authorizy 0.1.0

data/spec/authorizy/extension/authorizy_question_spec.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+require 'support/controllers/dummy_controller'
+
+RSpec.describe DummyController, '#authorizy?', type: :controller do
+  context 'when config returns no current user' do
+    it 'returns false' do
+      config_mock(current_user: nil) do
+        expect(controller.helpers.authorizy?('controller', 'action')).to be(false)
+      end
+    end
+  end
+
+  context 'when config returns current user' do
+    let!(:current_user) { User.new }
+    let!(:parameters) { ActionController::Parameters.new }
+
+    context 'when authorizy returns false' do
+      let!(:authorizy) { instance_double('Authorizy::Core', access?: false) }
+
+      it 'returns false' do
+        allow(Authorizy::Core).to receive(:new)
+          .with(current_user, parameters, session, controller: 'controller', action: 'action')
+          .and_return(authorizy)
+
+        config_mock(current_user: current_user) do
+          expect(controller.helpers.authorizy?('controller', 'action')).to be(false)
+        end
+      end
+    end
+
+    context 'when authorizy returns true' do
+      let!(:authorizy) { instance_double('Authorizy::Core', access?: true) }
+
+      it 'returns true' do
+        allow(Authorizy::Core).to receive(:new)
+          .with(current_user, parameters, session, controller: 'controller', action: 'action')
+          .and_return(authorizy)
+
+        config_mock(current_user: current_user) do
+          expect(controller.helpers.authorizy?('controller', 'action')).to be(true)
+        end
+      end
+    end
+  end
+end

data/spec/authorizy/extension/authorizy_spec.rb

@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+require 'support/controllers/dummy_controller'
+
+RSpec.describe DummyController, '#authorizy', type: :controller do
+  let!(:parameters) { ActionController::Parameters.new(key: 'value', controller: 'dummy', action: 'action') }
+
+  context 'when user has access' do
+    let!(:authorizy_core) { instance_double('Authorizy::Core', access?: true) }
+
+    before { allow(Authorizy::Core).to receive(:new).with(nil, parameters, session).and_return(authorizy_core) }
+
+    context 'when is a xhr request' do
+      it 'receives the default values and do not denied the access' do
+        get :action, xhr: true, params: { key: 'value' }
+
+        expect(response.body).to   eq('{"message":"authorized"}')
+        expect(response.status).to be(200)
+      end
+    end
+
+    context 'when is a html request' do
+      it 'receives the default values and do not denied the access' do
+        get :action, params: { key: 'value' }
+
+        expect(response.body).to   eq('{"message":"authorized"}')
+        expect(response.status).to be(200)
+      end
+    end
+  end
+
+  context 'when user has no access' do
+    let!(:authorizy_core) { instance_double('Authorizy::Core', access?: false) }
+
+    before { allow(Authorizy::Core).to receive(:new).with(nil, parameters, session).and_return(authorizy_core) }
+
+    context 'when is a xhr request' do
+      it 'receives the default values and denied the access' do
+        get :action, xhr: true, params: { key: 'value' }
+
+        expect(response.body).to   eq('{"message":"Action denied for dummy#action"}')
+        expect(response.status).to be(422)
+      end
+    end
+
+    context 'when is a html request' do
+      it 'receives the default values and do not denied the access' do
+        get :action, params: { key: 'value' }
+
+        expect(response).to redirect_to '/'
+
+        # expect(flash[:info]).to eq('Action denied for dummy#action') # TODO: get flash message
+      end
+    end
+  end
+end

data/spec/common_helper.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+ENV['RAILS_ENV'] ||= 'test'
+
+require 'support/application'
+require 'support/common'
+require 'support/i18n'
+require 'support/routes'
+require 'support/schema'
+require 'authorizy'
+require 'pry-byebug'

data/spec/spec_helper.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+def config_mock(aliases: nil, cop: nil, current_user: nil, dependencies: nil, redirect_url: nil)
+  backup = {
+    aliases:      Authorizy.config.aliases,
+    cop:          Authorizy.config.cop,
+    current_user: Authorizy.config.current_user,
+    dependencies: Authorizy.config.dependencies,
+    redirect_url: Authorizy.config.redirect_url,
+  }
+
+  Authorizy.configure do |config|
+    config.aliases      = aliases                        if aliases
+    config.cop          = cop                            if cop
+    config.current_user = -> (_context) { current_user } if current_user
+    config.dependencies = dependencies                   if dependencies
+    config.redirect_url = -> (_context) { redirect_url } if redirect_url
+  end
+
+  yield
+ensure
+  Authorizy.configure do |config|
+    config.aliases      = backup[:aliases]
+    config.cop          = backup[:cop]
+    config.current_user = backup[:current_user]
+    config.dependencies = backup[:dependencies]
+    config.redirect_url = backup[:redirect_url]
+  end
+end

data/spec/support/application.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+require 'active_record/railtie'
+
+module Authorizy
+  class Application < Rails::Application
+  end
+end

data/spec/support/common.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+require 'rspec/rails'
+
+RSpec.configure do |config|
+  config.disable_monkey_patching!
+
+  config.mock_with(:rspec) do |mocks|
+    mocks.verify_partial_doubles = true
+  end
+
+  config.order = :random
+end

data/spec/support/controllers/admin/dummy_controller.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Admin
+  class DummyController < ActionController::Base
+    include Authorizy::Extension
+
+    before_action :authorizy
+
+    def action
+      render json: { message: 'authorized' }
+    end
+  end
+end

data/spec/support/controllers/dummy_controller.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+class DummyController < ActionController::Base
+  include Authorizy::Extension
+
+  before_action :authorizy
+
+  def action
+    render json: { message: 'authorized' }
+  end
+end

data/spec/support/coverage.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+if ENV['COVERAGE'] == 'true'
+  require 'simplecov'
+  require 'codecov'
+
+  SimpleCov.formatter = SimpleCov::Formatter::Codecov
+
+  SimpleCov.minimum_coverage(ENV.fetch('MINIMUM_COVERAGE', 80).to_i)
+
+  SimpleCov.start('rails') do
+    add_filter('vendor')
+  end
+end

data/spec/support/i18n.rb

@@ -0,0 +1,3 @@
+# frozen_string_literal: true
+
+I18n.load_path << Rails.root.join('spec/support/locales/en.yml')

data/spec/support/locales/en.yml

@@ -0,0 +1,3 @@
+en:
+  authorizy:
+    denied: "Action denied for %{controller}#%{action}"

data/spec/support/models/authorizy_cop.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+class AuthorizyCop < Authorizy::BaseCop
+  def admin__dummy
+    params[:admin] == 'true'
+  end
+
+  def dummy
+    params[:access] == 'true'
+  end
+
+  def get_action
+    action
+  end
+
+  def get_controller
+    controller
+  end
+
+  def get_current_user
+    current_user
+  end
+
+  def get_params
+    params
+  end
+
+  def get_session
+    session
+  end
+end

data/spec/support/models/empty_cop.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class EmptyCop < Authorizy::BaseCop
+end

data/spec/support/models/user.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class User < ActiveRecord::Base
+end

data/spec/support/routes.rb

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+Rails.application.routes.draw do
+  get :action, to: 'admin/dummy#action'
+  get :action, to: 'dummy#action'
+end

data/spec/support/schema.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+require 'active_record'
+require 'support/models/user'
+
+ActiveRecord::Base.establish_connection(
+  adapter:  'postgresql',
+  host:     'localhost',
+  username: 'postgres',
+)
+
+ActiveRecord::Base.connection.execute('DROP DATABASE IF EXISTS authorizy_test;')
+ActiveRecord::Base.connection.execute('CREATE DATABASE authorizy_test;')
+ActiveRecord::Base.connection.execute('DROP TABLE IF EXISTS users;')
+
+ActiveRecord::Schema.define(version: 1) do
+  enable_extension 'plpgsql'
+
+  create_table :users do |t|
+    t.jsonb 'authorizy', default: {}
+  end
+end

metadata

@@ -0,0 +1,198 @@
+--- !ruby/object:Gem::Specification
+name: authorizy
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Washington Botelho
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2020-11-10 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: activerecord
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pg
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry-byebug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rubocop-rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: A JSON based Authorization.
+email: wbotelhos@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files:
+- CHANGELOG.md
+- LICENSE
+- README.md
+files:
+- CHANGELOG.md
+- LICENSE
+- README.md
+- lib/authorizy.rb
+- lib/authorizy/base_cop.rb
+- lib/authorizy/config.rb
+- lib/authorizy/core.rb
+- lib/authorizy/expander.rb
+- lib/authorizy/extension.rb
+- lib/authorizy/version.rb
+- lib/generators/authorizy/install_generator.rb
+- lib/generators/authorizy/templates/config/initializers/authorizy.rb
+- lib/generators/authorizy/templates/db/migrate/add_authorizy_on_users.rb
+- spec/authorizy/base_cop/access_question_spec.rb
+- spec/authorizy/config/aliases_spec.rb
+- spec/authorizy/config/cop_spec.rb
+- spec/authorizy/config/current_user_spec.rb
+- spec/authorizy/config/dependencies_spec.rb
+- spec/authorizy/config/initialize_spec.rb
+- spec/authorizy/config/redirect_url_spec.rb
+- spec/authorizy/cop/controller_spec.rb
+- spec/authorizy/cop/model_spec.rb
+- spec/authorizy/cop/namespaced_controller_spec.rb
+- spec/authorizy/core/access_spec.rb
+- spec/authorizy/expander/expand_spec.rb
+- spec/authorizy/extension/authorizy_question_spec.rb
+- spec/authorizy/extension/authorizy_spec.rb
+- spec/common_helper.rb
+- spec/spec_helper.rb
+- spec/support/application.rb
+- spec/support/common.rb
+- spec/support/controllers/admin/dummy_controller.rb
+- spec/support/controllers/dummy_controller.rb
+- spec/support/coverage.rb
+- spec/support/i18n.rb
+- spec/support/locales/en.yml
+- spec/support/models/authorizy_cop.rb
+- spec/support/models/empty_cop.rb
+- spec/support/models/user.rb
+- spec/support/routes.rb
+- spec/support/schema.rb
+homepage: https://github.com/wbotelhos/authorizy
+licenses:
+- MIT
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.1.4
+signing_key:
+specification_version: 4
+summary: A JSON based Authorization.
+test_files:
+- spec/spec_helper.rb
+- spec/common_helper.rb
+- spec/support/schema.rb
+- spec/support/routes.rb
+- spec/support/locales/en.yml
+- spec/support/i18n.rb
+- spec/support/application.rb
+- spec/support/models/authorizy_cop.rb
+- spec/support/models/empty_cop.rb
+- spec/support/models/user.rb
+- spec/support/common.rb
+- spec/support/coverage.rb
+- spec/support/controllers/dummy_controller.rb
+- spec/support/controllers/admin/dummy_controller.rb
+- spec/authorizy/core/access_spec.rb
+- spec/authorizy/extension/authorizy_spec.rb
+- spec/authorizy/extension/authorizy_question_spec.rb
+- spec/authorizy/config/dependencies_spec.rb
+- spec/authorizy/config/initialize_spec.rb
+- spec/authorizy/config/redirect_url_spec.rb
+- spec/authorizy/config/current_user_spec.rb
+- spec/authorizy/config/cop_spec.rb
+- spec/authorizy/config/aliases_spec.rb
+- spec/authorizy/expander/expand_spec.rb
+- spec/authorizy/base_cop/access_question_spec.rb
+- spec/authorizy/cop/namespaced_controller_spec.rb
+- spec/authorizy/cop/controller_spec.rb
+- spec/authorizy/cop/model_spec.rb