administration-zero 0.0.1

data/lib/generators/admin/install/templates/mailers/admin/user_mailer.rb

@@ -0,0 +1,8 @@
+class Admin::UserMailer < ApplicationMailer
+  def password_reset_provision
+    @admin_user = params[:admin_user]
+    @signed_id = @admin_user.signed_id(purpose: :password_reset, expires_in: 20.minutes)
+
+    mail to: @admin_user.email, subject: "Reset your password"
+  end
+end

data/lib/generators/admin/install/templates/migrations/create_admin_users.rb.tt

@@ -0,0 +1,12 @@
+class <%= migration_class_name %> < ActiveRecord::Migration[<%= ActiveRecord::Migration.current_version %>]
+  def change
+    create_table :admin_users do |t|
+      t.string :email
+      t.string :password_digest
+
+      t.timestamps
+    end
+
+    add_index :admin_users, :email, unique: true
+  end
+end

data/lib/generators/admin/install/templates/models/admin/current.rb

@@ -0,0 +1,3 @@
+class Admin::Current < ActiveSupport::CurrentAttributes
+  attribute :user
+end

data/lib/generators/admin/install/templates/models/admin_user.rb

@@ -0,0 +1,15 @@
+class AdminUser < ApplicationRecord
+  include SpreadsheetArchitect
+
+  has_secure_password
+
+  validates :email, presence: true, uniqueness: true
+  validates_format_of :email, with: /\A[^@\s]+@[^@\s]+\z/
+
+  validates_length_of :password, minimum: 12, allow_nil: true
+  validates_format_of :password, with: /(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])/, allow_nil: true, message: "might easily be guessed"
+
+  before_validation do
+    self.email = email.downcase.strip
+  end
+end

data/lib/generators/admin/install/templates/models/application_record.rb

@@ -0,0 +1,3 @@
+class ApplicationRecord < ActiveRecord::Base
+  include SpreadsheetArchitect; primary_abstract_class
+end

data/lib/generators/admin/install/templates/test_unit/admin_users.yml

@@ -0,0 +1,5 @@
+# Read about fixtures at https://api.rubyonrails.org/classes/ActiveRecord/FixtureSet.html
+
+lazaro_nixon:
+  email: lazaronixon@hotmail.com
+  password_digest: <%= BCrypt::Password.create("Secret1*3*5*") %>

data/lib/generators/admin/install/templates/test_unit/application_system_test_case.rb

@@ -0,0 +1,15 @@
+require "test_helper"
+
+class ApplicationSystemTestCase < ActionDispatch::SystemTestCase
+  driven_by :selenium, using: :chrome, screen_size: [1400, 1400]
+
+  def admin_sign_in_as(user)
+    visit admin_sign_in_url
+    fill_in :email, with: user.email
+    fill_in :password, with: "Secret1*3*5*"
+    click_on "Sign in"
+    assert_current_path admin_url
+
+    return user
+  end
+end

data/lib/generators/admin/install/templates/test_unit/controllers/admin/home_controller_test.rb

@@ -0,0 +1,12 @@
+require "test_helper"
+
+class Admin::HomeControllerTest < ActionDispatch::IntegrationTest
+  setup do
+    @admin_user = admin_sign_in_as(admin_users(:lazaro_nixon))
+  end
+
+  test "should get index" do
+    get admin_url
+    assert_response :success
+  end
+end

data/lib/generators/admin/install/templates/test_unit/controllers/admin/password_resets_controller_test.rb

@@ -0,0 +1,48 @@
+require "test_helper"
+
+class Admin::PasswordResetsControllerTest < ActionDispatch::IntegrationTest
+  setup do
+    @admin_user = admin_users(:lazaro_nixon)
+    @sid = @admin_user.signed_id(purpose: :password_reset, expires_in: 20.minutes)
+    @sid_exp = @admin_user.signed_id(purpose: :password_reset, expires_in: 0.minutes)
+  end
+
+  test "should get new" do
+    get new_admin_password_reset_url
+    assert_response :success
+  end
+
+  test "should get edit" do
+    get edit_admin_password_reset_url(token: @sid)
+    assert_response :success
+  end
+
+  test "should send a password reset email" do
+    assert_enqueued_email_with Admin::UserMailer, :password_reset_provision, args: { admin_user: @admin_user } do
+      post admin_password_reset_url, params: { email: @admin_user.email }
+    end
+
+    assert_redirected_to admin_sign_in_url
+  end
+
+  test "should not send a password reset email to a nonexistent email" do
+    assert_no_enqueued_emails do
+      post admin_password_reset_url, params: { email: "invalid_email@hey.com" }
+    end
+
+    assert_redirected_to new_admin_password_reset_url
+    assert_equal "Sorry, we didn't recognize that email address", flash[:alert]
+  end
+
+  test "should update password" do
+    patch admin_password_reset_url, params: { token: @sid, password: "Secret6*4*2*", password_confirmation: "Secret6*4*2*" }
+    assert_redirected_to admin_sign_in_url
+  end
+
+  test "should not update password with expired token" do
+    patch admin_password_reset_url, params: { token: @sid_exp, password: "Secret6*4*2*", password_confirmation: "Secret6*4*2*" }
+
+    assert_redirected_to new_admin_password_reset_url
+    assert_equal "That password reset link is invalid", flash[:alert]
+  end
+end

data/lib/generators/admin/install/templates/test_unit/controllers/admin/sessions_controller_test.rb

@@ -0,0 +1,36 @@
+require "test_helper"
+
+class Admin::SessionsControllerTest < ActionDispatch::IntegrationTest
+  setup do
+    @admin_user = admin_users(:lazaro_nixon)
+  end
+
+  test "should get new" do
+    get admin_sign_in_url
+    assert_response :success
+  end
+
+  test "should sign in" do
+    post admin_sign_in_url, params: { email: @admin_user.email, password: "Secret1*3*5*" }
+    assert_redirected_to admin_url
+
+    get admin_url
+    assert_response :success
+  end
+
+  test "should not sign in with wrong credentials" do
+    post admin_sign_in_url, params: { email: @admin_user.email, password: "SecretWrong1*3" }
+    assert_redirected_to admin_sign_in_url(email_hint: @admin_user.email)
+    assert_equal "That email or password is incorrect", flash[:alert]
+
+    get admin_url
+    assert_redirected_to admin_sign_in_url
+  end
+
+  test "should sign out" do
+    admin_sign_in_as @admin_user
+
+    delete admin_sign_out_url
+    assert_redirected_to admin_sign_in_url
+  end
+end

data/lib/generators/admin/install/templates/test_unit/controllers/admin/users_controller_test.rb

@@ -0,0 +1,48 @@
+require "test_helper"
+
+class Admin::UsersControllerTest < ActionDispatch::IntegrationTest
+  setup do
+    @admin_user = admin_sign_in_as(admin_users(:lazaro_nixon))
+  end
+
+  test "should get index" do
+    get admin_users_url
+    assert_response :success
+  end
+
+  test "should get new" do
+    get new_admin_user_url
+    assert_response :success
+  end
+
+  test "should create admin_user" do
+    assert_difference("AdminUser.count") do
+      post admin_users_url, params: { admin_user: { email: "lazaronixon@hey.com", password: "Secret1*3*5*", password_confirmation: "Secret1*3*5*"} }
+    end
+
+    assert_redirected_to admin_user_url(AdminUser.last)
+  end
+
+  test "should show admin_user" do
+    get admin_user_url(@admin_user)
+    assert_response :success
+  end
+
+  test "should get edit" do
+    get edit_admin_user_url(@admin_user)
+    assert_response :success
+  end
+
+  test "should update admin_user" do
+    patch admin_user_url(@admin_user), params: { admin_user: { email: @admin_user.email, password: "NewSecret1*3*5*", password_confirmation: "NewSecret1*3*5*" } }
+    assert_redirected_to admin_user_url(@admin_user)
+  end
+
+  test "should destroy admin_user" do
+    assert_difference("AdminUser.count", -1) do
+      delete admin_user_url(@admin_user)
+    end
+
+    assert_redirected_to admin_users_url
+  end
+end

data/lib/generators/admin/install/templates/test_unit/system/admin/password_resets_test.rb

@@ -0,0 +1,28 @@
+require "application_system_test_case"
+
+class Admin::PasswordResetsTest < ApplicationSystemTestCase
+  setup do
+    @admin_user = admin_users(:lazaro_nixon)
+    @sid = @admin_user.signed_id(purpose: :password_reset, expires_in: 20.minutes)
+  end
+
+  test "sending a password reset email" do
+    visit admin_sign_in_url
+    click_on "I forgot password"
+
+    fill_in "Email", with: @admin_user.email
+    click_on "Send me new password"
+
+    assert_text "Check your email for reset instructions"
+  end
+
+  test "updating password" do
+    visit edit_admin_password_reset_url(token: @sid)
+
+    fill_in "New password", with: "Secret6*4*2*"
+    fill_in "Confirm new password", with: "Secret6*4*2*"
+    click_on "Save changes"
+
+    assert_text "Your password was reset successfully. Please sign in"
+  end
+end

data/lib/generators/admin/install/templates/test_unit/system/admin/sessions_test.rb

@@ -0,0 +1,24 @@
+require "application_system_test_case"
+
+class Admin::SessionsTest < ApplicationSystemTestCase
+  setup do
+    @admin_user = admin_users(:lazaro_nixon)
+  end
+
+  test "signing in" do
+    visit admin_sign_in_url
+    fill_in "Email", with: @admin_user.email
+    fill_in "Password", with: "Secret1*3*5*"
+    click_on "Sign in"
+
+    assert_selector "h1", text: "Admin::Home#index"
+  end
+
+  test "signing out" do
+    admin_sign_in_as @admin_user
+    click_on "Paweł Kuna"
+    click_on "Logout"
+
+    assert_selector "h2", text: "Login to your account"
+  end
+end