RubyGems - KnockRails3 - Versions diffs - 2.1.1 - Mend

KnockRails3 2.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (98) hide show

checksums.yaml +7 -0
data/MIT-LICENSE +20 -0
data/Rakefile +39 -0
data/app/controllers/knock_rails3/application_controller.rb +11 -0
data/app/controllers/knock_rails3/auth_token_controller.rb +47 -0
data/app/model/knock_rails3/auth_token.rb +78 -0
data/config/routes.rb +3 -0
data/lib/KnockRails3.rb +31 -0
data/lib/generators/knock_rails3/install_generator.rb +13 -0
data/lib/generators/knock_rails3/token_controller_generator.rb +27 -0
data/lib/generators/templates/entity_token_controller.rb.erb +2 -0
data/lib/generators/templates/knock_rails3.rb +59 -0
data/lib/knock_rails3/authenticable.rb +60 -0
data/lib/knock_rails3/engine.rb +6 -0
data/lib/knock_rails3/version.rb +3 -0
data/lib/tasks/KnockRails3_tasks.rake +4 -0
data/test/dummy/README.rdoc +28 -0
data/test/dummy/Rakefile +6 -0
data/test/dummy/app/assets/javascripts/application.js +13 -0
data/test/dummy/app/assets/stylesheets/application.css +15 -0
data/test/dummy/app/controllers/admin_protected_controller.rb +7 -0
data/test/dummy/app/controllers/admin_token_controller.rb +2 -0
data/test/dummy/app/controllers/application_controller.rb +7 -0
data/test/dummy/app/controllers/composite_name_entity_protected_controller.rb +7 -0
data/test/dummy/app/controllers/current_users_controller.rb +9 -0
data/test/dummy/app/controllers/custom_unauthorized_entity_controller.rb +13 -0
data/test/dummy/app/controllers/guest_protected_controller.rb +7 -0
data/test/dummy/app/controllers/protected_resources_controller.rb +7 -0
data/test/dummy/app/controllers/v1/test_namespaced_controller.rb +17 -0
data/test/dummy/app/controllers/vendor_protected_controller.rb +11 -0
data/test/dummy/app/controllers/vendor_token_controller.rb +2 -0
data/test/dummy/app/helpers/application_helper.rb +2 -0
data/test/dummy/app/models/admin.rb +16 -0
data/test/dummy/app/models/composite_name_entity.rb +3 -0
data/test/dummy/app/models/guest.rb +7 -0
data/test/dummy/app/models/user.rb +3 -0
data/test/dummy/app/models/v1/user.rb +5 -0
data/test/dummy/app/models/vendor.rb +3 -0
data/test/dummy/app/views/layouts/application.html.erb +14 -0
data/test/dummy/bin/bundle +3 -0
data/test/dummy/bin/rails +4 -0
data/test/dummy/bin/rake +4 -0
data/test/dummy/bin/setup +29 -0
data/test/dummy/config.ru +4 -0
data/test/dummy/config/application.rb +28 -0
data/test/dummy/config/boot.rb +5 -0
data/test/dummy/config/database.yml +25 -0
data/test/dummy/config/environment.rb +5 -0
data/test/dummy/config/environments/development.rb +41 -0
data/test/dummy/config/environments/production.rb +79 -0
data/test/dummy/config/environments/test.rb +47 -0
data/test/dummy/config/initializers/assets.rb +11 -0
data/test/dummy/config/initializers/backtrace_silencers.rb +7 -0
data/test/dummy/config/initializers/cookies_serializer.rb +3 -0
data/test/dummy/config/initializers/filter_parameter_logging.rb +4 -0
data/test/dummy/config/initializers/inflections.rb +16 -0
data/test/dummy/config/initializers/knock.rb +8 -0
data/test/dummy/config/initializers/mime_types.rb +4 -0
data/test/dummy/config/initializers/session_store.rb +3 -0
data/test/dummy/config/initializers/wrap_parameters.rb +14 -0
data/test/dummy/config/locales/en.yml +23 -0
data/test/dummy/config/routes.rb +17 -0
data/test/dummy/config/secrets.yml +22 -0
data/test/dummy/db/migrate/20150713101607_create_users.rb +10 -0
data/test/dummy/db/migrate/20160519075733_create_admins.rb +10 -0
data/test/dummy/db/migrate/20160522051816_create_vendors.rb +10 -0
data/test/dummy/db/migrate/20160522181712_create_composite_name_entities.rb +10 -0
data/test/dummy/db/migrate/20161127203222_create_v1_users.rb +12 -0
data/test/dummy/db/schema.rb +50 -0
data/test/dummy/public/404.html +67 -0
data/test/dummy/public/422.html +67 -0
data/test/dummy/public/500.html +66 -0
data/test/dummy/public/favicon.ico +0 -0
data/test/dummy/test/controllers/admin_protected_controller_test.rb +49 -0
data/test/dummy/test/controllers/admin_token_controller_test.rb +22 -0
data/test/dummy/test/controllers/composite_name_entity_protected_controller_test.rb +49 -0
data/test/dummy/test/controllers/current_users_controller_test.rb +31 -0
data/test/dummy/test/controllers/custom_unauthorized_entity_controller_test.rb +42 -0
data/test/dummy/test/controllers/guest_protected_controller_test.rb +22 -0
data/test/dummy/test/controllers/protected_resources_controller_test.rb +62 -0
data/test/dummy/test/controllers/v1/test_namespaced_controller_test.rb +19 -0
data/test/dummy/test/controllers/vendor_protected_controller_test.rb +55 -0
data/test/dummy/test/controllers/vendor_token_controller_test.rb +22 -0
data/test/dummy/test/models/admin_test.rb +7 -0
data/test/dummy/test/models/user_test.rb +4 -0
data/test/dummy/test/models/vendor_test.rb +7 -0
data/test/fixtures/admins.yml +5 -0
data/test/fixtures/composite_name_entities.yml +5 -0
data/test/fixtures/users.yml +9 -0
data/test/fixtures/v1_users.yml +6 -0
data/test/fixtures/vendors.yml +5 -0
data/test/generators/install_generator_test.rb +12 -0
data/test/generators/token_controller_generator_test.rb +31 -0
data/test/knock_test.rb +9 -0
data/test/model/knock/auth_token_test.rb +123 -0
data/test/support/generators_test_helper.rb +9 -0
data/test/test_helper.rb +45 -0
metadata +292 -0

data/test/dummy/public/500.html ADDED

@@ -0,0 +1,66 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>We're sorry, but something went wrong (500)</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <style>
+  body {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+    margin: 0;
+  }
+  div.dialog {
+    width: 95%;
+    max-width: 33em;
+    margin: 4em auto 0;
+  }
+  div.dialog > div {
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 12% 0;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+  div.dialog > p {
+    margin: 0 0 1em;
+    padding: 1em;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+<body>
+  <!-- This file lives in public/500.html -->
+  <div class="dialog">
+    <div>
+      <h1>We're sorry, but something went wrong.</h1>
+    </div>
+    <p>If you are the application owner check the logs for more information.</p>
+  </div>
+</body>
+</html>

data/test/dummy/public/favicon.ico ADDED

File without changes

data/test/dummy/test/controllers/admin_protected_controller_test.rb ADDED

@@ -0,0 +1,49 @@
+require 'test_helper'
+class AdminProtectedControllerTest < ActionController::TestCase
+  def valid_auth
+    @admin = admins(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @admin.id }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_token_auth
+    @token = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9'
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_entity_auth
+    @token = KnockRails3::AuthToken.new(payload: { sub: 0 }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  test "responds with unauthorized" do
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid token" do
+    invalid_token_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid entity" do
+    invalid_entity_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success if authenticated" do
+    valid_auth
+    get :index
+    assert_response :success
+  end
+  test "has a current_admin after authentication" do
+    valid_auth
+    get :index
+    assert_response :success
+    assert @controller.current_admin.id == @admin.id
+  end
+end

data/test/dummy/test/controllers/admin_token_controller_test.rb ADDED

@@ -0,0 +1,22 @@
+require 'test_helper'
+class AdminTokenControllerTest < ActionController::TestCase
+  def setup
+    @admin = admins(:one)
+  end
+  test "responds with 404 if user does not exist" do
+    post :create, params: {auth: { email: 'wrong@example.net', password: '' }}
+    assert_response :not_found
+  end
+  test "responds with 404 if password is invalid" do
+    post :create, params: {auth: { email: @admin.email, password: 'wrong' }}
+    assert_response :not_found
+  end
+  test "responds with 201" do
+    post :create, params: {auth: { email: @admin.email, password: 'secret' }}
+    assert_response :created
+  end
+end

data/test/dummy/test/controllers/composite_name_entity_protected_controller_test.rb ADDED

@@ -0,0 +1,49 @@
+require 'test_helper'
+class CompositeNameEntityProtectedControllerTest < ActionController::TestCase
+  def valid_auth
+    @composite_name_entity = composite_name_entities(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @composite_name_entity.id }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_token_auth
+    @token = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9'
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_entity_auth
+    @token = KnockRails3::AuthToken.new(payload: { sub: 0 }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  test "responds with unauthorized" do
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid token" do
+    invalid_token_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid entity" do
+    invalid_entity_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success if authenticated" do
+    valid_auth
+    get :index
+    assert_response :success
+  end
+  test "has a current_composite_name_entity after authentication" do
+    valid_auth
+    get :index
+    assert_response :success
+    assert @controller.current_composite_name_entity.id == @composite_name_entity.id
+  end
+end

data/test/dummy/test/controllers/current_users_controller_test.rb ADDED

@@ -0,0 +1,31 @@
+require 'test_helper'
+class CurrentUsersControllerTest < ActionController::TestCase
+  setup do
+    @user = users(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @user.id }).token
+  end
+  def authenticate token: @token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{token}"
+  end
+  test "responds with 404 if user is not logged in" do
+    get :show
+    assert_response :not_found
+  end
+  test "responds with 200" do
+    authenticate
+    get :show
+    assert_response :success
+  end
+  # Run this test twice to validate that it still works
+  # when the getter method has already been defined.
+  test "responds with 200 #2" do
+    authenticate
+    get :show
+    assert_response :success
+  end
+end

data/test/dummy/test/controllers/custom_unauthorized_entity_controller_test.rb ADDED

@@ -0,0 +1,42 @@
+require 'test_helper'
+class CustomUnauthorizedEntityControllerTest < ActionController::TestCase
+  def valid_auth
+    @user = users(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @user.id }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_token_auth
+    @token = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9'
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_entity_auth
+    @token = KnockRails3::AuthToken.new(payload: { sub: 0 }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  test "responds with not found" do
+    get :index
+    assert_response :not_found
+  end
+  test "responds with not found to invalid token" do
+    invalid_token_auth
+    get :index
+    assert_response :not_found
+  end
+  test "responds with not found to invalid entity" do
+    invalid_entity_auth
+    get :index
+    assert_response :not_found
+  end
+  test "responds with success if authenticated" do
+    valid_auth
+    get :index
+    assert_response :success
+  end
+end

data/test/dummy/test/controllers/guest_protected_controller_test.rb ADDED

@@ -0,0 +1,22 @@
+require 'test_helper'
+class GuestProtectedControllerTest < ActionController::TestCase
+  def setup
+    @token = KnockRails3::AuthToken.new(payload: { sub: "1" }).token
+  end
+  def authenticate token: @token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{token}"
+  end
+  test "responds with unauthorized when no token is provided" do
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success with a valid token in the header" do
+    authenticate
+    get :index
+    assert_response :success
+  end
+end

data/test/dummy/test/controllers/protected_resources_controller_test.rb ADDED

@@ -0,0 +1,62 @@
+require 'test_helper'
+class ProtectedResourcesControllerTest < ActionController::TestCase
+  def setup
+    @user = users(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @user.id }).token
+  end
+  def authenticate token: @token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{token}"
+  end
+  test "responds with unauthorized" do
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success with valid token in header" do
+    authenticate
+    get :index
+    assert_response :success
+  end
+  test "responds with unauthorized with invalid token in header" do
+    authenticate token: "invalid"
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success with token in url" do
+    get :index, params: {token: @token}
+    assert_response :success
+  end
+  test "responds with unauthorized with invalid token in url" do
+    get :index, params: {token: "invalid"}
+    assert_response :unauthorized
+  end
+  test "has a current_user after authentication" do
+    authenticate
+    get :index
+    assert_response :success
+    assert @controller.current_user.id == @user.id
+  end
+  test "accepts any prefix in the authorization header" do
+    @request.env['HTTP_AUTHORIZATION'] = "Other #{@token}"
+    get :index
+    assert_response :success
+  end
+  test "accepts authorization header without prefix" do
+    @request.env['HTTP_AUTHORIZATION'] = "#{@token}"
+    get :index
+    assert_response :success
+  end
+end

data/test/dummy/test/controllers/v1/test_namespaced_controller_test.rb ADDED

@@ -0,0 +1,19 @@
+require 'test_helper'
+# require 'timecop'
+module KnockRails3
+  class TestNamespacedControllerTest < ActionDispatch::IntegrationTest
+    setup do
+      @user = V1::User.first
+    end
+    test "allow namespaced models" do
+      token = KnockRails3::AuthToken.new(payload: { sub: @user.id }).token
+      get v1_test_namespaced_index_url, headers: {'Authorization': "Bearer #{token}"}
+      assert_response :ok
+      assert_equal @user, @controller.current_v1_user
+    end
+  end
+end

data/test/dummy/test/controllers/vendor_protected_controller_test.rb ADDED

@@ -0,0 +1,55 @@
+require 'test_helper'
+class VendorProtectedControllerTest < ActionController::TestCase
+  def valid_auth
+    @vendor = vendors(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @vendor.id }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_token_auth
+    @token = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9'
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_entity_auth
+    @token = KnockRails3::AuthToken.new(payload: { sub: 0 }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  test "responds with unauthorized" do
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid token" do
+    invalid_token_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid entity" do
+    invalid_entity_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success if authenticated" do
+    valid_auth
+    get :index
+    assert_response :success
+  end
+  test "has a current_vendor after authentication" do
+    valid_auth
+    get :index
+    assert_response :success
+    assert @controller.current_vendor.id == @vendor.id
+  end
+  test "raises method missing error appropriately" do
+    assert_raises(NoMethodError) do
+      get :show, params: {id: 1}
+    end
+  end
+end

data/test/dummy/test/controllers/vendor_token_controller_test.rb ADDED

@@ -0,0 +1,22 @@
+require 'test_helper'
+class VendorTokenControllerTest < ActionController::TestCase
+  def setup
+    @vendor = vendors(:one)
+  end
+  test "responds with 404 if user does not exist" do
+    post :create, params: {auth: { email: 'wrong@example.net', password: '' }}
+    assert_response :not_found
+  end
+  test "responds with 404 if password is invalid" do
+    post :create, params: {auth: { email: @vendor.email, password: 'wrong' }}
+    assert_response :not_found
+  end
+  test "responds with 201" do
+    post :create, params: {auth: { email: @vendor.email, password: 'secret' }}
+    assert_response :created
+  end
+end