blue_light_special 0.2.0 → 0.2.1

data/README.rdoc

@@ -62,6 +62,34 @@ interface.  If you'd like to generate the admin interface, run:
 	
 This will generate your user admin controller and its integration test.
 
+== Mad Mimi
+
+If you'd like an overview of Mad Mimi, check out the third part of
+{this screencast}[http://railslab.newrelic.com/2009/10/23/episode-21-on-the-edge-part-3].
+In order to get Blue Light Special working with Mad Mimi, you'll need to sign
+up for an account at {madmimi.com}[http://madmimi.com/r/b8599b9343f82e3bc30984ca4f3fea3f].
+
+Your Mad Mimi account needs API access, so be sure to enable that during the signup
+process. The support people at Mad Mimi will manually authorize your account for
+API access. This usually happens within a few hours after you've signed up. Until
+your account is authorized, you'll see HTTP errors when your Rails app attempts to
+send email.
+
+After you've signed up and your API access has been approved, all you'll need to do is
+put your Mad Mimi username and API key in config/blue_light_special.yml.
+
+== Facebook Connect
+
+To set up Facebook Connect, go to the {Facebook developer page}[http://facebook.com/developers]
+and create a new Facebook app. Since you're only using this app for Facebook Connect,
+you can leave most of the fields blank. Be sure to give your app a name, and then
+head over to the Connect settings and set the Connect URL to point at your Rails app.
+In the Advanced section, you'll need to set Email Domain to the domain from which you'll
+be sending email messages.
+
+After you've finished setting up your Facebook app, grab its API key and secret key
+and put them in config/blue_light_special.yml.
+
 == Copyright
 
 Copyright (c) 2010 Envy Labs LLC. See LICENSE for details.

data/VERSION

@@ -1 +1 @@
-0.2.0
+0.2.1

data/app/controllers/blue_light_special/impersonations_controller.rb

@@ -14,8 +14,11 @@ class BlueLightSpecial::ImpersonationsController < ApplicationController
       flash[:failure] = "Cannot impersonate yourself"
       redirect_to root_url
     else
-      session[:admin_user_id]       = current_user.id
-      session[:impersonation_hash]  = Impersonation.hash_for(current_user.id)
+      unless session[:admin_user_id]
+        session[:admin_user_id]          = current_user.id
+        session[:impersonation_hash]     = Impersonation.hash_for(current_user.id)
+      end
+      session[:impersonation_back_url] = request.env["HTTP_REFERER"]
       sign_in(user)
       redirect_to root_url
     end
@@ -28,7 +31,7 @@ class BlueLightSpecial::ImpersonationsController < ApplicationController
       session[:admin_user_id]       = nil
       session[:impersonation_hash]  = nil
       sign_in(admin_user)
-      redirect_to impersonations_url
+      redirect_to session[:impersonation_back_url]
     else
       deny_access
     end

data/test/rails_root/app/controllers/admin/admin_controller.rb

@@ -0,0 +1,14 @@
+class Admin::AdminController < ApplicationController
+  
+  before_filter :authenticate
+  before_filter :check_role
+  
+  
+  private
+  
+  
+  def check_role
+    redirect_to root_url unless current_user.admin?
+  end
+
+end

data/test/rails_root/app/controllers/admin/users_controller.rb

@@ -0,0 +1,52 @@
+class Admin::UsersController < Admin::AdminController
+  
+  def index
+    @users = User.all
+  end
+  
+  def show
+    @user = User.find(params[:id])
+  end
+  
+  def new
+    @user = User.new
+  end
+  
+  def create
+    @user = User.new(params[:user])
+    @user.role = params[:user][:role]
+    if @user.save
+      flash[:notice] = "Created #{@user.name}"
+      redirect_to admin_user_url(@user)
+    else
+      render :action => 'new'
+    end
+  end
+  
+  def edit
+    @user = User.find(params[:id])
+  end
+  
+  def update
+    @user = User.find(params[:id])
+    @user.role = params[:user][:role]
+    if @user.update_attributes(params[:user])
+      flash[:notice] = "Updated #{@user.name}"
+      redirect_to admin_user_url(@user)
+    else
+      render :action => 'edit'
+    end
+  end
+  
+  def destroy
+    @user = User.find(params[:id])
+    if @user != current_user
+      @user.destroy
+      flash[:notice] = "Deleted #{@user.name}"
+    else
+      flash[:error] = "Cannot delete yourself"
+    end
+    redirect_to admin_users_url
+  end
+    
+end

data/test/rails_root/config/initializers/blue_light_special.rb

@@ -1,4 +1,21 @@
-BlueLightSpecial.configure do |config|
-  config.mailer_sender      = 'donotreply@example.com'
-  config.impersonation_hash = 'REPLACE WITH A LONG HASH HERE'
+require 'yaml'
+
+begin
+  configuration = YAML.load_file("#{Rails.root}/config/blue_light_special.yml")[Rails.env]
+  configuration = HashWithIndifferentAccess.new(configuration)
+  
+  BlueLightSpecial.configure do |config|
+    config.mailer_sender        = configuration[:mailer_sender]
+    config.impersonation_hash   = configuration[:impersonation_hash]
+    config.use_facebook_connect = configuration[:use_facebook_connect]
+    config.facebook_api_key     = configuration[:facebook_api_key]
+    config.facebook_secret_key  = configuration[:facebook_secret_key]
+  end
+
+  MadMimiMailer.api_settings = {
+     :username  => configuration[:madmimi_username],
+     :api_key   => configuration[:madmimi_api_key]
+  }
+rescue LoadError
+  puts "The /config/blue_light_special.yml file is missing or broken."
 end

data/test/rails_root/db/migrate/{20100305173127_blue_light_special_create_users.rb → 20100727214301_blue_light_special_create_users.rb}

@@ -1,7 +1,9 @@
 class BlueLightSpecialCreateUsers < ActiveRecord::Migration
   def self.up
     create_table(:users) do |t|
-      t.string   :email
+      t.string   :email,                :limit => 100
+      t.string   :first_name,           :limit => 50
+      t.string   :last_name,            :limit => 50
       t.string   :role,                 :limit => 50
       t.string   :encrypted_password,   :limit => 128
       t.string   :salt,                 :limit => 128
@@ -13,6 +15,7 @@ class BlueLightSpecialCreateUsers < ActiveRecord::Migration
 
     add_index :users, :email
     add_index :users, :remember_token
+    add_index :users, :facebook_uid
   end
 
   def self.down

data/test/rails_root/test/factories/user.rb

@@ -2,8 +2,14 @@ Factory.sequence :email do |n|
   "user#{n}@example.com"
 end
 
+Factory.sequence :facebook_id do |n|
+  n
+end
+
 Factory.define :user do |user|
   user.email                 { Factory.next :email }
+  user.first_name            { "Factory" }
+  user.last_name             { "User" }
   user.password              { "password" }
   user.password_confirmation { "password" }
 end
@@ -11,3 +17,7 @@ end
 Factory.define :admin_user, :parent => :user do |admin|
   admin.role                 'admin'
 end
+
+Factory.define :facebook_user, :parent => :user do |user|
+  user.facebook_uid           { Factory.next :facebook_id }
+end

data/test/rails_root/test/integration/admin/users_test.rb

@@ -0,0 +1,201 @@
+require File.dirname(__FILE__) + "/../../test_helper"
+
+class Admin::UsersTest < ActionController::IntegrationTest
+
+  setup do
+    ActionMailer::Base.deliveries.clear
+  end
+
+  teardown do
+    ActionMailer::Base.deliveries.clear
+  end
+
+  context 'Signed in as an admin' do
+
+    setup do
+      @bob = Factory(:user, :email => 'bob@bob.bob', :first_name => 'Bob')
+      @joe = Factory(:user, :email => 'joe@joe.joe', :first_name => 'Joe')
+      @ted = Factory(:user, :email => 'ted@ted.ted', :first_name => 'Ted')
+      @admin_user = Factory(:admin_user, :email => 'admin@example.com')
+      sign_in_as(@admin_user.email, @admin_user.password)
+    end
+
+    context 'when listing users' do
+        
+      should 'show the list of users' do
+        visit admin_users_url
+        assert_contain(/bob@bob.bob/)
+        assert_contain(/joe@joe.joe/)
+        assert_contain(/ted@ted.ted/)
+      end
+    
+    end
+    
+    context 'when creating a new user' do
+      
+      context 'with valid data' do
+                  
+        should 'display "Created [name]"' do
+          create_user(:first_name => 'Tom', :last_name => 'Tom')
+          assert_contain(/Created Tom Tom/)
+        end
+
+        should 'redirect to the user show page' do
+          create_user(:email => 'tom@tom.tom')
+          user = User.find_by_email('tom@tom.tom')
+          assert_equal current_url, admin_user_url(user)
+        end
+
+        should 'be able to set the role' do
+          create_user(:email => 'tom@tom.tom', :role => 'admin')
+          user = User.find_by_email('tom@tom.tom')
+          assert user.admin?
+        end
+
+      end
+      
+      context 'with invalid data' do
+        
+        should 'display error messages' do
+          create_user(
+            :first_name => '',
+            :last_name => '',
+            :email => 'invalidemail',
+            :password_confirmation => 'bad')
+          assert_contain(/First name can't be blank/)
+          assert_contain(/Last name can't be blank/)
+          assert_contain(/Email is invalid/)
+          assert_contain(/Password doesn't match confirmation/)
+        end
+        
+        should 'redisplay the new user form' do
+          create_user(:first_name => '')
+          assert_have_selector 'form.new_user'
+        end
+        
+      end
+      
+    end
+  
+    context 'when editing a user' do
+
+      context 'with valid data' do
+      
+        should 'display "Updated [name]"' do
+          edit_user(@ted, :first_name => 'Tom', :last_name => 'Tom' )
+          assert_contain(/Updated Tom Tom/)
+        end
+      
+        should 'redirect to the user show page' do
+          edit_user(@ted, :email => 'tom@tom.tom')
+          user = User.find_by_email('tom@tom.tom')
+          assert_equal current_url, admin_user_url(user)
+        end
+        
+        should 'be able to change the role' do
+          edit_user(@ted, :role => 'admin')
+          @ted.reload
+          assert @ted.admin?
+        end
+        
+      end
+      
+      context 'with invalid data' do
+        
+        should 'display error messages' do
+          edit_user(@ted,
+            :first_name => '',
+            :last_name => '',
+            :email => 'invalidemail',
+            :password => 'good',
+            :password_confirmation => 'bad')
+          assert_contain(/First name can't be blank/)
+          assert_contain(/Last name can't be blank/)
+          assert_contain(/Email is invalid/)
+          assert_contain(/Password doesn't match confirmation/)
+        end
+        
+        should 'redisplay the edit form' do
+          edit_user(@ted, :first_name => '')
+          assert_have_selector 'form.edit_user'
+        end
+        
+      end
+      
+    end
+    
+    context 'when deleting a user' do
+
+      should 'display "Deleted [name]"' do
+        delete_user(@bob)
+        assert_contain(/Deleted Bob/)
+      end
+
+      should 'redirect to the user list' do
+        delete_user(@bob)
+        assert_equal current_url, admin_users_url
+      end
+      
+      should 'not display the deleted user in the list' do
+        delete_user(@bob)
+        assert_not_contain(/bob@bob.bob/)
+      end
+      
+      should 'not allow deleting currently logged in user' do
+        visit admin_user_url(@admin_user), :delete
+        assert_contain(/Cannot delete yourself/)
+        assert_contain(/admin@example.com/)
+      end
+
+    end
+               
+  end
+  
+  context 'Signed in as a non-admin user' do
+
+    setup do
+      @user = Factory(:user)
+      sign_in_as(@user.email, @user.password)
+    end
+    
+    should 'not give access' do
+      visit admin_users_url
+      assert_not_equal current_url, admin_users_url
+    end
+    
+  end
+  
+  
+  private
+  
+  
+  def create_user(options = {})
+    visit admin_users_url
+    click_link 'New User'
+    fill_in 'Email',            :with => options[:email]                  || 'tom@tom.tom'
+    fill_in 'Password',         :with => options[:password]               || 'password'
+    fill_in 'Confirm Password', :with => options[:password_confirmation]  || options[:password] || 'password'
+    fill_in 'First Name',       :with => options[:first_name]             || 'Tom'
+    fill_in 'Last Name',        :with => options[:last_name]              || 'Tom'
+    select options[:role] || '', :from => 'Role'
+    click_button 'Save'
+  end
+  
+  def edit_user(user, options = {})
+    visit admin_user_url(user)
+    click_link 'Edit'
+    fill_in 'Email',            :with => options[:email]                  || 'tom@tom.tom'
+    fill_in 'Password',         :with => options[:password]               || ''
+    fill_in 'Confirm Password', :with => options[:password_confirmation]  || options[:password] || ''
+    fill_in 'First Name',       :with => options[:first_name]             || 'Tom'
+    fill_in 'Last Name',        :with => options[:last_name]              || 'Tom'
+    select options[:role] || '', :from => 'Role'
+    click_button 'Save'
+  end
+  
+  def delete_user(user)
+    visit admin_user_url(user)
+    click_link 'Delete'
+  end
+    
+end

data/test/rails_root/test/integration/edit_profile_test.rb

@@ -0,0 +1,35 @@
+require 'test_helper'
+
+class EditProfileTest < ActionController::IntegrationTest
+  
+  context 'Editing a user profile' do
+    
+    setup do
+      @user = Factory(:user, :password => 'password')
+      sign_in_as(@user.email, 'password')
+      visit edit_user_path(@user)
+    end
+    
+    should_respond_with :success
+
+    should "see the form with his info" do
+      assert_select "input#user_first_name[value='#{@user.first_name}']"
+      assert_select "input#user_last_name[value='#{@user.last_name}']"
+      assert_select "input#user_email[value='#{@user.email}']"
+    end
+
+    should "update valid information and see the SHOW page" do
+      fill_in "user_first_name", :with => 'OtherName'
+      click_button 'Save'
+      assert_contain /othername/i
+    end
+
+    should "update invalid information and see errors" do
+      fill_in "user_first_name", :with => ''
+      click_button 'Save'
+      assert_contain /First name .* blank/i
+    end
+    
+  end
+
+end

data/test/rails_root/test/integration/facebook_test.rb

@@ -1,49 +1,61 @@
 require 'test_helper'
-require 'facebooker/mock/service'
-require 'facebooker/mock/session'
 
 class FacebookTest < ActionController::IntegrationTest
+  
+  if BlueLightSpecial.configuration.use_facebook_connect
 
-  context 'Signing in with Facebook' do
+    context 'Signing in with Facebook' do
     
-    setup do
-      Facebooker::MockService.fixture_path = File.dirname(__FILE__) + '/../facebooker_fixtures'
-      fb_session = Facebooker::MockSession.create
-      fb_session.secure!
-      CitiesController.any_instance.stubs(:facebook_session).returns(fb_session)
-    end
+      setup do
+        cookies[BlueLightSpecial.configuration.facebook_api_key + "_user"] = "8055"
+        cookies[BlueLightSpecial.configuration.facebook_api_key + "_session_key"] = "123456789"
+        FakeWeb.register_uri(:post,
+                             %r|http://api.facebook.com/restserver.php|,
+                             :body => '[{"about_me":"","activities":"","affiliations":{},"birthday":"July 18","books":"","current_location":{"city":"Orlando","state":"Florida","country":"United States","zip":""},"education_history":[{"name":"Florida Institute of Technology","year":1995,"concentrations":{},"degree":"","school_type":"Unknown"}],"first_name":"Bob","hometown_location":null,"hs_info":{"hs1_name":"Cheyenne Mountain High School","hs2_name":"","grad_year":1992,"hs1_id":3202,"hs2_id":0},"interests":"","is_app_user":true,"last_name":"Jones","meeting_for":{},"meeting_sex":{},"movies":"","music":"","name":"Bob Jones","notes_count":null,"pic":"http:\/\/profile.ak.fbcdn.net\/hprofile-ak-sf2p\/hs272.snc3\/23197_1334019372_5345_s.jpg","pic_big":"http:\/\/profile.ak.fbcdn.net\/v228\/245\/118\/n1334019372_6158.jpg","pic_small":"http:\/\/profile.ak.fbcdn.net\/hprofile-ak-sf2p\/hs272.snc3\/23197_1334019372_5345_t.jpg","political":"","profile_update_time":1267034911,"quotes":"","relationship_status":"","religion":"","sex":"male","significant_other_id":null,"status":{"message":"","time":0,"status_id":0},"timezone":-5,"tv":"","uid":8055,"wall_count":34,"work_history":{},"pic_square":"http:\/\/profile.ak.fbcdn.net\/hprofile-ak-sf2p\/hs272.snc3\/23197_1334019372_5345_q.jpg","has_added_app":true,"email_hashes":{},"locale":"en_US","profile_url":"http:\/\/www.facebook.com\/profile.php?id=1334019372","proxied_email":"apps+339309032618.1334019372.a320f4a38471f7b537079f5c13bb33f1@proxymail.facebook.com","pic_big_with_logo":"http:\/\/external.ak.fbcdn.net\/safe_image.php?logo&d=20fef10357c21b2e1acc8dac7d4bed49&url=http%3A%2F%2Fprofile.ak.fbcdn.net%2Fv228%2F245%2F118%2Fn1334019372_6158.jpg&v=5","pic_small_with_logo":"http:\/\/external.ak.fbcdn.net\/safe_image.php?logo&d=ad4b560e363f5b40ccbe81e1d985c91e&url=http%3A%2F%2Fprofile.ak.fbcdn.net%2Fhprofile-ak-sf2p%2Fhs272.snc3%2F23197_1334019372_5345_t.jpg&v=5","pic_square_with_logo":"http:\/\/external.ak.fbcdn.net\/safe_image.php?logo&d=a0118842ed70fce04e7883f5ab52023f&url=http%3A%2F%2Fprofile.ak.fbcdn.net%2Fhprofile-ak-sf2p%2Fhs272.snc3%2F23197_1334019372_5345_q.jpg&v=5","pic_with_logo":"http:\/\/external.ak.fbcdn.net\/safe_image.php?logo&d=eb90cc8c5f332436f5d56009aab6b467&url=http%3A%2F%2Fprofile.ak.fbcdn.net%2Fhprofile-ak-sf2p%2Fhs272.snc3%2F23197_1334019372_5345_s.jpg&v=5","birthday_date":"07\/18","email":"bob@example.com","allowed_restrictions":"alcohol"}]'
+                             )
+      end
     
-    should 'find an existing user with the facebook uid' do
-      user = Factory( :facebook_user,
-                      :facebook_uid => 8055,
-                      :email => 'bob@facebook.com',
-                      :first_name => 'Bob',
-                      :last_name => 'Jones',
-                      :display_name => 'Bob Jones',
-                      :zip_code => '11111')
-
-      visit city_url(City.default)
-      assert controller.signed_in?
-      assert_equal controller.current_user, user
-    end
+      teardown do
+        cookies[BlueLightSpecial.configuration.facebook_api_key + "_user"] = nil
+        cookies[BlueLightSpecial.configuration.facebook_api_key + "_session_key"] = nil
+      end
     
-    should 'create a new user when the facebook uid is not found' do
-      assert_nil User.find_by_facebook_uid(8055)
+      should 'find an existing user with the facebook uid' do
+        user = Factory( :facebook_user,
+                        :facebook_uid => 8055,
+                        :email => 'bob@facebook.com')
+
+        visit fb_connect_url
+        assert controller.signed_in?
+        assert_equal controller.current_user, user
+      end
+
+      should 'find an existing user with the facebook email address' do
+        user = Factory( :user,
+                        :facebook_uid => nil,
+                        :email => 'bob@example.com')
+
+        visit fb_connect_url
+        assert controller.signed_in?
+        assert_equal controller.current_user, user
+      end
+
+      should 'create a new user when the facebook uid is not found' do
+        assert_nil User.find_by_facebook_uid(8055)
     
-      visit city_url(City.default)
-      assert controller.signed_in?
-      assert_equal controller.current_user.facebook_uid, 8055
-    end
+        visit fb_connect_url
+        assert controller.signed_in?
+        assert_equal '8055', controller.current_user.facebook_uid
+      end
   
-    should 'copy the facebook user details' do
-      visit city_url(City.default)
-      assert controller.signed_in?
-      assert_equal controller.current_user.first_name, 'Dave'
-      assert_equal controller.current_user.last_name, 'Fetterman'
-      assert_equal controller.current_user.display_name, 'Dave Fetterman'
-      assert_equal controller.current_user.email, 'bob@facebook.com'
-    end
+      should 'copy the facebook user details' do
+        visit fb_connect_url
+        assert controller.signed_in?
+        assert_equal 'bob@example.com', controller.current_user.email
+      end
   
+    end
+
   end
 
 end