feature: full IDs obfuscation (friendly_id/hashids/prefixed_ids)

Gemfile

@@ -175,6 +175,8 @@ gem "mapkick-rb", "~> 0.1.4"
 
 gem "pluggy", path: "./pluggy"
 
+gem "hashid-rails", "~> 1.4", ">= 1.4.1"
+
 # Avo money field
 # gem "avo-money_field", path: "./../avo-money_field"
 gem "money-rails", "~> 1.12"

Gemfile.lock

@@ -323,6 +323,9 @@ GEM
     groupdate (6.4.0)
       activesupport (>= 6.1)
     hashdiff (1.1.0)
+    hashid-rails (1.4.1)
+      activerecord (>= 4.0)
+      hashids (~> 1.0)
     hashids (1.0.6)
     highline (3.1.0)
       reline
@@ -688,6 +691,7 @@ DEPENDENCIES
   fuubar
   gem-release
   groupdate
+  hashid-rails (~> 1.4, >= 1.4.1)
   hightop
   hotwire-livereload (~> 1.3.0)
   htmlbeautifier

app/components/avo/actions_component.html.erb

@@ -4,7 +4,7 @@
   data-actions-picker-enabled-class="text-black hover:bg-primary-500 hover:text-white"
   data-actions-picker-disabled-class="cursor-wait text-gray-500"
   data-resource-name="<%= @resource.class.to_s %>"
-  <% if @resource.record.present? %> data-record-id="<%= @resource.record.id %>" <% end %>
+  <% if @resource.record.present? %> data-record-id="<%= @resource.record_param %>" <% end %>
 >
   <%= a_button style: @style,
     type: :button,

app/components/avo/fields/belongs_to_field/edit_component.html.erb

@@ -101,7 +101,7 @@
       <%= @form.select @field.id_input_foreign_key, @field.options,
         {
           include_blank: @field.placeholder,
-          value: @field.value
+          value: @field.value.to_param
         },
         {
           class: classes("w-full"),

app/components/avo/fields/belongs_to_field/show_component.rb

@@ -6,7 +6,7 @@ def resource_view_path
       record: @field.value,
       resource: @field.target_resource,
       via_resource_class: @resource.class.to_s,
-      via_record_id: @resource.record.to_param
+      via_record_id: @resource.record_param
     )
   end
 end

app/components/avo/fields/has_one_field/show_component.rb

@@ -24,7 +24,7 @@ def can_attach?
   def attach_path
     helpers.avo.resources_associations_new_path(
       @resource.singular_model_key,
-      @resource.record.to_param,
+      @resource.record_param,
       @field.id,
       for_attribute: @field.for_attribute
     )
@@ -48,7 +48,7 @@ def create_path
       via_relation: association_id,
       via_relation_class: @resource.model_class.to_s,
       via_resource_class: @resource.class,
-      via_record_id: @resource.record.to_param,
+      via_record_id: @resource.record_param,
       via_association_type: :has_one
     }
 

app/components/avo/index/resource_controls_component.rb

@@ -89,7 +89,7 @@ def render_edit_button(control)
       data: {
         target: "control:edit",
         control: :edit,
-        "resource-id": @resource.record.id,
+        "resource-id": @resource.record_param,
         tippy: "tooltip",
       }
   end
@@ -133,14 +133,14 @@ def render_delete_button(control)
         target: "control:destroy",
         control: :destroy,
         tippy: control.title ? :tooltip : nil,
-        "resource-id": @resource.record.id,
+        "resource-id": @resource.record_param,
       }
   end
 
   def render_detach_button(control)
     return unless can_detach?
 
-    a_button url: helpers.resource_detach_path(params[:resource_name], params[:id], params[:related_name], @resource.record.id),
+    a_button url: helpers.resource_detach_path(params[:resource_name], params[:id], params[:related_name], @resource.record_param),
       style: :icon,
       color: :gray,
       icon: "avo/detach",
@@ -154,7 +154,7 @@ def render_detach_button(control)
         turbo_confirm: control.confirmation_message,
         target: "control:detach",
         control: :detach,
-        "resource-id": @resource.record.id,
+        "resource-id": @resource.record_param,
         tippy: :tooltip,
       }
   end

app/components/avo/resource_component.rb

@@ -36,7 +36,7 @@ def can_detach?
   def detach_path
     return "/" if @reflection.blank?
 
-    helpers.resource_detach_path(params[:resource_name], params[:id], @reflection.name.to_s, @resource.record.to_param)
+    helpers.resource_detach_path(params[:resource_name], params[:id], @reflection.name.to_s, @resource.record_param)
   end
 
   def can_see_the_edit_button?
@@ -175,7 +175,7 @@ def render_delete_button(control)
         target: "control:destroy",
         control: :destroy,
         tippy: control.title ? :tooltip : nil,
-        "resource-id": @resource.record.id,
+        "resource-id": @resource.record_param,
       } do
       control.label
     end

app/components/avo/resource_sidebar_component.html.erb

@@ -2,7 +2,7 @@
   data-component-name="<%= self.class.to_s.underscore %>"
   data-component-index="<%= index %>"
   data-resource-name="<%= @resource.class.to_s %>"
-  data-record-id="<%= @resource.record.id %>"
+  data-record-id="<%= @resource.record_param %>"
 >
   <%= render Avo::Items::VisibleItemsComponent.new(
     resource: @resource,

app/components/avo/views/resource_edit_component.html.erb

@@ -3,9 +3,9 @@
   data: {
     model_name: @resource.model_name.to_s,
     resource_name: @resource.class.to_s,
-    record_id: @resource.record.id,
+    record_id: @resource.record_param,
     selected_resources_name: @resource.model_key,
-    selected_resources: [@resource.record.id],
+    selected_resources: [@resource.record_param],
     **@resource.stimulus_data_attributes
   } do %>
   <%= render_cards_component %>

app/components/avo/views/resource_show_component.html.erb

@@ -2,9 +2,9 @@
   data: {
     model_name: @resource.model_name.to_s,
     resource_name: @resource.class.to_s,
-    record_id: @resource.record.id,
+    record_id: @resource.record_param,
     selected_resources_name: @resource.model_key,
-    selected_resources: [@resource.record.to_param],
+    selected_resources: [@resource.record_param],
     **@resource.stimulus_data_attributes
   } do %>
   <%= content_tag :div, class: 'space-y-12' do %>

app/controllers/avo/associations_controller.rb

@@ -54,7 +54,7 @@ def new
         end
 
         @options = query.all.map do |record|
-          [@attachment_resource.new(record: record).record_title, record.id]
+          [@attachment_resource.new(record: record).record_title, record.to_param]
         end
       end
     end

app/controllers/avo/search_controller.rb

@@ -129,7 +129,7 @@ def fetch_result_information(record, resource, item)
       end
 
       {
-        _id: record.id,
+        _id: record.to_param,
         _label: highlighted_title,
         _url: resource.class.fetch_search(:result_path, record: resource.record) || record_path
       }

app/views/avo/base/close_modal_and_reload_field.turbo_stream.erb

@@ -2,7 +2,7 @@
 
 <turbo-stream action="update-belongs-to"
               data-relation-name="<%= params[:via_relation] %>"
-              data-target-record-id="<%= @record.id %>"
+              data-target-record-id="<%= @record.to_param %>"
               data-target-resource-label="<%= @resource.record_title %>"
               data-target-resource-class="<%= @record.class.name %>">
 </turbo-stream>

gemfiles/rails_6.1_ruby_3.1.4.gemfile

@@ -40,6 +40,7 @@ gem "image_processing", "~> 1.12"
 gem "prefixed_ids"
 gem "mapkick-rb", "~> 0.1.4"
 gem "pluggy", path: "../pluggy"
+gem "hashid-rails", "~> 1.4", ">= 1.4.1"
 gem "money-rails", "~> 1.12"
 gem "avo-money_field"
 gem "avo-record_link_field"

gemfiles/rails_6.1_ruby_3.1.4.gemfile.lock

@@ -246,6 +246,9 @@ GEM
     groupdate (6.4.0)
       activesupport (>= 6.1)
     hashdiff (1.1.0)
+    hashid-rails (1.4.1)
+      activerecord (>= 4.0)
+      hashids (~> 1.0)
     hashids (1.0.6)
     highline (3.1.0)
       reline
@@ -446,15 +449,15 @@ GEM
       json (~> 2.3)
       language_server-protocol (>= 3.17.0)
       parallel (~> 1.10)
-      parser (>= 3.2.2.4)
+      parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 1.8, < 3.0)
       rexml (>= 3.2.5, < 4.0)
-      rubocop-ast (>= 1.30.0, < 2.0)
+      rubocop-ast (>= 1.31.1, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 3.0)
-    rubocop-ast (1.30.0)
-      parser (>= 3.2.1.0)
+    rubocop-ast (1.31.2)
+      parser (>= 3.3.0.4)
     rubocop-performance (1.20.2)
       rubocop (>= 1.48.1, < 2.0)
       rubocop-ast (>= 1.30.0, < 2.0)
@@ -520,10 +523,10 @@ GEM
       actionpack (>= 6.1)
       activesupport (>= 6.1)
       sprockets (>= 3.0.0)
-    standard (1.33.0)
+    standard (1.35.1)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.0)
-      rubocop (~> 1.59.0)
+      rubocop (~> 1.62.0)
       standard-custom (~> 1.0.0)
       standard-performance (~> 1.3)
     standard-custom (1.0.2)
@@ -621,6 +624,7 @@ DEPENDENCIES
   fuubar
   gem-release
   groupdate
+  hashid-rails (~> 1.4, >= 1.4.1)
   hightop
   hotwire-livereload (~> 1.3.0)
   htmlbeautifier

gemfiles/rails_6.1_ruby_3.3.0.gemfile

@@ -40,6 +40,7 @@ gem "image_processing", "~> 1.12"
 gem "prefixed_ids"
 gem "mapkick-rb", "~> 0.1.4"
 gem "pluggy", path: "../pluggy"
+gem "hashid-rails", "~> 1.4", ">= 1.4.1"
 gem "money-rails", "~> 1.12"
 gem "avo-money_field"
 gem "avo-record_link_field"

gemfiles/rails_6.1_ruby_3.3.0.gemfile.lock

@@ -246,6 +246,9 @@ GEM
     groupdate (6.4.0)
       activesupport (>= 6.1)
     hashdiff (1.1.0)
+    hashid-rails (1.4.1)
+      activerecord (>= 4.0)
+      hashids (~> 1.0)
     hashids (1.0.6)
     highline (3.1.0)
       reline
@@ -621,6 +624,7 @@ DEPENDENCIES
   fuubar
   gem-release
   groupdate
+  hashid-rails (~> 1.4, >= 1.4.1)
   hightop
   hotwire-livereload (~> 1.3.0)
   htmlbeautifier

gemfiles/rails_7.1_ruby_3.1.4.gemfile

@@ -40,6 +40,7 @@ gem "image_processing", "~> 1.12"
 gem "prefixed_ids"
 gem "mapkick-rb", "~> 0.1.4"
 gem "pluggy", path: "../pluggy"
+gem "hashid-rails", "~> 1.4", ">= 1.4.1"
 gem "money-rails", "~> 1.12"
 gem "avo-money_field"
 gem "avo-record_link_field"

gemfiles/rails_7.1_ruby_3.1.4.gemfile.lock

@@ -263,6 +263,9 @@ GEM
     groupdate (6.4.0)
       activesupport (>= 6.1)
     hashdiff (1.1.0)
+    hashid-rails (1.4.1)
+      activerecord (>= 4.0)
+      hashids (~> 1.0)
     hashids (1.0.6)
     highline (3.1.0)
       reline
@@ -474,15 +477,15 @@ GEM
       json (~> 2.3)
       language_server-protocol (>= 3.17.0)
       parallel (~> 1.10)
-      parser (>= 3.2.2.4)
+      parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 1.8, < 3.0)
       rexml (>= 3.2.5, < 4.0)
-      rubocop-ast (>= 1.30.0, < 2.0)
+      rubocop-ast (>= 1.31.1, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 3.0)
-    rubocop-ast (1.30.0)
-      parser (>= 3.2.1.0)
+    rubocop-ast (1.31.2)
+      parser (>= 3.3.0.4)
     rubocop-performance (1.20.2)
       rubocop (>= 1.48.1, < 2.0)
       rubocop-ast (>= 1.30.0, < 2.0)
@@ -548,10 +551,10 @@ GEM
       actionpack (>= 6.1)
       activesupport (>= 6.1)
       sprockets (>= 3.0.0)
-    standard (1.33.0)
+    standard (1.35.1)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.0)
-      rubocop (~> 1.59.0)
+      rubocop (~> 1.62.0)
       standard-custom (~> 1.0.0)
       standard-performance (~> 1.3)
     standard-custom (1.0.2)
@@ -649,6 +652,7 @@ DEPENDENCIES
   fuubar
   gem-release
   groupdate
+  hashid-rails (~> 1.4, >= 1.4.1)
   hightop
   hotwire-livereload (~> 1.3.0)
   htmlbeautifier

gemfiles/rails_7.1_ruby_3.3.0.gemfile

@@ -40,6 +40,7 @@ gem "image_processing", "~> 1.12"
 gem "prefixed_ids"
 gem "mapkick-rb", "~> 0.1.4"
 gem "pluggy", path: "../pluggy"
+gem "hashid-rails", "~> 1.4", ">= 1.4.1"
 gem "money-rails", "~> 1.12"
 gem "avo-money_field"
 gem "avo-record_link_field"

gemfiles/rails_7.1_ruby_3.3.0.gemfile.lock

@@ -263,6 +263,9 @@ GEM
     groupdate (6.4.0)
       activesupport (>= 6.1)
     hashdiff (1.1.0)
+    hashid-rails (1.4.1)
+      activerecord (>= 4.0)
+      hashids (~> 1.0)
     hashids (1.0.6)
     highline (3.1.0)
       reline
@@ -649,6 +652,7 @@ DEPENDENCIES
   fuubar
   gem-release
   groupdate
+  hashid-rails (~> 1.4, >= 1.4.1)
   hightop
   hotwire-livereload (~> 1.3.0)
   htmlbeautifier

gemfiles/rails_7.2.0.beta2_ruby_3.1.4.gemfile

@@ -41,6 +41,7 @@ gem "image_processing", "~> 1.12"
 gem "prefixed_ids"
 gem "mapkick-rb", "~> 0.1.4"
 gem "pluggy", path: "../pluggy"
+gem "hashid-rails", "~> 1.4", ">= 1.4.1"
 gem "money-rails", "~> 1.12"
 gem "avo-money_field"
 gem "avo-record_link_field"

gemfiles/rails_7.2.0.beta2_ruby_3.1.4.gemfile.lock

@@ -257,6 +257,9 @@ GEM
     groupdate (6.4.0)
       activesupport (>= 6.1)
     hashdiff (1.1.0)
+    hashid-rails (1.4.1)
+      activerecord (>= 4.0)
+      hashids (~> 1.0)
     hashids (1.0.6)
     highline (3.1.0)
       reline
@@ -646,6 +649,7 @@ DEPENDENCIES
   fuubar
   gem-release
   groupdate
+  hashid-rails (~> 1.4, >= 1.4.1)
   hightop
   hotwire-livereload (~> 1.3.0)
   htmlbeautifier

gemfiles/rails_7.2.0.beta2_ruby_3.3.0.gemfile

@@ -41,6 +41,7 @@ gem "image_processing", "~> 1.12"
 gem "prefixed_ids"
 gem "mapkick-rb", "~> 0.1.4"
 gem "pluggy", path: "../pluggy"
+gem "hashid-rails", "~> 1.4", ">= 1.4.1"
 gem "money-rails", "~> 1.12"
 gem "avo-money_field"
 gem "avo-record_link_field"