Forum https://discourse.hanamirb.org – Code of Conduct http://hanamirb.org/community/#code-of-conduct
Some pseudocode:
def figure_out_handler(rack_env)
# some calls to Hanami routing in here ...
"#{application_name}/#{controller_name}#{action_name}"
endI have several apps (Web and Api, more TBD), mounted at / and /api. If I had just one app, I could call MyApp.routes.recognize(env).action on it, but I with my setup I think I have to go through Hanami.app to resolve things, which I haven't been able to figure out.
I'd like to use this to add an Hanami-instrumentation for the appsignal service and gem.
class PathResolver
def self.call(path)
new.call(path)
end
def call(path)
app_configs = Hanami.configuration.mounted.values
app_configs.map do |app_config|
return 'root' if path == '/'
next unless path.start_with?(app_config.path_prefix)
# returns Api, Web, ...
app_constant = Module.const_get(app_config.to_s.split('::').first)
relative_path = path.split(app_config.path_prefix).last
# returns either nil or something of the form "web_controllers/alive#index"
app_constant.routes.recognize(relative_path).action
end.compact.first # return first non-nil value
end
end
controller = self.class.to_s.split("::")[2]
action = self.class.to_s.split("::")[3]
add_book will create the book and doesn't work when passed an ID (or a book object) https://guides.hanamirb.org/associations/has-many/#add-and-remove
No route (path) could be generated for :books - please check given arguments
Hanami::Controller::Configuration.new do |config|Hi, I'm setting a session variable in app A and it's not available in the default Web app once redirect happens. It's available in the source app though. Is this expected behavior?
I've inspected session IDs in the origin app and in the target redirected app and they are different. So how can/should I pass the session variables from one app to the next? I need this for authentication and currently it doesn't work due to this behavior.
verify_csrf_token?, but this seems not the way to go in production. What is the way to go about this?
@inouire_twitter True, in these cases there are no forms generated with the official helper and sessions are enabled for the app in question. We use 1 template to build a complex editor supporting multiple ajax calls to different interactors.
Here is one code example:
$.ajax({
type: "POST",
url: "/wordrocket/term_records",
datatype: "json",
data: {term_record:
{
source_term: $("#tmsr-wr-input-source-term").val(),
target_term: $("#tmsr-wr-input-target-term").val(),
src_language: $("#tmsr-wr-select-source-language").val(),
trg_language: $("#tmsr-wr-select-target-language").val(),
domain_id: $("#tmsr-wr-select-term-domain").val(),
definition: $("#tmsr-wr-textarea-term-definition").val()
}
},So, is disabling csrf token verification safe in such cases?
How would we recreate and pass the token? I've been searching online for hanami (a few mentions in gitter from the Lotus times) and non-hanami references, but I still don't know how to do this.
About recreating it, I'd guess that the logic is somewhere in https://github.com/hanami/helpers but I didn't find it yet
Yes, I've been looking there as well, but even if were to use the form helper, I don't suppose we'd have access to the token itself.