bullet_train 1.0.0 → 1.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bcd7fed56a4e0b49d9ca96b95e4a804f6d8d48ef0443f45a28e9a9f28b811549
-  data.tar.gz: 1bbc923e87403a718037831d9a7c6c7beeafb8192169b7897ce56ec0845c27dc
+  metadata.gz: 533e95a2c22629bce2db6569181981dd661621d7a2b17347d210f782554ac6f9
+  data.tar.gz: 7d179440547451b7ff69480478a8f2cb481e79b4b4ee3e80e1f950b219768150
 SHA512:
-  metadata.gz: 53052501e61f60b496c5e82cd6f0c0cca4a1310a6093146c07f719556cd2005a260042de0dd05a289e0230e41e83d3b02195430134c1706d91a5c105bde35f09
-  data.tar.gz: 9b34d71773c57d358ca7322ecdaf9948a676a42eca564245dc891f9d4a9bc2f94b731350e59d5d952aeedf7b45521bf2a153159c6ced6ccad8d1c1aff18cb97f
+  metadata.gz: '059cb145c72d2adf059902f5d0934d36362ad06ea6dc728a3951057b60758187e4f192e7bd24d62f0030fbd1c3d36e7797ed94ea3cd390b4c955a49fc4653301'
+  data.tar.gz: 108c4abc412f29b2321b1f6acc5c6c6e1e35d358fda6ba14f322dcfb49591c7ccc3c29ca10989e30ffcb915c5c2df727b9f4d4e044776f6e3a6f92d391f91389

data/app/models/concerns/invitations/core.rb

@@ -0,0 +1,46 @@
+module Invitations::Core
+  extend ActiveSupport::Concern
+
+  included do
+    belongs_to :team
+    belongs_to :from_membership, class_name: "Membership"
+    has_one :membership, dependent: :nullify
+    has_many :roles, through: :membership
+
+    accepts_nested_attributes_for :membership
+
+    validates :email, presence: true
+
+    before_create :generate_uuid
+    after_create :set_added_by_membership
+    after_create :send_invitation_email
+  end
+
+  def set_added_by_membership
+    membership.update(added_by: from_membership)
+  end
+
+  def send_invitation_email
+    UserMailer.invited(uuid).deliver_later
+  end
+
+  def generate_uuid
+    self.uuid = SecureRandom.hex
+  end
+
+  def accept_for(user)
+    User.transaction do
+      user.memberships << membership
+      user.update(current_team: team, former_user: false)
+      destroy
+    end
+  end
+
+  def name
+    I18n.t("invitations.values.name", team_name: team.name)
+  end
+
+  def is_for?(user)
+    user.email.downcase.strip == email.downcase.strip
+  end
+end

data/app/models/concerns/memberships/core.rb

@@ -0,0 +1,137 @@
+module Memberships::Core
+  extend ActiveSupport::Concern
+
+  included do
+    # See `docs/permissions.md` for details.
+    include Roles::Support
+
+    belongs_to :user, optional: true
+    belongs_to :team
+    belongs_to :invitation, optional: true, dependent: :destroy
+    belongs_to :added_by, class_name: "Membership", optional: true
+    belongs_to :platform_agent_of, class_name: "Platform::Application", optional: true
+
+    has_many :scaffolding_completely_concrete_tangible_things_assignments, class_name: "Scaffolding::CompletelyConcrete::TangibleThings::Assignment", dependent: :destroy
+    has_many :scaffolding_completely_concrete_tangible_things, through: :scaffolding_completely_concrete_tangible_things_assignments, source: :tangible_thing
+    has_many :reassignments_scaffolding_completely_concrete_tangible_things_reassignments, class_name: "Memberships::Reassignments::ScaffoldingCompletelyConcreteTangibleThingsReassignment", dependent: :destroy, foreign_key: :membership_id
+
+    has_many :scaffolding_absolutely_abstract_creative_concepts_collaborators, class_name: "Scaffolding::AbsolutelyAbstract::CreativeConcepts::Collaborator", dependent: :destroy
+
+    after_destroy do
+      # if we're destroying a user's membership to the team they have set as
+      # current, then we need to remove that so they don't get an error.
+      if user&.current_team == team
+        user.current_team = nil
+        user.save
+      end
+    end
+
+    scope :current_and_invited, -> { includes(:invitation).where("user_id IS NOT NULL OR invitations.id IS NOT NULL").references(:invitation) }
+    scope :current, -> { where("user_id IS NOT NULL") }
+    scope :tombstones, -> { includes(:invitation).where("user_id IS NULL AND invitations.id IS NULL").references(:invitation) }
+  end
+
+  def name
+    full_name
+  end
+
+  def label_string
+    full_name
+  end
+
+  # we overload this method so that when setting the list of role ids
+  # associated with a membership, admins can never remove the last admin
+  # of a team.
+  def role_ids=(ids)
+    # if this membership was an admin, and the new list of role ids don't include admin.
+    if admin? && !ids.include?(Role.admin.id)
+      unless team.admins.count > 1
+        raise RemovingLastTeamAdminException.new("You can't remove the last team admin.")
+      end
+    end
+
+    super(ids)
+  end
+
+  def unclaimed?
+    user.nil? && !invitation.nil?
+  end
+
+  def tombstone?
+    user.nil? && invitation.nil?
+  end
+
+  def last_admin?
+    return false unless admin?
+    return false unless user.present?
+    team.memberships.current.select(&:admin?) == [self]
+  end
+
+  def nullify_user
+    if last_admin?
+      raise RemovingLastTeamAdminException.new("You can't remove the last team admin.")
+    end
+
+    if (user_was = user)
+      unless user_first_name.present?
+        self.user_first_name = user.first_name
+      end
+
+      unless user_last_name.present?
+        self.user_last_name = user.last_name
+      end
+
+      unless user_profile_photo_id.present?
+        self.user_profile_photo_id = user.profile_photo_id
+      end
+
+      unless user_email.present?
+        self.user_email = user.email
+      end
+
+      self.user = nil
+      save
+
+      user_was.invalidate_ability_cache
+
+      user_was.update(
+        current_team: user_was.teams.first,
+        former_user: user_was.teams.empty?
+      )
+    end
+
+    # we do this here just in case by some weird chance an active membership had an invitation attached.
+    invitation&.destroy
+  end
+
+  def email
+    user&.email || user_email.presence || invitation&.email
+  end
+
+  def full_name
+    user&.full_name || [first_name.presence, last_name.presence].join(" ").presence || email
+  end
+
+  def first_name
+    user&.first_name || user_first_name
+  end
+
+  def last_name
+    user&.last_name || user_last_name
+  end
+
+  def last_initial
+    return nil unless last_name.present?
+    "#{last_name}."
+  end
+
+  def first_name_last_initial
+    [first_name, last_initial].map(&:present?).join(" ")
+  end
+
+  # TODO utilize this.
+  # members shouldn't receive notifications unless they are either an active user or an outstanding invitation.
+  def should_receive_notifications?
+    invitation.present? || user.present?
+  end
+end

data/app/models/concerns/teams/core.rb

@@ -0,0 +1,51 @@
+module Teams::Core
+  extend ActiveSupport::Concern
+
+  included do
+    # super scaffolding
+    unless scaffolding_things_disabled?
+      has_many :scaffolding_absolutely_abstract_creative_concepts, class_name: "Scaffolding::AbsolutelyAbstract::CreativeConcept", dependent: :destroy, enable_updates: true
+    end
+
+    # memberships and invitations
+    has_many :memberships, dependent: :destroy
+    has_many :users, through: :memberships
+    has_many :invitations
+
+    # oauth for grape api
+    has_many :platform_applications, class_name: "Platform::Application", dependent: :destroy, foreign_key: :team_id
+
+    # integrations
+    has_many :integrations_stripe_installations, class_name: "Integrations::StripeInstallation", dependent: :destroy if stripe_enabled?
+
+    # validations
+    validates :name, presence: true
+    validates :time_zone, inclusion: {in: ActiveSupport::TimeZone.all.map(&:name)}, allow_nil: true
+  end
+
+  def admins
+    memberships.current_and_invited.admins
+  end
+
+  def admin_users
+    admins.map(&:user).compact
+  end
+
+  def primary_contact
+    admin_users.min { |user| user.created_at }
+  end
+
+  def formatted_email_address
+    primary_contact.email
+  end
+
+  def invalidate_caches
+    users.map(&:invalidate_ability_cache)
+  end
+
+  def team
+    # some generic features appeal to the `team` method for security or scoping purposes, but sometimes those same
+    # generic functions need to function for a team model as well, so we do this.
+    self
+  end
+end

data/app/models/concerns/users/core.rb

@@ -0,0 +1,164 @@
+module Users::Core
+  extend ActiveSupport::Concern
+
+  included do
+    if two_factor_authentication_enabled?
+      devise :two_factor_authenticatable, :two_factor_backupable, :omniauthable,
+        :registerable, :recoverable, :rememberable, :trackable, :validatable,
+        otp_secret_encryption_key: ENV["TWO_FACTOR_ENCRYPTION_KEY"]
+    else
+      devise :omniauthable, :database_authenticatable, :registerable,
+        :recoverable, :rememberable, :trackable, :validatable
+    end
+
+    # teams
+    has_many :memberships, dependent: :destroy
+    has_many :scaffolding_absolutely_abstract_creative_concepts_collaborators, through: :memberships
+    has_many :teams, through: :memberships
+    belongs_to :current_team, class_name: "Team", optional: true
+    accepts_nested_attributes_for :current_team
+
+    # oauth providers
+    has_many :oauth_stripe_accounts, class_name: "Oauth::StripeAccount" if stripe_enabled?
+
+    # platform functionality.
+    belongs_to :platform_agent_of, class_name: "Platform::Application", optional: true
+
+    # validations
+    validate :real_emails_only
+    validates :time_zone, inclusion: {in: ActiveSupport::TimeZone.all.map(&:name)}, allow_nil: true
+
+    # callbacks
+    after_update :set_teams_time_zone
+  end
+
+  # TODO we need to update this to some sort of invalid email address or something
+  # people know to ignore. it would be a security problem to have this pointing
+  # at anybody's real email address.
+  def email_is_oauth_placeholder?
+    !!email.match(/noreply\+.*@bullettrain.co/)
+  end
+
+  def label_string
+    name
+  end
+
+  def name
+    full_name.present? ? full_name : email
+  end
+
+  def full_name
+    [first_name_was, last_name_was].select(&:present?).join(" ")
+  end
+
+  def details_provided?
+    first_name.present? && last_name.present? && current_team.name.present?
+  end
+
+  def send_welcome_email
+    UserMailer.welcome(self).deliver_later
+  end
+
+  def create_default_team
+    # This creates a `Membership`, because `User` `has_many :teams, through: :memberships`
+    # TODO The team name should take into account the user's current locale.
+    default_team = teams.create(name: "Your Team", time_zone: time_zone)
+    memberships.find_by(team: default_team).update role_ids: [Role.admin.id]
+    update(current_team: default_team)
+  end
+
+  def real_emails_only
+    if ENV["REALEMAIL_API_KEY"] && !Rails.env.test?
+      uri = URI("https://realemail.expeditedaddons.com")
+
+      # Change the input parameters here
+      uri.query = URI.encode_www_form({
+        api_key: ENV["REAL_EMAIL_KEY"],
+        email: email,
+        fix_typos: false
+      })
+
+      # Results are returned as a JSON object
+      result = JSON.parse(Net::HTTP.get_response(uri).body)
+
+      if result["syntax_error"]
+        errors.add(:email, "is not a valid email address")
+      elsif result["domain_error"] || (result.key?("mx_records_found") && !result["mx_records_found"])
+        errors.add(:email, "can't actually receive emails")
+      elsif result["is_disposable"]
+        errors.add(:email, "is a disposable email address")
+      end
+    end
+  end
+
+  def multiple_teams?
+    teams.count > 1
+  end
+
+  def one_team?
+    !multiple_teams?
+  end
+
+  def formatted_email_address
+    if details_provided?
+      "\"#{first_name} #{last_name}\" <#{email}>"
+    else
+      email
+    end
+  end
+
+  def administrating_team_ids
+    parent_ids_for(Role.admin, :memberships, :team)
+  end
+
+  def parent_ids_for(role, through, parent)
+    parent_id_column = "#{parent}_id"
+    key = "#{role.key}_#{through}_#{parent_id_column}s"
+    return ability_cache[key] if ability_cache && ability_cache[key]
+    role = nil if role.default?
+    value = send(through).with_role(role).distinct.pluck(parent_id_column)
+    current_cache = ability_cache || {}
+    current_cache[key] = value
+    update_column :ability_cache, current_cache
+    value
+  end
+
+  def invalidate_ability_cache
+    update_column(:ability_cache, {})
+  end
+
+  def otp_qr_code
+    issuer = I18n.t("application.name")
+    label = "#{issuer}:#{email}"
+    RQRCode::QRCode.new(otp_provisioning_uri(label, issuer: issuer))
+  end
+
+  def scaffolding_absolutely_abstract_creative_concepts_collaborators
+    Scaffolding::AbsolutelyAbstract::CreativeConcepts::Collaborator.joins(:membership).where(membership: {user_id: id})
+  end
+
+  def admin_scaffolding_absolutely_abstract_creative_concepts_ids
+    scaffolding_absolutely_abstract_creative_concepts_collaborators.admins.pluck(:creative_concept_id)
+  end
+
+  def editor_scaffolding_absolutely_abstract_creative_concepts_ids
+    scaffolding_absolutely_abstract_creative_concepts_collaborators.editors.pluck(:creative_concept_id)
+  end
+
+  def viewer_scaffolding_absolutely_abstract_creative_concepts_ids
+    scaffolding_absolutely_abstract_creative_concepts_collaborators.viewers.pluck(:creative_concept_id)
+  end
+
+  def developer?
+    return false unless ENV["DEVELOPER_EMAILS"]
+    # we use email_was so they can't try setting their email to the email of an admin.
+    return false unless email_was
+    ENV["DEVELOPER_EMAILS"].split(",").include?(email_was)
+  end
+
+  def set_teams_time_zone
+    teams.where(time_zone: nil).each do |team|
+      team.update(time_zone: time_zone) if team.users.count == 1
+    end
+  end
+end

data/app/models/invitation.rb

@@ -1,25 +1,5 @@
 class Invitation < ApplicationRecord
-  # 🚫 DEFAULT BULLET TRAIN INVITATION FUNCTIONALITY
-  # Typically you should avoid adding your own functionality in this section to avoid merge conflicts in the future.
-  # (If you specifically want to change Bullet Train's default behavior, that's OK and you can do that here.)
-
-  belongs_to :team
-  belongs_to :from_membership, class_name: "Membership"
-  has_one :membership, dependent: :nullify
-  has_many :roles, through: :membership
-
-  accepts_nested_attributes_for :membership
-
-  validates :email, presence: true
-
-  before_create :generate_uuid
-  after_create :set_added_by_membership
-  after_create :send_invitation_email
-
-  # ✅ YOUR APPLICATION'S INVITATION FUNCTIONALITY
-  # This is the place where you should implement your own features on top of Bullet Train's functionality. There
-  # are a bunch of Super Scaffolding hooks here by default to try and help keep generated code logically organized.
-
+  include Invitations::Core
   # 🚅 add concerns above.
 
   # 🚅 add belongs_to associations above.
@@ -39,35 +19,4 @@ class Invitation < ApplicationRecord
   # 🚅 add delegations above.
 
   # 🚅 add methods above.
-
-  # 🚫 DEFAULT BULLET TRAIN INVITATION FUNCTIONALITY
-  # We put these at the bottom of this file to keep them out of the way. You should define your own methods above here.
-
-  def set_added_by_membership
-    membership.update(added_by: from_membership)
-  end
-
-  def send_invitation_email
-    UserMailer.invited(uuid).deliver_later
-  end
-
-  def generate_uuid
-    self.uuid = SecureRandom.hex
-  end
-
-  def accept_for(user)
-    User.transaction do
-      user.memberships << membership
-      user.update(current_team: team, former_user: false)
-      destroy
-    end
-  end
-
-  def name
-    I18n.t("invitations.values.name", team_name: team.name)
-  end
-
-  def is_for?(user)
-    user.email.downcase.strip == email.downcase.strip
-  end
 end

data/app/models/invitations.rb

@@ -0,0 +1,5 @@
+module Invitations
+  def self.table_name_prefix
+    "users_"
+  end
+end

data/app/models/membership.rb

@@ -1,40 +1,5 @@
 class Membership < ApplicationRecord
-  # 🚫 DEFAULT BULLET TRAIN MEMBERSHIP FUNCTIONALITY
-  # Typically you should avoid adding your own functionality in this section to avoid merge conflicts in the future.
-  # (If you specifically want to change Bullet Train's default behavior, that's OK and you can do that here.)
-
-  # See `docs/permissions.md` for details.
-  include Roles::Support
-
-  belongs_to :user, optional: true
-  belongs_to :team
-  belongs_to :invitation, optional: true, dependent: :destroy
-  belongs_to :added_by, class_name: "Membership", optional: true
-  belongs_to :platform_agent_of, class_name: "Platform::Application", optional: true
-
-  has_many :scaffolding_completely_concrete_tangible_things_assignments, class_name: "Scaffolding::CompletelyConcrete::TangibleThings::Assignment", dependent: :destroy
-  has_many :scaffolding_completely_concrete_tangible_things, through: :scaffolding_completely_concrete_tangible_things_assignments, source: :tangible_thing
-  has_many :reassignments_scaffolding_completely_concrete_tangible_things_reassignments, class_name: "Memberships::Reassignments::ScaffoldingCompletelyConcreteTangibleThingsReassignment", dependent: :destroy, foreign_key: :membership_id
-
-  has_many :scaffolding_absolutely_abstract_creative_concepts_collaborators, class_name: "Scaffolding::AbsolutelyAbstract::CreativeConcepts::Collaborator", dependent: :destroy
-
-  after_destroy do
-    # if we're destroying a user's membership to the team they have set as
-    # current, then we need to remove that so they don't get an error.
-    if user&.current_team == team
-      user.current_team = nil
-      user.save
-    end
-  end
-
-  scope :current_and_invited, -> { includes(:invitation).where("user_id IS NOT NULL OR invitations.id IS NOT NULL").references(:invitation) }
-  scope :current, -> { where("user_id IS NOT NULL") }
-  scope :tombstones, -> { includes(:invitation).where("user_id IS NULL AND invitations.id IS NULL").references(:invitation) }
-
-  # ✅ YOUR APPLICATION'S MEMBERSHIP FUNCTIONALITY
-  # This is the place where you should implement your own features on top of Bullet Train's functionality. There
-  # are a bunch of Super Scaffolding hooks here by default to try and help keep generated code logically organized.
-
+  include Memberships::Core
   # 🚅 add concerns above.
 
   # 🚅 add belongs_to associations above.
@@ -54,111 +19,4 @@ class Membership < ApplicationRecord
   # 🚅 add delegations above.
 
   # 🚅 add methods above.
-
-  # 🚫 DEFAULT BULLET TRAIN TEAM FUNCTIONALITY
-  # We put these at the bottom of this file to keep them out of the way. You should define your own methods above here.
-
-  def name
-    full_name
-  end
-
-  def label_string
-    full_name
-  end
-
-  # we overload this method so that when setting the list of role ids
-  # associated with a membership, admins can never remove the last admin
-  # of a team.
-  def role_ids=(ids)
-    # if this membership was an admin, and the new list of role ids don't include admin.
-    if admin? && !ids.include?(Role.admin.id)
-      unless team.admins.count > 1
-        raise RemovingLastTeamAdminException.new("You can't remove the last team admin.")
-      end
-    end
-
-    super(ids)
-  end
-
-  def unclaimed?
-    user.nil? && !invitation.nil?
-  end
-
-  def tombstone?
-    user.nil? && invitation.nil?
-  end
-
-  def last_admin?
-    return false unless admin?
-    return false unless user.present?
-    team.memberships.current.select(&:admin?) == [self]
-  end
-
-  def nullify_user
-    if last_admin?
-      raise RemovingLastTeamAdminException.new("You can't remove the last team admin.")
-    end
-
-    if (user_was = user)
-      unless user_first_name.present?
-        self.user_first_name = user.first_name
-      end
-
-      unless user_last_name.present?
-        self.user_last_name = user.last_name
-      end
-
-      unless user_profile_photo_id.present?
-        self.user_profile_photo_id = user.profile_photo_id
-      end
-
-      unless user_email.present?
-        self.user_email = user.email
-      end
-
-      self.user = nil
-      save
-
-      user_was.invalidate_ability_cache
-
-      user_was.update(
-        current_team: user_was.teams.first,
-        former_user: user_was.teams.empty?
-      )
-    end
-
-    # we do this here just in case by some weird chance an active membership had an invitation attached.
-    invitation&.destroy
-  end
-
-  def email
-    user&.email || user_email.presence || invitation&.email
-  end
-
-  def full_name
-    user&.full_name || [first_name.presence, last_name.presence].join(" ").presence || email
-  end
-
-  def first_name
-    user&.first_name || user_first_name
-  end
-
-  def last_name
-    user&.last_name || user_last_name
-  end
-
-  def last_initial
-    return nil unless last_name.present?
-    "#{last_name}."
-  end
-
-  def first_name_last_initial
-    [first_name, last_initial].map(&:present?).join(" ")
-  end
-
-  # TODO utilize this.
-  # members shouldn't receive notifications unless they are either an active user or an outstanding invitation.
-  def should_receive_notifications?
-    invitation.present? || user.present?
-  end
 end

data/app/models/memberships.rb

@@ -0,0 +1,5 @@
+module Memberships
+  def self.table_name_prefix
+    "memberships_"
+  end
+end

data/app/models/team.rb

@@ -1,35 +1,6 @@
 class Team < ApplicationRecord
-  # 🚫 DEFAULT BULLET TRAIN TEAM FUNCTIONALITY
-  # Typically you should avoid adding your own functionality in this section to avoid merge conflicts in the future.
-  # (If you specifically want to change Bullet Train's default behavior, that's OK and you can do that here.)
-
-  # Outgoing webhooks.
+  include Teams::Core
   include Webhooks::Outgoing::TeamSupport
-
-  # super scaffolding
-  unless scaffolding_things_disabled?
-    has_many :scaffolding_absolutely_abstract_creative_concepts, class_name: "Scaffolding::AbsolutelyAbstract::CreativeConcept", dependent: :destroy, enable_updates: true
-  end
-
-  # memberships and invitations
-  has_many :memberships, dependent: :destroy
-  has_many :users, through: :memberships
-  has_many :invitations
-
-  # oauth for grape api
-  has_many :platform_applications, class_name: "Platform::Application", dependent: :destroy, foreign_key: :team_id
-
-  # integrations
-  has_many :integrations_stripe_installations, class_name: "Integrations::StripeInstallation", dependent: :destroy if stripe_enabled?
-
-  # validations
-  validates :name, presence: true
-  validates :time_zone, inclusion: {in: ActiveSupport::TimeZone.all.map(&:name)}, allow_nil: true
-
-  # ✅ YOUR APPLICATION'S TEAM FUNCTIONALITY
-  # This is the place where you should implement your own features on top of Bullet Train's functionality. There
-  # are a bunch of Super Scaffolding hooks here by default to try and help keep generated code logically organized.
-
   # 🚅 add concerns above.
 
   # 🚅 add belongs_to associations above.
@@ -49,33 +20,4 @@ class Team < ApplicationRecord
   # 🚅 add delegations above.
 
   # 🚅 add methods above.
-
-  # 🚫 DEFAULT BULLET TRAIN TEAM FUNCTIONALITY
-  # We put these at the bottom of this file to keep them out of the way. You should define your own methods above here.
-
-  def admins
-    memberships.current_and_invited.admins
-  end
-
-  def admin_users
-    admins.map(&:user).compact
-  end
-
-  def primary_contact
-    admin_users.min { |user| user.created_at }
-  end
-
-  def formatted_email_address
-    primary_contact.email
-  end
-
-  def invalidate_caches
-    users.map(&:invalidate_ability_cache)
-  end
-
-  def team
-    # some generic features appeal to the `team` method for security or scoping purposes, but sometimes those same
-    # generic functions need to function for a team model as well, so we do this.
-    self
-  end
 end

data/app/models/teams.rb

@@ -0,0 +1,5 @@
+module Teams
+  def self.table_name_prefix
+    "teams_"
+  end
+end

data/app/models/user.rb

@@ -1,41 +1,5 @@
 class User < ApplicationRecord
-  # 🚫 DEFAULT BULLET TRAIN USER FUNCTIONALITY
-  # Typically you should avoid adding your own functionality in this section to avoid merge conflicts in the future.
-  # (If you specifically want to change Bullet Train's default behavior, that's OK and you can do that here.)
-
-  if two_factor_authentication_enabled?
-    devise :two_factor_authenticatable, :two_factor_backupable, :omniauthable,
-      :registerable, :recoverable, :rememberable, :trackable, :validatable,
-      otp_secret_encryption_key: ENV["TWO_FACTOR_ENCRYPTION_KEY"]
-  else
-    devise :omniauthable, :database_authenticatable, :registerable,
-      :recoverable, :rememberable, :trackable, :validatable
-  end
-
-  # teams
-  has_many :memberships, dependent: :destroy
-  has_many :scaffolding_absolutely_abstract_creative_concepts_collaborators, through: :memberships
-  has_many :teams, through: :memberships
-  belongs_to :current_team, class_name: "Team", optional: true
-  accepts_nested_attributes_for :current_team
-
-  # oauth providers
-  has_many :oauth_stripe_accounts, class_name: "Oauth::StripeAccount" if stripe_enabled?
-
-  # platform functionality.
-  belongs_to :platform_agent_of, class_name: "Platform::Application", optional: true
-
-  # validations
-  validate :real_emails_only
-  validates :time_zone, inclusion: {in: ActiveSupport::TimeZone.all.map(&:name)}, allow_nil: true
-
-  # callbacks
-  after_update :set_teams_time_zone
-
-  # ✅ YOUR APPLICATION'S USER FUNCTIONALITY
-  # This is the place where you should implement your own features on top of Bullet Train's user functionality. There
-  # are a bunch of Super Scaffolding hooks here by default to try and help keep generated code logically organized.
-
+  include Users::Core
   # 🚅 add concerns above.
 
   # 🚅 add belongs_to associations above.
@@ -55,137 +19,4 @@ class User < ApplicationRecord
   # 🚅 add delegations above.
 
   # 🚅 add methods above.
-
-  # 🚫 DEFAULT BULLET TRAIN USER FUNCTIONALITY
-  # We put these at the bottom of this file to keep them out of the way. You should define your own methods above here.
-
-  # TODO we need to update this to some sort of invalid email address or something
-  # people know to ignore. it would be a security problem to have this pointing
-  # at anybody's real email address.
-  def email_is_oauth_placeholder?
-    !!email.match(/noreply\+.*@bullettrain.co/)
-  end
-
-  def label_string
-    name
-  end
-
-  def name
-    full_name.present? ? full_name : email
-  end
-
-  def full_name
-    [first_name_was, last_name_was].select(&:present?).join(" ")
-  end
-
-  def details_provided?
-    first_name.present? && last_name.present? && current_team.name.present?
-  end
-
-  def send_welcome_email
-    UserMailer.welcome(self).deliver_later
-  end
-
-  def create_default_team
-    # This creates a `Membership`, because `User` `has_many :teams, through: :memberships`
-    # TODO The team name should take into account the user's current locale.
-    default_team = teams.create(name: "Your Team", time_zone: time_zone)
-    memberships.find_by(team: default_team).update role_ids: [Role.admin.id]
-    update(current_team: default_team)
-  end
-
-  def real_emails_only
-    if ENV["REALEMAIL_API_KEY"] && !Rails.env.test?
-      uri = URI("https://realemail.expeditedaddons.com")
-
-      # Change the input parameters here
-      uri.query = URI.encode_www_form({
-        api_key: ENV["REAL_EMAIL_KEY"],
-        email: email,
-        fix_typos: false
-      })
-
-      # Results are returned as a JSON object
-      result = JSON.parse(Net::HTTP.get_response(uri).body)
-
-      if result["syntax_error"]
-        errors.add(:email, "is not a valid email address")
-      elsif result["domain_error"] || (result.key?("mx_records_found") && !result["mx_records_found"])
-        errors.add(:email, "can't actually receive emails")
-      elsif result["is_disposable"]
-        errors.add(:email, "is a disposable email address")
-      end
-    end
-  end
-
-  def multiple_teams?
-    teams.count > 1
-  end
-
-  def one_team?
-    !multiple_teams?
-  end
-
-  def formatted_email_address
-    if details_provided?
-      "\"#{first_name} #{last_name}\" <#{email}>"
-    else
-      email
-    end
-  end
-
-  def administrating_team_ids
-    parent_ids_for(Role.admin, :memberships, :team)
-  end
-
-  def parent_ids_for(role, through, parent)
-    parent_id_column = "#{parent}_id"
-    key = "#{role.key}_#{through}_#{parent_id_column}s"
-    return ability_cache[key] if ability_cache && ability_cache[key]
-    role = nil if role.default?
-    value = send(through).with_role(role).distinct.pluck(parent_id_column)
-    current_cache = ability_cache || {}
-    current_cache[key] = value
-    update_column :ability_cache, current_cache
-    value
-  end
-
-  def invalidate_ability_cache
-    update_column(:ability_cache, {})
-  end
-
-  def otp_qr_code
-    issuer = I18n.t("application.name")
-    label = "#{issuer}:#{email}"
-    RQRCode::QRCode.new(otp_provisioning_uri(label, issuer: issuer))
-  end
-
-  def scaffolding_absolutely_abstract_creative_concepts_collaborators
-    Scaffolding::AbsolutelyAbstract::CreativeConcepts::Collaborator.joins(:membership).where(membership: {user_id: id})
-  end
-
-  def admin_scaffolding_absolutely_abstract_creative_concepts_ids
-    scaffolding_absolutely_abstract_creative_concepts_collaborators.admins.pluck(:creative_concept_id)
-  end
-
-  def editor_scaffolding_absolutely_abstract_creative_concepts_ids
-    scaffolding_absolutely_abstract_creative_concepts_collaborators.editors.pluck(:creative_concept_id)
-  end
-
-  def viewer_scaffolding_absolutely_abstract_creative_concepts_ids
-    scaffolding_absolutely_abstract_creative_concepts_collaborators.viewers.pluck(:creative_concept_id)
-  end
-
-  def developer?
-    return false unless ENV["DEVELOPER_EMAILS"]
-    # we use email_was so they can't try setting their email to the email of an admin.
-    return false unless email_was
-    ENV["DEVELOPER_EMAILS"].split(",").include?(email_was)
-  end
-
-  def set_teams_time_zone
-    teams.where(time_zone: nil).each do |team|
-      team.update(time_zone: time_zone) if team.users.count == 1
-    end
-  end
 end

data/app/models/users.rb

@@ -0,0 +1,5 @@
+module Users
+  def self.table_name_prefix
+    "users_"
+  end
+end

data/config/routes.rb

@@ -1,2 +1,42 @@
 Rails.application.routes.draw do
+  namespace :account do
+    shallow do
+      resource :two_factor, only: [:create, :destroy]
+
+      # user-level onboarding tasks.
+      namespace :onboarding do
+        resources :user_details
+        resources :user_email
+      end
+
+      # user specific resources.
+      resources :users
+
+      # team-level resources.
+      resources :teams do
+        resources :invitations do
+          member do
+            get :accept
+            post :accept
+          end
+        end
+
+        resources :memberships do
+          member do
+            post :demote
+            post :promote
+            post :reinvite
+          end
+
+          collection do
+            get :search
+          end
+        end
+
+        member do
+          post :switch_to
+        end
+      end
+    end
+  end
 end

data/lib/bullet_train/version.rb

@@ -1,3 +1,3 @@
 module BulletTrain
-  VERSION = "1.0.0"
+  VERSION = "1.0.4"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bullet_train
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.4
 platform: ruby
 authors:
 - Andrew Culver
@@ -36,7 +36,6 @@ files:
 - Rakefile
 - app/assets/config/bullet_train_manifest.js
 - app/controllers/account/invitations_controller.rb
-- app/controllers/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments_controller.rb
 - app/controllers/account/memberships_controller.rb
 - app/controllers/account/onboarding/user_details_controller.rb
 - app/controllers/account/onboarding/user_email_controller.rb
@@ -48,13 +47,18 @@ files:
 - app/helpers/account/users_helper.rb
 - app/helpers/invitation_only_helper.rb
 - app/helpers/invitations_helper.rb
+- app/models/concerns/invitations/core.rb
+- app/models/concerns/memberships/core.rb
+- app/models/concerns/teams/core.rb
+- app/models/concerns/users/core.rb
 - app/models/invitation.rb
+- app/models/invitations.rb
 - app/models/membership.rb
-- app/models/memberships/reassignments.rb
-- app/models/memberships/reassignments/assignment.rb
-- app/models/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignment.rb
+- app/models/memberships.rb
 - app/models/team.rb
+- app/models/teams.rb
 - app/models/user.rb
+- app/models/users.rb
 - app/views/account/invitations/_breadcrumbs.html.erb
 - app/views/account/invitations/_form.html.erb
 - app/views/account/invitations/_invitation.json.jbuilder
@@ -69,12 +73,6 @@ files:
 - app/views/account/memberships/_tombstones.html.erb
 - app/views/account/memberships/edit.html.erb
 - app/views/account/memberships/index.html.erb
-- app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/_breadcrumbs.html.erb
-- app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/_form.html.erb
-- app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/_scaffolding_completely_concrete_tangible_things_reassignment.json.jbuilder
-- app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/index.json.jbuilder
-- app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/new.html.erb
-- app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/show.json.jbuilder
 - app/views/account/memberships/show.html.erb
 - app/views/account/onboarding/user_details/edit.html.erb
 - app/views/account/onboarding/user_email/edit.html.erb
@@ -95,7 +93,6 @@ files:
 - app/views/account/users/show.html.erb
 - config/locales/en/invitations.en.yml
 - config/locales/en/memberships.en.yml
-- config/locales/en/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments.en.yml
 - config/locales/en/onboarding/user_details.en.yml
 - config/locales/en/onboarding/user_email.en.yml
 - config/locales/en/teams.en.yml

data/app/controllers/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments_controller.rb

@@ -1,83 +0,0 @@
-class Account::Memberships::Reassignments::ScaffoldingCompletelyConcreteTangibleThingsReassignmentsController < Account::ApplicationController
-  account_load_and_authorize_resource :scaffolding_completely_concrete_tangible_things_reassignment, through: :membership, through_association: :reassignments_scaffolding_completely_concrete_tangible_things_reassignments
-
-  # GET /account/memberships/:membership_id/reassignments/scaffolding_completely_concrete_tangible_things_reassignments
-  # GET /account/memberships/:membership_id/reassignments/scaffolding_completely_concrete_tangible_things_reassignments.json
-  def index
-    # if you only want these objects shown on their parent's show page, uncomment this:
-    redirect_to [:account, @membership]
-  end
-
-  # GET /account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/:id
-  # GET /account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/:id.json
-  def show
-  end
-
-  # GET /account/memberships/:membership_id/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/new
-  def new
-  end
-
-  # GET /account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/:id/edit
-  def edit
-  end
-
-  # POST /account/memberships/:membership_id/reassignments/scaffolding_completely_concrete_tangible_things_reassignments
-  # POST /account/memberships/:membership_id/reassignments/scaffolding_completely_concrete_tangible_things_reassignments.json
-  def create
-    respond_to do |format|
-      if @scaffolding_completely_concrete_tangible_things_reassignment.save
-        format.html { redirect_to [:account, @membership, :reassignments_scaffolding_completely_concrete_tangible_things_reassignments], notice: I18n.t("memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments.notifications.created") }
-        format.json { render :show, status: :created, location: [:account, @scaffolding_completely_concrete_tangible_things_reassignment] }
-      else
-        format.html { render :new, status: :unprocessable_entity }
-        format.json { render json: @scaffolding_completely_concrete_tangible_things_reassignment.errors, status: :unprocessable_entity }
-      end
-    end
-  end
-
-  # PATCH/PUT /account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/:id
-  # PATCH/PUT /account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/:id.json
-  def update
-    respond_to do |format|
-      if @scaffolding_completely_concrete_tangible_things_reassignment.update(scaffolding_completely_concrete_tangible_things_reassignment_params)
-        format.html { redirect_to [:account, @scaffolding_completely_concrete_tangible_things_reassignment], notice: I18n.t("memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments.notifications.updated") }
-        format.json { render :show, status: :ok, location: [:account, @scaffolding_completely_concrete_tangible_things_reassignment] }
-      else
-        format.html { render :edit, status: :unprocessable_entity }
-        format.json { render json: @scaffolding_completely_concrete_tangible_things_reassignment.errors, status: :unprocessable_entity }
-      end
-    end
-  end
-
-  # DELETE /account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/:id
-  # DELETE /account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/:id.json
-  def destroy
-    @scaffolding_completely_concrete_tangible_things_reassignment.destroy
-    respond_to do |format|
-      format.html { redirect_to [:account, @membership, :reassignments_scaffolding_completely_concrete_tangible_things_reassignments], notice: I18n.t("memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments.notifications.destroyed") }
-      format.json { head :no_content }
-    end
-  end
-
-  private
-
-  # Never trust parameters from the scary internet, only allow the white list through.
-  def scaffolding_completely_concrete_tangible_things_reassignment_params
-    strong_params = params.require(:memberships_reassignments_scaffolding_completely_concrete_tangible_things_reassignment).permit(
-      # 🚅 super scaffolding will insert new fields above this line.
-      # 🚅 super scaffolding will insert new arrays above this line.
-      membership_ids: [],
-    )
-
-    strong_params[:membership_ids] = create_models_if_new(strong_params[:membership_ids]) do |email|
-      # stub out a new membership and invitation with no special permissions.
-      membership = current_team.memberships.create(user_email: email, added_by: current_membership)
-      current_team.invitations.create(email: email, from_membership: current_membership, membership: membership)
-      membership
-    end
-
-    # 🚅 super scaffolding will insert processing for new fields above this line.
-
-    strong_params
-  end
-end

data/app/models/memberships/reassignments/assignment.rb

@@ -1,12 +0,0 @@
-class Memberships::Reassignments::Assignment < ApplicationRecord
-  belongs_to :scaffolding_completely_concrete_tangible_things_reassignment, class_name: "Memberships::Reassignments::ScaffoldingCompletelyConcreteTangibleThingsReassignment"
-  belongs_to :membership
-
-  validate :validate_membership
-
-  def validate_membership
-    unless scaffolding_completely_concrete_tangible_things_reassignment.valid_memberships.include?(membership)
-      errors.add(:membership, :invalid)
-    end
-  end
-end

data/app/models/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignment.rb

@@ -1,38 +0,0 @@
-class Memberships::Reassignments::ScaffoldingCompletelyConcreteTangibleThingsReassignment < ApplicationRecord
-  # 🚅 add concerns above.
-
-  belongs_to :membership # this is the member being reassigned from.
-  has_one :team, through: :membership
-  # 🚅 add belongs_to associations above.
-
-  has_many :assignments
-  has_many :memberships, through: :assignments # these are the members being reassigned to.
-  # 🚅 add has_many associations above.
-
-  # 🚅 add has_one associations above.
-
-  # 🚅 add scopes above.
-
-  # 🚅 add validations above.
-
-  after_save :reassign
-  # 🚅 add callbacks above.
-
-  # 🚅 add delegations above.
-
-  def valid_memberships
-    team.memberships.current_and_invited
-  end
-
-  def reassign
-    membership.scaffolding_completely_concrete_tangible_things_assignments.each do |existing_assignment|
-      memberships.each do |target_membership|
-        unless existing_assignment.tangible_thing.memberships.include?(target_membership)
-          existing_assignment.tangible_thing.memberships << target_membership
-        end
-      end
-      existing_assignment.destroy
-    end
-  end
-  # 🚅 add methods above.
-end

data/app/models/memberships/reassignments.rb

@@ -1,5 +0,0 @@
-module Memberships::Reassignments
-  def self.table_name_prefix
-    "memberships_reassignments_"
-  end
-end

data/app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/_breadcrumbs.html.erb

@@ -1,10 +0,0 @@
-<% scaffolding_completely_concrete_tangible_things_reassignment ||= @scaffolding_completely_concrete_tangible_things_reassignment %>
-<% membership ||= @membership || scaffolding_completely_concrete_tangible_things_reassignment&.membership %>
-<%= render 'account/memberships/breadcrumbs', membership: membership %>
-<li class="breadcrumb-item">
-  <%= link_to t('.label'), [:account, membership, :reassignments_scaffolding_completely_concrete_tangible_things_reassignments] %>
-</li>
-<% if scaffolding_completely_concrete_tangible_things_reassignment&.persisted? %>
-  <li class="breadcrumb-item"><%= scaffolding_completely_concrete_tangible_things_reassignment.label_string %></li>
-<% end %>
-<%= render 'account/shared/breadcrumbs/actions', only_for: 'memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments' %>

data/app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/_form.html.erb

@@ -1,24 +0,0 @@
-<%= form_with(model: scaffolding_completely_concrete_tangible_things_reassignment, url: (scaffolding_completely_concrete_tangible_things_reassignment.persisted? ? [:account, scaffolding_completely_concrete_tangible_things_reassignment] : [:account, @membership, :reassignments_scaffolding_completely_concrete_tangible_things_reassignments]), local: true) do |form| %>
-  <%= render 'account/shared/forms/errors', form: form %>
-
-  <%= render 'shared/fields/super_select', form: form, method: :membership_ids, options: {autofocus: true},
-    html_options: {multiple: true, class: can_invite? ? 'accepts-new' : ''},
-    choices: memberships_as_select_options(scaffolding_completely_concrete_tangible_things_reassignment.valid_memberships, form.object.membership_ids) do %>
-    <% if can_invite? %>
-      <% content_for :after_help do %>
-        <%= t('memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments.fields.membership_ids.invite_help').html_safe %>
-      <% end %>
-    <% end %>
-  <% end %>
-  <%# 🚅 super scaffolding will insert new fields above this line. %>
-
-  <div class="form-buttons-w">
-    <%= form.submit (form.object.persisted? ? t('.buttons.update') : t('.buttons.create')), class: "btn btn-primary" %>
-    <% if form.object.persisted? %>
-    <%= link_to t('global.buttons.cancel'), [:account, scaffolding_completely_concrete_tangible_things_reassignment], class: "btn btn-link" %>
-    <% else %>
-    <%= link_to t('global.buttons.cancel'), [:account, @membership, :reassignments_scaffolding_completely_concrete_tangible_things_reassignments], class: "btn btn-link" %>
-    <% end %>
-  </div>
-
-<% end %>

data/app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/_scaffolding_completely_concrete_tangible_things_reassignment.json.jbuilder

@@ -1,8 +0,0 @@
-json.extract! scaffolding_completely_concrete_tangible_things_reassignment,
-  :id,
-  :membership_id,
-  :membership_ids,
-  # 🚅 super scaffolding will insert new fields above this line.
-  :created_at,
-  :updated_at
-json.url account_memberships_reassignments_scaffolding_completely_concrete_tangible_things_reassignment_url(scaffolding_completely_concrete_tangible_things_reassignment, format: :json)

data/app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/index.json.jbuilder

@@ -1 +0,0 @@
-json.array! @scaffolding_completely_concrete_tangible_things_reassignments, partial: "memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/scaffolding_completely_concrete_tangible_things_reassignment", as: :scaffolding_completely_concrete_tangible_things_reassignment

data/app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/new.html.erb

@@ -1,11 +0,0 @@
-<div class="element-wrapper">
-  <h6 class="element-header"><%= t('.section') %></h6>
-  <%= render 'account/shared/notices' %>
-  <div class="padded-lg">
-    <div class="element-box">
-      <h5 class="form-header"><%= t('.header') %></h5>
-      <div class="form-desc"><%= t('.description') %></div>
-      <%= render 'form', scaffolding_completely_concrete_tangible_things_reassignment: @scaffolding_completely_concrete_tangible_things_reassignment %>
-    </div>
-  </div>
-</div>

data/app/views/account/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/show.json.jbuilder

@@ -1 +0,0 @@
-json.partial! "memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments/scaffolding_completely_concrete_tangible_things_reassignment", scaffolding_completely_concrete_tangible_things_reassignment: @scaffolding_completely_concrete_tangible_things_reassignment

data/config/locales/en/memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments.en.yml

@@ -1,42 +0,0 @@
-en:
-  memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignments: &scaffolding_completely_concrete_tangible_things_reassignments
-    label: &label Tangible Things Reassignments
-    breadcrumbs:
-      label: *label
-    buttons: &buttons
-      new: Reassign to Another Team Member
-      create: Reassign Tangible Things
-    fields: &fields
-      membership_ids:
-        name: &membership_ids Target Members
-        label: Who should %{memberships_possessive} Tangible Things be reassigned to?
-        heading: *membership_ids
-        help: You can reassign to multiple team members. You can leave this blank to simply unassign Tangible Things from %{membership_name}.
-        invite_help: You can invite new team members by entering their email address and hitting <kbd>enter</kbd>.
-      # 🚅 super scaffolding will insert new fields above this line.
-    index:
-      section: "%{memberships_possessive} Tangible Things Reassignments"
-      contexts:
-        membership:
-          header: Tangible Things Reassignments
-          description: Below is a list of Tangible Things Reassignments that have been added to %{membership_name}. You can manage them with the options below.
-      fields: *fields
-      buttons: *buttons
-    form: &form
-      buttons: *buttons
-    new:
-      section: "Reassign %{memberships_possessive} Tangible Things"
-      header: Reassign Tangible Things
-      description: This will unassign all Tangible Things currently assigned to %{membership_name} and assign them to whichever team members are specified below.
-      form: *form
-    notifications:
-      created: Tangible Things were successfully reassigned.
-  account:
-    memberships:
-      reassignments:
-        scaffolding_completely_concrete_tangible_things_reassignments: *scaffolding_completely_concrete_tangible_things_reassignments
-  activerecord:
-    attributes:
-      memberships/reassignments/scaffolding_completely_concrete_tangible_things_reassignment:
-        membership_ids: *membership_ids
-        # 🚅 super scaffolding will insert new activerecord attributes above this line.