arcadex 1.1.3 → 1.2.0

data/test/test_app/engines/people/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2014 YOURNAME
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/test/test_app/engines/people/README.md

@@ -0,0 +1 @@
+# Describe your engine here

data/test/test_app/engines/people/Rakefile

@@ -0,0 +1,34 @@
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rdoc/task'
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'People'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+APP_RAKEFILE = File.expand_path("../test/dummy/Rakefile", __FILE__)
+load 'rails/tasks/engine.rake'
+
+
+
+Bundler::GemHelper.install_tasks
+
+require 'rake/testtask'
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'lib'
+  t.libs << 'test'
+  t.pattern = 'test/**/*_test.rb'
+  t.verbose = false
+end
+
+
+task default: :test

data/test/test_app/engines/people/app/assets/javascripts/people/application.js

@@ -0,0 +1,13 @@
+// This is a manifest file that'll be compiled into application.js, which will include all the files
+// listed below.
+//
+// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
+// or vendor/assets/javascripts of plugins, if any, can be referenced here using a relative path.
+//
+// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
+// compiled file.
+//
+// Read Sprockets README (https://github.com/sstephenson/sprockets#sprockets-directives) for details
+// about supported directives.
+//
+//= require_tree .

data/test/test_app/engines/people/app/assets/javascripts/people/users.js

@@ -0,0 +1,2 @@
+// Place all the behaviors and hooks related to the matching controller here.
+// All this logic will automatically be available in application.js.

data/test/test_app/engines/people/app/assets/stylesheets/people/application.css

@@ -0,0 +1,13 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or vendor/assets/stylesheets of plugins, if any, can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the top of the
+ * compiled file, but it's generally better to create a new file per style scope.
+ *
+ *= require_self
+ *= require_tree .
+ */

data/test/test_app/engines/people/app/assets/stylesheets/people/users.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/test/test_app/engines/people/app/assets/stylesheets/scaffold.css

@@ -0,0 +1,56 @@
+body { background-color: #fff; color: #333; }
+
+body, p, ol, ul, td {
+  font-family: verdana, arial, helvetica, sans-serif;
+  font-size:   13px;
+  line-height: 18px;
+}
+
+pre {
+  background-color: #eee;
+  padding: 10px;
+  font-size: 11px;
+}
+
+a { color: #000; }
+a:visited { color: #666; }
+a:hover { color: #fff; background-color:#000; }
+
+div.field, div.actions {
+  margin-bottom: 10px;
+}
+
+#notice {
+  color: green;
+}
+
+.field_with_errors {
+  padding: 2px;
+  background-color: red;
+  display: table;
+}
+
+#error_explanation {
+  width: 450px;
+  border: 2px solid red;
+  padding: 7px;
+  padding-bottom: 0;
+  margin-bottom: 20px;
+  background-color: #f0f0f0;
+}
+
+#error_explanation h2 {
+  text-align: left;
+  font-weight: bold;
+  padding: 5px 5px 5px 15px;
+  font-size: 12px;
+  margin: -7px;
+  margin-bottom: 0px;
+  background-color: #c00;
+  color: #fff;
+}
+
+#error_explanation ul li {
+  font-size: 12px;
+  list-style: square;
+}

data/test/test_app/engines/people/app/controllers/people/api/v1/application_controller.rb

@@ -0,0 +1,5 @@
+module People
+  class Api::V1::ApplicationController < ::Api::V1::ApiController
+
+  end
+end

data/test/test_app/engines/people/app/controllers/people/api/v1/users_controller.rb

@@ -0,0 +1,169 @@
+require_dependency "people/api/v1/application_controller"
+require 'authorization'
+
+module People
+  class Api::V1::UsersController < Api::V1::ApplicationController
+    
+    skip_before_filter :authenticate_user, :only => [:register, :login]
+    
+    before_action :set_user, only: [:show, :edit, :update, :authenticate]
+    before_action :register_authorize, only: [:register]
+    before_action :login_authorize, only: [:login]
+    before_action :logout_authorize, only: [:logout]
+    before_action :index_authorize, only: [:index]
+    before_action :show_authorize, only: [:show]
+    before_action :update_authorize, only: [:update]
+
+    
+    # POST /api/1/users/register
+    def register
+      #Create a new user
+      user = ::People::V1::User.new(user_params)
+      if user.save
+        #If the user is saved, return a token
+        token = user.tokens[0]
+        ::Arcadex::Create.set_token(token,360,request,nil)
+        userHash = {id: user.id, username: user.username, email: user.email}
+        tokenHash = {auth_token: token.auth_token}
+        render :json => {user: userHash,token: tokenHash}
+      else
+        #Return an error if not saved
+        render :json => {errors: user.errors.full_messages}, status: :unprocessable_entity
+      end
+    end
+
+    # POST /api/1/users/login
+    def login
+      #Should I delete the current token or ignore it?
+      #Find user from email and password. Create and return a new token
+      user = ::People::V1::User.find_by(email: get_email)
+      if user && user.authenticate(params[:user][:password])
+        token = user.tokens.create
+        ::Arcadex::Create.set_token(token,360,request,nil)
+        userHash = {id: user.id, username: user.username, email: user.email}
+        tokenHash = {auth_token: token.auth_token}
+        render :json => {user: userHash,token: tokenHash}
+      else
+        render :json => {errors: "Email and/or Password is incorrect"}, status: :unauthorized 
+      end
+    end
+
+    # POST /api/1/users/logout
+    def logout
+      #Destroy the current token
+      token = current_token
+      token.destroy
+      render json: {}
+    end
+
+    # GET /api/1/users/login_status
+    def login_status
+      # Will give an unauthorized if not logged in
+      render json: {}
+    end
+    
+
+    # POST /api/1/users/authenticate
+    def authenticate
+      if user_authenticate_password
+        return
+      end
+      render json: {}
+    end
+
+    # GET /api/1/users
+    def index
+      @users = ::People::V1::User.all
+      render json: @users
+    end
+
+    # GET /api/1/users/1
+    def show
+      render json: @user
+    end
+
+    # PATCH/PUT /api/1/users/1
+    def update
+      if user_authenticate_password
+        return
+      end
+      if @user.update(user_params)
+        render json: @user
+      else
+        render :json => {errors: @user.errors.full_messages}, status: :unprocessable_entity
+      end
+    end
+
+    private
+      # Use callbacks to share common setup or constraints between actions.
+
+      def user_authenticate_password
+        if authenticate_password
+          render :json => {errors: "Email and/or Password is incorrect"}, status: :unauthorized 
+          return true
+        end
+        return false
+      end
+
+      def get_email
+        if !params[:user][:email].nil?
+          return params[:user][:email].downcase
+        else
+          return nil
+        end
+      end
+
+      def set_user
+        @user = ::People::V1::User.find_by_id(params[:id])
+        if @user.nil?
+          render :json => {errors: "User was not found"}, status: :not_found
+        end
+      end
+
+      # Only allow a trusted parameter "white list" through.
+
+      def user_params
+        params.require(:user).permit(:username, :email, :password, :password_confirmation)
+      end
+
+      # Authorizations below here
+
+      
+      def register_authorize
+        if !::Authorization::People::V1::User.register?
+          render :json => {errors: "User is not authorized for this action"}, status: :forbidden
+        end
+      end
+
+      def login_authorize
+        if !::Authorization::People::V1::User.login?
+          render :json => {errors: "User is not authorized for this action"}, status: :forbidden
+        end
+      end
+
+      def logout_authorize
+        if !::Authorization::People::V1::User.logout?(current_user)
+          render :json => {errors: "User is not authorized for this action"}, status: :forbidden
+        end
+      end
+      
+
+      def index_authorize
+        if !::Authorization::People::V1::User.index?(current_user)
+          render :json => {errors: "User is not authorized for this action"}, status: :forbidden
+        end
+      end
+
+      def show_authorize
+        if !::Authorization::People::V1::User.show?(@user,current_user)
+          render :json => {errors: "User is not authorized for this action"}, status: :forbidden
+        end
+      end
+
+      def update_authorize
+        if !::Authorization::People::V1::User.update?(@user,current_user)
+          render :json => {errors: "User is not authorized for this action"}, status: :forbidden
+        end  
+      end
+  end
+end

data/test/test_app/engines/people/app/controllers/people/application_controller.rb

@@ -0,0 +1,4 @@
+module People
+  class ApplicationController < ::ApplicationController
+  end
+end

data/test/test_app/engines/people/app/controllers/people/users_controller.rb

@@ -0,0 +1,62 @@
+require_dependency "people/application_controller"
+
+module People
+  class UsersController < ApplicationController
+    before_action :set_user, only: [:show, :edit, :update, :destroy]
+
+    # GET /users
+    def index
+      @users = User.all
+    end
+
+    # GET /users/1
+    def show
+    end
+
+    # GET /users/new
+    def new
+      @user = User.new
+    end
+
+    # GET /users/1/edit
+    def edit
+    end
+
+    # POST /users
+    def create
+      @user = User.new(user_params)
+
+      if @user.save
+        redirect_to @user, notice: 'User was successfully created.'
+      else
+        render action: 'new'
+      end
+    end
+
+    # PATCH/PUT /users/1
+    def update
+      if @user.update(user_params)
+        redirect_to @user, notice: 'User was successfully updated.'
+      else
+        render action: 'edit'
+      end
+    end
+
+    # DELETE /users/1
+    def destroy
+      @user.destroy
+      redirect_to users_url, notice: 'User was successfully destroyed.'
+    end
+
+    private
+      # Use callbacks to share common setup or constraints between actions.
+      def set_user
+        @user = User.find(params[:id])
+      end
+
+      # Only allow a trusted parameter "white list" through.
+      def user_params
+        params.require(:user).permit(:username, :email, :password_digest)
+      end
+  end
+end

data/test/test_app/engines/people/app/helpers/people/application_helper.rb

@@ -0,0 +1,4 @@
+module People
+  module ApplicationHelper
+  end
+end

data/test/test_app/engines/people/app/helpers/people/users_helper.rb

@@ -0,0 +1,4 @@
+module People
+  module UsersHelper
+  end
+end

data/test/test_app/engines/people/app/models/people/user.rb

@@ -0,0 +1,9 @@
+module People
+  class User < ActiveRecord::Base
+
+      def self.recent(num)
+        ::People::User.order("created_at DESC").limit(num)
+      end
+
+  end
+end

data/test/test_app/engines/people/app/models/people/v1/user.rb

@@ -0,0 +1,32 @@
+require 'type_cartographer'
+
+module People
+  class V1::User < ActiveRecord::Base
+    self.table_name = 'people_users'
+    
+    before_save { self.email = email.downcase }
+    before_save { self.username = username.downcase }
+
+  
+  	has_many :tokens, :as => :imageable, :class_name => "::Arcadex::Token"
+  
+  	has_secure_password
+
+  	after_create :setup_user
+
+    validates :username, presence: true, :uniqueness => { :case_sensitive => false }
+    #validates_format_of :username, :with => /\A[A-Za-z0-9\d]+\Z/i
+    validates :email, presence: true, :uniqueness => { :case_sensitive => false }
+    #Might need a regex for emails, or just rather confirm them
+
+  
+    def setup_user
+    	create_token
+    end
+
+    def create_token
+      self.tokens.create!
+    end
+  
+  end
+end