MyCommerceapi 1.0.0

data/auth/app/models/user_mailer.rb

@@ -0,0 +1,13 @@
+class UserMailer < ActionMailer::Base
+
+  def reset_password_instructions(user)
+    default_url_options[:host] = Spree::Config[:site_url]
+
+    @edit_password_reset_url = edit_user_password_url(:reset_password_token => user.reset_password_token)
+
+    mail(:to => user.email,
+         :subject => Spree::Config[:site_name] + ' ' + I18n.t("password_reset_instructions"))
+  end
+
+end
+

data/auth/app/views/checkout/registration.html.erb

@@ -0,0 +1,20 @@
+<%= render "shared/error_messages", :target => @user %>
+<h2><%= t("registration")%></h2>
+<div id="registration">
+  <div id="account">
+    <%= render :file => 'user_sessions/new' %>
+  </div>
+  <% if Spree::Config[:allow_guest_checkout] %>
+    <div id="guest_checkout">
+      <%= render "shared/error_messages", :target => @order %>
+      <h2><%= t(:guest_user_account) %></h2>
+      <%= form_for @order, :url => update_checkout_registration_path, :html => { :method => :put, :id => "checkout_form_registration"} do |f| %>
+        <p>
+          <%= f.label :email, t("email") %><br />
+          <%= f.text_field :email, :class => 'title'  %>
+        </p>
+        <p><%= submit_tag t("continue"), :class => 'button primary' %></p>
+      <% end %>
+    </div>
+  <% end %>
+</div>

data/auth/app/views/layouts/admin/_login_nav.html.erb

@@ -0,0 +1,8 @@
+<% if  current_user %>
+  <ul id="login-nav">
+    <li><%= t('logged_in_as') %>: <%= current_user.email %></li>
+    <li><%= link_to t('account'), edit_user_path(current_user) %></li>
+    <li><%= link_to t('logout'), destroy_user_session_path %></li>
+    <li><%= link_to t('store'), products_path %></li>
+  </ul>
+<% end %>

data/auth/app/views/shared/_flashes.html.erb

@@ -0,0 +1,9 @@
+<% if flash.any? %>
+  <div id="flash">
+    <% flash.each do |key, value| %>
+      <p>
+        <%= value %>
+      </p>
+    <% end %>
+  </div>
+<% end%>

data/auth/app/views/shared/_login.html.erb

@@ -0,0 +1,20 @@
+<%= form_for(:user, :url => user_session_path) do |f| %>
+  <div id='password-credentials'>
+    <p>
+      <%= f.label(:email, t("email")) %><br />
+      <%= f.text_field('email', :class => 'title') %>
+    </p>
+    <p>
+      <%= f.label :password, t("password") %><br />
+      <%= f.password_field 'password', :class => 'title' %>
+    </p>
+  </div>
+  <p>
+    <label>
+      <%= f.check_box :remember_me %>
+      <%= f.label :remember_me, t('remember_me') %>
+    </label>
+  </p>
+
+  <p><%= submit_tag t("log_in"), :class => 'button primary'%></p>
+<% end %>

data/auth/app/views/shared/_login_bar.html.erb

@@ -0,0 +1,6 @@
+<% if current_user %>
+  <li><%= link_to t('my_account'), account_path %></li>
+  <li><%= link_to t('logout'), destroy_user_session_path %></li>
+<% else %>
+  <li><%= link_to t('log_in'), login_path %></li>
+<% end %>

data/auth/app/views/shared/_user_form.html.erb

@@ -0,0 +1,17 @@
+<p>
+  <%= f.label :email, t("email") %><br />
+  <%= f.text_field :email, :class => 'title'  %>
+</p>
+<div id="password-credentials">
+  <p>
+    <%= f.label :password, t("password") %><br />
+    <%= f.password_field :password, :class => 'title'  %>
+  </p>
+
+  <p>
+    <%= f.label :password_confirmation, t(:confirm_password) %><br />
+    <%= f.password_field :password_confirmation, :class => 'title' %>
+  </p>
+</div>
+
+<%= hook :signup_below_password_fields %>

data/auth/app/views/user_mailer/reset_password_instructions.text.erb

@@ -0,0 +1,10 @@
+A request to reset your password has been made. 
+If you did not make this request, simply ignore this email. 
+
+If you did make this request just click the link below:
+ 
+<%= @edit_password_reset_url %>
+ 
+If the above URL does not work try copying and pasting it into your browser. 
+If you continue to have problem please feel free to contact us.
+

data/auth/app/views/user_passwords/edit.html.erb

@@ -0,0 +1,15 @@
+<%= render "shared/error_messages", :target => @user %>
+<h1><%= t(:change_my_password) %></h1>
+
+<%= form_for @user, :url => user_password_path, :html => {:method => :put} do |f| %>
+  <p>
+    <%= f.label :password %><br />
+    <%= f.password_field :password %><br />
+  </p>
+  <p>
+    <%= f.label :password_confirmation %><br />
+    <%= f.password_field :password_confirmation %><br />
+  </p>
+  <%= f.hidden_field :reset_password_token %>
+  <%= f.submit t("update_password") %>
+<% end %>

data/auth/app/views/user_passwords/new.html.erb

@@ -0,0 +1,13 @@
+<h1><%= t(:forgot_password) %></h1>
+
+<p><%= t(:instructions_to_reset_password) %></p>
+
+<%= form_for User.new, :as => :user, :url => user_password_path do |f| %>
+  <p>
+    <label><%= t(:email) %>:</label><br />
+    <%= f.email_field :email %>
+  </p>
+  <p>
+    <%= f.submit t("reset_password") %>
+  </p>
+<% end %>

data/auth/app/views/user_registrations/new.html.erb

@@ -0,0 +1,23 @@
+<% @body_id = 'signup' %>
+
+<%= render "shared/error_messages", :target => @user %>
+
+<div id="new-customer">
+  <h2><%= t("new_customer") %></h2>
+
+  <%= hook :signup do %>
+
+    <%= form_for(:user, :url => registration_path(@user)) do |f| %>
+
+      <%= hook :signup_inside_form do %>
+        <%= render 'shared/user_form', :f => f %>
+        <p><%= submit_tag t("create"), :class => 'button primary' %></p>
+      <% end %>
+
+    <% end %>
+    <%= t("or") %> <%= link_to t("login_as_existing"), login_path %>
+  <% end %>
+
+</div>
+
+<%= hook :login_extras %>

data/auth/app/views/user_sessions/authorization_failure.html.erb

@@ -0,0 +1,4 @@
+<div style="height:50px; padding-top: 20px">
+  <strong><%= t("authorization_failure")%></strong>
+</div>   
+<!-- Add your own custom access denied message here if you like -->

data/auth/app/views/user_sessions/new.html.erb

@@ -0,0 +1,13 @@
+<% if flash[:alert] %>
+  <div class="flash errors"><%= flash[:alert] %></div>
+<% end %>
+
+<% @body_id = 'login' %>
+<div id="existing-customer">
+  <h2><%= t("login_as_existing") %></h2>
+  <%= hook :login do %>
+    <%= render :partial => 'shared/login' %>
+    <%= t("or") %> <%= link_to t("create_a_new_account"), signup_path %> | <%= link_to t("forgot_password"), new_user_password_path %>
+  <% end %>
+</div>
+<%= hook :login_extras %>

data/auth/app/views/users/edit.html.erb

@@ -0,0 +1,11 @@
+<%= render "shared/error_messages", :target => @user %>
+
+<h1><%= t("editing_user") %></h1>
+
+<%= form_for(@user, :html => { :method => :put }) do |f| %>
+  <%= render 'shared/user_form', :f => f %>
+  <p>
+    <%=submit_tag t("update") %>
+  </p>
+<% end %>
+

data/auth/app/views/users/show.html.erb

@@ -0,0 +1,50 @@
+<h1><%= t("my_account") %></h1>
+
+<%= hook :account_summary do %>
+
+<table>
+  <tr>
+    <td><%= t("email") %>:</td>
+    <td>
+      <%= @user.email %>
+    </td>
+  </tr>
+</table>
+<p><%= link_to t('edit'), edit_account_path %></p>
+
+<% end %>
+
+<%= hook :account_my_orders do %>
+
+<h2><%= t("my_orders") %></h2>
+<% if @orders.present? %>
+  <table class="order-summary" width="545">
+    <thead>
+      <tr>
+        <th><%= t("order_number") %></th>
+        <th><%= t("order_date") %></th>
+        <th><%= t("status") %></th>
+        <th><%= t("payment_state") %></th>
+        <th><%= t("shipment_state") %></th>
+        <th><%= t("total") %></th>
+      </tr>
+    </thead>
+    <tbody>
+    <% @orders.each do |order| %>
+      <tr class="<%= cycle('even', 'odd') %>">
+        <td><%= link_to order.number, order_url(order) %></td>
+        <td><%=order.created_at.to_date%></td>
+        <td><%= t(order.state).titleize %></td>
+        <td><%= t("payment_states.#{order.payment_state}") if order.payment_state %></td>
+        <td><%= t("shipment_states.#{order.shipment_state}") if order.shipment_state %></td>
+        <td><%= number_to_currency order.total %></td>
+      </tr>
+    <% end %>
+    </tbody>
+  </table>
+<% else %>
+  <p><%= t(:you_have_no_orders_yet) %></p>
+<% end %>
+<br />
+
+<% end %>

data/auth/config.ru

@@ -0,0 +1,4 @@
+# This file is used by Rack-based servers to start the application.
+
+require ::File.expand_path('../spec/test_app/config/environment',  __FILE__)
+run TestApp::Application

data/auth/config/cucumber.yml

@@ -0,0 +1,10 @@
+<%
+rerun = File.file?('rerun.txt') ? IO.read('rerun.txt') : ""
+rerun_opts = rerun.to_s.strip.empty? ? "--format #{ENV['CUCUMBER_FORMAT'] || 'progress'} features" : "--format #{ENV['CUCUMBER_FORMAT'] || 'pretty'} #{rerun}"
+std_opts = "--format #{ENV['CUCUMBER_FORMAT'] || 'progress'} --strict --tags ~@wip"
+ci_opts = "--format progress --strict"
+%>
+default: <%= std_opts %> features
+wip: --tags @wip:3 --wip features
+ci: <%= ci_opts %> features CI=true
+rerun: <%= rerun_opts %> --format rerun --out rerun.txt --strict --tags ~@wip

data/auth/config/initializers/devise.rb

@@ -0,0 +1,136 @@
+# Use this hook to configure devise mailer, warden hooks and so forth. The first
+# four configuration values can also be set straight in your models.
+Devise.setup do |config|
+  # ==> Mailer Configuration
+  # Configure the e-mail address which will be shown in DeviseMailer.
+  config.mailer_sender = "please-change-me@config-initializers-devise.com"
+
+  # Configure the class responsible to send e-mails.
+  config.mailer = "UserMailer"
+
+  # ==> ORM configuration
+  # Load and configure the ORM. Supports :active_record (default) and
+  # :mongoid (bson_ext recommended) by default. Other ORMs may be
+  # available as additional gems.
+  require 'devise/orm/active_record'
+
+  # ==> Configuration for any authentication mechanism
+  # Configure which keys are used when authenticating an user. By default is
+  # just :email. You can configure it to use [:username, :subdomain], so for
+  # authenticating an user, both parameters are required. Remember that those
+  # parameters are used only when authenticating and not when retrieving from
+  # session. If you need permissions, you should implement that in a before filter.
+  # config.authentication_keys = [ :email ]
+
+  # Tell if authentication through request.params is enabled. True by default.
+  # config.params_authenticatable = true
+
+  # Tell if authentication through HTTP Basic Auth is enabled. False by default.
+  config.http_authenticatable = true
+
+  # Set this to true to use Basic Auth for AJAX requests.  True by default.
+  #config.http_authenticatable_on_xhr = false
+
+  # The realm used in Http Basic Authentication
+  config.http_authentication_realm = "Spree Application"
+
+  # ==> Configuration for :database_authenticatable
+  # For bcrypt, this is the cost for hashing the password and defaults to 10. If
+  # using other encryptors, it sets how many times you want the password re-encrypted.
+  config.stretches = 20
+
+  # Setup a pepper to generate the encrypted password.
+  config.pepper = "0bfa9e2cb4a5efd0d976518a3d82e345060547913d2fd1dd2f32b0c8dbbbb5d3dc20b86d0fed31aca9513bccdf51643700ea277d9c64d9ce8ef886bf39293453"
+
+  # ==> Configuration for :confirmable
+  # The time you want to give your user to confirm his account. During this time
+  # he will be able to access your application without confirming. Default is nil.
+  # When confirm_within is zero, the user won't be able to sign in without confirming.
+  # You can use this to let your user access some features of your application
+  # without confirming the account, but blocking it after a certain period
+  # (ie 2 days).
+  # config.confirm_within = 2.days
+
+  # ==> Configuration for :rememberable
+  # The time the user will be remembered without asking for credentials again.
+  # config.remember_for = 2.weeks
+
+  # If true, a valid remember token can be re-used between multiple browsers.
+  # config.remember_across_browsers = true
+
+  # If true, extends the user's remember period when remembered via cookie.
+  # config.extend_remember_period = false
+
+  # ==> Configuration for :validatable
+  # Range for password length
+  # config.password_length = 6..20
+
+  # Regex to use to validate the email address
+  config.email_regexp = /^([\w\.%\+\-]+)@([\w\-]+\.)+([\w]{2,})$/i
+
+  # ==> Configuration for :timeoutable
+  # The time you want to timeout the user session without activity. After this
+  # time the user will be asked for credentials again.
+  # config.timeout_in = 10.minutes
+
+  # ==> Configuration for :lockable
+  # Defines which strategy will be used to lock an account.
+  # :failed_attempts = Locks an account after a number of failed attempts to sign in.
+  # :none            = No lock strategy. You should handle locking by yourself.
+  # config.lock_strategy = :failed_attempts
+
+  # Defines which strategy will be used to unlock an account.
+  # :email = Sends an unlock link to the user email
+  # :time  = Re-enables login after a certain amount of time (see :unlock_in below)
+  # :both  = Enables both strategies
+  # :none  = No unlock strategy. You should handle unlocking by yourself.
+  # config.unlock_strategy = :both
+
+  # Number of authentication tries before locking an account if lock_strategy
+  # is failed attempts.
+  # config.maximum_attempts = 20
+
+  # Time interval to unlock the account if :time is enabled as unlock_strategy.
+  # config.unlock_in = 1.hour
+
+  # ==> Configuration for :token_authenticatable
+  # Defines name of the authentication token params key
+  config.token_authentication_key = :auth_token
+
+  # ==> Scopes configuration
+  # Turn scoped views on. Before rendering "sessions/new", it will first check for
+  # "users/sessions/new". It's turned off by default because it's slower if you
+  # are using only default views.
+  # config.scoped_views = true
+
+  # Configure the default scope given to Warden. By default it's the first
+  # devise role declared in your routes.
+  # config.default_scope = :user
+
+  # Configure sign_out behavior.
+  # By default sign_out is scoped (i.e. /users/sign_out affects only :user scope).
+  # In case of sign_out_all_scopes set to true any logout action will sign out all active scopes.
+  # config.sign_out_all_scopes = false
+
+  # ==> Navigation configuration
+  # Lists the formats that should be treated as navigational. Formats like
+  # :html, should redirect to the sign in page when the user does not have
+  # access, but formats like :xml or :json, should return 401.
+  # If you have any extra navigational formats, like :iphone or :mobile, you
+  # should add them to the navigational formats lists. Default is [:html]
+  config.navigational_formats = [:html, :json, :xml]
+
+  # ==> Warden configuration
+  # If you want to use other strategies, that are not (yet) supported by Devise,
+  # you can configure them inside the config.warden block. The example below
+  # allows you to setup OAuth, using http://github.com/roman/warden_oauth
+  #
+  # config.warden do |manager|
+  #   manager.oauth(:twitter) do |twitter|
+  #     twitter.consumer_secret = <YOUR CONSUMER SECRET>
+  #     twitter.consumer_key  = <YOUR CONSUMER KEY>
+  #     twitter.options :site => 'http://twitter.com'
+  #   end
+  #   manager.default_strategies(:scope => :user).unshift :twitter_oauth
+  # end
+end

data/auth/config/locales/en.yml

@@ -0,0 +1,46 @@
+en:
+  errors:
+    messages:
+      not_found: "not found"
+      already_confirmed: "was already confirmed"
+      not_locked: "was not locked"
+      not_saved:
+        one: "1 error prohibited this %{resource} from being saved:"
+        other: "%{count} errors prohibited this %{resource} from being saved:"
+  devise:
+    failure:
+      unauthenticated: 'You need to sign in or sign up before continuing.'
+      unconfirmed: 'You have to confirm your account before continuing.'
+      locked: 'Your account is locked.'
+      invalid: 'Invalid email or password.'
+      invalid_token: 'Invalid authentication token.'
+      timeout: 'Your session expired, please sign in again to continue.'
+      inactive: 'Your account was not activated yet.'
+    user_passwords:
+      user:
+        send_instructions: 'You will receive an email with instructions about how to reset your password in a few minutes.'
+        updated: 'Your password was changed successfully. You are now signed in.'
+    confirmations:
+      send_instructions: 'You will receive an email with instructions about how to confirm your account in a few minutes.'
+      confirmed: 'Your account was successfully confirmed. You are now signed in.'
+    user_registrations:
+      signed_up: 'Welcome! You have signed up successfully.'
+      inactive_signed_up: 'You have signed up successfully. However, we could not sign you in because your account is %{reason}.'
+      updated: 'You updated your account successfully.'
+      destroyed: 'Bye! Your account was successfully cancelled. We hope to see you again soon.'
+    user_sessions:
+      signed_in: 'Signed in successfully.'
+      signed_out: 'Signed out successfully.'
+    unlocks:
+      send_instructions: 'You will receive an email with instructions about how to unlock your account in a few minutes.'
+      unlocked: 'Your account was successfully unlocked. You are now signed in.'
+    oauth_callbacks:
+      success: 'Successfully authorized from %{kind} account.'
+      failure: 'Could not authorize you from %{kind} because "%{reason}".'
+    mailer:
+      confirmation_instructions:
+        subject: 'Confirmation instructions'
+      reset_password_instructions:
+        subject: 'Reset password instructions'
+      unlock_instructions:
+        subject: 'Unlock Instructions'