diff options
| -rw-r--r-- | README.md | 2 | ||||
| -rw-r--r-- | docs/api-guide/authentication.md | 17 | ||||
| -rw-r--r-- | docs/topics/credits.md | 2 | ||||
| -rw-r--r-- | rest_framework/compat.py | 2 | ||||
| -rw-r--r-- | rest_framework/decorators.py | 2 | ||||
| -rw-r--r-- | rest_framework/fields.py | 7 | ||||
| -rw-r--r-- | rest_framework/generics.py | 4 | ||||
| -rw-r--r-- | rest_framework/mixins.py | 11 | ||||
| -rw-r--r-- | rest_framework/renderers.py | 2 | ||||
| -rw-r--r-- | rest_framework/response.py | 7 | ||||
| -rw-r--r-- | rest_framework/serializers.py | 15 | ||||
| -rw-r--r-- | rest_framework/settings.py | 2 | ||||
| -rw-r--r-- | rest_framework/tests/hyperlinkedserializers.py | 42 | ||||
| -rw-r--r-- | rest_framework/tests/models.py | 5 | ||||
| -rw-r--r-- | rest_framework/tests/pk_relations.py | 1 | ||||
| -rw-r--r-- | rest_framework/tests/throttling.py | 2 | ||||
| -rw-r--r-- | rest_framework/urlpatterns.py | 2 | ||||
| -rw-r--r-- | rest_framework/urls.py | 4 | ||||
| -rw-r--r-- | rest_framework/views.py | 2 | 
19 files changed, 105 insertions, 26 deletions
@@ -33,6 +33,7 @@ There is also a sandbox API you can use for testing purposes, [available here][s  * [Markdown] - Markdown support for the self describing API.  * [PyYAML] - YAML content type support. +* [django-filter] - Filtering support.  # Installation @@ -145,4 +146,5 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.  [urlobject]: https://github.com/zacharyvoase/urlobject  [markdown]: http://pypi.python.org/pypi/Markdown/  [pyyaml]: http://pypi.python.org/pypi/PyYAML +[django-filter]: https://github.com/alex/django-filter diff --git a/docs/api-guide/authentication.md b/docs/api-guide/authentication.md index 18620f49..a30bd22c 100644 --- a/docs/api-guide/authentication.md +++ b/docs/api-guide/authentication.md @@ -97,6 +97,23 @@ If successfully authenticated, `TokenAuthentication` provides the following cred  **Note:** If you use `TokenAuthentication` in production you must ensure that your API is only available over `https` only. +If you want every user to have an automatically generated Token, you can simply catch the User's `post_save` signal. + +    @receiver(post_save, sender=User) +    def create_auth_token(sender, instance=None, created=False, **kwargs): +        if created: +            Token.objects.create(user=instance) + +If you've already created some User`'s, you can run a script like this. + +    from django.contrib.auth.models import User +    from rest_framework.authtoken.models import Token + +    for user in User.objects.all(): +        Token.objects.get_or_create(user=user) + +When using TokenAuthentication, it may be useful to add a login view for clients to retrieve the token.  +  REST framework provides a built-in login view for clients to retrieve the token called `rest_framework.authtoken.obtain_auth_token`. To use it, add a pattern to include the token login view for clients as follows:      urlpatterns += patterns('', diff --git a/docs/topics/credits.md b/docs/topics/credits.md index f378a521..0669d88a 100644 --- a/docs/topics/credits.md +++ b/docs/topics/credits.md @@ -59,6 +59,7 @@ The following people have helped make REST framework great.  * Toni Michel - [tonimichel]  * Ben Konrath - [benkonrath]  * Marc Aymerich - [glic3rinu] +* Ludwig Kraatz - [ludwigkraatz]  * Rob Romano - [robromano]  Many thanks to everyone who's contributed to the project. @@ -154,4 +155,5 @@ To contact the author directly:  [tonimichel]: https://github.com/tonimichel  [benkonrath]: https://github.com/benkonrath  [glic3rinu]: https://github.com/glic3rinu +[ludwigkraatz]: https://github.com/ludwigkraatz  [robromano]: https://github.com/robromano diff --git a/rest_framework/compat.py b/rest_framework/compat.py index 5055bfd3..e38e7c33 100644 --- a/rest_framework/compat.py +++ b/rest_framework/compat.py @@ -1,6 +1,6 @@  """  The `compat` module provides support for backwards compatibility with older -versions of django/python, and compatbility wrappers around optional packages. +versions of django/python, and compatibility wrappers around optional packages.  """  # flake8: noqa  import django diff --git a/rest_framework/decorators.py b/rest_framework/decorators.py index a231f191..1b710a03 100644 --- a/rest_framework/decorators.py +++ b/rest_framework/decorators.py @@ -17,7 +17,7 @@ def api_view(http_method_names):          )          # Note, the above allows us to set the docstring. -        # It is the equivelent of: +        # It is the equivalent of:          #          #     class WrappedAPIView(APIView):          #         pass diff --git a/rest_framework/fields.py b/rest_framework/fields.py index a4e29a30..6ef53975 100644 --- a/rest_framework/fields.py +++ b/rest_framework/fields.py @@ -317,7 +317,7 @@ class RelatedField(WritableField):      choices = property(_get_choices, _set_choices) -    ### Regular serializier stuff... +    ### Regular serializer stuff...      def field_to_native(self, obj, field_name):          value = getattr(obj, self.source or field_name) @@ -522,7 +522,10 @@ class HyperlinkedRelatedField(RelatedField):          view_name = self.view_name          request = self.context.get('request', None)          format = self.format or self.context.get('format', None) -        kwargs = {self.pk_url_kwarg: obj.pk} +        pk = getattr(obj, 'pk', None) +        if pk is None: +            return +        kwargs = {self.pk_url_kwarg: pk}          try:              return reverse(view_name, kwargs=kwargs, request=request, format=format)          except: diff --git a/rest_framework/generics.py b/rest_framework/generics.py index ebd06e45..ddb604e0 100644 --- a/rest_framework/generics.py +++ b/rest_framework/generics.py @@ -92,11 +92,11 @@ class SingleObjectAPIView(SingleObjectMixin, GenericAPIView):      pk_url_kwarg = 'pk'  # Not provided in Django 1.3      slug_url_kwarg = 'slug'  # Not provided in Django 1.3 -    def get_object(self): +    def get_object(self, queryset=None):          """          Override default to add support for object-level permissions.          """ -        obj = super(SingleObjectAPIView, self).get_object() +        obj = super(SingleObjectAPIView, self).get_object(queryset)          if not self.has_permission(self.request, obj):              self.permission_denied(self.request)          return obj diff --git a/rest_framework/mixins.py b/rest_framework/mixins.py index c3625a88..cd104a7c 100644 --- a/rest_framework/mixins.py +++ b/rest_framework/mixins.py @@ -19,9 +19,16 @@ class CreateModelMixin(object):          if serializer.is_valid():              self.pre_save(serializer.object)              self.object = serializer.save() -            return Response(serializer.data, status=status.HTTP_201_CREATED) +            headers = self.get_success_headers(serializer.data) +            return Response(serializer.data, status=status.HTTP_201_CREATED, headers=headers)          return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST) - +     +    def get_success_headers(self, data): +        if 'url' in data: +            return {'Location': data.get('url')} +        else: +            return {} +          def pre_save(self, obj):          pass diff --git a/rest_framework/renderers.py b/rest_framework/renderers.py index 22fd6e74..870464f0 100644 --- a/rest_framework/renderers.py +++ b/rest_framework/renderers.py @@ -4,7 +4,7 @@ Renderers are used to serialize a response into specific media types.  They give us a generic way of being able to handle various media types  on the response, such as JSON encoded data or HTML output. -REST framework also provides an HTML renderer the renders the browseable API. +REST framework also provides an HTML renderer the renders the browsable API.  """  import copy  import string diff --git a/rest_framework/response.py b/rest_framework/response.py index 0de01204..be78c43a 100644 --- a/rest_framework/response.py +++ b/rest_framework/response.py @@ -15,14 +15,17 @@ class Response(SimpleTemplateResponse):          Alters the init arguments slightly.          For example, drop 'template_name', and instead use 'data'. -        Setting 'renderer' and 'media_type' will typically be defered, +        Setting 'renderer' and 'media_type' will typically be deferred,          For example being set automatically by the `APIView`.          """          super(Response, self).__init__(None, status=status)          self.data = data -        self.headers = headers and headers[:] or []          self.template_name = template_name          self.exception = exception +         +        if headers: +            for name,value in headers.iteritems(): +                self[name] = value      @property      def rendered_content(self): diff --git a/rest_framework/serializers.py b/rest_framework/serializers.py index 329b38f2..0f943ac1 100644 --- a/rest_framework/serializers.py +++ b/rest_framework/serializers.py @@ -89,7 +89,7 @@ class BaseSerializer(Field):          pass      _options_class = SerializerOptions -    _dict_class = SortedDictWithMetadata  # Set to unsorted dict for backwards compatability with unsorted implementations. +    _dict_class = SortedDictWithMetadata  # Set to unsorted dict for backwards compatibility with unsorted implementations.      def __init__(self, instance=None, data=None, context=None, **kwargs):          super(BaseSerializer, self).__init__(**kwargs) @@ -163,7 +163,7 @@ class BaseSerializer(Field):              self.opts.depth = parent.opts.depth - 1      ##### -    # Methods to convert or revert from objects <--> primative representations. +    # Methods to convert or revert from objects <--> primitive representations.      def get_field_key(self, field_name):          """ @@ -244,7 +244,7 @@ class BaseSerializer(Field):      def to_native(self, obj):          """ -        Serialize objects -> primatives. +        Serialize objects -> primitives.          """          if hasattr(obj, '__iter__'):              return [self.convert_object(item) for item in obj] @@ -252,7 +252,7 @@ class BaseSerializer(Field):      def from_native(self, data):          """ -        Deserialize primatives -> objects. +        Deserialize primitives -> objects.          """          if hasattr(data, '__iter__') and not isinstance(data, dict):              # TODO: error data when deserializing lists @@ -334,7 +334,7 @@ class ModelSerializer(Serializer):          """          Return all the fields that should be serialized for the model.          """ -        # TODO: Modfiy this so that it's called on init, and drop +        # TODO: Modify this so that it's called on init, and drop          #       serialize/obj/data arguments.          #          #       We *could* provide a hook for dynamic fields, but @@ -388,7 +388,10 @@ class ModelSerializer(Serializer):          """          Creates a default instance of a nested relational field.          """ -        return ModelSerializer() +        class NestedModelSerializer(ModelSerializer): +            class Meta: +                model = model_field.rel.to +        return NestedModelSerializer()      def get_related_field(self, model_field, to_many=False):          """ diff --git a/rest_framework/settings.py b/rest_framework/settings.py index 906a7cf6..4f10481d 100644 --- a/rest_framework/settings.py +++ b/rest_framework/settings.py @@ -152,7 +152,7 @@ class APISettings(object):      def validate_setting(self, attr, val):          if attr == 'FILTER_BACKEND' and val is not None: -            # Make sure we can initilize the class +            # Make sure we can initialize the class              val()  api_settings = APISettings(USER_SETTINGS, DEFAULTS, IMPORT_STRINGS) diff --git a/rest_framework/tests/hyperlinkedserializers.py b/rest_framework/tests/hyperlinkedserializers.py index f71e2e28..d7effce7 100644 --- a/rest_framework/tests/hyperlinkedserializers.py +++ b/rest_framework/tests/hyperlinkedserializers.py @@ -2,18 +2,19 @@ from django.conf.urls.defaults import patterns, url  from django.test import TestCase  from django.test.client import RequestFactory  from rest_framework import generics, status, serializers -from rest_framework.tests.models import Anchor, BasicModel, ManyToManyModel, BlogPost, BlogPostComment, Album, Photo +from rest_framework.tests.models import Anchor, BasicModel, ManyToManyModel, BlogPost, BlogPostComment, Album, Photo, OptionalRelationModel  factory = RequestFactory()  class BlogPostCommentSerializer(serializers.ModelSerializer): +    url = serializers.HyperlinkedIdentityField(view_name='blogpostcomment-detail')      text = serializers.CharField()      blog_post_url = serializers.HyperlinkedRelatedField(source='blog_post', view_name='blogpost-detail')      class Meta:          model = BlogPostComment -        fields = ('text', 'blog_post_url') +        fields = ('text', 'blog_post_url', 'url')  class PhotoSerializer(serializers.Serializer): @@ -53,6 +54,9 @@ class BlogPostCommentListCreate(generics.ListCreateAPIView):      model = BlogPostComment      serializer_class = BlogPostCommentSerializer +class BlogPostCommentDetail(generics.RetrieveAPIView): +    model = BlogPostComment +    serializer_class = BlogPostCommentSerializer  class BlogPostDetail(generics.RetrieveAPIView):      model = BlogPost @@ -67,6 +71,11 @@ class AlbumDetail(generics.RetrieveAPIView):      model = Album +class OptionalRelationDetail(generics.RetrieveAPIView): +    model = OptionalRelationModel +    model_serializer_class = serializers.HyperlinkedModelSerializer + +  urlpatterns = patterns('',      url(r'^basic/$', BasicList.as_view(), name='basicmodel-list'),      url(r'^basic/(?P<pk>\d+)/$', BasicDetail.as_view(), name='basicmodel-detail'), @@ -75,8 +84,10 @@ urlpatterns = patterns('',      url(r'^manytomany/(?P<pk>\d+)/$', ManyToManyDetail.as_view(), name='manytomanymodel-detail'),      url(r'^posts/(?P<pk>\d+)/$', BlogPostDetail.as_view(), name='blogpost-detail'),      url(r'^comments/$', BlogPostCommentListCreate.as_view(), name='blogpostcomment-list'), +    url(r'^comments/(?P<pk>\d+)/$', BlogPostCommentDetail.as_view(), name='blogpostcomment-detail'),      url(r'^albums/(?P<title>\w[\w-]*)/$', AlbumDetail.as_view(), name='album-detail'), -    url(r'^photos/$', PhotoListCreate.as_view(), name='photo-list') +    url(r'^photos/$', PhotoListCreate.as_view(), name='photo-list'), +    url(r'^optionalrelation/(?P<pk>\d+)/$', OptionalRelationDetail.as_view(), name='optionalrelationmodel-detail'),  ) @@ -185,6 +196,7 @@ class TestCreateWithForeignKeys(TestCase):          request = factory.post('/comments/', data=data)          response = self.create_view(request).render()          self.assertEqual(response.status_code, status.HTTP_201_CREATED) +        self.assertEqual(response['Location'], 'http://testserver/comments/1/')          self.assertEqual(self.post.blogpostcomment_set.count(), 1)          self.assertEqual(self.post.blogpostcomment_set.all()[0].text, 'A test comment') @@ -209,5 +221,29 @@ class TestCreateWithForeignKeysAndCustomSlug(TestCase):          request = factory.post('/photos/', data=data)          response = self.list_create_view(request).render()          self.assertEqual(response.status_code, status.HTTP_201_CREATED) +        self.assertNotIn('Location', response, msg='Location should only be included if there is a "url" field on the serializer')          self.assertEqual(self.post.photo_set.count(), 1)          self.assertEqual(self.post.photo_set.all()[0].description, 'A test photo') + + +class TestOptionalRelationHyperlinkedView(TestCase): +    urls = 'rest_framework.tests.hyperlinkedserializers' + +    def setUp(self): +        """ +        Create 1 OptionalRelationModel intances. +        """ +        OptionalRelationModel().save() +        self.objects = OptionalRelationModel.objects +        self.detail_view = OptionalRelationDetail.as_view() +        self.data = {"url": "http://testserver/optionalrelation/1/", "other": None} + +    def test_get_detail_view(self): +        """ +        GET requests to RetrieveAPIView with optional relations should return None +        for non existing relations. +        """ +        request = factory.get('/optionalrelationmodel-detail/1') +        response = self.detail_view(request, pk=1).render() +        self.assertEquals(response.status_code, status.HTTP_200_OK) +        self.assertEquals(response.data, self.data) diff --git a/rest_framework/tests/models.py b/rest_framework/tests/models.py index a2aba5be..cbdc765c 100644 --- a/rest_framework/tests/models.py +++ b/rest_framework/tests/models.py @@ -149,3 +149,8 @@ class Person(RESTFrameworkModel):  # Model for issue #324  class BlankFieldModel(RESTFrameworkModel):      title = models.CharField(max_length=100, blank=True) + + +# Model for issue #380 +class OptionalRelationModel(RESTFrameworkModel): +    other = models.ForeignKey('OptionalRelationModel', blank=True, null=True) diff --git a/rest_framework/tests/pk_relations.py b/rest_framework/tests/pk_relations.py index 44ae4040..3dcc76f9 100644 --- a/rest_framework/tests/pk_relations.py +++ b/rest_framework/tests/pk_relations.py @@ -136,6 +136,7 @@ class PrimaryKeyManyToManyTests(TestCase):          ]          self.assertEquals(serializer.data, expected) +  class PrimaryKeyForeignKeyTests(TestCase):      def setUp(self):          target = ForeignKeyTarget(name='target-1') diff --git a/rest_framework/tests/throttling.py b/rest_framework/tests/throttling.py index 0b94c25b..4b98b941 100644 --- a/rest_framework/tests/throttling.py +++ b/rest_framework/tests/throttling.py @@ -106,7 +106,7 @@ class ThrottlingTests(TestCase):              if expect is not None:                  self.assertEquals(response['X-Throttle-Wait-Seconds'], expect)              else: -                self.assertFalse('X-Throttle-Wait-Seconds' in response.headers) +                self.assertFalse('X-Throttle-Wait-Seconds' in response)      def test_seconds_fields(self):          """ diff --git a/rest_framework/urlpatterns.py b/rest_framework/urlpatterns.py index 316ccd19..0ad926fa 100644 --- a/rest_framework/urlpatterns.py +++ b/rest_framework/urlpatterns.py @@ -4,7 +4,7 @@ from rest_framework.settings import api_settings  def format_suffix_patterns(urlpatterns, suffix_required=False, allowed=None):      """ -    Supplement existing urlpatterns with corrosponding patterns that also +    Supplement existing urlpatterns with corresponding patterns that also      include a '.format' suffix.  Retains urlpattern ordering.      urlpatterns: diff --git a/rest_framework/urls.py b/rest_framework/urls.py index 1a81101f..bcdc23e7 100644 --- a/rest_framework/urls.py +++ b/rest_framework/urls.py @@ -1,7 +1,7 @@  """ -Login and logout views for the browseable API. +Login and logout views for the browsable API. -Add these to your root URLconf if you're using the browseable API and +Add these to your root URLconf if you're using the browsable API and  your API requires authentication.  The urls must be namespaced as 'rest_framework', and you should make sure diff --git a/rest_framework/views.py b/rest_framework/views.py index 1afbd697..10bdd5a5 100644 --- a/rest_framework/views.py +++ b/rest_framework/views.py @@ -140,7 +140,7 @@ class APIView(View):      def http_method_not_allowed(self, request, *args, **kwargs):          """ -        Called if `request.method` does not corrospond to a handler method. +        Called if `request.method` does not correspond to a handler method.          """          raise exceptions.MethodNotAllowed(request.method)  | 
