decidim-decidim_awesome 0.12.0 → 0.12.4

data/app/packs/src/vendor/form_builder_langs/zh-CN.lang

@@ -0,0 +1,100 @@
+NATIVE_NAME = 简体中文
+ENGLISH_NAME = Chinese
+
+addOption = 新增选项
+number = 数字
+allFieldsRemoved = 所有字段已删除
+allowSelect = 允许选择
+autocomplete = 自动完成
+button = 按钮
+cannotBeEmpty = 此字段不能为空
+checkboxGroup = 复选框组
+checkbox = 复选框
+checkboxes = 复选框
+class = CSS样式
+clearAllMessage = 您确定要清空所有字段吗?
+clear = 清除所有
+close = 关闭
+content = 内容
+copy = 复制
+copyButtonTooltip=复制
+dateField = 日期字段
+description = 帮助信息
+descriptionField = 描述
+devMode = 开发者模式
+editNames = 编辑名称
+editorTitle = 表单元素
+editXML = 编辑XML
+fieldDeleteWarning: false
+fieldVars = 字段变量
+fieldNonEditable = 此字段不允许修改。
+fieldRemoveWarning = 您确定要移除此字段吗?
+fileUpload = 文件上传
+formUpdated = 表单已更新
+getStarted = 请从右边拖拽原件到此为止。
+header = 表头
+hide = 编辑
+hidden = 隐藏域
+label = 标签
+labelEmpty = 标签字段不能为空
+limitRole = 角色受限
+mandatory = 强制填写
+maxlength = 最大长度
+minOptionMessage = 此字段至少需要选择两项
+name = 名称
+no = 否
+off = 关
+on = 开
+option = 选项
+optional = 可选
+optionEmpty = 请输入选择
+paragraph = 段落
+placeholder = 占位符
+placeholder.value = 值
+placeholder.label = 标签
+placeholder.text = 请输入文字
+placeholder.textarea = 请输入文字
+placeholder.email = 请输入邮件地址
+placeholder.placeholder = 占位符
+placeholder.className = 输入类名，以空格分开
+placeholder.password = 请输入密码
+preview = 预览
+radioGroup = 单选组
+radio = 单选框
+removeMessage = 移除元件
+remove = ×
+required = 必填
+richText = 富文本框
+roles = 访问
+save = 保存
+selectOptions = 选项
+select = 选择
+selectColor = 选择颜色
+selectionsMessage = 允许多选
+size = 大小
+sizes = 大小
+sizes.xs = 最小
+sizes.sm = 小
+sizes.m = 中
+sizes.lg = 大
+style = 样式
+styles = 样式
+styles.btn = 按钮样式
+styles.btn.default = 默认样式
+styles.btn.danger = 危险
+styles.btn.info = 一般信息
+styles.btn.primary = 主样式
+styles.btn.success = 成功
+styles.btn.warning = 警告
+subtype = 格式
+text = 单行文本
+password = 密码
+email = 邮箱
+color = 颜色
+tel = 电话
+textArea = 多行文本
+toggle = 弹出提示
+warning = 警告!
+viewXML = </>
+viewJSON = { }
+yes = 是

data/app/packs/src/vendor/form_builder_langs/zh-TW.lang

@@ -0,0 +1,94 @@
+NATIVE_NAME = 繁體中文(台灣)
+ENGLISH_NAME = Chinese (Taiwan)
+
+addOption = 新增選項
+allFieldsRemoved = 所有欄位已移除
+allowSelect = 允許選擇
+autocomplete = 自動完成
+button = 按鈕
+cannotBeEmpty = 此欄位不能是空白
+checkboxGroup = 核取方塊群組
+checkbox = 核取方塊
+checkboxes = 核取方塊組
+class = CSS 類別
+clearAllMessage = 你確定要移除所有的項目嗎?
+clear = 清除
+close = 關閉
+content = 內容
+copy = 複製到剪貼簿
+dateField = 日期欄位
+description = 描述
+descriptionField = 描述欄位
+devMode = 開發者模式
+editNames = 編輯名稱
+editorTitle = 表單元件
+editXML = 編輯 XML
+fieldDeleteWarning: false
+fieldVars = 欄位變數
+fieldNonEditable = 此欄位無法修改。
+fieldRemoveWarning = 你確定要移除此欄位嗎?
+fileUpload = 檔案上傳
+formUpdated = 已更新表單
+getStarted = 請拖拉表單元件到此區域。
+header = 標頭
+hide = 隱藏
+hidden = 隱藏輸入欄位
+label = 標籤
+labelEmpty = 標籤欄位名稱不能是空白的
+limitRole = 限制可讀取的角色 :
+mandatory = 強制性的
+maxlength = 最大長度
+minOptionMessage = 此欄位至少要兩個選項
+name = 名稱
+no = 否
+off = 關
+on = 開
+option = 選項
+optional = 可選的
+optionEmpty = 請填入選項值
+paragraph = 段落
+placeholder = 占位符
+placeholder.value = 值
+placeholder.label = 標籤
+placeholder.text = 請輸入一些文字
+placeholder.textarea = 請輸入文字
+placeholder.email = 請輸入你的電子郵件
+placeholder.placeholder = 占位符
+placeholder.className = 多個類別時，請用空白隔開即可。
+placeholder.password = 請輸入密碼
+preview = 預覽
+radioGroup = 單選群組
+radio = 單選
+removeMessage = 移除元件
+remove = ×
+required = 必要的
+richText = 文字編輯框
+roles = 存取
+save = 儲存
+selectOptions = 選項
+select = 選擇
+selectColor = 選擇顏色
+selectionsMessage = 允許多重選擇
+size = 大小
+sizes = 大小
+sizes.xs = 最小
+sizes.sm = 小
+sizes.m = 中
+sizes.lg = 大
+style = 樣式
+styles = 樣式
+styles.btn = 按鈕樣式
+styles.btn.default = Default
+styles.btn.danger = Danger
+styles.btn.info = Info
+styles.btn.primary = Primary
+styles.btn.success = Success
+styles.btn.warning = Warning
+subtype = 格式
+text = 文字欄位
+textArea = 文字區塊
+toggle = 彈出提示
+warning = 警告!
+viewXML = 顯示 XML
+viewJSON = { }
+yes = 是

data/app/packs/src/vendor/hashcash.js

@@ -0,0 +1,83 @@
+// http://www.hashcash.org/docs/hashcash.html
+// <input type="hidden" name="hashcash" data-hashcash="{resource: 'site.example', bits: 16}"/>
+
+import Stamp from "src/vendor/stamp"
+
+export default class Hashcash {
+  static default = {
+    version: 1,
+    bits: 20,
+    extension: null,
+  }
+
+  constructor(input) {
+    this.options = JSON.parse(input.getAttribute("data-hashcash"))
+    this.input = input
+    this.disableParentForm()
+    this.input.dispatchEvent(new CustomEvent("hashcash:mint", {bubbles: true}))
+
+    this.mint((stamp) => {
+      this.input.value = stamp.toString()
+      console.log("Hashcash stamp: ", stamp)
+      console.log("Hashcash input: ", this.input.value)
+      this.enableParentForm()
+      this.input.dispatchEvent(new CustomEvent("hashcash:minted", {bubbles: true, detail: {stamp: stamp}}))
+    })
+  }
+
+  static setup() {
+    if (document.readyState != "loading") {
+      var input = document.querySelector("input#hashcash")
+      input && new Hashcash(input)
+    } else
+      document.addEventListener("DOMContentLoaded", Hashcash.setup )
+  }
+
+  setSubmitText(submit, text) {
+    if (!text) {
+      return
+    }
+    if (submit.tagName == "BUTTON") {
+      !submit.originalValue && (submit.originalValue = submit.innerHTML)
+      submit.innerHTML = text
+    } else {
+      !submit.originalValue && (submit.originalValue = submit.value)
+      submit.value = text
+    }
+  }
+  
+  disableParentForm() {
+    this.input.form.querySelectorAll("[type=submit]").forEach((submit) => {    
+      this.setSubmitText(submit, this.options["waiting_message"])
+      submit.disabled = true
+    })
+  }
+  
+  enableParentForm() {
+    this.input.form.querySelectorAll("[type=submit]").forEach((submit) => {
+      this.setSubmitText(submit, submit.originalValue)
+      submit.disabled = null
+    })
+  }
+
+  mint(callback) {
+    var options = this.options
+    var resource = this.options.resource
+    // Format date to YYMMDD
+    var date = new Date
+    var year = date.getFullYear().toString()
+    year = year.slice(year.length - 2, year.length)
+    var month = (date.getMonth() + 1).toString().padStart(2, "0")
+    var day = date.getDate().toString().padStart(2, "0")
+  
+    var stamp = new Stamp(
+      options.version || Hashcash.default.version,
+      options.bits || Hashcash.default.bits,
+      options.date || year + month + day,
+      resource,
+      options.extension || Hashcash.default.extension,
+      options.rand || Math.random().toString(36).substr(2, 10),
+    )
+    return stamp.work(callback)
+  }
+}

data/app/packs/src/vendor/sha1.js

@@ -0,0 +1,143 @@
+/**
+ * Secure Hash Algorithm (SHA1)
+ * http://www.webtoolkit.info/
+ **/
+export default function SHA1(msg) {
+  var blockstart;
+  var i, j;
+  var W = new Array(80);
+  var H0 = 0x67452301;
+  var H1 = 0xEFCDAB89;
+  var H2 = 0x98BADCFE;
+  var H3 = 0x10325476;
+  var H4 = 0xC3D2E1F0;
+  var A, B, C, D, E;
+  var temp;
+  msg = Utf8Encode(msg);
+  var msg_len = msg.length;
+  var word_array = new Array();
+  for (i = 0; i < msg_len - 3; i += 4) {
+    j = msg.charCodeAt(i) << 24 | msg.charCodeAt(i + 1) << 16 |
+      msg.charCodeAt(i + 2) << 8 | msg.charCodeAt(i + 3);
+    word_array.push(j);
+  }
+  switch (msg_len % 4) {
+    case 0:
+      i = 0x080000000;
+      break;
+    case 1:
+      i = msg.charCodeAt(msg_len - 1) << 24 | 0x0800000;
+      break;
+    case 2:
+      i = msg.charCodeAt(msg_len - 2) << 24 | msg.charCodeAt(msg_len - 1) << 16 | 0x08000;
+      break;
+    case 3:
+      i = msg.charCodeAt(msg_len - 3) << 24 | msg.charCodeAt(msg_len - 2) << 16 | msg.charCodeAt(msg_len - 1) << 8 | 0x80;
+      break;
+  }
+  word_array.push(i);
+  while ((word_array.length % 16) != 14) word_array.push(0);
+  word_array.push(msg_len >>> 29);
+  word_array.push((msg_len << 3) & 0x0ffffffff);
+  for (blockstart = 0; blockstart < word_array.length; blockstart += 16) {
+    for (i = 0; i < 16; i++) W[i] = word_array[blockstart + i];
+    for (i = 16; i <= 79; i++) W[i] = rotate_left(W[i - 3] ^ W[i - 8] ^ W[i - 14] ^ W[i - 16], 1);
+    A = H0;
+    B = H1;
+    C = H2;
+    D = H3;
+    E = H4;
+    for (i = 0; i <= 19; i++) {
+      temp = (rotate_left(A, 5) + ((B & C) | (~B & D)) + E + W[i] + 0x5A827999) & 0x0ffffffff;
+      E = D;
+      D = C;
+      C = rotate_left(B, 30);
+      B = A;
+      A = temp;
+    }
+    for (i = 20; i <= 39; i++) {
+      temp = (rotate_left(A, 5) + (B ^ C ^ D) + E + W[i] + 0x6ED9EBA1) & 0x0ffffffff;
+      E = D;
+      D = C;
+      C = rotate_left(B, 30);
+      B = A;
+      A = temp;
+    }
+    for (i = 40; i <= 59; i++) {
+      temp = (rotate_left(A, 5) + ((B & C) | (B & D) | (C & D)) + E + W[i] + 0x8F1BBCDC) & 0x0ffffffff;
+      E = D;
+      D = C;
+      C = rotate_left(B, 30);
+      B = A;
+      A = temp;
+    }
+    for (i = 60; i <= 79; i++) {
+      temp = (rotate_left(A, 5) + (B ^ C ^ D) + E + W[i] + 0xCA62C1D6) & 0x0ffffffff;
+      E = D;
+      D = C;
+      C = rotate_left(B, 30);
+      B = A;
+      A = temp;
+    }
+    H0 = (H0 + A) & 0x0ffffffff;
+    H1 = (H1 + B) & 0x0ffffffff;
+    H2 = (H2 + C) & 0x0ffffffff;
+    H3 = (H3 + D) & 0x0ffffffff;
+    H4 = (H4 + E) & 0x0ffffffff;
+  }
+  return [H0, H1, H2, H3, H4]
+}
+
+export function hexSha1(msg) {
+  var array = SHA1(msg)
+  return cvt_hex(array[0]) + cvt_hex(array[1]) + cvt_hex(array[2]) + cvt_hex(array3) + cvt_hex(array[4])
+}
+
+function rotate_left(n, s) {
+  var t4 = (n << s) | (n >>> (32 - s));
+  return t4;
+};
+
+function lsb_hex(val) {
+  var str = '';
+  var i;
+  var vh;
+  var vl;
+  for (i = 0; i <= 6; i += 2) {
+    vh = (val >>> (i * 4 + 4)) & 0x0f;
+    vl = (val >>> (i * 4)) & 0x0f;
+    str += vh.toString(16) + vl.toString(16);
+  }
+  return str;
+};
+
+function cvt_hex(val) {
+  var str = '';
+  var i;
+  var v;
+  for (i = 7; i >= 0; i--) {
+    v = (val >>> (i * 4)) & 0x0f;
+    str += v.toString(16);
+  }
+  return str;
+};
+
+function Utf8Encode(string) {
+  string = string.replace(/\r\n/g, '\n');
+  var utftext = '';
+  for (var n = 0; n < string.length; n++) {
+    var c = string.charCodeAt(n);
+    if (c < 128) {
+      utftext += String.fromCharCode(c);
+    } else if ((c > 127) && (c < 2048)) {
+      utftext += String.fromCharCode((c >> 6) | 192);
+      utftext += String.fromCharCode((c & 63) | 128);
+    } else {
+      utftext += String.fromCharCode((c >> 12) | 224);
+      utftext += String.fromCharCode(((c >> 6) & 63) | 128);
+      utftext += String.fromCharCode((c & 63) | 128);
+    }
+  }
+  return utftext;
+};
+

data/app/packs/src/vendor/stamp.js

@@ -0,0 +1,50 @@
+import SHA1 from "src/vendor/sha1"
+
+export default class Stamp {
+  constructor(version, bits, date, resource, extension, rand, counter = 0) {
+    this.version = version
+    this.bits = bits
+    this.date = date
+    this.resource = resource
+    this.extension = extension
+    this.rand = rand
+    this.counter = counter
+  }
+  
+  static parse(string) {
+    const args = string.split(":")
+    return new Stamp(args[0], args[1], args[2], args[3], args[4], args[5], args[6])
+  }
+  
+  toString() {
+    return [this.version, this.bits, this.date, this.resource, this.extension, this.rand, this.counter].join(":")
+  }
+  
+  // Trigger the given callback when the problem is solved.
+  // In order to not freeze the page, setTimeout is called every 100ms to let some CPU to other tasks.
+  work(callback) {
+    this.startClock()
+    const timer = performance.now()
+    while (!this.check())
+      if (this.counter++ && performance.now() - timer > 100)
+        return setTimeout(this.work.bind(this), 0, callback)
+    this.stopClock()
+    callback(this)
+  }
+  
+  check() {
+    const array = SHA1(this.toString())
+    return array[0] >> (160-this.bits) == 0
+  }
+  
+  startClock() {
+    this.startedAt || (this.startedAt = performance.now())
+  }
+  
+  stopClock() {
+    this.endedAt || (this.endedAt = performance.now())
+    const duration = this.endedAt - this.startedAt
+    const speed = Math.round(this.counter * 1000 / duration)
+    console.debug("Hashcash " + this.toString() + " minted in " + duration + "ms (" + speed + " per seconds)")
+  }
+}

data/app/packs/stylesheets/decidim/decidim_awesome/admin/codemirror.scss

@@ -5,9 +5,14 @@
 
 .awesome-edit-config {
   .scoped_styles_container,
-  .proposal_custom_fields_container {
+  .proposal_custom_fields_container,
+  .force_authorization_container {
     @apply bg-background;
 
+    .editor-container {
+      @apply bg-white;
+    }
+
     &.private {
       @apply outline-2 outline-[#fca5a5] outline-dotted;
     }

data/app/packs/stylesheets/decidim/decidim_awesome/admin/constraints.scss

@@ -33,6 +33,11 @@
       color: #fff;
     }
 
+    &.application_context {
+      background-color: #007bff;
+      color: #fff;
+    }
+
     &.constraint {
       &-none {
         background-color: #ff3000;

data/app/packs/stylesheets/decidim/decidim_awesome/admin/custom_fields.scss

@@ -15,8 +15,7 @@
       @apply bg-background mr-2;
     }
 
-    border-top-left-radius: 5px;
-    border-top-right-radius: 5px;
+    @apply rounded-tl-[5px] rounded-tr-[5px];
 
     svg {
       @apply fill-black;

data/app/packs/stylesheets/decidim/decidim_awesome/forms/autosave.scss

@@ -1,17 +1,7 @@
 .awesome_autosave-notice {
-  background-color: rgb(var(--success-rgb) / 90%);
-  position: fixed;
-  top: 90%;
-  left: 50%;
-  transform: translate(-50%, -50%);
-  padding: 1em 2em;
-  border-radius: 4px;
-  border: 1px solid var(--success);
-  font-weight: 600;
-  color: white;
-  z-index: 1000;
+  @apply bg-success/90 fixed top-[2%] right-[2%] p-4 rounded border border-success font-semibold text-white z-[1000];
 
   &.error {
-    background-color: rgb(var(--alert-rgb) / 90%);
+    @apply bg-alert/90;
   }
 }

data/app/presenters/decidim/decidim_awesome/private_data_presenter.rb

@@ -31,7 +31,7 @@ module Decidim
       end
 
       def time_ago
-        I18n.t("decidim.decidim_awesome.admin.maintenance.private_data.time_ago", time: time_ago_in_words(last_date)) if last_date
+        I18n.t("decidim.decidim_awesome.admin.private_data.private_data.time_ago", time: time_ago_in_words(last_date)) if last_date
       end
 
       def destroyable?
@@ -63,7 +63,7 @@ module Decidim
         return if destroyable?
         return if last_date
 
-        I18n.t("decidim.decidim_awesome.admin.maintenance.private_data.done")
+        I18n.t("decidim.decidim_awesome.admin.private_data.private_data.done")
       end
     end
   end

data/app/queries/decidim/decidim_awesome/space_constraint_finder.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+module Decidim
+  module DecidimAwesome
+    class SpaceConstraintFinder
+      def initialize(config_var, participatory_space)
+        @config_var = config_var
+        @participatory_space = participatory_space
+      end
+
+      attr_reader :participatory_space, :config_var
+
+      def query
+        set_base_query
+        add_space_specific_conditions
+      end
+
+      private
+
+      def set_base_query
+        @query = Decidim::DecidimAwesome::AwesomeConfig
+                 .where("var LIKE ?", "#{config_var}_%")
+                 .where(organization: participatory_space.organization)
+                 .joins(:constraints)
+                 .where("decidim_awesome_config_constraints.settings @> ?", { participatory_space_manifest: manifest_key }.to_json)
+      end
+
+      def add_space_specific_conditions
+        @query.where(
+          "(decidim_awesome_config_constraints.settings ->> 'participatory_space_slug' = ? OR " \
+          "decidim_awesome_config_constraints.settings ->> 'participatory_space_slug' IS NULL)",
+          participatory_space.try(:slug) || participatory_space.id.to_s
+        )
+      end
+
+      def manifest_key
+        return participatory_space.manifest.name if participatory_space.respond_to?(:manifest)
+
+        :process_groups
+      end
+    end
+  end
+end

data/app/serializers/concerns/decidim/decidim_awesome/proposals/proposal_serializer_methods.rb

@@ -3,7 +3,7 @@
 module Decidim
   module DecidimAwesome
     module Proposals
-      # Adds one custom field per column in export if custom fields are activted
+      # Adds one custom field per column in export if custom fields are activated
       # Adds vote weights
       module ProposalSerializerMethods
         extend ActiveSupport::Concern
@@ -17,7 +17,8 @@ module Decidim
             return @custom_config if @custom_config
 
             @custom_config = Config.new(proposal.organization)
-            @custom_config.context_from_component(proposal.component)
+            @custom_config.context_from_component!(proposal.component)
+            @custom_config.application_context!(current_user: proposal.creator)
             @custom_config
           end
 

data/app/services/decidim/decidim_awesome/access_authorization_service.rb

@@ -0,0 +1,79 @@
+# frozen_string_literal: true
+
+module Decidim
+  module DecidimAwesome
+    class AccessAuthorizationService
+      def initialize(user, organization, authorization_groups = [])
+        @user = user
+        @organization = organization
+        @available_handlers = organization.available_authorizations & Decidim.authorization_workflows.map(&:name)
+        @authorization_groups = authorization_groups.filter_map do |group|
+          group.filter_map do |handler, options|
+            next unless @available_handlers.include?(handler)
+
+            [handler, options]
+          end.to_h
+        end.compact_blank
+      end
+
+      attr_reader :user, :organization, :authorization_groups
+
+      def granted?
+        return false unless user
+        return true if authorization_groups.blank?
+
+        # if one group is authorized that's ok
+        # inside a group, all adapters must be authorized
+        authorization_groups.detect do |group|
+          statuses = authorization_statuses_for(group)
+          next if statuses.blank?
+
+          statuses.all? { |status| status == :ok }
+        end
+      end
+
+      def authorization_handlers
+        @authorization_handlers ||= authorization_groups.flat_map do |group|
+          next unless group.is_a?(Hash)
+
+          group.keys
+        end.uniq
+      end
+
+      def adapters
+        @authorizations ||= adapters_for(authorization_handlers)
+      end
+
+      def authorization_status(method)
+        authorization_statuses_for({ method => authorization_groups.flat_map { |group| group[method] } }).first
+      end
+
+      private
+
+      def adapters_for(handlers)
+        Decidim::Verifications::Adapter.from_collection(
+          handlers & organization.available_authorizations & Decidim.authorization_workflows.map(&:name)
+        )
+      end
+
+      def authorization_statuses_for(group)
+        @authorization_statuses_for ||= {}
+
+        adapters_for(group.keys).map do |adapter|
+          next @authorization_statuses_for[adapter.name] if @authorization_statuses_for.has_key?(adapter.name)
+
+          @authorization_statuses_for[adapter.name] = begin
+            authorization = Decidim::Verifications::Authorizations.new(
+              organization:,
+              user:,
+              name: adapter.name,
+              granted: true
+            ).first
+
+            adapter.authorize(authorization, group[adapter.name]["options"], nil, nil)&.first
+          end
+        end
+      end
+    end
+  end
+end