device_tracker 0.3.0

data/lib/device_tracker/controllers/devices_controller.rb

@@ -0,0 +1,315 @@
+require_relative 'application_controller'
+
+module DeviceTracker
+  # :nodoc:
+  class DevicesController < ApplicationController
+    before { protected! }
+
+    get '/new' do
+      admin_check
+
+      @device = Device.new
+      @operating_systems = OperatingSystem.select(:name, :id)
+                           .distinct.order(:name)
+      erb :"devices/new"
+    end
+
+    post '/create' do
+      admin_check
+
+      attributes = {
+        unid: params[:device][:unid],
+        manufacturer: params[:device][:manufacturer],
+        device: params[:device][:device],
+        description: params[:device][:description],
+        imei: params[:device][:imei],
+        serial_number: params[:device][:serial_number],
+        operating_system_id: params[:device][:operating_system_id]
+      }
+
+      attributes[:sim_card] = true if params[:device][:sim_card]
+
+      attributes[:debug_device] = true if params[:device][:debug_device]
+
+      attributes.each do |key, value|
+        flash[key] = value
+      end
+
+      @device = Device.new(attributes)
+
+      if @device.valid?
+        @device.save
+        create_flash 'success', ["Created new device #{@device.full_name}"]
+        redirect "/devices/#{@device.id}"
+      else
+        create_flash 'warning', @device.errors.full_messages
+        redirect back
+      end
+    end
+
+    get '/' do
+      @title = 'All Devices'
+
+      @devices = Device.all
+      @users   = User.all
+
+      @show_search = true
+
+      if params[:device_name] && !params[:device_name].empty?
+        @show_search = false
+        @devices = @devices.where(
+          'device like ? or manufacturer like ?',
+          "%#{params[:device_name]}%",
+          "%#{params[:device_name]}%"
+        )
+      end
+
+      @devices = @devices.sort { |a, b| a.full_name <=> b.full_name }
+
+      erb :"devices/index"
+    end
+
+    get '/checked-out' do
+      @devices = Device.where(available: false).order(checked_out_since: :desc)
+      @users   = User.all
+
+      if params[:device_name] && !params[:device_name].empty?
+        @devices = @devices.where(
+          'description like ?',
+          "%#{params[:device_name]}%"
+        )
+      end
+
+      @title = 'Checked out Devices'
+
+      erb :"devices/index"
+    end
+
+    get '/:device_id' do |device_id|
+      fail Sinatra::NotFound unless Device.exists?(device_id)
+
+      @users = User.where(is_verified: true).order(email: :desc)
+
+      @device = Device.find(device_id)
+
+      if @device.missing?
+        @last_checkout_transaction = Transaction.where(
+          transaction_type: 'CHECKOUT',
+          device_id:
+          @device.id
+        ).order(id: :desc).first
+      end
+
+      @transactions = @device.transactions.order(created_at: :desc).take(10)
+
+      @current_user = logged_in_user
+
+      erb :"devices/show"
+    end
+
+    put '/:device_id' do |device_id|
+      admin_check
+
+      fail Sinatra::NotFound unless Device.exists?(device_id)
+
+      params[:device].each do |key, value|
+        flash[key.to_sym] = value
+      end
+
+      @device = Device.find(device_id)
+      @device.update(params[:device])
+
+      if @device.save
+
+        create_flash 'success', ['The device has been successfully updated.']
+        redirect "/devices/#{device_id}"
+      else
+        create_flash 'warning', @device.errors.full_messages
+        redirect back
+      end
+    end
+
+    # devices/users/1
+    get '/users/:user_id' do |user_id|
+      user = logged_in_user
+
+      if user[:id] != user_id.to_i
+        create_flash 'warning', ["You don't have permission to view this page."]
+        redirect back
+      end
+
+      fail Sinatra::NotFound unless User.exists?(user_id)
+
+      # Get the user
+      @user = User.find(user_id)
+
+      @devices = @user.devices
+
+      erb :"devices/users", devices: @devices
+    end
+
+    put '/:device_id/return' do |device_id|
+      unid = device_id.upcase
+
+      if Device.exists?(unid: unid)
+        @device = Device.find_by_unid(unid)
+
+        user = @device.user
+
+        current_user = logged_in_user
+        if current_user[:id] == @device.user.id
+          report_transaction(
+            "#{user.email} returned #{@device.device}",
+            Transaction.return, @device
+          )
+        else
+          report_transaction(
+            "#{current_user[:email]} returned #{@device.device} " \
+            "on behalf of #{@device.user.email}",
+            Transaction.return,
+            @device
+          )
+        end
+
+        @device.user = nil
+        @device.available = true
+        @device.checked_out_since = nil
+
+        @device.save
+
+        create_flash 'success',
+                     ['Device has been successfully returned, thank you.']
+        redirect back
+      else
+        create_flash 'warning', ["Device not found with id #{device_id}."]
+        redirect back
+      end
+    end
+
+    put '/:device_id/checkout' do |device_id|
+      unid = device_id.upcase
+
+      if Device.exists?(unid: unid)
+
+        @user = User.find(session[:user][:id])
+
+        device = Device.find_by_unid(unid)
+        device.user = @user
+
+        device.available = false
+        device.checked_out_since = Time.now.utc.iso8601
+
+        if device.save
+          report_transaction(
+            "#{@user.email} checked out #{device.device}.",
+            Transaction.checkout,
+            device
+          )
+
+          create_flash 'success',
+                       ['Device successfully checked out.']
+          redirect back
+
+        else
+          create_flash 'warning', device.errors.full_messages
+          redirect back
+        end
+
+      end
+    end
+
+    # /devices/<%= @device.id %>/assign
+    put '/:device_id/assign' do |device_id|
+      admin_check
+
+      if Device.exists?(device_id)
+
+        user_id = params[:user_id]
+
+        if user_id.nil?
+          create_flash 'warning',
+                       ['You must select a user to assign the device to']
+          redirect back
+        end
+
+        @current_user = User.find(session[:user][:id])
+        unless User.exists?(user_id)
+          create_flash 'danger', ["User not found with id #{user_id}"]
+        end
+
+        @assigned_user = User.find(user_id)
+
+        device = Device.find(device_id)
+        device.user = @assigned_user
+
+        device.available = false
+        device.checked_out_since = Time.now.utc.iso8601
+
+        if device.save
+          report_transaction(
+            "#{@current_user.email} checked out #{device.device} on " \
+            "behalf of #{@assigned_user.email}",
+            Transaction.checkout,
+            device
+          )
+        end
+
+        create_flash 'success',
+                     ["Device has been assigned to #{@assigned_user.name}."]
+        redirect back
+
+      end
+    end
+
+    post '/:device_id/send_reminder' do |device_id|
+      admin_check
+
+      if Device.exists?(device_id)
+
+        @device = Device.find(device_id)
+        @device_url = request.base_url + '/devices/' + device_id
+
+        template = File.read(settings.email_path + '/reminder.erb')
+        body = ERB.new(template).result(binding)
+
+        send_email(
+          to: @device.user.email,
+          from: 'no-reply@device-tracker',
+          subject: 'Reminder | Device Tracker',
+          body: body
+        )
+
+        # Send email
+        create_flash 'success',
+                     ["A reminder email has been sent to #{@device.user.name}."]
+        redirect "/devices/#{device_id}"
+
+      else
+        create_flash 'warning', ['Sorry, That device doesn\'t exists.']
+        redirect "/devices/#{device_id}"
+      end
+    end
+
+    get '/:device_id/edit' do |device_id|
+      admin_check
+
+      fail Sinatra::NotFound unless Device.exists?(device_id)
+
+      @device = Device.find(device_id)
+      @operating_systems = OperatingSystem.select(:name, :id)
+                           .distinct.order(:name)
+
+      erb :"devices/edit"
+    end
+
+    delete '/:device_id' do |device_id|
+      admin_check
+
+      fail Sinatra::NotFound unless Device.exists?(device_id)
+
+      @device = Device.find(device_id).destroy
+      create_flash 'success', ["Deleted device #{@device.unid}"]
+      redirect '/devices'
+    end
+  end
+end

data/lib/device_tracker/controllers/heartbeat_controller.rb

@@ -0,0 +1,50 @@
+require_relative 'application_controller'
+
+module DeviceTracker
+  # :nodoc:
+  class HeartbeatController < ApplicationController
+    post '/' do
+      begin
+        heartbeat = JSON.parse(request.body.read)
+      rescue JSON::ParserError
+        halt 412, {
+          error: true,
+          message: 'Error parsing payload, check and try again.'
+        }.to_json
+      end
+
+      # {"heartbeat": {"device_id": "BBCFM003",
+      # "longitude": 53.470096, "latitude": -2.281457}}
+      if valid_heartbeat?(heartbeat)
+
+        heartbeat = heartbeat['heartbeat']
+
+        unid = heartbeat['device_id'].upcase
+
+        if Device.exists?(unid: unid)
+          device = Device.find_by_unid(unid)
+
+          Heartbeat.create(longitude: heartbeat['longitude'],
+                           latitude: heartbeat['latitude'],
+                           device_id: device.id)
+
+          halt 201, {
+            error: false,
+            message: "Heartbeat for device: #{unid} received."
+          }.to_json
+        else
+          halt 404, {
+            error: true,
+            message: "The device with id: #{unid} doesn't exist."
+          }.to_json
+        end
+
+      else
+        halt 412, {
+          error: true,
+          message: 'Manformed heartbeat received, so will not be processed.'
+        }.to_json
+      end
+    end
+  end
+end

data/lib/device_tracker/controllers/os_controller.rb

@@ -0,0 +1,38 @@
+require_relative 'application_controller'
+module DeviceTracker
+  # :nodoc:
+  class OSController < ApplicationController
+    before do
+      admin_check
+    end
+
+    get '/manage' do
+      @os = OperatingSystem.all.order(:name)
+      erb :"os/manage"
+    end
+
+    post '/create' do
+      @os = OperatingSystem.create(params[:os])
+
+      if @os.valid?
+        @os.save
+        create_flash 'success', ["Successfully added #{@os.name}"]
+        redirect back
+      else
+        create_flash 'warning', @os.errors.full_messages
+        redirect back
+      end
+    end
+
+    delete '/:os_id/delete' do |os_id|
+      if OperatingSystem.exists?(os_id)
+        OperatingSystem.destroy(os_id)
+        create_flash 'success', ['Operating system deleted.']
+        redirect back
+      else
+        create_flash 'warning', ['Operating system not found.']
+        redirect back
+      end
+    end
+  end
+end

data/lib/device_tracker/controllers/transactions_controller.rb

@@ -0,0 +1,18 @@
+require_relative 'application_controller'
+
+module DeviceTracker
+  # :nodoc:
+  class TransactionsController < ApplicationController
+    get '/' do
+      @transactions = Transaction.limit(100).order(created_at: :desc).all
+
+      erb :"transactions/index"
+    end
+
+    get '/:device_id' do |device_id|
+      @transactions = Transaction.where(device_id: device_id)
+                      .limit(100).order(created_at: :desc).all
+      erb :"transactions/index"
+    end
+  end
+end

data/lib/device_tracker/controllers/users_controller.rb

@@ -0,0 +1,131 @@
+require_relative 'application_controller'
+
+module DeviceTracker
+  # :nodoc:
+  class UsersController < ApplicationController
+    helpers UserHelper
+
+    before do
+      path = request.path_info.split('/')[1]
+      protected! unless %w(new create).include? path
+      admin_check if %w(manage).include? path
+    end
+
+    get '/manage' do
+      @users = User.all
+      erb :"users/manage"
+    end
+
+    get '/new' do
+      erb :"users/new"
+    end
+
+    get '/:user_id/edit' do |user_id|
+      unless allowed_to_edit_page?(logged_in_user, user_id)
+        flash_and_go_back 'warning',
+                          ["You don't have permission to view this page."]
+      end
+
+      @current_user = logged_in_user
+
+      if User.exists?(user_id)
+        @user = User.find(user_id)
+        @is_admin = @current_user[:is_admin]
+        erb :"users/edit"
+      else
+        flash_and_go_back 'warning', ["Sorry, but that user doesn't exist"]
+      end
+    end
+
+    put '/:user_id' do |user_id|
+      unless User.exists?(user_id)
+        flash_and_go_back 'warning',
+                          ['I\'m sorry but that user does not exist!']
+      end
+
+      user = User.find(user_id)
+      users_previous_verification = user.is_verified
+
+      original_params = params[:user].clone
+      user.assign_attributes(user_params)
+
+      if admin?
+        user.is_admin = (!params[:user][:is_admin].nil? &&
+                        params[:user][:is_admin] == 'on')
+        user.is_verified = (!params[:user][:is_verified].nil? &&
+                           params[:user][:is_verified] == 'on')
+      end
+
+      unless original_params[:password].empty?
+        user.password = original_params[:password]
+        user.password_confirmation = original_params[:password_confirmation]
+      end
+
+      if user.save
+        if user.is_verified && users_previous_verification == false
+          verification_email(user)
+        end
+        flash_and_go_back 'success', ['The account was successfully updated.']
+      else
+        flash_and_go_back 'warning', user.errors.full_messages
+      end
+    end
+
+    post '/create' do
+      user = User.new(params[:user])
+
+      user.flashable_attrs.each do |key|
+        flash[key] = user.send(:"#{key}")
+      end
+
+      if user.valid?
+        user.is_verified = true if admin?
+
+        user.save
+
+        if admin?
+          create_flash 'info', ["#{user.name}'s account has been created"]
+          redirect '/users/manage'
+        else
+          report_transaction(
+            "#{user.email} registered a new account.",
+            Transaction.registration
+          )
+          admin_email_registration(request, user)
+          create_flash 'info',
+                       ['Success, check your email and activate your account.']
+          redirect '/'
+        end
+
+      else
+        flash_and_go_back 'warning', [user.errors.full_messages.first]
+      end
+    end
+
+    delete '/:user_id/delete' do |user_id|
+      if User.exists?(user_id)
+        user = User.find(user_id)
+
+        email = user.email
+
+        if user.devices.count > 0
+          Device.where(user_id: user.id)
+            .update_all(available: true, checked_out_since: nil, user_id: nil)
+        end
+
+        if user.destroy
+          report_transaction(
+            "#{email} was deleted by #{logged_in_user[:email]}.",
+            Transaction.deletion
+          )
+        end
+
+        flash_and_go_back 'success',
+                          ['The user account has been successfully removed.']
+      else
+        flash_and_go_back 'warning',
+                          ['Unable to remove the user account, try again.']
+      end
+    end
+  end
+end

data/lib/device_tracker/db/migrate/20150521071815_create_users.rb

@@ -0,0 +1,14 @@
+# :nodoc:
+class CreateUsers < ActiveRecord::Migration
+  def change
+    create_table :users do |t|
+      t.string :username, index: true
+      t.string :name
+      t.string :password_digest
+      t.string :email
+      t.boolean :is_active, default: false
+      t.boolean :is_admin, default: false
+      t.timestamps null: false
+    end
+  end
+end

data/lib/device_tracker/db/migrate/20150521082155_create_devices.rb

@@ -0,0 +1,19 @@
+# :nodoc:
+class CreateDevices < ActiveRecord::Migration
+  def change
+    create_table :devices do |t|
+      t.string :unid, index: true
+      t.string :manufacturer
+      t.string :device
+      t.text :description
+      t.datetime :checked_out_since
+      t.boolean :available, default: true
+      t.string :imei, default: nil
+      t.belongs_to :operating_system
+      t.belongs_to :user
+      t.boolean :sim_card, default: false
+      t.boolean :debug_device, default: false
+      t.timestamps null: false
+    end
+  end
+end

data/lib/device_tracker/db/migrate/20150521120335_create_operating_systems.rb

@@ -0,0 +1,9 @@
+# :nodoc:
+class CreateOperatingSystems < ActiveRecord::Migration
+  def change
+    create_table :operating_systems do |t|
+      t.string :name
+      t.integer :api_level
+    end
+  end
+end

data/lib/device_tracker/db/migrate/20150527162242_create_transactions.rb

@@ -0,0 +1,12 @@
+# :nodoc:
+class CreateTransactions < ActiveRecord::Migration
+  def change
+    create_table :transactions do |t|
+      t.string :transaction_type, index: true
+      t.belongs_to :user
+      t.belongs_to :device
+      t.text :description
+      t.datetime :created_at
+    end
+  end
+end

data/lib/device_tracker/db/migrate/20151027073050_create_heartbeat.rb

@@ -0,0 +1,11 @@
+# :nodoc:
+class CreateHeartbeat < ActiveRecord::Migration
+  def change
+    create_table :heartbeats do |t|
+      t.decimal :longitude, precision: 10, scale: 6
+      t.decimal :latitude, precision: 10, scale: 6
+      t.belongs_to :device
+      t.timestamps null: false
+    end
+  end
+end

data/lib/device_tracker/db/migrate/20151028132946_add_user_verification.rb

@@ -0,0 +1,8 @@
+# :nodoc:
+class AddUserVerification < ActiveRecord::Migration
+  def change
+    change_table :users do |t|
+      t.boolean :is_verified, default: false
+    end
+  end
+end

data/lib/device_tracker/db/migrate/20151028141328_remove_is_active_from_users.rb

@@ -0,0 +1,6 @@
+# :nodoc:
+class RemoveIsActiveFromUsers < ActiveRecord::Migration
+  def change
+    remove_column :users, :is_active, :boolean, default: false
+  end
+end

data/lib/device_tracker/db/migrate/20151029085629_add_password_reset_code_to_users.rb

@@ -0,0 +1,8 @@
+# :nodoc:
+class AddPasswordResetCodeToUsers < ActiveRecord::Migration
+  def change
+    change_table :users do |t|
+      t.string :reset_code, default: nil
+    end
+  end
+end

data/lib/device_tracker/db/migrate/20151030130341_add_missing_column_to_devices.rb

@@ -0,0 +1,8 @@
+# :nodoc:
+class AddMissingColumnToDevices < ActiveRecord::Migration
+  def change
+    change_table :devices do |t|
+      t.boolean :missing, default: false
+    end
+  end
+end

data/lib/device_tracker/db/migrate/20151102141601_add_serial_number_to_devices.rb

@@ -0,0 +1,8 @@
+# :nodoc:
+class AddSerialNumberToDevices < ActiveRecord::Migration
+  def change
+    change_table :devices do |t|
+      t.string :serial_number
+    end
+  end
+end