card 1.102.0 → 1.103.3

data/tmpsets/set/mod010-account/right/account/events.rb

@@ -1,108 +0,0 @@
-# -*- encoding : utf-8 -*-
-class Card; module Set; class Right; module Account;
-# Set: All "+Account+Events" cards (Events)
-#
-#### ON CREATE
-module Events;
-extend Card::Set
-def self.source_location; "/Users/ezl5238/dev/decko/gem/mod/account/set/right/account/events.rb"; end
-
-event :set_default_salt, :prepare_to_validate, on: :create do
-  add_subfield(:salt).generate
-end
-
-event :set_default_status, :prepare_to_validate, on: :create do
-  add_subfield :status, content: (accounted&.try(:default_account_status) || "active")
-end
-
-# ON UPDATE
-
-# reset password emails contain a link to update the +*account card
-# and trigger this event
-event :reset_password, :prepare_to_validate, on: :update, trigger: :required do
-  verifying_token :reset_password_success, :reset_password_failure
-end
-
-event :verify_and_activate, :prepare_to_validate, on: :update, trigger: :required do
-  activatable do
-    verifying_token :verify_and_activate_success, :verify_and_activate_failure
-    add_subcard(accounted)&.try :activate_accounted
-  end
-end
-
-event :password_redirect, :finalize, on: :update, when: :password_redirect? do
-  success << { id: name, view: "edit" }
-end
-
-# INTEGRATION
-
-%i[password_reset_email verification_email welcome_email].each do |email|
-  event "send_#{email}".to_sym, :integrate, trigger: :required do
-    send_account_email email
-  end
-end
-
-## EVENT HELPERS
-
-def activatable
-  abort :failure, "no field manipulation mid-activation" if subcards.present?
-  # above is necessary because activation uses super user (Decko Bot),
-  # so allowing subcards would be unsafe
-  yield
-end
-
-# NOTE: this only works in the context of an action.
-# if run independently, it will not activate an account
-event :activate_account do
-  add_subfield :status, content: "active"
-  trigger_event! :send_welcome_email
-end
-
-def verifying_token success, failure
-  requiring_token do |token|
-    result = Auth::Token.decode token
-    if result.is_a?(String)
-      send failure, result
-    else
-      send success
-    end
-  end
-end
-
-def requiring_token
-  if !(token = Env.params[:token])
-    errors.add :token, "is required"
-  else
-    yield token
-  end
-end
-
-def password_redirect?
-  Auth.current_id == accounted_id && password.blank?
-end
-
-def verify_and_activate_success
-  Auth.signin accounted_id
-  Auth.as_bot # use admin permissions for rest of action
-  activate_account
-  success << ""
-end
-
-def verify_and_activate_failure error_message
-  send_verification_email
-  errors.add :content,
-             "Sorry, #{error_message}. Please check your email for a new activation link."
-end
-
-def reset_password_success
-  Auth.signin accounted_id
-  success << { id: name, view: :edit }
-  abort :success
-end
-
-def reset_password_failure error_message
-  Auth.as_bot { send_password_reset_email }
-  errors.add :content, t(:account_sorry_email_reset, error_msg: error_message)
-end
-end;end;end;end;end;
-# ~~ generated from /Users/ezl5238/dev/decko/gem/mod/account/set/right/account/events.rb ~~

data/tmpsets/set/mod010-account/right/account/views.rb

@@ -1,74 +0,0 @@
-# -*- encoding : utf-8 -*-
-class Card; module Set; class Right; module Account;
-# Set: All "+Account+Views" cards (Views)
-#
-module Views;
-extend Card::Set
-def self.source_location; "/Users/ezl5238/dev/decko/gem/mod/account/set/right/account/views.rb"; end
-module Format; module_parent.send :register_set_format, Card::Format, self; extend Card::Set::AbstractFormat
-  view :verify_url, cache: :never do
-    raise Error::PermissionDenied unless card.ok?(:create) || card.action
-
-    token_url :verify_and_activate, anonymous: true
-  end
-
-  view :reset_password_url do
-    raise Error::PermissionDenied unless card.password_card.ok? :update
-
-    token_url :reset_password
-  end
-
-  view :token_expiry do
-    "(#{token_expiry_sentence}"
-  end
-
-  view :token_days do
-    Card.config.token_expiry / 1.day
-  end
-
-  # DEPRECATED
-  view :verify_days, :token_days
-  view :reset_password_days, :token_days
-
-  def token_url trigger, extra_payload={}
-    card_url path(action: :update,
-                  card: { trigger: trigger },
-                  token: new_token(extra_payload))
-  end
-
-  def token_expiry_sentence
-    "Link will expire in #{render_token_days} days"
-  end
-
-  def new_token extra_payload
-    Auth::Token.encode card.accounted_id, extra_payload
-  end
-end
-
-module HtmlFormat; module_parent.send :register_set_format, Card::Format::HtmlFormat, self; extend Card::Set::AbstractFormat
-  view :core do
-    [account_field_nest(:email, "email"),
-     account_field_nest(:password, "password")]
-  end
-
-  def account_field_nest field, title
-    field_nest field, title: title, view: :labeled
-    # edit: :inline, hide: [:help_link, :bridge_link]
-  end
-
-  before :content_formgroups do
-    voo.edit_structure = [[:email, "email"], [:password, "password"]]
-  end
-
-  view :token_expiry do
-    "<p><em>#{token_expiry_sentence}</em></p>"
-  end
-end
-
-module EmailHtmlFormat; module_parent.send :register_set_format, Card::Format::EmailHtmlFormat, self; extend Card::Set::AbstractFormat
-  def mail context, fields
-    super context, fields.reverse_merge(to: card.email)
-  end
-end
-end;end;end;end;end;
-# ~~ generated from /Users/ezl5238/dev/decko/gem/mod/account/set/right/account/views.rb ~~

data/tmpsets/set/mod010-account/right/account.rb

@@ -1,62 +0,0 @@
-# -*- encoding : utf-8 -*-
-class Card; module Set; class Right
-# Set: All "+Account" cards
-#
-# -*- encoding : utf-8 -*-
-module Account;
-extend Card::Set
-def self.source_location; "/Users/ezl5238/dev/decko/gem/mod/account/set/right/account.rb"; end
-
-card_accessor :email
-card_accessor :password
-card_accessor :salt
-card_accessor :status
-
-require_field :email
-
-def accounted
-  left
-end
-
-def accounted_id
-  left_id
-end
-
-def ok_to_read
-  own_account? || super
-end
-
-# allow account owner to update account field content
-def ok_to_update
-  return true if own_account? && !name_changed? && !type_id_changed?
-
-  super
-end
-
-def changes_visible? act
-  act.actions_affecting(act.card).each do |action|
-    return true if action.card.ok? :read
-  end
-  false
-end
-
-def send_account_email email_template
-  ecard = Card[email_template]
-  unless ecard&.type_id == EmailTemplateID
-    raise Card::Error, "invalid email template: #{email_template}"
-  end
-
-  ecard.deliver self, to: email
-end
-
-def method_missing method, *args
-  return super unless args.empty? && (matches = method.match(/^(?<status>.*)\?$/))
-
-  status == matches[:status]
-end
-
-def respond_to_missing? method, _include_private=false
-  method.match?(/\?$/) ? true : super
-end
-end;end;end;end;
-# ~~ generated from /Users/ezl5238/dev/decko/gem/mod/account/set/right/account.rb ~~

data/tmpsets/set/mod010-account/right/email.rb

@@ -1,56 +0,0 @@
-# -*- encoding : utf-8 -*-
-class Card; module Set; class Right
-# Set: All "+Email" cards
-#
-# -*- encoding : utf-8 -*-
-module Email;
-extend Card::Set
-def self.source_location; "/Users/ezl5238/dev/decko/gem/mod/account/set/right/email.rb"; end
-
-include_set Abstract::AccountField
-
-event :validate_email, :validate, on: :save do
-  return unless content?
-
-  self.content = content.strip
-  return if content.match?(/^([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})$/i)
-
-  errors.add :content, t(:account_error_invalid_address)
-end
-
-event :validate_unique_email, after: :validate_email, on: :save do
-  if content.present?
-    Auth.as_bot do
-      cql = { right_id: EmailID, eq: content, return: :id }
-      cql[:not] = { id: id } if id
-      cql_comment = t(:account_search_email_duplicate, content: content)
-      if Card.search(cql, cql_comment).first
-        errors.add :content, t(:account_error_not_unique)
-      end
-    end
-  end
-end
-
-event :downcase_email, :prepare_to_validate, on: :save do
-  return if !content || content == content.downcase
-
-  self.content = content.downcase
-end
-
-def email_required?
-  !left.system?
-end
-
-def ok_to_read
-  if own_email? || Auth.always_ok?
-    true
-  else
-    deny_because t(:account_deny_email_restricted)
-  end
-end
-
-def own_email?
-  name.part_names[0].key == Auth.as_card.key
-end
-end;end;end;end;
-# ~~ generated from /Users/ezl5238/dev/decko/gem/mod/account/set/right/email.rb ~~

data/tmpsets/set/mod010-account/right/password.rb

@@ -1,61 +0,0 @@
-# -*- encoding : utf-8 -*-
-class Card; module Set; class Right
-# Set: All "+Password" cards
-#
-module Password;
-extend Card::Set
-def self.source_location; "/Users/ezl5238/dev/decko/gem/mod/account/set/right/password.rb"; end
-include_set Abstract::AccountField
-
-def history?
-  false
-end
-
-def ok_to_read
-  own_account? || super
-end
-
-event :encrypt_password, :store,
-      on: :save, changed: :content,
-      when: proc { !Card::Env[:no_password_encryptions] } do
-  # no_password_encryptions = hack for import - fix with api for ignoring events
-  salt = left&.salt
-  self.content = Auth.encrypt content, salt
-
-  # errors.add :password, 'need a valid salt'
-  # turns out we have a lot of existing account without a salt.
-  # not sure when that broke??
-end
-
-event :validate_password, :validate, on: :save do
-  return if content.length > 3
-
-  errors.add :password, t(:account_password_length)
-end
-
-event :validate_password_present, :prepare_to_validate, on: :update do
-  abort :success if content.blank?
-end
-
-view :raw do
-  t :account_encrypted
-end
-
-module HtmlFormat; module_parent.send :register_set_format, Card::Format::HtmlFormat, self; extend Card::Set::AbstractFormat
-  view :core, wrap: :em do
-    render_raw
-  end
-
-  view :input do
-    card.content = ""
-    password_field :content, class: "d0-card-content", autocomplete: autocomplete?
-  end
-
-  def autocomplete?
-    return "on" if @parent && @parent.card.name == "*signin+*account" # HACK
-
-    "off"
-  end
-end
-end;end;end;end;
-# ~~ generated from /Users/ezl5238/dev/decko/gem/mod/account/set/right/password.rb ~~

data/tmpsets/set/mod010-account/right/roles.rb

@@ -1,36 +0,0 @@
-# -*- encoding : utf-8 -*-
-class Card; module Set; class Right
-# Set: All "+Roles" cards
-#
-module Roles;
-extend Card::Set
-def self.source_location; "/Users/ezl5238/dev/decko/gem/mod/account/set/right/roles.rb"; end
-event :validate_permission_to_assign_roles, :validate, on: :save do
-  return unless (fr = forbidden_roles).present?
-
-  errors.add :permission_denied,
-             "You don't have permission to assign the role#{'s' if fr.size > 1} "\
-             "#{fr.map(&:name).to_sentence}"   # LOCALIZE
-end
-
-def forbidden_roles
-  # restore old roles for permission check
-  with_old_role_permissions do |new_roles|
-    new_roles.reject do |card|
-      Card.fetch(card, "*members").ok? :update
-    end
-  end
-end
-
-def with_old_role_permissions
-  new_roles = item_cards
-  new_content = content
-  left.clear_roles
-  Auth.update_always_cache Card::Auth.as_id, nil
-  self.content = db_content_before_act
-  yield new_roles
-ensure
-  self.content = new_content
-end
-end;end;end;end;
-# ~~ generated from /Users/ezl5238/dev/decko/gem/mod/account/set/right/roles.rb ~~

data/tmpsets/set/mod010-account/right/salt.rb

@@ -1,22 +0,0 @@
-# -*- encoding : utf-8 -*-
-class Card; module Set; class Right
-# Set: All "+Salt" cards
-#
-module Salt;
-extend Card::Set
-def self.source_location; "/Users/ezl5238/dev/decko/gem/mod/account/set/right/salt.rb"; end
-include_set Abstract::AccountField
-
-def generate
-  self.content = Digest::SHA1.hexdigest "--#{Time.zone.now}--"
-end
-
-def history?
-  false
-end
-
-view :raw do
-  t :account_private_data
-end
-end;end;end;end;
-# ~~ generated from /Users/ezl5238/dev/decko/gem/mod/account/set/right/salt.rb ~~

data/tmpsets/set/mod010-account/right/status.rb

@@ -1,27 +0,0 @@
-# -*- encoding : utf-8 -*-
-class Card; module Set; class Right
-# Set: All "+Status" cards
-#
-module Status;
-extend Card::Set
-def self.source_location; "/Users/ezl5238/dev/decko/gem/mod/account/set/right/status.rb"; end
-include_set Abstract::AccountField
-include_set Abstract::Pointer
-
-def input_type
-  :radio
-end
-
-def option_names
-  %w[unapproved unverified active blocked system]
-end
-
-def ok_to_update
-  if own_account? && !Auth.always_ok?
-    deny_because you_cant(t(:account_deny_not_change_own_account))
-  else
-    super
-  end
-end
-end;end;end;end;
-# ~~ generated from /Users/ezl5238/dev/decko/gem/mod/account/set/right/status.rb ~~

data/tmpsets/set/mod010-account/self/signin.rb

@@ -1,222 +0,0 @@
-# -*- encoding : utf-8 -*-
-class Card; module Set; class Self
-# Set: The card "Signin"
-#
-# The Sign In card manages logging in and out of the site.
-#
-module Signin;
-extend Card::Set
-def self.source_location; "/Users/ezl5238/dev/decko/gem/mod/account/set/self/signin.rb"; end
-# /:signin (core view) gives the login ui
-# /:signin?view=edit gives the forgot password ui
-
-# /update/:signin is the login action
-# /delete/:signin is the logout action
-
-# authentication event
-event :signin, :validate, on: :update do
-  email = subfield :email
-  email &&= email.content
-  pword = subfield :password
-  pword &&= pword.content
-
-  authenticate_or_abort email, pword
-end
-
-# abort after successful signin (do not save card)
-event :signin_success, after: :signin do
-  abort :success
-end
-
-event :signout, :validate, on: :delete do
-  Env.reset_session
-  Auth.signin AnonymousID
-  abort :success
-end
-
-# triggered by clicking "Reset my Password", this sends out the verification password
-# and aborts (does not sign in)
-event :send_reset_password_token, before: :signin, on: :update, trigger: :required do
-  aborting do
-    blank_email? ? break : send_reset_password_email_or_fail
-  end
-end
-
-def email_from_subfield
-  @email_from_subfield ||= subfield(:email)&.content
-end
-
-def ok_to_read
-  true
-end
-
-def recaptcha_on?
-  false
-end
-
-def authenticate_or_abort email, pword
-  abort_unless email, :email_missing
-  abort_unless pword, :password_missing
-  authenticate_and_signin(email, pword) || failed_signin(email)
-end
-
-def authenticate_and_signin email, pword
-  return unless (account = Auth.authenticate email, pword)
-
-  Auth.signin account.left_id
-end
-
-def failed_signin email
-  errors.add :signin, signin_error_message(account_for(email))
-  abort :failure
-end
-
-def abort_unless value, error_key
-  abort :failure, t("account_#{error_key}") unless value
-end
-
-def signin_error_message account
-  t "account_#{signin_error_key account}"
-end
-
-def error_on field, error_key
-  errors.add field, t("account_#{error_key}")
-end
-
-def account_for email
-  Auth.find_account_by_email email
-end
-
-def send_reset_password_email_or_fail
-  if (account = account_for email_from_subfield)&.active?
-    send_reset_password_email account
-  else
-    reset_password_fail account
-  end
-end
-
-def blank_email?
-  return false if email_from_subfield.present?
-
-  error_on :email, :error_blank
-end
-
-def send_reset_password_email account
-  Auth.as_bot { account.send_password_reset_email }
-end
-
-def reset_password_fail account
-  if account
-    error_on :account, :error_not_active
-  else
-    error_on :email, :error_not_recognized
-  end
-end
-
-private
-
-def signin_error_key account
-  case
-  when account.nil?     then :error_unknown_email
-  when !account.active? then :error_not_active
-  else                       :error_wrong_password
-  end
-end
-
-module HtmlFormat; module_parent.send :register_set_format, Card::Format::HtmlFormat, self; extend Card::Set::AbstractFormat
-  view :core, cache: :never do
-    voo.edit_structure = [signin_field(:email), signin_field(:password)]
-    with_nest_mode :edit do
-      card_form :update, recaptcha: :off, success: signin_success do
-        [
-          _render_content_formgroups,
-          _render_signin_buttons
-        ]
-      end
-    end
-  end
-
-  view :open do
-    voo.show :help
-    voo.hide :menu
-    super()
-  end
-
-  # FIXME: need a generic solution for this
-  view :title do
-    voo.title ||= t(:account_sign_in_title)
-    super()
-  end
-
-  view :open_content do
-    # annoying step designed to avoid table of contents.  sigh
-    _render_core
-  end
-
-  view :one_line_content do
-    ""
-  end
-
-  view :reset_password_success do
-    # 'Check your email for a link to reset your password'
-    frame { t :account_check_email }
-  end
-
-  view :signin_buttons do
-    button_formgroup do
-      [signin_button, signup_link, reset_password_link]
-    end
-  end
-
-  # FORGOT PASSWORD
-  view :edit do
-    reset_password_voo
-    Auth.as_bot { super() }
-  end
-
-  def reset_password_voo
-    voo.title ||= t :account_forgot_password
-    voo.edit_structure = [signin_field(:email)]
-    voo.hide :help
-  end
-
-  view :edit_buttons do
-    button_tag t(:account_reset_my_password),
-               situation: "primary", class: "_close-modal-on-success"
-  end
-
-  def signin_success
-    { redirect: true, mark: (Env.interrupted_action || "*previous") }
-  end
-
-  def signin_button
-    button_tag t(:account_sign_in), situation: "primary"
-  end
-
-  def signup_link
-    subformat(Card[:account_links]).render! :sign_up, title: t(:account_or_sign_up)
-  end
-
-  def reset_password_link
-    link = link_to_view :edit, t(:account_reset_password),
-                        path: { slot: { hide: :bridge_link } }
-    # FIXME: inline styling
-    raw("<div style='float:right'>#{link}</div>")
-  end
-
-  def edit_view_hidden
-    hidden_tags card: { trigger: :send_reset_password_token }
-  end
-
-  def edit_success
-    { view: :reset_password_success }
-  end
-
-  def signin_field name
-    nest_name = "".to_name.trait(name)
-    [nest_name, { title: name.to_s, view: "titled",
-                  nest_name: nest_name, skip_perms: true }]
-  end
-end
-end;end;end;end;
-# ~~ generated from /Users/ezl5238/dev/decko/gem/mod/account/set/self/signin.rb ~~

data/tmpsets/set/mod010-account/type/role.rb

@@ -1,30 +0,0 @@
-# -*- encoding : utf-8 -*-
-class Card; module Set; class Type
-# Set: All "Role" cards
-#
-module Role;
-extend Card::Set
-def self.source_location; "/Users/ezl5238/dev/decko/gem/mod/account/set/type/role.rb"; end
-def disabled?
-  Auth.current&.fetch(:disabled_roles)&.item_ids&.include? id
-end
-
-module HtmlFormat; module_parent.send :register_set_format, Card::Format::HtmlFormat, self; extend Card::Set::AbstractFormat
-  view :link_with_checkbox, cache: :never do
-    role_checkbox
-  end
-
-  def role_checkbox
-    name = card.disabled? ? "add_item" : "drop_item"
-    subformat(Auth.current.field(:disabled_roles, new: {})).card_form :update do
-      [check_box_tag(name, card.id, !card.disabled?, class: "_edit-item"),
-       render_link]
-    end
-  end
-
-  def related_by_content_items
-    super.unshift ["members", :members]
-  end
-end
-end;end;end;end;
-# ~~ generated from /Users/ezl5238/dev/decko/gem/mod/account/set/type/role.rb ~~