command_tower 0.3.1 → 0.10.0

data/app/controllers/command_tower/auth/plain_text/login_controller.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Auth
+    module PlainText
+      class LoginController < CommandTower::ApplicationController
+        include CommandTower::Api::ApplicationResponseRenderer
+        include CommandTower::Auth::InvalidCredentialsDeserializerRenderer
+
+        def create
+          deserialized = CommandTower::Deserializers::Auth::PlainText::LoginDeserializer.call(params)
+          return render_application_deserializer_errors(deserialized) unless deserialized.success?
+
+          result = CommandTower::Workflows::Auth::PlainText::LoginWorkflow.call(
+            input: deserialized.input
+          )
+          render_application_result(result)
+        end
+      end
+    end
+  end
+end

data/app/controllers/command_tower/auth/register_controller.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Auth
+    class RegisterController < CommandTower::ApplicationController
+      include CommandTower::Api::ApplicationResponseRenderer
+
+      def create
+        deserialized = CommandTower::Deserializers::Auth::RegisterDeserializer.call(params)
+        return render_register_deserializer_errors unless deserialized.success?
+
+        result = CommandTower::Workflows::Auth::RegisterWorkflow.call(
+          input: deserialized.input,
+          client_ip: CommandTower::Services::Auth::ClientIpResolver.call(request: request)
+        )
+        render_application_result(result)
+      end
+
+      private
+
+      # Collapses per-field deser failures into one message so registration never
+      # discloses which individual fields the caller got wrong.
+      def render_register_deserializer_errors
+        render_application_result(
+          CommandTower::Workflows::WorkflowResult.failure(
+            errors: [CommandTower::Errors::ValidationError.new(details: { base: "Missing required fields" })],
+            http_status: :unprocessable_entity
+          )
+        )
+      end
+    end
+  end
+end

data/app/controllers/command_tower/auth/session_controller.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Auth
+    class SessionController < CommandTower::ApplicationController
+      include CommandTower::Auth::AuthenticationBoundary
+      include CommandTower::Auth::AuthorizationBoundary
+
+      before_action :authenticate_request!
+      before_action :authorize_request!
+
+      def show
+        result = CommandTower::Workflows::Auth::Session::ShowWorkflow.call(
+          current_user: current_user,
+          auth_context: current_auth_context
+        )
+        render_application_result(result)
+      end
+    end
+  end
+end

data/app/controllers/command_tower/auth/signup_session/create_controller.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Auth
+    module SignupSession
+      class CreateController < CommandTower::ApplicationController
+        include CommandTower::Api::ApplicationResponseRenderer
+
+        def create
+          client_ip = CommandTower::Services::Auth::ClientIpResolver.call(request: request)
+          result = CommandTower::Workflows::Auth::SignupSession::CreateWorkflow.call(client_ip: client_ip)
+          render_application_result(result)
+        end
+      end
+    end
+  end
+end

data/app/controllers/command_tower/auth/username/availability_controller.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Auth
+    module Username
+      class AvailabilityController < CommandTower::ApplicationController
+        include CommandTower::Auth::SignupSessionBoundary
+
+        before_action :authenticate_signup_session!
+
+        def show
+          deserialized = CommandTower::Deserializers::Auth::UsernameAvailabilityDeserializer.call(params)
+          return render_username_deserializer_errors unless deserialized.success?
+
+          result = CommandTower::Workflows::Auth::UsernameAvailabilityWorkflow.call(
+            input: deserialized.input,
+            signup_session: current_signup_session
+          )
+          render_application_result(result)
+        end
+
+        private
+
+        def render_username_deserializer_errors
+          render_application_result(
+            CommandTower::Workflows::WorkflowResult.failure(
+              errors: [CommandTower::Errors::ValidationError.new(details: { username: "Username is required" })],
+              http_status: :unprocessable_entity
+            )
+          )
+        end
+      end
+    end
+  end
+end

data/app/controllers/command_tower/me/inbox_controller.rb

@@ -0,0 +1,85 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Me
+    class InboxController < CommandTower::ApplicationController
+      include CommandTower::Auth::AuthenticationBoundary
+      include CommandTower::Auth::AuthorizationBoundary
+
+      before_action :authenticate_request!
+      before_action :authorize_request!
+
+      def index
+        deserialized = CommandTower::Deserializers::Messaging::Inbox::ListDeserializer.call(params)
+        return render_deserializer_errors unless deserialized.success?
+
+        render_application_result(CommandTower::Workflows::Messaging::Inbox::ListWorkflow.call(
+          user: current_user, limit: deserialized.input.limit, offset: deserialized.input.offset, scope: deserialized.input.scope
+        ))
+      end
+
+      def show
+        run_item_workflow(CommandTower::Workflows::Messaging::Inbox::ShowWorkflow)
+      end
+
+      def open
+        run_item_workflow(CommandTower::Workflows::Messaging::Inbox::OpenWorkflow)
+      end
+
+      def archive
+        run_item_workflow(CommandTower::Workflows::Messaging::Inbox::ArchiveWorkflow)
+      end
+
+      def destroy
+        run_item_workflow(CommandTower::Workflows::Messaging::Inbox::DeleteWorkflow)
+      end
+
+      def unread_count
+        render_application_result(CommandTower::Workflows::Messaging::Inbox::UnreadCountWorkflow.call(user: current_user))
+      end
+
+      def bulk_read
+        run_bulk_workflow(CommandTower::Workflows::Messaging::Inbox::BulkReadWorkflow)
+      end
+
+      def bulk_unread
+        run_bulk_workflow(CommandTower::Workflows::Messaging::Inbox::BulkUnreadWorkflow)
+      end
+
+      def bulk_archive
+        run_bulk_workflow(CommandTower::Workflows::Messaging::Inbox::BulkArchiveWorkflow)
+      end
+
+      def bulk_restore
+        run_bulk_workflow(CommandTower::Workflows::Messaging::Inbox::BulkRestoreWorkflow)
+      end
+
+      def bulk_delete
+        run_bulk_workflow(CommandTower::Workflows::Messaging::Inbox::BulkDeleteWorkflow)
+      end
+
+      private
+
+      def run_item_workflow(workflow)
+        deserialized = CommandTower::Deserializers::Messaging::Inbox::ShowDeserializer.call(params)
+        return render_deserializer_errors unless deserialized.success?
+
+        render_application_result(workflow.call(user: current_user, inbox_item_id: deserialized.input.inbox_item_id))
+      end
+
+      def run_bulk_workflow(workflow)
+        deserialized = CommandTower::Deserializers::Messaging::Inbox::BulkIdsDeserializer.call(params)
+        return render_deserializer_errors unless deserialized.success?
+
+        render_application_result(workflow.call(user: current_user, inbox_item_ids: deserialized.input.inbox_item_ids))
+      end
+
+      def render_deserializer_errors
+        render_application_result(CommandTower::Workflows::WorkflowResult.failure(
+          errors: [CommandTower::Errors::ValidationError.new(details: { base: "Invalid request parameters" })],
+          http_status: :unprocessable_entity
+        ))
+      end
+    end
+  end
+end

data/app/controllers/command_tower/me/name_controller.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Me
+    class NameController < CommandTower::ApplicationController
+      include CommandTower::Auth::AuthenticationBoundary
+      include CommandTower::Auth::AuthorizationBoundary
+
+      before_action :authenticate_request!
+      before_action :authorize_request!
+
+      def update
+        deserialized = CommandTower::Deserializers::Me::UpdateNameDeserializer.call(params)
+        return render_deserializer_errors unless deserialized.success?
+
+        result = CommandTower::Workflows::Me::UpdateNameWorkflow.call(
+          current_user: current_user,
+          first_name: deserialized.input.first_name,
+          last_name: deserialized.input.last_name,
+          auth_context: current_auth_context
+        )
+        render_application_result(result)
+      end
+
+      private
+
+      def render_deserializer_errors
+        render_application_result(
+          CommandTower::Workflows::WorkflowResult.failure(
+            errors: [CommandTower::Errors::ValidationError.new(details: { base: "Missing required fields" })],
+            http_status: :unprocessable_entity
+          )
+        )
+      end
+    end
+  end
+end

data/app/controllers/command_tower/me/password_controller.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Me
+    class PasswordController < CommandTower::ApplicationController
+      include CommandTower::Auth::AuthenticationBoundary
+      include CommandTower::Auth::AuthorizationBoundary
+
+      before_action :authenticate_request!
+      before_action :authorize_request!
+
+      def update
+        deserialized = CommandTower::Deserializers::Me::ChangePasswordDeserializer.call(params)
+        return render_deserializer_errors unless deserialized.success?
+
+        result = CommandTower::Workflows::Me::ChangePasswordWorkflow.call(
+          current_user: current_user,
+          current_password: deserialized.input.current_password,
+          password: deserialized.input.password,
+          password_confirmation: deserialized.input.password_confirmation
+        )
+        render_application_result(result)
+      end
+
+      private
+
+      def render_deserializer_errors
+        render_application_result(
+          CommandTower::Workflows::WorkflowResult.failure(
+            errors: [CommandTower::Errors::ValidationError.new(details: { base: "Missing required fields" })],
+            http_status: :unprocessable_entity
+          )
+        )
+      end
+    end
+  end
+end

data/app/controllers/command_tower/me/phone_controller.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Me
+    class PhoneController < CommandTower::ApplicationController
+      include CommandTower::Auth::AuthenticationBoundary
+      include CommandTower::Auth::AuthorizationBoundary
+
+      before_action :authenticate_request!
+      before_action :authorize_request!
+
+      def update
+        deserialized = CommandTower::Deserializers::Me::UpdatePhoneDeserializer.call(params)
+        return render_deserializer_errors unless deserialized.success?
+
+        result = CommandTower::Workflows::Me::UpdatePhoneWorkflow.call(
+          current_user: current_user,
+          phone_number: deserialized.input.phone_number,
+          auth_context: current_auth_context
+        )
+        render_application_result(result)
+      end
+
+      def destroy
+        result = CommandTower::Workflows::Me::ClearPhoneWorkflow.call(
+          current_user: current_user,
+          auth_context: current_auth_context
+        )
+        render_application_result(result)
+      end
+
+      private
+
+      def render_deserializer_errors
+        render_application_result(
+          CommandTower::Workflows::WorkflowResult.failure(
+            errors: [CommandTower::Errors::ValidationError.new(details: { base: "Missing required fields" })],
+            http_status: :unprocessable_entity
+          )
+        )
+      end
+    end
+  end
+end

data/app/controllers/command_tower/me/phone_verification/verifications_controller.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Me
+    module PhoneVerification
+      class VerificationsController < CommandTower::ApplicationController
+        include CommandTower::Auth::AuthenticationBoundary
+        include CommandTower::Auth::AuthorizationBoundary
+
+        before_action :authenticate_request!
+        before_action :authorize_request!
+
+        def create
+          result = CommandTower::Workflows::Me::PhoneVerification::SendWorkflow.call(
+            current_user: current_user,
+            auth_context: current_auth_context
+          )
+          render_application_result(result)
+        end
+      end
+    end
+  end
+end

data/app/controllers/command_tower/me/phone_verification/verify_controller.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Me
+    module PhoneVerification
+      class VerifyController < CommandTower::ApplicationController
+        include CommandTower::Auth::AuthenticationBoundary
+        include CommandTower::Auth::AuthorizationBoundary
+
+        before_action :authenticate_request!
+        before_action :authorize_request!
+
+        def create
+          deserialized = CommandTower::Deserializers::Me::PhoneVerification::VerifyDeserializer.call(params)
+          unless deserialized.success?
+            return render_application_result(
+              CommandTower::Workflows::WorkflowResult.failure(
+                errors: [CommandTower::Errors::Account::PhoneVerificationCodeInvalidError.new],
+                http_status: :unprocessable_entity
+              )
+            )
+          end
+
+          result = CommandTower::Workflows::Me::PhoneVerification::VerifyWorkflow.call(
+            current_user: current_user,
+            code: deserialized.input.code,
+            auth_context: current_auth_context
+          )
+          render_application_result(result)
+        end
+      end
+    end
+  end
+end

data/app/controllers/command_tower/me/preferences_controller.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Me
+    class PreferencesController < CommandTower::ApplicationController
+      include CommandTower::Auth::AuthenticationBoundary
+      include CommandTower::Auth::AuthorizationBoundary
+
+      before_action :authenticate_request!
+      before_action :authorize_request!
+
+      def show
+        deserialized = CommandTower::Deserializers::Messaging::Preferences::ShowDeserializer.call(params)
+        return render_deserializer_errors unless deserialized.success?
+
+        render_application_result(
+          CommandTower::Workflows::Messaging::Preferences::ShowWorkflow.call(user: current_user)
+        )
+      end
+
+      def update
+        deserialized = CommandTower::Deserializers::Messaging::Preferences::UpdateDeserializer.call(params)
+        return render_deserializer_errors unless deserialized.success?
+
+        render_application_result(
+          CommandTower::Workflows::Messaging::Preferences::UpdateWorkflow.call(
+            user: current_user,
+            notification_type_key: deserialized.input.notification_type_key,
+            preference_state: deserialized.input.preference_state,
+          )
+        )
+      end
+
+      private
+
+      def render_deserializer_errors
+        render_application_result(
+          CommandTower::Workflows::WorkflowResult.failure(
+            errors: [CommandTower::Errors::ValidationError.new(details: { base: "Invalid request parameters" })],
+            http_status: :unprocessable_entity
+          )
+        )
+      end
+    end
+  end
+end

data/app/controllers/command_tower/me/pushover/verifications_controller.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Me
+    module Pushover
+      class VerificationsController < CommandTower::ApplicationController
+        include CommandTower::Auth::AuthenticationBoundary
+        include CommandTower::Auth::AuthorizationBoundary
+
+        before_action :authenticate_request!
+        before_action :authorize_request!
+
+        def create
+          result = CommandTower::Workflows::Me::Pushover::VerifyWorkflow.call(
+            current_user: current_user,
+            auth_context: current_auth_context
+          )
+          render_application_result(result)
+        end
+      end
+    end
+  end
+end

data/app/controllers/command_tower/me/pushover_controller.rb

@@ -0,0 +1,66 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Me
+    class PushoverController < CommandTower::ApplicationController
+      include CommandTower::Auth::AuthenticationBoundary
+      include CommandTower::Auth::AuthorizationBoundary
+
+      before_action :authenticate_request!
+      before_action :authorize_request!
+
+      def show
+        result = CommandTower::Workflows::Me::Pushover::ShowWorkflow.call(
+          current_user: current_user,
+          auth_context: current_auth_context
+        )
+        render_application_result(result)
+      end
+
+      def create
+        deserialized = CommandTower::Deserializers::Me::Pushover::CredentialsDeserializer.call(params)
+        return render_deserializer_errors unless deserialized.success?
+
+        result = CommandTower::Workflows::Me::Pushover::CreateWorkflow.call(
+          current_user: current_user,
+          user_key: deserialized.input.user_key,
+          application_token: deserialized.input.application_token,
+          auth_context: current_auth_context
+        )
+        render_application_result(result)
+      end
+
+      def update
+        deserialized = CommandTower::Deserializers::Me::Pushover::CredentialsDeserializer.call(params)
+        return render_deserializer_errors unless deserialized.success?
+
+        result = CommandTower::Workflows::Me::Pushover::ReplaceWorkflow.call(
+          current_user: current_user,
+          user_key: deserialized.input.user_key,
+          application_token: deserialized.input.application_token,
+          auth_context: current_auth_context
+        )
+        render_application_result(result)
+      end
+
+      def destroy
+        result = CommandTower::Workflows::Me::Pushover::DestroyWorkflow.call(
+          current_user: current_user,
+          auth_context: current_auth_context
+        )
+        render_application_result(result)
+      end
+
+      private
+
+      def render_deserializer_errors
+        render_application_result(
+          CommandTower::Workflows::WorkflowResult.failure(
+            errors: [CommandTower::Errors::ValidationError.new(details: { base: "Missing required fields" })],
+            http_status: :unprocessable_entity
+          )
+        )
+      end
+    end
+  end
+end

data/app/controllers/command_tower/me_controller.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module CommandTower
+  class MeController < CommandTower::ApplicationController
+    include CommandTower::Auth::AuthenticationBoundary
+    include CommandTower::Auth::AuthorizationBoundary
+
+    before_action :authenticate_request!
+    before_action :authorize_request!
+
+    def show
+      result = CommandTower::Workflows::Me::ShowWorkflow.call(
+        current_user: current_user,
+        auth_context: current_auth_context
+      )
+      render_application_result(result)
+    end
+  end
+end

data/app/controllers/command_tower/profile_controller.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module CommandTower
+  class ProfileController < CommandTower::ApplicationController
+    include CommandTower::Auth::AuthenticationBoundary
+    include CommandTower::Auth::AuthorizationBoundary
+
+    before_action :authenticate_request!
+    before_action :authorize_request!
+
+    def show
+      result = CommandTower::Workflows::Profile::ShowWorkflow.call(
+        current_user: current_user,
+        auth_context: current_auth_context
+      )
+      render_application_result(result)
+    end
+  end
+end

data/app/controllers/concerns/command_tower/api/application_response_renderer.rb

@@ -0,0 +1,82 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Api
+    module ApplicationResponseRenderer
+      extend ActiveSupport::Concern
+
+      private
+
+      def render_application_result(result)
+        apply_response_effects(result.response_effects)
+        body = if result.success?
+                 CommandTower::Serializers::Application::EnvelopeSerializer.success(
+                   data: result.payload,
+                   meta: result.meta
+                 )
+               else
+                 serialized_errors = result.errors.map do |error|
+                   CommandTower::Serializers::Application::ErrorEntrySerializer.serialize(error)
+                 end
+                 CommandTower::Serializers::Application::EnvelopeSerializer.failure(
+                   errors: serialized_errors,
+                   meta: result.meta
+                 )
+               end
+        render json: body, status: result.http_status
+      end
+
+      def render_application_deserializer_failure(deserialized)
+        render_application_result(
+          CommandTower::Workflows::WorkflowResult.failure(
+            errors: [
+              CommandTower::Errors::ValidationError.new(
+                details: { failures: Array(deserialized.errors) }
+              )
+            ],
+            http_status: :unprocessable_entity
+          )
+        )
+      end
+
+      def render_application_errors(errors:, status:, response_effects: nil)
+        apply_response_effects(response_effects)
+        render json: CommandTower::Serializers::Application::EnvelopeSerializer.failure(errors: errors),
+               status: status
+      end
+
+      def apply_response_effects(effects)
+        return if effects.blank?
+
+        if effects[:set_token]
+          CommandTower::Jwt::AuthorizationHelper.set_token(
+            response,
+            effects[:set_token][:token],
+            expires_at: effects[:set_token][:expires_at]
+          )
+        end
+
+        CommandTower::Jwt::AuthorizationHelper.clear_token(response) if effects[:clear_token]
+
+        if effects[:clear_auth_cookie]
+          CommandTower::Jwt::AuthorizationHelper.clear_cookie(response)
+        end
+
+        if effects[:ensure_csrf_cookie]
+          CommandTower::Jwt::CsrfHelper.ensure_cookie(
+            request,
+            response,
+            should_rotate: effects[:ensure_csrf_cookie][:rotate]
+          )
+        end
+
+        return unless effects[:set_expire_header]
+
+        response.set_header(
+          CommandTower::Jwt::AuthorizationHelper::AUTHENTICATION_EXPIRE_HEADER,
+          effects[:set_expire_header]
+        )
+      end
+    end
+  end
+end

data/app/controllers/concerns/command_tower/api/deserializer_failure_details.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module CommandTower
+  module Api
+    # Preserves client-visible ValidationError details when ApplicationDeserializer
+    # Array-wraps a single Hash failure payload.
+    module DeserializerFailureDetails
+      extend ActiveSupport::Concern
+
+      private
+
+      def deserializer_failure_details(deserialized)
+        errors = Array(deserialized.errors)
+        if errors.size == 1 && errors.first.is_a?(Hash)
+          errors.first
+        else
+          { failures: errors }
+        end
+      end
+    end
+  end
+end