cb-sorcery 0.8.6
Sign up to get free protection for your applications and to get access to all the features.
- data/.document +5 -0
- data/.gitignore +56 -0
- data/.rspec +1 -0
- data/.travis.yml +40 -0
- data/CHANGELOG.md +263 -0
- data/Gemfile +6 -0
- data/LICENSE.txt +20 -0
- data/README.md +360 -0
- data/Rakefile +6 -0
- data/gemfiles/active_record-rails40.gemfile +7 -0
- data/gemfiles/active_record-rails41.gemfile +7 -0
- data/lib/generators/sorcery/USAGE +22 -0
- data/lib/generators/sorcery/helpers.rb +40 -0
- data/lib/generators/sorcery/install_generator.rb +95 -0
- data/lib/generators/sorcery/templates/initializer.rb +451 -0
- data/lib/generators/sorcery/templates/migration/activity_logging.rb +10 -0
- data/lib/generators/sorcery/templates/migration/brute_force_protection.rb +9 -0
- data/lib/generators/sorcery/templates/migration/core.rb +13 -0
- data/lib/generators/sorcery/templates/migration/external.rb +12 -0
- data/lib/generators/sorcery/templates/migration/remember_me.rb +8 -0
- data/lib/generators/sorcery/templates/migration/reset_password.rb +9 -0
- data/lib/generators/sorcery/templates/migration/user_activation.rb +9 -0
- data/lib/sorcery.rb +85 -0
- data/lib/sorcery/adapters/active_record_adapter.rb +120 -0
- data/lib/sorcery/adapters/base_adapter.rb +30 -0
- data/lib/sorcery/controller.rb +157 -0
- data/lib/sorcery/controller/config.rb +65 -0
- data/lib/sorcery/controller/submodules/activity_logging.rb +82 -0
- data/lib/sorcery/controller/submodules/brute_force_protection.rb +38 -0
- data/lib/sorcery/controller/submodules/external.rb +199 -0
- data/lib/sorcery/controller/submodules/http_basic_auth.rb +74 -0
- data/lib/sorcery/controller/submodules/remember_me.rb +81 -0
- data/lib/sorcery/controller/submodules/session_timeout.rb +56 -0
- data/lib/sorcery/crypto_providers/aes256.rb +51 -0
- data/lib/sorcery/crypto_providers/bcrypt.rb +97 -0
- data/lib/sorcery/crypto_providers/common.rb +35 -0
- data/lib/sorcery/crypto_providers/md5.rb +19 -0
- data/lib/sorcery/crypto_providers/sha1.rb +28 -0
- data/lib/sorcery/crypto_providers/sha256.rb +36 -0
- data/lib/sorcery/crypto_providers/sha512.rb +36 -0
- data/lib/sorcery/engine.rb +21 -0
- data/lib/sorcery/model.rb +183 -0
- data/lib/sorcery/model/config.rb +96 -0
- data/lib/sorcery/model/submodules/activity_logging.rb +70 -0
- data/lib/sorcery/model/submodules/brute_force_protection.rb +125 -0
- data/lib/sorcery/model/submodules/external.rb +100 -0
- data/lib/sorcery/model/submodules/remember_me.rb +62 -0
- data/lib/sorcery/model/submodules/reset_password.rb +131 -0
- data/lib/sorcery/model/submodules/user_activation.rb +149 -0
- data/lib/sorcery/model/temporary_token.rb +30 -0
- data/lib/sorcery/protocols/certs/ca-bundle.crt +5182 -0
- data/lib/sorcery/protocols/oauth.rb +42 -0
- data/lib/sorcery/protocols/oauth2.rb +47 -0
- data/lib/sorcery/providers/base.rb +27 -0
- data/lib/sorcery/providers/facebook.rb +63 -0
- data/lib/sorcery/providers/github.rb +51 -0
- data/lib/sorcery/providers/google.rb +51 -0
- data/lib/sorcery/providers/jira.rb +77 -0
- data/lib/sorcery/providers/linkedin.rb +66 -0
- data/lib/sorcery/providers/liveid.rb +53 -0
- data/lib/sorcery/providers/twitter.rb +59 -0
- data/lib/sorcery/providers/vk.rb +63 -0
- data/lib/sorcery/providers/xing.rb +64 -0
- data/lib/sorcery/railties/tasks.rake +6 -0
- data/lib/sorcery/test_helpers/internal.rb +78 -0
- data/lib/sorcery/test_helpers/internal/rails.rb +68 -0
- data/lib/sorcery/test_helpers/rails/controller.rb +21 -0
- data/lib/sorcery/test_helpers/rails/integration.rb +26 -0
- data/lib/sorcery/version.rb +3 -0
- data/sorcery.gemspec +34 -0
- data/spec/active_record/user_activation_spec.rb +18 -0
- data/spec/active_record/user_activity_logging_spec.rb +17 -0
- data/spec/active_record/user_brute_force_protection_spec.rb +16 -0
- data/spec/active_record/user_oauth_spec.rb +16 -0
- data/spec/active_record/user_remember_me_spec.rb +16 -0
- data/spec/active_record/user_reset_password_spec.rb +16 -0
- data/spec/active_record/user_spec.rb +37 -0
- data/spec/controllers/controller_activity_logging_spec.rb +124 -0
- data/spec/controllers/controller_brute_force_protection_spec.rb +43 -0
- data/spec/controllers/controller_http_basic_auth_spec.rb +68 -0
- data/spec/controllers/controller_oauth2_spec.rb +407 -0
- data/spec/controllers/controller_oauth_spec.rb +240 -0
- data/spec/controllers/controller_remember_me_spec.rb +117 -0
- data/spec/controllers/controller_session_timeout_spec.rb +80 -0
- data/spec/controllers/controller_spec.rb +215 -0
- data/spec/orm/active_record.rb +21 -0
- data/spec/rails_app/app/active_record/authentication.rb +3 -0
- data/spec/rails_app/app/active_record/user.rb +5 -0
- data/spec/rails_app/app/active_record/user_provider.rb +3 -0
- data/spec/rails_app/app/controllers/sorcery_controller.rb +265 -0
- data/spec/rails_app/app/helpers/application_helper.rb +2 -0
- data/spec/rails_app/app/mailers/sorcery_mailer.rb +32 -0
- data/spec/rails_app/app/views/application/index.html.erb +17 -0
- data/spec/rails_app/app/views/layouts/application.html.erb +14 -0
- data/spec/rails_app/app/views/sorcery_mailer/activation_email.html.erb +17 -0
- data/spec/rails_app/app/views/sorcery_mailer/activation_email.text.erb +9 -0
- data/spec/rails_app/app/views/sorcery_mailer/activation_needed_email.html.erb +17 -0
- data/spec/rails_app/app/views/sorcery_mailer/activation_success_email.html.erb +17 -0
- data/spec/rails_app/app/views/sorcery_mailer/activation_success_email.text.erb +9 -0
- data/spec/rails_app/app/views/sorcery_mailer/reset_password_email.html.erb +16 -0
- data/spec/rails_app/app/views/sorcery_mailer/reset_password_email.text.erb +8 -0
- data/spec/rails_app/app/views/sorcery_mailer/send_unlock_token_email.text.erb +1 -0
- data/spec/rails_app/config.ru +4 -0
- data/spec/rails_app/config/application.rb +56 -0
- data/spec/rails_app/config/boot.rb +4 -0
- data/spec/rails_app/config/database.yml +22 -0
- data/spec/rails_app/config/environment.rb +5 -0
- data/spec/rails_app/config/environments/test.rb +37 -0
- data/spec/rails_app/config/initializers/backtrace_silencers.rb +7 -0
- data/spec/rails_app/config/initializers/inflections.rb +10 -0
- data/spec/rails_app/config/initializers/mime_types.rb +5 -0
- data/spec/rails_app/config/initializers/secret_token.rb +7 -0
- data/spec/rails_app/config/initializers/session_store.rb +12 -0
- data/spec/rails_app/config/locales/en.yml +5 -0
- data/spec/rails_app/config/routes.rb +48 -0
- data/spec/rails_app/db/migrate/activation/20101224223622_add_activation_to_users.rb +17 -0
- data/spec/rails_app/db/migrate/activity_logging/20101224223624_add_activity_logging_to_users.rb +19 -0
- data/spec/rails_app/db/migrate/brute_force_protection/20101224223626_add_brute_force_protection_to_users.rb +13 -0
- data/spec/rails_app/db/migrate/core/20101224223620_create_users.rb +16 -0
- data/spec/rails_app/db/migrate/external/20101224223628_create_authentications_and_user_providers.rb +22 -0
- data/spec/rails_app/db/migrate/remember_me/20101224223623_add_remember_me_token_to_users.rb +15 -0
- data/spec/rails_app/db/migrate/reset_password/20101224223622_add_reset_password_to_users.rb +13 -0
- data/spec/rails_app/db/schema.rb +23 -0
- data/spec/rails_app/db/seeds.rb +7 -0
- data/spec/shared_examples/user_activation_shared_examples.rb +242 -0
- data/spec/shared_examples/user_activity_logging_shared_examples.rb +97 -0
- data/spec/shared_examples/user_brute_force_protection_shared_examples.rb +156 -0
- data/spec/shared_examples/user_oauth_shared_examples.rb +36 -0
- data/spec/shared_examples/user_remember_me_shared_examples.rb +57 -0
- data/spec/shared_examples/user_reset_password_shared_examples.rb +263 -0
- data/spec/shared_examples/user_shared_examples.rb +467 -0
- data/spec/sorcery_crypto_providers_spec.rb +198 -0
- data/spec/spec.opts +2 -0
- data/spec/spec_helper.rb +41 -0
- metadata +350 -0
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html>
|
|
3
|
+
<head>
|
|
4
|
+
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
|
|
5
|
+
</head>
|
|
6
|
+
<body>
|
|
7
|
+
<h1>Hello, <%= @user.username %></h1>
|
|
8
|
+
<p>
|
|
9
|
+
You have requested to reset your password.
|
|
10
|
+
</p>
|
|
11
|
+
<p>
|
|
12
|
+
To choose a new password, just follow this link: <%= @url %>.
|
|
13
|
+
</p>
|
|
14
|
+
<p>Have a great day!</p>
|
|
15
|
+
</body>
|
|
16
|
+
</html>
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
Please visit <%= @url %> for unlock your account.
|
|
@@ -0,0 +1,56 @@
|
|
|
1
|
+
require File.expand_path('../boot', __FILE__)
|
|
2
|
+
|
|
3
|
+
require "action_controller/railtie"
|
|
4
|
+
require "action_mailer/railtie"
|
|
5
|
+
require "rails/test_unit/railtie"
|
|
6
|
+
|
|
7
|
+
Bundler.require :default, SORCERY_ORM
|
|
8
|
+
|
|
9
|
+
begin
|
|
10
|
+
require "#{SORCERY_ORM}/railtie"
|
|
11
|
+
rescue LoadError
|
|
12
|
+
end
|
|
13
|
+
|
|
14
|
+
require "sorcery"
|
|
15
|
+
|
|
16
|
+
module AppRoot
|
|
17
|
+
class Application < Rails::Application
|
|
18
|
+
config.autoload_paths.reject!{ |p| p =~ /\/app\/(\w+)$/ && !%w(controllers helpers mailers views).include?($1) }
|
|
19
|
+
config.autoload_paths += [ "#{config.root}/app/#{SORCERY_ORM}" ]
|
|
20
|
+
|
|
21
|
+
# Settings in config/environments/* take precedence over those specified here.
|
|
22
|
+
# Application configuration should go into files in config/initializers
|
|
23
|
+
# -- all .rb files in that directory are automatically loaded.
|
|
24
|
+
|
|
25
|
+
# Custom directories with classes and modules you want to be autoloadable.
|
|
26
|
+
# config.autoload_paths += %W(#{config.root}/extras)
|
|
27
|
+
|
|
28
|
+
# Only load the plugins named here, in the order given (default is alphabetical).
|
|
29
|
+
# :all can be used as a placeholder for all plugins not explicitly named.
|
|
30
|
+
# config.plugins = [ :exception_notification, :ssl_requirement, :all ]
|
|
31
|
+
|
|
32
|
+
# Activate observers that should always be running.
|
|
33
|
+
# config.active_record.observers = :cacher, :garbage_collector, :forum_observer
|
|
34
|
+
|
|
35
|
+
# Set Time.zone default to the specified zone and make Active Record auto-convert to this zone.
|
|
36
|
+
# Run "rake -D time" for a list of tasks for finding time zone names. Default is UTC.
|
|
37
|
+
# config.time_zone = 'Central Time (US & Canada)'
|
|
38
|
+
|
|
39
|
+
# The default locale is :en and all translations from config/locales/*.rb,yml are auto loaded.
|
|
40
|
+
# config.i18n.load_path += Dir[Rails.root.join('my', 'locales', '*.{rb,yml}').to_s]
|
|
41
|
+
# config.i18n.default_locale = :de
|
|
42
|
+
|
|
43
|
+
# JavaScript files you want as :defaults (application.js is always included).
|
|
44
|
+
# config.action_view.javascript_expansions[:defaults] = %w(jquery rails)
|
|
45
|
+
|
|
46
|
+
# Configure the default encoding used in templates for Ruby 1.9.
|
|
47
|
+
config.encoding = "utf-8"
|
|
48
|
+
|
|
49
|
+
# Configure sensitive parameters which will be filtered from the log file.
|
|
50
|
+
config.filter_parameters += [:password]
|
|
51
|
+
|
|
52
|
+
config.action_mailer.delivery_method = :test
|
|
53
|
+
|
|
54
|
+
config.active_support.deprecation = :stderr
|
|
55
|
+
end
|
|
56
|
+
end
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
# SQLite version 3.x
|
|
2
|
+
# gem install sqlite3-ruby (not necessary on OS X Leopard)
|
|
3
|
+
development:
|
|
4
|
+
adapter: sqlite3
|
|
5
|
+
database: db/development.sqlite3
|
|
6
|
+
pool: 5
|
|
7
|
+
timeout: 5000
|
|
8
|
+
|
|
9
|
+
# Warning: The database defined as "test" will be erased and
|
|
10
|
+
# re-generated from your development database when you run "rake".
|
|
11
|
+
# Do not set this db to the same as development or production.
|
|
12
|
+
test:
|
|
13
|
+
adapter: sqlite3
|
|
14
|
+
database: db/test.sqlite3
|
|
15
|
+
pool: 5
|
|
16
|
+
timeout: 5000
|
|
17
|
+
# adapter: sqlite3
|
|
18
|
+
# database: ":memory:"
|
|
19
|
+
|
|
20
|
+
production:
|
|
21
|
+
adapter: sqlite3
|
|
22
|
+
database: ":memory:"
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
AppRoot::Application.configure do
|
|
2
|
+
# Settings specified here will take precedence over those in config/application.rb
|
|
3
|
+
|
|
4
|
+
# The test environment is used exclusively to run your application's
|
|
5
|
+
# test suite. You never need to work with it otherwise. Remember that
|
|
6
|
+
# your test database is "scratch space" for the test suite and is wiped
|
|
7
|
+
# and recreated between test runs. Don't rely on the data there!
|
|
8
|
+
config.cache_classes = true
|
|
9
|
+
|
|
10
|
+
# Log error messages when you accidentally call methods on nil.
|
|
11
|
+
config.whiny_nils = true
|
|
12
|
+
|
|
13
|
+
# Show full error reports and disable caching
|
|
14
|
+
config.consider_all_requests_local = true
|
|
15
|
+
config.action_controller.perform_caching = false
|
|
16
|
+
|
|
17
|
+
# Raise exceptions instead of rendering exception templates
|
|
18
|
+
config.action_dispatch.show_exceptions = false
|
|
19
|
+
|
|
20
|
+
# Disable request forgery protection in test environment
|
|
21
|
+
config.action_controller.allow_forgery_protection = false
|
|
22
|
+
|
|
23
|
+
# Tell Action Mailer not to deliver emails to the real world.
|
|
24
|
+
# The :test delivery method accumulates sent emails in the
|
|
25
|
+
# ActionMailer::Base.deliveries array.
|
|
26
|
+
config.action_mailer.delivery_method = :test
|
|
27
|
+
|
|
28
|
+
# Use SQL instead of Active Record's schema dumper when creating the test database.
|
|
29
|
+
# This is necessary if your schema can't be completely dumped by the schema dumper,
|
|
30
|
+
# like if you have constraints or database-specific column types
|
|
31
|
+
# config.active_record.schema_format = :sql
|
|
32
|
+
|
|
33
|
+
# Print deprecation notices to the stderr
|
|
34
|
+
config.active_support.deprecation = :stderr
|
|
35
|
+
|
|
36
|
+
config.eager_load = false
|
|
37
|
+
end
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Be sure to restart your server when you modify this file.
|
|
2
|
+
|
|
3
|
+
# You can add backtrace silencers for libraries that you're using but don't wish to see in your backtraces.
|
|
4
|
+
# Rails.backtrace_cleaner.add_silencer { |line| line =~ /my_noisy_library/ }
|
|
5
|
+
|
|
6
|
+
# You can also remove all the silencers if you're trying to debug a problem that might stem from framework code.
|
|
7
|
+
# Rails.backtrace_cleaner.remove_silencers!
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
# Be sure to restart your server when you modify this file.
|
|
2
|
+
|
|
3
|
+
# Add new inflection rules using the following format
|
|
4
|
+
# (all these examples are active by default):
|
|
5
|
+
# ActiveSupport::Inflector.inflections do |inflect|
|
|
6
|
+
# inflect.plural /^(ox)$/i, '\1en'
|
|
7
|
+
# inflect.singular /^(ox)en/i, '\1'
|
|
8
|
+
# inflect.irregular 'person', 'people'
|
|
9
|
+
# inflect.uncountable %w( fish sheep )
|
|
10
|
+
# end
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Be sure to restart your server when you modify this file.
|
|
2
|
+
|
|
3
|
+
# Your secret key for verifying the integrity of signed cookies.
|
|
4
|
+
# If you change this key, all old signed cookies will become invalid!
|
|
5
|
+
# Make sure the secret is at least 30 characters and all random,
|
|
6
|
+
# no regular words or you'll be exposed to dictionary attacks.
|
|
7
|
+
AppRoot::Application.config.secret_token = 'a9789f869a0d0ac2f2b683d6e9410c530696b178bca28a7971f4a652b14ff2da89f2cf4dcbf0355f6bc41f81731aa8e46085674d1acc1980436f61cdba76ff5d'
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
# Be sure to restart your server when you modify this file.
|
|
2
|
+
|
|
3
|
+
AppRoot::Application.config.session_store :cookie_store, :key => '_app_root_session'
|
|
4
|
+
|
|
5
|
+
# Use the database for sessions instead of the cookie-based default,
|
|
6
|
+
# which shouldn't be used to store highly confidential information
|
|
7
|
+
# (create the session table with "rails generate session_migration")
|
|
8
|
+
# AppRoot::Application.config.session_store :active_record_store
|
|
9
|
+
|
|
10
|
+
if AppRoot::Application.config.respond_to?(:secret_key_base=)
|
|
11
|
+
AppRoot::Application.config.secret_key_base = "foobar"
|
|
12
|
+
end
|
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
AppRoot::Application.routes.draw do
|
|
2
|
+
root :to => "application#index"
|
|
3
|
+
|
|
4
|
+
controller :sorcery do
|
|
5
|
+
get :test_login
|
|
6
|
+
get :test_logout
|
|
7
|
+
get :some_action
|
|
8
|
+
post :test_return_to
|
|
9
|
+
get :test_auto_login
|
|
10
|
+
post :test_login_with_remember_in_login
|
|
11
|
+
get :test_login_from_cookie
|
|
12
|
+
get :test_login_from
|
|
13
|
+
get :test_logout_with_remember
|
|
14
|
+
get :test_should_be_logged_in
|
|
15
|
+
get :test_create_from_provider
|
|
16
|
+
get :test_add_second_provider
|
|
17
|
+
get :test_return_to_with_external
|
|
18
|
+
get :test_login_from
|
|
19
|
+
get :test_login_from_twitter
|
|
20
|
+
get :test_login_from_facebook
|
|
21
|
+
get :test_login_from_github
|
|
22
|
+
get :test_login_from_google
|
|
23
|
+
get :test_login_from_liveid
|
|
24
|
+
get :test_login_from_vk
|
|
25
|
+
get :test_login_from_jira
|
|
26
|
+
get :login_at_test
|
|
27
|
+
get :login_at_test_twitter
|
|
28
|
+
get :login_at_test_facebook
|
|
29
|
+
get :login_at_test_github
|
|
30
|
+
get :login_at_test_google
|
|
31
|
+
get :login_at_test_liveid
|
|
32
|
+
get :login_at_test_vk
|
|
33
|
+
get :login_at_test_jira
|
|
34
|
+
get :test_return_to_with_external
|
|
35
|
+
get :test_return_to_with_external_twitter
|
|
36
|
+
get :test_return_to_with_external_facebook
|
|
37
|
+
get :test_return_to_with_external_github
|
|
38
|
+
get :test_return_to_with_external_google
|
|
39
|
+
get :test_return_to_with_external_liveid
|
|
40
|
+
get :test_return_to_with_external_vk
|
|
41
|
+
get :test_return_to_with_external_jira
|
|
42
|
+
get :test_http_basic_auth
|
|
43
|
+
get :some_action_making_a_non_persisted_change_to_the_user
|
|
44
|
+
post :test_login_with_remember
|
|
45
|
+
get :test_create_from_provider_with_block
|
|
46
|
+
get :login_at_test_with_state
|
|
47
|
+
end
|
|
48
|
+
end
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
class AddActivationToUsers < ActiveRecord::Migration
|
|
2
|
+
def self.up
|
|
3
|
+
add_column :users, :activation_state, :string, :default => nil
|
|
4
|
+
add_column :users, :activation_token, :string, :default => nil
|
|
5
|
+
add_column :users, :activation_token_expires_at, :datetime, :default => nil
|
|
6
|
+
|
|
7
|
+
add_index :users, :activation_token
|
|
8
|
+
end
|
|
9
|
+
|
|
10
|
+
def self.down
|
|
11
|
+
remove_index :users, :activation_token
|
|
12
|
+
|
|
13
|
+
remove_column :users, :activation_token_expires_at
|
|
14
|
+
remove_column :users, :activation_token
|
|
15
|
+
remove_column :users, :activation_state
|
|
16
|
+
end
|
|
17
|
+
end
|
data/spec/rails_app/db/migrate/activity_logging/20101224223624_add_activity_logging_to_users.rb
ADDED
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
class AddActivityLoggingToUsers < ActiveRecord::Migration
|
|
2
|
+
def self.up
|
|
3
|
+
add_column :users, :last_login_at, :datetime, :default => nil
|
|
4
|
+
add_column :users, :last_logout_at, :datetime, :default => nil
|
|
5
|
+
add_column :users, :last_activity_at, :datetime, :default => nil
|
|
6
|
+
add_column :users, :last_login_from_ip_address, :string, :default => nil
|
|
7
|
+
|
|
8
|
+
add_index :users, [:last_logout_at, :last_activity_at]
|
|
9
|
+
end
|
|
10
|
+
|
|
11
|
+
def self.down
|
|
12
|
+
remove_index :users, [:last_logout_at, :last_activity_at]
|
|
13
|
+
|
|
14
|
+
remove_column :users, :last_activity_at
|
|
15
|
+
remove_column :users, :last_logout_at
|
|
16
|
+
remove_column :users, :last_login_at
|
|
17
|
+
remove_column :users, :last_login_from_ip_address
|
|
18
|
+
end
|
|
19
|
+
end
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
class AddBruteForceProtectionToUsers < ActiveRecord::Migration
|
|
2
|
+
def self.up
|
|
3
|
+
add_column :users, :failed_logins_count, :integer, :default => 0
|
|
4
|
+
add_column :users, :lock_expires_at, :datetime, :default => nil
|
|
5
|
+
add_column :users, :unlock_token, :string, :default => nil
|
|
6
|
+
end
|
|
7
|
+
|
|
8
|
+
def self.down
|
|
9
|
+
remove_column :users, :unlock_token
|
|
10
|
+
remove_column :users, :lock_expires_at
|
|
11
|
+
remove_column :users, :failed_logins_count
|
|
12
|
+
end
|
|
13
|
+
end
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
class CreateUsers < ActiveRecord::Migration
|
|
2
|
+
def self.up
|
|
3
|
+
create_table :users do |t|
|
|
4
|
+
t.string :username, :null => false
|
|
5
|
+
t.string :email, :default => nil
|
|
6
|
+
t.string :crypted_password, :default => nil
|
|
7
|
+
t.string :salt, :default => nil
|
|
8
|
+
|
|
9
|
+
t.timestamps
|
|
10
|
+
end
|
|
11
|
+
end
|
|
12
|
+
|
|
13
|
+
def self.down
|
|
14
|
+
drop_table :users
|
|
15
|
+
end
|
|
16
|
+
end
|
data/spec/rails_app/db/migrate/external/20101224223628_create_authentications_and_user_providers.rb
ADDED
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
class CreateAuthenticationsAndUserProviders < ActiveRecord::Migration
|
|
2
|
+
def self.up
|
|
3
|
+
create_table :authentications do |t|
|
|
4
|
+
t.integer :user_id, null: false
|
|
5
|
+
t.string :provider, :uid, null: false
|
|
6
|
+
|
|
7
|
+
t.timestamps
|
|
8
|
+
end
|
|
9
|
+
|
|
10
|
+
create_table :user_providers do |t|
|
|
11
|
+
t.integer :user_id, null: false
|
|
12
|
+
t.string :provider, :uid, null: false
|
|
13
|
+
|
|
14
|
+
t.timestamps
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
|
|
18
|
+
def self.down
|
|
19
|
+
drop_table :authentications
|
|
20
|
+
drop_table :user_providers
|
|
21
|
+
end
|
|
22
|
+
end
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
class AddRememberMeTokenToUsers < ActiveRecord::Migration
|
|
2
|
+
def self.up
|
|
3
|
+
add_column :users, :remember_me_token, :string, :default => nil
|
|
4
|
+
add_column :users, :remember_me_token_expires_at, :datetime, :default => nil
|
|
5
|
+
|
|
6
|
+
add_index :users, :remember_me_token
|
|
7
|
+
end
|
|
8
|
+
|
|
9
|
+
def self.down
|
|
10
|
+
remove_index :users, :remember_me_token
|
|
11
|
+
|
|
12
|
+
remove_column :users, :remember_me_token_expires_at
|
|
13
|
+
remove_column :users, :remember_me_token
|
|
14
|
+
end
|
|
15
|
+
end
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
class AddResetPasswordToUsers < ActiveRecord::Migration
|
|
2
|
+
def self.up
|
|
3
|
+
add_column :users, :reset_password_token, :string, :default => nil
|
|
4
|
+
add_column :users, :reset_password_token_expires_at, :datetime, :default => nil
|
|
5
|
+
add_column :users, :reset_password_email_sent_at, :datetime, :default => nil
|
|
6
|
+
end
|
|
7
|
+
|
|
8
|
+
def self.down
|
|
9
|
+
remove_column :users, :reset_password_email_sent_at
|
|
10
|
+
remove_column :users, :reset_password_token_expires_at
|
|
11
|
+
remove_column :users, :reset_password_token
|
|
12
|
+
end
|
|
13
|
+
end
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
# This file is auto-generated from the current state of the database. Instead
|
|
2
|
+
# of editing this file, please use the migrations feature of Active Record to
|
|
3
|
+
# incrementally modify your database, and then regenerate this schema definition.
|
|
4
|
+
#
|
|
5
|
+
# Note that this schema.rb definition is the authoritative source for your
|
|
6
|
+
# database schema. If you need to create the application database on another
|
|
7
|
+
# system, you should be using db:schema:load, not running all the migrations
|
|
8
|
+
# from scratch. The latter is a flawed and unsustainable approach (the more migrations
|
|
9
|
+
# you'll amass, the slower it'll run and the greater likelihood for issues).
|
|
10
|
+
#
|
|
11
|
+
# It's strongly recommended to check this file into your version control system.
|
|
12
|
+
|
|
13
|
+
ActiveRecord::Schema.define(:version => 20101224223620) do
|
|
14
|
+
|
|
15
|
+
create_table "users", :force => true do |t|
|
|
16
|
+
t.string "username"
|
|
17
|
+
t.string "email"
|
|
18
|
+
t.string "crypted_password"
|
|
19
|
+
t.datetime "created_at"
|
|
20
|
+
t.datetime "updated_at"
|
|
21
|
+
end
|
|
22
|
+
|
|
23
|
+
end
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# This file should contain all the record creation needed to seed the database with its default values.
|
|
2
|
+
# The data can then be loaded with the rake db:seed (or created alongside the db with db:setup).
|
|
3
|
+
#
|
|
4
|
+
# Examples:
|
|
5
|
+
#
|
|
6
|
+
# cities = City.create([{ :name => 'Chicago' }, { :name => 'Copenhagen' }])
|
|
7
|
+
# Mayor.create(:name => 'Daley', :city => cities.first)
|
|
@@ -0,0 +1,242 @@
|
|
|
1
|
+
shared_examples_for "rails_3_activation_model" do
|
|
2
|
+
let(:user) { create_new_user }
|
|
3
|
+
let(:new_user) { build_new_user }
|
|
4
|
+
|
|
5
|
+
context "loaded plugin configuration" do
|
|
6
|
+
before(:all) do
|
|
7
|
+
sorcery_reload!([:user_activation], :user_activation_mailer => ::SorceryMailer)
|
|
8
|
+
end
|
|
9
|
+
|
|
10
|
+
after(:each) do
|
|
11
|
+
User.sorcery_config.reset!
|
|
12
|
+
sorcery_reload!([:user_activation], :user_activation_mailer => ::SorceryMailer)
|
|
13
|
+
end
|
|
14
|
+
|
|
15
|
+
it "enables configuration option 'activation_state_attribute_name'" do
|
|
16
|
+
sorcery_model_property_set(:activation_state_attribute_name, :status)
|
|
17
|
+
|
|
18
|
+
expect(User.sorcery_config.activation_state_attribute_name).to eq :status
|
|
19
|
+
end
|
|
20
|
+
|
|
21
|
+
it "enables configuration option 'activation_token_attribute_name'" do
|
|
22
|
+
sorcery_model_property_set(:activation_token_attribute_name, :code)
|
|
23
|
+
|
|
24
|
+
expect(User.sorcery_config.activation_token_attribute_name).to eql :code
|
|
25
|
+
end
|
|
26
|
+
|
|
27
|
+
it "enables configuration option 'user_activation_mailer'" do
|
|
28
|
+
sorcery_model_property_set(:user_activation_mailer, TestMailer)
|
|
29
|
+
|
|
30
|
+
expect(User.sorcery_config.user_activation_mailer).to equal(TestMailer)
|
|
31
|
+
end
|
|
32
|
+
|
|
33
|
+
it "enables configuration option 'activation_needed_email_method_name'" do
|
|
34
|
+
sorcery_model_property_set(:activation_needed_email_method_name, :my_activation_email)
|
|
35
|
+
|
|
36
|
+
expect(User.sorcery_config.activation_needed_email_method_name).to eq :my_activation_email
|
|
37
|
+
end
|
|
38
|
+
|
|
39
|
+
it "enables configuration option 'activation_success_email_method_name'" do
|
|
40
|
+
sorcery_model_property_set(:activation_success_email_method_name, :my_activation_email)
|
|
41
|
+
|
|
42
|
+
expect(User.sorcery_config.activation_success_email_method_name).to eq :my_activation_email
|
|
43
|
+
end
|
|
44
|
+
|
|
45
|
+
it "enables configuration option 'activation_mailer_disabled'" do
|
|
46
|
+
sorcery_model_property_set(:activation_mailer_disabled, :my_activation_mailer_disabled)
|
|
47
|
+
|
|
48
|
+
expect(User.sorcery_config.activation_mailer_disabled).to eq :my_activation_mailer_disabled
|
|
49
|
+
end
|
|
50
|
+
|
|
51
|
+
it "if mailer is nil and mailer is enabled, throw exception!" do
|
|
52
|
+
expect{sorcery_reload!([:user_activation], :activation_mailer_disabled => false)}.to raise_error(ArgumentError)
|
|
53
|
+
end
|
|
54
|
+
|
|
55
|
+
it "if mailer is disabled and mailer is nil, do NOT throw exception" do
|
|
56
|
+
expect{sorcery_reload!([:user_activation], :activation_mailer_disabled => true)}.to_not raise_error
|
|
57
|
+
end
|
|
58
|
+
end
|
|
59
|
+
|
|
60
|
+
|
|
61
|
+
context "activation process" do
|
|
62
|
+
before(:all) do
|
|
63
|
+
sorcery_reload!([:user_activation], :user_activation_mailer => ::SorceryMailer)
|
|
64
|
+
end
|
|
65
|
+
|
|
66
|
+
it "initializes user state to 'pending'" do
|
|
67
|
+
expect(user.activation_state).to eq "pending"
|
|
68
|
+
end
|
|
69
|
+
|
|
70
|
+
specify { expect(user).to respond_to :activate! }
|
|
71
|
+
|
|
72
|
+
it "clears activation code and change state to 'active' on activation" do
|
|
73
|
+
activation_token = user.activation_token
|
|
74
|
+
user.activate!
|
|
75
|
+
user2 = User.sorcery_adapter.find(user.id) # go to db to make sure it was saved and not just in memory
|
|
76
|
+
|
|
77
|
+
expect(user2.activation_token).to be_nil
|
|
78
|
+
expect(user2.activation_state).to eq "active"
|
|
79
|
+
expect(User.sorcery_adapter.find_by_activation_token activation_token).to be_nil
|
|
80
|
+
end
|
|
81
|
+
|
|
82
|
+
|
|
83
|
+
context "mailer is enabled" do
|
|
84
|
+
it "sends the user an activation email" do
|
|
85
|
+
old_size = ActionMailer::Base.deliveries.size
|
|
86
|
+
create_new_user
|
|
87
|
+
|
|
88
|
+
expect(ActionMailer::Base.deliveries.size).to eq old_size + 1
|
|
89
|
+
end
|
|
90
|
+
|
|
91
|
+
it "calls send_activation_needed_email! method of user" do
|
|
92
|
+
expect(new_user).to receive(:send_activation_needed_email!).once
|
|
93
|
+
|
|
94
|
+
new_user.sorcery_adapter.save(:raise_on_failure => true)
|
|
95
|
+
end
|
|
96
|
+
|
|
97
|
+
it "subsequent saves do not send activation email" do
|
|
98
|
+
user
|
|
99
|
+
old_size = ActionMailer::Base.deliveries.size
|
|
100
|
+
user.email = "Shauli"
|
|
101
|
+
user.sorcery_adapter.save(:raise_on_failure => true)
|
|
102
|
+
|
|
103
|
+
expect(ActionMailer::Base.deliveries.size).to eq old_size
|
|
104
|
+
end
|
|
105
|
+
|
|
106
|
+
it "sends the user an activation success email on successful activation" do
|
|
107
|
+
user
|
|
108
|
+
old_size = ActionMailer::Base.deliveries.size
|
|
109
|
+
user.activate!
|
|
110
|
+
|
|
111
|
+
expect(ActionMailer::Base.deliveries.size).to eq old_size + 1
|
|
112
|
+
end
|
|
113
|
+
|
|
114
|
+
it "calls send_activation_success_email! method of user on activation" do
|
|
115
|
+
expect(user).to receive(:send_activation_success_email!).once
|
|
116
|
+
|
|
117
|
+
user.activate!
|
|
118
|
+
end
|
|
119
|
+
|
|
120
|
+
it "subsequent saves do not send activation success email" do
|
|
121
|
+
user.activate!
|
|
122
|
+
old_size = ActionMailer::Base.deliveries.size
|
|
123
|
+
user.email = "Shauli"
|
|
124
|
+
user.sorcery_adapter.save(:raise_on_failure => true)
|
|
125
|
+
|
|
126
|
+
expect(ActionMailer::Base.deliveries.size).to eq old_size
|
|
127
|
+
end
|
|
128
|
+
|
|
129
|
+
it "activation needed email is optional" do
|
|
130
|
+
sorcery_model_property_set(:activation_needed_email_method_name, nil)
|
|
131
|
+
old_size = ActionMailer::Base.deliveries.size
|
|
132
|
+
|
|
133
|
+
expect(ActionMailer::Base.deliveries.size).to eq old_size
|
|
134
|
+
end
|
|
135
|
+
|
|
136
|
+
it "activation success email is optional" do
|
|
137
|
+
sorcery_model_property_set(:activation_success_email_method_name, nil)
|
|
138
|
+
old_size = ActionMailer::Base.deliveries.size
|
|
139
|
+
user.activate!
|
|
140
|
+
|
|
141
|
+
expect(ActionMailer::Base.deliveries.size).to eq old_size
|
|
142
|
+
end
|
|
143
|
+
end
|
|
144
|
+
|
|
145
|
+
context "mailer has been disabled" do
|
|
146
|
+
before(:each) do
|
|
147
|
+
sorcery_reload!([:user_activation], :activation_mailer_disabled => true, :user_activation_mailer => ::SorceryMailer)
|
|
148
|
+
end
|
|
149
|
+
|
|
150
|
+
it "does not send the user an activation email" do
|
|
151
|
+
old_size = ActionMailer::Base.deliveries.size
|
|
152
|
+
|
|
153
|
+
expect(ActionMailer::Base.deliveries.size).to eq old_size
|
|
154
|
+
end
|
|
155
|
+
|
|
156
|
+
it "does not call send_activation_needed_email! method of user" do
|
|
157
|
+
user = build_new_user
|
|
158
|
+
|
|
159
|
+
expect(user).to receive(:send_activation_needed_email!).never
|
|
160
|
+
|
|
161
|
+
user.sorcery_adapter.save(:raise_on_failure => true)
|
|
162
|
+
end
|
|
163
|
+
|
|
164
|
+
it "does not send the user an activation success email on successful activation" do
|
|
165
|
+
old_size = ActionMailer::Base.deliveries.size
|
|
166
|
+
user.activate!
|
|
167
|
+
|
|
168
|
+
expect(ActionMailer::Base.deliveries.size).to eq old_size
|
|
169
|
+
end
|
|
170
|
+
|
|
171
|
+
it "calls send_activation_success_email! method of user on activation" do
|
|
172
|
+
expect(user).to receive(:send_activation_success_email!).never
|
|
173
|
+
|
|
174
|
+
user.activate!
|
|
175
|
+
end
|
|
176
|
+
end
|
|
177
|
+
end
|
|
178
|
+
|
|
179
|
+
describe "prevent non-active login feature" do
|
|
180
|
+
before(:all) do
|
|
181
|
+
sorcery_reload!([:user_activation], :user_activation_mailer => ::SorceryMailer)
|
|
182
|
+
end
|
|
183
|
+
|
|
184
|
+
before(:each) do
|
|
185
|
+
User.sorcery_adapter.delete_all
|
|
186
|
+
end
|
|
187
|
+
|
|
188
|
+
it "does not allow a non-active user to authenticate" do
|
|
189
|
+
expect(User.authenticate user.email, 'secret').to be_falsy
|
|
190
|
+
end
|
|
191
|
+
|
|
192
|
+
it "allows a non-active user to authenticate if configured so" do
|
|
193
|
+
sorcery_model_property_set(:prevent_non_active_users_to_login, false)
|
|
194
|
+
|
|
195
|
+
expect(User.authenticate user.email, 'secret').to be_truthy
|
|
196
|
+
end
|
|
197
|
+
end
|
|
198
|
+
|
|
199
|
+
describe "load_from_activation_token" do
|
|
200
|
+
before(:all) do
|
|
201
|
+
sorcery_reload!([:user_activation], :user_activation_mailer => ::SorceryMailer)
|
|
202
|
+
end
|
|
203
|
+
|
|
204
|
+
after(:each) do
|
|
205
|
+
Timecop.return
|
|
206
|
+
end
|
|
207
|
+
|
|
208
|
+
it "load_from_activation_token returns user when token is found" do
|
|
209
|
+
expect(User.load_from_activation_token user.activation_token).to eq user
|
|
210
|
+
end
|
|
211
|
+
|
|
212
|
+
it "load_from_activation_token does NOT return user when token is NOT found" do
|
|
213
|
+
expect(User.load_from_activation_token "a").to be_nil
|
|
214
|
+
end
|
|
215
|
+
|
|
216
|
+
it "load_from_activation_token returas user when token is found and not expired" do
|
|
217
|
+
sorcery_model_property_set(:activation_token_expiration_period, 500)
|
|
218
|
+
|
|
219
|
+
expect(User.load_from_activation_token user.activation_token).to eq user
|
|
220
|
+
end
|
|
221
|
+
|
|
222
|
+
it "load_from_activation_token does NOT return user when token is found and expired" do
|
|
223
|
+
sorcery_model_property_set(:activation_token_expiration_period, 0.1)
|
|
224
|
+
user
|
|
225
|
+
|
|
226
|
+
Timecop.travel(Time.now.in_time_zone+0.5)
|
|
227
|
+
|
|
228
|
+
expect(User.load_from_activation_token user.activation_token).to be_nil
|
|
229
|
+
end
|
|
230
|
+
|
|
231
|
+
it "load_from_activation_token returns nil if token is blank" do
|
|
232
|
+
expect(User.load_from_activation_token nil).to be_nil
|
|
233
|
+
expect(User.load_from_activation_token "").to be_nil
|
|
234
|
+
end
|
|
235
|
+
|
|
236
|
+
it "load_from_activation_token is always valid if expiration period is nil" do
|
|
237
|
+
sorcery_model_property_set(:activation_token_expiration_period, nil)
|
|
238
|
+
|
|
239
|
+
expect(User.load_from_activation_token user.activation_token).to eq user
|
|
240
|
+
end
|
|
241
|
+
end
|
|
242
|
+
end
|