Rails 4 in 30'

Transcript

1. WHAT’S NEW RAILS 4 IN 30’ Monday, October 29, 12
2. Monday, October 29, 12
3. Monday, October 29, 12
4. ▪ Migration ▪ Ruby 1.9.3 ▪ Strong Parameters ▪ Declarative ETags ▪ Cache Digests ▪ Turbolinks ▪ ActiveSupport::Queue ▪ Async Mailers ▪ Routing Concerns ▪ ActionController::Live ▪ Security ▪ Other features AGENDA Monday, October 29, 12
5. MIGRATION Monday, October 29, 12
6. 3.0.X ➡ 3.1.X ➡ 3.2.X Monday, October 29, 12
7. IN EACH STEP ... Monday, October 29, 12
8. TESTS COVERAGE QA Monday, October 29, 12
9. DEPRECATIONS Monday, October 29, 12
10. ▪ Active Resource ▪ AR Observers ▪ AR Session Store ▪ AMo Mass Assignment Sanitizer ▪ Hash Based Finders ▪ find_all_* / find_last_* ▪ Action Caching ▪ Page Caching AVAILABLE AS GEMS Monday, October 29, 12
11. VENDOR/PLUGINS WAS REMOVED Monday, October 29, 12
12. USE RAILS GUIDES Monday, October 29, 12
13. Monday, October 29, 12
14. Monday, October 29, 12
15. ▪ YARV ▪ Fastest VM ▪ Bytecode interpreter ▪ Lazy Sweep GC (tuneable) ▪ Native Threads ▪ Better strategy for GIL / GVL ▪ Encodings RUBY 1.9.3 Monday, October 29, 12
16. FEATURES Monday, October 29, 12
17. STRONG PARAMETERS Monday, October 29, 12
18. ActiveRecord::Schema.define(version:  20121010233758)  do    create_table  "users",  force:  true  do  |t|        t.string      "username"        t.string      "password"        t.boolean    "admin"        t.datetime  "created_at"        t.datetime  "updated_at"    end end #  ... user  =  User.new  params[:user] MASS ASSIGNMENT Monday, October 29, 12
19. ActiveRecord::Schema.define(version:  20121010233758)  do    create_table  "users",  force:  true  do  |t|        t.string      "username"        t.string      "password"        t.boolean    "admin"        t.datetime  "created_at"        t.datetime  "updated_at"    end end #  ... user  =  User.new  params[:user] MASS ASSIGNMENT Monday, October 29, 12
20. RA ILS 3.2 #  app/models/user.rb class  User  <  ActiveRecord::Base;  end #  app/controllers/users_controller.rb class  UsersController  <  ApplicationController    def  create        @user  =  User.create!  params[:user]        redirect_to  @user    end end #  raises  ActiveModel::MassAssignmentSecurity::Error MASS ASSIGNMENT Monday, October 29, 12
21. RA ILS 4.0 #  app/models/user.rb class  User  <  ActiveRecord::Base;  end #  app/controllers/users_controller.rb class  UsersController  <  ApplicationController    def  create        @user  =  User.create!  params[:user]        redirect_to  @user    end end #  raises  ActiveModel::ForbiddenAttributesError MASS ASSIGNMENT Monday, October 29, 12
22. RA ILS 3.2 #  app/models/user.rb class  User  <  ActiveRecord::Base    attr_accessible  :username,                                    :password end #  app/controllers/users_controller.rb class  UsersController  <  ApplicationController    def  create        @user  =  User.create!  params[:user]        redirect_to  @user    end end MASS ASSIGNMENT Monday, October 29, 12
23. RA ILS 3.2 #  app/models/user.rb class  User  <  ActiveRecord::Base    attr_accessible  :username,                                    :password end #  app/controllers/users_controller.rb class  UsersController  <  ApplicationController    def  create        @user  =  User.create!  params[:user]        redirect_to  @user    end end MASS ASSIGNMENT Monday, October 29, 12
24. RA ILS 4.0 #  app/models/user.rb class  User  <  ActiveRecord::Base;  end #  app/controllers/users_controller.rb class  UsersController  <  ApplicationController    def  create        @user  =  User.create!  params.require(:user).                                                                permit(:username,  :password)        redirect_to  @user    end end STRONG PARAMETERS Monday, October 29, 12
25. RA ILS 4.0 #  app/models/user.rb class  User  <  ActiveRecord::Base;  end #  app/controllers/users_controller.rb class  UsersController  <  ApplicationController    def  create        @user  =  User.create!  params.require(:user).                                                                permit(:username,  :password)        redirect_to  @user    end end STRONG PARAMETERS Monday, October 29, 12
26. RA ILS 4.0 #  app/models/user.rb class  User  <  ActiveRecord::Base;  end #  app/controllers/users_controller.rb class  UsersController  <  ApplicationController    def  create        @user  =  User.create!  user_params        redirect_to  @user    end    private    def  user_params        params.require(:user).permit(:username,  :password)    end end STRONG PARAMETERS Monday, October 29, 12
27. RA ILS 4.0 #  app/models/user.rb class  User  <  ActiveRecord::Base;  end #  app/controllers/users_controller.rb class  UsersController  <  ApplicationController    def  create        @user  =  User.create!  user_params        redirect_to  @user    end    private    def  user_params        params.require(:user).permit(:username,  :password)    end end STRONG PARAMETERS Monday, October 29, 12
28. RA ILS 4.0 curl  http://localhost:3000/users  -­‐d   "user[username]=spastorino&user[admin]=true& authenticity_token=mm89V7LxLMRJoMJcnP6SIxnxg19RzcO56hdqbDZNmVo ="  -­‐-­‐cookie  cookie STRONG PARAMETERS Monday, October 29, 12
29. RA ILS 4.0 curl  http://localhost:3000/users  -­‐d   "user[username]=spastorino&user[admin]=true& authenticity_token=mm89V7LxLMRJoMJcnP6SIxnxg19RzcO56hdqbDZNmVo ="  -­‐-­‐cookie  cookie STRONG PARAMETERS Monday, October 29, 12
30. RA ILS 4.0 user  =  User.find_by_username('spastorino') user.admin? =>  false STRONG PARAMETERS Monday, October 29, 12
31. RA ILS 4.0 user  =  User.find_by_username('spastorino') user.admin? =>  false user.update_attributes(username:  'santiago',  admin:  true) =>  true STRONG PARAMETERS Monday, October 29, 12
32. RA ILS 4.0 user  =  User.find_by_username('spastorino') user.admin? =>  false user.update_attributes(username:  'santiago',  admin:  true) =>  true user.admin? =>  true STRONG PARAMETERS Monday, October 29, 12
33. HTTPS://GITHUB.COM/RAILS/STRONG_PARAMETERS Monday, October 29, 12
34. DECLARATIVE ETAGS Monday, October 29, 12
35. RA ILS 3.2 class  TodolistsController  <  ApplicationController    def  show        @todolist  =  Todolist.find(params[:id])        fresh_when  etag:  @todolist    end end DECLARATIVE ETAGS Monday, October 29, 12
36. RA ILS 4.0 class  TodolistsController  <  ApplicationController    etag  {  current_user.try  :admin  }    def  show        @todolist  =  Todolist.find(params[:id])        fresh_when  etag:  @todolist    end end DECLARATIVE ETAGS Monday, October 29, 12
37. RA ILS 4.0 class  TodolistsController  <  ApplicationController    etag  {  current_user.try  :admin  }    etag  {  @project.try  :cache_key  }    def  show        @todolist  =  Todolist.find(params[:id])        fresh_when  etag:  @todolist    end end DECLARATIVE ETAGS Monday, October 29, 12
38. HTTPS://GITHUB.COM/RAILS/ETAGGER Monday, October 29, 12
39. CACHE DIGESTS Monday, October 29, 12
40. RA ILS 3.2 #  projects/show.html.erb <%  cache  [  "v5",  project  ]  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  [  "v3",  todolist  ]  do  %>    <p><%=  todolist.name  %>:</p>    <%=  render  todolist.todos  %> <%  end  %> #  todos/_todo.html.erb <%  cache  [  "v1",  todo  ]  do  %>    <p><%=  todo.name  %></p> <%  end  %> CACHING VIEWS Monday, October 29, 12
41. RA ILS 3.2 #  projects/show.html.erb <%  cache  [  "v5",  project  ]  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  [  "v3",  todolist  ]  do  %>    <p><%=  todolist.name  %>:</p>    <%=  render  todolist.todos  %> <%  end  %> #  todos/_todo.html.erb <%  cache  [  "v1",  todo  ]  do  %>    <p><%=  todo.name  %></p> <%  end  %> CACHING VIEWS Monday, October 29, 12
42. RA ILS 3.2 #  projects/show.html.erb <%  cache  [  "v5",  project  ]  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  [  "v3",  todolist  ]  do  %>    <p><%=  todolist.name  %>:</p>    <%=  render  todolist.todos  %> <%  end  %> #  todos/_todo.html.erb <%  cache  [  "v1",  todo  ]  do  %>    <p><%=  todo.name  %></p> <%  end  %> CACHING VIEWS Monday, October 29, 12
43. Monday, October 29, 12
44. RA ILS 3.2 #  projects/show.html.erb <%  cache  [  "v5",  project  ]  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  [  "v3",  todolist  ]  do  %>    <p><%=  todolist.name  %>:</p>    <%=  render  todolist.todos  %> <%  end  %> #  todos/_todo.html.erb <%  cache  [  "v1",  todo  ]  do  %>    <p><%=  todo.name  %></p> <%  end  %> CACHING VIEWS Monday, October 29, 12
45. RA ILS 3.2 #  projects/show.html.erb <%  cache  [  "v5",  project  ]  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  [  "v3",  todolist  ]  do  %>    <p><%=  todolist.name  %>:</p>    <%=  render  todolist.todos  %> <%  end  %> #  todos/_todo.html.erb <%  cache  [  "v1",  todo  ]  do  %>    <li><%=  todo.name  %></li> <%  end  %> CACHING VIEWS Monday, October 29, 12
46. RA ILS 3.2 #  projects/show.html.erb <%  cache  [  "v5",  project  ]  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  [  "v3",  todolist  ]  do  %>    <p><%=  todolist.name  %>:</p>    <%=  render  todolist.todos  %> <%  end  %> #  todos/_todo.html.erb <%  cache  [  "v2",  todo  ]  do  %>    <li><%=  todo.name  %></li> <%  end  %> CACHING VIEWS Monday, October 29, 12
47. RA ILS 3.2 #  projects/show.html.erb <%  cache  [  "v5",  project  ]  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  [  "v3",  todolist  ]  do  %>    <p><%=  todolist.name  %>:</p>    <%=  render  todolist.todos  %> <%  end  %> #  todos/_todo.html.erb <%  cache  [  "v2",  todo  ]  do  %>    <li><%=  todo.name  %></li> <%  end  %> CACHING VIEWS Monday, October 29, 12
48. RA ILS 3.2 #  projects/show.html.erb <%  cache  [  "v5",  project  ]  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  [  "v4",  todolist  ]  do  %>    <p><%=  todolist.name  %>:</p>    <ul><%=  render  todolist.todos  %></ul> <%  end  %> #  todos/_todo.html.erb <%  cache  [  "v2",  todo  ]  do  %>    <li><%=  todo.name  %></li> <%  end  %> CACHING VIEWS Monday, October 29, 12
49. RA ILS 3.2 #  projects/show.html.erb <%  cache  [  "v5",  project  ]  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  [  "v4",  todolist  ]  do  %>    <p><%=  todolist.name  %>:</p>    <ul><%=  render  todolist.todos  %></ul> <%  end  %> #  todos/_todo.html.erb <%  cache  [  "v2",  todo  ]  do  %>    <li><%=  todo.name  %></li> <%  end  %> CACHING VIEWS Monday, October 29, 12
50. RA ILS 3.2 #  projects/show.html.erb <%  cache  [  "v6",  project  ]  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  [  "v4",  todolist  ]  do  %>    <p><%=  todolist.name  %>:</p>    <ul><%=  render  todolist.todos  %></ul> <%  end  %> #  todos/_todo.html.erb <%  cache  [  "v2",  todo  ]  do  %>    <li><%=  todo.name  %></li> <%  end  %> CACHING VIEWS Monday, October 29, 12
51. RA ILS 4.0 #  projects/show.html.erb <%  cache  project  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  todolist  do  %>    <p><%=  todolist.name  %>:</p>    <%=  render  todolist.todos  %> <%  end  %> #  todos/_todo.html.erb <%  cache  todo  do  %>  <p><%=  todo.name  %></p> <%  end  %> CACHE DIGESTS Monday, October 29, 12
52. RA ILS 4.0 #  projects/show.html.erb <%  cache  project  do  %>    <p>All  my  todo  lists:</p>    <%=  render  project.todolists  %> <%  end  %> #  todolists/_todolist.html.erb <%  cache  todolist  do  %>    <p><%=  todolist.name  %>:</p>    <ul><%=  render  todolist.todos  %></ul> <%  end  %> #  todos/_todo.html.erb <%  cache  todo  do  %>    <li><%=  todo.name  %></li> <%  end  %> CACHE DIGESTS Monday, October 29, 12
53. CRITICISMS Monday, October 29, 12
54. HTTPS://GITHUB.COM/RAILS/CACHE_DIGESTS Monday, October 29, 12
55. TURBOLINKS Monday, October 29, 12
56. FOLLOW LINKS WITHOUT RELOADING THE WHOLE PAGE Monday, October 29, 12
57. DOESN’T DOWNLOAD JS & CSS Monday, October 29, 12
58. DOESN’T DOWNLOAD JS & CSS NOT A REAL GAIN IF YOU USE CACHING Monday, October 29, 12
59. DOESN’T RE-COMPILE Monday, October 29, 12
60. DOESN’T RE-COMPILE ONLY V8 Monday, October 29, 12
61. Monday, October 29, 12
62. DOESN’T RE- EVALUATE Monday, October 29, 12
63. CONSIDERATIONS Monday, October 29, 12
64. HTTPS://GITHUB.COM/RAILS/TURBOLINKS Monday, October 29, 12
65. ACTIVESUPPORT::QUEUE Monday, October 29, 12
66. RA ILS 4.0 Rails.queue.push  Job.new job  =  Rails.queue.pop job.run AS::QUEUE Monday, October 29, 12
67. RA ILS 4.0 #  config/application.rb #  Default  Synchronous config.queue  =  ActiveSupport::SynchronousQueue.new #  Default  Threaded config.queue  =  ActiveSupport::Queue.new #  Resque  Queue config.queue  =  Resque::Rails::Queue.new #  Sidekiq  Queue config.queue  =  Sidekiq::Client::Queue.new AS::QUEUE Monday, October 29, 12
68. ASYNC MAILERS Monday, October 29, 12
69. RA ILS 3.2 class  UsersController  <  ActionController::Base    def  create        @user  =  User.new  params[:user]        if  @user.save            UserMailer.welcome_email(@user).deliver        end        respond_with  @user    end end MAILERS Monday, October 29, 12
70. RA ILS 4.0 class  UsersController  <  ActionController::Base    def  create        @user  =  User.new  params[:user]        if  @user.save            UserMailer.welcome_email(@user).deliver        end        respond_with  @user    end end ASYNC MAILERS Monday, October 29, 12
71. ROUTING CONCERNS Monday, October 29, 12
72. RA ILS 3.2 #  config/routes.rb Myapp::Application.routes.draw  do    resources  :messages  do        resources  :comments    end    resources  :forwards  do        resources  :comments    end    resources  :uploads  do        resources  :comments    end    resources  :documents  do        resources  :comments    end    resources  :todos  do        resources  :comments    end ROUTING CONCERNS Monday, October 29, 12
73. RA ILS 4.0 #  config/routes.rb Myapp::Application.routes.draw  do    concern  :commentable  do        resources  :comments    end    resources  :messages,    concerns:  :commentable    resources  :forwards,    concerns:  :commentable    resources  :uploads,      concerns:  :commentable    resources  :documents,  concerns:  :commentable    resources  :todos,          concerns:  :commentable end ROUTING CONCERNS Monday, October 29, 12
74. ACTIONCONTROLLER::LIVE Monday, October 29, 12
75. RA ILS 4.0 class  MyController  <  ActionController::Base end AC::LIVE Monday, October 29, 12
76. RA ILS 4.0 class  MyController  <  ActionController::Base    include  ActionController::Live end AC::LIVE Monday, October 29, 12
77. RA ILS 4.0 class  MyController  <  ActionController::Base    include  ActionController::Live    def  index        100.times  {            response.stream.write  "hi\n"        }        response.stream.close    end end AC::LIVE Monday, October 29, 12
78. HTTP://TENDERLOVEMAKING.COM/2012/07/30/ IS-IT-LIVE.HTML Monday, October 29, 12
79. SECURITY Monday, October 29, 12
80. ▪ match doesn’t catch all SECURITY Monday, October 29, 12
81. ▪ match doesn’t catch all ▪ ej. match ‘/follow’ SECURITY Monday, October 29, 12
82. ▪ match doesn’t catch all ▪ ej. match ‘/follow’ ▪ escape_html_entities_in_json = true SECURITY Monday, October 29, 12
83. ▪ match doesn’t catch all ▪ ej. match ‘/follow’ ▪ escape_html_entities_in_json = true ▪ var posts = #{ @posts.to_json } SECURITY Monday, October 29, 12
84. ▪ match doesn’t catch all ▪ ej. match ‘/follow’ ▪ escape_html_entities_in_json = true ▪ var posts = #{ @posts.to_json } ▪ X-Frame-Options: SAMEORIGIN SECURITY Monday, October 29, 12
85. ▪ match doesn’t catch all ▪ ej. match ‘/follow’ ▪ escape_html_entities_in_json = true ▪ var posts = #{ @posts.to_json } ▪ X-Frame-Options: SAMEORIGIN ▪ X-Xss-Protection: 1; mode=block SECURITY Monday, October 29, 12
86. ▪ match doesn’t catch all ▪ ej. match ‘/follow’ ▪ escape_html_entities_in_json = true ▪ var posts = #{ @posts.to_json } ▪ X-Frame-Options: SAMEORIGIN ▪ X-Xss-Protection: 1; mode=block ▪ X-Content-Type-Options: nosniff SECURITY Monday, October 29, 12
87. ▪ threadsafe! by default ▪ ActiveRecord::Model ▪ ActiveModel::Model ▪ ActiveRecord::Relation ▪ Schema cache dump ▪ Dalli ▪ PATCH verb ▪ Friendly errors ▪ Default test directories have changed OTHER FEATURES Monday, October 29, 12
88. WE ❤ OSS Monday, October 29, 12
89. WHEN IS RAILS 4 GOING TO BE RELEASED? Monday, October 29, 12
90. @SPASTORINO Monday, October 29, 12
91. THANK YOU! Monday, October 29, 12
92. QUESTIONS? Monday, October 29, 12