card 1.99.6 → 1.100.0

data/tmpsets/set/mod026-account/right/account/views.rb

@@ -0,0 +1,74 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right; module Account;
+# Set: All "+Account+Views" cards (Views)
+#
+module Views;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/right/account/views.rb"; end
+module Format; parent.send :register_set_format, Card::Format, self; extend Card::Set::AbstractFormat
+  view :verify_url, cache: :never do
+    raise Error::PermissionDenied unless card.ok?(:create) || card.action
+
+    token_url :verify_and_activate, anonymous: true
+  end
+
+  view :reset_password_url do
+    raise Error::PermissionDenied unless card.password_card.ok? :update
+
+    token_url :reset_password
+  end
+
+  view :token_expiry do
+    "(#{token_expiry_sentence}"
+  end
+
+  view :token_days do
+    Card.config.token_expiry / 1.day
+  end
+
+  # DEPRECATED
+  view :verify_days, :token_days
+  view :reset_password_days, :token_days
+
+  def token_url trigger, extra_payload={}
+    card_url path(action: :update,
+                  card: { trigger: trigger },
+                  token: new_token(extra_payload))
+  end
+
+  def token_expiry_sentence
+    "Link will expire in #{render_token_days} days"
+  end
+
+  def new_token extra_payload
+    Auth::Token.encode card.accounted_id, extra_payload
+  end
+end
+
+module HtmlFormat; parent.send :register_set_format, Card::Format::HtmlFormat, self; extend Card::Set::AbstractFormat
+  view :core do
+    [account_field_nest(:email, "email"),
+     account_field_nest(:password, "password")]
+  end
+
+  def account_field_nest field, title
+    field_nest field, title: title, view: :labeled
+    # edit: :inline, hide: [:help_link, :bridge_link]
+  end
+
+  before :content_formgroups do
+    voo.edit_structure = [[:email, "email"], [:password, "password"]]
+  end
+
+  view :token_expiry do
+    "<p><em>#{token_expiry_sentence}</em></p>"
+  end
+end
+
+module EmailHtmlFormat; parent.send :register_set_format, Card::Format::EmailHtmlFormat, self; extend Card::Set::AbstractFormat
+  def mail context, fields
+    super context, fields.reverse_merge(to: card.email)
+  end
+end
+end;end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/right/account/views.rb ~~

data/tmpsets/set/mod026-account/right/api_key.rb

@@ -0,0 +1,57 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right
+# Set: All "+ApiKey" cards
+#
+module ApiKey;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/right/api_key.rb"; end
+include_set Abstract::AccountField
+
+# DURATIONS = "second|minute|hour|day|week|month|year".freeze
+
+def history?
+  false
+end
+
+view :raw do
+  tr :private_data
+end
+
+def validate! api_key
+  error =
+    case
+    when !real?             then [:token_not_found, tr(:error_token_not_found)]
+    # when expired?           then [:token_expired, tr(:error_token_expired)]
+    when content != api_key then [:incorrect_token, tr(:error_incorrect_token)]
+    end
+  errors.add(*error) if error
+  error.nil?
+end
+
+# def expired?
+#   !permanent? && updated_at <= term.ago
+# end
+#
+# def permanent?
+#   term == "permanent"
+# end
+
+# def term
+#   @term ||=
+#     if expiration.present?
+#       term_from_string expiration
+#     else
+#       Card.config.token_expiry
+#     end
+# end
+
+# def term_from_string string
+#   string.strip!
+#   return "permanent" if string == "none"
+#   re_match = /^(\d+)[\.\s]*(#{DURATIONS})s?$/.match(string)
+#   number, unit = re_match.captures if re_match
+#   raise Card::Open::Error, tr(:exception_bad_expiration, example: '2 days') unless unit
+#   number.to_i.send unit
+# end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/right/api_key.rb ~~

data/tmpsets/set/mod026-account/right/email.rb

@@ -0,0 +1,50 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right
+# Set: All "+Email" cards
+#
+module Email;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/right/email.rb"; end
+include_set Abstract::AccountField
+
+event :validate_email, :validate, on: :save do
+  if content? && content !~ /^([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})$/i
+    errors.add :content, tr(:error_invalid_address)
+  end
+end
+
+event :validate_unique_email, after: :validate_email, on: :save do
+  if content.present?
+    Auth.as_bot do
+      wql = { right_id: EmailID, eq: content, return: :id }
+      wql[:not] = { id: id } if id
+      wql_comment = tr(:search_email_duplicate, content: content)
+      if Card.search(wql, wql_comment).first
+        errors.add :content, tr(:error_not_unique)
+      end
+    end
+  end
+end
+
+event :downcase_email, :prepare_to_validate, on: :save do
+  return if !content || content == content.downcase
+  self.content = content.downcase
+end
+
+def email_required?
+  !left.system?
+end
+
+def ok_to_read
+  if own_email? || Auth.always_ok?
+    true
+  else
+    deny_because tr(:deny_email_restricted)
+  end
+end
+
+def own_email?
+  name.part_names[0].key == Auth.as_card.key
+end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/right/email.rb ~~

data/tmpsets/set/mod026-account/right/password.rb

@@ -0,0 +1,60 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right
+# Set: All "+Password" cards
+#
+module Password;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/right/password.rb"; end
+include_set Abstract::AccountField
+
+def history?
+  false
+end
+
+def ok_to_read
+  own_account? ? true : super
+end
+
+event :encrypt_password, :store,
+      on: :save, changed: :content,
+      when: proc { !Card::Env[:no_password_encryptions] } do
+  # no_password_encryptions = hack for import - fix with api for ignoring events
+  salt = left&.salt
+  self.content = Auth.encrypt content, salt
+
+  # errors.add :password, 'need a valid salt'
+  # turns out we have a lot of existing account without a salt.
+  # not sure when that broke??
+end
+
+event :validate_password, :validate, on: :save do
+  return if content.length > 3
+
+  errors.add :password, tr(:password_length)
+end
+
+event :validate_password_present, :prepare_to_validate, on: :update do
+  abort :success if content.blank?
+end
+
+view :raw do
+  tr :encrypted
+end
+
+module HtmlFormat; parent.send :register_set_format, Card::Format::HtmlFormat, self; extend Card::Set::AbstractFormat
+  view :core, wrap: :em do
+    render_raw
+  end
+
+  view :input do
+    card.content = ""
+    password_field :content, class: "d0-card-content", autocomplete: autocomplete?
+  end
+
+  def autocomplete?
+    return "on" if @parent && @parent.card.name == "*signin+*account" # HACK
+    "off"
+  end
+end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/right/password.rb ~~

data/tmpsets/set/mod026-account/right/roles.rb

@@ -0,0 +1,36 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right
+# Set: All "+Roles" cards
+#
+module Roles;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/right/roles.rb"; end
+event :validate_permission_to_assign_roles, :validate, on: :save do
+  return unless (fr = forbidden_roles).present?
+
+  errors.add :permission_denied,
+             "You don't have permission to assign the role#{'s' if fr.size > 1} "\
+             "#{fr.map(&:name).to_sentence}"   # LOCALIZE
+end
+
+def forbidden_roles
+  # restore old roles for permission check
+  with_old_role_permissions do |new_roles|
+    new_roles.select do |card|
+      !Card.fetch(card, "*members").ok? :update
+    end
+  end
+end
+
+def with_old_role_permissions
+  new_roles = item_cards
+  new_content = content
+  left.clear_roles
+  Auth.update_always_cache Card::Auth.as_id, nil
+  self.content = db_content_before_act
+  yield new_roles
+ensure
+  self.content = new_content
+end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/right/roles.rb ~~

data/tmpsets/set/mod026-account/right/salt.rb

@@ -0,0 +1,22 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right
+# Set: All "+Salt" cards
+#
+module Salt;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/right/salt.rb"; end
+include_set Abstract::AccountField
+
+def generate
+  self.content = Digest::SHA1.hexdigest "--#{Time.zone.now}--"
+end
+
+def history?
+  false
+end
+
+view :raw do
+  tr :private_data
+end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/right/salt.rb ~~

data/tmpsets/set/mod026-account/right/status.rb

@@ -0,0 +1,27 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Right
+# Set: All "+Status" cards
+#
+module Status;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/right/status.rb"; end
+include_set Abstract::AccountField
+include_set Abstract::Pointer
+
+def input_type
+  :radio
+end
+
+def option_names
+  %w[unapproved unverified active blocked system]
+end
+
+def ok_to_update
+  if own_account? && !Auth.always_ok?
+    deny_because you_cant(tr(:deny_not_change_own_account))
+  else
+    super
+  end
+end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/right/status.rb ~~

data/tmpsets/set/mod026-account/self/signin.rb

@@ -0,0 +1,188 @@
+# -*- encoding : utf-8 -*-
+class Card; module Set; class Self
+# Set: The card "Signin"
+#
+# The Sign In card manages logging in and out of the site.
+#
+module Signin;
+extend Card::Set
+def self.source_location; "/Users/ethan/dev/decko/gem/card/mod/account/set/self/signin.rb"; end
+# /:signin (core view) gives the login ui
+# /:signin?view=edit gives the forgot password ui
+
+# /update/:signin is the login action
+# /delete/:signin is the logout action
+
+# authentication event
+event :signin, :validate, on: :update do
+  email = subfield :email
+  email &&= email.content
+  pword = subfield :password
+  pword &&= pword.content
+
+  authenticate_or_abort email, pword
+end
+
+# abort after successful signin (do not save card)
+event :signin_success, after: :signin do
+  abort :success
+end
+
+event :signout, :validate, on: :delete do
+  Env.reset_session
+  Auth.signin AnonymousID
+  abort :success
+end
+
+# triggered by clicking "Reset my Password", this sends out the verification password
+# and aborts (does not sign in)
+event :send_reset_password_token, before: :signin, on: :update, trigger: :required do
+  email = subfield(:email)&.content
+  send_reset_password_email_or_fail email
+end
+
+def ok_to_read
+  true
+end
+
+def recaptcha_on?
+  false
+end
+
+def i18n_signin key
+  I18n.t key, scope: "mod.account.set.self.signin"
+end
+
+def authenticate_or_abort email, pword
+  abort :failure, i18n_signin(:email_missing) unless email
+  abort :failure, i18n_signin(:password_missing) unless pword
+  if (account = Auth.authenticate(email, pword))
+    Auth.signin account.left_id
+  else
+    account = Auth.find_account_by_email email
+    errors.add :signin, signin_error_message(account)
+    abort :failure
+  end
+end
+
+def signin_error_message account
+  case
+  when account.nil?     then i18n_signin(:error_unknown_email)
+  when !account.active? then i18n_signin(:error_not_active)
+  else                       i18n_signin(:error_wrong_password)
+  end
+end
+
+def send_reset_password_email_or_fail email
+  aborting do
+    break errors.add :email, i18n_signin(:error_blank) if email.blank?
+
+    if (account = Auth.find_account_by_email(email))&.active?
+      Auth.as_bot { account.send_password_reset_email }
+    elsif account
+      errors.add :account, i18n_signin(:error_not_active)
+    else
+      errors.add :email, i18n_signin(:error_not_recognized)
+    end
+  end
+end
+
+module HtmlFormat; parent.send :register_set_format, Card::Format::HtmlFormat, self; extend Card::Set::AbstractFormat
+  view :core, cache: :never do
+    voo.edit_structure = [signin_field(:email), signin_field(:password)]
+    with_nest_mode :edit do
+      card_form :update, recaptcha: :off, success: signin_success do
+        [
+          _render_content_formgroups,
+          _render_signin_buttons
+        ]
+      end
+    end
+  end
+
+  view :open do
+    voo.show :help
+    voo.hide :menu
+    super()
+  end
+
+  # FIXME: need a generic solution for this
+  view :title do
+    voo.title ||= I18n.t(:sign_in_title, scope: "mod.account.set.self.signin")
+    super()
+  end
+
+  view :open_content do
+    # annoying step designed to avoid table of contents.  sigh
+    _render_core
+  end
+
+  view :one_line_content do
+    ""
+  end
+
+  view :reset_password_success do
+    # 'Check your email for a link to reset your password'
+    frame { I18n.t(:check_email, scope: "mod.account.set.self.signin") }
+  end
+
+  view :signin_buttons do
+    button_formgroup do
+      [signin_button, signup_link, reset_password_link]
+    end
+  end
+
+  # FORGOT PASSWORD
+  view :edit do
+    reset_password_voo
+    Auth.as_bot { super() }
+  end
+
+  def reset_password_voo
+    voo.title ||= card.i18n_signin(:forgot_password)
+    voo.edit_structure = [signin_field(:email)]
+    voo.hide :help
+  end
+
+  view :edit_buttons do
+    text = I18n.t :reset_my_password, scope: "mod.account.set.self.signin"
+    button_tag text, situation: "primary", class: "_close-modal-on-success"
+  end
+
+  def signin_success
+    "REDIRECT: #{Env.interrupted_action || '*previous'}"
+  end
+
+  def signin_button
+    text = I18n.t :sign_in, scope: "mod.account.set.self.signin"
+    button_tag text, situation: "primary"
+  end
+
+  def signup_link
+    text = I18n.t :or_sign_up, scope: "mod.account.set.self.signin"
+    subformat(Card[:account_links]).render! :sign_up, title: text
+  end
+
+  def reset_password_link
+    text = I18n.t :reset_password, scope: "mod.account.set.self.signin"
+    link = link_to_view :edit, text, path: { slot: { hide: :bridge_link } }
+    # FIXME: inline styling
+    raw("<div style='float:right'>#{link}</div>")
+  end
+
+  def edit_view_hidden
+    hidden_tags card: { trigger: :send_reset_password_token }
+  end
+
+  def edit_success
+    { view: :reset_password_success }
+  end
+
+  def signin_field name
+    nest_name = "".to_name.trait(name)
+    [nest_name, { title: name.to_s, view: "titled",
+                  nest_name: nest_name, skip_perms: true }]
+  end
+end
+end;end;end;end;
+# ~~ generated from /Users/ethan/dev/decko/gem/card/mod/account/set/self/signin.rb ~~