bscf-core 0.2.0 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0b265836a53a2c3d1b4c492d064732a6203150366915f479897ee293690414d3
-  data.tar.gz: 444ed29066f85fb8b2d0defd0c3c798bac8a657ef09ba6e1d6777204edff7a1f
+  metadata.gz: 1210d0d4c690b34b822a20bd4e7a364e1731cb1df1e40b8352554805ee29e234
+  data.tar.gz: 86b2afc9d7fbfc5d2ebff1096269aebaa1f80c4b77b3e45615c70c4e2ee43ee4
 SHA512:
-  metadata.gz: 0e5cd8ca766f662abc09b4d1962b252087323fa2439773f4afdb3cde3dcf03fe0794ee860a130c3c48acdb44215a1ace729a38041bcae5ff38f16a55d57aee75
-  data.tar.gz: 8ea894bd332364d89656120224bdd57ec808dc80e6c588ff9be84b40fb030f7d449e80dc0bd6622064fe647eb71e31eef3d5a9de9a483507bc6db6983516b631
+  metadata.gz: 1e7eb9cb98cda9c7f392934338a2d5a20bbc139adf7e068323da70bc7aa3f39b11983e4d99d92db284cdfabc63f66989892a121ef28ffa52a8f73d5fb26d5ca2
+  data.tar.gz: 48294c77f982ea1c2e9691bff4d29010aabcba9f8bdd98a3a449d80505e9c3458df93074f587c2d9cd9d79595f56e3e45148b332cbcaac3829bbf0034913de33

data/README.md

@@ -1,10 +1,13 @@
 # Bscf::Core
+
 Short description and motivation.
 
 ## Usage
+
 How to use my plugin.
 
 ## Installation
+
 Add this line to your application's Gemfile:
 
 ```ruby
@@ -12,17 +15,57 @@ gem "bscf-core"
 ```
 
 And then execute:
+
 ```bash
 $ bundle
 ```
 
 Or install it yourself as:
+
 ```bash
 $ gem install bscf-core
 ```
 
+#### Version Tasks
+
+- **Bump Version**
+
+  rake version:bump[type]
+
+  - `patch`: Increases version by 0.0.1 (e.g., 1.0.0 -> 1.0.1)
+
+  ```bash
+  rake version:bump[patch]
+  ```
+
+  - `minor`: Increases version by 0.1.0 (e.g., 1.0.0 -> 1.1.0)
+
+  ```bash
+  rake version:bump[minor]
+  ```
+
+  - `major`: Increases version by 1.0.0 (e.g., 1.0.0 -> 2.0.0)
+
+  ```bash
+  rake version:bump[major]
+  ```
+
+  - `pre`: Adds or increments pre-release version (e.g., 1.0.0 -> 1.0.0-pre.1)
+
+  ```bash
+  rake version:bump[pre]
+  ```
+
+  - `release`: Removes pre-release version (e.g., 1.0.0-pre.1 -> 1.0.0)
+
+  ```bash
+  rake version:bump[release]
+  ```
+
 ## Contributing
+
 Contribution directions go here.
 
 ## License
+
 The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).

data/app/controllers/bscf/core/application_controller.rb

@@ -1,6 +1,39 @@
 module Bscf
   module Core
     class ApplicationController < ActionController::API
+      private
+
+      def is_authenticated
+        render json: { error: "Not authenticated" }, status: :unauthorized unless current_user
+      end
+
+      def is_allowed
+        user_role = UserRole.find_by(user: current_user)
+        role = Role.find(user_role.role_id)
+        render json: { error: "Not authorized" }, status: :ok unless role.name == "User" || role.name == "Admin"
+      end
+
+      def current_user
+        return @current_user if defined?(@current_user)
+
+        return unless auth_token
+
+        begin
+          payload = TokenService.new.decode(auth_token)
+          @current_user = User.find_by(id: payload["user"]["id"])
+        rescue JWT::DecodeError => e
+          Rails.logger.warn "Token decode error: #{e.message}"
+          nil
+        rescue ActiveRecord::RecordNotFound => e
+          Rails.logger.warn "User not found: #{e.message}"
+          nil
+        end
+      end
+
+      def auth_token
+        auth_header = request.headers["Authorization"]
+        auth_header&.split(" ")&.last
+      end
     end
   end
 end

data/app/services/token_service.rb

@@ -0,0 +1,14 @@
+require "jwt"
+
+class TokenService
+  def encode(payload)
+    JWT.encode(payload, ENV["SECRET_KEY_BASE"] || "secret_key_base")
+  end
+
+  def decode(token)
+    body = JWT.decode(token, ENV["SECRET_KEY_BASE"] || "secret_key_base")[0]
+    HashWithIndifferentAccess.new body
+  rescue JWT::DecodeError, JSON::ParserError => e
+    raise JWT::DecodeError.new("Invalid token")
+  end
+end

data/lib/bscf/core/version.rb

@@ -1,5 +1,5 @@
 module Bscf
   module Core
-    VERSION = "0.2.0"
+    VERSION = "0.2.2"
   end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: bscf-core
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.2
 platform: ruby
 authors:
 - Asrat
 bindir: bin
 cert_chain: []
-date: 2025-03-27 00:00:00.000000000 Z
+date: 2025-03-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: active_model_serializers
@@ -303,6 +303,7 @@ files:
 - app/models/bscf/core/user_role.rb
 - app/models/bscf/core/virtual_account.rb
 - app/models/bscf/core/virtual_account_transaction.rb
+- app/services/token_service.rb
 - config/database.yml
 - config/routes.rb
 - db/migrate/20250326065606_create_bscf_core_users.rb
@@ -326,39 +327,6 @@ files:
 - lib/bscf/core/version.rb
 - lib/tasks/bscf/core_tasks.rake
 - lib/tasks/release.rake
-- spec/dummy/Rakefile
-- spec/dummy/app/assets/stylesheets/application.css
-- spec/dummy/app/controllers/application_controller.rb
-- spec/dummy/app/jobs/application_job.rb
-- spec/dummy/app/mailers/application_mailer.rb
-- spec/dummy/app/models/application_record.rb
-- spec/dummy/app/views/layouts/mailer.html.erb
-- spec/dummy/app/views/layouts/mailer.text.erb
-- spec/dummy/bin/dev
-- spec/dummy/bin/rails
-- spec/dummy/bin/rake
-- spec/dummy/bin/setup
-- spec/dummy/config.ru
-- spec/dummy/config/application.rb
-- spec/dummy/config/boot.rb
-- spec/dummy/config/cable.yml
-- spec/dummy/config/database.yml
-- spec/dummy/config/environment.rb
-- spec/dummy/config/environments/development.rb
-- spec/dummy/config/environments/production.rb
-- spec/dummy/config/environments/test.rb
-- spec/dummy/config/initializers/cors.rb
-- spec/dummy/config/initializers/filter_parameter_logging.rb
-- spec/dummy/config/initializers/inflections.rb
-- spec/dummy/config/locales/en.yml
-- spec/dummy/config/puma.rb
-- spec/dummy/config/routes.rb
-- spec/dummy/config/storage.yml
-- spec/dummy/db/schema.rb
-- spec/dummy/log/development.log
-- spec/dummy/log/test.log
-- spec/dummy/tmp/local_secret.txt
-- spec/examples.txt
 - spec/factories/bscf/core/addresses.rb
 - spec/factories/bscf/core/businesses.rb
 - spec/factories/bscf/core/categories.rb
@@ -375,26 +343,6 @@ files:
 - spec/factories/bscf/core/users.rb
 - spec/factories/bscf/core/virtual_account_transactions.rb
 - spec/factories/bscf/core/virtual_accounts.rb
-- spec/models/bscf/core/address_spec.rb
-- spec/models/bscf/core/business_spec.rb
-- spec/models/bscf/core/category_spec.rb
-- spec/models/bscf/core/order_item_spec.rb
-- spec/models/bscf/core/order_spec.rb
-- spec/models/bscf/core/product_spec.rb
-- spec/models/bscf/core/quotation_item_spec.rb
-- spec/models/bscf/core/quotation_spec.rb
-- spec/models/bscf/core/request_for_quotation_spec.rb
-- spec/models/bscf/core/rfq_item_spec.rb
-- spec/models/bscf/core/role_spec.rb
-- spec/models/bscf/core/user_profile_spec.rb
-- spec/models/bscf/core/user_role_spec.rb
-- spec/models/bscf/core/user_spec.rb
-- spec/models/bscf/core/virtual_account_spec.rb
-- spec/models/bscf/core/virtual_account_transaction_spec.rb
-- spec/rails_helper.rb
-- spec/spec_helper.rb
-- spec/support/models/shared_examples.rb
-- spec/support/requests/shared_requests.rb
 homepage: https://mksaddis.com/
 licenses:
 - MIT

data/spec/dummy/Rakefile

@@ -1,6 +0,0 @@
-# Add your own tasks in files placed in lib/tasks ending in .rake,
-# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
-
-require_relative "config/application"
-
-Rails.application.load_tasks

data/spec/dummy/app/assets/stylesheets/application.css

@@ -1,15 +0,0 @@
-/*
- * This is a manifest file that'll be compiled into application.css, which will include all the files
- * listed below.
- *
- * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
- * or any plugin's vendor/assets/stylesheets directory can be referenced here using a relative path.
- *
- * You're free to add application-wide styles to this file and they'll appear at the bottom of the
- * compiled file so the styles you add here take precedence over styles defined in any other CSS/SCSS
- * files in this directory. Styles in this file should be added after the last require_* statement.
- * It is generally better to create a new file per style scope.
- *
- *= require_tree .
- *= require_self
- */

data/spec/dummy/app/controllers/application_controller.rb

@@ -1,2 +0,0 @@
-class ApplicationController < ActionController::API
-end

data/spec/dummy/app/jobs/application_job.rb

@@ -1,7 +0,0 @@
-class ApplicationJob < ActiveJob::Base
-  # Automatically retry jobs that encountered a deadlock
-  # retry_on ActiveRecord::Deadlocked
-
-  # Most jobs are safe to ignore if the underlying records are no longer available
-  # discard_on ActiveJob::DeserializationError
-end

data/spec/dummy/app/mailers/application_mailer.rb

@@ -1,4 +0,0 @@
-class ApplicationMailer < ActionMailer::Base
-  default from: "from@example.com"
-  layout "mailer"
-end

data/spec/dummy/app/models/application_record.rb

@@ -1,3 +0,0 @@
-class ApplicationRecord < ActiveRecord::Base
-  primary_abstract_class
-end

data/spec/dummy/app/views/layouts/mailer.html.erb

@@ -1,13 +0,0 @@
-<!DOCTYPE html>
-<html>
-  <head>
-    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
-    <style>
-      /* Email styles need to be inline */
-    </style>
-  </head>
-
-  <body>
-    <%= yield %>
-  </body>
-</html>

data/spec/dummy/app/views/layouts/mailer.text.erb

@@ -1 +0,0 @@
-<%= yield %>

data/spec/dummy/bin/dev

@@ -1,2 +0,0 @@
-#!/usr/bin/env ruby
-exec "./bin/rails", "server", *ARGV

data/spec/dummy/bin/rails

@@ -1,4 +0,0 @@
-#!/usr/bin/env ruby
-APP_PATH = File.expand_path("../config/application", __dir__)
-require_relative "../config/boot"
-require "rails/commands"

data/spec/dummy/bin/rake

@@ -1,4 +0,0 @@
-#!/usr/bin/env ruby
-require_relative "../config/boot"
-require "rake"
-Rake.application.run

data/spec/dummy/bin/setup

@@ -1,34 +0,0 @@
-#!/usr/bin/env ruby
-require "fileutils"
-
-APP_ROOT = File.expand_path("..", __dir__)
-
-def system!(*args)
-  system(*args, exception: true)
-end
-
-FileUtils.chdir APP_ROOT do
-  # This script is a way to set up or update your development environment automatically.
-  # This script is idempotent, so that you can run it at any time and get an expectable outcome.
-  # Add necessary setup steps to this file.
-
-  puts "== Installing dependencies =="
-  system("bundle check") || system!("bundle install")
-
-  # puts "\n== Copying sample files =="
-  # unless File.exist?("config/database.yml")
-  #   FileUtils.cp "config/database.yml.sample", "config/database.yml"
-  # end
-
-  puts "\n== Preparing database =="
-  system! "bin/rails db:prepare"
-
-  puts "\n== Removing old logs and tempfiles =="
-  system! "bin/rails log:clear tmp:clear"
-
-  unless ARGV.include?("--skip-server")
-    puts "\n== Starting development server =="
-    STDOUT.flush # flush the output before exec(2) so that it displays
-    exec "bin/dev"
-  end
-end

data/spec/dummy/config/application.rb

@@ -1,43 +0,0 @@
-require_relative "boot"
-
-require "rails"
-# Pick the frameworks you want:
-require "active_model/railtie"
-require "active_job/railtie"
-require "active_record/railtie"
-require "active_storage/engine"
-require "action_controller/railtie"
-require "action_mailer/railtie"
-require "action_mailbox/engine"
-require "action_text/engine"
-require "action_view/railtie"
-require "action_cable/engine"
-# require "rails/test_unit/railtie"
-
-# Require the gems listed in Gemfile, including any gems
-# you've limited to :test, :development, or :production.
-Bundler.require(*Rails.groups)
-
-module Dummy
-  class Application < Rails::Application
-    config.load_defaults Rails::VERSION::STRING.to_f
-
-    # Please, add to the `ignore` list any other `lib` subdirectories that do
-    # not contain `.rb` files, or that should not be reloaded or eager loaded.
-    # Common ones are `templates`, `generators`, or `middleware`, for example.
-    config.autoload_lib(ignore: %w[assets tasks])
-
-    # Configuration for the application, engines, and railties goes here.
-    #
-    # These settings can be overridden in specific environments using the files
-    # in config/environments, which are processed later.
-    #
-    # config.time_zone = "Central Time (US & Canada)"
-    # config.eager_load_paths << Rails.root.join("extras")
-
-    # Only loads a smaller set of middleware suitable for API only apps.
-    # Middleware like session, flash, cookies can be added back manually.
-    # Skip views, helpers and assets when generating a new resource.
-    config.api_only = true
-  end
-end

data/spec/dummy/config/boot.rb

@@ -1,5 +0,0 @@
-# Set up gems listed in the Gemfile.
-ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../../../Gemfile", __dir__)
-
-require "bundler/setup" if File.exist?(ENV["BUNDLE_GEMFILE"])
-$LOAD_PATH.unshift File.expand_path("../../../lib", __dir__)

data/spec/dummy/config/cable.yml

@@ -1,10 +0,0 @@
-development:
-  adapter: async
-
-test:
-  adapter: test
-
-production:
-  adapter: redis
-  url: <%= ENV.fetch("REDIS_URL") { "redis://localhost:6379/1" } %>
-  channel_prefix: dummy_production

data/spec/dummy/config/database.yml

@@ -1,17 +0,0 @@
-default: &default
-  adapter: postgresql
-  encoding: unicode
-  host: localhost
-  port: 5432
-  username: postgres
-  password: password
-  pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %>
-  timeout: 5000
-
-development:
-  <<: *default
-  database: bscf_dev
-
-test:
-  <<: *default
-  database: bscf_test

data/spec/dummy/config/environment.rb

@@ -1,5 +0,0 @@
-# Load the Rails application.
-require_relative "application"
-
-# Initialize the Rails application.
-Rails.application.initialize!

data/spec/dummy/config/environments/development.rb

@@ -1,67 +0,0 @@
-require "active_support/core_ext/integer/time"
-
-Rails.application.configure do
-  # Settings specified here will take precedence over those in config/application.rb.
-
-  # Make code changes take effect immediately without server restart.
-  config.enable_reloading = true
-
-  # Do not eager load code on boot.
-  config.eager_load = false
-
-  # Show full error reports.
-  config.consider_all_requests_local = true
-
-  # Enable server timing.
-  config.server_timing = true
-
-  # Enable/disable Action Controller caching. By default Action Controller caching is disabled.
-  # Run rails dev:cache to toggle Action Controller caching.
-  if Rails.root.join("tmp/caching-dev.txt").exist?
-    config.public_file_server.headers = { "cache-control" => "public, max-age=#{2.days.to_i}" }
-  else
-    config.action_controller.perform_caching = false
-  end
-
-  # Change to :null_store to avoid any caching.
-  config.cache_store = :memory_store
-
-  # Store uploaded files on the local file system (see config/storage.yml for options).
-  config.active_storage.service = :local
-
-  # Don't care if the mailer can't send.
-  config.action_mailer.raise_delivery_errors = false
-
-  # Make template changes take effect immediately.
-  config.action_mailer.perform_caching = false
-
-  # Set localhost to be used by links generated in mailer templates.
-  config.action_mailer.default_url_options = { host: "localhost", port: 3000 }
-
-  # Print deprecation notices to the Rails logger.
-  config.active_support.deprecation = :log
-
-  # Raise an error on page load if there are pending migrations.
-  config.active_record.migration_error = :page_load
-
-  # Highlight code that triggered database queries in logs.
-  config.active_record.verbose_query_logs = true
-
-  # Append comments with runtime information tags to SQL queries in logs.
-  config.active_record.query_log_tags_enabled = true
-
-  # Highlight code that enqueued background job in logs.
-  config.active_job.verbose_enqueue_logs = true
-
-  # Raises error for missing translations.
-  # config.i18n.raise_on_missing_translations = true
-
-  # Annotate rendered view with file names.
-  config.action_view.annotate_rendered_view_with_filenames = true
-
-  # Uncomment if you wish to allow Action Cable access from any origin.
-  # config.action_cable.disable_request_forgery_protection = true
-
-  # Raise error when a before_action's only/except options reference missing actions.
-  config.action_controller.raise_on_missing_callback_actions = true
-end

data/spec/dummy/config/environments/production.rb

@@ -1,86 +0,0 @@
-require "active_support/core_ext/integer/time"
-
-Rails.application.configure do
-  # Settings specified here will take precedence over those in config/application.rb.
-
-  # Code is not reloaded between requests.
-  config.enable_reloading = false
-
-  # Eager load code on boot for better performance and memory savings (ignored by Rake tasks).
-  config.eager_load = true
-
-  # Full error reports are disabled.
-  config.consider_all_requests_local = false
-
-  # Cache assets for far-future expiry since they are all digest stamped.
-  config.public_file_server.headers = { "cache-control" => "public, max-age=#{1.year.to_i}" }
-
-  # Enable serving of images, stylesheets, and JavaScripts from an asset server.
-  # config.asset_host = "http://assets.example.com"
-
-  # Store uploaded files on the local file system (see config/storage.yml for options).
-  config.active_storage.service = :local
-
-  # Assume all access to the app is happening through a SSL-terminating reverse proxy.
-  config.assume_ssl = true
-
-  # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
-  config.force_ssl = true
-
-  # Skip http-to-https redirect for the default health check endpoint.
-  # config.ssl_options = { redirect: { exclude: ->(request) { request.path == "/up" } } }
-
-  # Log to STDOUT with the current request id as a default log tag.
-  config.log_tags = [ :request_id ]
-  config.logger   = ActiveSupport::TaggedLogging.logger(STDOUT)
-
-  # Change to "debug" to log everything (including potentially personally-identifiable information!)
-  config.log_level = ENV.fetch("RAILS_LOG_LEVEL", "info")
-
-  # Prevent health checks from clogging up the logs.
-  config.silence_healthcheck_path = "/up"
-
-  # Don't log any deprecations.
-  config.active_support.report_deprecations = false
-
-  # Replace the default in-process memory cache store with a durable alternative.
-  # config.cache_store = :mem_cache_store
-
-  # Replace the default in-process and non-durable queuing backend for Active Job.
-  # config.active_job.queue_adapter = :resque
-
-  # Ignore bad email addresses and do not raise email delivery errors.
-  # Set this to true and configure the email server for immediate delivery to raise delivery errors.
-  # config.action_mailer.raise_delivery_errors = false
-
-  # Set host to be used by links generated in mailer templates.
-  config.action_mailer.default_url_options = { host: "example.com" }
-
-  # Specify outgoing SMTP server. Remember to add smtp/* credentials via rails credentials:edit.
-  # config.action_mailer.smtp_settings = {
-  #   user_name: Rails.application.credentials.dig(:smtp, :user_name),
-  #   password: Rails.application.credentials.dig(:smtp, :password),
-  #   address: "smtp.example.com",
-  #   port: 587,
-  #   authentication: :plain
-  # }
-
-  # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
-  # the I18n.default_locale when a translation cannot be found).
-  config.i18n.fallbacks = true
-
-  # Do not dump schema after migrations.
-  config.active_record.dump_schema_after_migration = false
-
-  # Only use :id for inspections in production.
-  config.active_record.attributes_for_inspect = [ :id ]
-
-  # Enable DNS rebinding protection and other `Host` header attacks.
-  # config.hosts = [
-  #   "example.com",     # Allow requests from example.com
-  #   /.*\.example\.com/ # Allow requests from subdomains like `www.example.com`
-  # ]
-  #
-  # Skip DNS rebinding protection for the default health check endpoint.
-  # config.host_authorization = { exclude: ->(request) { request.path == "/up" } }
-end

data/spec/dummy/config/environments/test.rb

@@ -1,53 +0,0 @@
-# The test environment is used exclusively to run your application's
-# test suite. You never need to work with it otherwise. Remember that
-# your test database is "scratch space" for the test suite and is wiped
-# and recreated between test runs. Don't rely on the data there!
-
-Rails.application.configure do
-  # Settings specified here will take precedence over those in config/application.rb.
-
-  # While tests run files are not watched, reloading is not necessary.
-  config.enable_reloading = false
-
-  # Eager loading loads your entire application. When running a single test locally,
-  # this is usually not necessary, and can slow down your test suite. However, it's
-  # recommended that you enable it in continuous integration systems to ensure eager
-  # loading is working properly before deploying your code.
-  config.eager_load = ENV["CI"].present?
-
-  # Configure public file server for tests with cache-control for performance.
-  config.public_file_server.headers = { "cache-control" => "public, max-age=3600" }
-
-  # Show full error reports.
-  config.consider_all_requests_local = true
-  config.cache_store = :null_store
-
-  # Render exception templates for rescuable exceptions and raise for other exceptions.
-  config.action_dispatch.show_exceptions = :rescuable
-
-  # Disable request forgery protection in test environment.
-  config.action_controller.allow_forgery_protection = false
-
-  # Store uploaded files on the local file system in a temporary directory.
-  config.active_storage.service = :test
-
-  # Tell Action Mailer not to deliver emails to the real world.
-  # The :test delivery method accumulates sent emails in the
-  # ActionMailer::Base.deliveries array.
-  config.action_mailer.delivery_method = :test
-
-  # Set host to be used by links generated in mailer templates.
-  config.action_mailer.default_url_options = { host: "example.com" }
-
-  # Print deprecation notices to the stderr.
-  config.active_support.deprecation = :stderr
-
-  # Raises error for missing translations.
-  # config.i18n.raise_on_missing_translations = true
-
-  # Annotate rendered view with file names.
-  # config.action_view.annotate_rendered_view_with_filenames = true
-
-  # Raise error when a before_action's only/except options reference missing actions.
-  config.action_controller.raise_on_missing_callback_actions = true
-end

data/spec/dummy/config/initializers/cors.rb

@@ -1,16 +0,0 @@
-# Be sure to restart your server when you modify this file.
-
-# Avoid CORS issues when API is called from the frontend app.
-# Handle Cross-Origin Resource Sharing (CORS) in order to accept cross-origin Ajax requests.
-
-# Read more: https://github.com/cyu/rack-cors
-
-# Rails.application.config.middleware.insert_before 0, Rack::Cors do
-#   allow do
-#     origins "example.com"
-#
-#     resource "*",
-#       headers: :any,
-#       methods: [:get, :post, :put, :patch, :delete, :options, :head]
-#   end
-# end