我正在编写一个应用程序，它使用普通的旧Ruby对象(PORO)将授权逻辑从控制器中抽象出来.
目前，我有一个名为NotAuthorized的自定义异常类，在控制器级别是Irescue_from，但我好奇地想知道:Does Rails 4 already come with an exception to indicate that an action was not authorized?我是不是通过实现这个异常来重新发明轮子？
Clarification:raise AuthorizationException不是发生在控制器内部的任何地方，而是发生在控制器外部完全解耦的PORO内部.对象不了解HTTP、路由或控制器.
Rails似乎没有将异常映射到:unauthorized.
默认映射在activerecord/lib/active_record/railtie.rb中定义:
config.action_dispatch.rescue_responses.merge!(
'ActiveRecord::RecordNotFound' => :not_found,
'ActiveRecord::StaleObjectError' => :conflict,
'ActiveRecord::RecordInvalid' => :unprocessable_entity,
'ActiveRecord::RecordNotSaved' => :unprocessable_entity
)
和actionpack/lib/action_dispatch/middleware/exception_wrapper.rb:
@@rescue_responses.merge!(
'ActionController::RoutingError' => :not_found,
'AbstractController::ActionNotFound' => :not_found,
'ActionController::MethodNotAllowed' => :method_not_allowed,
'ActionController::UnknownHttpMethod' => :method_not_allowed,
'ActionController::NotImplemented' => :not_implemented,
'ActionController::UnknownFormat' => :not_acceptable,
'ActionController::InvalidAuthenticityToken' => :unprocessable_entity,
'ActionDispatch::ParamsParser::ParseError' => :bad_request,
'ActionController::BadRequest' => :bad_request,
'ActionController::ParameterMissing' => :bad_request
)
您可以从应用程序的配置(或自定义Railtie)中添加自定义异常:
Your::Application.configure do
config.action_dispatch.rescue_responses.merge!(
'AuthorizationException' => :unauthorized
)
# ...
end
或者干脆用rescue_from.