antlypls-authlogic 3.0.3

Sign up to get free protection for your applications and to get access to all the features.
Files changed (129) hide show
  1. data/Gemfile +10 -0
  2. data/Gemfile.lock +30 -0
  3. data/LICENSE +20 -0
  4. data/README.rdoc +253 -0
  5. data/Rakefile +42 -0
  6. data/VERSION.yml +5 -0
  7. data/authlogic.gemspec +220 -0
  8. data/generators/session/session_generator.rb +9 -0
  9. data/generators/session/templates/session.rb +2 -0
  10. data/init.rb +1 -0
  11. data/lib/authlogic.rb +64 -0
  12. data/lib/authlogic/acts_as_authentic/base.rb +109 -0
  13. data/lib/authlogic/acts_as_authentic/email.rb +110 -0
  14. data/lib/authlogic/acts_as_authentic/logged_in_status.rb +60 -0
  15. data/lib/authlogic/acts_as_authentic/login.rb +142 -0
  16. data/lib/authlogic/acts_as_authentic/magic_columns.rb +24 -0
  17. data/lib/authlogic/acts_as_authentic/password.rb +355 -0
  18. data/lib/authlogic/acts_as_authentic/perishable_token.rb +105 -0
  19. data/lib/authlogic/acts_as_authentic/persistence_token.rb +68 -0
  20. data/lib/authlogic/acts_as_authentic/restful_authentication.rb +61 -0
  21. data/lib/authlogic/acts_as_authentic/session_maintenance.rb +139 -0
  22. data/lib/authlogic/acts_as_authentic/single_access_token.rb +65 -0
  23. data/lib/authlogic/acts_as_authentic/validations_scope.rb +32 -0
  24. data/lib/authlogic/authenticates_many/association.rb +42 -0
  25. data/lib/authlogic/authenticates_many/base.rb +54 -0
  26. data/lib/authlogic/controller_adapters/abstract_adapter.rb +67 -0
  27. data/lib/authlogic/controller_adapters/merb_adapter.rb +30 -0
  28. data/lib/authlogic/controller_adapters/rails_adapter.rb +48 -0
  29. data/lib/authlogic/controller_adapters/sinatra_adapter.rb +61 -0
  30. data/lib/authlogic/crypto_providers/aes256.rb +43 -0
  31. data/lib/authlogic/crypto_providers/bcrypt.rb +90 -0
  32. data/lib/authlogic/crypto_providers/md5.rb +34 -0
  33. data/lib/authlogic/crypto_providers/sha1.rb +35 -0
  34. data/lib/authlogic/crypto_providers/sha256.rb +50 -0
  35. data/lib/authlogic/crypto_providers/sha512.rb +50 -0
  36. data/lib/authlogic/crypto_providers/wordpress.rb +43 -0
  37. data/lib/authlogic/i18n.rb +83 -0
  38. data/lib/authlogic/i18n/translator.rb +15 -0
  39. data/lib/authlogic/random.rb +33 -0
  40. data/lib/authlogic/regex.rb +25 -0
  41. data/lib/authlogic/session/activation.rb +58 -0
  42. data/lib/authlogic/session/active_record_trickery.rb +72 -0
  43. data/lib/authlogic/session/base.rb +37 -0
  44. data/lib/authlogic/session/brute_force_protection.rb +96 -0
  45. data/lib/authlogic/session/callbacks.rb +99 -0
  46. data/lib/authlogic/session/cookies.rb +182 -0
  47. data/lib/authlogic/session/existence.rb +93 -0
  48. data/lib/authlogic/session/foundation.rb +77 -0
  49. data/lib/authlogic/session/http_auth.rb +99 -0
  50. data/lib/authlogic/session/id.rb +41 -0
  51. data/lib/authlogic/session/klass.rb +78 -0
  52. data/lib/authlogic/session/magic_columns.rb +95 -0
  53. data/lib/authlogic/session/magic_states.rb +59 -0
  54. data/lib/authlogic/session/params.rb +101 -0
  55. data/lib/authlogic/session/password.rb +240 -0
  56. data/lib/authlogic/session/perishable_token.rb +18 -0
  57. data/lib/authlogic/session/persistence.rb +70 -0
  58. data/lib/authlogic/session/priority_record.rb +34 -0
  59. data/lib/authlogic/session/scopes.rb +101 -0
  60. data/lib/authlogic/session/session.rb +62 -0
  61. data/lib/authlogic/session/timeout.rb +82 -0
  62. data/lib/authlogic/session/unauthorized_record.rb +50 -0
  63. data/lib/authlogic/session/validation.rb +82 -0
  64. data/lib/authlogic/test_case.rb +120 -0
  65. data/lib/authlogic/test_case/mock_controller.rb +55 -0
  66. data/lib/authlogic/test_case/mock_cookie_jar.rb +14 -0
  67. data/lib/authlogic/test_case/mock_logger.rb +10 -0
  68. data/lib/authlogic/test_case/mock_request.rb +19 -0
  69. data/lib/authlogic/test_case/rails_request_adapter.rb +30 -0
  70. data/lib/generators/authlogic/USAGE +8 -0
  71. data/lib/generators/authlogic/session_generator.rb +14 -0
  72. data/lib/generators/authlogic/templates/session.rb +2 -0
  73. data/rails/init.rb +1 -0
  74. data/shoulda_macros/authlogic.rb +69 -0
  75. data/test/acts_as_authentic_test/base_test.rb +18 -0
  76. data/test/acts_as_authentic_test/email_test.rb +105 -0
  77. data/test/acts_as_authentic_test/logged_in_status_test.rb +36 -0
  78. data/test/acts_as_authentic_test/login_test.rb +109 -0
  79. data/test/acts_as_authentic_test/magic_columns_test.rb +27 -0
  80. data/test/acts_as_authentic_test/password_test.rb +236 -0
  81. data/test/acts_as_authentic_test/perishable_token_test.rb +90 -0
  82. data/test/acts_as_authentic_test/persistence_token_test.rb +55 -0
  83. data/test/acts_as_authentic_test/restful_authentication_test.rb +40 -0
  84. data/test/acts_as_authentic_test/session_maintenance_test.rb +84 -0
  85. data/test/acts_as_authentic_test/single_access_test.rb +44 -0
  86. data/test/authenticates_many_test.rb +16 -0
  87. data/test/crypto_provider_test/aes256_test.rb +14 -0
  88. data/test/crypto_provider_test/bcrypt_test.rb +14 -0
  89. data/test/crypto_provider_test/sha1_test.rb +23 -0
  90. data/test/crypto_provider_test/sha256_test.rb +14 -0
  91. data/test/crypto_provider_test/sha512_test.rb +14 -0
  92. data/test/fixtures/companies.yml +5 -0
  93. data/test/fixtures/employees.yml +17 -0
  94. data/test/fixtures/projects.yml +3 -0
  95. data/test/fixtures/users.yml +24 -0
  96. data/test/i18n_test.rb +33 -0
  97. data/test/libs/affiliate.rb +7 -0
  98. data/test/libs/company.rb +6 -0
  99. data/test/libs/employee.rb +7 -0
  100. data/test/libs/employee_session.rb +2 -0
  101. data/test/libs/ldaper.rb +3 -0
  102. data/test/libs/ordered_hash.rb +9 -0
  103. data/test/libs/project.rb +3 -0
  104. data/test/libs/user.rb +5 -0
  105. data/test/libs/user_session.rb +6 -0
  106. data/test/random_test.rb +42 -0
  107. data/test/session_test/activation_test.rb +43 -0
  108. data/test/session_test/active_record_trickery_test.rb +46 -0
  109. data/test/session_test/brute_force_protection_test.rb +101 -0
  110. data/test/session_test/callbacks_test.rb +6 -0
  111. data/test/session_test/cookies_test.rb +136 -0
  112. data/test/session_test/credentials_test.rb +0 -0
  113. data/test/session_test/existence_test.rb +64 -0
  114. data/test/session_test/http_auth_test.rb +56 -0
  115. data/test/session_test/id_test.rb +17 -0
  116. data/test/session_test/klass_test.rb +40 -0
  117. data/test/session_test/magic_columns_test.rb +62 -0
  118. data/test/session_test/magic_states_test.rb +60 -0
  119. data/test/session_test/params_test.rb +53 -0
  120. data/test/session_test/password_test.rb +106 -0
  121. data/test/session_test/perishability_test.rb +15 -0
  122. data/test/session_test/persistence_test.rb +21 -0
  123. data/test/session_test/scopes_test.rb +60 -0
  124. data/test/session_test/session_test.rb +59 -0
  125. data/test/session_test/timeout_test.rb +52 -0
  126. data/test/session_test/unauthorized_record_test.rb +13 -0
  127. data/test/session_test/validation_test.rb +23 -0
  128. data/test/test_helper.rb +168 -0
  129. metadata +224 -0
data/Gemfile ADDED
@@ -0,0 +1,10 @@
1
+ source :rubygems
2
+
3
+ gem 'activerecord', '>= 3.0.7'
4
+
5
+ group :test do
6
+ # gem 'bcrypt-ruby'
7
+ gem 'jeweler'
8
+ # gem 'ruby-debug19'
9
+ # gem 'sqlite3'
10
+ end
data/Gemfile.lock ADDED
@@ -0,0 +1,30 @@
1
+ GEM
2
+ remote: http://rubygems.org/
3
+ specs:
4
+ activemodel (3.0.9)
5
+ activesupport (= 3.0.9)
6
+ builder (~> 2.1.2)
7
+ i18n (~> 0.5.0)
8
+ activerecord (3.0.9)
9
+ activemodel (= 3.0.9)
10
+ activesupport (= 3.0.9)
11
+ arel (~> 2.0.10)
12
+ tzinfo (~> 0.3.23)
13
+ activesupport (3.0.9)
14
+ arel (2.0.10)
15
+ builder (2.1.2)
16
+ git (1.2.5)
17
+ i18n (0.5.0)
18
+ jeweler (1.6.2)
19
+ bundler (~> 1.0)
20
+ git (>= 1.2.5)
21
+ rake
22
+ rake (0.9.2)
23
+ tzinfo (0.3.29)
24
+
25
+ PLATFORMS
26
+ ruby
27
+
28
+ DEPENDENCIES
29
+ activerecord (>= 3.0.7)
30
+ jeweler
data/LICENSE ADDED
@@ -0,0 +1,20 @@
1
+ Copyright (c) 2011 Ben Johnson of Binary Logic
2
+
3
+ Permission is hereby granted, free of charge, to any person obtaining
4
+ a copy of this software and associated documentation files (the
5
+ "Software"), to deal in the Software without restriction, including
6
+ without limitation the rights to use, copy, modify, merge, publish,
7
+ distribute, sublicense, and/or sell copies of the Software, and to
8
+ permit persons to whom the Software is furnished to do so, subject to
9
+ the following conditions:
10
+
11
+ The above copyright notice and this permission notice shall be
12
+ included in all copies or substantial portions of the Software.
13
+
14
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
15
+ EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
16
+ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
17
+ NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
18
+ LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
19
+ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
20
+ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
data/README.rdoc ADDED
@@ -0,0 +1,253 @@
1
+ = Authlogic
2
+ This is hacked ersion of authlogic gem, that containd changes for better mongoid integration.
3
+
4
+ = Below is original README of Authlogic
5
+
6
+ ** Please note the latest version is compatible with rails 3 only. Rails 2 should use version 2.X.X **
7
+
8
+ Authlogic is a clean, simple, and unobtrusive ruby authentication solution.
9
+
10
+ A code example can replace a thousand words...
11
+
12
+ Authlogic introduces a new type of model. You can have as many as you want, and name them whatever you want, just like your other models. In this example, we want to authenticate with the User model, which is inferred by the name:
13
+
14
+ class UserSession < Authlogic::Session::Base
15
+ # specify configuration here, such as:
16
+ # logout_on_timeout true
17
+ # ...many more options in the documentation
18
+ end
19
+
20
+ Log in with any of the following. Create a UserSessionsController and use it just like your other models:
21
+
22
+ UserSession.create(:login => "bjohnson", :password => "my password", :remember_me => true)
23
+ session = UserSession.new(:login => "bjohnson", :password => "my password", :remember_me => true); session.save
24
+ UserSession.create(:openid_identifier => "identifier", :remember_me => true) # requires the authlogic-oid "add on" gem
25
+ UserSession.create(my_user_object, true) # skip authentication and log the user in directly, the true means "remember me"
26
+
27
+ The above handles the entire authentication process for you. It first authenticates, then it sets up the proper session values and cookies to persist the session. Just like you would if you rolled your own authentication solution.
28
+
29
+ You can also log out / destroy the session:
30
+
31
+ session.destroy
32
+
33
+ After a session has been created, you can persist it across requests. Thus keeping the user logged in:
34
+
35
+ session = UserSession.find
36
+
37
+ To get all of the nice authentication functionality in your model just do this:
38
+
39
+ class User < ActiveRecord::Base
40
+ acts_as_authentic do |c|
41
+ c.my_config_option = my_value
42
+ end # the configuration block is optional
43
+ end
44
+
45
+ This handles validations, etc. It is also "smart" in the sense that it if a login field is present it will use that to authenticate, if not it will look for an email field, etc. This is all configurable, but for 99% of cases that above is all you will need to do.
46
+
47
+ Also, sessions are automatically maintained. You can switch this on and off with configuration, but the following will automatically log a user in after a successful registration:
48
+
49
+ User.create(params[:user])
50
+
51
+ This also updates the session when the user changes his/her password.
52
+
53
+ Authlogic is very flexible, it has a strong public API and a plethora of hooks to allow you to modify behavior and extend it. Check out the helpful links below to dig deeper.
54
+
55
+ == Helpful links
56
+
57
+ * <b>Documentation:</b> http://rdoc.info/projects/binarylogic/authlogic
58
+ * <b>Repository:</b> http://github.com/binarylogic/authlogic/tree/master
59
+ * <b>Railscasts Screencast:</b> http://railscasts.com/episodes/160-authlogic
60
+ * <b>Live example with OpenID "add on":</b> http://authlogicexample.binarylogic.com
61
+ * <b>Live example repository with tutorial in README:</b> http://github.com/binarylogic/authlogic_example/tree/master
62
+ * <b>Tutorial: Reset passwords with Authlogic the RESTful way:</b> http://www.binarylogic.com/2008/11/16/tutorial-reset-passwords-with-authlogic
63
+ * <b>Issues:</b> http://github.com/binarylogic/authlogic/issues
64
+ * <b>Google group:</b> http://groups.google.com/group/authlogic
65
+
66
+ <b>Before contacting me directly, please read:</b>
67
+
68
+ If you find a bug or a problem please post it in the issues section. If you need help with something, please use google groups. I check both regularly and get emails when anything happens, so that is the best place to get help. This also benefits other people in the future with the same questions / problems. Thank you.
69
+
70
+ == Authlogic "add ons"
71
+
72
+ * <b>Authlogic OpenID addon:</b> http://github.com/binarylogic/authlogic_openid
73
+ * <b>Authlogic LDAP addon:</b> http://github.com/binarylogic/authlogic_ldap
74
+ * <b>Authlogic Facebook Connect:</b> http://github.com/kalasjocke/authlogic_facebook_connect
75
+ * <b>Authlogic Facebook Connect (New JS API):</b> http://github.com/studybyte/authlogic_facebook_connect
76
+ * <b>Authlogic Facebook Shim</b> http://github.com/james2m/authlogic_facebook_shim
77
+ * <b>Authlogic OAuth (Twitter):</b> http://github.com/jrallison/authlogic_oauth
78
+ * <b>Authlogic Oauth and OpenID:</b> http://github.com/viatropos/authlogic-connect
79
+ * <b>Authlogic PAM:</b> http://github.com/nbudin/authlogic_pam
80
+ * <b>Authlogic x509:</b> http://github.com/auth-scc/authlogic_x509
81
+
82
+ If you create one of your own, please let me know about it so I can add it to this list. Or just fork the project, add your link, and send me a pull request.
83
+
84
+ == Session bugs (please read if you are having issues with logging in / out)
85
+
86
+ Apparently there is a bug with apache / passenger for v2.1.X with sessions not working properly. This is most likely your problem if you are having trouble logging in / out. This is *not* an Authlogic issue. This can be solved by updating passener or using an alternative session store solution, such as active record store.
87
+
88
+ == Documentation explanation
89
+
90
+ You can find anything you want about Authlogic in the {documentation}[http://rdoc.info/projects/binarylogic/authlogic], all that you need to do is understand the basic design behind it.
91
+
92
+ That being said, there are 2 models involved during authentication. Your Authlogic model and your ActiveRecord model:
93
+
94
+ 1. <b>Authlogic::Session</b>, your session models that extend Authlogic::Session::Base.
95
+ 2. <b>Authlogic::ActsAsAuthentic</b>, which adds in functionality to your ActiveRecord model when you call acts_as_authentic.
96
+
97
+ Each of the above has its various sub modules that contain common logic. The sub modules are responsible for including *everything* related to it: configuration, class methods, instance methods, etc.
98
+
99
+ For example, if you want to timeout users after a certain period of inactivity, you would look in <b>Authlogic::Session::Timeout</b>. To help you out, I listed the following publicly relevant modules with short descriptions. For the sake of brevity, there are more modules than listed here, the ones not listed are more for internal use, but you can easily read up on them in the {documentation}[http://rdoc.info/projects/binarylogic/authlogic].
100
+
101
+ === Authlogic::ActsAsAuthentic sub modules
102
+
103
+ These modules are for the ActiveRecord side of things, the models that call acts_as_authentic.
104
+
105
+ * <b>Authlogic::ActsAsAuthentic::Base</b> - Provides the acts_as_authentic class method and includes all of the submodules.
106
+ * <b>Authlogic::ActsAsAuthentic::Email</b> - Handles everything related to the email field.
107
+ * <b>Authlogic::ActsAsAuthentic::LoggedInStatus</b> - Provides handy named scopes and methods for determining if the user is logged in or out.
108
+ * <b>Authlogic::ActsAsAuthentic::Login</b> - Handles everything related to the login field.
109
+ * <b>Authlogic::ActsAsAuthentic::MagicColumns</b> - Handles everything related to the "magic" fields: login_count, failed_login_count, last_request_at, etc.
110
+ * <b>Authlogic::ActsAsAuthentic::Password</b> - This one is important. It handles encrypting your password, salting it, etc. It also has support for transitioning password algorithms.
111
+ * <b>Authlogic::ActsAsAuthentic::PerishableToken</b> - Handles maintaining the perishable token field, also provides a class level method for finding record using the token.
112
+ * <b>Authlogic::ActsAsAuthentic::PersistenceToken</b> - Handles maintaining the persistence token. This is the token stored in cookies and sessions to persist the users session.
113
+ * <b>Authlogic::ActsAsAuthentic::RestfulAuthentication</b> - Provides configuration options to easily migrate from the restful_authentication plugin.
114
+ * <b>Authlogic::ActsAsAuthentic::SessionMaintenance</b> - Handles automatic session maintenance. EX: a new user registers, automatically log them in. Or a user changes their password, update their session.
115
+ * <b>Authlogic::ActsAsAuthentic::SingleAccessToken</b> - Handles maintaining the single access token.
116
+ * <b>Authlogic::ActsAsAuthentic::ValidationsScope</b> - Allows you to scope all validations, etc. Just like the :scope option for validates_uniqueness_of
117
+
118
+ === Authlogic::Session sub modules
119
+
120
+ These modules are for the models that extend Authlogic::Session::Base.
121
+
122
+ * <b>Authlogic::Session::BruteForceProtection</b> - Disables accounts after a certain number of consecutive failed logins attempted.
123
+ * <b>Authlogic::Session::Callbacks</b> - Your tools to extend, change, or add onto Authlogic. Lets you hook in and do just about anything you want. Start here if you want to write a plugin or add-on for Authlogic
124
+ * <b>Authlogic::Session::Cookies</b> - Authentication via cookies.
125
+ * <b>Authlogic::Session::Existence</b> - Creating, saving, and destroying objects.
126
+ * <b>Authlogic::Session::HttpAuth</b> - Authentication via basic HTTP authentication.
127
+ * <b>Authlogic::Session::Id</b> - Allows sessions to be separated by an id, letting you have multiple sessions for a single user.
128
+ * <b>Authlogic::Session::MagicColumns</b> - Maintains "magic" database columns, similar to created_at and updated_at for ActiveRecord.
129
+ * <b>Authlogic::Session::MagicStates</b> - Automatically validates based on the records states: active?, approved?, and confirmed?. If those methods exist for the record.
130
+ * <b>Authlogic::Session::Params</b> - Authentication via params, aka single access token.
131
+ * <b>Authlogic::Session::Password</b> - Authentication via a traditional username and password.
132
+ * <b>Authlogic::Session::Persistence</b> - Persisting sessions / finding sessions.
133
+ * <b>Authlogic::Session::Session</b> - Authentication via the session, the controller session that is.
134
+ * <b>Authlogic::Session::Timeout</b> - Automatically logging out after a certain period of inactivity.
135
+ * <b>Authlogic::Session::UnauthorizedRecord</b> - Handles authentication by passing an ActiveRecord object directly.
136
+ * <b>Authlogic::Session::Validation</b> - Validation / errors.
137
+
138
+ === Miscellaneous modules
139
+
140
+ Miscellaneous modules that shared across the authentication process and are more "utility" modules and classes.
141
+
142
+ * <b>Authlogic::AuthenticatesMany</b> - Responsible for allowing you to scope sessions to a parent record. Similar to a has_many and belongs_to relationship. This lets you do the same thing with sessions.
143
+ * <b>Authlogic::CryptoProviders</b> - Contains various encryption algorithms that Authlogic uses, allowing you to choose your encryption method.
144
+ * <b>Authlogic::I18n</b> - Acts JUST LIKE the rails I18n library, and provides internationalization to Authlogic.
145
+ * <b>Authlogic::Random</b> - A simple class to generate random tokens.
146
+ * <b>Authlogic::Regex</b> - Contains regular expressions used in Authlogic. Such as those to validate the format of the log or email.
147
+ * <b>Authlogic::TestCase</b> - Various helper methods for testing frameworks to help you test your code.
148
+ * <b>Authlogic::Version</b> - A handy class for determine the version of Authlogic in a number of ways.
149
+
150
+ == Quick Rails example
151
+
152
+ What if creating sessions worked like an ORM library on the surface...
153
+
154
+ UserSession.create(params[:user_session])
155
+
156
+ What if your user sessions controller could look just like your other controllers...
157
+
158
+ class UserSessionsController < ApplicationController
159
+ def new
160
+ @user_session = UserSession.new
161
+ end
162
+
163
+ def create
164
+ @user_session = UserSession.new(params[:user_session])
165
+ if @user_session.save
166
+ redirect_to account_url
167
+ else
168
+ render :action => :new
169
+ end
170
+ end
171
+
172
+ def destroy
173
+ current_user_session.destroy
174
+ redirect_to new_user_session_url
175
+ end
176
+ end
177
+
178
+ As you can see, this fits nicely into the RESTful development pattern. What about the view...
179
+
180
+ <% form_for @user_session do |f| %>
181
+ <%= f.error_messages %>
182
+ <%= f.label :login %><br />
183
+ <%= f.text_field :login %><br />
184
+ <br />
185
+ <%= f.label :password %><br />
186
+ <%= f.password_field :password %><br />
187
+ <br />
188
+ <%= f.submit "Login" %>
189
+ <% end %>
190
+
191
+ Or how about persisting the session...
192
+
193
+ class ApplicationController
194
+ helper_method :current_user_session, :current_user
195
+
196
+ private
197
+ def current_user_session
198
+ return @current_user_session if defined?(@current_user_session)
199
+ @current_user_session = UserSession.find
200
+ end
201
+
202
+ def current_user
203
+ return @current_user if defined?(@current_user)
204
+ @current_user = current_user_session && current_user_session.user
205
+ end
206
+ end
207
+
208
+ == Install & Use
209
+
210
+ Install the gem / plugin (recommended)
211
+
212
+ Rails 3:
213
+
214
+ $ sudo gem install authlogic
215
+
216
+ Rails 2:
217
+
218
+ $ sudo gem install authlogic --version=2.1.6
219
+
220
+ Or install as a plugin:
221
+
222
+ script/plugin install git://github.com/binarylogic/authlogic.git
223
+
224
+ == Detailed Setup Tutorial
225
+
226
+ See the {authlogic example}[http://github.com/binarylogic/authlogic_example/tree/master] for a detailed setup tutorial. I did this because not only do you have a tutorial to go by, but you have an example app that uses the same tutorial, so you can play around with with the code. If you have problems you can compare the code to see what you are doing differently.
227
+
228
+ == Testing
229
+
230
+ I think one of the best aspects of Authlogic is testing. For one, it cuts out <b>a lot</b> of redundant tests in your applications because Authlogic is already thoroughly tested for you. It doesn't include a bunch of tests into your application, because it comes tested, just like any other library.
231
+
232
+ For example, think about ActiveRecord. You don't test the internals of ActiveRecord, because the creators of ActiveRecord have already tested the internals for you. It wouldn't make sense for ActiveRecord to copy it's hundreds of tests into your applications. The same concept applies to Authlogic. You only need to test code you write that is specific to your application, just like everything else in your application.
233
+
234
+ That being said, testing your code that uses Authlogic is easy. Since everyone uses different testing suites, I created a helpful module called Authlogic::TestCase, which is basically a set of tools for testing code using Authlogic. I explain testing Authlogic thoroughly in the {Authlogic::TestCase section of the documentation}[http://rdoc.info/rdoc/binarylogic/authlogic/blob/f2f6988d3b97e11770b00b72a7a9733df69ffa5b/Authlogic/TestCase.html]. It should answer any questions you have in regards to testing Authlogic.
235
+
236
+ == Tell me quickly how Authlogic works
237
+
238
+ Interested in how all of this all works? Think about an ActiveRecord model. A database connection must be established before you can use it. In the case of Authlogic, a controller connection must be established before you can use it. It uses that controller connection to modify cookies, the current session, login with HTTP basic, etc. It connects to the controller through a before filter that is automatically set in your controller which lets Authlogic know about the current controller object. Then Authlogic leverages that to do everything, it's a pretty simple design. Nothing crazy going on, Authlogic is just leveraging the tools your framework provides in the controller object.
239
+
240
+ == What sets Authlogic apart and why I created it
241
+
242
+ What inspired me to create Authlogic was the messiness of the current authentication solutions. Put simply, they just didn't feel right, because the logic was not organized properly. As you may know, a common misconception with the MVC design pattern is that the model "M" is only for data access logic, which is wrong. A model is a place for domain logic. This is why the RESTful design pattern and the current authentication solutions don't play nice. Authlogic solves this by placing the session maintenance logic into its own domain (aka "model"). Moving session maintenance into its own domain has its benefits:
243
+
244
+ 1. <b>It's cleaner.</b> There are no generators in Authlogic. Authlogic provides a class that you can use, it's plain and simple ruby. More importantly, the code in your app is code you write, written the way you want, nice and clean. It's code that should be in your app and is specific to your app, not a redundant authentication pattern.
245
+ 2. <b>Easier to stay up-to-date.</b> To make my point, take a look at the commits to any other authentication solution, then look at the {commits for authlogic}[http://github.com/binarylogic/authlogic/commits/master]. How many commits could you easily start using if you already had an app using that solution? With an alternate solution, very few, if any. All of those cool new features and bug fixes are going to have be manually added or wait for your next application. Which is the main reason a generator is not suitable as an authentication solution. With Authlogic you can start using the latest code with a simple update of a gem. No generators, no mess.
246
+ 3. <b>It ties everything together on the domain level.</b> Take a new user registration for example, no reason to manually log the user in, authlogic handles this for you via callbacks. The same applies to a user changing their password. Authlogic handles maintaining the session for you.
247
+ 4. <b>No redundant tests.</b> Because Authlogic doesn't use generators, #1 also applies to tests. Authlogic is *thoroughly* tested for you. You don't go and test the internals of ActiveRecord in each of your apps do you? So why do the same for Authlogic? Your application tests should be for application specific code. Get rid of the noise and make your tests focused and concise, no reason to copy tests from app to app.
248
+ 5. <b>Framework agnostic</b>. Authlogic can be used in *any* ruby framework you want: Rails, Merb, Sinatra, Mack, your own framework, whatever. It's not tied down to Rails. It does this by abstracting itself from these framework's controllers by using a controller adapter. Thanks to {Rack}[http://rack.rubyforge.org/], there is a defined standard for controller structure, and that's what Authlogic's abstract adapter follows. So if your controller follows the rack standards, you don't need to do anything. Any place it deviates from this is solved by a simple adapter for your framework that closes these gaps. For an example, checkout the Authlogic::ControllerAdapters::MerbAdapter.
249
+ 5. <b>You are not restricted to a single session.</b> Think about Apple's me.com, where they need you to authenticate a second time before changing your billing information. Why not just create a second session for this? It works just like your initial session. Then your billing controller can require an "ultra secure" session.
250
+ 6. <b>Easily extendable.</b> One of the distinct advantages of using a library is the ability to use its API, assuming it has one. Authlogic has an *excellent* public API, meaning it can easily be extended and grow beyond the core library. Checkout the "add ons" list above to see what I mean.
251
+
252
+
253
+ Copyright (c) 2009 {Ben Johnson of Binary Logic}[http://www.binarylogic.com], released under the MIT license
data/Rakefile ADDED
@@ -0,0 +1,42 @@
1
+ require 'rubygems'
2
+ require 'rake'
3
+ require 'bundler'
4
+
5
+ Bundler.setup
6
+
7
+ begin
8
+ require 'jeweler'
9
+ Jeweler::Tasks.new do |gem|
10
+ gem.name = "antlypls-authlogic"
11
+ gem.summary = "Hacked version of binarylogic/authlogic for mongoid support"
12
+ gem.email = "antlypls@gmail.com"
13
+ gem.homepage = "https://github.com/antlypls/authlogic"
14
+ gem.authors = ["antlypls"]
15
+ gem.add_bundler_dependencies
16
+ end
17
+ Jeweler::GemcutterTasks.new
18
+ rescue LoadError
19
+ puts "Jeweler (or a dependency) not available. Install it with: sudo gem install jeweler"
20
+ end
21
+
22
+ #require 'rake/testtask'
23
+ #Rake::TestTask.new(:test) do |test|
24
+ # test.libs << 'test'
25
+ # test.pattern = 'test/**/*_test.rb'
26
+ # test.verbose = true
27
+ #end
28
+ #
29
+ #begin
30
+ # require 'rcov/rcovtask'
31
+ # Rcov::RcovTask.new do |test|
32
+ # test.libs << 'test'
33
+ # test.pattern = 'test/**/*_test.rb'
34
+ # test.verbose = true
35
+ # end
36
+ #rescue LoadError
37
+ # task :rcov do
38
+ # abort "RCov is not available. In order to run rcov, you must: sudo gem install spicycode-rcov"
39
+ # end
40
+ #end
41
+ #
42
+ #task :default => :test
data/VERSION.yml ADDED
@@ -0,0 +1,5 @@
1
+ ---
2
+ :major: 3
3
+ :minor: 0
4
+ :patch: 3
5
+ :build:
data/authlogic.gemspec ADDED
@@ -0,0 +1,220 @@
1
+ # Generated by jeweler
2
+ # DO NOT EDIT THIS FILE DIRECTLY
3
+ # Instead, edit Jeweler::Tasks in Rakefile, and run 'rake gemspec'
4
+ # -*- encoding: utf-8 -*-
5
+
6
+ Gem::Specification.new do |s|
7
+ s.name = %q{authlogic}
8
+ s.version = "3.0.3"
9
+
10
+ s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
11
+ s.authors = ["Ben Johnson of Binary Logic"]
12
+ s.date = %q{2011-05-17}
13
+ s.email = %q{bjohnson@binarylogic.com}
14
+ s.extra_rdoc_files = [
15
+ "LICENSE",
16
+ "README.rdoc"
17
+ ]
18
+ s.files = [
19
+ "Gemfile",
20
+ "Gemfile.lock",
21
+ "LICENSE",
22
+ "README.rdoc",
23
+ "Rakefile",
24
+ "VERSION.yml",
25
+ "authlogic.gemspec",
26
+ "generators/session/session_generator.rb",
27
+ "generators/session/templates/session.rb",
28
+ "init.rb",
29
+ "lib/authlogic.rb",
30
+ "lib/authlogic/acts_as_authentic/base.rb",
31
+ "lib/authlogic/acts_as_authentic/email.rb",
32
+ "lib/authlogic/acts_as_authentic/logged_in_status.rb",
33
+ "lib/authlogic/acts_as_authentic/login.rb",
34
+ "lib/authlogic/acts_as_authentic/magic_columns.rb",
35
+ "lib/authlogic/acts_as_authentic/password.rb",
36
+ "lib/authlogic/acts_as_authentic/perishable_token.rb",
37
+ "lib/authlogic/acts_as_authentic/persistence_token.rb",
38
+ "lib/authlogic/acts_as_authentic/restful_authentication.rb",
39
+ "lib/authlogic/acts_as_authentic/session_maintenance.rb",
40
+ "lib/authlogic/acts_as_authentic/single_access_token.rb",
41
+ "lib/authlogic/acts_as_authentic/validations_scope.rb",
42
+ "lib/authlogic/authenticates_many/association.rb",
43
+ "lib/authlogic/authenticates_many/base.rb",
44
+ "lib/authlogic/controller_adapters/abstract_adapter.rb",
45
+ "lib/authlogic/controller_adapters/merb_adapter.rb",
46
+ "lib/authlogic/controller_adapters/rails_adapter.rb",
47
+ "lib/authlogic/controller_adapters/sinatra_adapter.rb",
48
+ "lib/authlogic/crypto_providers/aes256.rb",
49
+ "lib/authlogic/crypto_providers/bcrypt.rb",
50
+ "lib/authlogic/crypto_providers/md5.rb",
51
+ "lib/authlogic/crypto_providers/sha1.rb",
52
+ "lib/authlogic/crypto_providers/sha256.rb",
53
+ "lib/authlogic/crypto_providers/sha512.rb",
54
+ "lib/authlogic/crypto_providers/wordpress.rb",
55
+ "lib/authlogic/i18n.rb",
56
+ "lib/authlogic/i18n/translator.rb",
57
+ "lib/authlogic/random.rb",
58
+ "lib/authlogic/regex.rb",
59
+ "lib/authlogic/session/activation.rb",
60
+ "lib/authlogic/session/active_record_trickery.rb",
61
+ "lib/authlogic/session/base.rb",
62
+ "lib/authlogic/session/brute_force_protection.rb",
63
+ "lib/authlogic/session/callbacks.rb",
64
+ "lib/authlogic/session/cookies.rb",
65
+ "lib/authlogic/session/existence.rb",
66
+ "lib/authlogic/session/foundation.rb",
67
+ "lib/authlogic/session/http_auth.rb",
68
+ "lib/authlogic/session/id.rb",
69
+ "lib/authlogic/session/klass.rb",
70
+ "lib/authlogic/session/magic_columns.rb",
71
+ "lib/authlogic/session/magic_states.rb",
72
+ "lib/authlogic/session/params.rb",
73
+ "lib/authlogic/session/password.rb",
74
+ "lib/authlogic/session/perishable_token.rb",
75
+ "lib/authlogic/session/persistence.rb",
76
+ "lib/authlogic/session/priority_record.rb",
77
+ "lib/authlogic/session/scopes.rb",
78
+ "lib/authlogic/session/session.rb",
79
+ "lib/authlogic/session/timeout.rb",
80
+ "lib/authlogic/session/unauthorized_record.rb",
81
+ "lib/authlogic/session/validation.rb",
82
+ "lib/authlogic/test_case.rb",
83
+ "lib/authlogic/test_case/mock_controller.rb",
84
+ "lib/authlogic/test_case/mock_cookie_jar.rb",
85
+ "lib/authlogic/test_case/mock_logger.rb",
86
+ "lib/authlogic/test_case/mock_request.rb",
87
+ "lib/authlogic/test_case/rails_request_adapter.rb",
88
+ "lib/generators/authlogic/USAGE",
89
+ "lib/generators/authlogic/session_generator.rb",
90
+ "lib/generators/authlogic/templates/session.rb",
91
+ "rails/init.rb",
92
+ "shoulda_macros/authlogic.rb",
93
+ "test/acts_as_authentic_test/base_test.rb",
94
+ "test/acts_as_authentic_test/email_test.rb",
95
+ "test/acts_as_authentic_test/logged_in_status_test.rb",
96
+ "test/acts_as_authentic_test/login_test.rb",
97
+ "test/acts_as_authentic_test/magic_columns_test.rb",
98
+ "test/acts_as_authentic_test/password_test.rb",
99
+ "test/acts_as_authentic_test/perishable_token_test.rb",
100
+ "test/acts_as_authentic_test/persistence_token_test.rb",
101
+ "test/acts_as_authentic_test/restful_authentication_test.rb",
102
+ "test/acts_as_authentic_test/session_maintenance_test.rb",
103
+ "test/acts_as_authentic_test/single_access_test.rb",
104
+ "test/authenticates_many_test.rb",
105
+ "test/crypto_provider_test/aes256_test.rb",
106
+ "test/crypto_provider_test/bcrypt_test.rb",
107
+ "test/crypto_provider_test/sha1_test.rb",
108
+ "test/crypto_provider_test/sha256_test.rb",
109
+ "test/crypto_provider_test/sha512_test.rb",
110
+ "test/fixtures/companies.yml",
111
+ "test/fixtures/employees.yml",
112
+ "test/fixtures/projects.yml",
113
+ "test/fixtures/users.yml",
114
+ "test/i18n_test.rb",
115
+ "test/libs/affiliate.rb",
116
+ "test/libs/company.rb",
117
+ "test/libs/employee.rb",
118
+ "test/libs/employee_session.rb",
119
+ "test/libs/ldaper.rb",
120
+ "test/libs/ordered_hash.rb",
121
+ "test/libs/project.rb",
122
+ "test/libs/user.rb",
123
+ "test/libs/user_session.rb",
124
+ "test/random_test.rb",
125
+ "test/session_test/activation_test.rb",
126
+ "test/session_test/active_record_trickery_test.rb",
127
+ "test/session_test/brute_force_protection_test.rb",
128
+ "test/session_test/callbacks_test.rb",
129
+ "test/session_test/cookies_test.rb",
130
+ "test/session_test/credentials_test.rb",
131
+ "test/session_test/existence_test.rb",
132
+ "test/session_test/http_auth_test.rb",
133
+ "test/session_test/id_test.rb",
134
+ "test/session_test/klass_test.rb",
135
+ "test/session_test/magic_columns_test.rb",
136
+ "test/session_test/magic_states_test.rb",
137
+ "test/session_test/params_test.rb",
138
+ "test/session_test/password_test.rb",
139
+ "test/session_test/perishability_test.rb",
140
+ "test/session_test/persistence_test.rb",
141
+ "test/session_test/scopes_test.rb",
142
+ "test/session_test/session_test.rb",
143
+ "test/session_test/timeout_test.rb",
144
+ "test/session_test/unauthorized_record_test.rb",
145
+ "test/session_test/validation_test.rb",
146
+ "test/test_helper.rb"
147
+ ]
148
+ s.homepage = %q{http://github.com/binarylogic/authlogic}
149
+ s.require_paths = ["lib"]
150
+ s.rubygems_version = %q{1.5.2}
151
+ s.summary = %q{A clean, simple, and unobtrusive ruby authentication solution.}
152
+ s.test_files = [
153
+ "test/acts_as_authentic_test/base_test.rb",
154
+ "test/acts_as_authentic_test/email_test.rb",
155
+ "test/acts_as_authentic_test/logged_in_status_test.rb",
156
+ "test/acts_as_authentic_test/login_test.rb",
157
+ "test/acts_as_authentic_test/magic_columns_test.rb",
158
+ "test/acts_as_authentic_test/password_test.rb",
159
+ "test/acts_as_authentic_test/perishable_token_test.rb",
160
+ "test/acts_as_authentic_test/persistence_token_test.rb",
161
+ "test/acts_as_authentic_test/restful_authentication_test.rb",
162
+ "test/acts_as_authentic_test/session_maintenance_test.rb",
163
+ "test/acts_as_authentic_test/single_access_test.rb",
164
+ "test/authenticates_many_test.rb",
165
+ "test/crypto_provider_test/aes256_test.rb",
166
+ "test/crypto_provider_test/bcrypt_test.rb",
167
+ "test/crypto_provider_test/sha1_test.rb",
168
+ "test/crypto_provider_test/sha256_test.rb",
169
+ "test/crypto_provider_test/sha512_test.rb",
170
+ "test/i18n_test.rb",
171
+ "test/libs/affiliate.rb",
172
+ "test/libs/company.rb",
173
+ "test/libs/employee.rb",
174
+ "test/libs/employee_session.rb",
175
+ "test/libs/ldaper.rb",
176
+ "test/libs/ordered_hash.rb",
177
+ "test/libs/project.rb",
178
+ "test/libs/user.rb",
179
+ "test/libs/user_session.rb",
180
+ "test/random_test.rb",
181
+ "test/session_test/activation_test.rb",
182
+ "test/session_test/active_record_trickery_test.rb",
183
+ "test/session_test/brute_force_protection_test.rb",
184
+ "test/session_test/callbacks_test.rb",
185
+ "test/session_test/cookies_test.rb",
186
+ "test/session_test/credentials_test.rb",
187
+ "test/session_test/existence_test.rb",
188
+ "test/session_test/http_auth_test.rb",
189
+ "test/session_test/id_test.rb",
190
+ "test/session_test/klass_test.rb",
191
+ "test/session_test/magic_columns_test.rb",
192
+ "test/session_test/magic_states_test.rb",
193
+ "test/session_test/params_test.rb",
194
+ "test/session_test/password_test.rb",
195
+ "test/session_test/perishability_test.rb",
196
+ "test/session_test/persistence_test.rb",
197
+ "test/session_test/scopes_test.rb",
198
+ "test/session_test/session_test.rb",
199
+ "test/session_test/timeout_test.rb",
200
+ "test/session_test/unauthorized_record_test.rb",
201
+ "test/session_test/validation_test.rb",
202
+ "test/test_helper.rb"
203
+ ]
204
+
205
+ if s.respond_to? :specification_version then
206
+ s.specification_version = 3
207
+
208
+ if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
209
+ s.add_runtime_dependency(%q<activerecord>, [">= 3.0.7"])
210
+ s.add_runtime_dependency(%q<activerecord>, [">= 3.0.7"])
211
+ else
212
+ s.add_dependency(%q<activerecord>, [">= 3.0.7"])
213
+ s.add_dependency(%q<activerecord>, [">= 3.0.7"])
214
+ end
215
+ else
216
+ s.add_dependency(%q<activerecord>, [">= 3.0.7"])
217
+ s.add_dependency(%q<activerecord>, [">= 3.0.7"])
218
+ end
219
+ end
220
+