ROAResearch /
yii2-roa
| 1 | <?php |
||
| 2 | |||
| 3 | namespace roaresearch\yii2\roa\controllers; |
||
| 4 | |||
| 5 | use roaresearch\yii2\roa\{actions, FileRecord, hal\ARContract}; |
||
| 6 | use Yii; |
||
| 7 | use yii\{ |
||
| 8 | base\InvalidRouteException, |
||
| 9 | data\ActiveDataProvider, |
||
| 10 | db\ActiveQuery, |
||
| 11 | filters\VerbFilter, |
||
| 12 | helpers\ArrayHelper, |
||
| 13 | web\MethodNotAllowedHttpException, |
||
| 14 | web\NotFoundHttpException |
||
| 15 | }; |
||
| 16 | |||
| 17 | /** |
||
| 18 | * Resource Controller with OAuth2 Support. |
||
| 19 | * |
||
| 20 | * @author Angel (Faryshta) Guevara <[email protected]> |
||
| 21 | */ |
||
| 22 | class Resource extends \yii\rest\ActiveController |
||
| 23 | { |
||
| 24 | /** |
||
| 25 | * @var string[] list of rest actions defined by default. |
||
| 26 | */ |
||
| 27 | public const DEFAULT_REST_ACTIONS = [ |
||
| 28 | 'index', |
||
| 29 | 'view', |
||
| 30 | 'create', |
||
| 31 | 'update', |
||
| 32 | 'delete', |
||
| 33 | 'file-stream', // download files |
||
| 34 | 'options', |
||
| 35 | ]; |
||
| 36 | |||
| 37 | /** |
||
| 38 | * @var string name of the attribute to be used on `findModel()`. |
||
| 39 | */ |
||
| 40 | public string $idAttribute = 'id'; |
||
| 41 | |||
| 42 | /** |
||
| 43 | * @var ?string attribute name used to filter only the records associated to |
||
| 44 | * the logged user. |
||
| 45 | * If `null` then no filter will be added. |
||
| 46 | */ |
||
| 47 | public ?string $userAttribute; |
||
| 48 | |||
| 49 | /** |
||
| 50 | * @var ?string class name for the model to be used on the search. |
||
| 51 | * Must implement `roaresearch\yii2\roa\ResourceSearch` |
||
| 52 | */ |
||
| 53 | public ?string $searchClass = null; |
||
| 54 | |||
| 55 | /** |
||
| 56 | * @var string name of the form which will hold the GET parameters to filter |
||
| 57 | * results on a search request. |
||
| 58 | */ |
||
| 59 | public string $searchFormName = ''; |
||
| 60 | |||
| 61 | /** |
||
| 62 | * @var string[] $attribute => $param pairs to filter the queries. |
||
| 63 | */ |
||
| 64 | public array $filterParams = []; |
||
| 65 | |||
| 66 | /** |
||
| 67 | * @var string[] array used in `actions\Create::fileAttributes` |
||
| 68 | * @see actions\LoadFileTrait::$fileAttributes |
||
| 69 | */ |
||
| 70 | public array $createFileAttributes = []; |
||
| 71 | |||
| 72 | /** |
||
| 73 | * @var string[] array used in `actions\Update::fileAttributes` |
||
| 74 | * @see actions\LoadFileTrait::$fileAttributes |
||
| 75 | */ |
||
| 76 | public array $updateFileAttributes = []; |
||
| 77 | |||
| 78 | /** |
||
| 79 | * @var string the message shown when no register is found. |
||
| 80 | */ |
||
| 81 | public string $notFoundMessage = 'The record "{id}" does not exists.'; |
||
| 82 | |||
| 83 | /** |
||
| 84 | * @inheritdoc |
||
| 85 | */ |
||
| 86 | 14 | public function behaviors() |
|
| 87 | { |
||
| 88 | return [ |
||
| 89 | // content negotiator, autenticator, etc moved by default to |
||
| 90 | // api container |
||
| 91 | 'verbFilter' => [ |
||
| 92 | 'class' => VerbFilter::class, |
||
| 93 | 14 | 'actions' => $this->buildAllowedVerbs(), |
|
| 94 | ], |
||
| 95 | ]; |
||
| 96 | } |
||
| 97 | |||
| 98 | /** |
||
| 99 | * @inheritdoc |
||
| 100 | */ |
||
| 101 | 14 | public function actions() |
|
| 102 | { |
||
| 103 | 14 | $index = $this->searchClass |
|
| 104 | ? [ |
||
| 105 | 11 | 'class' => actions\Index::class, |
|
| 106 | 11 | 'searchClass' => $this->searchClass, |
|
| 107 | 11 | 'formName' => $this->searchFormName, |
|
| 108 | ] |
||
| 109 | : [ |
||
| 110 | 3 | 'class' => \yii\rest\IndexAction::class, |
|
| 111 | 3 | 'modelClass' => $this->modelClass, |
|
| 112 | 'prepareDataProvider' => [$this, 'indexProvider'], |
||
| 113 | ]; |
||
| 114 | 14 | $interfaces = class_implements($this->modelClass); |
|
| 115 | 14 | $fileStream = isset($interfaces[FileRecord::class]) |
|
| 116 | ? [ |
||
| 117 | 'class' => actions\FileStream::class, |
||
| 118 | 'modelClass' => $this->modelClass, |
||
| 119 | 'findModel' => [$this, 'findModel'], |
||
| 120 | ] |
||
| 121 | 14 | : null; |
|
| 122 | |||
| 123 | return [ |
||
| 124 | 'index' => $index, |
||
| 125 | 'view' => [ |
||
| 126 | 'class' => actions\View::class, |
||
| 127 | 14 | 'modelClass' => $this->modelClass, |
|
| 128 | 'findModel' => [$this, 'findModel'], |
||
| 129 | ], |
||
| 130 | 'update' => [ |
||
| 131 | 'class' => actions\Update::class, |
||
| 132 | 14 | 'modelClass' => $this->modelClass, |
|
| 133 | 'findModel' => [$this, 'findModel'], |
||
| 134 | 14 | 'scenario' => $this->updateScenario, |
|
| 135 | 14 | 'fileAttributes' => $this->updateFileAttributes, |
|
| 136 | ], |
||
| 137 | 'create' => [ |
||
| 138 | 'class' => actions\Create::class, |
||
|
0 ignored issues
–
show
|
|||
| 139 | 14 | 'modelClass' => $this->modelClass, |
|
| 140 | 14 | 'scenario' => $this->createScenario, |
|
| 141 | 14 | 'fileAttributes' => $this->createFileAttributes, |
|
| 142 | ], |
||
| 143 | 'delete' => [ |
||
| 144 | 'class' => actions\Delete::class, |
||
| 145 | 14 | 'modelClass' => $this->modelClass, |
|
| 146 | 'findModel' => [$this, 'findModel'], |
||
| 147 | ], |
||
| 148 | 'file-stream' => $fileStream, |
||
| 149 | 'options' => [ |
||
| 150 | 'class' => \yii\rest\OptionsAction::class, |
||
| 151 | ], |
||
| 152 | ]; |
||
| 153 | } |
||
| 154 | |||
| 155 | /** |
||
| 156 | * Creates a data provider for the request. |
||
| 157 | * |
||
| 158 | * @return ActiveDataProvider |
||
| 159 | */ |
||
| 160 | public function indexProvider(): ActiveDataProvider |
||
| 161 | { |
||
| 162 | return new ActiveDataProvider(['query' => $this->indexQuery()]); |
||
| 163 | } |
||
| 164 | |||
| 165 | /** |
||
| 166 | * Finds the record based on the provided id or throws an exception. |
||
| 167 | * @param int $id the unique identifier for the record. |
||
| 168 | * @return ARContract |
||
| 169 | * @throws NotFoundHttpException if the record can't be found. |
||
| 170 | */ |
||
| 171 | 10 | public function findModel($id): ARContract |
|
| 172 | { |
||
| 173 | 10 | return $this->findQuery($id)->one() ?: throw new NotFoundHttpException( |
|
| 174 | 10 | strtr($this->notFoundMessage, ['{id}' => $id]) |
|
| 175 | ); |
||
| 176 | } |
||
| 177 | |||
| 178 | /** |
||
| 179 | * Creates the query to be used by the `findOne()` method. |
||
| 180 | * |
||
| 181 | * @param int $id the unique identifier |
||
| 182 | * @return ActiveQuery |
||
| 183 | */ |
||
| 184 | 10 | public function findQuery($id): ActiveQuery |
|
| 185 | { |
||
| 186 | 10 | return $this->baseQuery()->andWhere([$this->idAttribute => $id]); |
|
| 187 | } |
||
| 188 | |||
| 189 | /** |
||
| 190 | * Creates the query to be used by the `index` action when `$searchClass` is |
||
| 191 | * not set. |
||
| 192 | * |
||
| 193 | * @return ActiveQuery |
||
| 194 | */ |
||
| 195 | public function indexQuery(): ActiveQuery |
||
| 196 | { |
||
| 197 | return $this->baseQuery(); |
||
| 198 | } |
||
| 199 | |||
| 200 | /** |
||
| 201 | * @return ActiveQuery |
||
| 202 | */ |
||
| 203 | 10 | protected function baseQuery(): ActiveQuery |
|
| 204 | { |
||
| 205 | 10 | return $this->modelClass::find() |
|
| 206 | 10 | ->andFilterWhere($this->filterCondition()); |
|
| 207 | } |
||
| 208 | |||
| 209 | /** |
||
| 210 | * @return array the conditions to filter the base query to find records. |
||
| 211 | */ |
||
| 212 | 10 | protected function filterCondition(): array |
|
| 213 | { |
||
| 214 | 10 | $condition = []; |
|
| 215 | 10 | foreach ($this->filterParams as $attribute => $param) { |
|
| 216 | 4 | if (is_int($attribute)) { |
|
| 217 | 4 | $attribute = $param; |
|
| 218 | } |
||
| 219 | 4 | $condition[$attribute] = Yii::$app->request->getQueryParam($param); |
|
| 220 | } |
||
| 221 | |||
| 222 | 10 | if (isset($this->userAttribute)) { |
|
| 223 | $condition[$this->userAttribute] = Yii::$app->user->id; |
||
| 224 | } |
||
| 225 | |||
| 226 | 10 | return $condition; |
|
| 227 | } |
||
| 228 | |||
| 229 | /** |
||
| 230 | * @inheritdoc |
||
| 231 | */ |
||
| 232 | 14 | protected function verbs() |
|
| 233 | { |
||
| 234 | return [ |
||
| 235 | 14 | 'index' => ['GET', 'HEAD'], |
|
| 236 | 'view' => ['GET', 'HEAD'], |
||
| 237 | 'create' => ['POST'], |
||
| 238 | 'update' => ['PUT', 'PATCH', 'POST'], |
||
| 239 | 'delete' => ['DELETE'], |
||
| 240 | 'file-stream' => ['GET'], |
||
| 241 | 'options' => ['OPTIONS'], |
||
| 242 | ]; |
||
| 243 | } |
||
| 244 | |||
| 245 | /** |
||
| 246 | * @return string[] actions which serve a single record. |
||
| 247 | */ |
||
| 248 | 14 | protected function listRecordActions(): array |
|
| 249 | { |
||
| 250 | 14 | return ['view', 'update', 'delete']; |
|
| 251 | } |
||
| 252 | |||
| 253 | /** |
||
| 254 | * @return string[] actions which serve a collection of records. |
||
| 255 | */ |
||
| 256 | 14 | protected function listCollectionActions(): array |
|
| 257 | { |
||
| 258 | 14 | return ['index', 'create']; |
|
| 259 | } |
||
| 260 | |||
| 261 | /** |
||
| 262 | * Builds the HTTP Methods allowed for each action. |
||
| 263 | * |
||
| 264 | * Since ROA Resources differentiate routes on record routes and collection |
||
| 265 | * rules it was needed to organize the action into record action and |
||
| 266 | * collection actions and make sure that all record/collection actions |
||
| 267 | * returned the same allowed verbs since they are using the same route. |
||
| 268 | * |
||
| 269 | * @return string[] which HTTP Methods are allowed for each action id. |
||
| 270 | * @see VerbFilter::$verbs |
||
| 271 | */ |
||
| 272 | 14 | protected function buildAllowedVerbs(): array |
|
| 273 | { |
||
| 274 | 14 | $verbs = $this->verbs(); |
|
| 275 | 14 | $recordActions = $this->listRecordActions(); |
|
| 276 | 14 | $collectionActions = $this->listCollectionActions(); |
|
| 277 | 14 | $recordVerbs = ['OPTIONS']; |
|
| 278 | 14 | $collectionVerbs = ['OPTIONS']; |
|
| 279 | |||
| 280 | 14 | foreach ($recordActions as $action) { |
|
| 281 | 14 | $recordVerbs = array_merge( |
|
| 282 | $recordVerbs, |
||
| 283 | 14 | ArrayHelper::getValue($verbs, $action, []) |
|
| 284 | ); |
||
| 285 | } |
||
| 286 | |||
| 287 | 14 | $recordVerbs = array_values(array_unique( |
|
| 288 | 14 | array_map('strtoupper', $recordVerbs) |
|
| 289 | )); |
||
| 290 | |||
| 291 | 14 | foreach ($collectionActions as $action) { |
|
| 292 | 14 | $collectionVerbs = array_merge( |
|
| 293 | $collectionVerbs, |
||
| 294 | 14 | ArrayHelper::getValue($verbs, $action, []) |
|
| 295 | ); |
||
| 296 | } |
||
| 297 | |||
| 298 | 14 | $collectionVerbs = array_values(array_unique( |
|
| 299 | 14 | array_map('strtoupper', $collectionVerbs) |
|
| 300 | )); |
||
| 301 | |||
| 302 | 14 | $allowedVerbs = ['options' => 'OPTIONS']; |
|
| 303 | 14 | foreach ($verbs as $action => $defaultVerbs) { |
|
| 304 | 14 | if (in_array($action, $recordActions)) { |
|
| 305 | 14 | $allowedVerbs[$action] = $recordVerbs; |
|
| 306 | 14 | } elseif (in_array($action, $collectionActions)) { |
|
| 307 | 14 | $allowedVerbs[$action] = $collectionVerbs; |
|
| 308 | } else { |
||
| 309 | 14 | $allowedVerbs[$action] = $defaultVerbs; |
|
| 310 | } |
||
| 311 | } |
||
| 312 | |||
| 313 | 14 | foreach (self::DEFAULT_REST_ACTIONS as $action) { |
|
| 314 | 14 | if (!isset($allowedVerbs[$action])) { |
|
| 315 | 1 | if (in_array($action, $recordActions)) { |
|
| 316 | $allowedVerbs[$action] = $recordVerbs; |
||
| 317 | 1 | } elseif (in_array($action, $collectionActions)) { |
|
| 318 | 1 | $allowedVerbs[$action] = $collectionVerbs; |
|
| 319 | } |
||
| 320 | } |
||
| 321 | } |
||
| 322 | |||
| 323 | 14 | return $allowedVerbs; |
|
| 324 | } |
||
| 325 | } |
||
| 326 |
The issue could also be caused by a filter entry in the build configuration. If the path has been excluded in your configuration, e.g.
excluded_paths: ["lib/*"], you can move it to the dependency path list as follows:For further information see https://scrutinizer-ci.com/docs/tools/php/php-scrutinizer/#list-dependency-paths