Merge branch 'noosfero_grape_api' into rails3_api

Conflicts: app/models/article.rb app/models/user.rb config.ru

Merge branch 'noosfero_grape_api' into rails3_api
Conflicts: app/models/article.rb app/models/user.rb config.ru
Victor Costa
2 parents 4b06d2fb 83a8cdbf
Showing 13 changed files with 503 additions and 0 deletions Show diff stats
app/models/article.rb
app/models/comment.rb
app/models/profile.rb
app/models/user.rb
config.ru
db/migrate/20140407013817_add_private_token_info_to_users.rb
lib/api/api.rb
lib/api/entities.rb
lib/api/helpers.rb
lib/api/session.rb
lib/api/v1/articles.rb
lib/api/v1/comments.rb
lib/api/v1/users.rb
@@ -102,6 +102,16 @@ class Article &lt; ActiveRecord::Base
     {:include => 'categories_including_virtual', :conditions => { 'categories.id' => category.id }}
   }
  
+  #FIXME make this test
+  scope :newer_than, lambda { |reference_id|
+    {:conditions => ["articles.id > #{reference_id}"]}
+  }
+
+  #FIXME make this test
+  scope :older_than, lambda { |reference_id|
+    {:conditions => ["articles.id < #{reference_id}"]}
+  }
+
   scope :by_range, lambda { |range| {
     :conditions => [
       'published_at BETWEEN :start_date AND :end_date', { :start_date => range.first, :end_date => range.last }
@@ -658,6 +668,11 @@ class Article &lt; ActiveRecord::Base
     person ? person.id : nil
   end
  
+  #FIXME make this test
+  def author_custom_image(size = :icon)
+    author ? author.profile_custom_image(size) : nil
+  end
+
   def version_license(version_number = nil)
     return license if version_number.nil?
     profile.environment.licenses.find_by_id(versions.find_by_version(version_number).license_id)
@@ -20,6 +20,17 @@ class Comment &lt; ActiveRecord::Base
  
   scope :without_reply, :conditions => ['reply_of_id IS NULL']
  
+  #FIXME make this test
+  named_scope :newer_than, lambda { |reference_id|
+    {:conditions => ["comments.id > #{reference_id}"]}
+  }
+
+  #FIXME make this test
+  named_scope :older_than, lambda { |reference_id|
+    {:conditions => ["comments.id < #{reference_id}"]}
+  }
+
+
   # unauthenticated authors:
   validates_presence_of :name, :if => (lambda { |record| !record.email.blank? })
   validates_presence_of :email, :if => (lambda { |record| !record.name.blank? })
@@ -63,6 +74,11 @@ class Comment &lt; ActiveRecord::Base
     author ? author.url : nil
   end
  
+  #FIXME make this test
+  def author_custom_image(size = :icon)
+    author ? author.profile_custom_image(size) : nil
+  end
+
   def url
     article.view_url.merge(:anchor => anchor)
   end
@@ -877,6 +877,13 @@ private :generate_url, :url_options
     image.public_filename(:icon) if image.present?
   end
  
+  #FIXME make this test
+  def profile_custom_image(size = :icon)
+    image_path = profile_custom_icon if size == :icon
+    image_path ||= image.public_filename(size) if image.present?
+    image_path
+  end
+
   def jid(options = {})
     domain = options[:domain] || environment.default_hostname
     "#{identifier}@#{domain}"
 require 'digest/sha1'
 require 'user_activation_job'
+require 'securerandom'
  
 # User models the system users, and is generated by the acts_as_authenticated
 # Rails generator.
@@ -138,6 +139,18 @@ class User &lt; ActiveRecord::Base
     u && u.authenticated?(password) ? u : nil
   end
  
+  #FIXME make this test
+  def generate_private_token!
+    self.private_token = SecureRandom.hex
+    self.private_token_generated_at = DateTime.now
+    save(false)
+  end
+
+  #FIXME make this test
+  def private_token_expired?
+    self.generate_private_token! if self.private_token.nil? || (self.private_token_generated_at + 2.weeks < DateTime.now)
+  end
+
   # Activates the user in the database.
   def activate
     return false unless self.person
@@ -2,3 +2,14 @@
  
 require ::File.expand_path('../config/environment',  __FILE__)
 run Noosfero::Application
+
+rails_app = Rack::Builder.new do
+  use Rails::Rack::LogTailer
+  use Rails::Rack::Static
+  run ActionController::Dispatcher.new
+end
+ 
+run Rack::Cascade.new([
+  API::API,
+  rails_app
+])
 \ No newline at end of file
@@ -0,0 +1,11 @@
+class AddPrivateTokenInfoToUsers < ActiveRecord::Migration
+  def self.up
+    add_column :users, :private_token, :string
+    add_column :users, :private_token_generated_at, :datetime
+  end
+
+  def self.down
+    remove_column :users, :private_token
+    remove_column :users, :private_token_generated_at
+  end
+end
@@ -0,0 +1,19 @@
+require 'grape'
+Dir["#{Rails.root}/lib/api/*.rb"].each {|file| require file}
+
+module API
+  class API < Grape::API
+    version 'v1'
+    prefix "api"
+    format :json
+    content_type :txt, "text/plain"
+
+    helpers APIHelpers
+ 
+    mount V1::Articles
+    mount V1::Comments
+    mount V1::Users
+    mount Session
+
+  end
+end
@@ -0,0 +1,59 @@
+module API
+  module Entities
+    class Article < Grape::Entity
+      root 'articles', 'article'
+      expose :id, :body, :created_at
+      expose :title, :documentation => {:type => "String", :desc => "Title of the article"}
+
+      expose :author do |article, options|
+        {
+          :id => article.author_id,
+          :name => article.author_name,
+          :icon_url => article.author_custom_image(:icon),
+          :minor_url => article.author_custom_image(:minor),
+          :portrait_url => article.author_custom_image(:portrait),
+          :thumb_url => article.author_custom_image(:thumb),
+        }
+      end
+
+      expose :profile do |article, options|
+        {
+          :id => article.profile.id,
+          :name => article.profile.name,
+          :icon_url => article.profile.profile_custom_image(:icon),
+          :minor_url => article.profile.profile_custom_image(:minor),
+          :portrait_url => article.profile.profile_custom_image(:portrait),
+          :thumb_url => article.profile.profile_custom_image(:thumb),
+        }
+      end
+
+    end
+
+    class Comment < Grape::Entity
+      root 'comments', 'comment'
+      expose :body, :title, :created_at, :id
+
+      expose :author do |comment, options|
+        {
+          :id => comment.author_id,
+          :name => comment.author_name,
+          :icon_url => comment.author_custom_image(:icon),
+          :minor_url => comment.author_custom_image(:minor),
+          :portrait_url => comment.author_custom_image(:portrait),
+          :thumb_url => comment.author_custom_image(:thumb),
+        }
+      end
+
+    end
+
+    class User < Grape::Entity
+      root 'users', 'user'
+      expose :login
+    end
+
+    class UserLogin < User
+      expose :private_token
+    end
+
+  end
+end
@@ -0,0 +1,181 @@
+module API
+  module APIHelpers
+    PRIVATE_TOKEN_PARAM = :private_token
+
+    def logger
+      API.logger
+    end
+
+    def current_user
+      private_token = params[PRIVATE_TOKEN_PARAM].to_s
+      @current_user ||= User.find_by_private_token(private_token)
+      @current_user = nil if !@current_user.nil? && @current_user.private_token_expired?
+      @current_user
+    end
+
+    def current_person
+      current_user.person unless current_user.nil?
+    end
+
+    def logout
+      @current_user = nil
+    end
+
+    def environment
+      @environment
+    end
+
+    def limit
+      limit = params[:limit].to_i
+      limit = default_limit if limit <= 0
+      limit
+    end
+
+    def period(from_date, until_date)
+      if from_date.nil?
+        begin_period = Time.at(0).to_datetime
+        end_period = until_date.nil? ? DateTime.now : until_date
+      else
+        begin_period = from_date
+        end_period = DateTime.now
+      end
+
+      begin_period...end_period
+    end
+
+    def parse_content_type(content_type)
+      return nil if content_type.blank?
+      content_type.split(',').map do |content_type|
+        content_type.camelcase
+      end
+    end
+
+    
+    def make_conditions_with_parameter(params = {})
+      conditions = {}
+      from_date = DateTime.parse(params[:from]) if params[:from]
+      until_date = DateTime.parse(params[:until]) if params[:until]
+
+      conditions[:type] = parse_content_type(params[:content_type]) unless params[:content_type].nil?
+
+      conditions[:created_at] = period(from_date, until_date)
+
+      conditions
+    end
+
+#FIXME see if its needed
+#    def paginate(relation)
+#      per_page  = params[:per_page].to_i
+#      paginated = relation.page(params[:page]).per(per_page)
+#      add_pagination_headers(paginated, per_page)
+#
+#      paginated
+#    end
+
+    def authenticate!
+      unauthorized! unless current_user
+    end
+
+#FIXME see if its needed
+#    def authenticated_as_admin!
+#      forbidden! unless current_user.is_admin?
+#    end
+#
+#FIXME see if its needed
+#    def authorize! action, subject
+#      unless abilities.allowed?(current_user, action, subject)
+#        forbidden!
+#      end
+#    end
+#
+#FIXME see if its needed
+#    def can?(object, action, subject)
+#      abilities.allowed?(object, action, subject)
+#    end
+
+    # Checks the occurrences of required attributes, each attribute must be present in the params hash
+    # or a Bad Request error is invoked.
+    #
+    # Parameters:
+    #   keys (required) - A hash consisting of keys that must be present
+    def required_attributes!(keys)
+      keys.each do |key|
+        bad_request!(key) unless params[key].present?
+      end
+    end
+
+    # Checks the occurrences of uniqueness of attributes, each attribute must be present in the params hash
+    # or a Bad Request error is invoked.
+    #
+    # Parameters:
+    #   keys (unique) - A hash consisting of keys that must be unique
+    def unique_attributes!(obj, keys)
+      keys.each do |key|
+        cant_be_saved_request!(key) if obj.send("find_by_#{key.to_s}", params[key])
+      end
+    end
+
+    def attributes_for_keys(keys)
+      attrs = {}
+      keys.each do |key|
+        attrs[key] = params[key] if params[key].present? or (params.has_key?(key) and params[key] == false)
+      end
+      attrs
+    end
+
+    # error helpers
+    def forbidden!
+      render_api_error!('403 Forbidden', 403)
+    end
+
+    def cant_be_saved_request!(attribute)
+      message = _("(Invalid request) #{attribute} can't be saved")
+      render_api_error!(message, 400)
+    end
+
+    def bad_request!(attribute)
+      message = _("(Bad request) #{attribute} not given")
+      render_api_error!(message, 400)
+    end
+
+    def something_wrong!
+      message = _("Something wrong happened")
+      render_api_error!(message, 400)
+    end
+
+    def unauthorized!
+      render_api_error!(_('Unauthorized'), 401)
+    end
+
+    def not_allowed!
+      render_api_error!(_('Method Not Allowed'), 405)
+    end
+
+    def render_api_error!(message, status)
+      error!({'message' => message, :code => status}, status)
+    end
+
+    protected
+
+    def detect_stuff_by_domain
+      @domain = Domain.find_by_name(request.host)
+      if @domain.nil?
+        @environment = Environment.default
+        if @environment.nil? && Rails.env.development?
+          # This should only happen in development ...
+          @environment = Environment.create!(:name => "Noosfero", :is_default => true)
+        end
+      else
+        @environment = @domain.environment
+      end
+    end
+
+    private
+
+    def default_limit 
+      20
+    end
+
+
+  end
+end
@@ -0,0 +1,44 @@
+module API
+
+  class Session < Grape::API
+
+    # Login to get token
+    #
+    # Parameters:
+    #   login (*required) - user login or email
+    #   password (required) - user password
+    #
+    # Example Request:
+    #  POST /login?login=some&password=pass
+    post "/login" do
+      user ||= User.authenticate(params[:login], params[:password], environment)
+
+      return unauthorized! unless user
+      user.generate_private_token!
+      present user, :with => Entities::UserLogin
+    end
+
+    # Create user.
+    #
+    # Parameters:
+    #   email (required)                  - Email
+    #   password (required)               - Password
+    #   login                             - login
+    # Example Request:
+    #   POST /register?email=some@mail.com&password=pas&login=some
+    post "/register" do
+      required_attributes! [:email, :login, :password]
+      unique_attributes! User, [:email, :login]
+      attrs = attributes_for_keys [:email, :login, :password]
+      attrs[:password_confirmation] = attrs[:password]
+      user = User.new(attrs)
+      if user.save
+        user.activate
+        present user, :with => Entities::User
+      else
+        something_wrong!
+      end
+    end
+
+  end
+end
@@ -0,0 +1,60 @@
+module API
+  module V1
+    class Articles < Grape::API
+      before { detect_stuff_by_domain }
+      before { authenticate! }
+   
+      resource :articles do
+
+        # Collect comments from articles
+        #
+        # Parameters:
+        #   from             - date where the search will begin. If nothing is passed the default date will be the date of the first article created
+        #   oldest           - Collect the oldest comments from reference_id comment. If nothing is passed the newest comments are collected
+        #   limit            - amount of comments returned. The default value is 20
+        #
+        # Example Request:
+        #  GET /articles?from=2013-04-04-14:41:43&until=2014-04-04-14:41:43&limit=10&content_type=Hub
+#    desc 'Articles.', {
+#      :params => API::Entities::Article.documentation
+#    }
+        get do
+  
+          conditions = make_conditions_with_parameter(params)
+                  
+          if params[:reference_id]
+            articles = environment.articles.send("#{params.key?(:oldest) ? 'older_than' : 'newer_than'}", params[:reference_id]).find(:all, :conditions => conditions, :limit => limit, :order => "created_at DESC")
+          else
+            articles = environment.articles.find(:all, :conditions => conditions, :limit => limit, :order => "created_at DESC")
+          end
+          present articles, :with => Entities::Article 
+        end
+  
+        desc "Return the article id" 
+        get ':id' do
+          present environment.articles.find(params[:id]), :with => Entities::Article
+        end
+
+        get ':id/children' do
+          from_date = DateTime.parse(params[:from]) if params[:from]
+          until_date = DateTime.parse(params[:until]) if params[:until]
+
+          conditions = make_conditions_with_parameter(params)
+          if params[:reference_id]
+            articles = environment.articles.find(params[:id]).children.send("#{params.key?(:oldest) ? 'older_than' : 'newer_than'}", params[:reference_id]).find(:all, :conditions => conditions, :limit => limit, :order => "created_at DESC")
+          else
+            articles = environment.articles.find(params[:id]).children.find(:all, :conditions => conditions, :limit => limit, :order => "created_at DESC")
+          end
+          present articles, :with => Entities::Article 
+        end
+
+        get ':id/children/:child_id' do
+          present environment.articles.find(params[:id]).children.find(params[:child_id]), :with => Entities::Article
+        end
+
+
+      end
+   
+    end
+  end
+end
@@ -0,0 +1,44 @@
+module API
+  module V1
+    class Comments < Grape::API
+  
+      before { detect_stuff_by_domain }
+      before { authenticate! }
+   
+      resource :articles do
+        # Collect comments from articles
+        #
+        # Parameters:
+        #   reference_id     - comment id used as reference to collect comment
+        #   oldest           - Collect the oldest comments from reference_id comment. If nothing is passed the newest comments are collected
+        #   limit            - amount of comments returned. The default value is 20
+        #
+        # Example Request:
+        #  GET /articles/12/comments?oldest&limit=10&reference_id=23
+        get ":id/comments" do
+
+          conditions = make_conditions_with_parameter(params)
+
+          if params[:reference_id]
+            comments = environment.articles.find(params[:id]).comments.send("#{params.key?(:oldest) ? 'older_than' : 'newer_than'}", params[:reference_id]).find(:all, :conditions => conditions, :limit => limit, :order => "created_at DESC")
+          else
+            comments = environment.articles.find(params[:id]).comments.find(:all, :conditions => conditions, :limit => limit, :order => "created_at DESC")
+          end
+          present comments, :with => Entities::Comment
+
+        end
+   
+        get ":id/comments/:comment_id" do
+          present environment.articles.find(params[:id]).comments.find(params[:comment_id]), :with => Entities::Comment
+        end
+   
+        # Example Request:
+        #  POST api/v1/articles/12/comments?private_toke=234298743290432&body=new comment
+        post ":id/comments" do
+          present environment.articles.find(params[:id]).comments.create(:author => current_person, :body => params[:body]), :with => Entities::Comment
+        end
+      end
+   
+    end
+  end
+end
@@ -0,0 +1,23 @@
+module API
+  module V1
+    class Users < Grape::API
+   
+      before { authenticate! }
+  
+      resource :users do
+  
+        #FIXME make the pagination
+        #FIXME put it on environment context
+        get do
+          present User.all, :with => Entities::User
+        end
+   
+        get ":id" do
+          present User.find(params[:id]), :with => Entities::User
+        end
+  
+      end
+   
+    end
+  end
+end
...	...	@@ -102,6 +102,16 @@ class Article < ActiveRecord::Base
102	102	{:include => 'categories_including_virtual', :conditions => { 'categories.id' => category.id }}
103	103	}
104	104
	105	+ #FIXME make this test
	106	+ scope :newer_than, lambda { \|reference_id\|
	107	+ {:conditions => ["articles.id > #{reference_id}"]}
	108	+ }
	109	+
	110	+ #FIXME make this test
	111	+ scope :older_than, lambda { \|reference_id\|
	112	+ {:conditions => ["articles.id < #{reference_id}"]}
	113	+ }
	114	+
105	115	scope :by_range, lambda { \|range\| {
106	116	:conditions => [
107	117	'published_at BETWEEN :start_date AND :end_date', { :start_date => range.first, :end_date => range.last }
...	...	@@ -658,6 +668,11 @@ class Article < ActiveRecord::Base
658	668	person ? person.id : nil
659	669	end
660	670
	671	+ #FIXME make this test
	672	+ def author_custom_image(size = :icon)
	673	+ author ? author.profile_custom_image(size) : nil
	674	+ end
	675	+
661	676	def version_license(version_number = nil)
662	677	return license if version_number.nil?
663	678	profile.environment.licenses.find_by_id(versions.find_by_version(version_number).license_id)
...	...
...	...	@@ -20,6 +20,17 @@ class Comment < ActiveRecord::Base
20	20
21	21	scope :without_reply, :conditions => ['reply_of_id IS NULL']
22	22
	23	+ #FIXME make this test
	24	+ named_scope :newer_than, lambda { \|reference_id\|
	25	+ {:conditions => ["comments.id > #{reference_id}"]}
	26	+ }
	27	+
	28	+ #FIXME make this test
	29	+ named_scope :older_than, lambda { \|reference_id\|
	30	+ {:conditions => ["comments.id < #{reference_id}"]}
	31	+ }
	32	+
	33	+
23	34	# unauthenticated authors:
24	35	validates_presence_of :name, :if => (lambda { \|record\| !record.email.blank? })
25	36	validates_presence_of :email, :if => (lambda { \|record\| !record.name.blank? })
...	...	@@ -63,6 +74,11 @@ class Comment < ActiveRecord::Base
63	74	author ? author.url : nil
64	75	end
65	76
	77	+ #FIXME make this test
	78	+ def author_custom_image(size = :icon)
	79	+ author ? author.profile_custom_image(size) : nil
	80	+ end
	81	+
66	82	def url
67	83	article.view_url.merge(:anchor => anchor)
68	84	end
...	...
...	...	@@ -877,6 +877,13 @@ private :generate_url, :url_options
877	877	image.public_filename(:icon) if image.present?
878	878	end
879	879
	880	+ #FIXME make this test
	881	+ def profile_custom_image(size = :icon)
	882	+ image_path = profile_custom_icon if size == :icon
	883	+ image_path \|\|= image.public_filename(size) if image.present?
	884	+ image_path
	885	+ end
	886	+
880	887	def jid(options = {})
881	888	domain = options[:domain] \|\| environment.default_hostname
882	889	"#{identifier}@#{domain}"
...	...
1	1	require 'digest/sha1'
2	2	require 'user_activation_job'
	3	+require 'securerandom'
3	4
4	5	# User models the system users, and is generated by the acts_as_authenticated
5	6	# Rails generator.
...	...	@@ -138,6 +139,18 @@ class User < ActiveRecord::Base
138	139	u && u.authenticated?(password) ? u : nil
139	140	end
140	141
	142	+ #FIXME make this test
	143	+ def generate_private_token!
	144	+ self.private_token = SecureRandom.hex
	145	+ self.private_token_generated_at = DateTime.now
	146	+ save(false)
	147	+ end
	148	+
	149	+ #FIXME make this test
	150	+ def private_token_expired?
	151	+ self.generate_private_token! if self.private_token.nil? \|\| (self.private_token_generated_at + 2.weeks < DateTime.now)
	152	+ end
	153	+
141	154	# Activates the user in the database.
142	155	def activate
143	156	return false unless self.person
...	...
...	...	@@ -2,3 +2,14 @@
2	2
3	3	require ::File.expand_path('../config/environment', __FILE__)
4	4	run Noosfero::Application
	5	+
	6	+rails_app = Rack::Builder.new do
	7	+ use Rails::Rack::LogTailer
	8	+ use Rails::Rack::Static
	9	+ run ActionController::Dispatcher.new
	10	+end
	11	+
	12	+run Rack::Cascade.new([
	13	+ API::API,
	14	+ rails_app
	15	+])
5	16	\ No newline at end of file
...	...
...	...	@@ -0,0 +1,11 @@
	1	+class AddPrivateTokenInfoToUsers < ActiveRecord::Migration
	2	+ def self.up
	3	+ add_column :users, :private_token, :string
	4	+ add_column :users, :private_token_generated_at, :datetime
	5	+ end
	6	+
	7	+ def self.down
	8	+ remove_column :users, :private_token
	9	+ remove_column :users, :private_token_generated_at
	10	+ end
	11	+end
...	...
...	...	@@ -0,0 +1,19 @@
	1	+require 'grape'
	2	+Dir["#{Rails.root}/lib/api/*.rb"].each {\|file\| require file}
	3	+
	4	+module API
	5	+ class API < Grape::API
	6	+ version 'v1'
	7	+ prefix "api"
	8	+ format :json
	9	+ content_type :txt, "text/plain"
	10	+
	11	+ helpers APIHelpers
	12	+
	13	+ mount V1::Articles
	14	+ mount V1::Comments
	15	+ mount V1::Users
	16	+ mount Session
	17	+
	18	+ end
	19	+end
...	...
...	...	@@ -0,0 +1,59 @@
	1	+module API
	2	+ module Entities
	3	+ class Article < Grape::Entity
	4	+ root 'articles', 'article'
	5	+ expose :id, :body, :created_at
	6	+ expose :title, :documentation => {:type => "String", :desc => "Title of the article"}
	7	+
	8	+ expose :author do \|article, options\|
	9	+ {
	10	+ :id => article.author_id,
	11	+ :name => article.author_name,
	12	+ :icon_url => article.author_custom_image(:icon),
	13	+ :minor_url => article.author_custom_image(:minor),
	14	+ :portrait_url => article.author_custom_image(:portrait),
	15	+ :thumb_url => article.author_custom_image(:thumb),
	16	+ }
	17	+ end
	18	+
	19	+ expose :profile do \|article, options\|
	20	+ {
	21	+ :id => article.profile.id,
	22	+ :name => article.profile.name,
	23	+ :icon_url => article.profile.profile_custom_image(:icon),
	24	+ :minor_url => article.profile.profile_custom_image(:minor),
	25	+ :portrait_url => article.profile.profile_custom_image(:portrait),
	26	+ :thumb_url => article.profile.profile_custom_image(:thumb),
	27	+ }
	28	+ end
	29	+
	30	+ end
	31	+
	32	+ class Comment < Grape::Entity
	33	+ root 'comments', 'comment'
	34	+ expose :body, :title, :created_at, :id
	35	+
	36	+ expose :author do \|comment, options\|
	37	+ {
	38	+ :id => comment.author_id,
	39	+ :name => comment.author_name,
	40	+ :icon_url => comment.author_custom_image(:icon),
	41	+ :minor_url => comment.author_custom_image(:minor),
	42	+ :portrait_url => comment.author_custom_image(:portrait),
	43	+ :thumb_url => comment.author_custom_image(:thumb),
	44	+ }
	45	+ end
	46	+
	47	+ end
	48	+
	49	+ class User < Grape::Entity
	50	+ root 'users', 'user'
	51	+ expose :login
	52	+ end
	53	+
	54	+ class UserLogin < User
	55	+ expose :private_token
	56	+ end
	57	+
	58	+ end
	59	+end
...	...
...	...	@@ -0,0 +1,181 @@
	1	+module API
	2	+ module APIHelpers
	3	+ PRIVATE_TOKEN_PARAM = :private_token
	4	+
	5	+ def logger
	6	+ API.logger
	7	+ end
	8	+
	9	+ def current_user
	10	+ private_token = params[PRIVATE_TOKEN_PARAM].to_s
	11	+ @current_user \|\|= User.find_by_private_token(private_token)
	12	+ @current_user = nil if !@current_user.nil? && @current_user.private_token_expired?
	13	+ @current_user
	14	+ end
	15	+
	16	+ def current_person
	17	+ current_user.person unless current_user.nil?
	18	+ end
	19	+
	20	+ def logout
	21	+ @current_user = nil
	22	+ end
	23	+
	24	+ def environment
	25	+ @environment
	26	+ end
	27	+
	28	+ def limit
	29	+ limit = params[:limit].to_i
	30	+ limit = default_limit if limit <= 0
	31	+ limit
	32	+ end
	33	+
	34	+ def period(from_date, until_date)
	35	+ if from_date.nil?
	36	+ begin_period = Time.at(0).to_datetime
	37	+ end_period = until_date.nil? ? DateTime.now : until_date
	38	+ else
	39	+ begin_period = from_date
	40	+ end_period = DateTime.now
	41	+ end
	42	+
	43	+ begin_period...end_period
	44	+ end
	45	+
	46	+ def parse_content_type(content_type)
	47	+ return nil if content_type.blank?
	48	+ content_type.split(',').map do \|content_type\|
	49	+ content_type.camelcase
	50	+ end
	51	+ end
	52	+
	53	+
	54	+ def make_conditions_with_parameter(params = {})
	55	+ conditions = {}
	56	+ from_date = DateTime.parse(params[:from]) if params[:from]
	57	+ until_date = DateTime.parse(params[:until]) if params[:until]
	58	+
	59	+ conditions[:type] = parse_content_type(params[:content_type]) unless params[:content_type].nil?
	60	+
	61	+ conditions[:created_at] = period(from_date, until_date)
	62	+
	63	+ conditions
	64	+ end
	65	+
	66	+#FIXME see if its needed
	67	+# def paginate(relation)
	68	+# per_page = params[:per_page].to_i
	69	+# paginated = relation.page(params[:page]).per(per_page)
	70	+# add_pagination_headers(paginated, per_page)
	71	+#
	72	+# paginated
	73	+# end
	74	+
	75	+ def authenticate!
	76	+ unauthorized! unless current_user
	77	+ end
	78	+
	79	+#FIXME see if its needed
	80	+# def authenticated_as_admin!
	81	+# forbidden! unless current_user.is_admin?
	82	+# end
	83	+#
	84	+#FIXME see if its needed
	85	+# def authorize! action, subject
	86	+# unless abilities.allowed?(current_user, action, subject)
	87	+# forbidden!
	88	+# end
	89	+# end
	90	+#
	91	+#FIXME see if its needed
	92	+# def can?(object, action, subject)
	93	+# abilities.allowed?(object, action, subject)
	94	+# end
	95	+
	96	+ # Checks the occurrences of required attributes, each attribute must be present in the params hash
	97	+ # or a Bad Request error is invoked.
	98	+ #
	99	+ # Parameters:
	100	+ # keys (required) - A hash consisting of keys that must be present
	101	+ def required_attributes!(keys)
	102	+ keys.each do \|key\|
	103	+ bad_request!(key) unless params[key].present?
	104	+ end
	105	+ end
	106	+
	107	+ # Checks the occurrences of uniqueness of attributes, each attribute must be present in the params hash
	108	+ # or a Bad Request error is invoked.
	109	+ #
	110	+ # Parameters:
	111	+ # keys (unique) - A hash consisting of keys that must be unique
	112	+ def unique_attributes!(obj, keys)
	113	+ keys.each do \|key\|
	114	+ cant_be_saved_request!(key) if obj.send("find_by_#{key.to_s}", params[key])
	115	+ end
	116	+ end
	117	+
	118	+ def attributes_for_keys(keys)
	119	+ attrs = {}
	120	+ keys.each do \|key\|
	121	+ attrs[key] = params[key] if params[key].present? or (params.has_key?(key) and params[key] == false)
	122	+ end
	123	+ attrs
	124	+ end
	125	+
	126	+ # error helpers
	127	+ def forbidden!
	128	+ render_api_error!('403 Forbidden', 403)
	129	+ end
	130	+
	131	+ def cant_be_saved_request!(attribute)
	132	+ message = _("(Invalid request) #{attribute} can't be saved")
	133	+ render_api_error!(message, 400)
	134	+ end
	135	+
	136	+ def bad_request!(attribute)
	137	+ message = _("(Bad request) #{attribute} not given")
	138	+ render_api_error!(message, 400)
	139	+ end
	140	+
	141	+ def something_wrong!
	142	+ message = _("Something wrong happened")
	143	+ render_api_error!(message, 400)
	144	+ end
	145	+
	146	+ def unauthorized!
	147	+ render_api_error!(_('Unauthorized'), 401)
	148	+ end
	149	+
	150	+ def not_allowed!
	151	+ render_api_error!(_('Method Not Allowed'), 405)
	152	+ end
	153	+
	154	+ def render_api_error!(message, status)
	155	+ error!({'message' => message, :code => status}, status)
	156	+ end
	157	+
	158	+ protected
	159	+
	160	+ def detect_stuff_by_domain
	161	+ @domain = Domain.find_by_name(request.host)
	162	+ if @domain.nil?
	163	+ @environment = Environment.default
	164	+ if @environment.nil? && Rails.env.development?
	165	+ # This should only happen in development ...
	166	+ @environment = Environment.create!(:name => "Noosfero", :is_default => true)
	167	+ end
	168	+ else
	169	+ @environment = @domain.environment
	170	+ end
	171	+ end
	172	+
	173	+ private
	174	+
	175	+ def default_limit
	176	+ 20
	177	+ end
	178	+
	179	+
	180	+ end
	181	+end
...	...
...	...	@@ -0,0 +1,44 @@
	1	+module API
	2	+
	3	+ class Session < Grape::API
	4	+
	5	+ # Login to get token
	6	+ #
	7	+ # Parameters:
	8	+ # login (*required) - user login or email
	9	+ # password (required) - user password
	10	+ #
	11	+ # Example Request:
	12	+ # POST /login?login=some&password=pass
	13	+ post "/login" do
	14	+ user \|\|= User.authenticate(params[:login], params[:password], environment)
	15	+
	16	+ return unauthorized! unless user
	17	+ user.generate_private_token!
	18	+ present user, :with => Entities::UserLogin
	19	+ end
	20	+
	21	+ # Create user.
	22	+ #
	23	+ # Parameters:
	24	+ # email (required) - Email
	25	+ # password (required) - Password
	26	+ # login - login
	27	+ # Example Request:
	28	+ # POST /register?email=some@mail.com&password=pas&login=some
	29	+ post "/register" do
	30	+ required_attributes! [:email, :login, :password]
	31	+ unique_attributes! User, [:email, :login]
	32	+ attrs = attributes_for_keys [:email, :login, :password]
	33	+ attrs[:password_confirmation] = attrs[:password]
	34	+ user = User.new(attrs)
	35	+ if user.save
	36	+ user.activate
	37	+ present user, :with => Entities::User
	38	+ else
	39	+ something_wrong!
	40	+ end
	41	+ end
	42	+
	43	+ end
	44	+end
...	...