mirror of
https://github.com/encode/django-rest-framework.git
synced 2025-03-01 09:50:40 +03:00
Version 3.6 (#4943)
This commit is contained in:
parent
537df7a6ad
commit
52db57a6e7
BIN
docs/img/api-docs.gif
Normal file
BIN
docs/img/api-docs.gif
Normal file
Binary file not shown.
After Width: | Height: | Size: 5.4 MiB |
BIN
docs/img/api-docs.png
Normal file
BIN
docs/img/api-docs.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 158 KiB |
|
@ -279,7 +279,7 @@ Send a description of the issue via email to [rest-framework-security@googlegrou
|
|||
|
||||
## License
|
||||
|
||||
Copyright (c) 2011-2016, Tom Christie
|
||||
Copyright (c) 2011-2017, Tom Christie
|
||||
All rights reserved.
|
||||
|
||||
Redistribution and use in source and binary forms, with or without
|
||||
|
|
|
@ -19,11 +19,21 @@
|
|||
|
||||
# Django REST framework 3.6
|
||||
|
||||
The 3.6 release adds two major new features to REST framework.
|
||||
|
||||
1. Built-in interactive API documentation support.
|
||||
2. A new JavaScript client library.
|
||||
|
||||

|
||||
|
||||
*Above: The interactive API documentation.*
|
||||
|
||||
---
|
||||
|
||||
## Funding
|
||||
|
||||
The 3.6 release would not have been possible without our [collaborative funding model][funding].
|
||||
The 3.6 release would not have been possible without our [backing from Mozilla](mozilla-grant.md) to the project, and our [collaborative funding model][funding].
|
||||
|
||||
If you use REST framework commercially and would like to see this work continue,
|
||||
we strongly encourage you to invest in its continued development by
|
||||
**[signing up for a paid plan][funding]**.
|
||||
|
@ -40,24 +50,141 @@ we strongly encourage you to invest in its continued development by
|
|||
|
||||
*Many thanks to all our [sponsors][sponsors], and in particular to our premium backers, [Rover](http://jobs.rover.com/), [Sentry](https://getsentry.com/welcome/), [Stream](https://getstream.io/?utm_source=drf&utm_medium=banner&utm_campaign=drf), [Machinalis](https://hello.machinalis.co.uk/), [Rollbar](https://rollbar.com), and [MicroPyramid](https://micropyramid.com/django-rest-framework-development-services/).*
|
||||
|
||||
---
|
||||
|
||||
## Interactive API documentation
|
||||
|
||||
REST framework's new API documentation supports a number of features:
|
||||
|
||||
* Live API interaction.
|
||||
* Support for various authentication schemes.
|
||||
* Code snippets for the Python, JavaScript, and Command Line clients.
|
||||
|
||||
To install the API documentation, you'll need to include it in your projects URLconf:
|
||||
|
||||
from rest_framework.documentation import include_docs_urls
|
||||
|
||||
API_TITLE = 'API title'
|
||||
API_DESCRIPTION = '...'
|
||||
|
||||
urlpatterns = [
|
||||
...
|
||||
url(r'^docs/', include_docs_urls(title=API_TITLE, description=API_DESCRIPTION))
|
||||
]
|
||||
|
||||
Once installed you should see something a little like this:
|
||||
|
||||

|
||||
|
||||
We'll likely be making further refinements to the API documentation over the
|
||||
coming weeks. Keep in mind that this is a new feature, and please do give
|
||||
us feedback if you run into any issues or limitations.
|
||||
|
||||
For more information on documenting your API endpoints see the ["Documenting your API"][api-docs] section.
|
||||
|
||||
---
|
||||
|
||||
## API documentation
|
||||
## JavaScript client library
|
||||
|
||||
...
|
||||
The JavaScript client library allows you to load an API schema, and then interact
|
||||
with that API at an application layer interface, rather than constructing fetch
|
||||
requests explicitly.
|
||||
|
||||
## JavaScript Client
|
||||
Here's a brief example that demonstrates:
|
||||
|
||||
...
|
||||
* Loading the client library and schema.
|
||||
* Instantiating an authenticated client.
|
||||
* Making an API request using the client.
|
||||
|
||||
**index.html**
|
||||
|
||||
<html>
|
||||
<head>
|
||||
<script src="/static/rest_framework/js/coreapi-0.1.0.js"></script>
|
||||
<script src="/docs/schema.js' %}"></script>
|
||||
<script>
|
||||
const coreapi = window.coreapi
|
||||
const schema = window.schema
|
||||
|
||||
// Instantiate a client...
|
||||
let auth = coreapi.auth.TokenAuthentication({scheme: 'JWT', token: 'xxx'})
|
||||
let client = coreapi.Client({auth: auth})
|
||||
|
||||
// Make an API request...
|
||||
client.action(schema, ['projects', 'list']).then(function(result) {
|
||||
alert(result)
|
||||
})
|
||||
</script>
|
||||
</head>
|
||||
</html>
|
||||
|
||||
The JavaScript client library supports various authentication schemes, and can be
|
||||
used by your project itself, or as an external client interacting with your API.
|
||||
|
||||
The client is not limited to usage with REST framework APIs, although it does
|
||||
currently only support loading CoreJSON API schemas. Support for Swagger and
|
||||
other API schemas is planned.
|
||||
|
||||
For more details see the [JavaScript client library documentation][js-docs].
|
||||
|
||||
## Authentication classes for the Python client library
|
||||
|
||||
Previous authentication support in the Python client library was limited to
|
||||
allowing users to provide explicit header values.
|
||||
|
||||
We now have better support for handling the details of authentication, with
|
||||
the introduction of the `BasicAuthentication`, `TokenAuthentication`, and
|
||||
`SessionAuthentication` schemes.
|
||||
|
||||
You can include the authentication scheme when instantiating a new client.
|
||||
|
||||
auth = coreapi.auth.TokenAuthentication(scheme='JWT', token='xxx-xxx-xxx')
|
||||
client = coreapi.Client(auth=auth)
|
||||
|
||||
For more information see the [Python client library documentation][py-docs].
|
||||
|
||||
---
|
||||
|
||||
## Deprecations
|
||||
|
||||
...
|
||||
### Generating schemas from Router
|
||||
|
||||
The 3.5 "pending deprecation" of router arguments for generating a schema view, such as `schema_title`, `schema_url` and `schema_renderers`, have now been escalated to a
|
||||
"deprecated" warning.
|
||||
|
||||
Instead of using `DefaultRouter(schema_title='Example API')`, you should use the `get_schema_view()` function, and include the view explicitly in your URL conf.
|
||||
|
||||
### DjangoFilterBackend
|
||||
|
||||
The 3.5 "pending deprecation" warning of the built-in `DjangoFilterBackend` has now
|
||||
been escalated to a "deprecated" warning.
|
||||
|
||||
You should change your imports and REST framework filter settings as follows:
|
||||
|
||||
* `rest_framework.filters.DjangoFilterBackend` becomes `django_filters.rest_framework.DjangoFilterBackend`.
|
||||
* `rest_framework.filters.FilterSet` becomes `django_filters.rest_framework.FilterSet`.
|
||||
|
||||
---
|
||||
|
||||
## What's next
|
||||
|
||||
There are likely to be a number of refinements to the API documentation and
|
||||
JavaScript client library over the coming weeks, which could include some of the following:
|
||||
|
||||
* Support for private API docs, requiring login.
|
||||
* File upload and download support in the JavaScript client & API docs.
|
||||
* Comprehensive documentation for the JavaScript client library.
|
||||
* Automatically including authentication details in the API doc code snippets.
|
||||
* Adding authentication support in the command line client.
|
||||
* Support for loading Swagger and other schemas in the JavaScript client.
|
||||
* Improved support for documenting parameter schemas and response schemas.
|
||||
* Refining the API documentation interaction modal.
|
||||
|
||||
Once work on those refinements is complete, we'll be starting feature work
|
||||
on realtime support, for the 3.7 release.
|
||||
|
||||
[sponsors]: https://fund.django-rest-framework.org/topics/funding/#our-sponsors
|
||||
[funding]: funding.md
|
||||
[api-docs]: documenting-your-api.md
|
||||
[js-docs]: api-clients.md#javascript-client-library
|
||||
[py-docs]: api-clients.md#python-client-library
|
||||
|
|
|
@ -240,9 +240,59 @@ Once we have a `Client` instance, we can fetch an API schema from the network.
|
|||
schema = client.get('https://api.example.org/')
|
||||
|
||||
The object returned from this call will be a `Document` instance, which is
|
||||
the internal representation of the interface that we are interacting with.
|
||||
a representation of the API schema.
|
||||
|
||||
Now that we have our schema `Document`, we can now start to interact with the API:
|
||||
## Authentication
|
||||
|
||||
Typically you'll also want to provide some authentication credentials when
|
||||
instantiating the client.
|
||||
|
||||
#### Token authentication
|
||||
|
||||
The `TokenAuthentication` class can be used to support REST framework's built-in
|
||||
`TokenAuthentication`, as well as OAuth and JWT schemes.
|
||||
|
||||
auth = coreapi.auth.TokenAuthentication(
|
||||
scheme='JWT'
|
||||
token='<token>'
|
||||
)
|
||||
client = coreapi.Client(auth=auth)
|
||||
|
||||
When using TokenAuthentication you'll probably need to implement a login flow
|
||||
using the CoreAPI client.
|
||||
|
||||
A suggested pattern for this would be to initially make an unauthenticated client
|
||||
request to an "obtain token" endpoint
|
||||
|
||||
For example, using the "Django REST framework JWT" package
|
||||
|
||||
client = coreapi.Client()
|
||||
schema = client.get('https://api.example.org/')
|
||||
|
||||
action = ['api-token-auth', 'obtain-token']
|
||||
params = {username: "example", email: "example@example.com"}
|
||||
result = client.action(schema, action, params)
|
||||
|
||||
auth = coreapi.auth.TokenAuthentication(
|
||||
scheme='JWT',
|
||||
token=result['token']
|
||||
)
|
||||
client = coreapi.Client(auth=auth)
|
||||
|
||||
#### Basic authentication
|
||||
|
||||
The `BasicAuthentication` class can be used to support HTTP Basic Authentication.
|
||||
|
||||
auth = coreapi.auth.BasicAuthentication(
|
||||
username='<username>',
|
||||
password='<password>'
|
||||
)
|
||||
client = coreapi.Client(auth=auth)
|
||||
|
||||
## Interacting with the API
|
||||
|
||||
Now that we have a client and have fetched our schema `Document`, we can now
|
||||
start to interact with the API:
|
||||
|
||||
users = client.action(schema, ['users', 'list'])
|
||||
|
||||
|
@ -330,12 +380,23 @@ There are two separate JavaScript resources that you need to include in your HTM
|
|||
|
||||
First, install the API documentation views. These will include the schema resource that'll allow you to load the schema directly from an HTML page, without having to make an asynchronous AJAX call.
|
||||
|
||||
from rest_framework.documentation import include_docs_urls
|
||||
|
||||
urlpatterns = [
|
||||
...
|
||||
url(r'^docs/', include_docs_urls(title='My API service'))
|
||||
]
|
||||
|
||||
Once the API documentation URLs are installed, you'll be able to include both the required JavaScript resources. Note that the ordering of these two lines is important, as the schema loading requires CoreAPI to already be installed.
|
||||
|
||||
<!--
|
||||
Load the CoreAPI library and the API schema.
|
||||
|
||||
/static/rest_framework/js/coreapi-0.1.0.js
|
||||
/docs/schema.js
|
||||
-->
|
||||
{% load staticfiles %}
|
||||
<script src="{% static 'rest_framework/js/coreapi.js' %}"></script>
|
||||
<script src="{% static 'rest_framework/js/coreapi-0.1.0.js' %}"></script>
|
||||
<script src="{% url 'api-docs:schema-js' %}"></script>
|
||||
|
||||
The `coreapi` library, and the `schema` object will now both be available on the `window` instance.
|
||||
|
@ -345,64 +406,48 @@ The `coreapi` library, and the `schema` object will now both be available on the
|
|||
|
||||
## Instantiating a client
|
||||
|
||||
In order to interact with the API you'll need a client instance.
|
||||
|
||||
var client = coreapi.Client()
|
||||
|
||||
Header authentication
|
||||
Typically you'll also want to provide some authentication credentials when
|
||||
instantiating the client.
|
||||
|
||||
var auth = coreapi.auth.HeaderAuthentication({
|
||||
value: 'JWT <token>'
|
||||
})
|
||||
var client = coreapi.Client({auth: auth})
|
||||
#### Session authentication
|
||||
|
||||
Basic authentication
|
||||
The `SessionAuthentication` class allows session cookies to provide the user
|
||||
authentication. You'll want to provide a standard HTML login flow, to allow
|
||||
the user to login, and then instantiate a client using session authentication:
|
||||
|
||||
var auth = coreapi.auth.BasicAuthentication({
|
||||
userName: '<username>',
|
||||
password: '<password>'
|
||||
})
|
||||
var client = coreapi.Client({auth: auth})
|
||||
|
||||
Session authentication
|
||||
|
||||
// https://docs.djangoproject.com/en/dev/ref/csrf/#ajax
|
||||
let auth = coreapi.auth.SessionAuthentication({
|
||||
csrfHeader: 'X-CSRFToken',
|
||||
csrfToken: getCookie('csrftoken')
|
||||
csrfCookieName: 'csrftoken',
|
||||
csrfHeaderName: 'X-CSRFToken'
|
||||
})
|
||||
let client = coreapi.Client({auth: auth})
|
||||
|
||||
## Using the client
|
||||
The authentication scheme will handle including a CSRF header in any outgoing
|
||||
requests for unsafe HTTP methods.
|
||||
|
||||
Making requests
|
||||
#### Token authentication
|
||||
|
||||
let action = ["users", "list"]
|
||||
client.action(schema, action).then(function(result) {
|
||||
// Return value is in 'result'
|
||||
The `TokenAuthentication` class can be used to support REST framework's built-in
|
||||
`TokenAuthentication`, as well as OAuth and JWT schemes.
|
||||
|
||||
let auth = coreapi.auth.TokenAuthentication({
|
||||
scheme: 'JWT'
|
||||
token: '<token>'
|
||||
})
|
||||
let client = coreapi.Client({auth: auth})
|
||||
|
||||
Including parameters
|
||||
When using TokenAuthentication you'll probably need to implement a login flow
|
||||
using the CoreAPI client.
|
||||
|
||||
let action = ["users", "create"]
|
||||
let params = {username: "example", email: "example@example.com"}
|
||||
client.action(schema, action, params).then(function(result) {
|
||||
// Return value is in 'result'
|
||||
})
|
||||
|
||||
Handling errors
|
||||
|
||||
client.action(schema, action, params).then(function(result) {
|
||||
// Return value is in 'result'
|
||||
}).catch(function (error) {
|
||||
// Error value is in 'error'
|
||||
})
|
||||
|
||||
If you're using session authentication, and handling login requests using regular HTML forms then you probably won't need an authentication flow for the client. However, if you're using one of the other types of authentication,
|
||||
|
||||
A suggested pattern for this would be to initially make an unauthenticated client request to an "obtain token" endpoint
|
||||
A suggested pattern for this would be to initially make an unauthenticated client
|
||||
request to an "obtain token" endpoint
|
||||
|
||||
For example, using the "Django REST framework JWT" package
|
||||
|
||||
// Globally accessible state
|
||||
// Setup some globally accessible state
|
||||
window.client = coreapi.Client()
|
||||
window.loggedIn = false
|
||||
|
||||
|
@ -411,8 +456,10 @@ For example, using the "Django REST framework JWT" package
|
|||
let params = {username: "example", email: "example@example.com"}
|
||||
client.action(schema, action, params).then(function(result) {
|
||||
// On success, instantiate an authenticated client.
|
||||
let authConfig = {value: 'JWT ' + result['token']}
|
||||
let auth = window.coreapi.auth.HeaderAuthentication(authConfig)
|
||||
let auth = window.coreapi.auth.TokenAuthentication({
|
||||
scheme: 'JWT',
|
||||
token: result['token']
|
||||
})
|
||||
window.client = coreapi.Client({auth: auth})
|
||||
window.loggedIn = true
|
||||
}).catch(function (error) {
|
||||
|
@ -420,6 +467,41 @@ For example, using the "Django REST framework JWT" package
|
|||
})
|
||||
}
|
||||
|
||||
#### Basic authentication
|
||||
|
||||
The `BasicAuthentication` class can be used to support HTTP Basic Authentication.
|
||||
|
||||
let auth = coreapi.auth.BasicAuthentication({
|
||||
username: '<username>',
|
||||
password: '<password>'
|
||||
})
|
||||
let client = coreapi.Client({auth: auth})
|
||||
|
||||
## Using the client
|
||||
|
||||
Making requests:
|
||||
|
||||
let action = ["users", "list"]
|
||||
client.action(schema, action).then(function(result) {
|
||||
// Return value is in 'result'
|
||||
})
|
||||
|
||||
Including parameters:
|
||||
|
||||
let action = ["users", "create"]
|
||||
let params = {username: "example", email: "example@example.com"}
|
||||
client.action(schema, action, params).then(function(result) {
|
||||
// Return value is in 'result'
|
||||
})
|
||||
|
||||
Handling errors:
|
||||
|
||||
client.action(schema, action, params).then(function(result) {
|
||||
// Return value is in 'result'
|
||||
}).catch(function (error) {
|
||||
// Error value is in 'error'
|
||||
})
|
||||
|
||||
## Installation with node
|
||||
|
||||
The coreapi package is available on NPM.
|
||||
|
|
|
@ -8,10 +8,10 @@ ______ _____ _____ _____ __
|
|||
"""
|
||||
|
||||
__title__ = 'Django REST framework'
|
||||
__version__ = '3.5.4'
|
||||
__version__ = '3.6.0'
|
||||
__author__ = 'Tom Christie'
|
||||
__license__ = 'BSD 2-Clause'
|
||||
__copyright__ = 'Copyright 2011-2016 Tom Christie'
|
||||
__copyright__ = 'Copyright 2011-2017 Tom Christie'
|
||||
|
||||
# Version synonym
|
||||
VERSION = __version__
|
||||
|
|
|
@ -251,6 +251,29 @@ except ImportError:
|
|||
apply_markdown = None
|
||||
|
||||
|
||||
try:
|
||||
import pygments
|
||||
from pygments.lexers import get_lexer_by_name
|
||||
from pygments.formatters import HtmlFormatter
|
||||
|
||||
def pygments_highlight(text, lang, style):
|
||||
lexer = get_lexer_by_name(lang, stripall=False)
|
||||
formatter = HtmlFormatter(nowrap=True, style=style)
|
||||
return pygments.highlight(text, lexer, formatter)
|
||||
|
||||
def pygments_css(style):
|
||||
formatter = HtmlFormatter(style=style)
|
||||
return formatter.get_style_defs('.highlight')
|
||||
|
||||
except ImportError:
|
||||
pygments = None
|
||||
|
||||
def pygments_highlight(text, lang, style):
|
||||
return text
|
||||
|
||||
def pygments_css(style):
|
||||
return None
|
||||
|
||||
# `separators` argument to `json.dumps()` differs between 2.x and 3.x
|
||||
# See: http://bugs.python.org/issue22767
|
||||
if six.PY3:
|
||||
|
|
|
@ -45,9 +45,9 @@ if django_filters:
|
|||
class FilterSet(DFFilterSet):
|
||||
def __init__(self, *args, **kwargs):
|
||||
warnings.warn(
|
||||
"The built in 'rest_framework.filters.FilterSet' is pending deprecation. "
|
||||
"The built in 'rest_framework.filters.FilterSet' is deprecated. "
|
||||
"You should use 'django_filters.rest_framework.FilterSet' instead.",
|
||||
PendingDeprecationWarning
|
||||
DeprecationWarning
|
||||
)
|
||||
return super(FilterSet, self).__init__(*args, **kwargs)
|
||||
else:
|
||||
|
@ -64,9 +64,9 @@ class DjangoFilterBackend(BaseFilterBackend):
|
|||
assert django_filters.VERSION >= (0, 15, 3), 'django-filter 0.15.3 and above is required'
|
||||
|
||||
warnings.warn(
|
||||
"The built in 'rest_framework.filters.DjangoFilterBackend' is pending deprecation. "
|
||||
"The built in 'rest_framework.filters.DjangoFilterBackend' is deprecated. "
|
||||
"You should use 'django_filters.rest_framework.DjangoFilterBackend' instead.",
|
||||
PendingDeprecationWarning
|
||||
DeprecationWarning
|
||||
)
|
||||
|
||||
from django_filters.rest_framework import DjangoFilterBackend
|
||||
|
|
|
@ -25,7 +25,7 @@ from django.utils.html import mark_safe
|
|||
from rest_framework import VERSION, exceptions, serializers, status
|
||||
from rest_framework.compat import (
|
||||
INDENT_SEPARATORS, LONG_SEPARATORS, SHORT_SEPARATORS, coreapi,
|
||||
template_render
|
||||
pygments_css, template_render
|
||||
)
|
||||
from rest_framework.exceptions import ParseError
|
||||
from rest_framework.request import is_form_media_type, override_method
|
||||
|
@ -802,16 +802,13 @@ class DocumentationRenderer(BaseRenderer):
|
|||
charset = 'utf-8'
|
||||
template = 'rest_framework/docs/index.html'
|
||||
code_style = 'emacs'
|
||||
languages = ['shell', 'javascript', 'python']
|
||||
|
||||
def get_context(self, data, request):
|
||||
from pygments.formatters import HtmlFormatter
|
||||
formatter = HtmlFormatter(style=self.code_style)
|
||||
code_style = formatter.get_style_defs('.highlight')
|
||||
langs = ['shell', 'javascript', 'python']
|
||||
return {
|
||||
'document': data,
|
||||
'langs': langs,
|
||||
'code_style': code_style,
|
||||
'langs': self.languages,
|
||||
'code_style': pygments_css(self.code_style),
|
||||
'request': request
|
||||
}
|
||||
|
||||
|
|
|
@ -320,9 +320,9 @@ class DefaultRouter(SimpleRouter):
|
|||
def __init__(self, *args, **kwargs):
|
||||
if 'schema_title' in kwargs:
|
||||
warnings.warn(
|
||||
"Including a schema directly via a router is now pending "
|
||||
"deprecation. Use `get_schema_view()` instead.",
|
||||
PendingDeprecationWarning
|
||||
"Including a schema directly via a router is now deprecated. "
|
||||
"Use `get_schema_view()` instead.",
|
||||
DeprecationWarning
|
||||
)
|
||||
if 'schema_renderers' in kwargs:
|
||||
assert 'schema_title' in kwargs, 'Missing "schema_title" argument.'
|
||||
|
@ -331,13 +331,6 @@ class DefaultRouter(SimpleRouter):
|
|||
self.schema_title = kwargs.pop('schema_title', None)
|
||||
self.schema_url = kwargs.pop('schema_url', None)
|
||||
self.schema_renderers = kwargs.pop('schema_renderers', self.default_schema_renderers)
|
||||
if self.default_schema_renderers:
|
||||
warnings.warn(
|
||||
"The 'DefaultRouter.default_schema_renderers' is pending "
|
||||
"deprecation. You should override "
|
||||
"'DefaultRouter.APISchemaView' instead.",
|
||||
PendingDeprecationWarning
|
||||
)
|
||||
|
||||
if 'root_renderers' in kwargs:
|
||||
self.root_renderers = kwargs.pop('root_renderers')
|
||||
|
|
|
@ -1,28 +1,13 @@
|
|||
function normalizeHTTPHeader (str) {
|
||||
// Capitalize HTTP headers for display.
|
||||
return (str.charAt(0).toUpperCase() + str.substring(1))
|
||||
.replace( /-(.)/g, function($1) { return $1.toUpperCase(); })
|
||||
.replace( /(Www)/g, function($1) { return 'WWW'; })
|
||||
.replace( /(Xss)/g, function($1) { return 'XSS'; })
|
||||
.replace( /(Md5)/g, function($1) { return 'MD5'; })
|
||||
.replace(/-(.)/g, function ($1) { return $1.toUpperCase() })
|
||||
.replace(/(Www)/g, function ($1) { return 'WWW' })
|
||||
.replace(/(Xss)/g, function ($1) { return 'XSS' })
|
||||
.replace(/(Md5)/g, function ($1) { return 'MD5' })
|
||||
}
|
||||
|
||||
function getCookie(name) {
|
||||
var cookieValue = null;
|
||||
if (document.cookie && document.cookie !== '') {
|
||||
var cookies = document.cookie.split(';');
|
||||
for (var i = 0; i < cookies.length; i++) {
|
||||
var cookie = jQuery.trim(cookies[i]);
|
||||
// Does this cookie string begin with the name we want?
|
||||
if (cookie.substring(0, name.length + 1) === (name + '=')) {
|
||||
cookieValue = decodeURIComponent(cookie.substring(name.length + 1));
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
return cookieValue;
|
||||
}
|
||||
|
||||
let responseDisplay = 'data';
|
||||
let responseDisplay = 'data'
|
||||
const coreapi = window.coreapi
|
||||
const schema = window.schema
|
||||
|
||||
|
@ -55,28 +40,44 @@ $('form.api-interaction').submit(function(event) {
|
|||
for (var [paramKey, paramValue] of formData.entries()) {
|
||||
var elem = form.find("[name=" + paramKey + "]")
|
||||
var dataType = elem.data('type') || 'string'
|
||||
var dataLocation = elem.data('location')
|
||||
|
||||
if (dataType === 'integer' && paramValue) {
|
||||
paramValue = parseInt(paramValue)
|
||||
let value = parseInt(paramValue)
|
||||
if (!isNaN(value)) {
|
||||
params[paramKey] = value
|
||||
}
|
||||
} else if (dataType === 'number' && paramValue) {
|
||||
paramValue = parseFloat(paramValue)
|
||||
let value = parseFloat(paramValue)
|
||||
if (!isNaN(value)) {
|
||||
params[paramKey] = value
|
||||
}
|
||||
} else if (dataType === 'boolean' && paramValue) {
|
||||
paramValue = {
|
||||
let value = {
|
||||
'true': true,
|
||||
'false': false
|
||||
}[paramValue.toLowerCase()]
|
||||
if (value !== undefined) {
|
||||
params[paramKey]
|
||||
}
|
||||
} else if (dataType === 'array' && paramValue) {
|
||||
paramValue = JSON.parse(paramValue)
|
||||
try {
|
||||
params[paramKey] = JSON.parse(paramValue)
|
||||
} catch (err) {
|
||||
// Ignore malformed JSON
|
||||
}
|
||||
|
||||
if (dataLocation === 'query' && !paramValue) {
|
||||
continue
|
||||
} else if (dataType === 'object' && paramValue) {
|
||||
try {
|
||||
params[paramKey] = JSON.parse(paramValue)
|
||||
} catch (err) {
|
||||
// Ignore malformed JSON
|
||||
}
|
||||
} else if (dataType === 'string' && paramValue) {
|
||||
params[paramKey] = paramValue
|
||||
}
|
||||
}
|
||||
|
||||
form.find(":checkbox").each(function( index ) {
|
||||
// Handle unselected checkboxes
|
||||
var name = $(this).attr("name");
|
||||
if (!params.hasOwnProperty(name)) {
|
||||
params[name] = false
|
||||
|
@ -128,21 +129,22 @@ $('form.api-interaction').submit(function(event) {
|
|||
// Setup authentication options.
|
||||
if (window.auth && window.auth.type === 'token') {
|
||||
// Header authentication
|
||||
options.headers = {
|
||||
'Authorization': window.auth.value
|
||||
}
|
||||
options.auth = new coreapi.auth.TokenAuthentication({
|
||||
prefix: window.auth.scheme,
|
||||
token: window.auth.token
|
||||
})
|
||||
} else if (window.auth && window.auth.type === 'basic') {
|
||||
// Basic authentication
|
||||
const token = window.auth.username + ':' + window.auth.password
|
||||
const hash = window.btoa(token)
|
||||
options.headers = {
|
||||
'Authorization': 'Basic ' + hash
|
||||
}
|
||||
options.auth = new coreapi.auth.BasicAuthentication({
|
||||
username: window.auth.username,
|
||||
password: window.auth.password
|
||||
})
|
||||
} else if (window.auth && window.auth.type === 'session') {
|
||||
// Session authentication
|
||||
options.csrf = {
|
||||
'X-CSRFToken': getCookie('csrftoken')
|
||||
}
|
||||
options.auth = new coreapi.auth.SessionAuthentication({
|
||||
csrfCookieName: 'csrftoken',
|
||||
csrfHeaderName: 'X-CSRFToken'
|
||||
})
|
||||
}
|
||||
|
||||
const client = new coreapi.Client(options)
|
||||
|
@ -202,12 +204,14 @@ $('#auth-control').find("[data-auth='none']").click(function (event) {
|
|||
$('form.authentication-token-form').submit(function(event) {
|
||||
event.preventDefault();
|
||||
const form = $(this).closest("form");
|
||||
const value = form.find('input').val();
|
||||
const scheme = form.find('input#scheme').val();
|
||||
const token = form.find('input#token').val();
|
||||
window.auth = {
|
||||
'type': 'token',
|
||||
'value': value,
|
||||
'scheme': scheme,
|
||||
'token': token
|
||||
};
|
||||
$('#selected-authentication').text('header');
|
||||
$('#selected-authentication').text('token');
|
||||
$('#auth-control').children().removeClass('active');
|
||||
$('#auth-control').find("[data-auth='token']").addClass('active');
|
||||
$('#auth_token_modal').modal('hide');
|
||||
|
@ -222,7 +226,7 @@ $('form.authentication-basic-form').submit(function(event) {
|
|||
window.auth = {
|
||||
'type': 'basic',
|
||||
'username': username,
|
||||
'password': password,
|
||||
'password': password
|
||||
};
|
||||
$('#selected-authentication').text('basic');
|
||||
$('#auth-control').children().removeClass('active');
|
||||
|
|
File diff suppressed because one or more lines are too long
2040
rest_framework/static/rest_framework/js/coreapi-0.1.0.js
Normal file
2040
rest_framework/static/rest_framework/js/coreapi-0.1.0.js
Normal file
File diff suppressed because one or more lines are too long
|
@ -5,24 +5,29 @@
|
|||
<div class="modal-dialog modal-md" role="document">
|
||||
<div class="modal-content">
|
||||
<div class="modal-header">
|
||||
<h3 class="modal-title"><i class="fa fa-key"></i> Authentication Header</h3>
|
||||
<h3 class="modal-title"><i class="fa fa-key"></i> Token Authentication</h3>
|
||||
</div>
|
||||
|
||||
<form class="form-horizontal authentication-token-form">
|
||||
<div class="modal-body">
|
||||
<div class="form-group">
|
||||
<label for="authorization" class="col-sm-2 control-label">Authorization:</label>
|
||||
|
||||
<label for="prefix" class="col-sm-2 control-label">Scheme:</label>
|
||||
<div class="col-sm-10">
|
||||
<input type="text" class="form-control" id="authorization" placeholder="Bearer XXXX-XXXX-XXXX-XXXX" aria-describedby="helpBlock" required>
|
||||
<span id="helpBlock" class="help-block">The value to include for the <code>Authorization</code> header in outgoing HTTP requests.</span>
|
||||
<input type="text" class="form-control" id="scheme" placeholder="Bearer" aria-describedby="schemeHelpBlock" required>
|
||||
<span id="schemeHelpBlock" class="help-block">Either a registered authentication scheme such as <code>Bearer</code>, or a custom schema such as <code>Token</code> or <code>JWT</code>.</span>
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="token" class="col-sm-2 control-label">Token:</label>
|
||||
<div class="col-sm-10">
|
||||
<input type="text" class="form-control" id="token" placeholder="XXXX-XXXX-XXXX-XXXX" aria-describedby="helpBlock" required>
|
||||
<span id="tokenHelpBlock" class="help-block">A valid API token.</span>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="modal-footer">
|
||||
<button type="button" class="btn btn-default" data-dismiss="modal">Close</button>
|
||||
<button type="submit" class="btn btn-primary">Use Authentication Header</button>
|
||||
<button type="submit" class="btn btn-primary">Use Token Authentication</button>
|
||||
</div>
|
||||
</form>
|
||||
|
||||
|
|
|
@ -15,8 +15,10 @@
|
|||
</div>
|
||||
|
||||
{% for section_key, section in document.data.items %}
|
||||
{% if section_key %}
|
||||
<h2 id="{{ section_key }}" class="coredocs-section-title">{{ section_key }} <a href="#{{ section_key }}"><i class="fa fa-link" aria-hidden="true"></i>
|
||||
</a></h2>
|
||||
{% endif %}
|
||||
|
||||
{% for link_key, link in section.links.items %}
|
||||
{% include "rest_framework/docs/link.html" %}
|
||||
|
|
|
@ -16,8 +16,8 @@
|
|||
|
||||
<link href="{% static 'rest_framework/docs/img/favicon.ico' %}" rel="shortcut icon">
|
||||
|
||||
<style>{{ code_style }}</style>
|
||||
<script src="{% static 'rest_framework/js/coreapi-0.0.20.js' %}"></script>
|
||||
{% if code_style %}<style>{{ code_style }}</style>{% endif %}
|
||||
<script src="{% static 'rest_framework/js/coreapi-0.1.0.js' %}"></script>
|
||||
<script src="{% url 'api-docs:schema-js' %}"></script>
|
||||
|
||||
</head>
|
||||
|
|
|
@ -6,9 +6,9 @@
|
|||
<ul id="menu-content" class="menu-content collapse out">
|
||||
{% for section_key, section in document.data.items %}
|
||||
<li data-toggle="collapse" data-target="#{{ section_key }}-dropdown" class="collapsed">
|
||||
<a><i class="fa fa-dot-circle-o fa-lg"></i> {{ section_key }} <span class="arrow"></span></a>
|
||||
<a><i class="fa fa-dot-circle-o fa-lg"></i> {% if section_key %}{{ section_key }}{% else %}API Endpoints{% endif %} <span class="arrow"></span></a>
|
||||
</li>
|
||||
<ul class="sub-menu collapse" id="{{ section_key }}-dropdown">
|
||||
<ul class="sub-menu {% if section_key %}collapse{% endif %}" id="{{ section_key }}-dropdown">
|
||||
{% for link_key, link in section.links.items %}
|
||||
<li><a href="#{{ section_key }}-{{ link_key }}">{{ link.title|default:link_key }}</a></li>
|
||||
{% endfor %}
|
||||
|
@ -22,7 +22,7 @@
|
|||
</li>
|
||||
<ul class="sub-menu collapse out" id="auth-control">
|
||||
<li data-auth="none" {% if not user.is_authenticated %}class="active"{% endif %}><a href="#" data-language="none">none</a></li>
|
||||
<li data-auth="token" data-toggle="modal" data-target="#auth_token_modal"><a href="#">header</a></li>
|
||||
<li data-auth="token" data-toggle="modal" data-target="#auth_token_modal"><a href="#">token</a></li>
|
||||
<li data-auth="basic" data-toggle="modal" data-target="#auth_basic_modal"><a href="#">basic</a></li>
|
||||
<li data-auth="session" data-toggle="modal" data-target="#auth_session_modal" {% if user.is_authenticated %}class="active"{% endif %}><a href="#">session</a></li>
|
||||
</ul>
|
||||
|
|
|
@ -1,45 +1,27 @@
|
|||
from __future__ import absolute_import, unicode_literals
|
||||
|
||||
import re
|
||||
|
||||
from collections import OrderedDict
|
||||
|
||||
from django import template
|
||||
from django.template import loader
|
||||
from django.utils import six
|
||||
from django.utils.encoding import force_text, iri_to_uri
|
||||
from django.utils.html import escape, format_html, smart_urlquote
|
||||
from django.utils.safestring import SafeData, mark_safe
|
||||
from markdown.extensions.fenced_code import FencedBlockPreprocessor
|
||||
|
||||
from rest_framework.compat import (
|
||||
NoReverseMatch, markdown, reverse, template_render
|
||||
NoReverseMatch, markdown, pygments_highlight, reverse, template_render
|
||||
)
|
||||
from rest_framework.renderers import HTMLFormRenderer
|
||||
from rest_framework.utils.urls import replace_query_param
|
||||
|
||||
|
||||
register = template.Library()
|
||||
|
||||
# Regex for adding classes to html snippets
|
||||
class_re = re.compile(r'(?<=class=["\'])(.*)(?=["\'])')
|
||||
|
||||
|
||||
class CustomFencedBlockPreprocessor(FencedBlockPreprocessor):
|
||||
CODE_WRAP = '<pre%s><code>%s</code></pre>'
|
||||
LANG_TAG = ' class="highlight %s"'
|
||||
|
||||
|
||||
class FencedCodeExtension(markdown.Extension):
|
||||
|
||||
def extendMarkdown(self, md, md_globals):
|
||||
""" Add FencedBlockPreprocessor to the Markdown instance. """
|
||||
md.registerExtension(self)
|
||||
|
||||
md.preprocessors.add('fenced_code_block',
|
||||
CustomFencedBlockPreprocessor(md),
|
||||
">normalize_whitespace")
|
||||
|
||||
|
||||
@register.tag(name='code')
|
||||
def highlight_code(parser, token):
|
||||
code = token.split_contents()[-1]
|
||||
|
@ -56,14 +38,8 @@ class CodeNode(template.Node):
|
|||
self.nodelist = code
|
||||
|
||||
def render(self, context):
|
||||
from pygments import highlight
|
||||
from pygments.lexers import get_lexer_by_name
|
||||
from pygments.formatters import HtmlFormatter
|
||||
body = self.nodelist.render(context)
|
||||
lexer = get_lexer_by_name(self.lang, stripall=False)
|
||||
formatter = HtmlFormatter(nowrap=True, style=self.style)
|
||||
code = highlight(body, lexer, formatter)
|
||||
return code
|
||||
text = self.nodelist.render(context)
|
||||
return pygments_highlight(text, self.lang, self.style)
|
||||
|
||||
|
||||
@register.filter()
|
||||
|
@ -92,7 +68,9 @@ def form_for_link(link):
|
|||
|
||||
@register.simple_tag
|
||||
def render_markdown(markdown_text):
|
||||
return markdown.markdown(markdown_text, extensions=[FencedCodeExtension(), "tables"])
|
||||
if not markdown:
|
||||
return markdown_text
|
||||
return markdown.markdown(markdown_text)
|
||||
|
||||
|
||||
@register.simple_tag
|
||||
|
|
|
@ -180,8 +180,8 @@ class IntegrationTestFiltering(CommonFilteringTestCase):
|
|||
assert response.status_code == status.HTTP_200_OK
|
||||
assert response.data == self.data
|
||||
|
||||
self.assertTrue(issubclass(w[-1].category, PendingDeprecationWarning))
|
||||
self.assertIn("'rest_framework.filters.DjangoFilterBackend' is pending deprecation.", str(w[-1].message))
|
||||
self.assertTrue(issubclass(w[-1].category, DeprecationWarning))
|
||||
self.assertIn("'rest_framework.filters.DjangoFilterBackend' is deprecated.", str(w[-1].message))
|
||||
|
||||
@unittest.skipUnless(django_filters, 'django-filter not installed')
|
||||
def test_no_df_deprecation(self):
|
||||
|
|
Loading…
Reference in New Issue
Block a user