1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
Ruby on Rails
Find a file
Jean Boussier 4e3504fc5b Stop failing GSRF token generation when session is disabled
In theory this should have warned early that the CSRF check
will fail, which would have been less puzzling for the developer.

However there are several cases where we render forms but the session
is inacessible. That's the case of turbo (https://github.com/hotwired/turbo-rails/issues/243)
as well as some others.

So unless we figure a proper way to detect these cases, we're better
to not cause this error.

Writing to a disabled session directly will still raise, this
only silence it for the specific case of CSRF.
2021-10-11 14:08:48 +02:00
.devcontainer Start the mariadb service in the dev container 2021-09-21 21:04:43 +00:00
.github Update .github/pull_request_template.md 2021-09-27 22:08:06 +02:00
actioncable Client ensures subscribe command is confirmed. (#41581) 2021-09-26 10:06:27 -07:00
actionmailbox Generate less initializers in new/upgraded Rails apps (part 2) (#43237) 2021-09-17 09:06:17 +02:00
actionmailer Replace ableist language 2021-10-05 22:27:09 -04:00
actionpack Stop failing GSRF token generation when session is disabled 2021-10-11 14:08:48 +02:00
actiontext Fix tests for actiontext with hidden inputs defaulting to autocomplete="off" 2021-09-21 21:16:01 -04:00
actionview Make Sprockets more optional, offer Propshaft as alternative (#43261) 2021-10-09 17:03:05 +02:00
activejob Preparing for 7.0.0.alpha2 release 2021-09-15 18:22:51 -04:00
activemodel Replace more ableist language 2021-10-07 11:47:28 -04:00
activerecord Address test_does_not_raise_if_no_fk_violations failure 2021-10-11 00:22:24 +09:00
activestorage Active Storage: incorrect defaults 2021-09-22 16:38:52 -05:00
activesupport Merge pull request #43282 from theojulienne/guard-against-instrumentation-exceptions 2021-10-08 13:23:37 -04:00
ci chore: Use e.g. which is the more used spelling 2021-07-21 09:17:54 +09:00
guides Fix spelling mistakes in classic_to_zeitwerk_howto 2021-10-11 14:08:29 +02:00
railties Stop failing GSRF token generation when session is disabled 2021-10-11 14:08:48 +02:00
tasks Fix a rubocop offence for Lint/ErbNewArguments 2021-02-05 12:39:58 +09:00
tools Replace webpack with importmapped Hotwire as default js (#42999) 2021-08-26 10:39:36 +02:00
.gitattributes
.gitignore Depend on ruby/debug, replacing Byebug 2021-09-08 17:35:41 +02:00
.rubocop.yml Add back Lint/UselessAssignment 2021-09-06 16:24:37 +02:00
.yardopts Updating .yardopts to document .rb files in [GEM]/app 2019-08-20 13:25:36 -04:00
.yarnrc Make Webpacker the default JavaScript compiler for Rails 6 (#33079) 2018-09-30 22:31:21 -07:00
Brewfile Address Error: caskroom/cask was moved. Tap homebrew/cask-cask instead. 2019-12-18 18:50:57 +09:00
CODE_OF_CONDUCT.md Updated links from http to https in guides, docs, etc 2019-03-09 16:43:47 +05:30
codespell.txt Add spell checking with codespell as a GitHub Action 2021-05-04 14:46:21 +10:00
CONTRIBUTING.md Adding badges and logo to README and CONTRIBUTING page 2021-01-20 10:53:47 +01:00
Gemfile Make Sprockets more optional, offer Propshaft as alternative (#43261) 2021-10-09 17:03:05 +02:00
Gemfile.lock Make Sprockets more optional, offer Propshaft as alternative (#43261) 2021-10-09 17:03:05 +02:00
MIT-LICENSE Bump license years to 2021 [ci skip] 2021-01-01 12:21:20 +09:00
package.json Install JavaScript packages before run test 2019-02-11 09:58:08 +09:00
rails.gemspec Make Sprockets more optional, offer Propshaft as alternative (#43261) 2021-10-09 17:03:05 +02:00
RAILS_VERSION Preparing for 7.0.0.alpha2 release 2021-09-15 18:22:51 -04:00
Rakefile
README.md Adding badges and logo to README and CONTRIBUTING page 2021-01-20 10:53:47 +01:00
RELEASING_RAILS.md Update missing Rails mailing list URLs 2021-08-29 23:11:47 +02:00
version.rb Preparing for 7.0.0.alpha2 release 2021-09-15 18:22:51 -04:00
yarn.lock Replace webpack with importmapped Hotwire as default js (#42999) 2021-08-26 10:39:36 +02:00

Welcome to Rails

What's Rails?

Rails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Controller (MVC) pattern.

Understanding the MVC pattern is key to understanding Rails. MVC divides your application into three layers: Model, View, and Controller, each with a specific responsibility.

Model layer

The Model layer represents the domain model (such as Account, Product, Person, Post, etc.) and encapsulates the business logic specific to your application. In Rails, database-backed model classes are derived from ActiveRecord::Base. Active Record allows you to present the data from database rows as objects and embellish these data objects with business logic methods. Although most Rails models are backed by a database, models can also be ordinary Ruby classes, or Ruby classes that implement a set of interfaces as provided by the Active Model module.

Controller layer

The Controller layer is responsible for handling incoming HTTP requests and providing a suitable response. Usually, this means returning HTML, but Rails controllers can also generate XML, JSON, PDFs, mobile-specific views, and more. Controllers load and manipulate models, and render view templates in order to generate the appropriate HTTP response. In Rails, incoming requests are routed by Action Dispatch to an appropriate controller, and controller classes are derived from ActionController::Base. Action Dispatch and Action Controller are bundled together in Action Pack.

View layer

The View layer is composed of "templates" that are responsible for providing appropriate representations of your application's resources. Templates can come in a variety of formats, but most view templates are HTML with embedded Ruby code (ERB files). Views are typically rendered to generate a controller response or to generate the body of an email. In Rails, View generation is handled by Action View.

Frameworks and libraries

Active Record, Active Model, Action Pack, and Action View can each be used independently outside Rails. In addition to that, Rails also comes with Action Mailer, a library to generate and send emails; Action Mailbox, a library to receive emails within a Rails application; Active Job, a framework for declaring jobs and making them run on a variety of queuing backends; Action Cable, a framework to integrate WebSockets with a Rails application; Active Storage, a library to attach cloud and local files to Rails applications; Action Text, a library to handle rich text content; and Active Support, a collection of utility classes and standard library extensions that are useful for Rails, and may also be used independently outside Rails.

Getting Started

  1. Install Rails at the command prompt if you haven't yet:

     $ gem install rails
    
  2. At the command prompt, create a new Rails application:

     $ rails new myapp
    

    where "myapp" is the application name.

  3. Change directory to myapp and start the web server:

     $ cd myapp
     $ bin/rails server
    

    Run with --help or -h for options.

  4. Go to http://localhost:3000 and you'll see: "Yay! Youre on Rails!"

  5. Follow the guidelines to start developing your application. You may find the following resources handy:

Contributing

We encourage you to contribute to Ruby on Rails! Please check out the Contributing to Ruby on Rails guide for guidelines about how to proceed. Join us!

Trying to report a possible security vulnerability in Rails? Please check out our security policy for guidelines about how to proceed.

Everyone interacting in Rails and its sub-projects' codebases, issue trackers, chat rooms, and mailing lists is expected to follow the Rails code of conduct.

License

Ruby on Rails is released under the MIT License.