devise-edge 1.2.rc

data/test/rails_app/db/schema.rb

@@ -0,0 +1,52 @@
+# This file is auto-generated from the current state of the database. Instead
+# of editing this file, please use the migrations feature of Active Record to
+# incrementally modify your database, and then regenerate this schema definition.
+#
+# Note that this schema.rb definition is the authoritative source for your
+# database schema. If you need to create the application database on another
+# system, you should be using db:schema:load, not running all the migrations
+# from scratch. The latter is a flawed and unsustainable approach (the more migrations
+# you'll amass, the slower it'll run and the greater likelihood for issues).
+#
+# It's strongly recommended to check this file into your version control system.
+
+ActiveRecord::Schema.define(:version => 20100401102949) do
+
+  create_table "admins", :force => true do |t|
+    t.string   "email"
+    t.string   "encrypted_password",   :limit => 128
+    t.string   "password_salt"
+    t.string   "remember_token"
+    t.datetime "remember_created_at"
+    t.string   "reset_password_token"
+    t.integer  "failed_attempts",                     :default => 0
+    t.string   "unlock_token"
+    t.datetime "locked_at"
+    t.datetime "created_at"
+    t.datetime "updated_at"
+  end
+
+  create_table "users", :force => true do |t|
+    t.string   "username"
+    t.string   "facebook_token"
+    t.string   "email",                               :default => "", :null => false
+    t.string   "encrypted_password",   :limit => 128, :default => "", :null => false
+    t.string   "confirmation_token"
+    t.datetime "confirmed_at"
+    t.datetime "confirmation_sent_at"
+    t.string   "reset_password_token"
+    t.datetime "remember_created_at"
+    t.integer  "sign_in_count",                       :default => 0
+    t.datetime "current_sign_in_at"
+    t.datetime "last_sign_in_at"
+    t.string   "current_sign_in_ip"
+    t.string   "last_sign_in_ip"
+    t.integer  "failed_attempts",                     :default => 0
+    t.string   "unlock_token"
+    t.datetime "locked_at"
+    t.string   "authentication_token"
+    t.datetime "created_at"
+    t.datetime "updated_at"
+  end
+
+end

data/test/rails_app/lib/shared_admin.rb

@@ -0,0 +1,9 @@
+module SharedAdmin
+  extend ActiveSupport::Concern
+
+  included do
+    devise :database_authenticatable, :encryptable, :registerable,
+           :timeoutable, :recoverable, :rememberable, :lockable,
+           :unlock_strategy => :time
+  end
+end

data/test/rails_app/lib/shared_user.rb

@@ -0,0 +1,48 @@
+module SharedUser
+  extend ActiveSupport::Concern
+
+  included do
+    devise :database_authenticatable, :confirmable, :lockable, :recoverable,
+           :registerable, :rememberable, :timeoutable, :token_authenticatable,
+           :trackable, :validatable, :oauthable
+
+    # They need to be included after Devise is called.
+    extend ExtendMethods
+  end
+
+  module ExtendMethods
+    def find_for_facebook_oauth(access_token, signed_in_resource=nil)
+      data = ActiveSupport::JSON.decode(access_token.get('/me'))
+      user = signed_in_resource || User.find_by_email(data["email"]) || User.new
+      user.update_with_facebook_oauth(access_token, data)
+      user.save
+      user
+    end
+
+    def new_with_session(params, session)
+      super.tap do |user|
+        if session[:user_facebook_oauth_token]
+          access_token = oauth_access_token(:facebook, session[:user_facebook_oauth_token])
+          user.update_with_facebook_oauth(access_token)
+        end
+      end
+    end
+  end
+
+  def update_with_facebook_oauth(access_token, data=nil)
+    data ||= ActiveSupport::JSON.decode(access_token.get('/me'))
+
+    self.username = data["username"] unless username.present?
+    self.email    = data["email"] unless email.present?
+
+    self.confirmed_at ||= Time.now
+    self.facebook_token = access_token.token
+
+    unless encrypted_password.present?
+      self.password = Devise.friendly_token[0, 10]
+      self.password_confirmation = nil
+    end
+
+    yield self if block_given?
+  end
+end

data/test/routes_test.rb

@@ -0,0 +1,189 @@
+require 'test_helper'
+
+class DefaultRoutingTest < ActionController::TestCase
+  test 'map new user session' do
+    assert_recognizes({:controller => 'devise/sessions', :action => 'new'}, {:path => 'users/sign_in', :method => :get})
+    assert_named_route "/users/sign_in", :new_user_session_path
+  end
+
+  test 'map create user session' do
+    assert_recognizes({:controller => 'devise/sessions', :action => 'create'}, {:path => 'users/sign_in', :method => :post})
+    assert_named_route "/users/sign_in", :user_session_path
+  end
+
+  test 'map destroy user session' do
+    assert_recognizes({:controller => 'devise/sessions', :action => 'destroy'}, {:path => 'users/sign_out', :method => :get})
+    assert_named_route "/users/sign_out", :destroy_user_session_path
+  end
+
+  test 'map new user confirmation' do
+    assert_recognizes({:controller => 'devise/confirmations', :action => 'new'}, 'users/confirmation/new')
+    assert_named_route "/users/confirmation/new", :new_user_confirmation_path
+  end
+
+  test 'map create user confirmation' do
+    assert_recognizes({:controller => 'devise/confirmations', :action => 'create'}, {:path => 'users/confirmation', :method => :post})
+    assert_named_route "/users/confirmation", :user_confirmation_path
+  end
+
+  test 'map show user confirmation' do
+    assert_recognizes({:controller => 'devise/confirmations', :action => 'show'}, {:path => 'users/confirmation', :method => :get})
+  end
+
+  test 'map new user password' do
+    assert_recognizes({:controller => 'devise/passwords', :action => 'new'}, 'users/password/new')
+    assert_named_route "/users/password/new", :new_user_password_path
+  end
+
+  test 'map create user password' do
+    assert_recognizes({:controller => 'devise/passwords', :action => 'create'}, {:path => 'users/password', :method => :post})
+    assert_named_route "/users/password", :user_password_path
+  end
+
+  test 'map edit user password' do
+    assert_recognizes({:controller => 'devise/passwords', :action => 'edit'}, 'users/password/edit')
+    assert_named_route "/users/password/edit", :edit_user_password_path
+  end
+
+  test 'map update user password' do
+    assert_recognizes({:controller => 'devise/passwords', :action => 'update'}, {:path => 'users/password', :method => :put})
+  end
+
+  test 'map new user unlock' do
+    assert_recognizes({:controller => 'devise/unlocks', :action => 'new'}, 'users/unlock/new')
+    assert_named_route "/users/unlock/new", :new_user_unlock_path
+  end
+
+  test 'map create user unlock' do
+    assert_recognizes({:controller => 'devise/unlocks', :action => 'create'}, {:path => 'users/unlock', :method => :post})
+    assert_named_route "/users/unlock", :user_unlock_path
+  end
+
+  test 'map show user unlock' do
+    assert_recognizes({:controller => 'devise/unlocks', :action => 'show'}, {:path => 'users/unlock', :method => :get})
+  end
+
+  test 'map new user registration' do
+    assert_recognizes({:controller => 'devise/registrations', :action => 'new'}, 'users/sign_up')
+    assert_named_route "/users/sign_up", :new_user_registration_path
+  end
+
+  test 'map create user registration' do
+    assert_recognizes({:controller => 'devise/registrations', :action => 'create'}, {:path => 'users', :method => :post})
+    assert_named_route "/users", :user_registration_path
+  end
+
+  test 'map edit user registration' do
+    assert_recognizes({:controller => 'devise/registrations', :action => 'edit'}, {:path => 'users/edit', :method => :get})
+    assert_named_route "/users/edit", :edit_user_registration_path
+  end
+
+  test 'map update user registration' do
+    assert_recognizes({:controller => 'devise/registrations', :action => 'update'}, {:path => 'users', :method => :put})
+  end
+
+  test 'map destroy user registration' do
+    assert_recognizes({:controller => 'devise/registrations', :action => 'destroy'}, {:path => 'users', :method => :delete})
+  end
+
+  test 'map cancel user registration' do
+    assert_recognizes({:controller => 'devise/registrations', :action => 'cancel'}, {:path => 'users/cancel', :method => :get})
+    assert_named_route "/users/cancel", :cancel_user_registration_path
+  end
+
+  test 'map oauth callbacks' do
+    assert_recognizes({:controller => 'devise/oauth_callbacks', :action => 'facebook'}, {:path => 'users/oauth/facebook/callback', :method => :get})
+    assert_named_route "/users/oauth/facebook/callback", :user_oauth_callback_path, :facebook
+
+    assert_recognizes({:controller => 'devise/oauth_callbacks', :action => 'github'}, {:path => 'users/oauth/github/callback', :method => :get})
+    assert_named_route "/users/oauth/github/callback", :user_oauth_callback_path, :github
+
+    assert_raise ActionController::RoutingError do
+      assert_recognizes({:controller => 'devise/oauth_callbacks', :action => 'twitter'}, {:path => 'users/oauth/twitter/callback', :method => :get})
+    end
+  end
+
+  protected
+
+  def assert_named_route(result, *args)
+    assert_equal result, @routes.url_helpers.send(*args)
+  end
+end
+
+class CustomizedRoutingTest < ActionController::TestCase
+  test 'map admin with :path option' do
+    assert_recognizes({:controller => 'devise/registrations', :action => 'new'}, {:path => 'admin_area/sign_up', :method => :get})
+  end
+
+  test 'map admin with :controllers option' do
+    assert_recognizes({:controller => 'admins/sessions', :action => 'new'}, {:path => 'admin_area/sign_in', :method => :get})
+  end
+
+  test 'does not map admin password' do
+    assert_raise ActionController::RoutingError do
+      assert_recognizes({:controller => 'devise/passwords', :action => 'new'}, 'admin_area/password/new')
+    end
+  end
+
+  test 'map account with custom path name for session sign in' do
+    assert_recognizes({:controller => 'devise/sessions', :action => 'new', :locale => 'en'}, '/en/accounts/login')
+  end
+
+  test 'map account with custom path name for session sign out' do
+    assert_recognizes({:controller => 'devise/sessions', :action => 'destroy', :locale => 'en'}, '/en/accounts/logout')
+  end
+
+  test 'map account with custom path name for password' do
+    assert_recognizes({:controller => 'devise/passwords', :action => 'new', :locale => 'en'}, '/en/accounts/secret/new')
+  end
+
+  test 'map account with custom path name for confirmation' do
+    assert_recognizes({:controller => 'devise/confirmations', :action => 'new', :locale => 'en'}, '/en/accounts/verification/new')
+  end
+
+  test 'map account with custom path name for unlock' do
+    assert_recognizes({:controller => 'devise/unlocks', :action => 'new', :locale => 'en'}, '/en/accounts/unblock/new')
+  end
+
+  test 'map account with custom path name for registration' do
+    assert_recognizes({:controller => 'devise/registrations', :action => 'new', :locale => 'en'}, '/en/accounts/management/register')
+  end
+
+  test 'map account with custom path name for cancel registration' do
+    assert_recognizes({:controller => 'devise/registrations', :action => 'cancel', :locale => 'en'}, '/en/accounts/management/giveup')
+  end
+
+  test 'map deletes with :sign_out_via option' do
+    assert_recognizes({:controller => 'devise/sessions', :action => 'destroy'}, {:path => '/sign_out_via/deletes/sign_out', :method => :delete})
+    assert_raise ActionController::RoutingError do
+      assert_recognizes({:controller => 'devise/sessions', :action => 'destroy'}, {:path => '/sign_out_via/deletes/sign_out', :method => :get})
+    end
+  end
+
+  test 'map posts with :sign_out_via option' do
+    assert_recognizes({:controller => 'devise/sessions', :action => 'destroy'}, {:path => '/sign_out_via/posts/sign_out', :method => :post})
+    assert_raise ActionController::RoutingError do
+      assert_recognizes({:controller => 'devise/sessions', :action => 'destroy'}, {:path => '/sign_out_via/posts/sign_out', :method => :get})
+    end
+  end
+
+  test 'map delete_or_posts with :sign_out_via option' do
+    assert_recognizes({:controller => 'devise/sessions', :action => 'destroy'}, {:path => '/sign_out_via/delete_or_posts/sign_out', :method => :post})
+    assert_recognizes({:controller => 'devise/sessions', :action => 'destroy'}, {:path => '/sign_out_via/delete_or_posts/sign_out', :method => :delete})
+    assert_raise ActionController::RoutingError do
+      assert_recognizes({:controller => 'devise/sessions', :action => 'destroy'}, {:path => '/sign_out_via/delete_or_posts/sign_out', :method => :get})
+    end
+  end
+end
+
+class ScopedRoutingTest < ActionController::TestCase
+  test 'map publisher account' do
+    assert_recognizes({:controller => 'publisher/registrations', :action => 'new'}, {:path => '/publisher/accounts/sign_up', :method => :get})
+    assert_equal '/publisher/accounts/sign_up', @routes.url_helpers.new_publisher_account_registration_path
+  end
+
+  test 'map publisher account merges path names' do
+    assert_recognizes({:controller => 'publisher/sessions', :action => 'new'}, {:path => '/publisher/accounts/get_in', :method => :get})
+    assert_equal '/publisher/accounts/get_in', @routes.url_helpers.new_publisher_account_session_path
+  end
+end

data/test/support/assertions.rb

@@ -0,0 +1,24 @@
+require 'active_support/test_case'
+
+class ActiveSupport::TestCase
+  def assert_not(assertion)
+    assert !assertion
+  end
+
+  def assert_blank(assertion)
+    assert assertion.blank?
+  end
+
+  def assert_not_blank(assertion)
+    assert !assertion.blank?
+  end
+  alias :assert_present :assert_not_blank
+
+  def assert_email_sent(&block)
+    assert_difference('ActionMailer::Base.deliveries.size') { yield }
+  end
+
+  def assert_email_not_sent(&block)
+    assert_no_difference('ActionMailer::Base.deliveries.size') { yield }
+  end
+end

data/test/support/helpers.rb

@@ -0,0 +1,60 @@
+require 'active_support/test_case'
+
+class ActiveSupport::TestCase
+  VALID_AUTHENTICATION_TOKEN = 'AbCdEfGhIjKlMnOpQrSt'.freeze
+
+  def setup_mailer
+    ActionMailer::Base.deliveries = []
+  end
+
+  def store_translations(locale, translations, &block)
+    begin
+      I18n.backend.store_translations(locale, translations)
+      yield
+    ensure
+      I18n.reload!
+    end
+  end
+
+  def generate_unique_email
+    @@email_count ||= 0
+    @@email_count += 1
+    "test#{@@email_count}@email.com"
+  end
+
+  def valid_attributes(attributes={})
+    { :username => "usertest",
+      :email => generate_unique_email,
+      :password => '123456',
+      :password_confirmation => '123456' }.update(attributes)
+  end
+
+  def new_user(attributes={})
+    User.new(valid_attributes(attributes))
+  end
+
+  def create_user(attributes={})
+    User.create!(valid_attributes(attributes))
+  end
+
+  def create_admin(attributes={})
+    valid_attributes = valid_attributes(attributes)
+    valid_attributes.delete(:username)
+    Admin.create!(valid_attributes)
+  end
+
+  # Execute the block setting the given values and restoring old values after
+  # the block is executed.
+  def swap(object, new_values)
+    old_values = {}
+    new_values.each do |key, value|
+      old_values[key] = object.send key
+      object.send :"#{key}=", value
+    end
+    yield
+  ensure
+    old_values.each do |key, value|
+      object.send :"#{key}=", value
+    end
+  end
+end

data/test/support/integration.rb

@@ -0,0 +1,88 @@
+require 'action_dispatch/testing/integration'
+
+class ActionDispatch::IntegrationTest
+  def warden
+    request.env['warden']
+  end
+
+  def create_user(options={})
+    @user ||= begin
+      user = User.create!(
+        :username => 'usertest',
+        :email => 'user@test.com',
+        :password => '123456',
+        :password_confirmation => '123456',
+        :created_at => Time.now.utc
+      )
+      user.confirm! unless options[:confirm] == false
+      user.lock_access! if options[:locked] == true
+      user
+    end
+  end
+
+  def create_admin(options={})
+    @admin ||= begin
+      admin = Admin.create!(
+        :email => 'admin@test.com', :password => '123456', :password_confirmation => '123456'
+      )
+      admin
+    end
+  end
+
+  def sign_in_as_user(options={}, &block)
+    user = create_user(options)
+    visit_with_option options[:visit], new_user_session_path
+    fill_in 'email', :with => 'user@test.com'
+    fill_in 'password', :with => options[:password] || '123456'
+    check 'remember me' if options[:remember_me] == true
+    yield if block_given?
+    click_button 'Sign In'
+    user
+  end
+
+  def sign_in_as_admin(options={}, &block)
+    admin = create_admin(options)
+    visit_with_option options[:visit], new_admin_session_path
+    fill_in 'email', :with => 'admin@test.com'
+    fill_in 'password', :with => '123456'
+    yield if block_given?
+    click_button 'Sign In'
+    admin
+  end
+
+  # Fix assert_redirect_to in integration sessions because they don't take into
+  # account Middleware redirects.
+  #
+  def assert_redirected_to(url)
+    assert [301, 302].include?(@integration_session.status),
+           "Expected status to be 301 or 302, got #{@integration_session.status}"
+
+    assert_url url, @integration_session.headers["Location"]
+  end
+
+  def assert_current_url(expected)
+    assert_url expected, current_url
+  end
+
+  def assert_url(expected, actual)
+    assert_equal prepend_host(expected), prepend_host(actual)
+  end
+
+  protected
+
+    def visit_with_option(given, default)
+      case given
+      when String
+        visit given
+      when FalseClass
+        # Do nothing
+      else
+        visit default
+      end
+    end
+
+    def prepend_host(url)
+      url = "http://#{request.host}#{url}" if url[0] == ?/
+      url
+    end
+end