Commit | Line | Data |
fc7ec1d9 |
1 | =head1 NAME |
2 | |
3 | Catalyst::Manual::Cookbook - Cooking with Catalyst |
4 | |
5 | =head1 DESCRIPTION |
6 | |
aba94964 |
7 | Yummy code like your mum used to bake! |
fc7ec1d9 |
8 | |
9 | =head1 RECIPES |
10 | |
11 | =head2 Force debug screen |
12 | |
13 | You can force Catalyst to display the debug screen at the end of the request by |
51ef2818 |
14 | placing a C<die()> call in the C<end> action. |
fc7ec1d9 |
15 | |
61b1e958 |
16 | sub end : Private { |
17 | my ( $self, $c ) = @_; |
18 | die "testing"; |
19 | } |
fc7ec1d9 |
20 | |
aff93052 |
21 | If you're tired of removing and adding this all the time, you |
51ef2818 |
22 | can easily add a condition. For example: |
aff93052 |
23 | |
8f8532e1 |
24 | die "Testing" if $c->params->{dump_info}; |
aff93052 |
25 | |
fc7ec1d9 |
26 | =head2 Disable statistics |
27 | |
28 | Just add this line to your application class if you don't want those nifty |
29 | statistics in your debug messages. |
30 | |
31 | sub Catalyst::Log::info { } |
32 | |
33 | =head2 Scaffolding |
34 | |
35 | Scaffolding is very simple with Catalyst. |
51ef2818 |
36 | Just use Catalyst::Model::CDBI::CRUD as your base class. |
fc7ec1d9 |
37 | |
38 | # lib/MyApp/Model/CDBI.pm |
39 | package MyApp::Model::CDBI; |
40 | |
41 | use strict; |
42 | use base 'Catalyst::Model::CDBI::CRUD'; |
43 | |
44 | __PACKAGE__->config( |
45 | dsn => 'dbi:SQLite:/tmp/myapp.db', |
46 | relationships => 1 |
47 | ); |
48 | |
49 | 1; |
50 | |
51 | # lib/MyApp.pm |
52 | package MyApp; |
53 | |
54 | use Catalyst 'FormValidator'; |
55 | |
56 | __PACKAGE__->config( |
57 | name => 'My Application', |
58 | root => '/home/joeuser/myapp/root' |
59 | ); |
60 | |
61b1e958 |
61 | sub my_table : Global { |
62 | my ( $self, $c ) = @_; |
63 | $c->form( optional => [ MyApp::Model::CDBI::Table->columns ] ); |
64 | $c->forward('MyApp::Model::CDBI::Table'); |
65 | } |
fc7ec1d9 |
66 | |
67 | 1; |
68 | |
69 | Modify the $c->form() parameters to match your needs, and don't forget to copy |
70 | the templates. ;) |
71 | |
5c0ff128 |
72 | =head2 Single file upload with Catalyst |
aba94964 |
73 | |
74 | To implement uploads in Catalyst you need to have a HTML form similiar to |
75 | this: |
76 | |
77 | <form action="/upload" method="post" enctype="multipart/form-data"> |
78 | <input type="hidden" name="form_submit" value="yes"> |
79 | <input type="file" name="my_file"> |
80 | <input type="submit" value="Send"> |
81 | </form> |
82 | |
51ef2818 |
83 | It's very important not to forget C<enctype="multipart/form-data"> in form. Uploads will not work without this. |
aba94964 |
84 | |
85 | Catalyst Controller module 'upload' action: |
86 | |
5c0ff128 |
87 | sub upload : Global { |
88 | my ($self, $c) = @_; |
4d89569d |
89 | |
90 | if ( $c->request->parameters->{form_submit} eq 'yes' ) { |
91 | |
92 | if ( my $upload = $c->request->upload('my_file') ) { |
47ae6960 |
93 | |
5c0ff128 |
94 | my $filename = $upload->filename; |
47ae6960 |
95 | my $target = "/tmp/upload/$filename"; |
96 | |
3ffaf022 |
97 | unless ( $upload->link_to($target) || $upload->copy_to($target) ) { |
47ae6960 |
98 | die( "Failed to copy '$filename' to '$target': $!" ); |
5c0ff128 |
99 | } |
5c0ff128 |
100 | } |
101 | } |
4d89569d |
102 | |
5c0ff128 |
103 | $c->stash->{template} = 'file_upload.html'; |
104 | } |
105 | |
106 | =head2 Multiple file upload with Catalyst |
107 | |
108 | Code for uploading multiple files from one form needs little changes compared |
109 | to single file upload. |
110 | |
111 | Form goes like this: |
112 | |
113 | <form action="/upload" method="post" enctype="multipart/form-data"> |
114 | <input type="hidden" name="form_submit" value="yes"> |
115 | <input type="file" name="file1" size="50"><br> |
116 | <input type="file" name="file2" size="50"><br> |
117 | <input type="file" name="file3" size="50"><br> |
118 | <input type="submit" value="Send"> |
119 | </form> |
120 | |
121 | Controller: |
122 | |
123 | sub upload : Local { |
124 | my ($self, $c) = @_; |
4d89569d |
125 | |
126 | if ( $c->request->parameters->{form_submit} eq 'yes' ) { |
127 | |
128 | for my $field ( $c->req->upload ) { |
129 | |
02a53b81 |
130 | my $upload = $c->req->upload($field); |
4d89569d |
131 | my $filename = $upload->filename; |
47ae6960 |
132 | my $target = "/tmp/upload/$filename"; |
133 | |
3ffaf022 |
134 | unless ( $upload->link_to($target) || $upload->copy_to($target) ) { |
47ae6960 |
135 | die( "Failed to copy '$filename' to '$target': $!" ); |
aba94964 |
136 | } |
137 | } |
61b1e958 |
138 | } |
4d89569d |
139 | |
5c0ff128 |
140 | $c->stash->{template} = 'file_upload.html'; |
141 | } |
142 | |
51ef2818 |
143 | C<for my $field ($c-E<gt>req->upload)> loops automatically over all file input |
5c0ff128 |
144 | fields and gets input names. After that is basic file saving code, just like in |
145 | single file upload. |
aba94964 |
146 | |
51ef2818 |
147 | Notice: C<die>ing might not be what you want to do, when an error occurs, but |
148 | it works as an example. A better idea would be to store error C<$!> in |
149 | $c->stash->{error} and show a custom error template displaying this message. |
aba94964 |
150 | |
5c0ff128 |
151 | For more information about uploads and usable methods look at |
152 | C<Catalyst::Request::Upload> and C<Catalyst::Request>. |
aba94964 |
153 | |
deb90705 |
154 | =head2 Authentication with Catalyst::Plugin::Authentication::CDBI |
155 | |
156 | There are (at least) two ways to implement authentication with this plugin: |
51ef2818 |
157 | 1) only checking username and password; |
deb90705 |
158 | 2) checking username, password and the roles the user has |
159 | |
160 | For both variants you'll need the following code in your MyApp package: |
161 | |
162 | use Catalyst qw/Session::FastMmap Static Authentication::CDBI/; |
163 | |
164 | MyApp->config( authentication => { user_class => 'MyApp::M::MyApp::Users', |
165 | user_field => 'email', |
166 | password_field => 'password' }); |
167 | |
168 | 'user_class' is a Class::DBI class for your users table. |
169 | 'user_field' tells which field is used for username lookup (might be |
51ef2818 |
170 | email, first name, surname etc.). |
deb90705 |
171 | 'password_field' is, well, password field in your table and by default |
172 | password is stored in plain text. Authentication::CDBI looks for 'user' |
173 | and 'password' fields in table, if they're not defined in the config. |
174 | |
51ef2818 |
175 | In PostgreSQL, the users table might be something like: |
deb90705 |
176 | |
51ef2818 |
177 | CREATE TABLE users ( |
178 | user_id serial, |
179 | name varchar(100), |
180 | surname varchar(100), |
181 | password varchar(100), |
182 | email varchar(100), |
183 | primary key(user_id) |
184 | ); |
deb90705 |
185 | |
186 | We'll discuss the first variant for now: |
51ef2818 |
187 | 1. user:password login/auth without roles |
deb90705 |
188 | |
51ef2818 |
189 | To log in a user you might use an action like this: |
deb90705 |
190 | |
61b1e958 |
191 | sub 'login' : Local { |
deb90705 |
192 | my ($self, $c) = @_; |
193 | if ($c->req->params->{username}) { |
194 | $c->session_login($c->req->params->{username}, |
61b1e958 |
195 | $c->req->params->{password} ); |
deb90705 |
196 | if ($c->req->{user}) { |
197 | $c->forward('?restricted_area'); |
198 | } |
199 | } |
61b1e958 |
200 | } |
deb90705 |
201 | |
202 | $c->req->params->{username} and $c->req->params->{password} are html |
61b1e958 |
203 | form parameters from a login form. If login succeeds, then |
204 | $c->req->{user} contains the username of the authenticated user. |
deb90705 |
205 | |
51ef2818 |
206 | If you want to remember the user's login status in between further |
207 | requests, then just use the C<$c-E<gt>session_login> method. Catalyst will |
208 | create a session id and session cookie and automatically append session |
209 | id to all urls. So all you have to do is just check $c->req->{user} |
61b1e958 |
210 | where needed. |
deb90705 |
211 | |
51ef2818 |
212 | To log out a user, just call $c->session_logout. |
deb90705 |
213 | |
51ef2818 |
214 | Now let's take a look at the second variant: |
215 | 2. user:password login/auth with roles |
deb90705 |
216 | |
51ef2818 |
217 | To use roles you need to add the following parameters to MyApp->config in the 'authentication' section: |
deb90705 |
218 | |
219 | role_class => 'MyApp::M::MyApp::Roles', |
220 | user_role_class => 'MyApp::M::MyApp::UserRoles', |
221 | user_role_user_field => 'user_id', |
222 | user_role_role_field => 'role_id', |
223 | |
224 | Corresponding tables in PostgreSQL could look like this: |
225 | |
51ef2818 |
226 | CREATE TABLE roles ( |
227 | role_id serial, |
228 | name varchar(100), |
229 | primary key(role_id) |
230 | ); |
231 | |
232 | CREATE TABLE user_roles ( |
233 | user_role_id serial, |
234 | user_id int, |
235 | role_id int, |
236 | primary key(user_role_id), |
237 | foreign key(user_id) references users(user_id), |
238 | foreign key(role_id) references roles(role_id) |
239 | ); |
deb90705 |
240 | |
61b1e958 |
241 | The 'roles' table is a list of role names and the 'user_role' table is |
242 | used for the user -> role lookup. |
deb90705 |
243 | |
51ef2818 |
244 | Now if a logged-in user wants to see a location which is allowed only |
245 | for people with an 'admin' role, in your controller you can check it |
61b1e958 |
246 | with: |
deb90705 |
247 | |
61b1e958 |
248 | sub add : Local { |
deb90705 |
249 | my ($self, $c) = @_; |
250 | if ($c->roles(qw/admin/)) { |
251 | $c->req->output("Your account has the role 'admin.'"); |
252 | } else { |
51ef2818 |
253 | $c->req->output("You're not allowed to be here."); |
deb90705 |
254 | } |
61b1e958 |
255 | } |
deb90705 |
256 | |
51ef2818 |
257 | One thing you might need is to forward non-authenticated users to a login |
258 | form if they try to access restricted areas. If you want to do this |
259 | controller-wide (if you have one controller for your admin section) then it's |
260 | best to add a user check to a '!begin' action: |
deb90705 |
261 | |
61b1e958 |
262 | sub begin : Private { |
deb90705 |
263 | my ($self, $c) = @_; |
264 | unless ($c->req->{user}) { |
265 | $c->req->action(undef); ## notice this!! |
266 | $c->forward('?login'); |
267 | } |
61b1e958 |
268 | } |
deb90705 |
269 | |
51ef2818 |
270 | Pay attention to $c->req->action(undef). This is needed because of the |
271 | way $c->forward works - C<forward> to C<login> gets called, but after that |
272 | Catalyst will still execute the action defined in the URI (e.g. if you |
273 | tried to go to C</add>, then first 'begin' will forward to 'login', but after |
274 | that 'add' will nonetheless be executed). So $c->req->action(undef) undefines any |
275 | actions that were to be called and forwards the user where we want him/her |
deb90705 |
276 | to be. |
277 | |
51ef2818 |
278 | And this is all you need to do. |
deb90705 |
279 | |
145074c2 |
280 | |
281 | =head2 How to use Catalyst without mod_perl |
282 | |
283 | Catalyst applications give optimum performance when run under mod_perl. |
61b1e958 |
284 | However sometimes mod_perl is not an option, and running under CGI is |
51ef2818 |
285 | just too slow. There's also an alternative to mod_perl that gives |
dec2a2a9 |
286 | reasonable performance named FastCGI. |
145074c2 |
287 | |
288 | B<Using FastCGI> |
289 | |
61b1e958 |
290 | To quote from L<http://www.fastcgi.com/>: "FastCGI is a language |
291 | independent, scalable, extension to CGI that provides high performance |
292 | without the limitations of specific server APIs." Web server support |
293 | is provided for Apache in the form of C<mod_fastcgi> and there is Perl |
294 | support in the C<FCGI> module. To convert a CGI Catalyst application |
295 | to FastCGI one needs to initialize an C<FCGI::Request> object and loop |
296 | while the C<Accept> method returns zero. The following code shows how |
297 | it is done - and it also works as a normal, single-shot CGI script. |
145074c2 |
298 | |
299 | #!/usr/bin/perl |
300 | use strict; |
301 | use FCGI; |
302 | use MyApp; |
303 | |
304 | my $request = FCGI::Request(); |
305 | while ($request->Accept() >= 0) { |
1c61c726 |
306 | MyApp->run; |
145074c2 |
307 | } |
308 | |
61b1e958 |
309 | Any initialization code should be included outside the request-accept |
310 | loop. |
145074c2 |
311 | |
51ef2818 |
312 | There is one little complication, which is that C<MyApp-E<gt>run> outputs a |
61b1e958 |
313 | complete HTTP response including the status line (e.g.: |
314 | "C<HTTP/1.1 200>"). |
315 | FastCGI just wants a set of headers, so the sample code captures the |
316 | output and drops the first line if it is an HTTP status line (note: |
317 | this may change). |
318 | |
319 | The Apache C<mod_fastcgi> module is provided by a number of Linux |
320 | distros and is straightforward to compile for most Unix-like systems. |
321 | The module provides a FastCGI Process Manager, which manages FastCGI |
322 | scripts. You configure your script as a FastCGI script with the |
323 | following Apache configuration directives: |
145074c2 |
324 | |
325 | <Location /fcgi-bin> |
326 | AddHandler fastcgi-script fcgi |
327 | </Location> |
328 | |
329 | or: |
330 | |
331 | <Location /fcgi-bin> |
332 | SetHandler fastcgi-script |
333 | Action fastcgi-script /path/to/fcgi-bin/fcgi-script |
334 | </Location> |
335 | |
336 | C<mod_fastcgi> provides a number of options for controlling the FastCGI |
337 | scripts spawned; it also allows scripts to be run to handle the |
51ef2818 |
338 | authentication, authorization, and access check phases. |
145074c2 |
339 | |
61b1e958 |
340 | For more information see the FastCGI documentation, the C<FCGI> module |
341 | and L<http://www.fastcgi.com/>. |
145074c2 |
342 | |
fc7ec1d9 |
343 | =head1 AUTHOR |
344 | |
345 | Sebastian Riedel, C<sri@oook.de> |
deb90705 |
346 | Danijel Milicevic C<me@danijel.de> |
347 | Viljo Marrandi C<vilts@yahoo.com> |
61b1e958 |
348 | Marcus Ramberg C<mramberg@cpan.org> |
fc7ec1d9 |
349 | |
350 | =head1 COPYRIGHT |
351 | |
61b1e958 |
352 | This program is free software, you can redistribute it and/or modify it |
353 | under the same terms as Perl itself. |