decidim-core 0.0.1.alpha9 → 0.0.1

data/app/types/decidim/user_type.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+module Decidim
+  # This type represents a User.
+  UserType = GraphQL::ObjectType.define do
+    name "User"
+    description "A user"
+
+    field :name, types.String, "The user's name"
+
+    field :avatarUrl, !types.String, "The user's avatar url" do
+      resolve ->(obj, _args, _ctx) { obj.avatar.url }
+    end
+  end
+end

data/app/uploaders/decidim/attachment_uploader.rb

@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+module Decidim
+  # This class deals with uploading attachments to a ParticipatoryProcess.
+  class AttachmentUploader < ApplicationUploader
+    include CarrierWave::MiniMagick
+
+    process :set_content_type_and_size_in_model
+    process :validate_dimensions
+    version :thumbnail, if: :image? do
+      process resize_to_fit: [nil, 237]
+    end
+    version :big, if: :image? do
+      process resize_to_limit: [nil, 1000]
+    end
+
+    protected
+
+    # CarrierWave automatically calls this method and validates the content
+    # type fo the temp file to match against any of these options.
+    def content_type_whitelist
+      [
+        %r{image\/},
+        %r{application\/vnd.oasis.opendocument},
+        %r{application\/vnd.ms-},
+        %r{application\/msword},
+        %r{application\/vnd.ms-word},
+        %r{application\/vnd.openxmlformats-officedocument},
+        %r{application\/vnd.oasis.opendocument},
+        %r{application\/pdf},
+        %r{application\/rtf}
+      ]
+    end
+
+    # Checks if the file is an image based on the content type. We need this so
+    # we only create different versions of the file when it's an image.
+    #
+    # new_file - The uploaded file.
+    #
+    # Returns a Boolean.
+    def image?(new_file)
+      new_file.content_type.start_with? "image"
+    end
+
+    # Copies the content type and file size to the model where this is mounted.
+    #
+    # Returns nothing.
+    def set_content_type_and_size_in_model
+      model.content_type = file.content_type if file.content_type
+      model.file_size = file.size
+    end
+
+    # A simple check to avoid DoS with maliciously crafted images, or just to
+    # avoid reckless users that upload gigapixels images.
+    #
+    # See https://hackerone.com/reports/390
+    def validate_dimensions
+      return unless image?(self)
+
+      manipulate! do |image|
+        raise CarrierWave::IntegrityError, I18n.t("carrierwave.errors.image_too_big") if image.dimensions.any? { |dimension| dimension > max_image_height_or_width }
+        image
+      end
+    end
+
+    def max_image_height_or_width
+      8000
+    end
+  end
+end

data/app/uploaders/decidim/avatar_uploader.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Decidim
+  # This class deals with uploading avatars to a User.
+  class AvatarUploader < ImageUploader
+    include CarrierWave::MiniMagick
+
+    process :validate_dimensions
+
+    def default_url(*)
+      ActionController::Base.helpers.asset_path("decidim/default-avatar.svg")
+    end
+  end
+end

data/app/uploaders/decidim/banner_image_uploader.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 module Decidim
   # This class deals with uploading banner images to ParticipatoryProcesses.
-  class BannerImageUploader < ApplicationUploader
+  class BannerImageUploader < ImageUploader
   end
 end

data/app/uploaders/decidim/hero_image_uploader.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 module Decidim
   # This class deals with uploading hero images to ParticipatoryProcesses.
-  class HeroImageUploader < ApplicationUploader
+  class HeroImageUploader < ImageUploader
   end
 end

data/app/uploaders/decidim/homepage_image_uploader.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+module Decidim
+  # This class deals with uploading hero images to ParticipatoryProcesses.
+  class HomepageImageUploader < ImageUploader
+    include CarrierWave::MiniMagick
+
+    version :big do
+      process resize_to_limit: [nil, 2000]
+    end
+  end
+end

data/app/uploaders/decidim/image_uploader.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+module Decidim
+  # This class deals with uploading hero images to ParticipatoryProcesses.
+  class ImageUploader < ApplicationUploader
+    include CarrierWave::MiniMagick
+
+    process :validate_size, :validate_dimensions
+
+    # CarrierWave automatically calls this method and validates the content
+    # type fo the temp file to match against any of these options.
+    def content_type_whitelist
+      [
+        %r{image\/}
+      ]
+    end
+
+    # A simple check to avoid DoS with maliciously crafted images, or just to
+    # avoid reckless users that upload gigapixels images.
+    #
+    # See https://hackerone.com/reports/390
+    def validate_dimensions
+      manipulate! do |image|
+        validation_error!(I18n.t("carrierwave.errors.image_too_big")) if image.dimensions.any? { |dimension| dimension > max_image_height_or_width }
+        image
+      end
+    end
+
+    def validate_size
+      manipulate! do |image|
+        validation_error!(I18n.t("carrierwave.errors.image_too_big")) if image.size > 10.megabytes
+        image
+      end
+    end
+
+    def max_image_height_or_width
+      8000
+    end
+
+    private
+
+    def validation_error!(text)
+      model.errors.add(mounted_as, text)
+      raise CarrierWave::IntegrityError, text
+    end
+  end
+end

data/app/uploaders/decidim/organization_logo_uploader.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+module Decidim
+  # This class deals with uploading hero images to ParticipatoryProcesses.
+  class OrganizationLogoUploader < ImageUploader
+    version :medium do
+      process resize_to_limit: [140, 45]
+    end
+  end
+end

data/app/views/decidim/devise/registrations/new.html.erb

@@ -38,7 +38,7 @@
 
             <fieldset>
               <div class="field">
-                <%= f.check_box :tos_agreement, label: t(".tos_agreement", link: link_to(t(".terms"), page_path(:terms))) %>
+                <%= f.check_box :tos_agreement, label: t(".tos_agreement", link: link_to(t(".terms"), page_path("terms-and-conditions"))) %>
               </div>
             </fieldset>
 

data/app/views/decidim/participatory_processes/_documents.html.erb

@@ -0,0 +1,26 @@
+<% if documents.any? %>
+  <div class="section documents">
+    <h4 class="section-heading"><%= t(".related_documents") %></h4>
+    <div class="card card--list">
+      <% documents.each do |document| %>
+        <div class="card--list__item">
+          <div class="card--list__text">
+            <div>
+              <a href="<%= document.url %>" class="card__link">
+                <h6 class="card--list__heading heading6">
+                  <%= translated_attribute(document.title) %> <small><%= document.file_type %> <%= number_to_human_size(document.file_size) %></small>
+                </h6>
+                <span class="text-small"><%= translated_attribute(document.description) %></span>
+              </a>
+            </div>
+          </div>
+          <div class="card--list__data">
+            <%= link_to document.url, class: "card--list__data__icon" do %>
+              <%= icon "cloud-download" %>
+            <% end %>
+          </div>
+        </div>
+      <% end %>
+    </div>
+  </div>
+<% end %>

data/app/views/decidim/participatory_processes/_photos.html.erb

@@ -0,0 +1,16 @@
+<% if photos.any? %>
+  <div class="section images">
+    <h4 class="section-heading"><%= t(".related_photos") %></h4>
+    <div class="gallery row">
+      <% photos.in_groups_of(3, false).each do |group| %>
+        <% group.each_with_index do |photo, index| %>
+          <div class="columns small-6 medium-4 <%= (index == 2 || photo == group.last ? "end" : "") %>">
+            <%= link_to photo.big_url do %>
+              <%= image_tag photo.thumbnail_url, class:"thumbnail", alt: strip_tags(translated_attribute(photo.description)) %>
+            <% end %>
+          </div>
+        <% end %>
+      <% end %>
+    </div>
+  </div>
+<% end %>

data/app/views/decidim/participatory_processes/_promoted_process.html.erb

@@ -5,7 +5,7 @@
         <%= link_to participatory_process_path(promoted_process), class: "card__link" do %>
           <h2 class="card__title"><%= translated_attribute promoted_process.title %></h2>
         <% end %>
-        <%= truncate(translated_attribute(promoted_process.description).html_safe, length: 630, separator: ' ') %>
+        <%== html_truncate(translated_attribute(promoted_process.description), length: 630, separator: ' ') %>
         <%= link_to participatory_process_path(promoted_process), class: "button secondary small hollow card__button" do %>
           <%= t(".more_info", scope: "layouts") %>
         <% end %>

data/app/views/decidim/participatory_processes/show.html.erb

@@ -1,15 +1,20 @@
-<main class="wrapper">
-  <%= render partial: "process_header_home" %>
-  <div class="row column">
-    <div class="row">
-      <div class="columns medium-7 mediumlarge-8">
-        <div class="section">
-          <div class="lead">
-            <%== translated_attribute(participatory_process.short_description) %>
-          </div>
-          <%== translated_attribute(participatory_process.description) %>
+<div class="row column">
+  <div class="row">
+    <div class="columns medium-7 mediumlarge-8">
+      <div class="section">
+        <div class="lead">
+          <%== translated_attribute(participatory_process.short_description) %>
         </div>
+        <%== translated_attribute(participatory_process.description) %>
       </div>
     </div>
   </div>
-</main>
+</div>
+<% if participatory_process.attachments.any? %>
+  <div class="row attachments">
+    <div class="columns large-8">
+      <%= render partial: "documents", locals: { documents: participatory_process.documents } %>
+      <%= render partial: "photos", locals: { photos: participatory_process.photos } %>
+    </div>
+  </div>
+<% end %>

data/app/views/kaminari/decidim/_first_page.html.erb

@@ -0,0 +1,11 @@
+<%# Link to the "First" page
+  - available local variables
+    url:           url to the first page
+    current_page:  a page object for the currently displayed page
+    total_pages:   total number of pages
+    per_page:      number of items to fetch per page
+    remote:        data-remote
+-%>
+<li class="first">
+  <%= link_to_unless current_page.first?, t('views.pagination.first').html_safe, url, remote: remote %>
+</li>

data/app/views/kaminari/decidim/_gap.html.erb

@@ -0,0 +1,8 @@
+<%# Non-link tag that stands for skipped pages...
+  - available local variables
+    current_page:  a page object for the currently displayed page
+    total_pages:   total number of pages
+    per_page:      number of items to fetch per page
+    remote:        data-remote
+-%>
+<li class="page gap"><%= t('views.pagination.truncate').html_safe %></li>

data/app/views/kaminari/decidim/_last_page.html.erb

@@ -0,0 +1,11 @@
+<%# Link to the "Last" page
+  - available local variables
+    url:           url to the last page
+    current_page:  a page object for the currently displayed page
+    total_pages:   total number of pages
+    per_page:      number of items to fetch per page
+    remote:        data-remote
+-%>
+<li class="last">
+  <%= link_to_unless current_page.last?, t('views.pagination.last').html_safe, url, remote: remote %>
+</li>

data/app/views/kaminari/decidim/_next_page.html.erb

@@ -0,0 +1,11 @@
+<%# Link to the "Next" page
+  - available local variables
+    url:           url to the next page
+    current_page:  a page object for the currently displayed page
+    total_pages:   total number of pages
+    per_page:      number of items to fetch per page
+    remote:        data-remote
+-%>
+<li class="pagination-next">
+  <%= link_to_unless current_page.last?, t('views.pagination.next').html_safe, url, rel: 'next', remote: remote %>
+</li>

data/app/views/kaminari/decidim/_page.html.erb

@@ -0,0 +1,12 @@
+<%# Link showing page number
+  - available local variables
+    page:          a page object for "this" page
+    url:           url to this page
+    current_page:  a page object for the currently displayed page
+    total_pages:   total number of pages
+    per_page:      number of items to fetch per page
+    remote:        data-remote
+-%>
+<li class="page<%= ' current' if page.current? %>">
+  <%= link_to_unless page.current?, page, url, {remote: remote, rel: page.rel} %>
+</li>

data/app/views/kaminari/decidim/_paginator.html.erb

@@ -0,0 +1,25 @@
+<%# The container tag
+  - available local variables
+    current_page:  a page object for the currently displayed page
+    total_pages:   total number of pages
+    per_page:      number of items to fetch per page
+    remote:        data-remote
+    paginator:     the paginator that renders the pagination tags inside
+-%>
+<%= paginator.render do -%>
+  <ul class="pagination text-center" role="navigation" aria-label="Pagination">
+    <%= first_page_tag unless current_page.first? %>
+    <%= prev_page_tag unless current_page.first? %>
+    <% each_page do |page| -%>
+      <% if page.display_tag? -%>
+        <%= page_tag page %>
+      <% elsif !page.was_truncated? -%>
+        <%= gap_tag %>
+      <% end -%>
+    <% end -%>
+    <% unless current_page.out_of_range? %>
+      <%= next_page_tag unless current_page.last? %>
+      <%= last_page_tag unless current_page.last? %>
+    <% end %>
+  </ul>
+<% end -%>

data/app/views/kaminari/decidim/_prev_page.html.erb

@@ -0,0 +1,11 @@
+<%# Link to the "Previous" page
+  - available local variables
+    url:           url to the previous page
+    current_page:  a page object for the currently displayed page
+    total_pages:   total number of pages
+    per_page:      number of items to fetch per page
+    remote:        data-remote
+-%>
+<li class="pagination-previous">
+  <%= link_to_unless current_page.first?, t('views.pagination.previous').html_safe, url, rel: 'prev', remote: remote %>
+</li>

data/app/views/layouts/decidim/_application.html.erb

@@ -0,0 +1,17 @@
+<!DOCTYPE html>
+<html>
+  <head>
+    <title><%= decidim_page_title %></title>
+    <%= csrf_meta_tags %>
+
+    <%= stylesheet_link_tag    'application', media: 'all', 'data-turbolinks-track': 'reload' %>
+    <%= javascript_include_tag 'application', 'data-turbolinks-track': 'reload' %>
+    <%= render partial: 'layouts/decidim/meta' %>
+  </head>
+
+  <body>
+    <%= render partial: 'layouts/decidim/header' %>
+    <%= yield %>
+    <%= render partial: 'layouts/decidim/footer' %>
+  </body>
+</html>

data/app/views/layouts/decidim/_footer.html.erb

@@ -3,11 +3,13 @@
       <div class="main-footer">
         <div class="row">
           <div class="medium-8 large-6 large-offset-3 column main__footer__nav">
+            <% if current_organization.static_pages.any? %>
             <ul class="footer-nav">
-              <li><%= link_to t('.about'), page_path("about") %></a></li>
-              <li><%= link_to t('.terms_of_use'), page_path("terms") %></a></li>
-              <li><%= link_to t('.accessibility'), page_path("accessibility") %></a></li>
+              <% current_organization.static_pages.each do |page| %>
+                <li><%= link_to translated_attribute(page.title), decidim.page_path(page) %></a></li>
+              <% end %>
             </ul>
+            <% end %>
           </div>
         </div>
       </div>

data/app/views/layouts/decidim/_header.html.erb

@@ -23,20 +23,7 @@
             <div class="logo-wrapper">
               <%= render partial: "layouts/decidim/logo" %>
             </div>
-            <div class="topbar__dropmenu language-choose">
-              <ul class="dropdown menu" data-dropdown-menu>
-                <li class="is-dropdown-submenu-parent">
-                  <%= link_to t(current_locale, scope: "locales") %>
-                  <% if available_locales.length > 1 %>
-                    <ul class="menu is-dropdown-submenu">
-                    <% available_locales.each do |locale| %>
-                      <li><%= link_to t(locale, scope: "locales"), locale_path(locale: locale), method: :post%></li>
-                    <% end %>
-                  <% end %>
-                  </ul>
-                </li>
-              </ul>
-            </div>
+            <%= render partial: "layouts/decidim/language_chooser" %>
             <div class="hide-for-medium topbar__menu">
               <button type="button" data-toggle="offCanvas">
                 <%= icon "menu", aria_label: t('.navigation'), role: "img" %>
@@ -46,14 +33,14 @@
               <div class="topbar__dropmenu topbar__user__logged">
                 <ul class="dropdown menu" data-dropdown-menu>
                   <li class="is-dropdown-submenu-parent show-for-medium">
-                    <%= link_to current_user.name, account_path %>
+                    <%= link_to current_user.name, decidim.account_path %>
                     <ul class="menu is-dropdown-subeenu js-append usermenu-off-canvas">
-                      <li><%= link_to t('.sign_out'), destroy_user_session_path, method: :delete, class: "sign-out-link" %></li>
+                      <%= render partial: "layouts/decidim/user_menu" %>
                     </ul>
                     <span data-set="nav-login-holder" class="show-for-medium">
                       <!-- Repeated due to dropdown limitations -->
                       <ul class="menu is-dropdown-submenu js-append usermenu-off-canvas">
-                        <li><%= link_to t('.sign_out'), destroy_user_session_path, method: :delete, class: "sign-out-link" %></li>
+                        <%= render partial: "layouts/decidim/user_menu" %>
                       </ul>
                     </span>
                   </li>
@@ -62,8 +49,8 @@
             <% else %>
               <div class="topbar__user show-for-medium" data-set="nav-login-holder">
                   <div class="topbar__user__login js-append">
-                    <%= link_to t('.sign_up'), new_user_registration_path, class: "sign-up-link" %>
-                    <%= link_to t('.sign_in'), new_user_session_path, class: "sign-in-link" %>
+                    <%= link_to t('.sign_up'), decidim.new_user_registration_path, class: "sign-up-link" %>
+                    <%= link_to t('.sign_in'), decidim.new_user_session_path, class: "sign-in-link" %>
                   </div>
               </div>
             <% end %>
@@ -74,10 +61,10 @@
             <div class="row">
               <ul class="main-nav">
                 <li>
-                  <%= active_link_to t("menu.home", scope: "decidim"), root_path, active: :exact, class: "main-nav__link", class_active: "main-nav__link-active" %>
+                  <%= active_link_to t("menu.home", scope: "decidim"), decidim.root_path, active: :exact, class: "main-nav__link", class_active: "main-nav__link--active" %>
                 </li>
                 <li>
-                  <%= active_link_to t("menu.processes", scope: "decidim"), participatory_processes_path, active: :inclusive, class: "main-nav__link", class_active: "main-nav__link--active" %>
+                  <%= active_link_to t("menu.processes", scope: "decidim"), decidim.participatory_processes_path, active: :inclusive, class: "main-nav__link", class_active: "main-nav__link--active" %>
                 </li>
               </ul>
             </div>