X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/b3d5254ce24ca82904b13d61012b2d8d676a30d8..6653f96c23ff461bc4cadf5184a95e1c9142f7e6:/services/api/app/controllers/application_controller.rb diff --git a/services/api/app/controllers/application_controller.rb b/services/api/app/controllers/application_controller.rb index 40c7a8abf2..369043e780 100644 --- a/services/api/app/controllers/application_controller.rb +++ b/services/api/app/controllers/application_controller.rb @@ -140,8 +140,13 @@ class ApplicationController < ActionController::Base def render_error(e) logger.error e.inspect - if !e.is_a? RequestError and (e.respond_to? :backtrace and e.backtrace) - logger.error e.backtrace.collect { |x| x + "\n" }.join('') + if e.respond_to? :backtrace and e.backtrace + # This will be cleared by lograge after adding it to the log. + # Usually lograge would get the exceptions, but in our case we're catching + # all of them with exception handlers that cannot re-raise them because they + # don't get propagated. + Thread.current[:exception] = e.inspect + Thread.current[:backtrace] = e.backtrace.collect { |x| x + "\n" }.join('') end if (@object.respond_to? :errors and @object.errors.andand.full_messages.andand.any?) @@ -165,6 +170,17 @@ class ApplicationController < ActionController::Base protected + def bool_param(pname) + if params.include?(pname) + if params[pname].is_a?(Boolean) + return params[pname] + else + logger.warn "Warning: received non-boolean parameter '#{pname}' on #{self.class.inspect}." + end + end + false + end + def send_error(*args) if args.last.is_a? Hash err = args.pop @@ -172,6 +188,9 @@ class ApplicationController < ActionController::Base err = {} end err[:errors] ||= args + err[:errors].map! do |err| + err += " (" + Thread.current[:request_id] + ")" + end err[:error_token] = [Time.now.utc.to_i, "%08x" % rand(16 ** 8)].join("+") status = err.delete(:status) || 422 logger.error "Error #{err[:error_token]}: #{status}" @@ -189,8 +208,8 @@ class ApplicationController < ActionController::Base def find_objects_for_index @objects ||= model_class.readable_by(*@read_users, { - :include_trash => (params[:include_trash] || 'untrash' == action_name), - :include_old_versions => params[:include_old_versions] + :include_trash => (bool_param(:include_trash) || 'untrash' == action_name), + :include_old_versions => bool_param(:include_old_versions) }) apply_where_limit_order_params end @@ -237,7 +256,7 @@ class ApplicationController < ActionController::Base conditions[0] << " and #{ar_table_name}.#{attr} in (?)" conditions << value end - elsif value.is_a? String or value.is_a? Fixnum or value == true or value == false + elsif value.is_a? String or value.is_a? Integer or value == true or value == false conditions[0] << " and #{ar_table_name}.#{attr}=?" conditions << value elsif value.is_a? Hash @@ -414,7 +433,7 @@ class ApplicationController < ActionController::Base end def disable_api_methods - if Rails.configuration.API.DisabledAPIs.include?(controller_name + "." + action_name) + if Rails.configuration.API.DisabledAPIs[controller_name + "." + action_name] send_error("Disabled", status: 404) end end