let authorize! return the policy record (#287)

Co-authored-by: Vladimir Dementyev <[email protected]>

CHANGELOG.md

@@ -2,6 +2,9 @@
 
 ## master
 
+
+- Let authorize! return the policy record ([@sedubois][])
+
 - Enable `allowance_to` as a helper method by default ([@stephannv][])
 
 ## 0.7.3 (2024-12-18)

lib/action_policy/behaviour.rb

@@ -33,11 +33,13 @@ def self.included(base)
     # Policy is inferred from record
     # (unless explicitly specified through `with` option).
     #
+    # @return the policy record
     # Raises `ActionPolicy::Unauthorized` if check failed.
     def authorize!(record = :__undef__, to:, **options)
       policy = lookup_authorization_policy(record, **options)
 
       Authorizer.call(policy, authorization_rule_for(policy, to))
+      policy.record
     end
 
     # Checks that an activity is allowed for the current context (e.g. user).

lib/action_policy/rails/controller.rb

@@ -45,13 +45,15 @@ module Controller
     # If record is not provided, tries to infer the resource class
     # from controller name (i.e. `controller_name.classify.safe_constantize`).
     #
+    # @return the policy record
     # Raises `ActionPolicy::Unauthorized` if check failed.
     def authorize!(record = :__undef__, to: nil, **options)
       to ||= :"#{action_name}?"
 
-      super
+      policy_record = super
 
       self.authorize_count += 1
+      policy_record
     end
 
     # Tries to infer the resource class from controller name

test/action_policy/rails/controllers_test.rb

@@ -43,8 +43,7 @@ def current_user
     private
 
     def set_user
-      @user = User.new(params[:target])
-      authorize! @user
+      @user = authorize! User.new(params[:target])
     end
   end