decidim-admin 0.22.0 → 0.23.0

data/app/commands/decidim/admin/create_oauth_application.rb

@@ -1,36 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  module Admin
-    # Creates an OAuthApplication.
-    class CreateOAuthApplication < Rectify::Command
-      # Initializes the command.
-      #
-      # form - The source fo data for this OAuthApplication.
-      def initialize(form)
-        @form = form
-      end
-
-      def call
-        return broadcast(:invalid) unless @form.valid?
-
-        @application = Decidim.traceability.create!(
-          OAuthApplication,
-          @form.current_user,
-          name: @form.name,
-          organization_name: @form.organization_name,
-          organization_url: @form.organization_url,
-          organization_logo: @form.organization_logo,
-          redirect_uri: @form.redirect_uri,
-          scopes: "public",
-          organization: @form.current_organization
-        )
-
-        broadcast(:ok, @application)
-      rescue ActiveRecord::RecordInvalid
-        @form.errors.add(:organization_logo, @application.errors[:organization_logo]) if @application.errors.include? :organization_logo
-        broadcast(:invalid)
-      end
-    end
-  end
-end

data/app/commands/decidim/admin/destroy_oauth_application.rb

@@ -1,39 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  module Admin
-    # This command deals with destroying an application from the admin panel.
-    class DestroyOAuthApplication < Rectify::Command
-      # Public: Initializes the command.
-      #
-      # application - The OAuthApplication to be destroyed.
-      # user        - The user that destroys the application.
-      def initialize(application, current_user)
-        @application = application
-        @current_user = current_user
-      end
-
-      # Public: Executes the command.
-      #
-      # Broadcasts :ok if it got destroyed
-      def call
-        destroy_application
-        broadcast(:ok)
-      end
-
-      private
-
-      attr_reader :application, :current_user
-
-      def destroy_application
-        Decidim.traceability.perform_action!(
-          "delete",
-          application,
-          current_user
-        ) do
-          application.destroy!
-        end
-      end
-    end
-  end
-end

data/app/commands/decidim/admin/update_oauth_application.rb

@@ -1,39 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  module Admin
-    # Updates the OAuth application given form data.
-    class UpdateOAuthApplication < Rectify::Command
-      # Initializes the command.
-      #
-      # application - The OAuthApplication to update.
-      # form        - The form object containing the data to update.
-      # user        - The user that updates the application.
-      def initialize(application, form, user)
-        @application = application
-        @form = form
-        @user = user
-      end
-
-      def call
-        return broadcast(:invalid) unless @form.valid?
-        return broadcast(:invalid) unless @user.organization == @application.organization
-
-        @application = Decidim.traceability.update!(
-          @application,
-          @user,
-          name: @form.name,
-          organization_name: @form.organization_name,
-          organization_url: @form.organization_url,
-          organization_logo: @form.organization_logo,
-          redirect_uri: @form.redirect_uri
-        )
-
-        broadcast(:ok, @application)
-      rescue ActiveRecord::RecordInvalid
-        @form.errors.add(:organization_logo, @application.errors[:organization_logo]) if @application.errors.include? :organization_logo
-        broadcast(:invalid)
-      end
-    end
-  end
-end

data/app/controllers/decidim/admin/oauth_applications_controller.rb

@@ -1,90 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  module Admin
-    # Controller that allows managing OAuth applications at the admin panel.
-    #
-    class OAuthApplicationsController < Admin::ApplicationController
-      def index
-        enforce_permission_to :read, :oauth_application
-        @oauth_applications = collection.page(params[:page]).per(15)
-      end
-
-      def show
-        @oauth_application = collection.find(params[:id])
-        enforce_permission_to :read, :oauth_application
-      end
-
-      def new
-        enforce_permission_to :create, :oauth_application
-        @form = form(OAuthApplicationForm).instance
-      end
-
-      def create
-        enforce_permission_to :create, :oauth_application
-
-        @form = form(OAuthApplicationForm).from_params(params)
-
-        CreateOAuthApplication.call(@form) do
-          on(:ok) do
-            flash[:notice] = I18n.t("oauth_applications.create.success", scope: "decidim.admin")
-            redirect_to action: :index
-          end
-
-          on(:invalid) do
-            flash.now[:alert] = I18n.t("oauth_applications.create.error", scope: "decidim.admin")
-            render :new
-          end
-        end
-      end
-
-      def edit
-        @oauth_application = collection.find(params[:id])
-        enforce_permission_to :update, :oauth_application, oauth_application: @oauth_application
-        @form = form(OAuthApplicationForm).from_model(@oauth_application)
-      end
-
-      def update
-        @oauth_application = collection.find(params[:id])
-        enforce_permission_to :update, :oauth_application, oauth_application: @oauth_application
-        @form = form(OAuthApplicationForm).from_params({ organization_logo: @oauth_application.organization_logo }.merge(params.to_unsafe_h))
-
-        UpdateOAuthApplication.call(@oauth_application, @form, current_user) do
-          on(:ok) do |_application|
-            flash[:notice] = I18n.t("oauth_applications.update.success", scope: "decidim.admin")
-            redirect_to action: :index
-          end
-
-          on(:invalid) do |application|
-            @oauth_application = application
-            flash.now[:error] = I18n.t("oauth_applications.update.error", scope: "decidim.admin")
-            render action: :edit
-          end
-        end
-      end
-
-      def destroy
-        @oauth_application = collection.find(params[:id])
-        enforce_permission_to :destroy, :oauth_application, oauth_application: @oauth_application
-
-        DestroyOAuthApplication.call(@oauth_application, current_user) do
-          on(:ok) do
-            flash[:notice] = I18n.t("oauth_applications.destroy.success", scope: "decidim.admin")
-            redirect_to action: :index
-          end
-
-          on(:invalid) do
-            flash.now[:error] = I18n.t("oauth_applications.destroy.error", scope: "decidim.admin")
-            redirect_to :back
-          end
-        end
-      end
-
-      private
-
-      def collection
-        @collection ||= current_organization.oauth_applications
-      end
-    end
-  end
-end

data/app/forms/decidim/admin/oauth_application_form.rb

@@ -1,32 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  module Admin
-    # The form that validates the data to construct a valid OAuthApplication.
-    class OAuthApplicationForm < Decidim::Form
-      mimic :oauth_application
-
-      attribute :name, String
-      attribute :organization_name, String
-      attribute :organization_url, String
-      attribute :organization_logo
-      attribute :redirect_uri, String
-
-      validates :name, :redirect_uri, :current_user, :current_organization, :organization_name, :organization_url, :organization_logo, presence: true
-      validates :organization_logo,
-                file_size: { less_than_or_equal_to: ->(_record) { Decidim.maximum_attachment_size } },
-                file_content_type: { allow: ["image/jpeg", "image/png"] }
-      validate :redirect_uri_is_ssl
-
-      private
-
-      def redirect_uri_is_ssl
-        return if redirect_uri.blank?
-
-        uri = URI.parse(redirect_uri)
-
-        errors.add(:redirect_uri, :must_be_ssl) if uri.host != "localhost" && uri.scheme != "https"
-      end
-    end
-  end
-end

data/app/views/decidim/admin/oauth_applications/_form.html.erb

@@ -1,19 +0,0 @@
-<div class="row column">
-  <%= form.text_field :name %>
-</div>
-
-<div class="row column">
-  <%= form.text_field :redirect_uri %>
-</div>
-
-<div class="row column">
-  <%= form.text_field :organization_name %>
-</div>
-
-<div class="row column">
-  <%= form.text_field :organization_url %>
-</div>
-
-<div class="row column">
-  <%= form.upload :organization_logo %>
-</div>

data/app/views/decidim/admin/oauth_applications/edit.html.erb

@@ -1,13 +0,0 @@
-<%= decidim_form_for(@form, html: { class: "form edit_oauth_application" }) do |f| %>
-  <div class="card">
-    <div class="card-divider">
-      <h2 class="card-title"><%= t ".title" %></h2>
-    </div>
-    <div class="card-section">
-      <%= render partial: "form", object: f %>
-    </div>
-  </div>
-  <div class="button--double form-general-submit">
-    <%= f.submit t(".save") %>
-  </div>
-<% end %>

data/app/views/decidim/admin/oauth_applications/index.html.erb

@@ -1,40 +0,0 @@
-<div class="card">
-  <div class="card-divider">
-    <h2 class="card-title">
-      <%= t ".title" %>
-      <% if allowed_to?(:create, :oauth_application) %>
-        <%= link_to t("actions.new", scope: "decidim.admin", name: t("models.oauth_application.name", scope: "decidim.admin").downcase), ["new", "oauth_application"], class: "button tiny button--title new" %>
-      <% end %>
-    </h2>
-  </div>
-  <div class="card-section">
-    <div class="table-scroll">
-      <table class="table-list">
-        <thead>
-          <tr>
-            <th><%= t("models.oauth_application.fields.name", scope: "decidim.admin") %></th>
-            <th><%= t("models.oauth_application.fields.created_at", scope: "decidim.admin") %></th>
-            <th></th>
-          </tr>
-        </thead>
-        <tbody>
-          <% @oauth_applications.each do |oauth_application| %>
-            <tr data-oauth_application-id="<%= oauth_application.id %>">
-              <td><%= link_to oauth_application.name, decidim_admin.oauth_application_path(oauth_application) %></td>
-              <td><%= l oauth_application.created_at, format: :long %></td>
-              <td class="table-list__actions">
-                <% if allowed_to?(:update, :oauth_application, oauth_application: oauth_application) %>
-                  <%= icon_link_to "pencil", decidim_admin.edit_oauth_application_path(oauth_application), t("actions.edit", scope: "decidim.admin"), class: "edit" %>
-                <% end %>
-
-                <% if allowed_to?(:destroy, :oauth_application, oauth_application: oauth_application) %>
-                  <%= icon_link_to "circle-x", decidim_admin.oauth_application_path(oauth_application), t("actions.destroy", scope: "decidim.admin"), method: :delete, data: { confirm: t(".confirm_delete") }, class: "action-icon--remove" %>
-                <% end %>
-              </td>
-            </tr>
-          <% end %>
-        </tbody>
-      </table>
-    </div>
-  </div>
-</div>

data/app/views/decidim/admin/oauth_applications/new.html.erb

@@ -1,13 +0,0 @@
-<%= decidim_form_for(@form, html: { class: "form new_oauth_application" }) do |f| %>
-  <div class="card">
-    <div class="card-divider">
-      <h2 class="card-title"><%= t ".title" %></h2>
-    </div>
-    <div class="card-section">
-      <%= render partial: "form", object: f %>
-    </div>
-  </div>
-  <div class="button--double form-general-submit">
-    <%= f.submit t(".save") %>
-  </div>
-<% end %>

data/app/views/decidim/admin/oauth_applications/show.html.erb

@@ -1,27 +0,0 @@
-<div class="card">
-  <div class="card-divider">
-    <h2 class="card-title"><%= @oauth_application.name %></h2>
-  </div>
-  <div class="card-section">
-    <dl>
-      <%= display_for @oauth_application,
-            { uid: :client_id },
-            { secret: :client_secret },
-            :organization_name,
-            :organization_url,
-            :redirect_uri %>
-
-      <dt><%= display_label(@oauth_application, :authorize_url) %></dt>
-      <dd><%= decidim.oauth_authorization_url(host: @oauth_application.owner.host) %></dd>
-
-      <dt><%= display_label(@oauth_application, :site) %></dt>
-      <dd><%= decidim.root_url(host: @oauth_application.owner.host) %></dd>
-
-      <dt><%= display_label(@oauth_application, :authorized_tokens) %></dt>
-      <dd><%= @oauth_application.authorized_tokens.count %></dd>
-
-      <dt><%= display_label(@oauth_application, :authorization_url) %></dt>
-      <dd><%= decidim.oauth_authorization_url(host: @oauth_application.owner.host, client_id: @oauth_application.uid, redirect_uri: @oauth_application.redirect_uri, response_type: "code") %></dd>
-    </dl>
-  </div>
-</div>