authentasaurus 0.7.3 → 0.8.3

data/lib/authentasaurus/ac/controllers/recoveries_controller.rb

@@ -0,0 +1,72 @@
+module Authentasaurus::Ac::Controllers
+  module RecoveriesController
+    def self.included(base) # :nodoc:
+      base.send :extend, ClassMethods
+      base.send :include, InstanceMethods
+    end
+    
+    module ClassMethods
+    end
+    
+    module InstanceMethods
+      def new
+        @recovery = Recovery.new
+        
+        respond_to do |format|
+          format.html
+        end
+      end
+      
+      def create
+        @recovery = Recovery.find_or_initialize_by_email :email => params[:email]
+        
+        if @recovery.new_record?
+          @recovery.user = User.find_by_email @recovery.email
+        end
+        
+        respond_to do |format|
+          if @recovery.save
+            @recovery.touch
+            format.html { redirect_to new_session_path, :notice => t(:recovery_email_sent, :scope => [:authentasaurus, :messages, :recoveries], :email => @recovery.email) }
+          else
+            format.html {render :new}
+          end
+        end  
+      end
+      
+      def edit
+        @recovery = Recovery.valid.find_by_token(params[:token])
+        
+        respond_to do |format|
+          unless @recovery.nil?
+    	    	@user = @recovery.user
+    	    	format.html
+          else
+    	    	format.html { redirect_to new_session_path, :alert => t(:recovery_failed, :scope => [:authentasaurus, :messages, :recoveries], :email => params[:email]) }
+          end
+        end
+      end
+      
+      def destroy
+        @recovery = Recovery.find_by_token params[:token]
+        @user = @recovery.user
+        
+        respond_to do |format|
+    			empty_fields = params[:user].select { |key, value| value.blank? }
+          if !empty_fields.empty?
+            empty_fields.each do |f|
+    					@user.errors.add_to_base t(:recovery_field_blank, :scope => [:authentasaurus, :messages, :recoveries], :field => f.first.humanize)
+            end
+    				format.html { render :edit }
+          elsif @user.update_attributes params[:user]
+    				@recovery.destroy
+    				format.html { redirect_to new_session_path, :notice => t(:recovery_successful, :scope => [:authentasaurus, :messages, :recoveries], :email => params[:email]) }
+          else
+    			  flash.now[:alert] = t(:recovery_failed, :scope => [:authentasaurus, :messages, :recoveries],  :email => params[:email])
+    				format.html { render :edit }
+          end
+        end
+      end
+    end
+  end
+end

data/lib/authentasaurus/ac/controllers/registrations_controller.rb

@@ -0,0 +1,45 @@
+module Authentasaurus::Ac::Controllers
+  module RegistrationsController
+    def self.included(base) # :nodoc:
+      base.send :extend, ClassMethods
+      base.send :include, InstanceMethods
+    end
+    
+    module ClassMethods
+    end
+    
+    module InstanceMethods
+      def new
+        @user = User.new
+        @user_invitation = UserInvitation.find_by_token params[:token]
+        
+        respond_to do |format|
+          if @user_invitation.nil?
+            format.html {redirect_to new_session_path, :alert => t(:invalid_invitation_token, :scope => [:authentasaurus, :messages, :user_invitations])}
+          else
+            @user.email = @user_invitation.email
+            format.html
+          end
+        end
+      end
+      
+      def create
+        @user = User.new params[:user]
+        user_invitation = UserInvitation.find_by_token params[:token]
+        
+        respond_to do |format|
+          unless user_invitation.nil?
+            if @user.save
+              format.html {redirect_to new_session_path}
+            else
+              format.html {render :new}
+            end
+          else
+            flash.now[:alert] = t(:invalid_invitation_token, :scope => [:authentasaurus, :messages, :user_invitations])
+            format.html {render :new}
+          end
+        end
+      end
+    end
+  end
+end

data/lib/authentasaurus/ac/controllers/sessions_controller.rb

@@ -0,0 +1,58 @@
+module Authentasaurus::Ac::Controllers
+  module SessionsController
+    def self.included(base) # :nodoc:
+      base.send :extend, ClassMethods
+      base.send :include, InstanceMethods
+      
+      base.send :before_filter, :check_is_logged_in, :except => [:destroy, :no_access]
+    end
+    
+    module ClassMethods
+    end
+    
+    module InstanceMethods
+      def new
+        @session = Session.new
+        
+        respond_to do |format|
+          format.html
+        end
+      end
+      
+      def create
+        @session = Session.new params[:session]
+        
+        respond_to do |format|
+          if @session.save
+            if @session.remember == "1"
+              cookies.signed.permanent[:remember_me_token] = @session.user.remember_me_token
+            end
+            session[:user_id] = @session.user.id
+            session[:user_permissions] =   {:read => @session.user.permissions.collect{|per| per.area.name if per.read}, :write => @session.user.permissions.collect{|per| per.area.name if per.write}}
+            format.html { redirect_to session[:original_url] || (defined?(signin_redirect_path).nil? ?  root_path : signin_redirect_path) }
+          else
+            format.html { render :action => :new }
+          end
+        end
+        
+      end
+      
+      def destroy
+        session[:user_id] = nil
+        session[:user_permissions] = nil
+        cookies.delete :remember_me_token
+        
+        respond_to do |format|
+          format.html { redirect_to :action => :new }
+        end
+      end
+      
+      private
+      def check_is_logged_in
+        if is_logged_in?
+          redirect_to defined?(signin_redirect_path).nil? ?  root_path : signin_redirect_path
+        end
+      end
+    end
+  end
+end

data/lib/authentasaurus/ac/controllers/user_invitations_controller.rb

@@ -0,0 +1,50 @@
+module Authentasaurus::Ac::Controllers
+  module UserInvitationsController
+    def self.included(base) # :nodoc:
+      base.send :extend, ClassMethods
+      base.send :include, InstanceMethods
+    end
+    
+    module ClassMethods
+    end
+    
+    module InstanceMethods
+      def index
+        @invitations = UserInvitation.find :all
+        
+        respond_to do |format|
+          format.html
+        end
+      end
+      
+      def new
+        @invitation = UserInvitation.new
+        
+        respond_to do |format|
+          format.html
+        end
+      end
+      
+      def create
+        @invitation = UserInvitation.new params[:user_invitation]
+        
+        respond_to do |format|
+          if @invitation.save
+            format.html { redirect_to :action => :index }
+          else
+            format.html {render :new}
+          end
+        end
+      end
+      
+      def destroy
+        invitation = UserInvitation.find params[:id]
+        invitation.destroy
+        
+        respond_to do |format|
+          format.html { redirect_to :action => :index }
+        end
+      end
+    end
+  end
+end

data/lib/authentasaurus/ac/controllers/users_controller.rb

@@ -0,0 +1,80 @@
+module Authentasaurus::Ac::Controllers
+  module UsersController
+    def self.included(base) # :nodoc:
+      base.send :extend, ClassMethods
+      base.send :include, InstanceMethods
+    end
+    
+    module ClassMethods
+    end
+    
+    module InstanceMethods
+      def index
+        @users = User.all
+        
+    		respond_to do |format|
+          format.html
+        end
+      end
+      
+    	def show
+        @user = User.find(params[:id])
+        
+    		respond_to do |format|
+          format.html
+        end
+      end
+      
+    	def new
+        @user = User.new
+        
+    		respond_to do |format|
+          format.html
+        end
+      end
+      
+    	def create
+        @user = User.new params[:user]
+        
+    		respond_to do |format|
+    			if @user.save
+            format.html { redirect_to :action=>:index, :notice => "User saved successfully" }
+          else
+            flash.now[:alert] = I18n.t(:create_failed, :scope => [:authentasaurus, :messages, :users])
+            format.html { render :new }
+          end
+        end
+      end
+      
+    	def edit
+        @user = User.find params[:id]
+        
+    		respond_to do |format|
+          format.html
+        end
+      end
+      
+    	def update
+        @user = User.find params[:id]
+        
+    		respond_to do |format|
+    			if @user.update_attributes(params[:user])
+            format.html { redirect_to :action => :index, :notice => "User updated" }
+          else
+            flash.now[:alert] = I18n.t(:update_failed, :scope => [:authentasaurus, :messages, :users])
+            format.html { render :edit }
+          end
+        end
+      end
+      
+    	def destroy
+        @user = User.find params[:id]
+        @user.destroy
+        
+    		respond_to do |format|
+          format.html { redirect_to :action=>:index }
+        end
+      end
+    end
+  end
+end

data/lib/authentasaurus/ac/controllers/validations_controller.rb

@@ -0,0 +1,53 @@
+module Authentasaurus::Ac::Controllers
+  module ValidationsController
+    def self.included(base) # :nodoc:
+      base.send :extend, ClassMethods
+      base.send :include, InstanceMethods
+    end
+    
+    module ClassMethods
+    end
+    
+    module InstanceMethods
+      def validate
+        respond_to do |format|
+          format.html
+        end
+      end
+      
+      def activate
+    		respond_to do |format|
+          validation = Validation.find_by_validation_code(params[:vcode])
+    			if validation
+            validation.user.activate
+            validation.destroy
+            format.html { redirect_to login_url, :notice => I18n.t(:validation_successful, :scope => [:authentasaurus, :messages, :validations])}
+          else
+            flash.now[:alert] = I18n.t(:validation_failed, :scope => [:authentasaurus, :messages, :validations])
+            format.html { render :validate }
+          end
+        end
+      end
+      
+    	def resend_validation_email
+    	  respond_to do |format|
+          format.html
+        end
+      end
+      
+      def do_resend_validation_email
+        validation = Validation.find_by_email params[:email]
+        
+        respond_to do |format|
+          unless validation.nil?
+            validation.send_validation
+            format.html {redirect_to login_url, :notice => I18n.t(:validation_email_sent, :scope => [:authentasaurus, :messages, :validations])}
+          else
+            flash.now[:alert] = I18n.t(:validation_email_invalid, :scope => [:authentasaurus, :messages, :validations], :email => params[:email])
+            format.html { render :resend_validation_email }
+          end
+        end
+      end
+    end
+  end
+end

data/lib/authentasaurus/ac/routing.rb

@@ -0,0 +1,90 @@
+## Authentasaurus routes helper
+module Authentasaurus::Ac
+  module Routing
+    def self.included(base) # :nodoc:
+      base.send :include, InstanceMethods
+    end
+    
+    module InstanceMethods
+      # TODO: add documentation here
+      def authentasaurus_routes(*opts)
+        options = opts.extract_options!
+        
+        # Authenticatable
+        authentasaurus_sessions options.dup
+        authentasaurus_users options.dup
+        # Recoverable
+        authentasaurus_recoverable
+        
+        # Authorizable
+        if opts.include?(:authorization)
+          authentasaurus_authorizable options.dup
+        end
+        
+        # Validatable
+        if opts.include?(:validation)
+          authentasaurus_validatable
+        end
+        
+        # Invitable
+        if opts.include?(:invitation)
+          authentasaurus_invitable options.dup
+          authentasaurus_invitable_public
+        end
+      end
+      
+      # TODO: add documentation here
+      def authentasaurus_sessions(*opts)
+        get     "/sessions/sign-in(.:format)" => "sessions#new", :as => :new_session
+        post    "/sessions(.:format)" => "sessions#create", :as => :sessions
+        delete  "/sessions/sign-out(.:format)" => "sessions#destroy", :as => :session
+        get     "/sessions/no-access(.:format)" => "sessions#no_access", :as => :no_access_sessions
+      end
+      
+      # TODO: add documentation here
+      def authentasaurus_users(*opts)
+        options = opts.extract_options!
+        
+        resources :users, options.dup
+      end
+      
+      # TODO: add documentation here
+      def authentasaurus_authorizable(*opts)
+        options = opts.extract_options!
+        
+        resources :groups, options.dup
+        resources :areas, options.dup
+        resources :permissions, options.dup
+      end
+      
+      # TODO: add documentation here
+      def authentasaurus_validatable
+        match "/validate" => "validations#validate", :as => 'validate'
+        match "/activate" => "validations#activate", :as => 'activate'
+        match "/resend-validation" => "validations#resend_validation_email", :via => :get, :as => 'recover_password'
+        match "/resend-validation" => "validations#do_resend_validation_email", :via => :post, :as => 'do_recover_password'
+      end
+      
+      # TODO: add documentation here
+      def authentasaurus_invitable(*opts)
+        options = opts.extract_options!
+        
+        resources :user_invitations, options.dup.merge({:except => [:show, :edit, :update]})
+      end
+      
+      def authentasaurus_invitable_public(*opts)
+        options = opts.extract_options!
+        
+        resources :registrations, :only => [:new, :create], :path_prefix => "/:token", :requirements => {:token => /[0-9a-zA-Z]+/}
+      end
+      
+      # TODO: add documentation here
+      def authentasaurus_recoverable      
+        match "/forgot-password" => "recoveries#new", :via => :get, :as => 'forgot_password'
+        match "/forgot-password" => "recoveries#create", :via => :post, :as => 'do_forgot_password'
+        match "/recover-password/:token" => "recoveries#edit", :via => :get, :as => 'recover_password'
+        match "/recover-password/:token" => "recoveries#destroy", :via => :delete, :as => 'do_recover_password'
+      end
+    end
+  end
+end