devise-authy 1.0.0 → 1.2.1

data/spec/features/authy_authenticatable_spec.rb

@@ -0,0 +1,95 @@
+require 'spec_helper'
+
+describe "Authy Autnenticatable", :type => :request do
+  describe "If user don't have two factor authentication should login with email - password" do
+    before :each do
+      @user = create_user(:email => 'foo@bar.com')
+    end
+
+    it "Sign in should succeed" do
+      fill_sign_in_form('foo@bar.com', '12345678')
+      current_path.should == root_path
+      page.should have_content('Signed in successfully.')
+    end
+
+    it "Sign in shouldn't success" do
+      fill_sign_in_form('foo@bar.com', '14567823')
+      current_path.should == new_user_session_path
+      page.should_not have_content('Signed in successfully.')
+    end
+  end
+
+  describe "If user have two factor authentication" do
+    before :each do
+      @user = create_user(:authy_id => 2)
+      @user.update_attribute(:authy_enabled, true)
+    end
+
+    it "Sign in should succeed" do
+      visit new_user_session_path
+      fill_sign_in_form(@user.email, '12345678')
+      current_path.should == user_verify_authy_path
+      page.should have_content('Please enter your Authy token')
+
+      within('#devise_authy') do
+        fill_in 'authy-token', :with => '0000000'
+      end
+      click_on 'Check Token'
+      current_path.should == root_path
+      page.should have_content(I18n.t('devise.devise_authy.user.signed_in'))
+      @user.reload
+      @user.last_sign_in_with_authy.should_not be_nil
+    end
+
+    it "Sign in shouldn't succeed" do
+      visit new_user_session_path
+      fill_sign_in_form(@user.email, '12345678')
+      current_path.should == user_verify_authy_path
+      page.should have_content('Please enter your Authy token')
+
+      within('#devise_authy') do
+        fill_in 'authy-token', :with => '324567'
+      end
+      click_on 'Check Token'
+      current_path.should == user_verify_authy_path
+      @user.reload
+      @user.last_sign_in_with_authy.should be_nil
+    end
+
+    describe "With cookie['remember_device']" do
+      it "Should prompt for a token" do
+        cookie_val = sign_cookie("remember_device", Time.now.to_i - 2.month.to_i)
+        page.driver.browser.set_cookie("remember_device=#{cookie_val}")
+        visit new_user_session_path
+        fill_sign_in_form(@user.email, '12345678')
+        current_path.should == user_verify_authy_path
+        page.should have_content('Please enter your Authy token')
+      end
+
+      it "Shouldn't prompt for a token" do
+        cookie_val = sign_cookie("remember_device", Time.now.to_i)
+        page.driver.browser.set_cookie("remember_device=#{cookie_val}")
+        visit new_user_session_path
+        fill_sign_in_form(@user.email, '12345678')
+        current_path.should == root_path
+        page.should have_content("Signed in successfully.")
+      end
+    end
+
+    it "With cookie['current_user_id'] and cookie['user_password_checked']" do
+      page.driver.browser.set_cookie("current_user_id=#{@user.id}")
+      page.driver.browser.set_cookie('user_password_checked=true')
+
+      visit user_verify_authy_path
+      current_path.should == new_user_session_path
+      page.should have_content('Sign in')
+    end
+
+    it "Click link Request sms" do
+      visit new_user_session_path
+      fill_sign_in_form(@user.email, '12345678')
+      click_link 'Request SMS'
+      page.should have_content("SMS token was sent")
+    end
+  end
+end

data/spec/generators_spec.rb

@@ -5,20 +5,26 @@ require 'rails/generators'
 require 'generators/devise_authy/devise_authy_generator'
 
 describe "generators for devise_authy" do
-  RAILS_APP_PATH = File.expand_path("../rails_app", __FILE__)
+  RAILS_APP_PATH = File.expand_path("../rails-app", __FILE__)
+
+  def rails_command(*args)
+    `cd #{RAILS_APP_PATH} && BUNDLE_GEMFILE=#{RAILS_APP_PATH}/Gemfile bundle exec rails #{args.join(" ")}`
+  end
 
   it "rails g should include the generators" do
-    @output = `cd #{RAILS_APP_PATH} && rails g`
+    @output = rails_command("g")
     @output.include?('devise_authy:install').should be_true
     @output.include?('active_record:devise_authy').should be_true
   end
 
   it "rails g devise_authy:install" do
-    @output = `cd #{RAILS_APP_PATH} && rails g devise_authy:install -p`
+    @output = rails_command("g", "devise_authy:install", "-s")
     @output.include?('config/initializers/devise.rb').should be_true
     @output.include?('config/locales/devise.authy.en.yml').should be_true
-    @output.include?('app/views/devise/devise_authy/register.html.erb').should be_true
-    @output.include?('app/views/devise/devise_authy/show.html.erb').should be_true
+    @output.include?('app/views/devise/devise_authy/enable_authy.html.erb').should be_true
+    @output.include?('app/views/devise/devise_authy/verify_authy.html.erb').should be_true
+    @output.include?('app/views/devise/devise_authy/verify_authy_installation.html.erb').should be_true
     @output.include?('app/assets/stylesheets/devise_authy.css').should be_true
+    @output.include?('app/assets/javascripts/devise_authy.js').should be_true
   end
-end
+end

data/spec/orm/active_record.rb

@@ -1,4 +1,4 @@
 ActiveRecord::Migration.verbose = false
 ActiveRecord::Base.logger = Logger.new(nil)
 
-ActiveRecord::Migrator.migrate(File.expand_path("../../rails_app/db/migrate/", __FILE__))
+ActiveRecord::Migrator.migrate(File.expand_path("../../rails-app/db/migrate/", __FILE__))

data/spec/rails-app/Gemfile

@@ -0,0 +1,8 @@
+source "https://rubygems.org"
+
+gem "rails", "~> 3.2.6"
+gem "sqlite3"
+gem "authy"
+gem "devise"
+gem "devise-authy", :path => "../.."
+

data/spec/rails-app/Gemfile.lock

@@ -0,0 +1,111 @@
+PATH
+  remote: ../..
+  specs:
+    devise-authy (1.2.0)
+      authy
+      devise
+      rails (~> 3.2.6)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    actionmailer (3.2.13)
+      actionpack (= 3.2.13)
+      mail (~> 2.5.3)
+    actionpack (3.2.13)
+      activemodel (= 3.2.13)
+      activesupport (= 3.2.13)
+      builder (~> 3.0.0)
+      erubis (~> 2.7.0)
+      journey (~> 1.0.4)
+      rack (~> 1.4.5)
+      rack-cache (~> 1.2)
+      rack-test (~> 0.6.1)
+      sprockets (~> 2.2.1)
+    activemodel (3.2.13)
+      activesupport (= 3.2.13)
+      builder (~> 3.0.0)
+    activerecord (3.2.13)
+      activemodel (= 3.2.13)
+      activesupport (= 3.2.13)
+      arel (~> 3.0.2)
+      tzinfo (~> 0.3.29)
+    activeresource (3.2.13)
+      activemodel (= 3.2.13)
+      activesupport (= 3.2.13)
+    activesupport (3.2.13)
+      i18n (= 0.6.1)
+      multi_json (~> 1.0)
+    arel (3.0.2)
+    authy (2.0.1)
+      httpclient (>= 2.2.6)
+    bcrypt-ruby (3.0.1)
+    builder (3.0.4)
+    devise (2.2.3)
+      bcrypt-ruby (~> 3.0)
+      orm_adapter (~> 0.1)
+      railties (~> 3.1)
+      warden (~> 1.2.1)
+    erubis (2.7.0)
+    hike (1.2.2)
+    httpclient (2.3.3)
+    i18n (0.6.1)
+    journey (1.0.4)
+    json (1.7.7)
+    mail (2.5.3)
+      i18n (>= 0.4.0)
+      mime-types (~> 1.16)
+      treetop (~> 1.4.8)
+    mime-types (1.22)
+    multi_json (1.7.2)
+    orm_adapter (0.4.0)
+    polyglot (0.3.3)
+    rack (1.4.5)
+    rack-cache (1.2)
+      rack (>= 0.4)
+    rack-ssl (1.3.3)
+      rack
+    rack-test (0.6.2)
+      rack (>= 1.0)
+    rails (3.2.13)
+      actionmailer (= 3.2.13)
+      actionpack (= 3.2.13)
+      activerecord (= 3.2.13)
+      activeresource (= 3.2.13)
+      activesupport (= 3.2.13)
+      bundler (~> 1.0)
+      railties (= 3.2.13)
+    railties (3.2.13)
+      actionpack (= 3.2.13)
+      activesupport (= 3.2.13)
+      rack-ssl (~> 1.3.2)
+      rake (>= 0.8.7)
+      rdoc (~> 3.4)
+      thor (>= 0.14.6, < 2.0)
+    rake (10.0.4)
+    rdoc (3.12.2)
+      json (~> 1.4)
+    sprockets (2.2.2)
+      hike (~> 1.2)
+      multi_json (~> 1.0)
+      rack (~> 1.0)
+      tilt (~> 1.1, != 1.3.0)
+    sqlite3 (1.3.7)
+    thor (0.18.1)
+    tilt (1.3.7)
+    treetop (1.4.12)
+      polyglot
+      polyglot (>= 0.3.1)
+    tzinfo (0.3.37)
+    warden (1.2.1)
+      rack (>= 1.0)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  authy
+  devise
+  devise-authy!
+  rails (~> 3.2.6)
+  sqlite3

data/spec/{rails_app → rails-app}/Rakefile

@@ -1,10 +1,7 @@
+#!/usr/bin/env rake
 # Add your own tasks in files placed in lib/tasks ending in .rake,
 # for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
 
 require File.expand_path('../config/application', __FILE__)
 
-require 'rake'
-require 'rake/testtask'
-require 'rdoc/task'
-
-Rails.application.load_tasks
+RailsApp::Application.load_tasks

data/spec/rails-app/app/assets/javascripts/application.js

@@ -0,0 +1,15 @@
+// This is a manifest file that'll be compiled into application.js, which will include all the files
+// listed below.
+//
+// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
+// or vendor/assets/javascripts of plugins, if any, can be referenced here using a relative path.
+//
+// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
+// the compiled file.
+//
+// WARNING: THE FIRST BLANK LINE MARKS THE END OF WHAT'S TO BE PROCESSED, ANY BLANK LINE SHOULD
+// GO AFTER THE REQUIRES BELOW.
+//
+//= require jquery
+//= require jquery_ujs
+//= require_tree .

data/spec/rails-app/app/assets/javascripts/devise_authy.js

@@ -0,0 +1,7 @@
+$(document).ready(function() {
+  $('a#authy-request-sms-link').unbind('ajax:success');
+  $('a#authy-request-sms-link').bind('ajax:success', function(evt, data, status, xhr) {
+    alert(data.message);
+  });
+});
+

data/spec/rails-app/app/assets/javascripts/welcome.js

@@ -0,0 +1,2 @@
+// Place all the behaviors and hooks related to the matching controller here.
+// All this logic will automatically be available in application.js.

data/spec/rails-app/app/assets/stylesheets/application.css

@@ -0,0 +1,13 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or vendor/assets/stylesheets of plugins, if any, can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the top of the
+ * compiled file, but it's generally better to create a new file per style scope.
+ *
+ *= require_self
+ *= require_tree .
+ */

data/spec/rails-app/app/assets/stylesheets/welcome.css.scss

@@ -0,0 +1,3 @@
+// Place all the styles related to the Welcome controller here.
+// They will automatically be included in application.css.
+// You can use Sass (SCSS) here: http://sass-lang.com/

data/spec/{rails_app → rails-app}/app/controllers/application_controller.rb

@@ -1,4 +1,3 @@
 class ApplicationController < ActionController::Base
   protect_from_forgery
-  before_filter :authenticate_user!
 end

data/spec/rails-app/app/controllers/welcome_controller.rb

@@ -0,0 +1,6 @@
+class WelcomeController < ApplicationController
+  before_filter :authenticate_user!
+
+  def index
+  end
+end

data/spec/rails-app/app/helpers/welcome_helper.rb

@@ -0,0 +1,2 @@
+module WelcomeHelper
+end

data/spec/{rails_app → rails-app}/app/models/user.rb

@@ -1,9 +1,11 @@
 class User < ActiveRecord::Base
   # Include default devise modules. Others available are:
-  # :token_authenticatable, :encryptable, :confirmable, :lockable, :timeoutable and :omniauthable
+  # :token_authenticatable, :confirmable,
+  # :lockable, :timeoutable and :omniauthable
   devise :authy_authenticatable, :database_authenticatable, :registerable,
          :recoverable, :rememberable, :trackable, :validatable
 
   # Setup accessible (or protected) attributes for your model
-  attr_accessible :email, :password, :password_confirmation, :authy_id, :last_sign_in_with_authy
+  attr_accessible :authy_id, :last_sign_in_with_authy, :email, :password, :password_confirmation, :remember_me
+  # attr_accessible :authy_id, :last_sign_in_with_authy, :title, :body
 end

data/spec/{rails_app/app/views/devise/devise_authy/register.html.erb → rails-app/app/views/devise/devise_authy/enable_authy.html.erb}

@@ -1,10 +1,8 @@
 <h2><%= I18n.t('authy_register_title', {:scope => 'devise'}) %></h2>
 
-<%= form_tag([resource_name, :devise_authy], :html => { :method => :post }) do %>
-
-  <%= text_field_tag :cellphone, '', :autocomplete => :off, :placeholder =>
-I18n.t('devise.cellphone'), :id => "authy-cellphone"%>
-  <%= text_field_tag :country_code, '', :autocomplete => :off, :placeholder =>
-I18n.t('devise.country'), :id => "authy-countries"%>
+<%= enable_authy_form do %>
+  <%= text_field_tag :country_code, '', :autocomplete => :off, :placeholder => I18n.t('devise.country'), :id => "authy-countries"%>
   <p><%= submit_tag I18n.t('enable_authy', {:scope => 'devise'}) %></p>
+  <%= text_field_tag :cellphone, '', :autocomplete => :off, :placeholder => I18n.t('devise.cellphone'), :id => "authy-cellphone"%>
 <% end %>
+

data/spec/rails-app/app/views/devise/devise_authy/verify_authy.html.erb

@@ -0,0 +1,13 @@
+<h2>
+  <%= I18n.t('authy_register_title', {:scope => 'devise'}) %>
+</h2>
+
+<%= verify_authy_form do %>
+  <legend><%= I18n.t('submit_token_title', {:scope => 'devise'}) %></legend>
+  <%= label_tag :token %>
+  <%= text_field_tag :token, "", :autocomplete => :off, :id => 'authy-token' %>
+  <%= link_to '?', '#', :id => 'authy-help' %>
+  <%= authy_request_sms_link %>
+  <%= submit_tag I18n.t('submit_token', {:scope => 'devise'}), :class => 'btn' %>
+<% end %>
+

data/spec/rails-app/app/views/devise/devise_authy/verify_authy_installation.html.erb

@@ -0,0 +1,10 @@
+<h2><%= I18n.t('authy_verify_installation_title', {:scope => 'devise'}) %></h2>
+
+<%= verify_authy_installation_form do %>
+  <legend><%= I18n.t('submit_token_title', {:scope => 'devise'}) %></legend>
+  <%= label_tag :token %>
+  <%= text_field_tag :token, "", :autocomplete => :off, :id => 'authy-token' %>
+  <%= authy_request_sms_link %>
+  <%= submit_tag I18n.t('enable_my_account', {:scope => 'devise'}), :class => 'btn' %>
+<% end %>
+

data/spec/rails-app/app/views/layouts/application.html.erb

@@ -0,0 +1,29 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>RailsApp</title>
+  <%= stylesheet_link_tag    "application", :media => "all" %>
+  <%= javascript_include_tag "application" %>
+  <%= csrf_meta_tags %>
+  <%=javascript_include_tag "https://www.authy.com/form.authy.min.js" %>
+  <%=stylesheet_link_tag "https://www.authy.com/form.authy.min.css" %>
+  <%=javascript_include_tag "devise_authy.js" %>
+
+</head>
+<body>
+  <% if flash[:notice] %>
+    <div id="notice">
+      <%= flash[:notice] %>
+    </div>
+  <% end %>
+
+  <% if flash[:error] %>
+    <div class='alert alert-error'>
+      <%= flash[:error] %>
+    </div>
+  <% end %>
+
+  <%= yield %>
+
+</body>
+</html>

data/spec/rails-app/app/views/welcome/index.html.erb

@@ -0,0 +1,5 @@
+<h1>Welcome#index</h1>
+<p>Find me in app/views/welcome/index.html.erb</p>
+
+<%= link_to "Enable authy", user_enable_authy_path %>
+<%= link_to "Logout", destroy_user_session_path, :method => :delete %>