archangel 0.0.2

data/app/controllers/archangel/backend/pages_controller.rb

@@ -0,0 +1,299 @@
+# frozen_string_literal: true
+
+module Archangel
+  ##
+  # @see Archangel::BackendController
+  #
+  module Backend
+    ##
+    # Backend pages controller
+    #
+    class PagesController < BackendController
+      before_action :set_resources, only: %i[index]
+      before_action :set_resource, only: %i[destroy edit show update]
+      before_action :set_new_resource, only: %i[create new]
+
+      ##
+      # Backend pages
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   GET /backend/pages
+      #   GET /backend/pages.json
+      #
+      # Response
+      #   [
+      #     {
+      #       "id": 123,
+      #       "site_id": 123,
+      #       "parent_id": nil,
+      #       "template_id": nil,
+      #       "title": "Page Title",
+      #       "slug": "my-page",
+      #       "path": "my-page",
+      #       "content": "</p>Content of the Page</p>",
+      #       "homepage": false,
+      #       "meta_keywords": "keywords,for,the,page",
+      #       "meta_description": "Description of the page",
+      #       "published_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #       "deleted_at": null,
+      #       "created_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #       "updated_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+      #     },
+      #     ...
+      #   ]
+      #
+      def index
+        respond_with @pages
+      end
+
+      ##
+      # Backend page
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Params
+      #   [Integer] id - the page id
+      #
+      # Request
+      #   GET /backend/pages/:id
+      #   GET /backend/pages/:id.json
+      #
+      # Response
+      #   {
+      #     "id": 123,
+      #     "site_id": 123,
+      #     "parent_id": nil,
+      #     "template_id": nil,
+      #     "title": "Page Title",
+      #     "slug": "my-page",
+      #     "path": "my-page",
+      #     "content": "</p>Content of the Page</p>",
+      #     "homepage": false,
+      #     "meta_keywords": "keywords,for,the,page",
+      #     "meta_description": "Description of the page",
+      #     "published_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #     "deleted_at": null,
+      #     "created_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #     "updated_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+      #   }
+      #
+      def show
+        respond_with @page
+      end
+
+      ##
+      # New backend page
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   GET /backend/pages/new
+      #   GET /backend/pages/new.json
+      #
+      # Response
+      #   {
+      #     "id": null,
+      #     "site_id": 123,
+      #     "parent_id": nil,
+      #     "template_id": nil,
+      #     "title": null,
+      #     "slug": null,
+      #     "path": null,
+      #     "content": null,
+      #     "homepage": false,
+      #     "meta_keywords": null,
+      #     "meta_description": null,
+      #     "published_at": null,
+      #     "deleted_at": null,
+      #     "created_at": null,
+      #     "updated_at": null
+      #   }
+      #
+      def new
+        respond_with @page
+      end
+
+      ##
+      # Create backend page
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   POST /backend/pages
+      #   POST /backend/pages.json
+      #
+      # Paramaters
+      #   {
+      #     "page": {
+      #       "parent_id": nil,
+      #       "template_id": nil,
+      #       "title": "Page Title",
+      #       "slug": "my-page",
+      #       "content": "</p>Content of the Page</p>",
+      #       "homepage": false,
+      #       "meta_keywords": "keywords,for,the,page",
+      #       "meta_description": "Description of the page",
+      #       "published_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+      #     }
+      #   }
+      #
+      def create
+        @page.save
+
+        respond_with @page, location: -> { location_after_create }
+      end
+
+      ##
+      # Edit backend page
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Params
+      #   [Integer] id - the page id
+      #
+      # Request
+      #   GET /backend/pages/:id/edit
+      #   GET /backend/pages/:id/edit.json
+      #
+      # Response
+      #   {
+      #     "id": 123,
+      #     "site_id": 123,
+      #     "parent_id": nil,
+      #     "template_id": nil,
+      #     "title": "Page Title",
+      #     "slug": "my-page",
+      #     "path": "my-page",
+      #     "content": "</p>Content of the Page</p>",
+      #     "homepage": false,
+      #     "meta_keywords": "keywords,for,the,page",
+      #     "meta_description": "Description of the page",
+      #     "published_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #     "deleted_at": null,
+      #     "created_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #     "updated_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+      #   }
+      #
+      def edit
+        respond_with @page
+      end
+
+      ##
+      # Update backend page
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Params
+      #   [Integer] id - the page id
+      #
+      # Request
+      #   PATCH /backend/pages/:id
+      #   PATCH /backend/pages/:id.json
+      #   PUT   /backend/pages/:id
+      #   PUT   /backend/pages/:id.json
+      #
+      # Paramaters
+      #   {
+      #     "page": {
+      #       "parent_id": nil,
+      #       "template_id": nil,
+      #       "title": "Page Title",
+      #       "slug": "my-page",
+      #       "content": "</p>Content of the Page</p>",
+      #       "homepage": false,
+      #       "meta_keywords": "keywords,for,the,page",
+      #       "meta_description": "Description of the page",
+      #       "published_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+      #     }
+      #   }
+      #
+      def update
+        @page.update(resource_params)
+
+        respond_with @page, location: -> { location_after_update }
+      end
+
+      ##
+      # Destroy backend page
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Params
+      #   [Integer] id - the page id
+      #
+      # Request
+      #   DELETE /backend/pages/:id
+      #   DELETE /backend/pages/:id.json
+      #
+      def destroy
+        @page.destroy
+
+        respond_with @page, location: -> { location_after_destroy }
+      end
+
+      protected
+
+      def permitted_attributes
+        %w[content homepage meta_description meta_keywords parent_id path
+           published_at slug template_id title]
+      end
+
+      def set_resources
+        @pages = current_site.pages
+                             .order(title: :asc)
+                             .page(page_num).per(per_page)
+
+        authorize @pages
+      end
+
+      def set_resource
+        resource_id = params.fetch(:id)
+
+        @page = current_site.pages.find_by!(id: resource_id)
+
+        authorize @page
+      end
+
+      def set_new_resource
+        new_params = action_name.to_sym == :create ? resource_params : nil
+
+        @page = current_site.pages.new(new_params)
+
+        authorize @page
+      end
+
+      def resource_params
+        params.require(resource_namespace).permit(permitted_attributes)
+      end
+
+      def resource_namespace
+        controller_name.singularize.to_sym
+      end
+
+      def location_after_create
+        location_after_save
+      end
+
+      def location_after_update
+        location_after_save
+      end
+
+      def location_after_destroy
+        location_after_save
+      end
+
+      def location_after_save
+        backend_pages_path
+      end
+    end
+  end
+end

data/app/controllers/archangel/backend/profiles_controller.rb

@@ -0,0 +1,211 @@
+# frozen_string_literal: true
+
+module Archangel
+  ##
+  # @see Archangel::BackendController
+  #
+  module Backend
+    ##
+    # Backend profiles controller
+    #
+    class ProfilesController < BackendController
+      include Archangel::SkipAuthorizableConcern
+
+      before_action :set_resource
+
+      ##
+      # Backend profile
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   GET /backend/profile
+      #   GET /backend/profile.json
+      #
+      # Response
+      #   {
+      #     "id": 123,
+      #     "site_id": 123,
+      #     "name": "First Last",
+      #     "username": "my_username"
+      #     "role": "admin",
+      #     "avatar": {
+      #       "url": "/uploads/file.png",
+      #       "large": {
+      #         "url": "/uploads/large_file.png"
+      #       },
+      #       "medium": {
+      #         "url": "/uploads/medium_file.png"
+      #       },
+      #       "small": {
+      #         "url": "/uploads/small_file.png"
+      #       },
+      #       "tiny": {
+      #         "url": "/uploads/tiny_file.png"
+      #       }
+      #     },
+      #     "email": "me@example.com",
+      #     "invitation_token": null,
+      #     "invitation_created_at": null,
+      #     "invitation_sent_at": null,
+      #     "invitation_accepted_at": null,
+      #     "invitation_limit": null,
+      #     "invited_by_type": null,
+      #     "invited_by_id": null,
+      #     "invitations_count": 0,
+      #     "deleted_at": null,
+      #     "created_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #     "updated_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+      #   }
+      #
+      def show
+        respond_with @profile
+      end
+
+      ##
+      # Edit backend profile
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   GET /backend/profile
+      #   GET /backend/profile.json
+      #
+      # Response
+      #   {
+      #     "id": 123,
+      #     "site_id": 123,
+      #     "name": "First Last",
+      #     "username": "my_username"
+      #     "role": "admin",
+      #     "avatar": {
+      #       "url": "/uploads/file.png",
+      #       "large": {
+      #         "url": "/uploads/large_file.png"
+      #       },
+      #       "medium": {
+      #         "url": "/uploads/medium_file.png"
+      #       },
+      #       "small": {
+      #         "url": "/uploads/small_file.png"
+      #       },
+      #       "tiny": {
+      #         "url": "/uploads/tiny_file.png"
+      #       }
+      #     },
+      #     "email": "me@example.com",
+      #     "invitation_token": null,
+      #     "invitation_created_at": null,
+      #     "invitation_sent_at": null,
+      #     "invitation_accepted_at": null,
+      #     "invitation_limit": null,
+      #     "invited_by_type": null,
+      #     "invited_by_id": null,
+      #     "invitations_count": 0,
+      #     "deleted_at": null,
+      #     "created_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #     "updated_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+      #   }
+      #
+      def edit
+        respond_with @profile
+      end
+
+      ##
+      # Update backend profile
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   PATCH /backend/profile
+      #   PUT   /backend/profile.json
+      #
+      # Response
+      #   {
+      #     "profile": {
+      #       "name": "First Last",
+      #       "username": "my_username"
+      #       "avatar": "local/path/to/new_file.gif"
+      #       "email": "me@example.com"
+      #     }
+      #   }
+      #
+      def update
+        empty_password_params if resource_params.fetch(:password, nil).blank?
+
+        successfully_updated =
+          if needs_password?(@profile, resource_params)
+            @profile.update(resource_params)
+          else
+            @profile.update_without_password(resource_params)
+          end
+
+        reauth_current_user if successfully_updated
+
+        respond_with @profile, location: -> { location_after_update }
+      end
+
+      ##
+      # Destroy backend profile
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   DELETE /backend/profile
+      #   DELETE /backend/profile.json
+      #
+      def destroy
+        @profile.destroy
+
+        respond_with @profile, location: -> { location_after_destroy }
+      end
+
+      protected
+
+      def permitted_attributes
+        %w[avatar email name password remove_avatar username]
+      end
+
+      def set_resource
+        @profile = current_user
+      end
+
+      def resource_params
+        params.require(resource_namespace).permit(permitted_attributes)
+      end
+
+      def resource_namespace
+        controller_name.singularize.to_sym
+      end
+
+      def location_after_update
+        location_after_save
+      end
+
+      def location_after_destroy
+        backend_root_path
+      end
+
+      def location_after_save
+        backend_profile_path
+      end
+
+      def empty_password_params
+        resource_params.delete(:password)
+        resource_params.delete(:password_confirmation)
+      end
+
+      def needs_password?(_profile, params)
+        params[:password].present?
+      end
+
+      def reauth_current_user
+        bypass_sign_in(@profile)
+      end
+    end
+  end
+end

data/app/controllers/archangel/backend/sites_controller.rb

@@ -0,0 +1,175 @@
+# frozen_string_literal: true
+
+module Archangel
+  ##
+  # @see Archangel::BackendController
+  #
+  module Backend
+    ##
+    # Backend sites controller
+    #
+    class SitesController < BackendController
+      before_action :set_resource
+
+      ##
+      # Backend site
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   GET /backend/site
+      #   GET /backend/site.json
+      #
+      # Response
+      #   {
+      #     "id": 123,
+      #     "name": "Site Name",
+      #     "theme": "my_theme",
+      #     "locale": "en",
+      #     "logo": {
+      #       "url": "/uploads/file.png",
+      #       "large": {
+      #         "url": "/uploads/large_file.png"
+      #       },
+      #       "medium": {
+      #         "url": "/uploads/medium_file.png"
+      #       },
+      #       "small": {
+      #         "url": "/uploads/small_file.png"
+      #       },
+      #       "tiny": {
+      #         "url": "/uploads/tiny_file.png"
+      #       }
+      #     },
+      #     "content": "</p>Content of the Widget</p>",
+      #     "template_id": 123,
+      #     "meta_keywords": "keywords,for,the,site",
+      #     "meta_description": "Description of the site",
+      #     "deleted_at": null,
+      #     "created_at": "YYYY-MM-DDTHH:MM:SS.MSZ",
+      #     "updated_at": "YYYY-MM-DDTHH:MM:SS.MSZ"
+      #   }
+      #
+      def show
+        respond_with @site
+      end
+
+      ##
+      # Edit backend site
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   GET /backend/site/edit
+      #   GET /backend/site/edit.json
+      #
+      # Response
+      #   {
+      #     "id": 123,
+      #     "name": "Site Name",
+      #     "theme": "my_theme",
+      #     "locale": "en",
+      #     "logo": {
+      #       "url": "/uploads/file.png",
+      #       "large": {
+      #         "url": "/uploads/large_file.png"
+      #       },
+      #       "medium": {
+      #         "url": "/uploads/medium_file.png"
+      #       },
+      #       "small": {
+      #         "url": "/uploads/small_file.png"
+      #       },
+      #       "tiny": {
+      #         "url": "/uploads/tiny_file.png"
+      #       }
+      #     },
+      #     "content": "</p>Content of the Widget</p>",
+      #     "template_id": 123,
+      #     "meta_keywords": "keywords,for,the,site",
+      #     "meta_description": "Description of the site"
+      #   }
+      #
+      def edit
+        respond_with @site
+      end
+
+      ##
+      # Update backend site
+      #
+      # Formats
+      #   HTML, JSON
+      #
+      # Request
+      #   PATCH /backend/site
+      #   PATCH /backend/site.json
+      #   PUT   /backend/site
+      #   PUT   /backend/site.json
+      #
+      # Response
+      #   {
+      #     "site": {
+      #       "name": "Site Name",
+      #       "theme": "my_theme",
+      #       "locale": "en",
+      #       "logo": {
+      #        "url": "/uploads/file.png",
+      #         "large": {
+      #           "url": "/uploads/large_file.png"
+      #         },
+      #         "medium": {
+      #           "url": "/uploads/medium_file.png"
+      #         },
+      #         "small": {
+      #           "url": "/uploads/small_file.png"
+      #         },
+      #         "tiny": {
+      #           "url": "/uploads/tiny_file.png"
+      #         }
+      #       },
+      #       "content": "</p>Content of the Widget</p>",
+      #       "template_id": 123,
+      #       "meta_keywords": "keywords,for,the,site",
+      #       "meta_description": "Description of the site"
+      #     }
+      #   }
+      #
+      def update
+        @site.update(resource_params)
+
+        respond_with @site, location: -> { location_after_update }
+      end
+
+      protected
+
+      def permitted_attributes
+        %w[favicon locale logo meta_description meta_keywords name
+           remove_favicon remove_logo theme]
+      end
+
+      def set_resource
+        @site = current_site
+
+        authorize @site
+      end
+
+      def resource_params
+        params.require(resource_namespace).permit(permitted_attributes)
+      end
+
+      def resource_namespace
+        controller_name.singularize.to_sym
+      end
+
+      def location_after_update
+        location_after_save
+      end
+
+      def location_after_save
+        backend_site_path
+      end
+    end
+  end
+end