Contents

module Shipit
  module Api
    class BaseController < ActionController::Base
      include Shipit::Engine.routes.url_helpers
      include Rendering
      include Cacheable
      include Paginable

      rescue_from ApiClient::InsufficientPermission, with: :insufficient_permission
      rescue_from TaskDefinition::NotFound, with: :not_found

      class << self
        def require_permission(operation, scope, options = {})
          before_action(options) { require_permission!(operation, scope) }
        end
      end

      before_action :authenticate_api_client

      def index
        render json: {stacks_url: api_stacks_url}
      end

      private

      def authenticate_api_client
        @current_api_client = authenticate_with_http_basic do |*parts|
          token = parts.select(&:present?).join('--')
          ApiClient.authenticate(token)
        end
        return if @current_api_client
        headers['WWW-Authenticate'] = 'Basic realm="Authentication token"'
        render status: :unauthorized, json: {message: 'Bad credentials'}
      end

      attr_reader :current_api_client

      def current_user
        @current_user ||= identify_user || AnonymousUser.new
      end

      def identify_user
        user_login = request.headers['X-Shipit-User'].presence
        User.find_by(login: user_login) if user_login
      end

      def stacks
        @stacks ||= current_api_client.stack_id? ? Stack.where(id: current_api_client.stack_id) : Stack.all
      end

      def stack
        @stack ||= stacks.from_param!(params[:stack_id])
      end

      def require_permission!(operation, scope)
        current_api_client.check_permissions!(operation, scope)
      end

      def insufficient_permission(error)
        render status: :forbidden, json: {message: error.message}
      end

      def not_found(_error)
        render status: :not_found, json: {status: '404', error: 'Not Found'}
      end
    end
  end
end

Version data entries

6 entries across 6 versions & 1 rubygems

Version	Path
shipit-engine-0.7.0	app/controllers/shipit/api/base_controller.rb
shipit-engine-0.6.4	app/controllers/shipit/api/base_controller.rb
shipit-engine-0.6.3	app/controllers/shipit/api/base_controller.rb
shipit-engine-0.6.2	app/controllers/shipit/api/base_controller.rb
shipit-engine-0.6.1	app/controllers/shipit/api/base_controller.rb
shipit-engine-0.6.0	app/controllers/shipit/api/base_controller.rb