Are forms parsed when called from controller?

[colmexdev]

Hi there!

Silly question: Does Forme serialize the generated form when called from inside route's code (e.g. when used for Sequel::Model attributes' setting)? If so, is there a way to avoid penalty for view serialization?

Thanks in advance!

[jeremyevans]

Are you asking about the forme_set Roda plugin, or something else? Could you provide some example code so I can understand the context?

[colmexdev]

Ok, this works great! Thank you for your suggestion.

OTOH, would you recommend to have 2 methods for the same form, one for HTML parsing on view and one for route code (without HTML attributes sepcified) or it doesn't parse form as HTML on route code?

[jeremyevans]

With the Roda forme_set plugin, the form submission includes signed metadata describing the contents of the form, so you don't need to render the form inside the submission handler.

[colmexdev]

I get it now, One last thing then: Would you recommend to use the session's secret into the Roda's forme_set plugin? Or would it be better for it to be a different one?

[jeremyevans]

You can keep it the same, but security wise it is probably best if it is different. I often use a primary secret, and have the session_secret, forme_set secret, and other secrets be generated from the primary secret using an HMAC.

[colmexdev]

Thank you very much for your advice @jeremyevans ! 😀