Skip to Content

Changes for page api

Last modified by Ophion Admin on 2026/10/06 19:32
From version 3.1
edited by Ophion Admin
on 2026/10/06 16:01
Change comment: There is no comment for this version
To version 4.1
edited by Ophion Admin
on 2026/10/06 16:02
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -1,7 +1,6 @@
1 1  {{velocity}}
2 2  #set ($appSpace = 'api')
3 3  #set ($appClass = 'api.Code.apiClass')
4 -#set ($templateRef = 'api.Code.apiTemplate')
5 5  ## Lowercase letters and digits, single hyphens only between the parts
6 6  #set ($namePattern = '[a-z0-9]+(-[a-z0-9]+)*')
7 7  ## Collect all AWM apps: data class name -> app title
... ... @@ -21,7 +21,9 @@
21 21  #if ("$!request.createEntry" == '1')
22 22   #set ($name = "$!request.name")
23 23   #set ($sourceClass = "$!request.sourceClass")
24 - #if (!$name.matches($namePattern))
23 + #if (!$services.csrf.isTokenValid("$!request.form_token"))
24 + #set ($errorMsg = 'Invalid form token, please try again.')
25 + #elseif (!$name.matches($namePattern))
25 25   #set ($errorMsg = 'Only lowercase letters, digits and hyphens are allowed.')
26 26   #elseif (!$apps.containsKey($sourceClass))
27 27   #set ($errorMsg = 'Invalid source application.')
... ... @@ -30,9 +30,14 @@
30 30   #if ($xwiki.exists($ref))
31 31   #set ($errorMsg = "An API named '${name}' already exists.")
32 32   #else
33 - ## The last parameter prefills the sourceClass field of the new entry
34 - #set ($qs = $escapetool.url({'template': $templateRef, 'parent': "${appSpace}.WebHome", 'title': $name, "${appClass}_0_sourceClass": $sourceClass}))
35 - $response.sendRedirect($xwiki.getURL($ref, 'edit', $qs))
34 + ## Create and save the entry directly, no edit form needed
35 + #set ($newDoc = $xwiki.getDocument($ref))
36 + #set ($discard = $newDoc.setTitle($name))
37 + #set ($discard = $newDoc.setParent("${appSpace}.WebHome"))
38 + #set ($newObj = $newDoc.newObject($appClass))
39 + #set ($discard = $newObj.set('sourceClass', $sourceClass))
40 + #set ($discard = $newDoc.save('Created API entry'))
41 + $response.sendRedirect($doc.getURL())
36 36   #end
37 37   #end
38 38  #end
... ... @@ -44,8 +44,9 @@
44 44   /* Hide the default AWM "Add new entry" button */
45 45   ul.actions a.action.add, a.action.add { display: none !important; }
46 46  </style>
47 -<form action="$doc.getURL()" method="get" class="form-inline">
53 +<form action="$doc.getURL()" method="post" class="form-inline">
48 48   <input type="hidden" name="createEntry" value="1"/>
55 + <input type="hidden" name="form_token" value="$!services.csrf.token"/>
49 49   <select name="sourceClass" class="form-control">
50 50   #foreach ($app in $apps.entrySet())
51 51   <option value="$escapetool.xml($app.key)">$escapetool.xml($app.value)</option>