door_mat 0.0.5

data/spec/test_app/Rakefile

@@ -0,0 +1,6 @@
+# Add your own tasks in files placed in lib/tasks ending in .rake,
+# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
+
+require File.expand_path('../config/application', __FILE__)
+
+Rails.application.load_tasks

data/spec/test_app/app/assets/javascripts/application.js

@@ -0,0 +1,13 @@
+// This is a manifest file that'll be compiled into application.js, which will include all the files
+// listed below.
+//
+// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
+// or vendor/assets/javascripts of plugins, if any, can be referenced here using a relative path.
+//
+// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
+// compiled file.
+//
+// Read Sprockets README (https://github.com/sstephenson/sprockets#sprockets-directives) for details
+// about supported directives.
+//
+//= require_tree .

data/spec/test_app/app/assets/stylesheets/application.css

@@ -0,0 +1,15 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or vendor/assets/stylesheets of plugins, if any, can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the bottom of the
+ * compiled file so the styles you add here take precedence over styles defined in any styles
+ * defined in the other CSS/SCSS files in this directory. It is generally better to create a new
+ * file per style scope.
+ *
+ *= require_tree .
+ *= require_self
+ */

data/spec/test_app/app/controllers/account_controller.rb

@@ -0,0 +1,28 @@
+class AccountController < ApplicationController
+  before_action -> {require_password_reconfirm(15)} # override the default password_reconfirm_delay
+  before_action :update_session_last_activity_time
+
+  def show
+    @actor = DoorMat::Session.current_session.actor
+
+    if @actor.user_detail.blank?
+      @actor.user_detail = UserDetail.new
+    end
+  end
+
+  def update
+    actor = DoorMat::Session.current_session.actor
+
+    actor.user_detail.name = update_params[:name]
+    actor.user_detail.save!
+
+    redirect_to account_show_url
+  end
+
+  private
+
+  def update_params
+    params.require(:user_detail).permit(:name)
+  end
+
+end

data/spec/test_app/app/controllers/application_controller.rb

@@ -0,0 +1,10 @@
+class ApplicationController < ActionController::Base
+  # Prevent CSRF attacks by raising an exception.
+  # For APIs, you may want to use :null_session instead.
+  protect_from_forgery with: :exception
+
+  include DoorMat::Controller
+  before_action :require_valid_session
+  before_action :require_confirmed_email
+
+end

data/spec/test_app/app/controllers/password_less_sample_controller.rb

@@ -0,0 +1,56 @@
+class PasswordLessSampleController < ApplicationController
+
+  skip_before_action :require_valid_session
+  skip_before_action :require_confirmed_email
+  before_action -> {protected_by_password_less_session([:big_ticket, :multipass])}, only: [:draw_results, :play_game, :choose_door_post]
+  before_action -> {protected_by_password_less_session(:play_game)}, only: [:show_loosing_door, :final_choice_post]
+  before_action -> {protected_by_password_less_session(:show_loosing_door)}, only: [:final_result]
+  before_action :update_session_last_activity_time
+
+  def play_game
+    access_token = DoorMat::AccessToken.current_access_token
+
+    actor = DoorMat::Process::CreateNewAnonymousActor.owned_by(access_token.actor)
+    @game = Game.init_for_actor_and_doors(actor, 10)
+    @game.save!
+    access_token.reference_id = @game.id
+    access_token.save!
+
+  rescue Exception => e
+    DoorMat.configuration.logger.error "ERROR: Failed to save game? - #{e}"
+  end
+
+  def choose_door_post
+    access_token = DoorMat::AccessToken.current_access_token
+    @game = Game.find(access_token.reference_id)
+    @game.player_select_door! params[:door].to_i
+    @game.host_select_loosing_door
+    @game.save!
+
+    DoorMat::AccessToken.swap_token!(cookies, [:big_ticket, :multipass], :play_game)
+    redirect_to show_loosing_door_url
+  end
+
+  def show_loosing_door
+    access_token = DoorMat::AccessToken.current_access_token
+    @game = Game.find(access_token.reference_id)
+  end
+
+  def final_choice_post
+    access_token = DoorMat::AccessToken.current_access_token
+    @game = Game.find(access_token.reference_id)
+    @game.player_select_door! params[:door].to_i
+    @game.save!
+
+    DoorMat::AccessToken.swap_token!(cookies, :play_game, :show_loosing_door)
+    redirect_to final_result_url
+  end
+
+  def final_result
+    access_token = DoorMat::AccessToken.current_access_token
+    @game = Game.find(access_token.reference_id)
+
+    access_token.destroy!
+  end
+
+end

data/spec/test_app/app/controllers/static_controller.rb

@@ -0,0 +1,7 @@
+class StaticController < ApplicationController
+  skip_before_action :require_valid_session, only: [:index]
+  skip_before_action :require_confirmed_email, only: [:index, :session_protected_page]
+
+  before_action :require_password_reconfirm, only: [:page_that_require_password_reconfirmation]
+  before_action :update_session_last_activity_time, only: [:session_protected_page]
+end

data/spec/test_app/app/helpers/account_helper.rb

@@ -0,0 +1,2 @@
+module AccountHelper
+end

data/spec/test_app/app/helpers/application_helper.rb

@@ -0,0 +1,2 @@
+module ApplicationHelper
+end

data/spec/test_app/app/models/game.rb

@@ -0,0 +1,62 @@
+class Game < ActiveRecord::Base
+  include DoorMat::AttrSymmetricStore
+
+  belongs_to :actor, class_name: 'DoorMat::Actor'
+
+  attr_symmetric_store :state
+
+  def self.init_for_actor_and_doors(actor, door_count)
+    game = Game.new
+    game.actor = actor
+    game.state = [
+        door_count, # doors
+        Array(1 .. door_count).sample, # winning door
+        0, # player selected door
+        0  # loosing door shown
+    ].join(':')
+    game
+  end
+
+  def number_of_doors
+    get_at(0)
+  end
+  def winning_door
+    get_at(1)
+  end
+  def player_selected_door
+    get_at(2)
+  end
+  def loosing_door_shown
+    get_at(3)
+  end
+
+  def player_select_door!(door_number)
+    raise "Invalid door number selected" unless ((door_number.to_i > 0) && (door_number.to_i <= number_of_doors))
+    set_at(2, door_number)
+  end
+
+  def host_select_loosing_door
+    return unless 0 == loosing_door_shown
+    available_doors = Array(1 .. number_of_doors)
+    available_doors.delete(winning_door)
+    available_doors.delete(player_selected_door)
+    set_at(3, available_doors.sample)
+  end
+
+  def player_win?
+    winning_door == player_selected_door
+  end
+
+  private
+
+  def get_at(i)
+    self.state.split(':')[i].to_i
+  end
+
+  def set_at(i, value)
+    state = self.state.split(':')
+    state[i] = value.to_s
+    self.state = state.join(':')
+  end
+
+end

data/spec/test_app/app/models/shared_data.rb

@@ -0,0 +1,4 @@
+class SharedData < ActiveRecord::Base
+  has_many :shared_keys
+  has_many :actor, class_name: 'DoorMat::Actor', :through => :shared_keys
+end

data/spec/test_app/app/models/shared_key.rb

@@ -0,0 +1,8 @@
+class SharedKey < ActiveRecord::Base
+  include DoorMat::AttrAsymmetricStore
+
+  belongs_to :actor, class_name: 'DoorMat::Actor'
+  belongs_to :shared_data
+
+  attr_asymmetric_store :key
+end

data/spec/test_app/app/models/user_detail.rb

@@ -0,0 +1,7 @@
+class UserDetail < ActiveRecord::Base
+  include DoorMat::AttrSymmetricStore
+
+  belongs_to :actor, class_name: 'DoorMat::Actor'
+
+  attr_symmetric_store :name
+end

data/spec/test_app/app/views/account/show.html.erb

@@ -0,0 +1,133 @@
+<h1>Account#show</h1>
+<p>Find me in app/views/account/show.html.erb</p>
+<%= link_to 'Sign Out', door_mat.sign_out_path %><br>
+<%= link_to 'Back to - Session protected page', main_app.session_protected_page_path %>
+
+<h2>You are currently logged in as:</h2>
+<%= DoorMat::Session.current_session.email.address %>
+
+<h2>User Name</h2>
+<%= form_for(@actor.user_detail, url: account_update_path) do |f| %>
+    <%= f.text_field :name %>
+    <%= f.submit 'Update' %>
+<% end %>
+<p>The UserDetail model demonstrate the automatic encryption of a text field using DoorMat::AttrSymmetricStore</p>
+
+
+<h2>Recovery Key</h2>
+
+<% download_recovery_key_activities = @actor.download_recovery_key_activities %>
+<% if download_recovery_key_activities.blank? %>
+    <p>You have already downloaded your recovery key; to obtain a new one, change your password.</p>
+<% else %>
+    <% if DoorMat::Session.current_session.private_computer?%>
+        <table>
+          <% @actor.download_recovery_key_activities.each do |key| %>
+              <tr>
+                <td>
+                  Click below to download your recovery key.
+
+                  <%= form_tag(door_mat.download_recovery_key_path) do %>
+                      <%= hidden_field_tag( 'token', key.get_new_token) %>
+                      <%= hidden_field_tag( 'disposition', 'attachment') %>
+                      <%= submit_tag("Download") %>
+                  <% end %>
+
+                </td>
+              </tr>
+          <% end %>
+        </table>
+    <% else %>
+        <p>Please sign in from a private computer in order to safely download your recovery key.</p>
+    <% end %>
+<% end %>
+
+<h2>Registered Email Address</h2>
+<table>
+  <% @actor.emails.each do |email| %>
+      <tr>
+        <td>
+          <%= email.address %>
+        </td>
+        <td>
+          <% if email.confirmed? || email.primary? %>
+          Confirmed
+          <% else %>
+              <%= form_tag(door_mat.resend_email_confirmation_path) do %>
+                  <%= hidden_field_tag( 'email', email.to_urlsafe_encoded) %>
+                  <%= submit_tag("Resend confirmation email") %>
+              <% end %>
+          <% end %>
+        </td>
+
+        <% if email.primary? %>
+            <td>
+              Primary
+            </td>
+            <td>
+              Can't delete primary
+            </td>
+        <% else %>
+            <td>
+              <%= form_tag(door_mat.set_primary_email_path) do %>
+                  <%= hidden_field_tag( 'email', email.to_urlsafe_encoded) %>
+                  <%= submit_tag("Make primary") %>
+              <% end %>
+            </td>
+            <td>
+              <%= form_tag(door_mat.delete_email_path) do %>
+                  <%= hidden_field_tag( 'email', email.to_urlsafe_encoded) %>
+                  <%= submit_tag("Delete") %>
+              <% end %>
+            </td>
+        <% end %>
+      </tr>
+  <% end %>
+</table>
+
+<%= link_to 'Add new email', door_mat.add_email_path %>
+
+
+<h2>Change Password</h2>
+<%= link_to 'Change Password', door_mat.change_password_path %>
+
+<h2>Active sessions</h2>
+<table>
+  <% @actor.sessions.each do |session| %>
+      <% is_current_session = DoorMat::Session.current_session.hashed_token == session.hashed_token %>
+      <tr>
+        <td>
+          <% if is_current_session %>
+            *
+          <% end %>
+
+          <%= session.email.address %>
+        </td>
+        <td>
+          <%= session.hashed_token %>
+        </td>
+        <td>
+          <%= session.ip %>
+        </td>
+        <td>
+          <%= session.created_at %>
+        </td>
+        <td>
+          <%= session.updated_at %>
+        </td>
+          <td>
+          <%= session.password_authenticated_at %>
+          </td>
+        <td>
+          <% unless is_current_session %>
+              <%= button_to "Terminate", door_mat.terminate_session_path(session.hashed_token), method: :post%>
+          <% end %>
+        </td>
+      </tr>
+      <tr>
+        <td colspan="4">
+          <%= session.agent %>
+        </td>
+      </tr>
+  <% end %>
+</table>

data/spec/test_app/app/views/door_mat/static/sign_out_success.html.erb

@@ -0,0 +1,7 @@
+<h1>You have successfully signed out!</h1>
+
+<p>Find me in test_app/app/views/door_mat/static/sign_out_success.html.erb</p>
+
+<p>This page is a static placeholder for the DoorMat test app. It overrides the default app/views/door_mat/static/sign_out_success.html.erb</p>
+
+<%= link_to 'Sign In', door_mat.sign_in_path %>

data/spec/test_app/app/views/layouts/application.html.erb

@@ -0,0 +1,20 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>TestApp</title>
+  <%= stylesheet_link_tag    'application', media: 'all', 'data-turbolinks-track' => true %>
+  <%= javascript_include_tag 'application', 'data-turbolinks-track' => true %>
+  <%= csrf_meta_tags %>
+</head>
+<body>
+
+<% flash.each do |type, message| %>
+    <div class="<%= type %>">
+      <%= message %>
+    </div>
+<% end %>
+
+<%= yield %>
+
+</body>
+</html>

data/spec/test_app/app/views/password_less_sample/draw_results.html.erb

@@ -0,0 +1,6 @@
+
+<p>Big ticket Winner!</p>
+
+<p>
+  Would you like to <%= link_to 'Play a game?', play_game_url %>
+</p>

data/spec/test_app/app/views/password_less_sample/final_result.html.erb

@@ -0,0 +1,7 @@
+<% if @game.player_win? %>
+    <p>You win!</p>
+<% else %>
+    <p>You lose!</p>
+<% end %>
+
+<p>Door <%= @game.winning_door %> was the winning door!</p>

data/spec/test_app/app/views/password_less_sample/play_game.html.erb

@@ -0,0 +1,5 @@
+<p>Choose a door</p>
+<%= form_tag(choose_door_path) do %>
+    <%= select_tag "door", options_for_select(Array(1 .. @game.number_of_doors.to_i).map {|n| [n.to_s, n]}) %>
+    <%= submit_tag "Next" %>
+<% end %>

data/spec/test_app/app/views/password_less_sample/show_loosing_door.html.erb

@@ -0,0 +1,10 @@
+
+<p>The host now opens a losing door:</p>
+<p>Door <%= @game.loosing_door_shown %> is a losing door!</p>
+
+<p>You can change your selection</p>
+<p>Please submit your final decision:</p>
+<%= form_tag(final_choice_path) do %>
+    <%= select_tag "door", options_for_select(Array(1 .. @game.number_of_doors.to_i).map {|n| [n.to_s, n]}, @game.player_selected_door) %>
+    <%= submit_tag "Next" %>
+<% end %>

data/spec/test_app/app/views/static/index.html.erb

@@ -0,0 +1,12 @@
+
+<p>This is a sample application using the DoorMat engine to manage and secure user accounts</p>
+
+<h2>Password protected site</h2>
+<%= link_to 'Sign In', door_mat.sign_in_path %>
+<p>
+  Don't have an account yet? <%= link_to 'Sign Up', door_mat.sign_up_path %>
+</p>
+
+
+<h2>Password less, access token protected site</h2>
+<%= link_to 'Would you like to play a game?', main_app.draw_results_path %>