adminpanel 2.1.7 → 2.2.0

data/app/controllers/adminpanel/analytics_controller.rb

@@ -1,13 +1,16 @@
 module Adminpanel
   class AnalyticsController < Adminpanel::ApplicationController
-    skip_authorization_check
-    authorize_resource :class => false
+    include Adminpanel::Analytics::TwitterAnalytics
+    include Adminpanel::Analytics::InstagramAnalytics
+
     skip_before_filter :set_model
 
     API_VERSION = 'v3'
     CACHED_API_FILE = "#{Rails.root}/tmp/cache/analytics-#{API_VERSION}.cache"
 
     def index
+      authorize! :read, Adminpanel::Analytic
+
       unless Adminpanel.analytics_profile_id.nil? || Adminpanel.analytics_key_filename.nil?
         service_account_email = '266789642405-0nppij5ll43bbvhpsn986puulssdoc45@developer.gserviceaccount.com' # Email of service account
         key_file = "#{Rails.root}/#{Adminpanel.analytics_key_path}/#{Adminpanel.analytics_key_filename}" # File containing your private key
@@ -75,6 +78,7 @@ module Adminpanel
     end
 
     def fb
+      authorize! :read, Adminpanel::Analytic
       auth = Adminpanel::Auth.find_by_key('facebook')
       if params[:insight].present?
         period = params[:insight]
@@ -120,5 +124,33 @@ module Adminpanel
       end
     end
 
+    # uses @client to fetch replies and tweets, for some statics
+    def twitter
+      authorize! :read, Adminpanel::Analytic
+      if !@twitter_token.nil? && !@twitter_secret.nil?
+        @favorites = 0.0
+        @retweets = 0.0
+        @twitter_user = @twitter_client.user
+
+        # 20 is the number that we're using to measure statics.
+        @twitter_client.user_timeline(@twitter_user.username).take(20).collect do |tweet|
+          @favorites = @favorites + tweet.favorite_count.to_f
+          @retweets = @retweets + tweet.retweet_count.to_f
+        end
+
+        @tweets = @twitter_client.mentions_timeline.take(5)
+
+        @favorites = @favorites / 20.0
+        @retweets = @retweets / 20.0
+      end
+    end
+
+    def instagram
+      authorize! :read, Adminpanel::Analytic
+      if !@instagram_token.nil?
+        @user = @instagram_client.user
+      end
+    end
+
   end
 end

data/app/controllers/adminpanel/application_controller.rb

@@ -1,20 +1,21 @@
 module Adminpanel
   class ApplicationController < ActionController::Base
     protect_from_forgery
-
     inherit_resources
+    authorize_resource
+
+    layout 'admin'
+
+    before_filter :signed_in_user, :set_model, :strong_params_for_cancan
 
     include SessionsHelper
     include Adminpanel::RestActions
     include Adminpanel::GalleryzableActions
     include Adminpanel::FacebookActions
+    include Adminpanel::TwitterActions
     include Adminpanel::SitemapActions
-
-    layout 'admin'
-
-    before_filter :signed_in_user, :set_model, :strong_params_for_cancan
-
   private
+
     def strong_params_for_cancan
       resource = controller_name.singularize.to_sym
       method = "#{resource}_params"

data/app/controllers/adminpanel/categories_controller.rb

@@ -1,6 +1,5 @@
 module Adminpanel
   class CategoriesController < ApplicationController
-    authorize_resource
 
     def index
       @categories = Category.all

data/app/controllers/adminpanel/galleries_controller.rb

@@ -1,6 +1,5 @@
 module Adminpanel
   class GalleriesController < Adminpanel::ApplicationController
-    authorize_resource
 
     def index
       @galleries = Gallery.all

data/app/controllers/adminpanel/permissions_controller.rb

@@ -0,0 +1,14 @@
+module Adminpanel
+  class PermissionsController < Adminpanel::ApplicationController
+
+    private
+      def permission_params
+        params.require(:permission).permit(
+
+          :rol_id,
+          :action,
+          :resource
+        )
+      end
+  end
+end

data/app/controllers/adminpanel/rols_controller.rb

@@ -0,0 +1,10 @@
+module Adminpanel
+  class RolsController < Adminpanel::ApplicationController
+
+    private
+    def rol_params
+      params.require(:rol).permit(:name)
+
+    end
+  end
+end

data/app/controllers/adminpanel/sections_controller.rb

@@ -1,7 +1,5 @@
 module Adminpanel
   class SectionsController < Adminpanel::ApplicationController
-    # authorize_resource
-    authorize_resource
     # def new
     #   @section = Section.new
     #   authorize! :create, @section
@@ -9,10 +7,10 @@ module Adminpanel
 
     def edit
       @section = Section.find(params[:id])
-      respond_to do |format|
-        format.html
-        format.json {render :json => {:section => @section }}
-      end
+      # respond_to do |format|
+        # format.html
+        # format.json {render :json => {:section => @section }}
+      # end
     end
 
     def update
@@ -43,15 +41,14 @@ module Adminpanel
     private
     def section_params
       params.require(:section).permit(
-      :description,
-      :has_image,
-      :key,
-      :page,
-      :name,
-      :has_description,
-      :images_attributes => [:id, :file]
+        :has_description,
+        :description,
+        :key,
+        :page,
+        :name,
+        :has_image,
+        images_attributes: [:id, :file]
       )
-
     end
   end
 end

data/app/controllers/adminpanel/sessions_controller.rb

@@ -1,24 +1,21 @@
 module Adminpanel
-  class SessionsController < Adminpanel::ApplicationController
-    skip_authorization_check
+  class SessionsController < ActionController::Base
+    include SessionsHelper
+    protect_from_forgery
     layout 'admin-login'
-    skip_before_filter :signed_in_user, :set_model
+    before_action :configure_instagram, only:[:instagram_login, :instagram_callback]
 
     def new
-      respond_to do |format|
-        format.html
-        format.json { render :json => {:session => @session }}
-      end
     end
 
     def create
       user = User.find_by_email(params[:session][:email].downcase)
       if user && user.authenticate(params[:session][:password])
-          sign_in user
-          flash[:success] = I18n.t("authentication.signin_success")
-          redirect_to root_url
+        sign_in user
+        flash[:success] = I18n.t('authentication.signin_success')
+        redirect_to root_url
       else
-        flash.now[:error] = I18n.t("authentication.signin_error")
+        flash.now[:error] = I18n.t('authentication.signin_error')
         render 'new'
       end
     end
@@ -27,5 +24,42 @@ module Adminpanel
       sign_out
       redirect_to signin_path
     end
+
+    def twitter_callback
+      save_twitter_tokens
+      flash[:success] = I18n.t('twitter.saved_token')
+      redirect_to twitter_analytics_path
+    end
+
+    def instagram_login
+      redirect_to Instagram.authorize_url(:redirect_uri => instagram_callback_sessions_url, :scope => 'comments')
+    end
+
+    def instagram_callback
+      response = Instagram.get_access_token(params[:code], :redirect_uri => instagram_callback_sessions_url)
+      username = Instagram.client(access_token: response.access_token).user.username
+      Auth.create(key: 'instagram', value: response.access_token, name: "@#{username}")
+      redirect_to instagram_analytics_path
+    end
+
+    private
+
+    def configure_instagram
+      Instagram.configure do |config|
+        config.client_id = Adminpanel.instagram_client_id
+        config.client_secret = Adminpanel.instagram_client_secret
+      end
+    end
+
+    def save_twitter_tokens
+      twitter_user = "@#{request.env['omniauth.auth']['info']['nickname']}"
+      ['token', 'secret'].each do |key|
+        Auth.create(
+          key: "twitter-#{key}",
+          name: twitter_user,
+          value: request.env['omniauth.auth']['credentials'][key]
+        )
+      end
+    end
   end
 end

data/app/controllers/adminpanel/users_controller.rb

@@ -1,8 +1,6 @@
 module Adminpanel
   class UsersController < Adminpanel::ApplicationController
-    # authorize_resource :class => false
-    authorize_resource
-
+    
   private
     def user_params
       params.require(:user).permit(
@@ -10,7 +8,7 @@ module Adminpanel
         :name,
         :password,
         :password_confirmation,
-        :group_id
+        :rol_id
       )
     end
   end

data/app/controllers/concerns/adminpanel/analytics/instagram_analytics.rb

@@ -0,0 +1,31 @@
+module Adminpanel
+  module Analytics
+    module InstagramAnalytics
+      extend ActiveSupport::Concern
+
+      included do
+        before_filter :set_instagram_token, only:[:instagram, :instagram_comment]
+      end
+
+      def instagram_comment
+
+        response = @instagram_client.create_media_comment params[:id], params[:instagram_text]
+        debugger
+        redirect_to instagram_analytics_path
+      end
+
+    private
+      def set_instagram_token
+        @instagram_token = Auth.find_by_key 'instagram'
+
+        if !@instagram_token.nil?
+          @instagram_client ||= Instagram.client(
+
+            access_token: @instagram_token.value
+            )
+        end
+      end
+
+    end
+  end
+end

data/app/controllers/concerns/adminpanel/analytics/twitter_analytics.rb

@@ -0,0 +1,25 @@
+module Adminpanel
+  module Analytics
+    module TwitterAnalytics
+      extend ActiveSupport::Concern
+
+      included do
+        before_filter :get_twitter_token, only:[:twitter, :reply_to_tweet, :favorite_tweet, :retweet_tweet]
+      end
+
+      def reply_to_tweet
+        @twitter_client.update params[:tweet], in_reply_to_status_id: params[:id]
+        redirect_to twitter_analytics_path
+      end
+
+      def favorite_tweet
+        @twitter_client.favorite(params[:id])
+      end
+
+      def retweet_tweet
+        @twitter_client.retweet(params[:id])
+      end
+
+    end
+  end
+end

data/app/controllers/concerns/adminpanel/facebook_actions.rb

@@ -3,7 +3,7 @@ module Adminpanel
     extend ActiveSupport::Concern
 
     included do
-      before_filter :set_auths_count, only:[:index, :create, :update, :destroy, :show]
+      before_filter :set_fb_auths_count, only:[:index, :create, :update, :destroy, :show]
     end
 
     def fb_choose_page
@@ -28,17 +28,19 @@ module Adminpanel
       page_selected = Koala::Facebook::API.new(
         params[model_name][:fb_page_access_key]
       )
-      update_facebook_auth(page_selected.get_object('me')['name'])
+      update_fb_auth(page_selected.get_object('me')['name'])
       flash[:success] = I18n.t('fb.saved_token')
       redirect_to resource
     end
 
     def fb_publish
+      authorize! :publish, resource
+
       page_graph = Koala::Facebook::API.new(Auth.find_by_key('facebook').value)
       page_graph.put_wall_post(
         params[model_name][:fb_message],
         {
-          link: resource.fb_link,
+          link: resource.share_link,
           name: resource.name
         }
       )
@@ -47,11 +49,11 @@ module Adminpanel
     end
 
   private
-    def set_auths_count
+    def set_fb_auths_count
       @fb_auths_count = Auth.where(key: 'facebook').count
     end
 
-    def update_facebook_auth(account_selected_name)
+    def update_fb_auth(account_selected_name)
       auths = Auth.where(key: 'facebook', name: account_selected_name)
       if auths.count == 0
         Auth.create(

data/app/controllers/concerns/adminpanel/rest_actions.rb

@@ -43,6 +43,7 @@ module Adminpanel
           set_collections
           render 'shared/new', :locals => {:resource => resource }
         end
+        respond_to_json(success, failure)
       end
     end
 
@@ -66,6 +67,7 @@ module Adminpanel
           set_collections
           render 'shared/edit'
         end
+        respond_to_json(success, failure)
       end
     end
 
@@ -109,5 +111,15 @@ module Adminpanel
       params.merge({:belongs_request => params[:belongs_request]}) if params[:belongs_request].present?
       params.merge({:currentcontroller => params[:currentcontroller]}) if params[:currentcontroller].present?
     end
+
+    def respond_to_json(success, failure)
+      success.json do
+        render json: resource
+      end
+      failure.json do
+        render json: resource
+      end
+    end
+
   end
 end

data/app/controllers/concerns/adminpanel/twitter_actions.rb

@@ -0,0 +1,40 @@
+module Adminpanel
+  module TwitterActions
+    extend ActiveSupport::Concern
+
+    included do
+      before_filter :get_twitter_token, only:[:index, :create, :update, :destroy, :show, :twitter_publish]
+    end
+
+    def twitter_publish
+      resource.twitter_message = params[model_name][:twitter_message]
+      if !@twitter_token.nil? && !@twitter_secret.nil? && resource.has_valid_tweet?
+        client = get_twitter_token
+        client.update(resource.twitter_message)
+        flash[:success] = I18n.t('twitter.posted', user: @twitter_token.name)
+      else
+        flash[:error] = I18n.t('twitter.not-posted')
+      end
+      redirect_to resource
+    end
+
+  private
+    def get_twitter_token
+      @twitter_token = Auth.find_by_key 'twitter-token'
+      @twitter_secret = Auth.find_by_key 'twitter-secret'
+
+      if !@twitter_token.nil? && !@twitter_secret.nil?
+        @twitter_client ||= ::Twitter::REST::Client.new do |config|
+          config.consumer_key        = Adminpanel.twitter_api_key
+          config.consumer_secret     = Adminpanel.twitter_api_secret
+          config.access_token        = @twitter_token.value
+          config.access_token_secret = @twitter_secret.value
+        end
+      end
+    end
+
+    def model_name
+      @model.name.demodulize.downcase # ex: posts
+    end
+  end
+end