model, params), with: "#{klass}::#{model}Entity".constantize
  end
end

.define_update(dsl, routes, model, api_params) ⇒ Object 



190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
 
# File 'lib/introspective_grape/api.rb', line 190

def define_update(dsl, routes, model, api_params)
  klass = routes.first.klass
  name  = routes.last.name.singularize
  dsl.desc "update a #{name}" do
    detail klass.update_documentation(name)
  end
  dsl.params do
    klass.generate_params(self, :update, model, api_params, true)
  end
  dsl.put ":#{routes.last.swagger_key}" do
    authorize @model, :update?

    @model.update!( safe_params(params).permit(klass.whitelist) )

    if IntrospectiveGrape.config.skip_object_reload
      present klass.find_leaf(routes, @model, params), with: "#{klass}::#{model}Entity".constantize
    else
      default_includes = routes.first.klass.default_includes(routes.first.model)
      present klass.find_leaf(routes, @model.class.includes(default_includes).find(@model.id), params), with: "#{klass}::#{model}Entity".constantize
    end
  end
end

.file_attachment?(model, field) ⇒ Boolean

Returns:

  • (Boolean) 


404
405
406
407
408
 
# File 'lib/introspective_grape/api.rb', line 404

def file_attachment?(model, field)
  (model.respond_to?(:uploaders) && model.uploaders[field.to_sym]) || # carrierwave
    (model.respond_to?(:attachment_definitions) && model.attachment_definitions[field.to_sym]) ||
    (defined?(Paperclip::Attachment) && model.send(:new).try(field).is_a?(Paperclip::Attachment))
end

.find_relation(model, reflection) ⇒ Object 



396
397
398
399
400
401
402
 
# File 'lib/introspective_grape/api.rb', line 396

def find_relation(model, reflection)
  begin
    model.reflections[reflection].class_name.constantize
  rescue StandardError
    model
  end
end

.generate_nested_params(dsl, action, model, fields) ⇒ Object 



361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
 
# File 'lib/introspective_grape/api.rb', line 361

def generate_nested_params(dsl, action, model, fields)
  klass = self
  fields.each do |r, v|
    # Look at model.reflections to find the association's class name:
    reflection = r.to_s.sub(/_attributes$/, '') # the reflection name
    relation   = find_relation(model, reflection)

    if file_attachment?(model, r)
      # Handle Carrierwave file upload fields
      s = %i(filename type name tempfile head) - v
      Rails.logger.warn "Missing required file upload parameters #{s} for uploader field #{r}" if s.present?
    elsif plural_reflection?(model, reflection)
      # In case you need a refresher on how these work:
      # http://api.rubyonrails.org/classes/ActiveRecord/NestedAttributes/ClassMethods.html
      dsl.optional r, type: Array do |dl|
        klass.generate_params(dl, action, relation, v)
        klass.add_destroy_param(dl, model, reflection, action)
      end
    else
      # TODO: handle any remaining correctly. Presently defaults to a Hash
      # http://www.rubydoc.info/github/rails/rails/ActiveRecord/Reflection
      # ThroughReflection, HasOneReflection,
      # HasAndBelongsToManyReflection, BelongsToReflection
      dsl.optional r, type: Hash do |dl|
        klass.generate_params(dl, action, relation, v)
        klass.add_destroy_param(dl, model, reflection, action)
      end
    end
  end
end

.generate_params(dsl, action, model, fields, is_root_endpoint = false) ⇒ Object 



327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
 
# File 'lib/introspective_grape/api.rb', line 327

def generate_params(dsl, action, model, fields, is_root_endpoint=false)
  # We'll be doing a recursive walk (to handle nested attributes) down the
  # whitelisted params, generating the Grape param definitions by introspecting
  # on the model and its associations.
  raise "Invalid action: #{action}" unless %i(update create).include?(action)

  # dsl   : The Grape::Validations::ParamsScope object
  # action: create or update
  # model : The ActiveRecord model class
  # fields: The whitelisted data structure for Rails' strong params, from which we
  #         infer Grape's parameters

  # skip the ID param at the root level endpoint, so we don't duplicate the URL parameter (api/v#/model/modelId)
  fields -= [:id] if is_root_endpoint

  fields.each do |field|
    if field.is_a?(Hash)
      generate_nested_params(dsl, action, model, field)
    elsif action == :create && param_required?(model, field)
      # All params are optional on an update, only require them during creation.
      # Updating a record with new child models will have to rely on ActiveRecord
      # validations:
      dsl.requires field, { type: param_type(model, field) }.merge( validations(model, field) )
    else
      # dsl.optional field, *options
      dsl.optional field, { type: param_type(model, field) }.merge( validations(model, field) )
    end
  end
end

.inherited(child) ⇒ Object 



59
60
61
62
63
64
65
66
67
 
# File 'lib/introspective_grape/api.rb', line 59

def inherited(child)
  super(child)
  child.before do
    # Ensure that a user is logged in.
    send(IntrospectiveGrape::API.authentication_method(self))
  end

  child.snake_params_before_validation if IntrospectiveGrape.config.camelize_parameters
end

.merge_nested_params(routes, params) ⇒ Object 



246
247
248
249
 
# File 'lib/introspective_grape/api.rb', line 246

def merge_nested_params(routes, params)
  attr = params.reject {|k| [routes.first.key, :api_key].include?(k) }
  build_nested_attributes(routes[1..], attr)
end

.param_required?(model, field) ⇒ Boolean

Returns:

  • (Boolean) 


440
441
442
443
444
445
446
447
 
# File 'lib/introspective_grape/api.rb', line 440

def param_required?(model, field)
  # Detect if the field is a required field for the create action
  return false if skip_presence_validations.include?(field)

  validated_field = field.match?(/_id/) ? field.to_s.sub(/_id\z/, '').to_sym : field.to_sym

  model.validators_on(validated_field).any? {|v| v.is_a? ActiveRecord::Validations::PresenceValidator }
end

.param_type(model, field) ⇒ Object 



410
411
412
413
414
415
416
417
418
419
420
421
422
 
# File 'lib/introspective_grape/api.rb', line 410

def param_type(model, field)
  # Translate from the AR type to the GrapeParam types
  field   = field.to_s
  db_type = (model&.try(:columns_hash) || {})[field]&.type

  # Check if it's a file attachment, look for an override class from the model,
  # check PG2RUBY, use the database type, or fail over to a String:
  uploaded_file?(model, field)           ||
    check_model_for_type(model, field)   ||
    PG2RUBY[db_type]                     ||
    db_type_constant(db_type)            ||
    String # default to String if nothing else works
end

.plural?(model, reflection) ⇒ Boolean

Returns:

  • (Boolean) 


302
303
304
 
# File 'lib/introspective_grape/api.rb', line 302

def plural?(model, reflection)
  (model && PLURAL_REFLECTIONS.include?(reflection.class))
end

.plural_reflection?(model, reflection) ⇒ Boolean

Returns:

  • (Boolean) 


392
393
394
 
# File 'lib/introspective_grape/api.rb', line 392

def plural_reflection?(model, reflection)
  PLURAL_REFLECTIONS.include?( model.reflections[reflection].class )
end

.restful(model, strong_params = [], routes = []) ⇒ Object

rubocop:disable Metrics/AbcSize

Raises:



76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
 
# File 'lib/introspective_grape/api.rb', line 76

def restful(model, strong_params=[], routes=[])
  raise IntrospectiveGrapeError.new("#{model.name}'s attribute_param_types class method needs to be changed to grape_param_types") if model.respond_to?(:attribute_param_types)

  # Recursively define endpoints for the model and any nested models.
  #
  # model: the model class for the API
  # whitelist: a list of fields in Rail's strong params structure, also used to
  #            generate grape's permitted params.
  # routes: An array of OpenStruct representations of a nested route's ancestors
  #

  # Defining the api will break pending migrations during db:migrate, so bail:
  begin ActiveRecord::Migration.check_pending! rescue return end

  # normalize the whitelist to symbols
  strong_params.map! {|f| f.is_a?(String) ? f.to_sym : f }
  # default to a flat representation of the model's attributes if left unspecified
  strong_params = strong_params.blank? ? model.attribute_names.map(&:to_sym) - %i(id updated_at created_at) : strong_params

  # The strong params will be the same for all routes, differing from the Grape params
  # when routes are nested
  whitelist = whitelist( strong_params )

  # As routes are nested keep track of the routes, we are preventing siblings from
  # appending to the routes array here:
  routes = build_routes(routes, model)

  # Top level declaration of the Grape::API namespace for the resource:
  resource routes.first.name.pluralize do
    # yield to prepend user-defined routes under the root namespace first,
    yield if block_given?
  end

  # Then define IntrospectiveGrape's routes:
  define_routes(routes, whitelist)
end

.uploaded_file?(model, field) ⇒ Boolean

Returns:

  • (Boolean) 


424
425
426
 
# File 'lib/introspective_grape/api.rb', line 424

def uploaded_file?(model, field)
  file_attachment?(model, field) && Rack::Multipart::UploadedFile
end

.validations(model, field) ⇒ Object 



357
358
359
 
# File 'lib/introspective_grape/api.rb', line 357

def validations(model, field)
  (model.try(:grape_validations) || {}).with_indifferent_access[field] || {}
end