Backbone Tutorials: Thomas Davis
Backbone Tutorials: Thomas Davis
Thomas Davis
Backbone Tutorials
Beginner, Intermediate and Advanced
2012 Thomas Davis This version was published on 2012-06-25
This is a Leanpub book, for sale at: http://leanpub.com/backbonetutorials Leanpub helps authors to self-publish in-progress ebooks. We call this idea Lean Publishing. To learn more about Lean Publishing, go to: http://leanpub.com/manifesto To learn more about Leanpub, go to: http://leanpub.com
Contents
Why do you need Backbone.js? So how does Backbone.js help? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Relevant Links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Contributors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . What is a view? The el property . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Loading a template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Listening for events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Tips and Tricks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Relevant Links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Contributors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . What is a model? Setting attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Getting attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Setting model defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Manipulating model attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Fetching, Saving and Destroying . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Tips and Tricks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Contributors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . What is a collection? Building a collection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . What is a router? i i i i ii ii iii iii iv v v vi vi vii vii vii ix ix x xi xi xiii
Dynamic Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii Dynamic Routing Cont. :params and *splats . . . . . . . . . . . . . . . . . . . . . . . . . . xiv Relevant Links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Contributors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv xv
CONTENTS
ii xvi
What is AMD? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi Why Require.js? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvi Getting started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii Example File Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xvii Bootstrapping your application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xviii What does the bootstrap look like? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix How should we lay out external scripts? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A boiler plate module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xx xx
App.js Building our applications main module . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi Modularizing a Backbone View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxii Modularizing a Collection, Model and View . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxiii Conclusion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxiv Relevant Links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxv Contributors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxv Lightweight Infinite Scrolling using Twitter API xxvi
Getting started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxvi The Twitter Collection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxvi Setting up the View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxvii The widget template . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxviii Conclusion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxviii Simple example - Node.js, Restify, MongoDb and Mongoose xxx
Getting started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxx The technologies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxx Node.js . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxx Restify . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxx MongoDb . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxx Mongoose . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxx Building the server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxi Restify configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxi MongoDb/Mongoose configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxi Mongoose Schema . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxi Setting up the routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxii Setting up the client(Backbone.js) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxiii
CONTENTS
iii
Saving a message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxiii Retrieving a list of messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxiv Conclusion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxvi Relevant Links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxvi Cross-domain Backbone.js with sessions using CORS xxxvii
Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxvii Getting started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxviii Checking session state at first load . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxviii An example Session model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxxix Hooking up views to listen to changes in auth . . . . . . . . . . . . . . . . . . . . . . . . . . . xl Building a compatible server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xlii Example node server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xliii Conclusion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xliv Relevant Links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xliv
Relevant Links
Backbone.js official website great hackernews discussion /w post from author
Contributors
FND
What is a view?
Backbone views are used to reflect what your applications data models look like. They are also used to listen to events and react accordingly. This tutorial will not be addressing how to bind models and collections to views but will focus on view functionality and how to use views with a JavaScript templating library, specifically Underscore.jss _.template. We will be using jQuery 1.5 as our DOM manipulator. Its possible to use other libraries such as MooTools or Sizzle, but official Backbone.js documentation endorses jQuery. Backbone.View events may not work with other libraries other than jQuery. For the purposes of this demonstration, we will be implementing a search box. A live example can be found on jsFiddle.
1 2 3 4 5 6 7 8 9 10
SearchView = Backbone.View.extend({ initialize: function(){ alert("Alerts suck."); } }); // The initialize function is always called when instantiating a Backbo\ ne View. // Consider it the constructor of the class. var search_view = new SearchView;
The el property
The el property references the DOM object created in the browser. Every Backbone.js view has an el property, and if it not defined, Backbone.js will construct its own, which is an empty div element. Let us set our views el property to div#search_container, effectively making Backbone.View the owner of the DOM element.
1 2 3 4 5 6 7 8 9 10 11
<div id="search_container"></div> <script type="text/javascript"> SearchView = Backbone.View.extend({ initialize: function(){ alert("Alerts suck."); } }); var search_view = new SearchView({ el: $("#search_container") }); </script>
Note: Keep in mind that this binds the container element. Any events we trigger must be in this element.
http://documentcloud.github.com/underscore/#template http://jquery.com/ http://mootools.net/ http://sizzlejs.com/ http://jsfiddle.net/thomas/C9wew/6
ii
What is a view?
iii
Loading a template
Backbone.js is dependent on Underscore.js, which includes its own micro-templating solution. Refer to Underscore.jss documentation for more information. Let us implement a render() function and call it when the view is initialized. The render() function will load our template into the views el property using jQuery.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
<div id="search_container"></div> <script type="text/javascript"> SearchView = Backbone.View.extend({ initialize: function(){ this.render(); }, render: function(){ // Compile the template using underscore var template = _.template( $("#search_template").html(), {} ); // Load the compiled HTML into the Backbone "el" this.el.html( template ); } }); var search_view = new SearchView({ el: $("#search_container") }); </script> <script type="text/template" id="search_template"> <label>Search</label> <input type="text" id="search_input" /> <input type="button" id="search_button" value="Search" /> </script>
Tip: Place all your templates in a file and serve them from a CDN. This ensures your users will always have your application cached.
What is a view?
iv
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
this.render(); }, render: function(){ var template = _.template( $("#search_template").html(), {} ); this.el.html( template ); }, events: { "click input[type=button]": "doSearch" }, doSearch: function( event ){ // Button clicked, you can access the element that was clicked \ with event.currentTarget alert( "Search for " + $("#search_input").val() ); } }); var search_view = new SearchView({ el: $("#search_container") }); </script> <script type="text/template" id="search_template"> <label>Search</label> <input type="text" id="search_input" /> <input type="button" id="search_button" value="Search" /> </script>
<div id="search_container"></div> <script type="text/javascript"> SearchView = Backbone.View.extend({ initialize: function(){ this.render(); }, render: function(){ //Pass variables in using Underscore.js Template var variables = { search_label: "My Search" }; // Compile the template using underscore var template = _.template( $("#search_template").html(), variab\ les ); // Load the compiled HTML into the Backbone "el" this.el.html( template ); }, events: { "click input[type=button]": "doSearch" },
What is a view?
20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35
doSearch: function( event ){ // Button clicked, you can access the element that was clicked \ with event.currentTarget alert( "Search for " + $("#search_input").val() ); } }); var search_view = new SearchView({ el: $("#search_container") }); </script> <script type="text/template" id="search_template"> <!-- Access template variables with <%= %> --> <label><%= search_label %></label> <input type="text" id="search_input" /> <input type="button" id="search_button" value="Search" /> </script>
Relevant Links
This example implemented with google API This examples exact code on jsfiddle.net Another semi-complete example on jsFiddle
Contributors
Michael Macias Alex Lande
What is a model?
Across the internet the definition of MVC is so diluted that its hard to tell what exactly your model should be doing. The authors of backbone.js have quite a clear definition of what they believe the model represents in backbone.js. Models are the heart of any JavaScript application, containing the interactive data as well as a large part of the logic surrounding it: conversions, validations, computed properties, and access control. So for the purpose of the tutorial lets create a model.
1 2 3 4 5 6 7
Person = Backbone.Model.extend({ initialize: function(){ alert("Welcome to this world"); } }); var person = new Person;
So initialize() is triggered whenever you create a new instance of a model( models, collections and views work the same way ). You dont have to include it in your model declaration but you will find yourself using it more often than not.
Setting attributes
Now we want to pass some parameters when we create an instance of our model.
1 2 3 4 5 6 7 8 9 10 11
Person = Backbone.Model.extend({ initialize: function(){ alert("Welcome to this world"); } }); var person = new Person({ name: "Thomas", age: 67}); delete person; // or we can set afterwards, these operations are equivelent var person = new Person(); person.set({ name: "Thomas", age: 67});
So passing a javascript object to our constructor is the same as calling model.set(). Now that these models have attributes set we need to be able to retrieve them.
http://en.wikipedia.org/wiki/Model%E2%80%93view%E2%80%93controller
vi
What is a model?
vii
Getting attributes
Using the model.get() method we can access model properties at anytime.
1 2 3 4 5 6 7 8 9 10 11 12
Person = Backbone.Model.extend({ initialize: function(){ alert("Welcome to this world"); } }); var person = new Person({ name: "Thomas", age: 67, children: ['Ryan']})\ ; var age = person.get("age"); // 67 var name = person.get("name"); // "Thomas" var children = person.get("children"); // ['Ryan']
Person = Backbone.Model.extend({ defaults: { name: 'Fetus', age: 0, children: [] }, initialize: function(){ alert("Welcome to this world"); } }); var person = new Person({ name: "Thomas", age: 67, children: ['Ryan']})\ ; var age = person.get("age"); // 67 var name = person.get("name"); // "Thomas" var children = person.get("children"); // ['Ryan']
What is a model?
viii
3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20
name: 'Fetus', age: 0, children: [] }, initialize: function(){ alert("Welcome to this world"); }, adopt: function( newChildsName ){ var children_array = this.get("children"); children_array.push( newChildsName ); this.set({ children: children_array }); } }); var person = new Person({ name: "Thomas", age: 67, children: ['Ryan']})\ ; person.adopt('John Resig'); var children = person.get("children"); // ['Ryan', 'John Resig']
So we can implement methods to get/set and perform other calculations using attributes from our model at any time.
Person = Backbone.Model.extend({ defaults: { name: 'Fetus', age: 0, children: [] }, initialize: function(){ alert("Welcome to this world"); this.bind("change:name", function(){ var name = this.get("name"); // 'Stewie Griffin' alert("Changed my name to " + name ); }); }, replaceNameAttr: function( name ){ this.set({ name: name }); } }); var person = new Person({ name: "Thomas", age: 67, children: ['Ryan']})\
What is a model?
ix
20 21 22
So we can bind the a change listener to individual attributes or if we like simply this.bind(change, function(){}); to listen for changes to all attributes of the model.
var person = new Person({ name: "Thomas", age: 67, children: ['Ryan']})\ ; var attributes = person.toJSON(); // { name: "Thomas", age: 67, childre\ n: ['Ryan']} /* This simply returns a copy of the current attributes. */ delete attributes; var attributes = person.attributes; /* The line above gives a direct reference to the attributes and you sh\ ould be careful when playing with it. Best practise would suggest that yo\ u use .set() to edit attributes of a model to take advantage of backbone li\ steners. */
Person = Backbone.Model.extend({ // If you return a string from the validate function, // Backbone will throw an error validate: function( attributes ){ if( attributes.age < 0 && attributes.name != "Dr Manhatten" ){ return "You can't be negative years old"; } }, initialize: function(){ alert("Welcome to this world"); this.bind("error", function(model, error){ // We have received an error, log it, alert it or forget it\ :) alert( error ); }); } });
What is a model?
18 19 20 21 22 23 24 25 26
var person = new Person; person.set({ name: "Mary Poppins", age: -1 }); // Will trigger an alert outputting the error delete person; var person = new Person; person.set({ name: "Dr Manhatten", age: -1 }); // God have mercy on our souls
Contributors
Utkarsh Kukreti
https://github.com/utkarshkukreti
What is a collection?
Backbone collections are simply an ordered set of models. Such that it can be used in situations such as; Model: Student, Collection: ClassStudents Model: Todo Item, Collection: Todo List Model: Animals, Collection: Zoo Typically your collection will only use one type of model but models themselves are not limited to a type of collection; Model: Student, Collection: Gym Class Model: Student, Collection: Art Class Model: Student, Collection: English Class Here is a generic Model/Collection example.
1 2 3 4 5 6 7 8 9
var Song = Backbone.Model.extend({ initialize: function(){ console.log("Music is the answer"); } }); var Album = Backbone.Collection.extend({ model: Song });
Building a collection
Now we are going to populate a creation with some useful data.
1 2 3 4 5 6 7 8 9 10 11
var Song = Backbone.Model.extend({ defaults: { name: "Not specified", artist: "Not specified" }, initialize: function(){ console.log("Music is the answer"); } }); var Album = Backbone.Collection.extend({
http://backbonetutorials.com/what-is-a-model
xi
What is a collection?
xii
12 13 14 15 16 17 18 19 20 21
model: Song }); var song1 = new Song({ name: "How Bizarre", artist: "OMC" }); var song2 = new Song({ name: "Sexual Healing", artist: "Marvin Gaye" })\ ; var song3 = new Song({ name: "Talk It Over In Bed", artist: "OMC" }); var myAlbum = new Album([ song1, song2, song3]); console.log( myAlbum.models ); // [song1, song2, song3]
What is a router?
Backbone routers are used for routing your applications URLs when using hash tags(#). In the traditional MVC sense they dont neccesarily fit the semantics and if you have read What is a view? it will elaborate on this point. Though a Backbone router is still very useful for any application/feature that needs URL routing/history capabilities. Defined routers should always contain at least one route and a function to map the particular route to. In the example below we are going to define a route that is always called. Also note that routes intepret anything after # tag in the url. All links in your application should target #/action or #action. (Appending a forward slash after the hashtag looks a bit nicer e.g. http://example.com/#/user/help)
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
<script> var AppRouter = Backbone.Router.extend({ routes: { "*actions": "defaultRoute" // matches http://example.com/#anyth\ ing-here }, defaultRoute: function( actions ){ // The variable passed in matches the variable in the route def\ inition "actions" alert( actions ); } }); // Initiate the router var app_router = new AppRouter; // Start Backbone history a neccesary step for bookmarkable URL's Backbone.history.start(); </script> [Activate route](#action) [Activate another route](#/route/action) _Notice the change in the url_
Please note: Prior to Backbone 0.5 (released 1. July 2011) a Router was called a Controller. To avoid confusion, the Backbone developers changed the name to Router. Hence, if you find yourself using an older version of Backbone you should write Backbone.Controller.extend({ ** });
Dynamic Routing
Most conventional frameworks allow you to define routes that contain a mix of static and dynamic route parameters. For example you might want to retrieve a post with a variable id with a friendly URL string.
http://backbonetutorials.com/what-is-a-view
xiii
What is a router?
xiv
Such that your URL would look like http://example.com/#/posts/12. Once this route was activated you would want to access the id given in the URL string. This example is implemented below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28
<script> var AppRouter = Backbone.Router.extend({ routes: { "/posts/:id": "getPost", "*actions": "defaultRoute" // Backbone will try match the route\ above first }, getPost: function( id ) { // Note the variable in the route definition being passed in he\ re alert( "Get post number " + id ); }, defaultRoute: function( actions ){ alert( actions ); } }); // Instantiate the router var app_router = new AppRouter; // Start Backbone history a neccesary step for bookmarkable URL's Backbone.history.start(); </script> [Post 120](#/posts/120) [Post 130](#/posts/130) _Notice the change in the url_
What is a router?
xv
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
"/download/*path": "downloadFile", // <a href="http://example.com/#/download/user/images/hey.gif">\ Download</a> "/:route/:action": "loadView", // <a href="http://example.com/#/dashboard/graph">Load Route/Ac\ tion View</a> }, getPost: function( id ){ alert(id); // 121 }, downloadFile: function( path ){ alert(path); // user/images/hey.gif }, loadView: function( route, action ){ alert(route + "_" + action); // dashboard_graph }
Routes are quite powerful and in an ideal world your application should never contain too many. If you need to implement hash tags with SEO in mind, do a google search for google seo hashbangs. Remember to do a pull request for any errors you come across.
Relevant Links
Backbone.js official router documentation Using routes and understanding the hash tag
Contributors
Herman Schistad - (Backbone 0.5 rename from Controller to Router) Paul Irish
What is AMD?
Asynchronous Module Definitions designed to load modular code asynchronously in the browser and server. It is actually a fork of the Common.js specification. Many script loaders have built their implementations around AMD, seeing it as the future of modular Javascript development. This tutorial will use Require.js to implement a modular and organized Backbone.js. I highly recommend using AMD for application development Quick Overview Modular Scalable Compiles well(see r.js ) Market Adoption( Dojo 1.6 converted fully to AMD )
Why Require.js?
a. Require.js has a great community and it is growing rapidly. James Burke the author is married to Require.js and responds to user feedback always. A leading expert in script loading, he is also a contributer to the AMD specification. Follow @jrburke
https://github.com/amdjs/amdjs-api/wiki/AMD https://github.com/amdjs/amdjs-api/wiki/AMD http://requirejs.org http://requirejs.org/docs/optimization.html http://dojotoolkit.org/reference-guide/releasenotes/1.6.html http://tagneto.blogspot.com/ https://twitter.com/jrburke
xvi
xvii
Getting started
To easily understand this tutorial you should jump straight into the example code base. Example Codebase Example Demo The tutorial is only loosely coupled with the example and you will find the example to be more comprehensive. If you would like to see how a particuliar use case would be implemented please visit the Github page and create an issue.(Example Request: How to do nested views). The example isnt super fleshed out but should give you a vague idea.
/* File Structure imgs css style.css templates projects list.html edit.html users list.html edit.html js libs jquery jquery.min.js jquery.js // jQuery Library Wrapper backbone backbone.min.js backbone.js // Backbone Library Wrapper underscore underscore.min.js underscore.js // Underscore Library Wrapper models users.js projects.js collections
https://github.com/thomasdavis/backbonetutorials/tree/gh-pages/examples/modular-backbone http://backbonetutorials.com/examples/modular-backbone
xviii
27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43
*/
users.js projects.js views projects list.js edit.js users list.js edit.js router.js app.js main.js // Bootstrap order.js //Require.js plugin text.js //Require.js plugin index.html
To continue you must really understand what we are aiming towards as described in the introduction.
<!doctype html> <html lang="en"> <head> <title>Jackie Chan</title> <!-- Load the script "js/main.js" as our entry point --> <script data-main="js/main" src="js/libs/require/require.js"></script> </head> <body> <div id="container"> <div id="menu"></div> <div id="content"></div> </div> </body> </html>
You should most always end up with quite a light weight index file. You can serve this off your server and then the rest of your site off a CDN ensuring that everything that can be cached, will be.
xix
// Filename: main.js // Require.js allows us to configure shortcut alias // There usage will become more apparent futher along in the tutorial. require.config({ paths: { jQuery: 'libs/jquery/jquery', Underscore: 'libs/underscore/underscore', Backbone: 'libs/backbone/backbone' } }); require([ // Load our app module and pass it to our definition function 'app', // Some plugins have to be loaded in order due to there non AMD complianc\ e // Because these scripts are not "modules" they do not pass any values to\ the definition function below 'order!libs/jquery/jquery-min', 'order!libs/underscore/underscore-min', 'order!libs/backbone/backbone-min' ], function(App){ // The "app" dependency is passed in as "App" // Again, the other dependencies passed in are not "AMD" therefore don't \ pass a parameter to this function App.initialize(); });
xx
// Filename: libs/jquery/jquery.js define([ // Load the original jQuery source file 'order!libs/jquery/jquery-min' ], function(){ // Tell Require.js that this module returns a reference to jQuery return $; });
// Filename: libs/underscore/underscore // As above lets load the original underscore source code define(['order!libs/underscore/underscore-min'], function(){ // Tell Require.js that this module returns a reference to Underscore return _; });
// Filename: libs/backbone/backbone // Finally lets load the original backbone source code define(['order!libs/backbone/backbone-min'], function(){ // Now that all the orignal source codes have ran and accessed each other // We can call noConflict() to remove them from the global name space // Require.js will keep a reference to them so we can use them in our mod\ ules _.noConflict(); $.noConflict(); return Backbone.noConflict(); });
xxi
1 2 3 4 5 6 7 8 9 10 11 12 13
//Filename: boilerplate.js define([ // These are path alias that we configured in our bootstrap 'jQuery', // lib/jquery/jquery 'Underscore', // lib/underscore/underscore 'Backbone' // lib/backbone/backbone ], function($, _, Backbone){ // Above we have passed in jQuery, Underscore and Backbone // They will not be accesible in the global scope return {}; // What we return here will be used by other modules });
The first argument of the define function is our dependency array, we can pass in any modules we like in the future.
// Filename: app.js define([ 'jQuery', 'Underscore', 'Backbone', 'router', // Request router.js ], function($, _, Backbone, Router){ var initialize = function(){ // Pass in our Router module and call it's initialize function Router.initialize(); } return { initialize: initialize }; });
xxii
25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59
'views/users/list' ], function($, _, Backbone, Session, projectListView, userListView){ var AppRouter = Backbone.Router.extend({ routes: { // Define some URL routes '/projects': 'showProjects', '/users': 'showUsers', // Default '*actions": "defaultAction' }, showProjects: function(){ // Call render on the module we loaded in via the dependency array // 'views/projects/list' projectListView.render(); }, // As above, call render on our loaded module // 'views/users/list' showUsers: function(){ userListView.render(); }, defaultAction: function(actions){ // We have no matching route, lets just log what the URL was console.log('No route:', actions); } }); var initialize = function(){ var app_router = new AppRouter; Backbone.history.start(); }; return { initialize: initialize }; });
// Filename: views/project/list define([ 'jQuery', 'Underscore', 'Backbone', // Using the Require.js text! plugin, we are loaded raw text // which will be used as our views primary template
xxiii
8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
'text!templates/project/list.html' ], function($, _, Backbone, projectListTemplate){ var projectListView = Backbone.View.extend({ el: $('#container'), render: function(){ // Using Underscore we can compile our template with data var data = {}; var compiledTemplate = _.template( projectListTemplate, data ); // Append our compiled template to this Views "el" this.el.append( compiledTemplate ); } }); // Our module now returns an instantiated view // Sometimes you might return an un-instantiated view e.g. return project\ ListView return new projectListView; });
Javascript templating allows us to seperate the design from the application logic placing all our html in the templates folder.
// Filename: models/project define([ 'Underscore', 'Backbone' ], function(_, Backbone){ var projectModel = Backbone.Model.extend({ defaults: { name: "Harry Potter" } }); // You usually don't return a model instantiated return projectModel; });
Now we have a model, our collection module can depend on it. We will set the model attribute of our collection to the loaded module. Backbone.js offers great benefits when doing this. Collection.model: Override this property to specify the model class that the collection contains. If defined, you can pass raw attributes objects (and arrays) to add, create, and reset, and the attributes will be converted into a model of the proper type.
xxiv
1 2 3 4 5 6 7 8 9 10 11 12 13
// Filename: collections/projects define([ 'Underscore', 'Backbone', // Pull in the Model module from above 'models/project' ], function(_, Backbone, projectModel){ var projectCollection = Backbone.Collection.extend({ model: projectModel }); // You don't usually return a collection instantiated return new projectCollection; });
Now we can simply depend on our collection in our view and pass it to our Javascript template.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
// Filename: views/projects/list define([ 'jQuery', 'Underscore', 'Backbone', // Pull in the Collection module from above 'collections/projects', 'text!templates/projects/list ], function(_, Backbone, projectsCollection, projectsListTemplate){ var projectListView = Backbone.View.extend({ el: $("#container"), initialize: function(){ this.collection = new projectsCollection; this.collection.add({ name: "Ginger Kid"}); // Compile the template using Underscores micro-templating var compiledTemplate = _.template( projectsListTemplate, { projects: \ this.collection.models } ); this.el.html(compiledTemplate); } }); // Returning instantiated views can be quite useful for having "state" return new projectListView; });
Conclusion
Looking forward to feedback so I can turn this post and example into quality references on building modular Javascript applications. Get in touch with me on twitter, comments or github!
xxv
Relevant Links
Organizing Your Backbone.js Application With Modules
Contributors
Jakub Kozisek (created modular-backbone-updated containing updated libs with AMD support)
http://weblog.bocoup.com/organizing-your-backbone-js-application-with-modules https://github.com/dzejkej
// collections/twitter.js define([ 'jquery', 'underscore', 'backbone' ], function($, _, Backbone){ var Tweets = Backbone.Collection.extend({ url: function () { return 'http://search.twitter.com/search.json?q=' + this.query + '&pa\ ge=' + this.page + '&callback=?' }, // Because twitter doesn't return an array of models by default we need // to point Backbone.js at the correct property parse: function(resp, xhr) { return resp.results; }, page: 1, query: 'backbone.js tutorials'
http://backbonetutorials.com/examples/infinite-scroll/ https://github.com/thomasdavis/backbonetutorials/tree/gh-pages/examples/infinite-scroll http://backbonetutorials.com/organizing-backbone-using-modules http://en.wikipedia.org/wiki/JSONP
xxvi
xxvii
19 20 21 22
Note: Feel free to attach the meta information returned by Twitter to the collection itself e.g.
1 2 3 4
// views/twitter/widget.js define([ 'jquery', 'underscore', 'backbone', 'vm', 'collections/twitter', 'text!templates/twitter/list.html' ], function($, _, Backbone, Vm, TwitterCollection, TwitterListTemplate){ var TwitterWidget = Backbone.View.extend({ el: '.twitter-widget', initialize: function () { // isLoading is a useful flag to make sure we don't send off more tha\ n // one request at a time this.isLoading = false; this.twitterCollection = new TwitterCollection(); }, render: function () { this.loadResults(); }, loadResults: function () { var that = this; // we are starting a new load of results so set isLoading to true this.isLoading = true; // fetch is Backbone.js native function for calling and parsing the c\ ollection url
xxviii
28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52
this.twitterCollection.fetch({ success: function (tweets) { // Once the results are returned lets populate our template $(that.el).append(_.template(TwitterListTemplate, {tweets: tweets\ .models, _:_})); // Now we have finished loading set isLoading back to false that.isLoading = false; } }); }, // This will simply listen for scroll events on the current el events: { 'scroll': 'checkScroll' }, checkScroll: function () { var triggerPoint = 100; // 100px from the bottom if( !this.isLoading && this.el.scrollTop + this.el.clientHeight + t\ riggerPoint > this.el.scrollHeight ) { this.twitterCollection.page += 1; // Load next page this.loadResults(); } } }); return TwitterWidget; });
Note: triggerPoint will allow you to set an offset where the user has to scroll to before loading the next page
<!-- templates/twitter/list.html --> <ul class="tweets"> <% _.each(tweets, function (tweet) { %> <li><%= tweet.get('text') %></li> <% }); %> </ul>
Conclusion
This is a very light weight but robust infinite scroll example. There are caveats to using infinite scroll in UI/UX so make sure to use it only when applicable.
xxix
http://backbonetutorials.com/examples/infinite-scroll/ https://github.com/thomasdavis/backbonetutorials/tree/gh-pages/examples/infinite-scroll
Getting started
To easily understand this tutorial you should jump straight into the example code base. Example Codebase Example Demo This tutorial will assist you in saving data(Backbone.js Models) to MongoDb and retrieving a list(Backbone.js Collections) of them back.
The technologies
This stack is great for rapid prototyping and highly intuitive. Personal note: I love using Javascript as my only language for the entire application(FrontEnd/BackEnd/API/Database). Restify is still in early development but is essentially just an extension of Express. So for anyone needing more stability you can easily just substitute Express in.
Node.js
Node.js is a platform built on Chromes JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices.
Restify
Restify is a node.js module built specifically to enable you to build correct REST web services. It borrows heavily from express (intentionally) as that is more or less the de facto API for writing web applications on top of node.js.
MongoDb
MongoDB (from humongous) is a scalable, high-performance, open source NoSQL database.
Mongoose
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment.
http://backbonetutorials.com/organizing-backbone-using-modules/ https://github.com/thomasdavis/backbonetutorials/tree/gh-pages/examples/nodejs-mongodb-mongoose-restify http://backbonetutorials.com/examples/nodejs-mongodb-mongoose-restify/
xxx
xxxi
Restify configuration
The first thing to do is require the Restify module. Restify will be in control of handling our restFul end points and returning the appropriate JSON.
1 2 3
Note: bodyParser() takes care of turning your request data into a Javascript object on the server automatically.
MongoDb/Mongoose configuration
We simply want to require the MongoDb module and pass it a MongoDb authentication URI e.g. mongodb://username:server@mongoserver:10059/somecollection The code below presupposes you have another file in the same directory called config.js. Your config should never be public as it contains your credentials. So for this repository I have added config.js to my .gitignore but added in a sample config.
1 2 3 4
Mongoose Schema
Mongoose introduces a concept of model/schema enforcing types which allow for easier input validation etc
1 2 3 4
// Create a schema for our data var MessageSchema = new Schema({ message: String, date: Date
https://github.com/thomasdavis/backbonetutorials/blob/gh-pages/examples/nodejs-mongodb-mongoose-restify/js/models/message.js https://github.com/thomasdavis/backbonetutorials/blob/gh-pages/examples/nodejs-mongodb-mongoose-restify/js/collections/messages.
js
https://github.com/thomasdavis/backbonetutorials/blob/gh-pages/examples/nodejs-mongodb-mongoose-restify/config-sample.js http://mongoosejs.com/docs/model-definition.html
xxxii
5 6 7 8
}); // Use the schema to register a model with MongoDb mongoose.model('Message', MessageSchema); var Message = mongoose.model('Message');
Note: Message can now be used for all things CRUD related.
// This function is responsible for returning all entries for the Message m\ odel function getMessages(req, res, next) { // Resitify currently has a bug which doesn't allow you to set default he\ aders // This headers comply with CORS and allow us to server our response to a\ ny origin res.header("Access-Control-Allow-Origin", "*"); res.header("Access-Control-Allow-Headers", "X-Requested-With"); // .find() without any arguments, will return all results // the `-1` in .sort() means descending order Message.find().sort('date', -1).execFind(function (arr,data) { res.send(data); }); }
function postMessage(req, res, next) { res.header("Access-Control-Allow-Origin", "*"); res.header("Access-Control-Allow-Headers", "X-Requested-With"); // Create a new message model, fill it up and save it to Mongodb var message = new Message(); message.message = req.params.message; message.date = new Date() message.save(function () { res.send(req.body); }); } // Set up our routes and start the server server.get('/messages', getMessages); server.post('/messages', postMessage);
xxxiii
This wraps up the server side of things, if you follow the example then you should see something like http://backbonetutorials.nodejitsu.com/messages Note: Again you must remember to change the Model and Collection definitions to match your server address.
Saving a message
First of all we want to setup a template for showing our form that creates new messages.
1 2
This template gets inserted into the DOM by views/guestbook/form.js, this Backbone view also handles the interaction of the form and the posting of the new data. Let us create a Backbone Model that has the correct url for our restFul interface.
1 2 3 4 5 6 7 8 9
define([ 'underscore', 'backbone' ], function(_, Backbone) { var Message = Backbone.Model.extend({ url: 'http://localhost:8080/messages' }); return Message; });
https://github.com/thomasdavis/backbonetutorials/blob/gh-pages/examples/nodejs-mongodb-mongoose-restify/server.js http://backbonetutorials.nodejitsu.com/messages https://github.com/thomasdavis/backbonetutorials/blob/gh-pages/examples/nodejs-mongodb-mongoose-restify/js/models/message.js https://github.com/thomasdavis/backbonetutorials/blob/gh-pages/examples/nodejs-mongodb-mongoose-restify/js/collections/messages.
js
http://backboneboilerplate.com https://github.com/thomasdavis/backbonetutorials/blob/gh-pages/examples/nodejs-mongodb-mongoose-restify/templates/guestbook/
form.html
xxxiv
We can see how we require our pre-defined model for messages and also our form template.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
define([ 'jquery', 'underscore', 'backbone', 'models/message', 'text!templates/guestbook/form.html' ], function($, _, Backbone, MessageModel, guestbookFormTemplate){ var GuestbookForm = Backbone.View.extend({ el: '.guestbook-form-container', render: function () { $(this.el).html(guestbookFormTemplate); }, events: { 'click .post-message': 'postMessage' }, postMessage: function() { var that = this; var message = new MessageModel(); message.save({ message: $('.message').val()}, { success: function () { that.trigger('postMessage'); } }); } }); return GuestbookForm; });
Note: trigger is from Backbone Events, I binded a listener to this view in views/dashboard/page.js so that when a new message is submitted, the list is re-rendered. We are setting the date of post on the server so there is no need to pass it up now.
define([ 'jquery', 'underscore', 'backbone', 'models/message' ], function($, _, Backbone, MessageModel){ var Messages = Backbone.Collection.extend({
xxxv
8 9 10 11 12 13 14
model: MessageModel, // Generally best practise to bring down a Model/S\ chema for your collection url: 'http://localhost:8080/messages' }); return Messages; });
Now that we have a collection to use we can setup our views/list.js to require the collection and trigger a fetch. Once the fetch is complete we want to render our returned data to a template and insert it into the DOM.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
define([ 'jquery', 'underscore', 'backbone', 'collections/messages', 'text!templates/guestbook/list.html' ], function($, _, Backbone, MessagesCollection, guestbookListTemplate){ var GuestbookList = Backbone.View.extend({ el: '.guestbook-list-container', render: function () { var that = this; var messages = new MessagesCollection(); messages.fetch({ success: function(messages) { $(that.el).html(_.template(guestbookListTemplate, {messages: mess\ ages.models, _:_})); } }); } }); return GuestbookList; });
The template file should iterate over messages.models which is an array and print out a HTML fragment for each model.
1 2 3 4 5 6
<% _.each(messages, function(message) { %> <p><%= message.get('message') %></p> <em><%= message.get('date') %></em> <% }); %>
This actually sums up everything you need to know to implement this simple example.
xxxvi
Conclusion
Example Codebase Example Demo In this example you should really be using relative urls in your collections/models and instead setting a baseUrl in a config file or by placing your index.html file on the restful server. This example is hosted on github therefore we had to include the absolute url to the server which is hosted on nodejitsu.com On a personal note, I have of recent used the Joyent, Nodejitsu, MongoDbHq stack after they have now partnered up and I have nothing but good things to say. Highly recommend you check it out! As always I hope I made this tutorial easy to follow! Get in touch with me on twitter, comments or github!
Relevant Links
Organizing Your Backbone.js Application With Modules
Security
Dont allow GET request to change data, only retrieve Whitelist your allowed domains (see server.js Protect again JSON padding
http://enable-cors.org/ http://easyxdm.net/wp/ https://github.com/thomasdavis/backbonetutorials/blob/gh-pages/examples/cross-domain/server.js http://blog.opensecurityresearch.com/2012/02/json-csrf-with-parameter-padding.html
xxxvii
xxxviii
Getting started
To easily understand this tutorial you should jump straight into the example code base. Host the codebase on a simple http server such that the domain is localhost with port 80 hidden. Example Codebase Example Demo This tutorial focuses on building a flexible Session model to control session state in your application.
define([ 'jquery', 'underscore', 'backbone', 'vm', 'events', 'models/session', 'text!templates/layout.html' ], function($, _, Backbone, Vm, Events, Session, layoutTemplate){ var AppView = Backbone.View.extend({ el: '.container', initialize: function () { $.ajaxPrefilter( function( options, originalOptions, jqXHR ) { // Your server goes below //options.url = 'http://localhost:8000' + options.url; options.url = 'http://cross-domain.nodejitsu.com' + options.url; }); }, render: function () { var that = this; $(this.el).html(layoutTemplate); // This is the entry point to your app, therefore // when the user refreshes the page we should // really know if they're authed. We will give it // A call back when we know what the auth status is Session.getAuth(function () { Backbone.history.start(); }) }
https://github.com/thomasdavis/backbonetutorials/tree/gh-pages/examples/cross-domain http://backbonetutorials.com/examples/cross-domain/
xxxix
31 32 33
Note: We have used jQuery ajaxPrefilter to hook into all AJAX requests before they are executed. This is where we specify what server we want the application to hit.
// views/app.js define([ 'underscore', 'backbone' ], function(_, Backbone) { var SessionModel = Backbone.Model.extend({ urlRoot: '/session', initialize: function () { var that = this; // Hook into jquery // Use withCredentials to send the server cookies // The server must allow this through response headers $.ajaxPrefilter( function( options, originalOptions, jqXHR ) { options.xhrFields = { withCredentials: true }; // If we have a csrf token send it through with the next request if(typeof that.get('_csrf') !== 'undefined') { jqXHR.setRequestHeader('X-CSRF-Token', that.get('_csrf')); } }); }, login: function(creds) { // Do a POST to /session and send the serialized form creds this.save(creds, { success: function () {} }); }, logout: function() { // Do a DELETE to /session and clear the clientside data
xl
32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55
var that = this; this.destroy({ success: function (model, resp) { model.clear() model.id = null; // Set auth to false to trigger a change:auth event // The server also returns a new csrf token so that // the user can relogin without refreshing the page that.set({auth: false, _csrf: resp._csrf}); } }); }, getAuth: function(callback) { // getAuth is wrapped around our router // before we start any routers let us see if the user is valid this.fetch({ success: callback }); } }); return new SessionModel(); });
Note: This session model is missing one useful feature. If a user looses auth when navigating your application then the application should set {auth: false} on this model. To do this, in the ajaxPrefilter edit outgoing success functions to check if the server response was {auth: false} and then call the original success() function.
// models/session.js define([ 'jquery', 'underscore', 'backbone', 'models/session', 'text!templates/example/login.html', 'text!templates/example/logout.html' ], function($, _, Backbone, Session, exampleLoginTemplate, exampleLogoutTem\ plate){ var ExamplePage = Backbone.View.extend({
xli
12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51
el: '.page', initialize: function () { var that = this; // Bind to the Session auth attribute so we // make our view act recordingly when auth changes Session.on('change:auth', function (session) { that.render(); }); }, render: function () { // Simply choose which template to choose depending on // our Session models auth attribute if(Session.get('auth')){ this.$el.html(_.template(exampleLogoutTemplate, {username: Session.\ get('username')})); } else { this.$el.html(exampleLoginTemplate); } }, events: { 'submit form.login': 'login', // On form submission 'click .logout': 'logout' }, login: function (ev) { // Disable the button $('[type=submit]', ev.currentTarget).val('Logging in').attr('disabled\ ', 'disabled'); // Serialize the form into an object using a jQuery plgin var creds = $(ev.currentTarget).serializeObject(); Session.login(creds); return false; }, logout: function (ev) { // Disable the button $(ev.currentTarget).text('Logging out').attr('disabled', 'disabled'); Session.logout(); } }); return ExamplePage; });
Note: .serializeObject is not a native jQuery function and I have included it in [app.js](https://github.com/thomasdav pages/examples/cross-domain/js/views/app.js) in the demo folder. creds can be an object of any variation of inputs, regardless it will be converted to JSON and posted to the server like any normal Backbone model. Here are the templates we are using for our login view
1 2
xlii
3 4 5 6 7 8 9 10
<label for="">Username</label> <input name="username" type="text" required autofocus> <input type="submit" id="submit" value="Login"> </form> <!-- templates/example/logout.html --> <p>Hello, <%= username %>. Time to logout?</p> <button class="logout">Logout</button>
This wraps up setting up the client, there are some notable points to make sure this technique works. You must use withCredentials supplied by jQuery - session.js You must send your request with csrf tokens for security - session.js You should wrap your applications entry pointer (router in this example) in a check auth function - app.js You must point your application at the right server - app.js
xliii
if(allowedHost.indexOf(req.headers.origin) !== -1) { res.header('Access-Control-Allow-Credentials', true); res.header('Access-Control-Allow-Origin', req.headers.origin) res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS')\ ; res.header('Access-Control-Allow-Headers', 'X-CSRF-Token, X-Requested-Wit\ h, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date,\ X-Api-Version'); next(); } else { res.send({auth: false}); }
} app.configure(function() { app.use(express.cookieParser()); app.use(express.session({ secret: thomasdavislovessalmon })); app.use(express.bodyParser()); app.use(allowCrossDomain); app.use(csrf.check); }); app.get(/session, function(req, res){ // This checks the current users auth // It runs before Backbones router is started // we should return a csrf token for Backbone to use if(typeof req.session.username !== undefined){ res.send({auth: true, id: req.session.id, username: req.session.username, _csrf: req.session._csrf}); } else { res.send({auth: false, _csrf: req.session._csrf}); } }); app.post(/session, function(req, res){ // Login // Here you would pull down your user credentials and match them up // to the request req.session.username = req.body.username; res.send({auth: true, id: req.session.id, username: req.session.username}); });
xliv
app.del(/session/:id, function(req, res, next){ // Logout by clearing the session req.session.regenerate(function(err){ // Generate a new csrf token so the user can login again // This is pretty hacky, connect.csrf isnt built for rest // I will probably release a restful csrf module csrf.generate(req, res, function () { res.send({auth: false, _csrf: req.session._csrf}); }); }); }); app.listen(8000); Note: I wrote a custom csrf module for this which can be found in the example directory. Its based of connects and uses the crypto library. I didnt spend much time on it but other traditional csrf modules wont work because they arent exactly built for this implentation technique.
Conclusion
This approach really hammers in the need for a well documented and designed API. A powerful API will let you do application iterations with ease. Again, it would be great for some more analysis of the security model. Enjoy using Backbone.js cross domain! I cannot get passed the spam filter on HackerNews so feel free to submit this tutorial Example Codebase Example Demo
Relevant Links
cross-site xmlhttprequest with CORS Cross-Origin Resource Sharing Using CORS with All (Modern) Browsers