# JSONAPI::Serializers [![Build Status](https://travis-ci.org/fotinakis/jsonapi-serializers.svg?branch=master)](https://travis-ci.org/fotinakis/jsonapi-serializers) [![Gem Version](https://badge.fury.io/rb/jsonapi-serializers.svg)](http://badge.fury.io/rb/jsonapi-serializers) JSONAPI::Serializers is a simple library for serializing Ruby objects and their relationships into the [JSON:API format](http://jsonapi.org/format/). This library is up-to-date with the finalized v1 JSON API spec. * [Features](#features) * [Installation](#installation) * [Usage](#usage) * [Define a serializer](#define-a-serializer) * [Serialize an object](#serialize-an-object) * [Serialize a collection](#serialize-a-collection) * [Null handling](#null-handling) * [Multiple attributes](#multiple-attributes) * [Custom attributes](#custom-attributes) * [More customizations](#more-customizations) * [Base URL](#base-url) * [Root metadata](#root-metadata) * [Explicit serializer discovery](#explicit-serializer-discovery) * [Relationships](#relationships) * [Compound documents and includes](#compound-documents-and-includes) * [Relationship path handling](#relationship-path-handling) * [Rails example](#rails-example) * [Unfinished business](#unfinished-business) * [Contributing](#contributing) ## Features * Works with **any Ruby web framework**, including Rails, Sinatra, etc. This is a pure Ruby library. * Supports the readonly features of the JSON:API spec. * **Full support for compound documents** ("side-loading") and the `include` parameter. * Similar interface to ActiveModel::Serializers, should provide an easy migration path. * Intentionally unopinionated and simple, allows you to structure your app however you would like and then serialize the objects at the end. Easy to integrate with your existing authorization systems and service objects. JSONAPI::Serializers was built as an intentionally simple serialization interface. It makes no assumptions about your database structure or routes and it does not provide controllers or any create/update interface to the objects. It is a library, not a framework. You will probably still need to do work to make your API fully compliant with the nuances of the [JSON:API spec](http://jsonapi.org/format/), for things like supporting `/relationships` routes and for supporting write actions like creating or updating objects. If you are looking for a more complete and opinionated framework, see the [jsonapi-resources](https://github.com/cerebris/jsonapi-resources) project. ## Installation Add this line to your application's Gemfile: ```ruby gem 'jsonapi-serializers' ``` Or install directly with `gem install jsonapi-serializers`. ## Usage ### Define a serializer ```ruby require 'jsonapi-serializers' class PostSerializer include JSONAPI::Serializer attribute :title attribute :content end ``` ### Serialize an object ```ruby JSONAPI::Serializer.serialize(post) ``` Returns a hash: ```json { "data": { "id": "1", "type": "posts", "attributes": { "title": "Hello World", "content": "Your first post" }, "links": { "self": "/posts/1" } } } ``` ### Serialize a collection ```ruby JSONAPI::Serializer.serialize(posts, is_collection: true) ``` Returns: ```json { "data": [ { "id": "1", "type": "posts", "attributes": { "title": "Hello World", "content": "Your first post" }, "links": { "self": "/posts/1" } }, { "id": "2", "type": "posts", "attributes": { "title": "Hello World again", "content": "Your second post" }, "links": { "self": "/posts/2" } } ] } ``` You must always pass `is_collection: true` when serializing a collection, see [Null handling](#null-handling). ### Null handling ```ruby JSONAPI::Serializer.serialize(nil) ``` Returns: ```json { "data": null } ``` And serializing an empty collection: ```ruby JSONAPI::Serializer.serialize([], is_collection: true) ``` Returns: ```json { "data": [] } ``` Note that the JSON:API spec distinguishes in how null/empty is handled for single objects vs. collections, so you must always provide `is_collection: true` when serializing multiple objects. If you attempt to serialize multiple objects without this flag (or a single object with it on) a `JSONAPI::Serializer::AmbiguousCollectionError` will be raised. ### Multiple attributes You could declare multiple attributes at once: ```ruby attributes :title, :body, :contents ``` ### Custom attributes By default the serializer looks for the same name of the attribute on the object it is given. You can customize this behavior by providing a block to `attribute`, `has_one`, or `has_many`: ```ruby attribute :content do object.body end has_one :comment do Comment.where(post: object).take! end has_many :authors do Author.where(post: object) end ``` The block is evaluated within the serializer instance, so it has access to the `object` and `context` instance variables. ### More customizations Many other formatting and customizations are possible by overriding any of the following instance methods on your serializers. ```ruby # Override this to customize the JSON:API "id" for this object. # Always return a string from this method to conform with the JSON:API spec. def id object.id.to_s end ``` ```ruby # Override this to customize the JSON:API "type" for this object. # By default, the type is the object's class name lowercased, pluralized, and dasherized, # per the spec naming recommendations: http://jsonapi.org/recommendations/#naming # For example, 'MyApp::LongCommment' will become the 'long-comments' type. def type object.class.name.demodulize.tableize.dasherize end ``` ```ruby # Override this to customize how attribute names are formatted. # By default, attribute names are dasherized per the spec naming recommendations: # http://jsonapi.org/recommendations/#naming def format_name(attribute_name) attribute_name.to_s.dasherize end ``` ```ruby # The opposite of format_name. Override this if you override format_name. def unformat_name(attribute_name) attribute_name.to_s.underscore end ``` ```ruby # Override this to provide resource-object metadata. # http://jsonapi.org/format/#document-structure-resource-objects def meta end ``` ```ruby # Override this to set a base URL (http://example.com) for all links. No trailing slash. def base_url @base_url end ``` ```ruby def self_link "#{base_url}/#{type}/#{id}" end ``` ```ruby def relationship_self_link(attribute_name) "#{self_link}/links/#{format_name(attribute_name)}" end ``` ```ruby def relationship_related_link(attribute_name) "#{self_link}/#{format_name(attribute_name)}" end ``` If you override `self_link`, `relationship_self_link`, or `relationship_related_link` to return `nil`, the link will be excluded from the serialized object. ### Base URL You can override the `base_url` instance method to set a URL to be used in all links. ```ruby class BaseSerializer include JSONAPI::Serializer def base_url 'http://example.com' end end class PostSerializer < BaseSerializer attribute :title attribute :content has_one :author has_many :comments end JSONAPI::Serializer.serialize(post) ``` Returns: ```json { "data": { "id": "1", "type": "posts", "attributes": { "title": "Hello World", "content": "Your first post" }, "links": { "self": "http://example.com/posts/1" }, "relationships": { "author": { "links": { "self": "http://example.com/posts/1/relationships/author", "related": "http://example.com/posts/1/author" } }, "comments": { "links": { "self": "http://example.com/posts/1/relationships/comments", "related": "http://example.com/posts/1/comments" }, } } } } ``` Alternatively, you can specify `base_url` as an argument to `serialize` which allows you to build the URL with different subdomains or other logic from the request: ```ruby JSONAPI::Serializer.serialize(post, base_url: 'http://example.com') ``` Note: if you override `self_link` in your serializer and leave out `base_url`, it will not be included. ### Root metadata You can pass a `meta` argument to specify top-level metadata: ```ruby JSONAPI::Serializer.serialize(post, meta: {copyright: 'Copyright 2015 Example Corp.'}) ``` ### Explicit serializer discovery By default, jsonapi-serializers assumes that the serializer class for `Namespace::User` is `Namespace::UserSerializer`. You can override this behavior on a per-object basis by implementing the `jsonapi_serializer_class_name` method. ```ruby class User def jsonapi_serializer_class_name 'SomeOtherNamespace::CustomUserSerializer' end end ``` Now, when a `User` object is serialized, it will use the `SomeOtherNamespace::CustomUserSerializer`. ## Relationships You can easily specify relationships with the `has_one` and `has_many` directives. ```ruby class BaseSerializer include JSONAPI::Serializer end class PostSerializer < BaseSerializer attribute :title attribute :content has_one :author has_many :comments end class UserSerializer < BaseSerializer attribute :name end class CommentSerializer < BaseSerializer attribute :content has_one :user end ``` Note that when serializing a post, the `author` association will come from the `author` attribute on the `Post` instance, no matter what type it is (in this case it is a `User`). This will work just fine, because JSONAPI::Serializers automatically finds serializer classes by appending `Serializer` to the object's class name. This behavior can be customized. Because the full class name is used when discovering serializers, JSONAPI::Serializers works with any custom namespaces you might have, like a Rails Engine or standard Ruby module namespace. ### Compound documents and includes > To reduce the number of HTTP requests, servers MAY allow responses that include related resources along with the requested primary resources. Such responses are called "compound documents". > [JSON:API Compound Documents](http://jsonapi.org/format/#document-structure-compound-documents) JSONAPI::Serializers supports compound documents with a simple `include` parameter. For example: ```ruby JSONAPI::Serializer.serialize(post, include: ['author', 'comments', 'comments.user']) ``` Returns: ```json { "data": { "id": "1", "type": "posts", "attributes": { "title": "Hello World", "content": "Your first post" }, "links": { "self": "/posts/1" }, "relationships": { "author": { "links": { "self": "/posts/1/relationships/author", "related": "/posts/1/author" }, "data": { "type": "users", "id": "1" } }, "comments": { "links": { "self": "/posts/1/relationships/comments", "related": "/posts/1/comments" }, "data": [ { "type": "comments", "id": "1" } ] } } }, "included": [ { "id": "1", "type": "users", "attributes": { "name": "Post Author" }, "links": { "self": "/users/1" } }, { "id": "1", "type": "comments", "attributes": { "content": "Have no fear, sers, your king is safe." }, "links": { "self": "/comments/1" }, "relationships": { "user": { "links": { "self": "/comments/1/relationships/user", "related": "/comments/1/user" }, "data": { "type": "users", "id": "2" } }, "post": { "links": { "self": "/comments/1/relationships/post", "related": "/comments/1/post" } } } }, { "id": "2", "type": "users", "attributes": { "name": "Barristan Selmy" }, "links": { "self": "/users/2" } } ] } ``` Notice a few things: * The [primary data](http://jsonapi.org/format/#document-structure-top-level) relationships now include "linkage" information for each relationship that was included. * The related objects themselves are loaded in the top-level `included` member. * The related objects _also_ include "linkage" data when a deeper relationship is also present in the compound document. This is a very powerful feature of the JSON:API spec, and allows you to deeply link complicated relationships all in the same document and in a single HTTP response. JSONAPI::Serializers automatically includes the correct linkage data for whatever `include` paths you specify. This conforms to this part of the spec: > Note: Full linkage ensures that included resources are related to either the primary data (which could be resource objects or resource identifier objects) or to each other. > [JSON:API Compound Documents](http://jsonapi.org/format/#document-compound-documents) #### Relationship path handling The `include` param also accepts a string of [relationship paths](http://jsonapi.org/format/#fetching-includes), ie. `include: 'author,comments,comments.user'` so you can pass an `?include` query param directly through to the serialize method. Be aware that letting users pass arbitrary relationship paths might introduce security issues depending on your authorization setup, where a user could `include` a relationship they might not be authorized to see directly. Be aware of what you allow API users to include. ## Rails example ```ruby # app/serializers/base_serializer.rb class BaseSerializer include JSONAPI::Serializer def self_link "/api/v1#{super}" end end # app/serializers/post_serializer.rb class PostSerializer < BaseSerializer attribute :title attribute :content end # app/controllers/api/v1/base_controller.rb class Api::V1::BaseController < ActionController::Base # Convenience methods for serializing models: def serialize_model(model, options = {}) options[:is_collection] = false JSONAPI::Serializer.serialize(model, options) end def serialize_models(models, options = {}) options[:is_collection] = true JSONAPI::Serializer.serialize(models, options) end end # app/controllers/api/v1/posts_controller.rb class Api::V1::ReposController < Api::V1::BaseController def index posts = Post.all render json: serialize_models(posts) end def show post = Post.find(params[:id]) render json: serialize_model(post) end end # config/initializers/jsonapi_mimetypes.rb # Without this mimetype registration, controllers will not automatically parse JSON API params. module JSONAPI MIMETYPE = "application/vnd.api+json" end Mime::Type.register(JSONAPI::MIMETYPE, :api_json) # Rails 4 ActionDispatch::ParamsParser::DEFAULT_PARSERS[Mime::Type.lookup(JSONAPI::MIMETYPE)] = lambda do |body| JSON.parse(body) end # Rails 5 moved DEFAULT_PARSERS ActionDispatch::Http::Parameters::DEFAULT_PARSERS[Mime::Type.lookup(JSONAPI::MIMETYPE)] = lambda do |body| JSON.parse(body) end ``` ## Unfinished business * Support for passing `context` through to serializers is partially complete, but needs more work. * Support for a `serializer_class` attribute on objects that overrides serializer discovery, would love a PR contribution for this. * Support for the `fields` spec is planned, would love a PR contribution for this. * Support for pagination/sorting is unlikely to be supported because it would likely involve coupling to ActiveRecord, but please open an issue if you have ideas of how to support this generically. ## Release notes * v0.5.0: Support for explicit serializer discovery. * v0.4.0: Support for declaring multiple `attributes`. * v0.3.1: Improve performance of loading included relationships. * v0.3.0: Add top-level `meta` support. * v0.2.6: Add `base_url` support. * v0.2.5: Allow disabling ambiguous collection checks for Sequel support. * v0.2.4: Improve handling for nil relationship links. * v0.2.3: Support serializers with no attributes. * v0.2.2: Compliance fix for excluding empty relationship objects. * v0.2.1: Compliance fix for self links. * v0.2.0: Initial release with support for the final v1 JSON API spec. ## Contributing 1. Fork it ( https://github.com/fotinakis/jsonapi-serializers/fork ) 2. Create your feature branch (`git checkout -b my-new-feature`) 3. Commit your changes (`git commit -am 'Add some feature'`) 4. Push to the branch (`git push origin my-new-feature`) 5. Create a new Pull Request Throw a ★ on it! :)