chr 0.5.1 → 0.5.3

data/test/rails_app/config/environments/staging.rb

@@ -0,0 +1,9 @@
+require_relative "production"
+
+Mail.register_interceptor(
+  RecipientInterceptor.new(ENV.fetch("EMAIL_RECIPIENTS"))
+)
+
+  Rails.application.configure do
+  # ...
+  end

data/test/rails_app/config/environments/test.rb

@@ -39,8 +39,6 @@ Rails.application.configure do
 
   # Raises error for missing translations
   # config.action_view.raise_on_missing_translations = true
-    Rails.application.configure do
-    config.active_support.test_order = :sorted
-  end
 
+  config.action_mailer.default_url_options = { host:  "www.example.com"  }
 end

data/test/rails_app/config/initializers/assets.rb

@@ -1,12 +1,11 @@
 # Be sure to restart your server when you modify this file.
 
 # Version of your assets, change this if you want to expire all your assets.
-Rails.application.config.assets.version = '1.0'
+Rails.application.config.assets.version = (ENV["ASSETS_VERSION"] || "1.0")
 
 # Add additional assets to the asset load path
 # Rails.application.config.assets.paths << Emoji.images_path
 
 # Precompile additional assets.
 # application.js, application.css, and all non-JS/CSS in app/assets folder are already added.
-# Rails.application.config.assets.precompile += %w( search.js )
-Rails.application.config.assets.precompile += %w( admin.js admin.css )
+Rails.application.config.assets.precompile += %w( admin.js admin.css )

data/test/rails_app/config/initializers/carrierwave.rb

@@ -1,5 +1,24 @@
 CarrierWave.configure do |config|
-  config.storage = :file
-  config.enable_processing = false
-  config.cache_dir = "#{Rails.root}/public/uploads/tmp/test"
-end
+  config.cache_dir = "#{Rails.root}/public/uploads/tmp"
+
+  # DEVELOPMENT
+  if Rails.env.development?
+    config.storage = :file
+  end
+
+  # TEST
+  if Rails.env.test?
+    config.cache_dir = "#{Rails.root}/public/uploads/tmp/test"
+    config.enable_processing = false
+
+  # PRODUCTION & STAGING
+  elsif Rails.env.production? || Rails.env.staging?
+    config.storage = :fog
+    config.fog_directory = ENV.fetch('FOG_DIRECTORY')
+    config.fog_credentials = {
+      provider: 'AWS',
+      aws_access_key_id: ENV.fetch('AWS_ACCESS_KEY_ID'),
+      aws_secret_access_key: ENV.fetch('AWS_SECRET_ACCESS_KEY'),
+    }
+  end
+end

data/test/rails_app/config/initializers/devise.rb

@@ -0,0 +1,265 @@
+# # Use this hook to configure devise mailer, warden hooks and so forth.
+# # Many of these configuration options can be set straight in your model.
+# Devise.setup do |config|
+#   # The secret key used by Devise. Devise uses this key to generate
+#   # random tokens. Changing this key will render invalid all existing
+#   # confirmation, reset password and unlock tokens in the database.
+#   # Devise will use the `secret_key_base` on Rails 4+ applications as its `secret_key`
+#   # by default. You can change it below and use your own secret key.
+#   # config.secret_key = '0841cd61e6b15671acfb40ee24cc0707179adf65309797360fdbb64cf79e6b92d8d78a9e7a876749ec64ad8b062f7b776a7d2525e276ed5606893b2b868e4b71'
+
+#   # ==> Mailer Configuration
+#   # Configure the e-mail address which will be shown in Devise::Mailer,
+#   # note that it will be overwritten if you use your own mailer class
+#   # with default "from" parameter.
+#   config.mailer_sender = 'please-change-me-at-config-initializers-devise@example.com'
+
+#   # Configure the class responsible to send e-mails.
+#   # config.mailer = 'Devise::Mailer'
+
+#   # ==> ORM configuration
+#   # Load and configure the ORM. Supports :active_record (default) and
+#   # :mongoid (bson_ext recommended) by default. Other ORMs may be
+#   # available as additional gems.
+#   require 'devise/orm/mongoid'
+
+#   # ==> Configuration for any authentication mechanism
+#   # Configure which keys are used when authenticating a user. The default is
+#   # just :email. You can configure it to use [:username, :subdomain], so for
+#   # authenticating a user, both parameters are required. Remember that those
+#   # parameters are used only when authenticating and not when retrieving from
+#   # session. If you need permissions, you should implement that in a before filter.
+#   # You can also supply a hash where the value is a boolean determining whether
+#   # or not authentication should be aborted when the value is not present.
+#   # config.authentication_keys = [:email]
+
+#   # Configure parameters from the request object used for authentication. Each entry
+#   # given should be a request method and it will automatically be passed to the
+#   # find_for_authentication method and considered in your model lookup. For instance,
+#   # if you set :request_keys to [:subdomain], :subdomain will be used on authentication.
+#   # The same considerations mentioned for authentication_keys also apply to request_keys.
+#   # config.request_keys = []
+
+#   # Configure which authentication keys should be case-insensitive.
+#   # These keys will be downcased upon creating or modifying a user and when used
+#   # to authenticate or find a user. Default is :email.
+#   config.case_insensitive_keys = [:email]
+
+#   # Configure which authentication keys should have whitespace stripped.
+#   # These keys will have whitespace before and after removed upon creating or
+#   # modifying a user and when used to authenticate or find a user. Default is :email.
+#   config.strip_whitespace_keys = [:email]
+
+#   # Tell if authentication through request.params is enabled. True by default.
+#   # It can be set to an array that will enable params authentication only for the
+#   # given strategies, for example, `config.params_authenticatable = [:database]` will
+#   # enable it only for database (email + password) authentication.
+#   # config.params_authenticatable = true
+
+#   # Tell if authentication through HTTP Auth is enabled. False by default.
+#   # It can be set to an array that will enable http authentication only for the
+#   # given strategies, for example, `config.http_authenticatable = [:database]` will
+#   # enable it only for database authentication. The supported strategies are:
+#   # :database      = Support basic authentication with authentication key + password
+#   # config.http_authenticatable = false
+
+#   # If 401 status code should be returned for AJAX requests. True by default.
+#   # config.http_authenticatable_on_xhr = true
+
+#   # The realm used in Http Basic Authentication. 'Application' by default.
+#   # config.http_authentication_realm = 'Application'
+
+#   # It will change confirmation, password recovery and other workflows
+#   # to behave the same regardless if the e-mail provided was right or wrong.
+#   # Does not affect registerable.
+#   # config.paranoid = true
+
+#   # By default Devise will store the user in session. You can skip storage for
+#   # particular strategies by setting this option.
+#   # Notice that if you are skipping storage for all authentication paths, you
+#   # may want to disable generating routes to Devise's sessions controller by
+#   # passing skip: :sessions to `devise_for` in your config/routes.rb
+#   config.skip_session_storage = [:http_auth]
+
+#   # By default, Devise cleans up the CSRF token on authentication to
+#   # avoid CSRF token fixation attacks. This means that, when using AJAX
+#   # requests for sign in and sign up, you need to get a new CSRF token
+#   # from the server. You can disable this option at your own risk.
+#   # config.clean_up_csrf_token_on_authentication = true
+
+#   # ==> Configuration for :database_authenticatable
+#   # For bcrypt, this is the cost for hashing the password and defaults to 10. If
+#   # using other encryptors, it sets how many times you want the password re-encrypted.
+#   #
+#   # Limiting the stretches to just one in testing will increase the performance of
+#   # your test suite dramatically. However, it is STRONGLY RECOMMENDED to not use
+#   # a value less than 10 in other environments. Note that, for bcrypt (the default
+#   # encryptor), the cost increases exponentially with the number of stretches (e.g.
+#   # a value of 20 is already extremely slow: approx. 60 seconds for 1 calculation).
+#   config.stretches = Rails.env.test? ? 1 : 10
+
+#   # Setup a pepper to generate the encrypted password.
+#   # config.pepper = '9502969048e47cf3cdb19a2212410bc98dee1e534d2aa69b5082d4821d19088388027baa117f3f12bc97aecf5042a0cc92156f486ed25ce48d3e5042244d5c16'
+
+#   # Send a notification email when the user's password is changed
+#   # config.send_password_change_notification = false
+
+#   # ==> Configuration for :confirmable
+#   # A period that the user is allowed to access the website even without
+#   # confirming their account. For instance, if set to 2.days, the user will be
+#   # able to access the website for two days without confirming their account,
+#   # access will be blocked just in the third day. Default is 0.days, meaning
+#   # the user cannot access the website without confirming their account.
+#   # config.allow_unconfirmed_access_for = 2.days
+
+#   # A period that the user is allowed to confirm their account before their
+#   # token becomes invalid. For example, if set to 3.days, the user can confirm
+#   # their account within 3 days after the mail was sent, but on the fourth day
+#   # their account can't be confirmed with the token any more.
+#   # Default is nil, meaning there is no restriction on how long a user can take
+#   # before confirming their account.
+#   # config.confirm_within = 3.days
+
+#   # If true, requires any email changes to be confirmed (exactly the same way as
+#   # initial account confirmation) to be applied. Requires additional unconfirmed_email
+#   # db field (see migrations). Until confirmed, new email is stored in
+#   # unconfirmed_email column, and copied to email column on successful confirmation.
+#   config.reconfirmable = true
+
+#   # Defines which key will be used when confirming an account
+#   # config.confirmation_keys = [:email]
+
+#   # ==> Configuration for :rememberable
+#   # The time the user will be remembered without asking for credentials again.
+#   # config.remember_for = 2.weeks
+
+#   # Invalidates all the remember me tokens when the user signs out.
+#   config.expire_all_remember_me_on_sign_out = true
+
+#   # If true, extends the user's remember period when remembered via cookie.
+#   # config.extend_remember_period = false
+
+#   # Options to be passed to the created cookie. For instance, you can set
+#   # secure: true in order to force SSL only cookies.
+#   # config.rememberable_options = {}
+
+#   # ==> Configuration for :validatable
+#   # Range for password length.
+#   config.password_length = 8..72
+
+#   # Email regex used to validate email formats. It simply asserts that
+#   # one (and only one) @ exists in the given string. This is mainly
+#   # to give user feedback and not to assert the e-mail validity.
+#   # config.email_regexp = /\A[^@]+@[^@]+\z/
+
+#   # ==> Configuration for :timeoutable
+#   # The time you want to timeout the user session without activity. After this
+#   # time the user will be asked for credentials again. Default is 30 minutes.
+#   # config.timeout_in = 30.minutes
+
+#   # ==> Configuration for :lockable
+#   # Defines which strategy will be used to lock an account.
+#   # :failed_attempts = Locks an account after a number of failed attempts to sign in.
+#   # :none            = No lock strategy. You should handle locking by yourself.
+#   # config.lock_strategy = :failed_attempts
+
+#   # Defines which key will be used when locking and unlocking an account
+#   # config.unlock_keys = [:email]
+
+#   # Defines which strategy will be used to unlock an account.
+#   # :email = Sends an unlock link to the user email
+#   # :time  = Re-enables login after a certain amount of time (see :unlock_in below)
+#   # :both  = Enables both strategies
+#   # :none  = No unlock strategy. You should handle unlocking by yourself.
+#   # config.unlock_strategy = :both
+
+#   # Number of authentication tries before locking an account if lock_strategy
+#   # is failed attempts.
+#   # config.maximum_attempts = 20
+
+#   # Time interval to unlock the account if :time is enabled as unlock_strategy.
+#   # config.unlock_in = 1.hour
+
+#   # Warn on the last attempt before the account is locked.
+#   # config.last_attempt_warning = true
+
+#   # ==> Configuration for :recoverable
+#   #
+#   # Defines which key will be used when recovering the password for an account
+#   # config.reset_password_keys = [:email]
+
+#   # Time interval you can reset your password with a reset password key.
+#   # Don't put a too small interval or your users won't have the time to
+#   # change their passwords.
+#   config.reset_password_within = 6.hours
+
+#   # When set to false, does not sign a user in automatically after their password is
+#   # reset. Defaults to true, so a user is signed in automatically after a reset.
+#   # config.sign_in_after_reset_password = true
+
+#   # ==> Configuration for :encryptable
+#   # Allow you to use another encryption algorithm besides bcrypt (default). You can use
+#   # :sha1, :sha512 or encryptors from others authentication tools as :clearance_sha1,
+#   # :authlogic_sha512 (then you should set stretches above to 20 for default behavior)
+#   # and :restful_authentication_sha1 (then you should set stretches to 10, and copy
+#   # REST_AUTH_SITE_KEY to pepper).
+#   #
+#   # Require the `devise-encryptable` gem when using anything other than bcrypt
+#   # config.encryptor = :sha512
+
+#   # ==> Scopes configuration
+#   # Turn scoped views on. Before rendering "sessions/new", it will first check for
+#   # "users/sessions/new". It's turned off by default because it's slower if you
+#   # are using only default views.
+#   config.scoped_views = true
+
+#   # Configure the default scope given to Warden. By default it's the first
+#   # devise role declared in your routes (usually :user).
+#   # config.default_scope = :user
+
+#   # Set this configuration to false if you want /users/sign_out to sign out
+#   # only the current scope. By default, Devise signs out all scopes.
+#   config.sign_out_all_scopes = false
+
+#   # ==> Navigation configuration
+#   # Lists the formats that should be treated as navigational. Formats like
+#   # :html, should redirect to the sign in page when the user does not have
+#   # access, but formats like :xml or :json, should return 401.
+#   #
+#   # If you have any extra navigational formats, like :iphone or :mobile, you
+#   # should add them to the navigational formats lists.
+#   #
+#   # The "*/*" below is required to match Internet Explorer requests.
+#   # config.navigational_formats = ['*/*', :html]
+
+#   # The default HTTP method used to sign out a resource. Default is :delete.
+#   config.sign_out_via = :delete
+
+#   # ==> OmniAuth
+#   # Add a new OmniAuth provider. Check the wiki for more information on setting
+#   # up on your models and hooks.
+#   # config.omniauth :github, 'APP_ID', 'APP_SECRET', scope: 'user,public_repo'
+
+#   # ==> Warden configuration
+#   # If you want to use other strategies, that are not supported by Devise, or
+#   # change the failure app, you can configure them inside the config.warden block.
+#   #
+#   # config.warden do |manager|
+#   #   manager.intercept_401 = false
+#   #   manager.default_strategies(scope: :user).unshift :some_external_strategy
+#   # end
+
+#   # ==> Mountable engine configurations
+#   # When using Devise inside an engine, let's call it `MyEngine`, and this engine
+#   # is mountable, there are some extra configurations to be taken into account.
+#   # The following options are available, assuming the engine is mounted as:
+#   #
+#   #     mount MyEngine, at: '/my_engine'
+#   #
+#   # The router that invoked `devise_for`, in the example above, would be:
+#   # config.router_name = :my_engine
+#   #
+#   # When using OmniAuth, Devise cannot automatically set OmniAuth path,
+#   # so you need to do it manually. For the users scope, it would be:
+#   # config.omniauth_path_prefix = '/my_engine/users/auth'
+# end

data/test/rails_app/config/initializers/errors.rb

@@ -0,0 +1,34 @@
+require "net/http"
+require "net/smtp"
+
+# Example:
+#   begin
+#     some http call
+#   rescue *HTTP_ERRORS => error
+#     notify_hoptoad error
+#   end
+
+HTTP_ERRORS = [
+  EOFError,
+  Errno::ECONNRESET,
+  Errno::EINVAL,
+  Net::HTTPBadResponse,
+  Net::HTTPHeaderSyntaxError,
+  Net::ProtocolError,
+  Timeout::Error
+]
+
+SMTP_SERVER_ERRORS = [
+  IOError,
+  Net::SMTPAuthenticationError,
+  Net::SMTPServerBusy,
+  Net::SMTPUnknownError,
+  TimeoutError
+]
+
+SMTP_CLIENT_ERRORS = [
+  Net::SMTPFatalError,
+  Net::SMTPSyntaxError
+]
+
+SMTP_ERRORS = SMTP_SERVER_ERRORS + SMTP_CLIENT_ERRORS

data/test/rails_app/config/initializers/json_encoding.rb

@@ -0,0 +1 @@
+ActiveSupport::JSON::Encoding.time_precision = 0

data/test/rails_app/config/locales/devise.en.yml

@@ -0,0 +1,62 @@
+# Additional translations at https://github.com/plataformatec/devise/wiki/I18n
+
+en:
+  devise:
+    confirmations:
+      confirmed: "Your email address has been successfully confirmed."
+      send_instructions: "You will receive an email with instructions for how to confirm your email address in a few minutes."
+      send_paranoid_instructions: "If your email address exists in our database, you will receive an email with instructions for how to confirm your email address in a few minutes."
+    failure:
+      already_authenticated: "You are already signed in."
+      inactive: "Your account is not activated yet."
+      invalid: "Invalid %{authentication_keys} or password."
+      locked: "Your account is locked."
+      last_attempt: "You have one more attempt before your account is locked."
+      not_found_in_database: "Invalid %{authentication_keys} or password."
+      timeout: "Your session expired. Please sign in again to continue."
+      unauthenticated: "You need to sign in or sign up before continuing."
+      unconfirmed: "You have to confirm your email address before continuing."
+    mailer:
+      confirmation_instructions:
+        subject: "Confirmation instructions"
+      reset_password_instructions:
+        subject: "Reset password instructions"
+      unlock_instructions:
+        subject: "Unlock instructions"
+      password_change:
+        subject: "Password Changed"
+    omniauth_callbacks:
+      failure: "Could not authenticate you from %{kind} because \"%{reason}\"."
+      success: "Successfully authenticated from %{kind} account."
+    passwords:
+      no_token: "You can't access this page without coming from a password reset email. If you do come from a password reset email, please make sure you used the full URL provided."
+      send_instructions: "You will receive an email with instructions on how to reset your password in a few minutes."
+      send_paranoid_instructions: "If your email address exists in our database, you will receive a password recovery link at your email address in a few minutes."
+      updated: "Your password has been changed successfully. You are now signed in."
+      updated_not_active: "Your password has been changed successfully."
+    registrations:
+      destroyed: "Bye! Your account has been successfully cancelled. We hope to see you again soon."
+      signed_up: "Welcome! You have signed up successfully."
+      signed_up_but_inactive: "You have signed up successfully. However, we could not sign you in because your account is not yet activated."
+      signed_up_but_locked: "You have signed up successfully. However, we could not sign you in because your account is locked."
+      signed_up_but_unconfirmed: "A message with a confirmation link has been sent to your email address. Please follow the link to activate your account."
+      update_needs_confirmation: "You updated your account successfully, but we need to verify your new email address. Please check your email and follow the confirm link to confirm your new email address."
+      updated: "Your account has been updated successfully."
+    sessions:
+      signed_in: "Signed in successfully."
+      signed_out: "Signed out successfully."
+      already_signed_out: "Signed out successfully."
+    unlocks:
+      send_instructions: "You will receive an email with instructions for how to unlock your account in a few minutes."
+      send_paranoid_instructions: "If your account exists, you will receive an email with instructions for how to unlock it in a few minutes."
+      unlocked: "Your account has been unlocked successfully. Please sign in to continue."
+  errors:
+    messages:
+      already_confirmed: "was already confirmed, please try signing in"
+      confirmation_period_expired: "needs to be confirmed within %{period}, please request a new one"
+      expired: "has expired, please request a new one"
+      not_found: "not found"
+      not_locked: "was not locked"
+      not_saved:
+        one: "1 error prohibited this %{resource} from being saved:"
+        other: "%{count} errors prohibited this %{resource} from being saved:"

data/test/rails_app/config/mongoid.yml

@@ -1,19 +1,142 @@
 development:
+  # Configure available database clients. (required)
   clients:
+    # Defines the default client. (required)
     default:
-      database: chr_development
+      # Defines the name of the default database that Mongoid can connect to.
+      # (required).
+      database: rails_app_development
+      # Provides the hosts the default client can connect to. Must be an array
+      # of host:port pairs. (required)
       hosts:
-      - localhost:27017
+        - localhost:27017
       options:
-      max_retries: 1
-      retry_interval: 0
+        # Change the default write concern. (default = { w: 1 })
+        # write:
+        #   w: 1
 
+        # Change the default read preference. Valid options for mode are: :secondary,
+        # :secondary_preferred, :primary, :primary_preferred, :nearest
+        # (default: primary)
+        # read:
+        #   mode: :secondary_preferred
+        #   tag_sets:
+        #     - use: web
+
+        # The name of the user for authentication.
+        # user: 'user'
+
+        # The password of the user for authentication.
+        # password: 'password'
+
+        # The user's database roles.
+        # roles:
+        #   - 'dbOwner'
+
+        # Change the default authentication mechanism. Valid options are: :scram,
+        # :mongodb_cr, :mongodb_x509, and :plain. (default on 3.0 is :scram, default
+        # on 2.4 and 2.6 is :plain)
+        # auth_mech: :scram
+
+        # The database or source to authenticate the user against. (default: admin)
+        # auth_source: admin
+
+        # Force a the driver cluster to behave in a certain manner instead of auto-
+        # discovering. Can be one of: :direct, :replica_set, :sharded. Set to :direct
+        # when connecting to hidden members of a replica set.
+        # connect: :direct
+
+        # Changes the default time in seconds the server monitors refresh their status
+        # via ismaster commands. (default: 10)
+        # heartbeat_frequency: 10
+
+        # The time in seconds for selecting servers for a near read preference. (default: 5)
+        # local_threshold: 5
+
+        # The timeout in seconds for selecting a server for an operation. (default: 30)
+        # server_selection_timeout: 30
+
+        # The maximum number of connections in the connection pool. (default: 5)
+        # max_pool_size: 5
+
+        # The minimum number of connections in the connection pool. (default: 1)
+        # min_pool_size: 1
+
+        # The time to wait, in seconds, in the connection pool for a connection
+        # to be checked in before timing out. (default: 5)
+        # wait_queue_timeout: 5
+
+        # The time to wait to establish a connection before timing out, in seconds.
+        # (default: 5)
+        # connect_timeout: 5
+
+        # The timeout to wait to execute operations on a socket before raising an error.
+        # (default: 5)
+        # socket_timeout: 5
+
+        # The name of the replica set to connect to. Servers provided as seeds that do
+        # not belong to this replica set will be ignored.
+        # replica_set: name
+
+        # Whether to connect to the servers via ssl. (default: false)
+        # ssl: true
+
+        # The certificate file used to identify the connection against MongoDB.
+        # ssl_cert: /path/to/my.cert
+
+        # The private keyfile used to identify the connection against MongoDB.
+        # Note that even if the key is stored in the same file as the certificate,
+        # both need to be explicitly specified.
+        # ssl_key: /path/to/my.key
+
+        # A passphrase for the private key.
+        # ssl_key_pass_phrase: password
+
+        # Whether or not to do peer certification validation. (default: false)
+        # ssl_verify: true
+
+        # The file containing a set of concatenated certification authority certifications
+        # used to validate certs passed from the other end of the connection.
+        # ssl_ca_cert: /path/to/ca.cert
+
+
+  # Configure Mongoid specific options. (optional)
+  options:
+    # Includes the root model name in json serialization. (default: false)
+    # include_root_in_json: false
+
+    # Include the _type field in serialization. (default: false)
+    # include_type_for_serialization: false
+
+    # Preload all models in development, needed when models use
+    # inheritance. (default: false)
+    # preload_models: false
+
+    # Raise an error when performing a #find and the document is not found.
+    # (default: true)
+    # raise_not_found_error: true
+
+    # Raise an error when defining a scope with the same name as an
+    # existing method. (default: false)
+    # scope_overwrite_exception: false
+
+    # Use Active Support's time zone in conversions. (default: true)
+    # use_activesupport_time_zone: true
+
+    # Ensure all times are UTC in the app side. (default: false)
+    # use_utc: false
 test:
   clients:
     default:
-      database: chr_test
+      database: rails_app_test
       hosts:
-      - localhost:27017
+        - localhost:27017
       options:
-      max_retries: 1
-      retry_interval: 0
+        read:
+          mode: :primary
+        max_pool_size: 1
+
+production:
+  clients:
+    default:
+      uri: <%= ENV['MONGODB_URI'] %>