devise_token_auth_multitenancy 1.1.3.alpha1

data/test/dummy/app/controllers/custom/passwords_controller.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+class Custom::PasswordsController < DeviseTokenAuth::PasswordsController
+  def create
+    super do |resource|
+      @create_block_called = true unless resource.nil?
+    end
+  end
+
+  def edit
+    super do |resource|
+      @edit_block_called = true unless resource.nil?
+    end
+  end
+
+  def update
+    super do |resource|
+      @update_block_called = true unless resource.nil?
+    end
+  end
+
+  def create_block_called?
+    @create_block_called == true
+  end
+
+  def edit_block_called?
+    @edit_block_called == true
+  end
+
+  def update_block_called?
+    @update_block_called == true
+  end
+
+  protected
+
+  def render_update_success
+    render json: { custom: 'foo' }
+  end
+end

data/test/dummy/app/controllers/custom/registrations_controller.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+class Custom::RegistrationsController < DeviseTokenAuth::RegistrationsController
+  def create
+    super do |resource|
+      @create_block_called = true
+    end
+  end
+
+  def update
+    super do |resource|
+      @update_block_called = true unless resource.nil?
+    end
+  end
+
+  def destroy
+    super do |resource|
+      @destroy_block_called = true unless resource.nil?
+    end
+  end
+
+  def create_block_called?
+    @create_block_called == true
+  end
+
+  def update_block_called?
+    @update_block_called == true
+  end
+
+  def destroy_block_called?
+    @destroy_block_called == true
+  end
+
+  protected
+
+  def render_create_success
+    render json: { custom: 'foo' }
+  end
+end

data/test/dummy/app/controllers/custom/sessions_controller.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+class Custom::SessionsController < DeviseTokenAuth::SessionsController
+  def create
+    super do |resource|
+      @create_block_called = true unless resource.nil?
+    end
+  end
+
+  def destroy
+    super do |resource|
+      @destroy_block_called = true unless resource.nil?
+    end
+  end
+
+  def create_block_called?
+    @create_block_called == true
+  end
+
+  def destroy_block_called?
+    @destroy_block_called == true
+  end
+
+  protected
+
+  def render_create_success
+    render json: { custom: 'foo' }
+  end
+end

data/test/dummy/app/controllers/custom/token_validations_controller.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+class Custom::TokenValidationsController < DeviseTokenAuth::TokenValidationsController
+  def validate_token
+    super do |resource|
+      @validate_token_block_called = true unless resource.nil?
+    end
+  end
+
+  def validate_token_block_called?
+    @validate_token_block_called == true
+  end
+
+  protected
+
+  def render_validate_token_success
+    render json: { custom: 'foo' }
+  end
+end

data/test/dummy/app/controllers/demo_group_controller.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+class DemoGroupController < ApplicationController
+  devise_token_auth_group :member, contains: [:user, :mang]
+  before_action :authenticate_member!
+
+  def members_only
+    render json: {
+      data: {
+        message: "Welcome #{current_member.name}",
+        user: current_member
+      }
+    }, status: 200
+  end
+end

data/test/dummy/app/controllers/demo_mang_controller.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+class DemoMangController < ApplicationController
+  before_action :authenticate_mang!
+
+  def members_only
+    render json: {
+      data: {
+        message: "Welcome #{current_mang.name}",
+        user: current_mang
+      }
+    }, status: 200
+  end
+end

data/test/dummy/app/controllers/demo_user_controller.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+class DemoUserController < ApplicationController
+  before_action :authenticate_user!
+
+  def members_only
+    render json: {
+      data: {
+        message: "Welcome #{current_user.name}",
+        user: current_user
+      }
+    }, status: 200
+  end
+
+  def members_only_remove_token
+    u = User.find(current_user.id)
+    u.tokens = {}
+    u.save!
+
+    render json: {
+      data: {
+        message: "Welcome #{current_user.name}",
+        user: current_user
+      }
+    }, status: 200
+  end
+end

data/test/dummy/app/controllers/overrides/confirmations_controller.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+module Overrides
+  class ConfirmationsController < DeviseTokenAuth::ConfirmationsController
+    def show
+      @resource = resource_class.confirm_by_token(params[:confirmation_token])
+
+      if @resource && @resource.id
+        token = @resource.create_token
+        @resource.save!
+
+        redirect_header_options = {
+          account_confirmation_success: true,
+          config: params[:config],
+          override_proof: '(^^,)'
+        }
+        redirect_headers = build_redirect_headers(token.token,
+                                                  token.client,
+                                                  redirect_header_options)
+
+        redirect_to(@resource.build_auth_url(params[:redirect_url],
+                                             redirect_headers))
+      else
+        raise ActionController::RoutingError, 'Not Found'
+      end
+    end
+  end
+end

data/test/dummy/app/controllers/overrides/omniauth_callbacks_controller.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+module Overrides
+  class OmniauthCallbacksController < DeviseTokenAuth::OmniauthCallbacksController
+    DEFAULT_NICKNAME = 'stimpy'.freeze
+
+    def assign_provider_attrs(user, auth_hash)
+      user.assign_attributes(
+        nickname: DEFAULT_NICKNAME,
+        name:     auth_hash['info']['name'],
+        image:    auth_hash['info']['image'],
+        email:    auth_hash['info']['email']
+      )
+    end
+  end
+end

data/test/dummy/app/controllers/overrides/passwords_controller.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+module Overrides
+  class PasswordsController < DeviseTokenAuth::PasswordsController
+    OVERRIDE_PROOF = '(^^,)'.freeze
+
+    # this is where users arrive after visiting the email confirmation link
+    def edit
+      @resource = resource_class.reset_password_by_token(
+        reset_password_token: resource_params[:reset_password_token]
+      )
+
+      if @resource && @resource.id
+        token = @resource.create_token
+
+        # ensure that user is confirmed
+        @resource.skip_confirmation! unless @resource.confirmed_at
+
+        @resource.save!
+
+        redirect_header_options = {
+          override_proof: OVERRIDE_PROOF,
+          reset_password: true
+        }
+        redirect_headers = build_redirect_headers(token.token,
+                                                  token.client,
+                                                  redirect_header_options)
+        redirect_to(@resource.build_auth_url(params[:redirect_url],
+                                             redirect_headers))
+      else
+        raise ActionController::RoutingError, 'Not Found'
+      end
+    end
+  end
+end

data/test/dummy/app/controllers/overrides/registrations_controller.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module Overrides
+  class RegistrationsController < DeviseTokenAuth::RegistrationsController
+    OVERRIDE_PROOF = '(^^,)'.freeze
+
+    def update
+      if @resource
+        if @resource.update(account_update_params)
+          render json: {
+            status: 'success',
+            data:   @resource.as_json,
+            override_proof: OVERRIDE_PROOF
+          }
+        else
+          render json: {
+            status: 'error',
+            errors: @resource.errors
+          }, status: 422
+        end
+      else
+        render json: {
+          status: 'error',
+          errors: ['User not found.']
+        }, status: 404
+      end
+    end
+  end
+end

data/test/dummy/app/controllers/overrides/sessions_controller.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+module Overrides
+  class SessionsController < DeviseTokenAuth::SessionsController
+    OVERRIDE_PROOF = '(^^,)'.freeze
+
+    def create
+      @resource = resource_class.dta_find_by(email: resource_params[:email])
+
+      if @resource && valid_params?(:email, resource_params[:email]) && @resource.valid_password?(resource_params[:password]) && @resource.confirmed?
+        @token = @resource.create_token
+        @resource.save
+
+        render json: {
+          data: @resource.as_json(except: %i[tokens created_at updated_at]),
+          override_proof: OVERRIDE_PROOF
+        }
+
+      elsif @resource && (not @resource.confirmed?)
+        render json: {
+          success: false,
+          errors: [
+            "A confirmation email was sent to your account at #{@resource.email}. "\
+            'You must follow the instructions in the email before your account '\
+            'can be activated'
+          ]
+        }, status: 401
+
+      else
+        render json: {
+          errors: ['Invalid login credentials. Please try again.']
+        }, status: 401
+      end
+    end
+  end
+end

data/test/dummy/app/controllers/overrides/token_validations_controller.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Overrides
+  class TokenValidationsController < DeviseTokenAuth::TokenValidationsController
+    OVERRIDE_PROOF = '(^^,)'.freeze
+
+    def validate_token
+      # @resource will have been set by set_user_by_token concern
+      if @resource
+        render json: {
+          success: true,
+          data: @resource.as_json(except: %i[tokens created_at updated_at]),
+          override_proof: OVERRIDE_PROOF
+        }
+      else
+        render json: {
+          success: false,
+          errors: ['Invalid login credentials']
+        }, status: 401
+      end
+    end
+  end
+end