adva 0.0.1 → 0.1.0

data/adva_user/README.md

@@ -1,29 +0,0 @@
-# AdvaUser
-
-TODO: Write a gem description
-
-## Installation
-
-Add this line to your application's Gemfile:
-
-    gem 'adva_user'
-
-And then execute:
-
-    $ bundle
-
-Or install it yourself as:
-
-    $ gem install adva_user
-
-## Usage
-
-TODO: Write usage instructions here
-
-## Contributing
-
-1. Fork it
-2. Create your feature branch (`git checkout -b my-new-feature`)
-3. Commit your changes (`git commit -am 'Added some feature'`)
-4. Push to the branch (`git push origin my-new-feature`)
-5. Create new Pull Request

data/adva_user/Rakefile

@@ -1,2 +0,0 @@
-#!/usr/bin/env rake
-require "bundler/gem_tasks"

data/adva_user/adva_user.gemspec

@@ -1,17 +0,0 @@
-# -*- encoding: utf-8 -*-
-require File.expand_path('../lib/adva_user/version', __FILE__)
-
-Gem::Specification.new do |gem|
-  gem.authors       = ["Micah Geisel"]
-  gem.email         = ["micah@botandrose.com"]
-  gem.description   = %q{Adva User}
-  gem.summary       = %q{Engine for Adva CMS user accounts}
-  gem.homepage      = ""
-
-  gem.files         = `git ls-files`.split($\)
-  gem.executables   = gem.files.grep(%r{^bin/}).map{ |f| File.basename(f) }
-  gem.test_files    = gem.files.grep(%r{^(test|spec|features)/})
-  gem.name          = "adva_user"
-  gem.require_paths = ["lib"]
-  gem.version       = AdvaUser::VERSION
-end

data/adva_user/app/controllers/admin/base_account_controller.rb

@@ -1,13 +0,0 @@
-class Admin::BaseAccountController < Admin::BaseController
-  before_filter :set_account
-
-  def set_account
-    @account = current_user.account
-  end
-
-  def require_authentication
-    unless current_user and current_user.account
-      return redirect_to_login(t(:'adva.flash.authentication_required'))
-    end
-  end
-end

data/adva_user/app/controllers/admin/users_controller.rb

@@ -1,95 +0,0 @@
-class Admin::UsersController < Admin::BaseController
-  before_filter :set_users, :only => [:index]
-  before_filter :set_user,  :only => [:show, :edit, :update, :destroy]
-  before_filter :authorize_access
-  before_filter :authorize_params, :only => :update
-
-  # guards_permissions :user
-
-  def index
-  end
-
-  def show
-  end
-
-  def new
-    @user = User.new
-  end
-
-  def create
-    # yuck! rails' params parsing is broken
-    params[:user][:roles_attributes] = params[:user][:roles_attributes].map { |key, value| value } if params[:user][:roles_attributes]
-
-    @user = User.new(params[:user])
-    @user.memberships.build(:site => @site) if @site and !@user.has_role?(:superuser)
-
-    if @user.save
-      @user.verify! # TODO hu??
-      trigger_events(@user)
-      flash[:notice] = t(:'adva.users.flash.create.success')
-      redirect_to admin_user_url(@site, @user)
-    else
-      flash.now[:error] = t(:'adva.users.flash.create.failure')
-      render :action => :new
-    end
-  end
-
-  def edit
-  end
-
-  def update
-    # yuck! rails' params parsing is broken
-    params[:user][:roles_attributes] = params[:user][:roles_attributes].map { |key, value| value } if params[:user][:roles_attributes]
-    
-    if @user.update_attributes(params[:user])
-      trigger_events(@user)
-      flash[:notice] = t(:'adva.users.flash.update.success')
-      redirect_to admin_user_url(@site, @user)
-    else
-      flash.now[:error] = t(:'adva.users.flash.update.failure')
-      render :action => :edit
-    end
-  end
-
-  def destroy
-    if @user.destroy
-      trigger_events(@user)
-      flash[:notice] = t(:'adva.users.flash.destroy.success')
-      redirect_to admin_users_url(@site)
-    else
-      flash.now[:error] = t(:'adva.users.flash.destroy.failure')
-      render :action => :edit
-    end
-  end
-
-  private
-
-    def set_menu
-      @menu = Menus::Admin::Users.new
-    end
-
-    def set_users
-      @users = @site ? @site.users_and_superusers :
-                       User.admins_and_superusers
-    end
-
-    def set_user
-      @user = User.find(params[:id])
-    end
-
-    # FIXME extract this and use Rbac contexts instead
-    def authorize_access
-      redirect_to admin_sites_url unless @site || current_user.has_role?(:superuser)
-    end
-
-    def authorize_params
-      return
-      return unless params[:user] && params[:user][:roles]
-
-      if params[:user][:roles].has_key?('superuser') && !current_user.has_role?(:superuser) ||
-         params[:user][:roles].has_key?('admin') && !current_user.has_role?(:admin, @site)
-        raise "unauthorized parameter" # TODO raise something more meaningful
-      end
-      # TODO as well check for membership site_id if !user.has_role?(:superuser)
-    end
-end

data/adva_user/app/controllers/password_controller.rb

@@ -1,36 +0,0 @@
-class PasswordController < BaseController
-  renders_with_error_proc :below_field
-  layout 'login'
-
-  def new
-  end
-
-  def create
-    flash[:notice] = t(:'adva.passwords.flash.create.notification')
-    if user = User.find_by_email(params[:user][:email])
-      token = user.assign_token 'password'
-      user.save!
-      trigger_event user, :password_reset_requested, :token => "#{user.id};#{token}"
-      redirect_to edit_password_url
-    else
-      render :action => :new
-    end
-  end
-
-  def edit
-    params[:token] = nil unless current_user # TODO: maybe solve this nicer?
-  end
-
-  def update
-    if current_user && current_user.update_attributes(params[:user].slice(:password))
-      trigger_event current_user, :password_updated
-      flash[:notice] = t(:'adva.passwords.flash.update.success')
-      authenticate_user(:email => current_user.email, :password => params[:user][:password])
-      redirect_to root_url
-    else
-      params[:token] = nil # ugh
-      flash[:error] = t(:'adva.passwords.flash.update.failure')
-      render :action => :edit
-    end
-  end
-end

data/adva_user/app/controllers/session_controller.rb

@@ -1,30 +0,0 @@
-class SessionController < BaseController
-  renders_with_error_proc :below_field
-
-  skip_before_filter :verify_authenticity_token # disable forgery protection
-
-  layout 'login'
-
-  def new
-    @user = User.new
-  end
-
-  def create
-    if authenticate_user(params[:user])
-      remember_me! if params[:user][:remember_me]
-      flash[:notice] = t(:'adva.session.flash.create.success')
-      redirect_to return_from(:login)
-    else
-      @user = User.new(:email => params[:user][:email])
-      @remember_me = params[:user][:remember_me]
-      flash.now[:error] = t(:'adva.session.flash.create.failure')
-      render :action => 'new'
-    end
-  end
-
-  def destroy
-    logout
-    flash[:notice] = t(:'adva.session.flash.destroy.success')
-    redirect_to return_from(:logout)
-  end
-end

data/adva_user/app/helpers/users_helper.rb

@@ -1,27 +0,0 @@
-module UsersHelper
-  def who(name)
-    name = name.name if name.is_a? User
-    return current_user && current_user.name == name ? t(:'adva.common.you') : name
-  end
-
-  def gravatar_img(user, options = {})
-    image_tag gravatar_url(user.email), {:class => 'avatar'}.merge(options)
-  end
-
-  def gravatar_url(email = nil, size = 80)
-    default = '/assets/adva_cms/avatar.gif'
-    return default if email.blank?
-    require 'digest/md5'
-    digest = Digest::MD5.hexdigest(email)
-    # TODO #{ActionController::AbstractRequest.relative_url_root} missing in Rails 2.2
-    "http://www.gravatar.com/avatar.php?size=#{size}&gravatar_id=#{digest}&default=http://#{request.host_with_port}/assets/adva_cms/avatar.gif"
-  end
-
-  def link_to_author resource, options = {}
-    include_email = options[:include_email] && resource.respond_to?(:author_email)
-    name = resource.author_name
-    text = resource.author_homepage.blank? ? name : link_to(h(name), h(resource.author_homepage))
-    text = "#{text} (#{resource.author_email})" if include_email
-    text.html_safe
-  end
-end

data/adva_user/app/models/membership.rb

@@ -1,16 +0,0 @@
-class Membership < ActiveRecord::Base
-  belongs_to :site
-  belongs_to :user
-
-  validates_uniqueness_of :site_id, :scope => :user_id
-
-  # tentacle does this. is it a good idea to keep has_many :roles on the membership?
-  # before_create :set_first_user_admin
-  # def set_first_user_admin
-  #   self.transaction do
-  #     if group && group.members.count == 0
-  #       self.admin = true
-  #     end
-  #   end
-  # end
-end

data/adva_user/app/models/password_mailer.rb

@@ -1,43 +0,0 @@
-require "login/mail_config"
-
-class PasswordMailer < ActionMailer::Base
-  include Login::MailConfig
-
-  class << self
-    def handle_user_password_reset_requested!(event)
-      deliver_reset_password_email(
-        :user => event.object, 
-        :from => site(event.source.site).email_from,
-        :reset_link => password_reset_link(event.source, event.token), 
-        :token => event.token
-      )
-    end
-
-    def handle_user_password_updated!(event)
-      deliver_updated_password_email(
-        :user => event.object, 
-        :from => site(event.source.site).email_from
-      )
-    end
-
-    private
-
-      def password_reset_link(controller, token)
-        controller.send(:url_for, :action => 'edit', :token => token)
-      end
-  end
-  
-  def reset_password_email(attributes = {})
-    recipients attributes[:user].email
-    from       attributes[:from]
-    subject    I18n.t(:'adva.passwords.notifications.reset_password.subject')
-    body       attributes
-  end
-
-  def updated_password_email(attributes = {})
-    recipients attributes[:user].email
-    from       attributes[:from]
-    subject    I18n.t(:'adva.passwords.notifications.password_updated.subject')
-    body       attributes
-  end
-end

data/adva_user/app/models/user.rb

@@ -1,106 +0,0 @@
-class User < ActiveRecord::Base
-  acts_as_authenticated_user
-
-  # TODO how do we work this in?
-  #  acts_as_authenticated_user :token_with => 'Authentication::SingleToken',
-  #                             :authenticate_with => nil
-
-  scope :verified, -> { where.not(verified_at: nil) }
-
-  belongs_to :account
-  has_many :sites, :through => :memberships
-  has_many :memberships, :dependent => :delete_all
-
-  validates_presence_of     :first_name, :email
-  validates_uniqueness_of   :email # i.e. account attributes are unique per application, not per site
-  validates_length_of       :first_name, :within => 1..40
-  validates_length_of       :last_name, :allow_nil => true, :within => 0..40
-  validates_format_of       :email, :allow_nil => true,
-    :with => /(\A(\s*)\Z)|(\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\Z)/i
-
-  validates_presence_of     :password,                         :if => :password_required?
-  validates_length_of       :password, :within => 4..40,       :if => :password_required?
-
-  class << self
-    def authenticate(credentials)
-      return false unless user = User.find_by_email(credentials[:email])
-      user.authenticate(credentials[:password]) ? user : false
-    end
-    
-    def anonymous(attributes = {}) # FIXME rename to build_anonymous
-      attributes[:anonymous] = true
-      new attributes
-    end
-  end
-
-  def attributes=(attributes)
-    attributes.symbolize_keys!
-    memberships = attributes.delete :memberships
-    super.tap do
-      update_memberships memberships if memberships
-    end
-  end
-
-  def update_memberships(memberships)
-    memberships.each do |site_id, active|
-      site = Site.find(site_id)
-      if active
-        self.sites << site unless member_of?(site)
-      else
-        self.sites.delete(site) if member_of?(site)
-      end
-    end
-  end
-
-  def member_of?(site)
-    sites.include?(site)
-  end
-
-  def verified?
-    !verified_at.nil?
-  end
-
-  def verify!
-    update_attributes :verified_at => Time.zone.now if verified_at.nil?
-  end
-
-  # def restore!
-  #   update_attributes :deleted_at => nil if deleted_at
-  # end
-
-  def registered?
-    !new_record? && !anonymous?
-  end
-
-  def name=(name)
-    self.first_name = name
-  end
-
-  def name
-    last_name ? "#{first_name} #{last_name}" : first_name
-  end
-
-  def to_s
-    name
-  end
-
-  def email_with_name
-    "#{name} <#{email}>"
-  end
-
-  def homepage
-    return nil unless self[:homepage]
-
-    self[:homepage][0..6] == 'http://' ? self[:homepage] : 'http://' + self[:homepage]
-  end
-
-  def first_name_from_email
-    self.first_name.blank? && self.email ? self.email.split('@').first : self.first_name
-  end
-
-  protected
-
-    def password_required?
-      !anonymous? && (password_hash.nil? || password.present?)
-    end
-end

data/adva_user/app/views/admin/users/_form.html.erb

@@ -1,29 +0,0 @@
-<fieldset>
-  <div class="col">
-    <%= f.text_field :first_name, :label => "First name" %>
-    <%= f.text_field :email, :label => "Email" %>
-    <%= f.password_field :password, :label => "Password" %>
-  </div>
-
-  <div class="col">
-    <%= f.text_field :last_name, :label => "Last name" %>
-    <%= f.text_field :homepage, :label => "Homepage" %>
-  </div>
-</fieldset>
-
-<h4><%= t(:'adva.titles.roles') %></h4>
-<p class="hint text_only"><%= t(:'adva.hints.roles') %></p>
-
-<fieldset>
-  <% if current_user.has_role?(:superuser) %>
-    <p>
-    <%= hidden_field_tag "user[roles_attributes][0][selected]", 0 %>
-    <span class='hint'><%= t(:'adva.roles.hints.superuser') %></span>
-      <%= check_box_tag "user[roles_attributes][0][selected]", 1, @user.has_global_role?(:superuser), :id => "user_role_superuser" %>
-      <%= hidden_field_tag "user[roles_attributes][0][name]", 'superuser' %>
-      <%= f.label "role_superuser", t(:'adva.roles.labels.superuser'), :class => 'light inline' %>
-    </p>
-  <% end %>
-</fieldset>
-
-<% save_or_cancel_links(f, :cancel_url => admin_site_users_path(@site)) %>

data/adva_user/app/views/admin/users/edit.html.erb

@@ -1,7 +0,0 @@
-<h2><%= t(:'adva.users.titles.edit') %></h2>
-
-<%= form_for [:admin, @site, @user] do |f| -%>
-  <%= render :partial => 'form', :locals => {:f => f} %>  
-<% end -%>
-
-<%= render :partial => 'sidebar' %>

data/adva_user/app/views/admin/users/index.html.erb

@@ -1,13 +0,0 @@
-<ul id="users">
-  <% @users.each do |user| %>
-		<li>
-		  <%= gravatar_img(user) %>
-		  <h4><%= link_to user.name, [:admin, @site, user] %></h4>
-		  <p><%= user.email %></p>
-		  <p class="actions">
-		    <%= link_to t(:'adva.links.edit'), [:edit, :admin, @site, user], :class => 'edit' %>
-        <%= link_to t(:'adva.links.delete'), [:admin, @site, user], :class => 'delete', :data => { :confirm => t(:'adva.users.confirm_delete') }, :method => :delete %>
-		  </p>
-		</li> 
-	<% end %>
-</ul>	

data/adva_user/app/views/admin/users/new.html.erb

@@ -1,5 +0,0 @@
-<h2><%= t(:'adva.users.titles.new') %></h2>
-
-<%= form_for [:admin, @site, @user] do |f| -%>
-  <%= render :partial => 'form', :locals => {:f => f} %>  
-<% end -%>

data/adva_user/app/views/layouts/login.html.erb

@@ -1,24 +0,0 @@
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml">
-  <head>
-    <meta http-equiv="Content-type" content="text/html; charset=utf-8" />
- 		<meta name="generator" content="adva-cms - Open source content management platform" /> 
-    <title>adva-cms: <%= controller.controller_name %></title>
-
-    <%= stylesheet_link_tag "adva_cms/admin" %>
-    <%= javascript_include_tag "adva_cms/application" %>
-    <%= yield :head %>
-  </head>
-  <body>   
-    <div id="header">
-    </div>
-    
-    <div class="main">
-      <div id="flashes"><%= render :partial => 'shared/flash' %></div>
-      <div id="content">
-        <%= yield %>      
-      </div>
-    </div>
-
-  </body>
-</html>

data/adva_user/app/views/password/edit.html.erb

@@ -1,14 +0,0 @@
-<h2><%= t(:'adva.passwords.titles.edit') %></h2>
-
-<p><%= params[:token].blank? ? t(:'adva.passwords.info.please_enter_new_password_and_token') : t(:'adva.passwords.info.please_enter_new_password') %></p>
-
-<%= form_for 'user', :url => password_path, :html => { :method => :put } do |f| %>
-  <% f.field_set do %>
-		<%= label_tag(t(:'adva.passwords.attributes.token')) + text_field_tag('token') unless current_user %>
-		<%= f.password_field :password, :label => :"adva.users.attributes.new_password" %>
-  <% end %>
-
-  <% f.buttons do %>
-		<%= submit_tag t(:'adva.common.save') %>
-	<% end %>
-<% end %>

data/adva_user/app/views/password/new.html.erb

@@ -1,13 +0,0 @@
-<h2><%= t(:'adva.passwords.titles.new') %></h2>
-
-<%= form_tag password_path do %>
-  <fieldset>
-    <p><%= t(:'adva.passwords.info.please_enter_email_to_reset_password') %></p>
-		<%= label_tag 'user[email]', t(:"adva.users.attributes.email") %>
-	  <%= text_field_tag 'user[email]' %>
-	</fieldset>
-	
-  <% buttons do %>
-    <%= submit_tag t(:'adva.passwords.links.reset') %>
-  <% end %>
-<% end %>

data/adva_user/app/views/session/new.html.erb

@@ -1,17 +0,0 @@
-<div id="centered_box">
-  <%= form_for @user, :url => session_path, :html => {:id => 'login'} do |f| %>
-    <%= hidden_field_tag :return_to, params[:return_to] if params[:return_to] %>
-
-  	<fieldset>
-  		<%= f.text_field :email, :class => 'big', :label => "Email" %>
-  		<%= f.password_field :password, :class => 'big', :label => "Password" %>
-  		<%= check_box_tag 'user[remember_me]', 1, @remember_me, :id => 'user_remember_me' %>
-			<%= label_tag :user_remember_me, t(:'adva.session.labels.remember_me'), :class => 'inline light' %>
-    </fieldset>
-  	
-  	<fieldset>
-  	  <%= submit_tag "Login", :id => 'commit' %> <%= t(:'adva.common.connector.or')%>
-  	  <%= link_to t(:'adva.passwords.titles.new'), new_password_path %>
-    </fieldset>
-  <% end %>
-</div>

data/adva_user/config/initializers/menus.rb

@@ -1,25 +0,0 @@
-module Menus
-  module Admin
-    class Users < Menu::Group
-      define do
-        id :main
-        parent Sites.new.build(scope).find(:users)
-
-        menu :left, :class => 'left' do
-          item :users, :action => :index, :resource => [@site, :user]
-        end
-        menu :actions, :class => 'actions' do
-          activates object.parent.find(:users)
-          item :new, :action => :new, :resource => [@site, :user]
-          if @user && !@user.new_record?
-            item :show,   :url => admin_site_user_path(@site, @user)
-            item :edit,   :url => edit_admin_site_user_path(@site, @user)
-            # item :show,   :action  => :show, :resource => @user
-            # item :edit,   :action  => :edit, :resource => @user
-            item :delete, :content => link_to("Delete", [:admin, @site, @user], :method => :delete)
-          end
-        end
-      end
-    end
-  end
-end

data/adva_user/config/routes.rb

@@ -1,14 +0,0 @@
-Rails.application.routes.draw do
-  get "login" => "session#new"
-  delete "logout" => "session#destroy"
-
-  resource :session,     :controller => "session"
-  resource :password,    :controller => "password"
-
-  namespace :admin do
-    resources :users
-    resources :sites do
-      resources :users
-    end
-  end
-end

data/adva_user/lib/action_controller/authenticate_anonymous.rb

@@ -1,70 +0,0 @@
-# Auto-registers and re-authenticates anonymous users based on a single token
-# that's stored in the session. This is for anonymous posting of blog comments,
-# editing wikipages etc. and allows to do such things as:
-#
-# * store user information in the user table (which keeps the model and db
-#   structure clean) and
-# * allow users to (e.g.) edit their comment based on this anonymous login.
-
-module ActionController
-  module AuthenticateAnonymous
-    def self.included(base)
-      base.extend ClassMethods
-    end
-
-    module ClassMethods
-      def authenticates_anonymous_user
-        return if authenticates_anonymous_user?
-        include InstanceMethods
-        alias_method_chain :current_user, :anonymous
-        alias_method_chain :authenticated?, :anonymous
-      end
-
-      def authenticates_anonymous_user?
-        included_modules.include? InstanceMethods
-      end
-    end
-
-    module InstanceMethods
-      def current_user_with_anonymous
-        @current_user ||= (current_user_without_anonymous || login_or_register_anonymous)
-      end
-
-      def authenticated_with_anonymous?
-        !!current_user and !current_user.anonymous?
-      end
-
-      def login_or_register_anonymous
-        anonymous = try_login_anonymous || User.anonymous
-        anonymous = register_or_update_anonymous anonymous if params[:user]
-        login_anonymous! anonymous if anonymous
-        anonymous
-      end
-
-      def try_login_anonymous
-        # try to authenticate if token is present
-        validate_token User, session[:anonymous_token] if session[:anonymous_token]
-      end
-
-      def register_or_update_anonymous(anonymous)
-        # if :name and :email params are passed either register a new Anonymous or update the existing one
-        anonymous.update_attributes params[:user].merge(request_info)
-        anonymous
-      end
-
-      def login_anonymous!(anonymous)
-        # set a new session token and expiration
-        token = anonymous.assign_token('anonymous', 3.hour.from_now)
-        anonymous.save
-        session[:anonymous_token] = "#{anonymous.id};#{token}"
-        cookies[:aid] = anonymous.id.to_s unless anonymous.new_record?
-      end
-
-      def request_info
-        { :ip      => request.env["REMOTE_ADDR"],
-          :agent   => request.env["HTTP_USER_AGENT"],
-          :referer => request.env["HTTP_REFERER"] }
-      end
-    end
-  end
-end