cmtool 0.4.0 → 2.0.0

data/spec/controllers/pages_controller_spec.rb

@@ -1,13 +1,13 @@
 require 'spec_helper'
 
-describe Cmtool::PagesController do
+describe Cmtool::PagesController, type: :controller do
+  routes { Cmtool::Engine.routes }
+
   describe 'GET index' do
     it "should render standard view when tree is available" do
-      #binding.pry
       create_pages_tree
-      ->{ get :index }.should_not raise_error
+      expect{ get :index }.not_to raise_error
     end
   end
 
-
 end

data/spec/dummy/app/assets/stylesheets/application.css

@@ -11,3 +11,6 @@
  *= require_self
  *= require_tree .
 */
+body{
+  background-color: #aaf;
+}

data/spec/dummy/app/controllers/application_controller.rb

@@ -1,3 +1,13 @@
 class ApplicationController < ActionController::Base
   protect_from_forgery
+
+private
+
+  def authorize_cmtool
+    redirect_to main_app.new_user_session_path unless current_user.present?
+  end
+
+  def cmtool_user
+    current_user
+  end
 end

data/spec/dummy/app/models/user.rb

@@ -1,3 +1,4 @@
 class User
   include Cmtool::Includes::User
+  devise :database_authenticatable, :recoverable, :rememberable, :trackable
 end

data/spec/dummy/config/application.rb

@@ -1,16 +1,13 @@
 require File.expand_path('../boot', __FILE__)
 
+require 'rails'
 require "action_controller/railtie"
 require "action_mailer/railtie"
-require "active_resource/railtie"
+#require "active_resource/railtie"
+require 'rails/test_unit/railtie'
 require "sprockets/railtie"
 
-if defined?(Bundler)
-  # If you precompile assets before deploying to production, use this line
-  Bundler.require(*Rails.groups(:assets => %w(development test)))
-  # If you want your assets lazily compiled in production, use this line
-  # Bundler.require(:default, :assets, Rails.env)
-end
+Bundler.require(*Rails.groups(assets: %w(development test)))
 require "cmtool"
 
 module Dummy
@@ -36,6 +33,7 @@ module Dummy
     # The default locale is :en and all translations from config/locales/*.rb,yml are auto loaded.
     # config.i18n.load_path += Dir[Rails.root.join('my', 'locales', '*.{rb,yml}').to_s]
     # config.i18n.default_locale = :de
+    config.i18n.available_locales = [:en, :nl, :de, :es]
 
     # Configure the default encoding used in templates for Ruby 1.9.
     config.encoding = "utf-8"

data/spec/dummy/config/environments/development.rb

@@ -4,7 +4,7 @@ Dummy::Application.configure do
   # In the development environment your application's code is reloaded on
   # every request. This slows down response time but is perfect for development
   # since you don't have to restart the web server when you make code changes.
-  config.cache_classes = false
+  config.eager_load = false
 
   # Log error messages when you accidentally call methods on nil.
   config.whiny_nils = true

data/spec/dummy/config/environments/production.rb

@@ -9,7 +9,7 @@ Dummy::Application.configure do
   config.action_controller.perform_caching = true
 
   # Disable Rails's static asset server (Apache or nginx will already do this)
-  config.serve_static_assets = false
+  config.serve_static_files = false
 
   # Compress JavaScripts and CSS
   config.assets.compress = true

data/spec/dummy/config/environments/test.rb

@@ -8,7 +8,7 @@ Dummy::Application.configure do
   config.cache_classes = true
 
   # Configure static asset server for tests with Cache-Control for performance
-  config.serve_static_assets = true
+  config.serve_static_files = true
   config.static_cache_control = "public, max-age=3600"
 
   # Log error messages when you accidentally call methods on nil

data/{config → spec/dummy/config}/initializers/devise.rb

@@ -1,22 +1,26 @@
 # Use this hook to configure devise mailer, warden hooks and so forth.
 # Many of these configuration options can be set straight in your model.
 Devise.setup do |config|
+  # The secret key used by Devise. Devise uses this key to generate
+  # random tokens. Changing this key will render invalid all existing
+  # confirmation, reset password and unlock tokens in the database.
+  config.secret_key = '0182bf2df57625f0948c148caf0a8c0fdd5dfdf1c611665c1063f5de3e046939bca0f0c213e77da2fe835cdf238d83a38cb6494de9e4b5bf793be32fc711a844'
+
   # ==> Mailer Configuration
   # Configure the e-mail address which will be shown in Devise::Mailer,
-  # note that it will be overwritten if you use your own mailer class with default "from" parameter.
-  config.mailer_sender = "please-change-me-at-config-initializers-devise@example.com"
+  # note that it will be overwritten if you use your own mailer class
+  # with default "from" parameter.
+  config.mailer_sender = 'please-change-me-at-config-initializers-devise@example.com'
 
   # Configure the class responsible to send e-mails.
-  # config.mailer = "Devise::Mailer"
-
-  # Automatically apply schema changes in tableless databases
-  config.apply_schema = false
+  # config.mailer = 'Devise::Mailer'
 
   # ==> ORM configuration
   # Load and configure the ORM. Supports :active_record (default) and
   # :mongoid (bson_ext recommended) by default. Other ORMs may be
   # available as additional gems.
-  require 'devise/orm/simply_stored'
+  #require 'devise/orm/simply_stored'
+  require 'orm_adapter/adapters/simply_stored'
 
   # ==> Configuration for any authentication mechanism
   # Configure which keys are used when authenticating a user. The default is
@@ -51,17 +55,18 @@ Devise.setup do |config|
   # enable it only for database (email + password) authentication.
   # config.params_authenticatable = true
 
-  # Tell if authentication through HTTP Basic Auth is enabled. False by default.
+  # Tell if authentication through HTTP Auth is enabled. False by default.
   # It can be set to an array that will enable http authentication only for the
-  # given strategies, for example, `config.http_authenticatable = [:token]` will
-  # enable it only for token authentication.
-   # config.http_authenticatable = [:token]
+  # given strategies, for example, `config.http_authenticatable = [:database]` will
+  # enable it only for database authentication. The supported strategies are:
+  # :database      = Support basic authentication with authentication key + password
+  # config.http_authenticatable = false
 
   # If http headers should be returned for AJAX requests. True by default.
   # config.http_authenticatable_on_xhr = true
 
-  # The realm used in Http Basic Authentication. "Application" by default.
-  # config.http_authentication_realm = "Application"
+  # The realm used in Http Basic Authentication. 'Application' by default.
+  # config.http_authentication_realm = 'Application'
 
   # It will change confirmation, password recovery and other workflows
   # to behave the same regardless if the e-mail provided was right or wrong.
@@ -69,36 +74,52 @@ Devise.setup do |config|
   # config.paranoid = true
 
   # By default Devise will store the user in session. You can skip storage for
-  # :http_auth and :token_auth by adding those symbols to the array below.
+  # particular strategies by setting this option.
   # Notice that if you are skipping storage for all authentication paths, you
   # may want to disable generating routes to Devise's sessions controller by
-  # passing :skip => :sessions to `devise_for` in your config/routes.rb
+  # passing skip: :sessions to `devise_for` in your config/routes.rb
   config.skip_session_storage = [:http_auth]
 
+  # By default, Devise cleans up the CSRF token on authentication to
+  # avoid CSRF token fixation attacks. This means that, when using AJAX
+  # requests for sign in and sign up, you need to get a new CSRF token
+  # from the server. You can disable this option at your own risk.
+  # config.clean_up_csrf_token_on_authentication = true
+
   # ==> Configuration for :database_authenticatable
   # For bcrypt, this is the cost for hashing the password and defaults to 10. If
   # using other encryptors, it sets how many times you want the password re-encrypted.
   #
   # Limiting the stretches to just one in testing will increase the performance of
   # your test suite dramatically. However, it is STRONGLY RECOMMENDED to not use
-  # a value less than 10 in other environments.
+  # a value less than 10 in other environments. Note that, for bcrypt (the default
+  # encryptor), the cost increases exponentially with the number of stretches (e.g.
+  # a value of 20 is already extremely slow: approx. 60 seconds for 1 calculation).
   config.stretches = Rails.env.test? ? 1 : 10
 
   # Setup a pepper to generate the encrypted password.
-  # config.pepper = "0645e56df1cf3f1fabb289964a240de9069b044768999ea2bec0ff49794c0613273f9a29c013f47574c9c225b0d5dbe9a8d961ba49dd9a3e878a0da539905b56"
+  # config.pepper = 'dd02671a3d4beaecd81fa577583d0f3d0218432444e110bb35ee2f8c79ca53a2c4f9ed12aeb345549610439c367ce99dd5a4da13f949d4498ed9f9e4ec38546d'
 
   # ==> Configuration for :confirmable
   # A period that the user is allowed to access the website even without
-  # confirming his account. For instance, if set to 2.days, the user will be
-  # able to access the website for two days without confirming his account,
+  # confirming their account. For instance, if set to 2.days, the user will be
+  # able to access the website for two days without confirming their account,
   # access will be blocked just in the third day. Default is 0.days, meaning
-  # the user cannot access the website without confirming his account.
+  # the user cannot access the website without confirming their account.
   # config.allow_unconfirmed_access_for = 2.days
 
-  # If true, requires any email changes to be confirmed (exctly the same way as
+  # A period that the user is allowed to confirm their account before their
+  # token becomes invalid. For example, if set to 3.days, the user can confirm
+  # their account within 3 days after the mail was sent, but on the fourth day
+  # their account can't be confirmed with the token any more.
+  # Default is nil, meaning there is no restriction on how long a user can take
+  # before confirming their account.
+  # config.confirm_within = 3.days
+
+  # If true, requires any email changes to be confirmed (exactly the same way as
   # initial account confirmation) to be applied. Requires additional unconfirmed_email
-  # db field (see migrations). Until confirmed new email is stored in
-  # unconfirmed email column, and copied to email column on successful confirmation.
+  # db field (see migrations). Until confirmed, new email is stored in
+  # unconfirmed_email column, and copied to email column on successful confirmation.
   config.reconfirmable = true
 
   # Defines which key will be used when confirming an account
@@ -111,20 +132,16 @@ Devise.setup do |config|
   # If true, extends the user's remember period when remembered via cookie.
   # config.extend_remember_period = false
 
-  # If true, uses the password salt as remember token. This should be turned
-  # to false if you are not using database authenticatable.
-  config.use_salt_as_remember_token = true
-
   # Options to be passed to the created cookie. For instance, you can set
-  # :secure => true in order to force SSL only cookies.
-  # config.cookie_options = {}
+  # secure: true in order to force SSL only cookies.
+  # config.rememberable_options = {}
 
   # ==> Configuration for :validatable
-  # Range for password length. Default is 6..128.
-  # config.password_length = 6..128
+  # Range for password length.
+  config.password_length = 8..128
 
   # Email regex used to validate email formats. It simply asserts that
-  # an one (and only one) @ exists in the given string. This is mainly
+  # one (and only one) @ exists in the given string. This is mainly
   # to give user feedback and not to assert the e-mail validity.
   # config.email_regexp = /\A[^@]+@[^@]+\z/
 
@@ -133,6 +150,9 @@ Devise.setup do |config|
   # time the user will be asked for credentials again. Default is 30 minutes.
   # config.timeout_in = 30.minutes
 
+  # If true, expires auth token on session timeout.
+  # config.expire_auth_token_on_timeout = false
+
   # ==> Configuration for :lockable
   # Defines which strategy will be used to lock an account.
   # :failed_attempts = Locks an account after a number of failed attempts to sign in.
@@ -156,6 +176,9 @@ Devise.setup do |config|
   # Time interval to unlock the account if :time is enabled as unlock_strategy.
   # config.unlock_in = 1.hour
 
+  # Warn on the last attempt before the account is locked.
+  # config.last_attempt_warning = false
+
   # ==> Configuration for :recoverable
   #
   # Defines which key will be used when recovering the password for an account
@@ -171,13 +194,11 @@ Devise.setup do |config|
   # :sha1, :sha512 or encryptors from others authentication tools as :clearance_sha1,
   # :authlogic_sha512 (then you should set stretches above to 20 for default behavior)
   # and :restful_authentication_sha1 (then you should set stretches to 10, and copy
-  # REST_AUTH_SITE_KEY to pepper)
+  # REST_AUTH_SITE_KEY to pepper).
+  #
+  # Require the `devise-encryptable` gem when using anything other than bcrypt
   # config.encryptor = :sha512
 
-  # ==> Configuration for :token_authenticatable
-  # Defines name of the authentication token params key
-  config.token_authentication_key = :auth_token
-
   # ==> Scopes configuration
   # Turn scoped views on. Before rendering "sessions/new", it will first check for
   # "users/sessions/new". It's turned off by default because it's slower if you
@@ -188,10 +209,9 @@ Devise.setup do |config|
   # devise role declared in your routes (usually :user).
   # config.default_scope = :user
 
-  # Configure sign_out behavior.
-  # Sign_out action can be scoped (i.e. /users/sign_out affects only :user scope).
-  # The default is true, which means any logout action will sign out all active scopes.
-  config.sign_out_all_scopes = false
+  # Set this configuration to false if you want /users/sign_out to sign out
+  # only the current scope. By default, Devise signs out all scopes.
+  # config.sign_out_all_scopes = true
 
   # ==> Navigation configuration
   # Lists the formats that should be treated as navigational. Formats like
@@ -202,15 +222,15 @@ Devise.setup do |config|
   # should add them to the navigational formats lists.
   #
   # The "*/*" below is required to match Internet Explorer requests.
-  # config.navigational_formats = ["*/*", :html]
+  # config.navigational_formats = ['*/*', :html]
 
   # The default HTTP method used to sign out a resource. Default is :delete.
-  config.sign_out_via = [:delete, :get]
+  config.sign_out_via = [:get, :delete]
 
   # ==> OmniAuth
   # Add a new OmniAuth provider. Check the wiki for more information on setting
   # up on your models and hooks.
-  # config.omniauth :github, 'APP_ID', 'APP_SECRET', :scope => 'user,public_repo'
+  # config.omniauth :github, 'APP_ID', 'APP_SECRET', scope: 'user,public_repo'
 
   # ==> Warden configuration
   # If you want to use other strategies, that are not supported by Devise, or
@@ -218,6 +238,20 @@ Devise.setup do |config|
   #
   # config.warden do |manager|
   #   manager.intercept_401 = false
-  #   manager.default_strategies(:scope => :user).unshift :some_external_strategy
+  #   manager.default_strategies(scope: :user).unshift :some_external_strategy
   # end
+
+  # ==> Mountable engine configurations
+  # When using Devise inside an engine, let's call it `MyEngine`, and this engine
+  # is mountable, there are some extra configurations to be taken into account.
+  # The following options are available, assuming the engine is mounted as:
+  #
+  #     mount MyEngine, at: '/my_engine'
+  #
+  # The router that invoked `devise_for`, in the example above, would be:
+  # config.router_name = :my_engine
+  #
+  # When using omniauth, Devise cannot automatically set Omniauth path,
+  # so you need to do it manually. For the users scope, it would be:
+  # config.omniauth_path_prefix = '/my_engine/users/auth'
 end

data/spec/dummy/config/routes.rb

@@ -2,7 +2,11 @@ Rails.application.routes.draw do
 
   devise_for :users, :controllers => {:sessions => 'cmtool/sessions', :passwords => 'cmtool/passwords'}
   mount Cmtool::Engine => "/cmtool"
-  match "/:name" => "pages#show"
-  match "/*url" => "pages#not_found"
+  get '/sitemap(.:format)' => 'pages#sitemap'
+  get "/:name" => "pages#show"
+  scope '(/:locale)', constraints: {locale: /nl|be|de|fr|en/}, defaults: { locale: :nl } do
+    get "/:name" => "pages#show", constraints: {name: /.*/},  as: :page
+  end
+  get "/*url" => "pages#not_found"
   root :to => 'pages#home'
 end

data/spec/dummy/config/secrets.yml

@@ -0,0 +1,4 @@
+development:
+  secret_key_base: 4fbf2962d6b16e71caeb8cb5c7c97e8a951ae8fd284ce9e89bfd6a6b5a6796f4bcc4b45dbe1fd82e1fc5316dfbaff4b70b3d91f8102b30b41fac71b2824345dc
+test:
+  secret_key_base: 4fbf2962d6b16e71caeb8cb5c7c97e8a951ae8fd284ce9e89bfd6a6b5a6796f4bcc4b45dbe1fd82e1fc5316dfbaff4b70b3d91f8102b30b41fac71b2824345dc

data/spec/factories/page_factory.rb

@@ -0,0 +1,6 @@
+FactoryGirl.define do
+  factory :page, class: Page do
+    sequence(:name){|i| "page#{i}"}
+    locale 'en'
+  end
+end

data/spec/features/cmtool/pages/listing_spec.rb

@@ -0,0 +1,40 @@
+require 'spec_helper'
+
+feature 'Pages index' do
+  scenario 'visit root' do
+    visit '/cmtool'
+    page.current_path.should == '/users/sign_in'
+  end
+  context 'with logged in user' do
+    background do
+      create_user 'test@example.com'
+      login_as 'test@example.com'
+    end
+    context 'without pages' do
+      scenario 'list pages as root' do
+        visit '/cmtool'
+        page.should have_link 'New Page'
+      end
+    end
+
+    context 'with pages' do
+      background do
+        @nl1 = create :page, name: 'nl1', locale: 'nl'
+        @nl11 = create :page, name: 'nl11', locale: 'nl', parent_id: @nl1.id
+        @nl111 = create :page, name: 'nl111', locale: 'nl', parent_id: @nl11.id
+        @nl12 = create :page, name: 'nl12', locale: 'nl', parent_id: @nl1.id
+
+        @en1 = create :page, name: 'en1', locale: 'en'
+      end
+
+      scenario 'see both languages' do
+        visit '/cmtool'
+        page.should have_link 'nl1'
+        page.should have_link '- nl11'
+        page.should have_link '- - nl111'
+        page.should have_link '- nl12'
+        page.should have_link 'en1'
+      end
+    end
+  end
+end

data/spec/features/cmtool/pages/preview_spec.rb

@@ -0,0 +1,21 @@
+require 'spec_helper'
+
+feature 'Page preview' do
+  context 'with logged in user' do
+    background do
+      create_user 'test@example.com'
+      login_as 'test@example.com'
+    end
+
+    context 'with pages' do
+      background do
+        @page = create :page, name: 'nl1', locale: 'nl'
+      end
+
+      scenario 'see both languages', js: true do
+        visit "/cmtool/pages/#{@page.id}"
+
+      end
+    end
+  end
+end

data/spec/features/cmtool/sitemap_spec.rb

@@ -0,0 +1,12 @@
+require 'spec_helper'
+
+feature 'sitemap.xml' do
+  scenario 'proper sitemap' do
+    p1 = Page.create name: 'nl-1', title: 'NL 1', locale: 'nl'
+    p1 = Page.create name: 'en-1', title: 'EN 1', locale: 'en'
+    visit "/sitemap.xml"
+    page.body.should include "<lastmod>#{Date.today.strftime('%Y-%m-%d')}</lastmod>"
+    page.body.should include "<loc>http://www.example.com/en/en-1</loc>"
+    page.body.should include "<loc>http://www.example.com/nl-1</loc>"
+  end
+end