decidim-core 0.23.5 → 0.24.2

data/app/controllers/decidim/timeouts_controller.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+require "active_support/concern"
+
+module Decidim
+  # Tells/Extends time before inactivity warning or automatic logout.
+  class TimeoutsController < Decidim::ApplicationController
+    prepend_before_action :skip_timeout, only: :seconds_until_timeout
+
+    def skip_timeout
+      request.env["devise.skip_timeoutable"] = true
+    end
+
+    def seconds_until_timeout
+      time_remaining = current_user ? ::Devise.timeout_in - (Time.current - Time.zone.at(user_session["last_request_at"])) : 0
+      respond_to do |format|
+        format.json { render json: { seconds_remaining: time_remaining.to_i }, status: :ok }
+      end
+    end
+
+    # If user wants to continue session after inactivity warning.
+    def heartbeat
+      respond_to do |format|
+        format.js
+      end
+    end
+  end
+end

data/app/controllers/decidim/user_activities_controller.rb

@@ -6,10 +6,15 @@ module Decidim
     include Paginable
     include UserGroups
     include FilterResource
+    include Flaggable
 
     helper Decidim::ResourceHelper
     helper_method :activities, :resource_types, :user
 
+    def index
+      raise ActionController::RoutingError, "Blocked User" if user&.blocked? && !current_user&.admin?
+    end
+
     private
 
     def user

data/app/controllers/decidim/user_timeline_controller.rb

@@ -6,6 +6,7 @@ module Decidim
     include Paginable
     include UserGroups
     include FilterResource
+    include Flaggable
 
     helper Decidim::ResourceHelper
     helper_method :activities, :resource_types, :user

data/app/events/decidim/demoted_membership_event.rb

@@ -18,11 +18,11 @@ module Decidim
     end
 
     def user_group_nickname
-      extra.dig("user_group_nickname")
+      extra["user_group_nickname"]
     end
 
     def user_group_name
-      extra.dig("user_group_name")
+      extra["user_group_name"]
     end
   end
 end

data/app/events/decidim/invited_to_group_event.rb

@@ -23,11 +23,11 @@ module Decidim
     end
 
     def user_group_nickname
-      extra.dig("user_group_nickname")
+      extra["user_group_nickname"]
     end
 
     def user_group_name
-      extra.dig("user_group_name")
+      extra["user_group_name"]
     end
   end
 end

data/app/events/decidim/join_request_accepted_event.rb

@@ -18,11 +18,11 @@ module Decidim
     end
 
     def user_group_nickname
-      extra.dig("user_group_nickname")
+      extra["user_group_nickname"]
     end
 
     def user_group_name
-      extra.dig("user_group_name")
+      extra["user_group_name"]
     end
   end
 end

data/app/events/decidim/join_request_created_event.rb

@@ -18,11 +18,11 @@ module Decidim
     end
 
     def user_group_nickname
-      extra.dig("user_group_nickname")
+      extra["user_group_nickname"]
     end
 
     def user_group_name
-      extra.dig("user_group_name")
+      extra["user_group_name"]
     end
   end
 end

data/app/events/decidim/join_request_rejected_event.rb

@@ -18,11 +18,11 @@ module Decidim
     end
 
     def user_group_nickname
-      extra.dig("user_group_nickname")
+      extra["user_group_nickname"]
     end
 
     def user_group_name
-      extra.dig("user_group_name")
+      extra["user_group_name"]
     end
   end
 end

data/app/events/decidim/promoted_to_admin_event.rb

@@ -18,11 +18,11 @@ module Decidim
     end
 
     def user_group_nickname
-      extra.dig("user_group_nickname")
+      extra["user_group_nickname"]
     end
 
     def user_group_name
-      extra.dig("user_group_name")
+      extra["user_group_name"]
     end
   end
 end

data/app/events/decidim/removed_from_group_event.rb

@@ -18,11 +18,11 @@ module Decidim
     end
 
     def user_group_nickname
-      extra.dig("user_group_nickname")
+      extra["user_group_nickname"]
     end
 
     def user_group_name
-      extra.dig("user_group_name")
+      extra["user_group_name"]
     end
   end
 end

data/app/forms/decidim/account_form.rb

@@ -20,7 +20,7 @@ module Decidim
 
     validates :name, presence: true
     validates :email, presence: true, 'valid_email_2/email': { disposable: true }
-    validates :nickname, presence: true, format: /\A[\w\-]+\z/
+    validates :nickname, presence: true, format: Decidim::User::REGEXP_NICKNAME
 
     validates :nickname, length: { maximum: Decidim::User.nickname_max_length, allow_blank: true }
     validates :password, confirmation: true
@@ -37,7 +37,7 @@ module Decidim
     def personal_url
       return if super.blank?
 
-      return "http://" + super unless super.match?(%r{\A(http|https)://}i)
+      return "http://#{super}" unless super.match?(%r{\A(http|https)://}i)
 
       super
     end

data/app/forms/decidim/invite_user_form.rb

@@ -16,7 +16,7 @@ module Decidim
     validates :email, :name, :organization, :invitation_instructions, presence: true
     validates :role, inclusion: { in: Decidim::User::Roles.all }
 
-    validates :name, format: { with: /\A(?!.*[<>?%&\^*#@\(\)\[\]\=\+\:\;\"\{\}\\\|])/ }
+    validates :name, format: { with: /\A(?!.*[<>?%&\^*#@()\[\]=+:;"{}\\|])/ }
     validate :admin_uniqueness
 
     def email
@@ -43,7 +43,7 @@ module Decidim
     private
 
     def admin_uniqueness
-      errors.add(:email, :taken) if organization.admins.where(email: email).exists?
+      errors.add(:email, :taken) if organization.admins.exists?(email: email)
     end
   end
 end

data/app/forms/decidim/messaging/conversation_form.rb

@@ -6,7 +6,7 @@ module Decidim
     class ConversationForm < Decidim::Form
       mimic :conversation
 
-      attribute :body, String
+      attribute :body, Decidim::Attributes::CleanString
       attribute :recipient_id, Integer
 
       validates :body, :recipient, presence: true

data/app/forms/decidim/messaging/message_form.rb

@@ -6,7 +6,7 @@ module Decidim
     class MessageForm < Decidim::Form
       mimic :message
 
-      attribute :body, String
+      attribute :body, Decidim::Attributes::CleanString
 
       validates :body, presence: true
     end

data/app/forms/decidim/notifications_settings_form.rb

@@ -7,6 +7,7 @@ module Decidim
     mimic :user
 
     attribute :email_on_notification, Boolean
+    attribute :email_on_moderations, Boolean
     attribute :newsletter_notifications, Boolean
     attribute :notifications_from_followed, Boolean
     attribute :notifications_from_own_activity, Boolean
@@ -40,5 +41,24 @@ module Decidim
     def direct_message_types
       allow_public_contact ? "all" : "followed-only"
     end
+
+    def user_is_moderator?(user)
+      participatory_space_types.each do |participatory_space_type|
+        participatory_space_type.constantize.all.each do |participatory_space|
+          return true if participatory_space.moderators.include?(user)
+        end
+      end
+      false
+    end
+
+    private
+
+    def participatory_space_types
+      participatory_space_types = []
+      Decidim.participatory_space_manifests.each do |manifest|
+        participatory_space_types << manifest.model_class_name.to_s
+      end
+      participatory_space_types
+    end
   end
 end

data/app/forms/url_validator.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+# A custom validator to check that the field value is a URL.
+#
+#   validates :my_url, url: true
+#
+class UrlValidator < ActiveModel::EachValidator
+  def validate_each(record, attribute, value)
+    record.errors[attribute] << (options[:message] || "must be a valid URL") unless url_valid?(value)
+  end
+
+  # a URL may be technically well-formed but may
+  # not actually be valid, so this checks for both.
+  def url_valid?(url)
+    url = URI.parse(url)
+    (url.is_a?(URI::HTTP) || url.is_a?(URI::HTTPS)) && url.host.present?
+  rescue URI::InvalidURIError
+    false
+  end
+end

data/app/helpers/decidim/action_authorization_helper.rb

@@ -50,6 +50,7 @@ module Decidim
 
     private
 
+    # rubocop: disable Metrics/PerceivedComplexity
     def authorized_to(tag, action, arguments, block)
       if block
         body = block
@@ -85,6 +86,7 @@ module Decidim
         send("#{tag}_to", body, url, html_options)
       end
     end
+    # rubocop: enable Metrics/PerceivedComplexity
 
     def modal_path(action, resource)
       resource_params = if resource

data/app/helpers/decidim/application_helper.rb

@@ -7,6 +7,7 @@ module Decidim
     include Decidim::ScopesHelper
     include Decidim::ContextualHelpHelper
     include Decidim::AmendmentsHelper
+    include Decidim::CacheHelper
 
     # Truncates a given text respecting its HTML tags.
     #
@@ -22,7 +23,7 @@ module Decidim
       options[:tail] = options.delete(:separator) || options[:tail] || "..."
       options[:count_tags] ||= false
       options[:count_tail] ||= false
-      options[:tail_before_final_tag] ||= true
+      options[:tail_before_final_tag] = true unless options.has_key?(:tail_before_final_tag)
 
       Truncato.truncate(text, options)
     end
@@ -98,7 +99,6 @@ module Decidim
     # Renders the cell contents.
     def cell(name, model, options = {}, &block)
       options = { context: { current_user: current_user } }.deep_merge(options)
-
       super(name, model, options, &block)
     end
 

data/app/helpers/decidim/cache_helper.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Decidim
+  # Helper overrides for the ActionView::Helpers::CacheHelper in order to take
+  # locale into account for fragment caching.
+  module CacheHelper
+    # See: https://git.io/J3ouj
+    def cache(name = {}, options = {}, &block)
+      name = Array(name) + [current_locale]
+
+      super(name, options, &block)
+    end
+  end
+end

data/app/helpers/decidim/cells_helper.rb

@@ -33,5 +33,11 @@ module Decidim
 
       true
     end
+
+    def user_flaggable?
+      return unless context[:controller].try(:flaggable_controller?)
+
+      true
+    end
   end
 end

data/app/helpers/decidim/filters_helper.rb

@@ -29,6 +29,15 @@ module Decidim
       end
     end
 
+    def filter_cache_hash(filter, type = nil)
+      hash = []
+      hash << "decidim/proposals/filters"
+      hash << type.to_s if type.present?
+      hash << Digest::MD5.hexdigest(filter.to_json)
+
+      hash.join("/")
+    end
+
     private
 
     # Creates a unique namespace for a filter form to prevent dupliacte IDs in

data/app/helpers/decidim/messaging/conversation_helper.rb

@@ -6,7 +6,7 @@ module Decidim
       #
       # Generates a visualization of users for listing conversations threads
       #
-      def username_list(users, shorten = false)
+      def username_list(users, shorten: false)
         return users.pluck(:name).join(", ") unless shorten
         return users.pluck(:name).join(", ") unless users.count > 3
 
@@ -29,6 +29,16 @@ module Decidim
         end
       end
 
+      #
+      # Same as #link_to_current_or_new_conversation_with, but with a text body instead of an icon
+      #
+      # Links to the conversation between the current user and another user
+      #
+      def text_link_to_current_or_new_conversation_with(user, body = t("decidim.profiles.show.send_private_message"))
+        conversation_path = current_or_new_conversation_path_with(user)
+        link_to body, conversation_path, title: body if conversation_path
+      end
+
       #
       # Finds the right path to the conversation the current user and another
       # user (the interlocutor).

data/app/helpers/decidim/newsletters_helper.rb

@@ -9,17 +9,15 @@ module Decidim
     # And replace "%{name}" on the subject or content of newsletter to the user Name
     # for example transform "%{name}" to "User Name"
     def parse_interpolations(content, user = nil, id = nil)
-      if Decidim.config.track_newsletter_links
-        if id.present? && user.present?
-          host = user.organization.host.to_s
-          campaign = "newsletter_#{id}"
+      if Decidim.config.track_newsletter_links && id.present? && user.present?
+        host = user.organization.host.to_s
+        campaign = "newsletter_#{id}"
 
-          links = content.scan(/href\s*=\s*"([^"]*)"/)
+        links = content.scan(/href\s*=\s*"([^"]*)"/)
 
-          links.each do |link|
-            link_replaced = link.first + utm_codes(host, campaign)
-            content = content.gsub(/href\s*=\s*"([^"]*#{link.first})"/, %(href="#{link_replaced}"))
-          end
+        links.each do |link|
+          link_replaced = link.first + utm_codes(host, campaign)
+          content = content.gsub(/href\s*=\s*"([^"]*#{link.first})"/, %(href="#{link_replaced}"))
         end
       end
 

data/app/helpers/decidim/scopes_helper.rb

@@ -67,7 +67,7 @@ module Decidim
     # checkboxes_on_top - Show picker values on top (default) or below the picker prompt (only for multiple pickers)
     #
     # Returns nothing.
-    def scopes_picker_filter(form, name, checkboxes_on_top = true)
+    def scopes_picker_filter(form, name, checkboxes_on_top: true)
       options = {
         multiple: true,
         legend_title: I18n.t("decidim.scopes.scopes"),

data/app/jobs/decidim/block_user_job.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Decidim
+  class BlockUserJob < ApplicationJob
+    queue_as :block_user
+
+    def perform(user, justification)
+      BlockUserMailer.notify(user, justification).deliver_now
+    end
+  end
+end

data/app/jobs/decidim/export_job.rb

@@ -4,12 +4,12 @@ module Decidim
   class ExportJob < ApplicationJob
     queue_as :default
 
-    def perform(user, component, name, format)
+    def perform(user, component, name, format, resource_id = nil)
       export_manifest = component.manifest.export_manifests.find do |manifest|
         manifest.name == name.to_sym
       end
 
-      collection = export_manifest.collection.call(component, user)
+      collection = export_manifest.collection.call(component, user, resource_id)
       serializer = export_manifest.serializer
 
       export_data = Decidim::Exporters.find_exporter(format).new(collection, serializer).export