dacz-authuser 0.1.2

data/CHANGELOG.textile

@@ -0,0 +1,2 @@
+h2. 0.1.1 (5/30/2009)
+Forked and renamed Clearance gem v 0.6.6. See its changelog.

data/LICENSE

@@ -0,0 +1,21 @@
+The MIT License
+
+Copyright (c) 2008 thoughtbot, inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.textile

@@ -0,0 +1,123 @@
+h1. Authuser
+
+Auth User For Rails. Forked from Clearance
+
+h2. Wiki
+
+Most information regarding Clearance from which Authuser is forked: on the "Github Wiki":http://wiki.github.com/thoughtbot/clearance.
+
+h2. Engine
+
+Authuser is a Rails engine. It works with versions of Rails greater than 2.3.
+
+In config/environment.rb:
+
+<pre>
+config.gem "thoughtbot-authuser", 
+  :lib     => 'authuser', 
+  :source  => 'http://gems.github.com', 
+  :version => '0.6.4'
+</pre>
+
+Vendor the gem:
+
+<pre>
+rake gems:install
+rake gems:unpack
+</pre>
+
+Make sure the development database exists and run the generator:
+
+@script/generate authuser@
+
+A number of files will be created and instructions will be printed.
+
+You may already have some of these files. Don't worry. You'll be asked if you want to overwrite them.
+
+Run the migration:
+
+@rake db:migrate@
+
+h2. Environment
+
+Define a HOST constant in your environment files.
+In config/environments/test.rb and config/environments/development.rb it can be:
+
+@HOST = "localhost"@
+
+In production.rb it must be the actual host your application is deployed to.
+The constant is used by mailers to generate URLs in emails.
+
+In config/environment.rb:
+
+@DO_NOT_REPLY = "donotreply@example.com"@
+
+Define root_url to *something* in your config/routes.rb:
+
+@map.root :controller => 'home'@
+
+h2. Cucumber Features
+
+As your app evolves, you want to know that authentication still works. Authuser's opinion is that you should test its integration with your app using "Cucumber":http://cukes.info/.
+
+In config/environments/test.rb:
+
+<pre>
+config.gem 'webrat',
+  :version => '= 0.4.4'
+config.gem 'cucumber',
+  :version => '= 0.3.0'
+config.gem 'thoughtbot-factory_girl',
+  :lib     => 'factory_girl',
+  :source  => "http://gems.github.com", 
+  :version => '1.2.1'
+</pre>
+
+Vendor the gems:
+
+<pre>
+rake gems:install RAILS_ENV=test
+rake gems:unpack  RAILS_ENV=test
+</pre>
+
+Don't vendor nokogiri (due to its native extensions):
+
+@rm -rf vendor/gems/nokogiri-1.2.3@
+
+Run the Cucumber generator (if you haven't already) and Authuser's feature generator:
+
+<pre>
+script/generate cucumber
+script/generate authuser_features
+</pre>
+
+All of the files generated should be new with the exception of the features/support/paths.rb file. If you have not modified your paths.rb then you will be okay to replace it with this one. If you need to keep your paths.rb file then add these locations in your paths.rb manually:
+
+<pre>
+def path_to(page_name)
+  case page_name
+   ...
+  when /the sign up page/i
+   new_user_path
+  when /the sign in page/i
+   new_session_path
+  when /the password reset request page/i
+   new_password_path
+  ...
+end
+</pre>
+
+h2. Authors
+
+Authuser was extracted out of "Hoptoad":http://hoptoadapp.com. We merged the authentication code from two of thoughtbot's client's Rails apps and have since used it each time we need authentication. The following people have improved the library. Thank you!
+
+Dan Croak, Mike Burns, Jason Morrison, Joe Ferris, Eugene Bolshakov, Nick Quaranto, Josh Nichols, Mike Breen, Marcel Görner, Bence Nagy, Ben Mabey, Eloy Duran, Tim Pope, Mihai Anca, Mark Cornick, & Shay Arnett.
+
+h2. Questions?
+
+Ask the "mailing list":http://groups.google.com/group/thoughtbot-authuser
+
+h2. Suggestions, Bugs, Refactoring?
+
+Fork away and create a "Github Issue":http://github.com/thoughtbot/authuser/issues. Please don't send pull requests.
+

data/Rakefile

@@ -0,0 +1,72 @@
+require 'rake'
+require 'rake/testtask'
+require 'cucumber/rake/task'
+
+namespace :test do
+  Rake::TestTask.new(:all => ["generator:cleanup",
+                              "generator:generate"]) do |task|
+    task.libs << "lib"
+    task.libs << "test"
+    task.pattern = "test/**/*_test.rb"
+    task.verbose = false
+  end
+
+end
+
+generators = %w(authuser authuser_features)
+
+namespace :generator do
+  desc "Cleans up the test app before running the generator"
+  task :cleanup do
+    generators.each do |generator|
+      FileList["generators/#{generator}/templates/**/*.*"].each do |each|
+        file = "test/rails_root/#{each.gsub("generators/#{generator}/templates/",'')}"
+        File.delete(file) if File.exists?(file)
+      end
+    end
+
+    FileList["test/rails_root/db/**/*"].each do |each| 
+      FileUtils.rm_rf(each)
+    end
+    FileUtils.rm_rf("test/rails_root/vendor/plugins/authuser")
+    FileUtils.mkdir_p("test/rails_root/vendor/plugins")
+    authuser_root = File.expand_path(File.dirname(__FILE__))
+    system("ln -s #{authuser_root} test/rails_root/vendor/plugins/authuser")
+  end
+
+  desc "Run the generator on the tests"
+  task :generate do
+    generators.each do |generator|
+      system "cd test/rails_root && ./script/generate #{generator} && rake db:migrate db:test:prepare"
+    end
+  end
+end
+
+desc "Run the test suite"
+task :default => ['test:all', 'test:features']
+
+load 'lib/authuser/version.rb'
+
+gem_spec = Gem::Specification.new do |gem_spec|
+  gem_spec.name        = "authuser"
+  # gem_spec.version     = "0.1.1"
+  gem_spec.version     = "#{Authuser::Version::MAJOR}.#{Authuser::Version::MINOR}.#{Authuser::Version::PATCH}"
+  gem_spec.summary     = "Auth Users For Rails"
+  gem_spec.email       = "support@cizek.org"
+  gem_spec.homepage    = "http://github.com/dacz/authuser"
+  gem_spec.description = "User Auth For Rails, forked from Clearance."
+  gem_spec.authors     = ["Dan Croak", "Mike Burns", "Jason Morrison",
+                          "Joe Ferris", "Eugene Bolshakov", "Nick Quaranto",
+                          "Josh Nichols", "Mike Breen", "Marcel Görner",
+                          "Bence Nagy", "Ben Mabey", "Eloy Duran",
+                          "Tim Pope", "Mihai Anca", "Mark Cornick",
+                          "Shay Arnett", "David Cizek"]
+  gem_spec.files       = FileList["[A-Z]*", "{app,config,generators,lib,shoulda_macros,rails}/**/*"]
+end
+
+desc "Generate a gemspec file"
+task :gemspec do
+  File.open("#{gem_spec.name}.gemspec", 'w') do |f|
+    f.write gem_spec.to_yaml
+  end
+end

data/TODO.textile

@@ -0,0 +1,6 @@
+h1. To-do
+
+* Make insertion of Authuser::User into User model automatic from the generator.
+* Change generated README to include instruction about running the migration.
+* DO_NOT_REPLY, HOST refactoring.
+

data/app/controllers/authuser/confirmations_controller.rb

@@ -0,0 +1,48 @@
+class Authuser::ConfirmationsController < ApplicationController
+  unloadable
+
+  before_filter :forbid_confirmed_user,    :only => :new
+  before_filter :forbid_missing_token,     :only => :new
+  before_filter :forbid_non_existent_user, :only => :new
+  filter_parameter_logging :token
+
+  def new
+    create
+  end
+
+  def create
+    @user = ::User.find_by_id_and_token(params[:user_id], params[:token])
+    @user.confirm_email!
+
+    sign_user_in(@user)
+    flash[:success] = translate(:confirmed_email,
+      :scope   => [:authuser, :controllers, :confirmations],
+      :default => "Confirmed email and signed in.")
+    redirect_to url_after_create
+  end
+
+  private
+
+  def forbid_confirmed_user
+    user = ::User.find_by_id(params[:user_id])
+    if user && user.email_confirmed?
+      raise ActionController::Forbidden, "confirmed user"
+    end
+  end
+
+  def forbid_missing_token
+    if params[:token].blank?
+      raise ActionController::Forbidden, "missing token"
+    end
+  end
+
+  def forbid_non_existent_user
+    unless ::User.find_by_id_and_token(params[:user_id], params[:token])
+      raise ActionController::Forbidden, "non-existent user"
+    end
+  end
+
+  def url_after_create
+    root_url
+  end
+end

data/app/controllers/authuser/passwords_controller.rb

@@ -0,0 +1,69 @@
+class Authuser::PasswordsController < ApplicationController
+  unloadable
+
+  before_filter :forbid_missing_token,     :only => [:edit, :update]
+  before_filter :forbid_non_existent_user, :only => [:edit, :update]
+  filter_parameter_logging :password, :password_confirmation
+
+  def new
+    render :template => 'passwords/new'
+  end
+
+  def create
+    if user = ::User.find_by_email(params[:password][:email])
+      user.forgot_password!
+      ::AuthuserMailer.deliver_change_password user
+      flash[:notice] = translate(:deliver_change_password,
+        :scope   => [:authuser, :controllers, :passwords],
+        :default => "You will receive an email within the next few minutes. " <<
+                    "It contains instructions for changing your password.")
+      redirect_to url_after_create
+    else
+      flash.now[:failure] = translate(:unknown_email,
+        :scope   => [:authuser, :controllers, :passwords],
+        :default => "Unknown email.")
+      render :template => 'passwords/new'
+    end
+  end
+
+  def edit
+    @user = ::User.find_by_id_and_token(params[:user_id], params[:token])
+    render :template => 'passwords/edit'
+  end
+
+  def update
+    @user = ::User.find_by_id_and_token(params[:user_id], params[:token])
+
+    if @user.update_password(params[:user][:password],
+                             params[:user][:password_confirmation])
+      @user.confirm_email! unless @user.email_confirmed?
+      sign_user_in(@user)
+      flash[:success] = translate(:signed_in, :default => "Signed in.")
+      redirect_to url_after_update
+    else
+      render :template => 'passwords/edit'
+    end
+  end
+
+  private
+
+  def forbid_missing_token
+    if params[:token].blank?
+      raise ActionController::Forbidden, "missing token"
+    end
+  end
+
+  def forbid_non_existent_user
+    unless ::User.find_by_id_and_token(params[:user_id], params[:token])
+      raise ActionController::Forbidden, "non-existent user"
+    end
+  end
+
+  def url_after_create
+    new_session_url
+  end
+
+  def url_after_update
+    root_url
+  end
+end

data/app/controllers/authuser/sessions_controller.rb

@@ -0,0 +1,50 @@
+class Authuser::SessionsController < ApplicationController
+  unloadable
+
+  protect_from_forgery :except => :create
+  filter_parameter_logging :password
+
+  def new
+    render :template => 'sessions/new'
+  end
+
+  def create
+    @user = ::User.authenticate(params[:session][:email],
+                              params[:session][:password])
+    if @user.nil?
+      flash.now[:failure] = translate(:bad_email_or_password,
+        :scope   => [:authuser, :controllers, :sessions],
+        :default => "Bad email or password.")
+      render :template => 'sessions/new', :status => :unauthorized
+    else
+      if @user.email_confirmed?
+        sign_user_in(@user)
+        remember(@user) if remember?
+        flash[:success] = translate(:signed_in, :default =>  "Signed in.")
+        redirect_back_or url_after_create
+      else
+        ::AuthuserMailer.deliver_confirmation(@user)
+        deny_access(translate(:unconfirmed_email,
+          :scope   => [:authuser, :controllers, :sessions],
+          :default => "User has not confirmed email. " <<
+                      "Confirmation email will be resent."))
+      end
+    end
+  end
+
+  def destroy
+    forget(current_user)
+    flash[:success] = translate(:signed_out, :default =>  "Signed out.")
+    redirect_to url_after_destroy
+  end
+
+  private
+
+  def url_after_create
+    root_url
+  end
+
+  def url_after_destroy
+    new_session_url
+  end
+end

data/app/controllers/authuser/users_controller.rb

@@ -0,0 +1,31 @@
+class Authuser::UsersController < ApplicationController
+  unloadable
+
+  before_filter :redirect_to_root, :only => [:new, :create], :if => :signed_in?
+  filter_parameter_logging :password
+
+  def new
+    @user = ::User.new(params[:user])
+    render :template => 'users/new'
+  end
+
+  def create
+    @user = ::User.new params[:user]
+    if @user.save
+      ::AuthuserMailer.deliver_confirmation @user
+      flash[:notice] = translate(:deliver_confirmation,
+        :scope   => [:authuser, :controllers, :users],
+        :default => "You will receive an email within the next few minutes. " <<
+                    "It contains instructions for confirming your account.")
+      redirect_to url_after_create
+    else
+      render :template => 'users/new'
+    end
+  end
+
+  private
+
+  def url_after_create
+    new_session_url
+  end
+end

data/app/models/authuser_mailer.rb

@@ -0,0 +1,23 @@
+class AuthuserMailer < ActionMailer::Base
+
+  default_url_options[:host] = MAILER_HOST
+
+  def change_password(user)
+    from       MAILER_DO_NOT_REPLY
+    recipients user.email
+    subject    I18n.t(:change_password,
+                      :scope   => [:authuser, :models, :authuser_mailer],
+                      :default => "Change your password")
+    body       :user => user
+  end
+
+  def confirmation(user)
+    from       MAILER_DO_NOT_REPLY
+    recipients user.email
+    subject    I18n.t(:confirmation,
+                      :scope   => [:authuser, :models, :authuser_mailer],
+                      :default => "Account confirmation")
+    body      :user => user
+  end
+
+end