rubygems_controller.rb

class Api::V1::RubygemsController < ApplicationController
  skip_before_filter :verify_authenticity_token, :only => [:create, :yank, :unyank]

  before_filter :authenticate_with_api_key, :only => [:create, :yank, :unyank]
  before_filter :verify_authenticated_user, :only => [:create, :yank, :unyank]
  before_filter :find_gem,                  :only => [:show]
  before_filter :find_gem_by_name,          :only => [:yank, :unyank]
  before_filter :validate_gem_and_version,  :only => [:yank, :unyank]

  def show
    if @rubygem.hosted?
      respond_to do |wants|
        wants.json { render :json => @rubygem }
        wants.xml  { render :xml  => @rubygem }
      end
    else
      render :text => "This gem does not exist.", :status => :not_found
    end
  end

  def create
    gemcutter = Pusher.new(current_user, request.body, request.host_with_port)
    gemcutter.process
    render :text => gemcutter.message, :status => gemcutter.code
  end

  def yank
    if @version.indexed?
      @rubygem.yank!(@version)
      render :json => "Successfully yanked gem: #{@version.to_title}"
    else
      render :json => "The version #{params[:version]} has already been yanked.", :status => :unprocessable_entity
    end
  end
  
  def unyank
    if !@version.indexed?
      @version.unyank!
      render :json => "Successfully unyanked gem: #{@version.to_title}"
    else
      render :json => "The version #{params[:version]} is already indexed.", :status => :unprocessable_entity
    end
  end
  
  private
    def validate_gem_and_version
      if !@rubygem.hosted?
        render :json => "This gem does not exist.", :status => :not_found
      elsif !@rubygem.owned_by?(current_user)
        render :json => "You do not have permission to yank this gem.", :status => :forbidden
      else
        begin
          @version = Version.find_from_slug!(@rubygem, params[:version])
        rescue ActiveRecord::RecordNotFound
          render :json => "The version #{params[:version]} does not exist.", :status => :not_found
        end
      end
    end
end