card 1.99.4 → 1.99.5

data/tmpsets/set/{mod025-account → mod017-account}/all/account.rb

@@ -1,10 +1,6 @@
 # -*- encoding : utf-8 -*-
-class Card; module Set; class All
-# Set: All cards (Account)
-#
-module Account;
-extend Card::Set
-def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/all/account.rb"; end
+class Card; module Set; class All; module Account; extend Card::Set
+# ~~ above autogenerated; below pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/all/account.rb ~~
 module ClassMethods
   def default_accounted_type_id
     Card::UserID
@@ -24,17 +20,16 @@ def parties
 end
 
 def among? ok_ids
-  ok_ids.any? do |ok_id|
-    ok_id == Card::AnyoneID ||
-      (ok_id == Card::AnyoneWithRoleID && all_roles.size > 1) ||
-      parties.member?(ok_id)
+  ok_ids.each do |ok_id|
+    return true if parties.member? ok_id
   end
+  ok_ids.member? Card::AnyoneID
 end
 
 def own_account?
   # card is +*account card of signed_in user.
-  name.part_names[0].key == Auth.as_card.key &&
-    name.part_names[1].key == Card[:account].key
+  cardname.part_names[0].key == Auth.as_card.key &&
+    cardname.part_names[1].key == Card[:account].key
 end
 
 def read_rules
@@ -56,13 +51,10 @@ def all_roles
 end
 
 def fetch_roles
-  [Card::AnyoneSignedInID] + role_ids_from_roles_trait
-end
-
-def role_ids_from_roles_trait
   Auth.as_bot do
     role_trait = fetch trait: :roles
-    role_trait ? role_trait.item_ids : []
+    next [Card::AnyoneSignedInID] unless role_trait
+    [Card::AnyoneSignedInID] + role_trait.item_ids
   end
 end
 
@@ -74,5 +66,7 @@ event :set_stamper, :prepare_to_validate do
   self.updater_id = Auth.current_id
   self.creator_id = updater_id if new_card?
 end
+
+
+# ~~ below autogenerated; above pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/all/account.rb ~~
 end;end;end;end;
-# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/all/account.rb ~~

data/tmpsets/set/mod017-account/right/account.rb

@@ -0,0 +1,196 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right; module Account; extend Card::Set
+# ~~ above autogenerated; below pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/account.rb ~~
+
+include All::Permissions::Accounts
+
+card_accessor :email
+card_accessor :password
+card_accessor :salt
+card_accessor :status
+card_accessor :token
+
+def active?
+  status == "active"
+end
+
+def blocked?
+  status == "blocked"
+end
+
+def built_in?
+  status == "system"
+end
+
+def pending?
+  status == "pending"
+end
+
+def validate_token! test_token
+  tcard = token_card
+  tcard.validate! test_token
+  copy_errors tcard
+  errors.empty?
+end
+
+format do
+  view :verify_url do
+    signup_name = card.cardname.left_name
+    card_url "update/#{signup_name.url_key}" \
+             "?token=#{card.token}" \
+             "&live_token=true"
+  end
+
+  view :verify_days do
+    (Card.config.token_expiry / 1.day).to_s
+  end
+
+  view :reset_password_url do
+    card_url "update/#{card.cardname.url_key}" \
+             "?token=#{card.token_card.refresh(true).content}" \
+             "&live_token=true&event=reset_password"
+  end
+
+  view :reset_password_days do
+    (Card.config.token_expiry / 1.day).to_s
+  end
+end
+
+format :html do
+  view :raw do |args|
+    content = []
+    unless args[:no_email]
+      content << "{{+#{Card[:email].name}|titled;title:email}}"
+    end
+    unless args[:no_password]
+      content << "{{+#{Card[:password].name}|titled;title:password}}"
+    end
+    content * " "
+  end
+
+  view :edit do |args|
+    args[:structure] = true
+    super args
+  end
+end
+
+event :validate_accountability, :prepare_to_validate, on: :create do
+  unless left && left.accountable?
+    errors.add :content, "not allowed on this card"
+  end
+end
+
+event :require_email, :prepare_to_validate,
+      after: :validate_accountability, on: :create do
+  errors.add :email, "required" unless subfield(:email)
+end
+
+event :set_default_salt, :prepare_to_validate, on: :create do
+  salt = Digest::SHA1.hexdigest "--#{Time.zone.now}--"
+  Env[:salt] = salt # HACK!!! need viable mechanism to get this to password
+  add_subfield :salt, content: salt
+end
+
+event :set_default_status, :prepare_to_validate, on: :create do
+  default_status = Auth.needs_setup? ? "active" : "pending"
+  add_subfield :status, content: default_status
+end
+
+def confirm_ok?
+  Card.new(type_id: Card.default_accounted_type_id).ok? :create
+end
+
+event :generate_confirmation_token, :prepare_to_store,
+      on: :create,
+      when: proc { |c| c.confirm_ok? } do
+  add_subfield :token, content: generate_token
+end
+
+event :reset_password,
+      :prepare_to_validate, on: :update, when: proc { |c| c.reset_password? } do
+  if validate_token! @env_token
+    token_card.used!
+    Auth.signin left_id
+    success << edit_password_success_args
+  else
+    error_msg = errors.first.last
+    send_reset_password_token
+    msg = "Sorry, #{error_msg}. " \
+          "Please check your email for a new password reset link."
+    success << { id: "_self", view: "message", message: msg }
+  end
+  abort :success
+end
+
+def edit_password_success_args
+  {
+    id: left.name,
+    view: :related,
+    related: { name: "+#{Card[:account].name}", view: "edit" }
+  }
+end
+
+def reset_password?
+  @env_token = Env.params[:token]
+  @env_token && Env.params[:event] == "reset_password"
+end
+
+event :reset_token do
+  Auth.as_bot do
+    token_card.update_attributes! content: generate_token
+  end
+end
+
+event :send_welcome_email do
+  welcome = Card["welcome email"]
+  if welcome && welcome.type_code == :email_template
+    welcome.deliver context: left, to: email
+  end
+end
+
+event :send_account_verification_email, :integrate,
+      on: :create, when: proc { |c| c.token.present? } do
+  Card[:verification_email].deliver context: self, to: email
+end
+
+event :send_reset_password_token do
+  Auth.as_bot do
+    token_card.update_attributes! content: generate_token
+  end
+  Card[:password_reset_email].deliver context: self, to: email
+end
+
+def ok_to_read
+  own_account? ? true : super
+end
+
+def changes_visible? act
+  act.actions_affecting(act.card).each do |action|
+    return true if action.card.ok? :read
+  end
+  false
+end
+
+def send_change_notice act, followed_set, follow_option
+  return unless changes_visible?(act)
+  Auth.as(left.id) do
+    Card[:follower_notification_email].deliver(
+      context:       act.card,
+      to:            email,
+      follower:      left.name,
+      followed_set:  followed_set,
+      follow_option: follow_option
+    )
+  end
+end
+
+format :email do
+  view :mail do |args|
+    args[:to] ||= card.email
+    super args
+  end
+end
+
+
+# ~~ below autogenerated; above pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/account.rb ~~
+end;end;end;end;

data/tmpsets/set/mod017-account/right/email.rb

@@ -0,0 +1,61 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right; module Email; extend Card::Set
+# ~~ above autogenerated; below pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/email.rb ~~
+include All::Permissions::Accounts
+
+view :raw do
+  case
+  when card.real? then card.content
+  # following supports legacy behavior
+  # (should be moved to User+*email+*type plus right)
+  when card.left.account then card.left.account.email
+  else ""
+  end
+end
+
+view :core, :raw
+
+event :validate_email, :validate, on: :save do
+  if content.present? && content !~ /^([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})$/i
+    errors.add :content, "must be valid address"
+  end
+end
+
+event :validate_unique_email, after: :validate_email, on: :save do
+  if content.present?
+    Auth.as_bot do
+      wql = { right_id: Card::EmailID, eq: content, return: :id }
+      wql[:not] = { id: id } if id
+      wql_comment = "email duplicate? (#{content})"
+      if Card.search(wql, wql_comment).first
+        errors.add :content, "must be unique"
+      end
+    end
+  end
+end
+
+event :downcase_email, :prepare_to_validate, on: :save do
+  return if !content || content == content.downcase
+  self.content = content.downcase
+end
+
+def email_required?
+  !built_in?
+end
+
+def ok_to_read
+  if own_email? || Auth.always_ok?
+    true
+  else
+    deny_because "viewing email is restricted to administrators and " \
+                 "account holders"
+  end
+end
+
+def own_email?
+  cardname.part_names[0].key == Auth.as_card.key
+end
+
+
+# ~~ below autogenerated; above pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/email.rb ~~
+end;end;end;end;

data/tmpsets/set/{mod025-account → mod017-account}/right/password.rb

@@ -1,25 +1,30 @@
 # -*- encoding : utf-8 -*-
-class Card; module Set; class Right
-# Set: All "+Password" cards
-#
-module Password;
-extend Card::Set
-def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/right/password.rb"; end
+class Card; module Set; class Right; module Password; extend Card::Set
+# ~~ above autogenerated; below pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/password.rb ~~
+
 include All::Permissions::Accounts
 
-def history?
-  false
+view :editor do
+  card.content = ""
+
+  # HACK
+  autocomplete = if @parent && @parent.card.name == "*signin+*account"
+                   "on"
+                 else
+                   "off"
+                 end
+  password_field :content, class: "card-content", autocomplete: autocomplete
 end
 
-def ok_to_read
-  own_account? ? true : super
+view :raw do
+  "<em>encrypted</em>"
 end
 
 event :encrypt_password, :store,
       on: :save, changed: :content,
       when: proc { !Card::Env[:no_password_encryptions] } do
   # no_password_encryptions = hack for import - fix with api for ignoring events
-  salt = left&.salt
+  salt = left && left.salt
   # HACK: fix with better ORM handling
   salt = Card::Env[:salt] unless salt.present?
   self.content = Auth.encrypt content, salt
@@ -32,7 +37,7 @@ end
 event :validate_password, :validate,
       on: :save do
   unless content.length > 3
-    errors.add :password, tr(:password_length)
+    errors.add :password, "must be at least 4 characters"
   end
 end
 
@@ -40,24 +45,10 @@ event :validate_password_present, :prepare_to_validate, on: :update do
   abort :success if content.blank?
 end
 
-view :raw do
-  tr :encrypted
+def ok_to_read
+  own_account? ? true : super
 end
 
-module HtmlFormat; parent.send :register_set_format, Card::Format::HtmlFormat, self; extend Card::Set::AbstractFormat
-  view :core, wrap: :em do
-    render_raw
-  end
-
-  view :editor do
-    card.content = ""
-    password_field :content, class: "d0-card-content", autocomplete: autocomplete?
-  end
 
-  def autocomplete?
-    return "on" if @parent && @parent.card.name == "*signin+*account" # HACK
-    "off"
-  end
-end
+# ~~ below autogenerated; above pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/password.rb ~~
 end;end;end;end;
-# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/right/password.rb ~~

data/tmpsets/set/mod017-account/right/salt.rb

@@ -0,0 +1,12 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right; module Salt; extend Card::Set
+# ~~ above autogenerated; below pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/salt.rb ~~
+include All::Permissions::Accounts
+
+view :raw do |_args|
+  "Private data"
+end
+
+
+# ~~ below autogenerated; above pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/salt.rb ~~
+end;end;end;end;

data/tmpsets/set/mod017-account/right/status.rb

@@ -0,0 +1,16 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right; module Status; extend Card::Set
+# ~~ above autogenerated; below pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/status.rb ~~
+include All::Permissions::Accounts
+
+def ok_to_update
+  if own_account? && !Auth.always_ok?
+    deny_because you_cant("change the status of your own account")
+  else
+    super
+  end
+end
+
+
+# ~~ below autogenerated; above pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/status.rb ~~
+end;end;end;end;

data/tmpsets/set/mod017-account/right/token.rb

@@ -0,0 +1,57 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right; module Token; extend Card::Set
+# ~~ above autogenerated; below pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/token.rb ~~
+include All::Permissions::Accounts
+
+DURATIONS = "second|minute|hour|day|week|month|year".freeze
+
+card_accessor :expiration
+
+view :raw do
+  "Private data"
+end
+
+def validate! token
+  error =
+    case
+    when !real?           then [:token_not_found, "no token found"]
+    when expired?         then [:token_expired, "expired token"]
+    when content != token then [:incorrect_token, "token mismatch"]
+    end
+  errors.add *error if error
+end
+
+def expired?
+  !permanent? && updated_at <= term.ago
+end
+
+def permanent?
+  term == "permanent"
+end
+
+def used!
+  Auth.as_bot { delete! } unless permanent?
+end
+
+def term
+  @term ||=
+    if expiration.present?
+      term_from_string expiration
+    else
+      Card.config.token_expiry
+    end
+end
+
+def term_from_string string
+  string.strip!
+  return "permanent" if string == "none"
+  re_match = /^(\d+)[\.\s]*(#{DURATIONS})s?$/.match(string)
+  number, unit = re_match.captures if re_match
+
+  raise Card::Error::Oops, "illegal expiration value (eg '2 days')" unless unit
+  number.to_i.send unit
+end
+
+
+# ~~ below autogenerated; above pulled from /Users/ethan/dev/wagn/gem/card/mod/account/set/right/token.rb ~~
+end;end;end;end;