archangel 0.0.2

data/app/assets/javascripts/archangel/object/url.js

@@ -0,0 +1,24 @@
+(function(object) {
+  'use strict';
+
+  object.url = {
+    segment: function(collection) {
+      var url = new URL(window.location.href),
+          path = url.pathname.replace(/^\/|\/$/g, '').split('/'),
+          segment = null;
+
+      for (var p = 0; p < path.length; p++) {
+        if (path[p] === collection) {
+          segment = path[p + 1];
+
+          break;
+        }
+      }
+
+      return segment;
+    }
+  };
+
+  return object;
+
+}(Archangel || {}));

data/app/assets/javascripts/archangel/object.js

@@ -0,0 +1,25 @@
+var Archangel = (function(object) {
+  'use strict';
+
+  function mergeRecursive(obj1, obj2) {
+    for (var p in obj2) {
+      try {
+        if (obj2[p].constructor == Object) {
+          obj1[p] = mergeRecursive(obj1[p], obj2[p]);
+        } else {
+          obj1[p] = obj2[p];
+        }
+      } catch(e) {
+        obj1[p] = obj2[p];
+      }
+    }
+
+    return obj1;
+  }
+
+  object.authTokenName = window._auth_token_name;
+  object.authToken = window._auth_token;
+
+  return object;
+
+}(Archangel || {}));

data/app/assets/javascripts/archangel/sortable.js

@@ -0,0 +1,72 @@
+$(function() {
+  'use strict';
+
+  var sortableItems = document.querySelectorAll('#sortable'),
+      sortableItemCount = sortableItems.length,
+      requestObject = new XMLHttpRequest(),
+      dataSerializer = function(obj, prefix) {
+        var p,
+            str = [];
+
+        for (p in obj) {
+          if (obj.hasOwnProperty(p)) {
+            var k = prefix ? prefix + '[' + p + ']' : p,
+                v = obj[p];
+
+            str.push((v !== null && typeof v === 'object') ?
+              dataSerializer(v, k) :
+              encodeURIComponent(k) + '=' + encodeURIComponent(v));
+          }
+        }
+
+        return str.join('&');
+      };
+
+  for (var i = 0; i < sortableItemCount; i += 1) {
+    var item = sortableItems[i],
+        sortableObject,
+        onEndSortable = function () {
+          var sortOrder = sortableObject.toArray(),
+              collectionSlug = Archangel.url.segment('collections'),
+              postUrl = Archangel.route.backend.sortCollectionEntryPath(collectionSlug),
+              postData = {
+                collection_entry: {
+                  sort: sortOrder
+                }
+              };
+
+          postData[Archangel.authTokenName] = Archangel.authToken;
+
+          requestObject.open('POST', postUrl, true);
+          requestObject.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded; charset=UTF-8');
+          requestObject.onload = function (event) {
+            if (event.target.status >= 200 && event.target.status < 400) {
+              var successMsg = Archangel.translate.sortable.success;
+
+              Archangel.flash.success(successMsg);
+            } else {
+              var errorMsg = 'Request failed: ' + event.target.statusText;
+
+              Archangel.flash.error(errorMsg);
+            }
+          };
+
+          requestObject.onerror = function (event) {
+            var errorMsg = 'Request failed: ' + event.target.statusText;
+
+            Archangel.flash.error(errorMsg);
+          };
+
+          requestObject.send(dataSerializer(postData));
+        };
+
+    sortableObject = new Sortable(item, {
+      animation: 150,
+      handle: '.fa-sort',
+      draggable: 'tr',
+      ghostClass: 'sortable-ghost',
+      dragClass: 'sortable-drag',
+      onEnd: onEndSortable
+    });
+  }
+});

data/app/controllers/archangel/application_controller.rb

@@ -0,0 +1,177 @@
+# frozen_string_literal: true
+
+require "archangel/application_responder"
+
+module Archangel
+  ##
+  # Application base controller
+  #
+  class ApplicationController < ActionController::Base
+    protect_from_forgery with: :exception
+
+    include Archangel::ActionableConcern
+    include Archangel::PaginatableConcern
+    include Archangel::ThemableConcern
+
+    before_action :set_locale
+
+    respond_to :html, :json
+    responders :flash, :http_cache
+
+    helper_method :current_site
+
+    helper Archangel::FlashHelper
+
+    theme :theme_resolver
+
+    rescue_from ActionController::UnknownController,
+                AbstractController::ActionNotFound,
+                ActionView::MissingTemplate,
+                ActiveRecord::RecordNotFound, with: :render_404_error
+
+    ##
+    # Current site
+    #
+    # Response
+    #   {
+    #     "id": 123,
+    #     "name": "Site Name",
+    #     "theme": "my_theme",
+    #     "locale": "en",
+    #     "logo": {
+    #       "url": "/uploads/file.png",
+    #       "large": {
+    #         "url": "/uploads/large_file.png"
+    #       },
+    #       "medium": {
+    #         "url": "/uploads/medium_file.png"
+    #       },
+    #       "small": {
+    #         "url": "/uploads/small_file.png"
+    #       },
+    #       "tiny": {
+    #         "url": "/uploads/tiny_file.png"
+    #       }
+    #     },
+    #     "content": "</p>Content of the Widget</p>",
+    #     "template_id": 123,
+    #     "meta_keywords": "keywords,for,the,site",
+    #     "meta_description": "Description of the site",
+    #     "deleted_at": null,
+    #     "created_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+    #     "updated_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+    #   }
+    #
+    def current_site
+      @current_site ||= Archangel::Site.current
+    end
+
+    ##
+    # Error 401
+    #
+    # Render a 401 (unauthorized) error response
+    #
+    # Response
+    #   {
+    #     "status": 401,
+    #     "error": "Access is denied due to invalid credentials"
+    #   }
+    #
+    # @param exception [Object] error object
+    # @return [String] response
+    #
+    def render_401_error(exception = nil)
+      render_error("archangel/errors/error_401", :unauthorized, exception)
+    end
+
+    ##
+    # Error 404
+    #
+    # Render a 404 (not found) error response
+    #
+    # Response
+    #   {
+    #     "status": 404,
+    #     "error": "Page not found"
+    #   }
+    #
+    # @param exception [Object] error object
+    # @return [String] response
+    #
+    def render_404_error(exception = nil)
+      render_error("archangel/errors/error_404", :not_found, exception)
+    end
+
+    ##
+    # Error renderer
+    #
+    # Formats
+    #   HTML, JSON
+    #
+    # Response
+    #   {
+    #     "status": XYZ,
+    #     "error": "Error message"
+    #   }
+    #
+    # @param path [String] error template path
+    # @param status [String,Symbol] response status code
+    # @param _exception [Object] error object
+    # @return [String] response
+    #
+    def render_error(path, status, _exception)
+      respond_to do |format|
+        format.html { render(template: path, status: status) }
+        format.json { render(template: path, status: status, layout: false) }
+      end
+    end
+
+    protected
+
+    ##
+    # Redirect location after sign in
+    #
+    # Archangel currently only allows `admin` and `editor` roles access to sign
+    # in/out. There is no other functionality available to other user groups.
+    # Redirect to the backend. If an extension is applied to add more user
+    # groups, it will need to overwrite this method in order to redirect to the
+    # preferred location depending on the role.
+    #
+    # @param resource_or_scope [String,Symbol] resource or scope signing in
+    # @return [String] redirect to after sign in
+    #
+    def after_sign_in_path_for(resource_or_scope)
+      stored_location_for(resource_or_scope) || backend_root_path
+    end
+
+    ##
+    # Redirect location after sign out
+    #
+    # @param _resource_or_scope [String,Symbol] resource or scope signing out
+    # @return [String] redirect to after sign out
+    #
+    def after_sign_out_path_for(_resource_or_scope)
+      new_user_session_path
+    end
+
+    def theme_resolver
+      theme = current_site.theme
+
+      Archangel::THEMES.include?(theme) ? theme : Archangel::THEME_DEFAULT
+    end
+
+    def layout_from_theme
+      "frontend"
+    end
+
+    def set_locale
+      locale = session[:locale].to_s.strip.to_sym
+
+      I18n.locale = locale_for(locale)
+    end
+
+    def locale_for(locale)
+      I18n.available_locales.include?(locale) ? locale : I18n.default_locale
+    end
+  end
+end

data/app/controllers/archangel/auth/registrations_controller.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Archangel
+  ##
+  # @see Archangel::AuthController
+  #
+  module Auth
+    ##
+    # Authentication registrations controller
+    #
+    class RegistrationsController < Devise::RegistrationsController
+      before_action :allow_registration,
+                    only: %i[cancel create destroy edit new update]
+
+      protected
+
+      def allow_registration
+        return render_404_error unless Archangel.config.allow_registration
+      end
+    end
+  end
+end

data/app/controllers/archangel/auth_controller.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Archangel
+  ##
+  # Authentication base controller
+  #
+  class AuthController < ApplicationController
+    before_action :configure_permitted_parameters
+
+    protected
+
+    def layout_from_theme
+      "auth"
+    end
+
+    def configure_permitted_parameters
+      devise_parameter_sanitizer.permit(:sign_up, keys: %i[name username])
+    end
+  end
+end

data/app/controllers/archangel/backend/assets_controller.rb

@@ -0,0 +1,338 @@
+# frozen_string_literal: true
+
+module Archangel
+  ##
+  # @see Archangel::BackendController
+  #
+  module Backend
+    ##
+    # Backend assets controller
+    #
+    class AssetsController < BackendController
+      before_action :set_resources, only: %i[index]
+      before_action :set_resource, only: %i[destroy edit show update]
+      before_action :set_new_resource, only: %i[create new]
+      before_action :set_wysiwyg_resource, only: %i[wysiwyg]
+
+      ##
+      # Backend assets
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   GET /backend/assets
+      #   GET /backend/assets.json
+      #
+      # Response
+      #   [
+      #     {
+      #       "id": 123,
+      #       "site_id": 123,
+      #       "file_name": "file_name.gif",
+      #       "file": {
+      #         "url": "/uploads/file.gif",
+      #         "small": {
+      #           "url": "/uploads/small_file.gif"
+      #         },
+      #         "tiny": {
+      #           "url": "/uploads/tiny_file.gif"
+      #         }
+      #       },
+      #       "content_type": "image/gif",
+      #       "file_size": 1234,
+      #       "deleted_at": null,
+      #       "created_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #       "updated_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+      #     },
+      #     ...
+      #   ]
+      #
+      def index
+        respond_with @assets
+      end
+
+      ##
+      # Backend asset
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Params
+      #   [Integer] id - the asset id
+      #
+      # Request
+      #   GET /backend/assets/:id
+      #   GET /backend/assets/:id.json
+      #
+      # Response
+      #   {
+      #     "id": 123,
+      #     "site_id": 123,
+      #     "file_name": "file_name.gif",
+      #     "file": {
+      #       "url": "/uploads/file.gif",
+      #       "small": {
+      #         "url": "/uploads/small_file.gif"
+      #       },
+      #       "tiny": {
+      #         "url": "/uploads/tiny_file.gif"
+      #       }
+      #     },
+      #     "content_type": "image/gif",
+      #     "file_size": 1234,
+      #     "deleted_at": null,
+      #     "created_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #     "updated_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+      #   }
+      #
+      def show
+        respond_with @asset
+      end
+
+      ##
+      # New backend asset
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   GET /backend/assets/new
+      #   GET /backend/assets/new.json
+      #
+      # Response
+      #   {
+      #     "id": null,
+      #     "site_id": null,
+      #     "file_name": null,
+      #     "file": {
+      #       "url": null,
+      #       "small": {
+      #         "url": null
+      #       },
+      #       "tiny": {
+      #         "url": null
+      #       }
+      #     },
+      #     "content_type": null,
+      #     "file_size": null,
+      #     "deleted_at": null,
+      #     "created_at": null,
+      #     "updated_at": null
+      #   }
+      #
+      def new
+        respond_with @asset
+      end
+
+      ##
+      # Create backend asset
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   POST /backend/assets
+      #   POST /backend/assets.json
+      #
+      # Paramaters
+      #   {
+      #     "asset": {
+      #       "file_name": "file_name.gif",
+      #       "file": "local/path/to/new_file.gif"
+      #     }
+      #   }
+      #
+      def create
+        @asset.save
+
+        respond_with @asset, location: -> { location_after_create }
+      end
+
+      ##
+      # Edit backend asset
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Params
+      #   [Integer] id - the asset id
+      #
+      # Request
+      #   GET /backend/assets/:id/edit
+      #   GET /backend/assets/:id/edit.json
+      #
+      # Response
+      #   {
+      #     "id": 123,
+      #     "site_id": 123,
+      #     "file_name": "file_name.gif",
+      #     "file": {
+      #       "url": "/uploads/file.gif",
+      #       "small": {
+      #         "url": "/uploads/small_file.gif"
+      #       },
+      #       "tiny": {
+      #         "url": "/uploads/tiny_file.gif"
+      #       }
+      #     },
+      #     "content_type": "image/gif",
+      #     "file_size": 1234,
+      #     "deleted_at": null,
+      #     "created_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #     "updated_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+      #   }
+      #
+      def edit
+        respond_with @asset
+      end
+
+      ##
+      # Update backend asset
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Params
+      #   [Integer] id - the asset id
+      #
+      # Request
+      #   PATCH /backend/assets/:id
+      #   PATCH /backend/assets/:id.json
+      #   PUT   /backend/assets/:id
+      #   PUT   /backend/assets/:id.json
+      #
+      # Paramaters
+      #   {
+      #     "asset": {
+      #       "file_name": "file_name.gif",
+      #       "file": "local/path/to/new_file.gif"
+      #       }
+      #     }
+      #   }
+      #
+      def update
+        @asset.update(resource_params)
+
+        respond_with @asset, location: -> { location_after_update }
+      end
+
+      ##
+      # Destroy backend asset
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Params
+      #   [Integer] id - the asset id
+      #
+      # Request
+      #   DELETE /backend/assets/:id
+      #   DELETE /backend/assetsidslug.json
+      #
+      def destroy
+        @asset.destroy
+
+        respond_with @asset, location: -> { location_after_destroy }
+      end
+
+      ##
+      # Create backend asset from WYSIWYG upload
+      #
+      # Formats
+      #   JSON
+      #
+      # Request
+      #   POST /backend/wysiwyg
+      #   POST /backend/wysiwyg.json
+      #
+      # Paramaters
+      #   {
+      #     "file": "local/path/to/new_file.gif"
+      #   }
+      #
+      # Response
+      #   {
+      #     "success": true,
+      #     "url": "file_name.gif"
+      #   }
+      #
+      def wysiwyg
+        @asset.save
+
+        asset_response = {
+          success: true,
+          url: @asset.file.url
+        }
+
+        respond_to do |format|
+          format.json { render json: asset_response }
+        end
+      end
+
+      protected
+
+      def permitted_attributes
+        %w[file file_name]
+      end
+
+      def set_resources
+        @assets = current_site.assets
+                              .order(file_name: :asc)
+                              .page(page_num).per(per_page)
+
+        authorize @assets
+      end
+
+      def set_resource
+        resource_id = params.fetch(:id)
+
+        @asset = current_site.assets.find_by!(id: resource_id)
+
+        authorize @asset
+      end
+
+      def set_new_resource
+        new_params = action_name.to_sym == :create ? resource_params : nil
+
+        @asset = current_site.assets.new(new_params)
+
+        authorize @asset
+      end
+
+      def set_wysiwyg_resource
+        wysiwyg_params = params.permit(permitted_attributes).reverse_merge(
+          file_name: "#{SecureRandom.hex}.jpg"
+        )
+
+        @asset = current_site.assets.new(wysiwyg_params)
+
+        authorize @asset
+      end
+
+      def resource_params
+        params.require(resource_namespace).permit(permitted_attributes)
+      end
+
+      def resource_namespace
+        controller_name.singularize.to_sym
+      end
+
+      def location_after_create
+        location_after_save
+      end
+
+      def location_after_update
+        location_after_save
+      end
+
+      def location_after_destroy
+        location_after_save
+      end
+
+      def location_after_save
+        backend_assets_path
+      end
+    end
+  end
+end