RubyGems - KnockRails3 - Versions diffs - 2.1.1 - Mend

KnockRails3 2.1.1

Files changed (98) hide show

checksums.yaml +7 -0
data/MIT-LICENSE +20 -0
data/Rakefile +39 -0
data/app/controllers/knock_rails3/application_controller.rb +11 -0
data/app/controllers/knock_rails3/auth_token_controller.rb +47 -0
data/app/model/knock_rails3/auth_token.rb +78 -0
data/config/routes.rb +3 -0
data/lib/KnockRails3.rb +31 -0
data/lib/generators/knock_rails3/install_generator.rb +13 -0
data/lib/generators/knock_rails3/token_controller_generator.rb +27 -0
data/lib/generators/templates/entity_token_controller.rb.erb +2 -0
data/lib/generators/templates/knock_rails3.rb +59 -0
data/lib/knock_rails3/authenticable.rb +60 -0
data/lib/knock_rails3/engine.rb +6 -0
data/lib/knock_rails3/version.rb +3 -0
data/lib/tasks/KnockRails3_tasks.rake +4 -0
data/test/dummy/README.rdoc +28 -0
data/test/dummy/Rakefile +6 -0
data/test/dummy/app/assets/javascripts/application.js +13 -0
data/test/dummy/app/assets/stylesheets/application.css +15 -0
data/test/dummy/app/controllers/admin_protected_controller.rb +7 -0
data/test/dummy/app/controllers/admin_token_controller.rb +2 -0
data/test/dummy/app/controllers/application_controller.rb +7 -0
data/test/dummy/app/controllers/composite_name_entity_protected_controller.rb +7 -0
data/test/dummy/app/controllers/current_users_controller.rb +9 -0
data/test/dummy/app/controllers/custom_unauthorized_entity_controller.rb +13 -0
data/test/dummy/app/controllers/guest_protected_controller.rb +7 -0
data/test/dummy/app/controllers/protected_resources_controller.rb +7 -0
data/test/dummy/app/controllers/v1/test_namespaced_controller.rb +17 -0
data/test/dummy/app/controllers/vendor_protected_controller.rb +11 -0
data/test/dummy/app/controllers/vendor_token_controller.rb +2 -0
data/test/dummy/app/helpers/application_helper.rb +2 -0
data/test/dummy/app/models/admin.rb +16 -0
data/test/dummy/app/models/composite_name_entity.rb +3 -0
data/test/dummy/app/models/guest.rb +7 -0
data/test/dummy/app/models/user.rb +3 -0
data/test/dummy/app/models/v1/user.rb +5 -0
data/test/dummy/app/models/vendor.rb +3 -0
data/test/dummy/app/views/layouts/application.html.erb +14 -0
data/test/dummy/bin/bundle +3 -0
data/test/dummy/bin/rails +4 -0
data/test/dummy/bin/rake +4 -0
data/test/dummy/bin/setup +29 -0
data/test/dummy/config.ru +4 -0
data/test/dummy/config/application.rb +28 -0
data/test/dummy/config/boot.rb +5 -0
data/test/dummy/config/database.yml +25 -0
data/test/dummy/config/environment.rb +5 -0
data/test/dummy/config/environments/development.rb +41 -0
data/test/dummy/config/environments/production.rb +79 -0
data/test/dummy/config/environments/test.rb +47 -0
data/test/dummy/config/initializers/assets.rb +11 -0
data/test/dummy/config/initializers/backtrace_silencers.rb +7 -0
data/test/dummy/config/initializers/cookies_serializer.rb +3 -0
data/test/dummy/config/initializers/filter_parameter_logging.rb +4 -0
data/test/dummy/config/initializers/inflections.rb +16 -0
data/test/dummy/config/initializers/knock.rb +8 -0
data/test/dummy/config/initializers/mime_types.rb +4 -0
data/test/dummy/config/initializers/session_store.rb +3 -0
data/test/dummy/config/initializers/wrap_parameters.rb +14 -0
data/test/dummy/config/locales/en.yml +23 -0
data/test/dummy/config/routes.rb +17 -0
data/test/dummy/config/secrets.yml +22 -0
data/test/dummy/db/migrate/20150713101607_create_users.rb +10 -0
data/test/dummy/db/migrate/20160519075733_create_admins.rb +10 -0
data/test/dummy/db/migrate/20160522051816_create_vendors.rb +10 -0
data/test/dummy/db/migrate/20160522181712_create_composite_name_entities.rb +10 -0
data/test/dummy/db/migrate/20161127203222_create_v1_users.rb +12 -0
data/test/dummy/db/schema.rb +50 -0
data/test/dummy/public/404.html +67 -0
data/test/dummy/public/422.html +67 -0
data/test/dummy/public/500.html +66 -0
data/test/dummy/public/favicon.ico +0 -0
data/test/dummy/test/controllers/admin_protected_controller_test.rb +49 -0
data/test/dummy/test/controllers/admin_token_controller_test.rb +22 -0
data/test/dummy/test/controllers/composite_name_entity_protected_controller_test.rb +49 -0
data/test/dummy/test/controllers/current_users_controller_test.rb +31 -0
data/test/dummy/test/controllers/custom_unauthorized_entity_controller_test.rb +42 -0
data/test/dummy/test/controllers/guest_protected_controller_test.rb +22 -0
data/test/dummy/test/controllers/protected_resources_controller_test.rb +62 -0
data/test/dummy/test/controllers/v1/test_namespaced_controller_test.rb +19 -0
data/test/dummy/test/controllers/vendor_protected_controller_test.rb +55 -0
data/test/dummy/test/controllers/vendor_token_controller_test.rb +22 -0
data/test/dummy/test/models/admin_test.rb +7 -0
data/test/dummy/test/models/user_test.rb +4 -0
data/test/dummy/test/models/vendor_test.rb +7 -0
data/test/fixtures/admins.yml +5 -0
data/test/fixtures/composite_name_entities.yml +5 -0
data/test/fixtures/users.yml +9 -0
data/test/fixtures/v1_users.yml +6 -0
data/test/fixtures/vendors.yml +5 -0
data/test/generators/install_generator_test.rb +12 -0
data/test/generators/token_controller_generator_test.rb +31 -0
data/test/knock_test.rb +9 -0
data/test/model/knock/auth_token_test.rb +123 -0
data/test/support/generators_test_helper.rb +9 -0
data/test/test_helper.rb +45 -0
metadata +292 -0

@@ -0,0 +1,66 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>We're sorry, but something went wrong (500)</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <style>
+  body {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+    margin: 0;
+  }
+  div.dialog {
+    width: 95%;
+    max-width: 33em;
+    margin: 4em auto 0;
+  }
+  div.dialog > div {
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 12% 0;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+  div.dialog > p {
+    margin: 0 0 1em;
+    padding: 1em;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+<body>
+  <!-- This file lives in public/500.html -->
+  <div class="dialog">
+    <div>
+      <h1>We're sorry, but something went wrong.</h1>
+    </div>
+    <p>If you are the application owner check the logs for more information.</p>
+  </div>
+</body>
+</html>

data/test/dummy/public/favicon.ico ADDED

File without changes

data/test/dummy/test/controllers/admin_protected_controller_test.rb ADDED

@@ -0,0 +1,49 @@
+require 'test_helper'
+class AdminProtectedControllerTest < ActionController::TestCase
+  def valid_auth
+    @admin = admins(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @admin.id }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_token_auth
+    @token = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9'
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_entity_auth
+    @token = KnockRails3::AuthToken.new(payload: { sub: 0 }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  test "responds with unauthorized" do
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid token" do
+    invalid_token_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid entity" do
+    invalid_entity_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success if authenticated" do
+    valid_auth
+    get :index
+    assert_response :success
+  end
+  test "has a current_admin after authentication" do
+    valid_auth
+    get :index
+    assert_response :success
+    assert @controller.current_admin.id == @admin.id
+  end
+end

data/test/dummy/test/controllers/admin_token_controller_test.rb ADDED

@@ -0,0 +1,22 @@
+require 'test_helper'
+class AdminTokenControllerTest < ActionController::TestCase
+  def setup
+    @admin = admins(:one)
+  end
+  test "responds with 404 if user does not exist" do
+    post :create, params: {auth: { email: 'wrong@example.net', password: '' }}
+    assert_response :not_found
+  end
+  test "responds with 404 if password is invalid" do
+    post :create, params: {auth: { email: @admin.email, password: 'wrong' }}
+    assert_response :not_found
+  end
+  test "responds with 201" do
+    post :create, params: {auth: { email: @admin.email, password: 'secret' }}
+    assert_response :created
+  end
+end

data/test/dummy/test/controllers/composite_name_entity_protected_controller_test.rb ADDED

@@ -0,0 +1,49 @@
+require 'test_helper'
+class CompositeNameEntityProtectedControllerTest < ActionController::TestCase
+  def valid_auth
+    @composite_name_entity = composite_name_entities(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @composite_name_entity.id }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_token_auth
+    @token = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9'
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_entity_auth
+    @token = KnockRails3::AuthToken.new(payload: { sub: 0 }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  test "responds with unauthorized" do
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid token" do
+    invalid_token_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid entity" do
+    invalid_entity_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success if authenticated" do
+    valid_auth
+    get :index
+    assert_response :success
+  end
+  test "has a current_composite_name_entity after authentication" do
+    valid_auth
+    get :index
+    assert_response :success
+    assert @controller.current_composite_name_entity.id == @composite_name_entity.id
+  end
+end

data/test/dummy/test/controllers/current_users_controller_test.rb ADDED

@@ -0,0 +1,31 @@
+require 'test_helper'
+class CurrentUsersControllerTest < ActionController::TestCase
+  setup do
+    @user = users(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @user.id }).token
+  end
+  def authenticate token: @token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{token}"
+  end
+  test "responds with 404 if user is not logged in" do
+    get :show
+    assert_response :not_found
+  end
+  test "responds with 200" do
+    authenticate
+    get :show
+    assert_response :success
+  end
+  # Run this test twice to validate that it still works
+  # when the getter method has already been defined.
+  test "responds with 200 #2" do
+    authenticate
+    get :show
+    assert_response :success
+  end
+end

data/test/dummy/test/controllers/custom_unauthorized_entity_controller_test.rb ADDED

@@ -0,0 +1,42 @@
+require 'test_helper'
+class CustomUnauthorizedEntityControllerTest < ActionController::TestCase
+  def valid_auth
+    @user = users(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @user.id }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_token_auth
+    @token = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9'
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_entity_auth
+    @token = KnockRails3::AuthToken.new(payload: { sub: 0 }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  test "responds with not found" do
+    get :index
+    assert_response :not_found
+  end
+  test "responds with not found to invalid token" do
+    invalid_token_auth
+    get :index
+    assert_response :not_found
+  end
+  test "responds with not found to invalid entity" do
+    invalid_entity_auth
+    get :index
+    assert_response :not_found
+  end
+  test "responds with success if authenticated" do
+    valid_auth
+    get :index
+    assert_response :success
+  end
+end

data/test/dummy/test/controllers/guest_protected_controller_test.rb ADDED

@@ -0,0 +1,22 @@
+require 'test_helper'
+class GuestProtectedControllerTest < ActionController::TestCase
+  def setup
+    @token = KnockRails3::AuthToken.new(payload: { sub: "1" }).token
+  end
+  def authenticate token: @token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{token}"
+  end
+  test "responds with unauthorized when no token is provided" do
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success with a valid token in the header" do
+    authenticate
+    get :index
+    assert_response :success
+  end
+end

data/test/dummy/test/controllers/protected_resources_controller_test.rb ADDED

@@ -0,0 +1,62 @@
+require 'test_helper'
+class ProtectedResourcesControllerTest < ActionController::TestCase
+  def setup
+    @user = users(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @user.id }).token
+  end
+  def authenticate token: @token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{token}"
+  end
+  test "responds with unauthorized" do
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success with valid token in header" do
+    authenticate
+    get :index
+    assert_response :success
+  end
+  test "responds with unauthorized with invalid token in header" do
+    authenticate token: "invalid"
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success with token in url" do
+    get :index, params: {token: @token}
+    assert_response :success
+  end
+  test "responds with unauthorized with invalid token in url" do
+    get :index, params: {token: "invalid"}
+    assert_response :unauthorized
+  end
+  test "has a current_user after authentication" do
+    authenticate
+    get :index
+    assert_response :success
+    assert @controller.current_user.id == @user.id
+  end
+  test "accepts any prefix in the authorization header" do
+    @request.env['HTTP_AUTHORIZATION'] = "Other #{@token}"
+    get :index
+    assert_response :success
+  end
+  test "accepts authorization header without prefix" do
+    @request.env['HTTP_AUTHORIZATION'] = "#{@token}"
+    get :index
+    assert_response :success
+  end
+end

data/test/dummy/test/controllers/v1/test_namespaced_controller_test.rb ADDED

@@ -0,0 +1,19 @@
+require 'test_helper'
+# require 'timecop'
+module KnockRails3
+  class TestNamespacedControllerTest < ActionDispatch::IntegrationTest
+    setup do
+      @user = V1::User.first
+    end
+    test "allow namespaced models" do
+      token = KnockRails3::AuthToken.new(payload: { sub: @user.id }).token
+      get v1_test_namespaced_index_url, headers: {'Authorization': "Bearer #{token}"}
+      assert_response :ok
+      assert_equal @user, @controller.current_v1_user
+    end
+  end
+end

data/test/dummy/test/controllers/vendor_protected_controller_test.rb ADDED

@@ -0,0 +1,55 @@
+require 'test_helper'
+class VendorProtectedControllerTest < ActionController::TestCase
+  def valid_auth
+    @vendor = vendors(:one)
+    @token = KnockRails3::AuthToken.new(payload: { sub: @vendor.id }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_token_auth
+    @token = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9'
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  def invalid_entity_auth
+    @token = KnockRails3::AuthToken.new(payload: { sub: 0 }).token
+    @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token}"
+  end
+  test "responds with unauthorized" do
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid token" do
+    invalid_token_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with unauthorized to invalid entity" do
+    invalid_entity_auth
+    get :index
+    assert_response :unauthorized
+  end
+  test "responds with success if authenticated" do
+    valid_auth
+    get :index
+    assert_response :success
+  end
+  test "has a current_vendor after authentication" do
+    valid_auth
+    get :index
+    assert_response :success
+    assert @controller.current_vendor.id == @vendor.id
+  end
+  test "raises method missing error appropriately" do
+    assert_raises(NoMethodError) do
+      get :show, params: {id: 1}
+    end
+  end
+end

data/test/dummy/test/controllers/vendor_token_controller_test.rb ADDED

@@ -0,0 +1,22 @@
+require 'test_helper'
+class VendorTokenControllerTest < ActionController::TestCase
+  def setup
+    @vendor = vendors(:one)
+  end
+  test "responds with 404 if user does not exist" do
+    post :create, params: {auth: { email: 'wrong@example.net', password: '' }}
+    assert_response :not_found
+  end
+  test "responds with 404 if password is invalid" do
+    post :create, params: {auth: { email: @vendor.email, password: 'wrong' }}
+    assert_response :not_found
+  end
+  test "responds with 201" do
+    post :create, params: {auth: { email: @vendor.email, password: 'secret' }}
+    assert_response :created
+  end
+end