card 1.97.0.1 → 1.98.0

data/tmpsets/set/mod025-account/right/status.rb

@@ -0,0 +1,18 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right
+# Set: All "+Status" cards
+#
+module Status;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/right/status.rb"; end
+include All::Permissions::Accounts
+
+def ok_to_update
+  if own_account? && !Auth.always_ok?
+    deny_because you_cant(tr(:deny_not_change_own_account))
+  else
+    super
+  end
+end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/right/status.rb ~~

data/tmpsets/set/mod025-account/right/token.rb

@@ -0,0 +1,63 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right
+# Set: All "+Token" cards
+#
+module Token;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/right/token.rb"; end
+include All::Permissions::Accounts
+
+DURATIONS = "second|minute|hour|day|week|month|year".freeze
+
+card_accessor :expiration
+
+def history?
+  false
+end
+
+view :raw do
+  tr :private_data
+end
+
+def validate! token
+  error =
+    case
+    when !real?           then [:token_not_found, tr(:error_token_not_found)]
+    when expired?         then [:token_expired, tr(:error_token_expired)]
+    when content != token then [:incorrect_token, tr(:error_incorrect_token)]
+    end
+  errors.add *error if error
+end
+
+def expired?
+  !permanent? && updated_at <= term.ago
+end
+
+def permanent?
+  term == "permanent"
+end
+
+def used!
+  # immediate deletion was causing problems.  commenting for now
+  # Auth.as_bot { delete! } unless permanent?
+end
+
+def term
+  @term ||=
+    if expiration.present?
+      term_from_string expiration
+    else
+      Card.config.token_expiry
+    end
+end
+
+def term_from_string string
+  string.strip!
+  return "permanent" if string == "none"
+  re_match = /^(\d+)[\.\s]*(#{DURATIONS})s?$/.match(string)
+  number, unit = re_match.captures if re_match
+  raise Card::Open::Error, tr(:exception_bad_expiration, example: '2 days') unless unit
+  number.to_i.send unit
+end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/right/token.rb ~~

data/{mod/account/set → tmpsets/set/mod025-account}/self/account_links.rb

@@ -1,5 +1,15 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Self
+# Set: The card "AccountLinks"
+#
+module AccountLinks;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/self/account_links.rb"; end
+def ok_to_read
+  true
+end
 
-format :html do
+module HtmlFormat; parent.send :register_set_format, Card::Format::HtmlFormat, self; extend Card::Set::AbstractFormat
   view :core, cache: :never do
     status_class = Auth.signed_in? ? "logged-in" : "logged-out"
     wrap_with :span, id: "logging", class: status_class do
@@ -26,12 +36,12 @@ format :html do
                  path: { action: :new, mark: :signup }
   end
 
-  view :sign_in, link_options { !Auth.signed_in? } do
+  view(:sign_in, link_options { !Auth.signed_in? }) do
     link_to_card :signin, account_link_text(:sign_in),
                  class: nav_link_class("signin-link")
   end
 
-  view :sign_out, link_options { Auth.signed_in? } do
+  view(:sign_out, link_options { Auth.signed_in? }) do
     link_to_card :signin, account_link_text(:sign_out),
                  class: nav_link_class("signout-link"),
                  path: { action: :delete }
@@ -43,8 +53,20 @@ format :html do
                  path: { action: :new, mark: :signup }
   end
 
-  view :my_card, link_options { Auth.signed_in? } do
-    link_to_card Auth.current.name, nil, id: "my-card-link", class: nav_link_class("my-card")
+  view(:my_card, link_options { Auth.signed_in? }) do
+    link = link_to_card Auth.current.name, nil,
+                        id: "my-card-link",
+                        class: nav_link_class("my-card")
+    split_button link, nil do
+      [
+        link_to_card([Auth.current, :account_settings], "Account"),
+        ["Roles", roles.map(&method(:link_to_card))]
+      ]
+    end
+  end
+
+  def roles
+    [Card[:eagle], Auth.current.fetch(trait: :roles)&.item_names].flatten.compact
   end
 
   def account_link_text purpose
@@ -65,3 +87,5 @@ format :html do
       Card.new(type_id: Card.default_accounted_type_id).ok?(:create)
   end
 end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/self/account_links.rb ~~

data/tmpsets/set/mod025-account/self/signin.rb

@@ -0,0 +1,188 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Self
+# Set: The card "Signin"
+#
+# The Sign In card manages logging in and out of the site.
+#
+module Signin;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/self/signin.rb"; end
+# /:signin (core view) gives the login ui
+# /:signin?view=edit gives the forgot password ui
+
+# /update/:signin is the login action
+# /delete/:signin is the logout action
+
+# authentication event
+event :signin, :validate, on: :update do
+  email = subfield :email
+  email &&= email.content
+  pword = subfield :password
+  pword &&= pword.content
+
+  authenticate_or_abort email, pword
+end
+
+# abort after successful signin (do not save card)
+event :signin_success, after: :signin do
+  abort :success
+end
+
+event :signout, :validate, on: :delete do
+  Auth.signin AnonymousID
+  abort :success
+end
+
+# triggered by clicking "Reset my Password", this sends out the verification password
+# and aborts (does not sign in)
+event :send_reset_password_token, before: :signin, on: :update, trigger: :required do
+  email = subfield(:email)&.content
+  send_reset_password_email_or_fail email
+end
+
+def ok_to_read
+  true
+end
+
+def consider_recaptcha?
+  false
+end
+
+def i18n_signin key
+  I18n.t key, scope: "mod.account.set.self.signin"
+end
+
+def authenticate_or_abort email, pword
+  abort :failure, i18n_signin(:email_missing) unless email
+  abort :failure, i18n_signin(:password_missing) unless pword
+  if (account = Auth.authenticate(email, pword))
+    Auth.signin account.left_id
+  else
+    account = Auth.find_account_by_email email
+    errors.add :signin, signin_error_message(account)
+    abort :failure
+  end
+end
+
+def signin_error_message account
+  case
+  when account.nil?     then i18n_signin(:error_unknown_email)
+  when !account.active? then i18n_signin(:error_not_active)
+  else                       i18n_signin(:error_wrong_password)
+  end
+end
+
+def send_reset_password_email_or_fail email
+  aborting do
+    break errors.add :email, i18n_signin(:error_blank) if email.blank?
+
+    if (account = Auth.find_account_by_email(email))&.active?
+      account.send_reset_password_token
+    elsif account
+      errors.add :account, i18n_signin(:error_not_active)
+    else
+      errors.add :email, i18n_signin(:error_not_recognized)
+    end
+  end
+end
+
+module HtmlFormat; parent.send :register_set_format, Card::Format::HtmlFormat, self; extend Card::Set::AbstractFormat
+  view :core, cache: :never do
+    voo.edit_structure = [signin_field(:email), signin_field(:password)]
+    with_nest_mode :edit do
+      card_form :update, recaptcha: :off, success: signin_success do
+        [
+          _render_content_formgroup,
+          _render_signin_buttons
+        ]
+      end
+    end
+  end
+
+  view :open do
+    voo.show :help
+    voo.hide :menu
+    super()
+  end
+
+  # FIXME: need a generic solution for this
+  view :title do
+    voo.title ||= I18n.t(:sign_in_title, scope: "mod.account.set.self.signin")
+    super()
+  end
+
+  view :open_content do
+    # annoying step designed to avoid table of contents.  sigh
+    _render_core
+  end
+
+  view :closed_content do
+    ""
+  end
+
+  view :reset_password_success do
+    # 'Check your email for a link to reset your password'
+    frame { I18n.t(:check_email, scope: "mod.account.set.self.signin") }
+  end
+
+  view :signin_buttons do
+    button_formgroup do
+      [signin_button, signup_link, reset_password_link]
+    end
+  end
+
+  # FORGOT PASSWORD
+  view :edit do
+    reset_password_voo
+    Auth.as_bot { super() }
+  end
+
+  def reset_password_voo
+    voo.title ||= card.i18n_signin(:forgot_password)
+    voo.edit_structure = [signin_field(:email)]
+    voo.hide :help
+  end
+
+
+  view :edit_buttons do
+    text = I18n.t :reset_my_password, scope: "mod.account.set.self.signin"
+    button_tag text, situation: "primary", class: "_close-modal-on-success"
+  end
+
+  def signin_success
+    "REDIRECT: #{Env.interrupted_action || '*previous'}"
+  end
+
+  def signin_button
+    text = I18n.t :sign_in, scope: "mod.account.set.self.signin"
+    button_tag text, situation: "primary"
+  end
+
+  def signup_link
+    text = I18n.t :or_sign_up, scope: "mod.account.set.self.signin"
+    subformat(Card[:account_links]).render! :sign_up, title: text
+  end
+
+  def reset_password_link
+    text = I18n.t :reset_password, scope: "mod.account.set.self.signin"
+    link = link_to_view :edit, text, path: { slot: { hide: :bridge_link } }
+    # FIXME: inline styling
+    raw("<div style='float:right'>#{link}</div>")
+  end
+
+  def edit_view_hidden
+    hidden_tags card: { trigger: :send_reset_password_token }
+  end
+
+  def edit_success
+    { view: :reset_password_success }
+  end
+
+  def signin_field name
+    nest_name = "".to_name.trait(name)
+    [nest_name, { title: name.to_s, view: "titled",
+                  nest_name: nest_name, skip_perms: true }]
+  end
+end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/self/signin.rb ~~

data/tmpsets/set/mod025-account/type/signup.rb

@@ -0,0 +1,191 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Type
+# Set: All "Signup" cards
+#
+module Signup;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/type/signup.rb"; end
+module HtmlFormat; parent.send :register_set_format, Card::Format::HtmlFormat, self; extend Card::Set::AbstractFormat
+  def invitation?
+    return @invitation unless @invitation.nil?
+    @invitation = Auth.signed_in? &&
+                  (card.fetch trait: :account, new: {}).can_approve?
+    # consider making account a card_accessor?
+  end
+
+  view :new do
+    voo.title = invitation? ? tr(:invite) : tr(:sign_up)
+    super()
+  end
+
+  before :name_formgroup do
+    voo.help = tr :first_last_help
+  end
+
+  view :content_formgroup do
+    [account_formgroups, (card.structure ? edit_slot : "")].join
+  end
+
+  def hidden_success override=nil
+    override = card.rule(:thanks) unless invitation?
+    super override
+  end
+
+  view :new_buttons do
+    button_formgroup do
+      [standard_create_button, invite_button].compact
+    end
+  end
+
+  def invite_button
+    return unless invitation?
+    button_tag "Send Invitation", situation: "primary"
+  end
+
+  def account_formgroups
+    account = card.fetch trait: :account, new: {}
+    Auth.as_bot do
+      subformat(account)._render :content_formgroup, structure: true
+    end
+  end
+
+  view :core, template: :haml do
+    @lines = [signup_line] + account_lines
+    @body = process_content _render_raw
+  end
+
+  def signup_line
+    [ "<strong>#{safe_name}</strong>",
+      ("was" unless anonymous_signup?),
+      "signed up on #{format_date card.created_at}"
+    ].compact.join " "
+  end
+
+  def anonymous_signup?
+    card.creator_id == AnonymousID
+  end
+
+  def account_lines
+    if card.account
+      verification_lines
+    else
+      [tr(:missing_account)]
+    end
+  end
+
+  def verification_lines
+    [ verification_sent_line, verification_link_line].compact
+  end
+
+  def verification_sent_line
+    account = card.account
+    return unless account.token.present? && account.email_card.ok?(:read)
+    "A verification email has been sent to #{account.email}"
+  end
+
+  def verification_link_line
+    links = verification_links
+    return if links.empty?
+    links.join " "
+  end
+
+  def verification_links
+    [approve_with_token_link, approve_without_token_link, deny_link].compact
+  end
+
+  def approve_with_token_link
+    return unless card.account.can_approve?
+    token_action = card.account.token.present? ? "Resend" : "Send"
+    link_to_card card, "#{token_action} verification email",
+                 path: { action: :update, approve_with_token: true }
+  end
+
+  def approve_without_token_link
+    return unless card.account.can_approve?
+    link_to_card card, "Approve without verification",
+                 path: { action: :update, approve_without_token: true }
+  end
+
+  def deny_link
+    return unless card.ok? :delete
+    link_to_card card, "Deny and delete", path: { action: :delete }
+  end
+end
+
+def default_account_status
+  "pending"
+end
+
+event :activate_by_token, :validate, on: :update,
+                                     when: proc { |c| c.has_token? } do
+  abort :failure, "no field manipulation mid-activation" if subcards.present?
+  # necessary because this performs actions as Wagn Bot
+  abort :failure, "no account associated with #{name}" unless account
+
+  account.validate_token! @env_token
+
+  if account.errors.empty?
+    account.token_card.used!
+    activate_account
+    Auth.signin id
+    Auth.as_bot # use admin permissions for rest of action
+    success << ""
+  else
+    resend_activation_token
+    abort :success
+  end
+end
+
+def has_token?
+  @env_token = Env.params[:token]
+end
+
+event :activate_account do
+  # FIXME: -- sends email before account is fully activated
+  add_subfield :account
+  subfield(:account).add_subfield :status, content: "active"
+  self.type_id = Card.default_accounted_type_id
+  account.send_welcome_email
+end
+
+event :approve_with_token, :validate,
+      on: :update,
+      when: proc { Env.params[:approve_with_token] } do
+  abort :failure, "illegal approval" unless account.can_approve?
+  account.reset_token
+  account.send_account_verification_email
+end
+
+event :approve_without_token, :validate,
+      on: :update,
+      when: proc { Env.params[:approve_without_token] } do
+  abort :failure, "illegal approval" unless account.can_approve?
+  activate_account
+end
+
+event :resend_activation_token do
+  account.reset_token
+  account.send_account_verification_email
+  message = "Please check your email for a new password reset link."
+  if account.errors.any?
+    message = "Sorry, #{account.errors.first.last}. #{message}"
+  end
+  success << { id: "_self", view: "message", message: message }
+end
+
+def signed_in_as_me_without_password?
+  Auth.signed_in? && Auth.current_id == id && account.password.blank?
+end
+
+event :redirect_to_edit_password, :finalize,
+      on: :update,
+      when: proc { |c| c.signed_in_as_me_without_password? } do
+  Env.params[:success] = account.edit_password_success_args
+end
+
+event :act_as_current_for_integrate_stage, :integrate,
+      on: :create do
+  Auth.current_id = id
+end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/type/signup.rb ~~