Contents

require File.dirname(__FILE__) + '/../authorization.rb'
require File.dirname(__FILE__) + '/dsl.rb'
require File.dirname(__FILE__) + '/runtime.rb'

#
# This mixin can be used to add declarative authorization support to APIs built using Grape
# https://github.com/ruby-grape/grape
#
# Usage:
#   class MyApi < Grape::API
#     include Authorization::Controller::Grape
#
#     get :hello do
#     end
#   end
#
# NOTE: actions in authorization rules must be named `{METHOD} {URL}`. eg
#   has_permission_on :my_api, to: 'GET /my_api/hello'
#
module Authorization
  module Controller
    module Grape
      def self.included(base) # :nodoc:
        base.extend ClassMethods

        base.extend ::Authorization::Controller::DSL

        base.module_eval do
          add_filter!
        end

        base.helpers do
          include ::Authorization::Controller::Runtime

          def authorization_engine
            ::Authorization::Engine.instance
          end

          def filter_access_filter # :nodoc:
            unless allowed?("#{request.request_method} #{route.origin}")
              if respond_to?(:permission_denied, true)
                # permission_denied needs to render or redirect
                send(:permission_denied)
              else
                error!('You are not allowed to access this action.', 403)
              end
            end
          end

          def logger
            ::Rails.logger
          end

          protected

          def api_class
            options[:for]
          end
        end
      end

      module ClassMethods
        def controller_name
          name.demodulize.underscore
        end

        def add_filter!
          before do
            send(:filter_access_filter)
          end
        end

        def reset_filter!
          # Not required with Grape
        end
      end
    end
  end
end

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
ae_declarative_authorization-0.9.2	lib/declarative_authorization/controller/grape.rb
ae_declarative_authorization-0.9.1	lib/declarative_authorization/controller/grape.rb
ae_declarative_authorization-0.9.0	lib/declarative_authorization/controller/grape.rb