helpers.rb
2.82 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
module API
module APIHelpers
PRIVATE_TOKEN_PARAM = :private_token
def current_user
private_token = params[PRIVATE_TOKEN_PARAM].to_s
@current_user ||= User.find_by_private_token(private_token)
@current_user = nil if !@current_user.nil? && @current_user.private_token_expired?
@current_user
end
def logout
@current_user = nil
end
#FIXME see if its needed
# def paginate(relation)
# per_page = params[:per_page].to_i
# paginated = relation.page(params[:page]).per(per_page)
# add_pagination_headers(paginated, per_page)
#
# paginated
# end
def authenticate!
unauthorized! unless current_user
end
#FIXME see if its needed
# def authenticated_as_admin!
# forbidden! unless current_user.is_admin?
# end
#
#FIXME see if its needed
# def authorize! action, subject
# unless abilities.allowed?(current_user, action, subject)
# forbidden!
# end
# end
#
#FIXME see if its needed
# def can?(object, action, subject)
# abilities.allowed?(object, action, subject)
# end
# Checks the occurrences of required attributes, each attribute must be present in the params hash
# or a Bad Request error is invoked.
#
# Parameters:
# keys (required) - A hash consisting of keys that must be present
def required_attributes!(keys)
keys.each do |key|
bad_request!(key) unless params[key].present?
end
end
# Checks the occurrences of uniqueness of attributes, each attribute must be present in the params hash
# or a Bad Request error is invoked.
#
# Parameters:
# keys (unique) - A hash consisting of keys that must be unique
def unique_attributes!(obj, keys)
keys.each do |key|
cant_be_saved_request!(key) if obj.send("find_by_#{key.to_s}", params[key])
end
end
def attributes_for_keys(keys)
attrs = {}
keys.each do |key|
attrs[key] = params[key] if params[key].present? or (params.has_key?(key) and params[key] == false)
end
attrs
end
# error helpers
def forbidden!
render_api_error!('403 Forbidden', 403)
end
def cant_be_saved_request!(attribute)
message = _("(Invalid request) #{attribute} can't be saved")
render_api_error!(message, 400)
end
def bad_request!(attribute)
message = _("(Bad request) #{attribute} not given")
render_api_error!(message, 400)
end
def something_wrong!
message = _("Something wrong happened")
render_api_error!(message, 400)
end
def unauthorized!
render_api_error!(_('Unauthorized'), 401)
end
def not_allowed!
render_api_error!(_('Method Not Allowed'), 405)
end
def render_api_error!(message, status)
error!({'message' => message, :code => status}, status)
end
end
end