ecm_user_area2 1.0.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: cf5f9a9ac06ef8e44670fa8baff5a2b91da83d73
+  data.tar.gz: a225a17f1e82295f09fb5eac9e230152043404a9
+SHA512:
+  metadata.gz: fdf1595f854da352918613621ef38233bba501e8e2a82b47edfb809970dd46af5ebb9e58946b7f787d0d4268c95a48d79926fe3f2d6ca753e828a45df4184c74
+  data.tar.gz: b933337fb116a17ef0a43c0a9e319748245daa2cbc1fcc487dfc66f2c385fb8fe1494ffc395f65fb5b0fc2bb32bfa57f57d15ba9f9af8c78e6b37bb49453661c

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2015 Roberto Vasquez Angel
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.rdoc

@@ -0,0 +1,66 @@
+= ECM User Area
+
+
+= Installation
+
+Add it to your Gemfile:
+
+  # Gemfile
+  gem 'ecm_user_area2'
+
+Install:
+
+  rails g ecm:user_area:install
+
+Add Migrations and migrate:
+
+  rake ecm_user_area:install:migrations && rake db:migrate
+
+Optionally, create a default user (user@example.com/password):
+
+  rake ecm:user_area:create_default_user
+  
+Add routes:
+
+  # config/routes.rb
+  mount Ecm::UserArea::Engine, at: '/auth'
+
+Add current_user helpers to your application controller:
+
+  # app/controllers/application_controller.rb
+  include Controller::RedirectBackConcern
+  include Controller::CurrentUserConcern
+
+
+= Usage
+
+to secure a controller, add following before_action:
+
+  # app/controllers/my_secure_controller.rb
+  before_action :authenticate_user!
+
+When you visit any controller actions, you will be redirected to the sign in form.
+
+
+= Adding helper methods
+
+  # app/controllers/application_controller.rb
+  include Controller::CurrentUserConcern
+
+This gives you #current_user_session, #current_user, user_signed_in?
+
+
+= Using the navigation helper
+
+  # app/controllers/application_controller.rb
+  helper Ecm::UserAreaHelper
+
+
+= Running Specs
+
+    gem install bundler
+    bundle
+    cd spec/dummy && rake db:migrate RAILS_ENV=test && cd ../..
+    guard
+
+This project rocks and uses MIT-LICENSE.

data/Rakefile

@@ -0,0 +1,25 @@
+#!/usr/bin/env rake
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+begin
+  require 'rdoc/task'
+rescue LoadError
+  require 'rdoc/rdoc'
+  require 'rake/rdoctask'
+  RDoc::Task = Rake::RDocTask
+end
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'ECM UserArea'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+Bundler::GemHelper.install_tasks
+
+require 'rails/dummy/tasks'

data/app/concerns/controller/current_user_concern.rb

@@ -0,0 +1,60 @@
+module Controller
+  module CurrentUserConcern
+    extend ActiveSupport::Concern
+
+    included do
+      helper_method :current_user_session, :current_user, :user_signed_in?
+    end
+
+    private
+
+    def after_sign_out_url
+      "/#{I18n.locale}"
+    end
+
+    def authenticate_user!
+      unless user_signed_in?
+        store_location
+        handle_authentication_failure
+        return false
+      end
+      true
+    end
+
+    def current_user_session
+      return @current_user_session if defined?(@current_user_session)
+      @current_user_session = Ecm::UserArea::UserSession.find
+    end
+
+    def current_user
+      return @current_user if defined?(@current_user)
+      @current_user = current_user_session && current_user_session.user
+    end
+
+    def user_authentication_failed_path
+      ecm_user_area.new_user_session_path
+    end
+
+    def user_signed_in?
+      !current_user.nil?
+    end
+
+    def sign_out_user
+      @current_user = nil
+      redirect_to after_sign_out_url
+    end
+
+    def current_session(type)
+      type = type.to_s
+      type << '_session' unless type.end_with?('_session')
+      send("current_#{type}".to_sym)
+    end
+
+    def handle_authentication_failure
+      respond_to do |format|
+        format.json { render json: { error: :forbidden }, status: :forbidden }
+        format.html { redirect_to(user_authentication_failed_path, notice: t('messages.failures.ecm_user_area.authentication_failed')) }
+      end
+    end
+  end
+end

data/app/concerns/controller/redirect_back_concern.rb

@@ -0,0 +1,18 @@
+module Controller
+  module RedirectBackConcern
+    extend ActiveSupport::Concern
+
+    def store_location
+      session[:original_location] = request.url if request.get?
+    end
+
+    def redirect_back_or(url)
+      redirect_to(session[:original_location] || url)
+      clear_return_to
+    end
+
+    def clear_return_to
+      session.delete(:original_location)
+    end
+  end
+end

data/app/controllers/ecm/user_area/sessions/base_controller.rb

@@ -0,0 +1,48 @@
+module Ecm::UserArea
+  class Sessions::BaseController < Ecm::UserArea::Configuration.base_controller.constantize
+    include Controller::ResourceConcern
+    include Controller::ResourceInflectionsConcern
+    include Controller::ResourceUrlsConcern
+    include Controller::RestActionsConcern
+    include Controller::RedirectBackConcern
+
+    skip_before_action :authenticate_user!, only: [:new, :create]
+
+    def new
+      @session = initialize_resource
+      respond_with @session
+    end
+
+    def create
+      @session = resource_class.new(permitted_params)
+
+      if @session.save
+        flash[:notice] = I18n.t('messages.success.ecm_user_area.signed_in') unless request.xhr?
+        redirect_back_or(after_sign_in_url)
+        return
+      else
+        render action: :new
+      end
+    end
+
+    def destroy
+      current_session(resource_class.name.demodulize.underscore.to_sym).destroy
+      flash[:notice] = I18n.t('messages.success.ecm_user_area.signed_out') unless request.xhr?
+      redirect_to after_sign_out_url
+    end
+
+    def self.resource_class
+      fail 'please define self.session_class in your controller.'
+    end
+
+    private
+
+    def after_sign_in_url
+      "/#{I18n.locale}" unless defined?(super)
+    end
+
+    def permitted_params
+      params.require(resource_class.name.demodulize.underscore.tr('/', '_')).permit(:email, :password)
+    end
+  end
+end

data/app/controllers/ecm/user_area/user_sessions_controller.rb

@@ -0,0 +1,7 @@
+module Ecm::UserArea
+  class UserSessionsController < Sessions::BaseController
+    def self.resource_class
+      UserSession
+    end
+  end
+end

data/app/controllers/ecm/user_area/users/base_controller.rb

@@ -0,0 +1,44 @@
+module Ecm::UserArea
+  class Users::BaseController < Ecm::UserArea::Configuration.base_controller.constantize
+    include Controller::ResourceConcern
+    include Controller::ResourceInflectionsConcern
+    include Controller::ResourceUrlsConcern
+    include Controller::RestActionsConcern
+    include Controller::RedirectBackConcern
+
+    before_action :authenticate_user!, except: [:new, :create]
+
+    def create
+      @resource = resource_class.new(permitted_params)
+      flash[:notice] = I18n.t('messages.confirmations.ecm_user_area.send_instructions') if @resource.save && !request.xhr?
+      respond_with @resource, location: after_registration_url
+    end
+
+    def update
+      @resource = load_resource
+      # do not assign password/confirmation if they are empty
+      @resource.attributes = permitted_params.delete_if { |_k, v| v.empty? }
+
+      if @resource.save && (@resource.previous_changes.keys.map(&:to_sym) & [:email, :crypted_password]).any?
+        current_session(:user).destroy
+        redirect_to(new_user_session_path)
+        return
+      end
+      respond_with @resource, location: edit_user_path
+    end
+
+    private
+
+    def after_registration_url
+      new_user_session_path
+    end
+
+    def load_resource
+      send("current_#{resource_class.name.demodulize.underscore}".to_sym)
+    end
+
+    def permitted_params
+      params.require(resource_class.name.demodulize.underscore.to_sym).permit(:email, :password, :password_confirmation)
+    end
+  end
+end

data/app/controllers/ecm/user_area/users_controller.rb

@@ -0,0 +1,7 @@
+module Ecm::UserArea
+  class UsersController < Users::BaseController
+    def self.resource_class
+      User
+    end
+  end
+end

data/app/helpers/ecm/user_area_helper.rb

@@ -0,0 +1,13 @@
+module Ecm::UserAreaHelper
+  def render_user_navigation(*args)
+    options = args.extract_options!
+    options.reverse_merge!(dropdown: false)
+    dropdown = options.delete(:dropdown)
+
+    if dropdown
+      render partial: 'ecm/user_area/navigation_dropdown'
+    else
+      render partial: 'ecm/user_area/navigation'
+    end
+  end
+end

data/app/models/ecm/user_area/user.rb

@@ -0,0 +1,43 @@
+require 'bcrypt'
+
+module Ecm::UserArea
+  class User < ActiveRecord::Base
+    scope :autocomplete, ->(matcher) { where("LOWER(email) LIKE ?", "%#{matcher.downcase}%") }
+
+    def self.current_id=(id)
+      Thread.current[:user_id] = id
+    end
+
+    def self.current_id
+      Thread.current[:user_id]
+    end
+
+    acts_as_authentic do |config|
+      # config.session_class = Ecm::UserArea:UserSession
+      # c.crypto_provider = Authlogic::CryptoProviders::BCrypt
+      config.crypto_provider = Authlogic::CryptoProviders::BCrypt
+      config.login_field = :email
+
+      # def self.find_by_downcase_email(email)
+      #   find_by_email(email.downcase)
+      # end
+    end
+
+    def as_json(options = {})
+      options.reverse_merge!(style: :default)
+
+      style = options.delete(:style)
+
+      case style
+      when :autocomplete
+        { value: id, title: human, subtitle: self.inspect }
+      else
+        super
+      end
+    end
+
+    def human
+      email
+    end
+  end
+end

data/app/serializers/ecm/user_area/user_serializer.rb

@@ -0,0 +1,5 @@
+module Ecm::UserArea
+  class UserSerializer < ActiveModel::Serializer
+    attributes %w(id email single_access_token login_count failed_login_count last_request_at current_login_at last_login_at current_login_ip last_login_ip active approved confirmed created_at updated_at)
+  end
+end

data/app/services/ecm/user_area/create_default_user_service.rb

@@ -0,0 +1,35 @@
+module Ecm::UserArea
+  class CreateDefaultUserService < Itsf::Services::V2::Service::Base
+    class Response < Itsf::Services::V2::Response::Base
+      attr_accessor :user
+    end
+
+    def do_work
+      response.user = create_default_user
+      respond
+    end
+
+    private
+
+    def create_default_user
+      user = Ecm::UserArea::User.new(user_attributes)
+      if user.save
+        info 'Created default user'
+      else
+        error "Could not create default user. Errors: #{user.errors.full_messages.to_sentence}"
+      end
+      user
+    end
+
+    def user_attributes
+      {
+        email: 'user@example.com',
+        password: 'password',
+        password_confirmation: 'password',
+        active: true,
+        approved: true,
+        confirmed: true
+      }
+    end
+  end
+end

data/app/sessions/ecm/user_area/session/base.rb

@@ -0,0 +1,4 @@
+module Ecm::UserArea
+  class Session::Base < Authlogic::Session::Base
+  end
+end

data/app/sessions/ecm/user_area/user_session.rb

@@ -0,0 +1,12 @@
+module Ecm::UserArea
+  class UserSession < Session::Base
+    # authenticate_with Ecm::UserArea::User
+
+    # attr_accessor :email, :password
+
+    # find_by_login_method :find_by_downcase_email
+
+    params_key "#{self.name.demodulize.tableize.gsub('_sessions', '')}_api_key"
+    single_access_allowed_request_types = :json
+  end
+end

data/app/views/ecm/user_area/_navigation.html.haml

@@ -0,0 +1,12 @@
+%p.navbar-text
+  -if user_signed_in?
+    = current_user.email
+  - else
+    = t('.not_signed_in')
+%ul.nav.navbar-nav
+  - if user_signed_in?
+    %li= link_to t('.edit'), ecm_user_area.edit_user_path
+    %li= link_to t('.sign_out'), ecm_user_area.user_session_path, method: :delete
+  - else
+    %li= link_to t('.sign_in'), ecm_user_area.new_user_session_path
+    %li= link_to t('.new'), ecm_user_area.new_user_path

data/app/views/ecm/user_area/_navigation_dropdown.html.haml

@@ -0,0 +1,15 @@
+%ul.nav.navbar-nav
+  %li.dropdown
+    %a.dropdown-toggle{ href: '#', 'data-toggle': 'dropdown', role: 'button', 'aria-has-popup': true, 'aria-expanded': false }
+      -if user_signed_in?
+        = current_user.email
+      - else
+        = t('.not_signed_in')
+      %span.caret
+    %ul.dropdown-menu
+      - if user_signed_in?
+        %li= link_to t('.edit'), ecm_user_area.edit_user_path
+        %li= link_to t('.sign_out'), ecm_user_area.user_session_path, method: :delete
+      - else
+        %li= link_to t('.sign_in'), ecm_user_area.new_user_session_path
+        %li= link_to t('.new'), ecm_user_area.new_user_path

data/app/views/ecm/user_area/sessions/base/_form.html.haml

@@ -0,0 +1,2 @@
+= form.input :email
+= form.input :password

data/app/views/ecm/user_area/sessions/base/_form_errors.html.haml

@@ -0,0 +1,6 @@
+- if resource.errors.any?
+  .error-explanation.alert.alert-danger
+    .error-heading= t('errors.template.header', count: resource.errors.count, model: resource.model_name.human)
+    %ul
+      - resource.errors.full_messages.each do |msg|
+        %li= msg

data/app/views/ecm/user_area/sessions/base/new.html.haml

@@ -0,0 +1,15 @@
+%div.panel.panel-default
+  %div.panel-heading
+    %h1= t('.title', inflections)
+  %div.panel-body
+    = simple_form_for(@session, url: user_session_path) do |f|
+      = render partial: 'form_errors', locals: { resource: f.object }
+      = render 'form', form: f
+      = f.button :submit, class: 'btn btn-success'
+  %div.panel-footer
+
+.well.well-sm
+  .btn-container-right
+    = link_to main_app.root_path, class: 'btn btn-default btn-responsive' do
+      %span.glyphicon.glyphicon-arrow-left
+      %span.btn-text= t('.back')

data/app/views/ecm/user_area/users/base/_form.html.haml

@@ -0,0 +1,3 @@
+= form.input :email
+= form.input :password
+= form.input :password_confirmation

data/app/views/ecm/user_area/users/base/_form_errors.html.haml

@@ -0,0 +1,6 @@
+- if resource.errors.any?
+  .error-explanation.alert.alert-danger
+    .error-heading= t('errors.template.header', count: resource.errors.count, model: resource.model_name.human)
+    %ul
+      - resource.errors.full_messages.each do |msg|
+        %li= msg

data/app/views/ecm/user_area/users/base/_show.html.haml

@@ -0,0 +1,2 @@
+- resource_class.attribute_names.delete_if { |name| [:id].include?(name.to_sym) }.each do |name|
+  = table.row name

data/app/views/ecm/user_area/users/base/edit.html.haml

@@ -0,0 +1,17 @@
+.panel.panel-default
+  .panel-heading
+    %h1= t('.title', inflections)
+  .panel-body
+    = simple_form_for(@resource, url: user_path) do |f|
+      = render partial: 'form_errors', locals: { resource: f.object }
+      = render 'form', form: f
+      = f.button :submit, class: 'btn btn-success'
+  .panel-footer
+
+.well.well-sm
+  = link_to user_path, class: 'btn btn-primary btn-responsive' do
+    %span.glyphicon.glyphicon-eye-open
+    %span.btn-text= t('.show')
+  = link_to main_app.root_path, class: 'btn btn-default btn-responsive pull-right' do
+    %span.glyphicon.glyphicon-arrow-left
+    %span.btn-text= t('.back')

data/app/views/ecm/user_area/users/base/new.html.haml

@@ -0,0 +1,15 @@
+%div.panel.panel-default
+  %div.panel-heading
+    %h1= t('.title', inflections)
+  %div.panel-body
+    = simple_form_for(@resource, url: user_path) do |f|
+      = render partial: 'form_errors', locals: { resource: f.object }
+      = render 'form', form: f
+      = f.button :submit, class: 'btn btn-success'
+  %div.panel-footer
+
+.well.well-sm
+  .btn-container-right
+    = link_to main_app.root_path, class: 'btn btn-default btn-responsive' do
+      %span.glyphicon.glyphicon-arrow-left
+      %span.btn-text= t('.back')

data/app/views/ecm/user_area/users/base/show.html.haml

@@ -0,0 +1,28 @@
+%p#notice= notice
+
+#page-title.bottom-margin-1
+  .row
+    .col-xs-8
+      %h1= @resource.human
+    .col-xs-4
+      #page-actions.btn-container-right
+        = link_to(resource_path(@resource), method: :delete, class: 'btn btn-danger btn-responsive', 'data-confirm': I18n.t('confirmations.delete')) do
+          %span.glyphicon.glyphicon-fire
+          %span.btn-text= t('.destroy')
+
+.panel.panel-default.panel-with-actions
+  %table.table.table-striped.table-condensed.table-hover
+    = render_resource(@resource, as: :bootstrap_attribute_table) do |table|
+      = render 'show', table: table
+
+  .panel-footer
+
+= render 'show_extras', resource: @resource
+
+.well.well-sm
+  = link_to(ecm_user_area.edit_users_path, class: 'btn btn-primary btn-responsive') do
+    %span.glyphicon.glyphicon-pencil
+    %span.btn-text= t('.edit')
+  = link_to main_app.root_path, class: 'btn btn-default btn-responsive pull-right' do
+    %span.glyphicon.glyphicon-arrow-left
+    %span.btn-text= t('.back')

data/config/locales/authlogic.de.yml

@@ -0,0 +1,24 @@
+de:
+  authlogic:
+    error_messages:
+      login_blank: darf nicht leer sein
+      login_not_found: ist nicht gültig
+      login_invalid: darf nur aus Buchstaben, Zahlen, Leerzeichen, und .-_@+ bestehen.
+      consecutive_failed_logins_limit_exceeded: Zuviele fehlgeschlagene Loginversuche, der Account wurde deaktiviert.
+      email_invalid: muss eine E-Mail Adresse sein.
+      email_invalid_international: muss eine E-Mail Adresse sein.
+      password_blank: darf nicht leer sein
+      password_invalid: ist nicht gültig
+      not_active: Ihr Account ist nicht aktiv
+      not_confirmed: Ihr Account ist nicht bestätigt
+      not_approved: Ihr Account ist nicht verifiziert
+      no_authentication_details: Sie haben keine Authentifizierungsdetails angegeben.
+      general_credentials_error: Benutzername/Password nicht bekannt.
+    models:
+      user_session: User Session
+    attributes:
+      user_session:
+        login: Benutzername
+        email: E-Mail
+        password: Passwort
+        remember_me: merken?

data/config/locales/de.yml

@@ -0,0 +1,57 @@
+de:
+  activerecord:
+    attributes:
+      ecm/user_area/user:
+        active: Aktiv
+        approved: Genehmigt
+        confirmed: Bestätigt
+    models:
+      ecm/user_area/user:
+        one: Benutzer
+        other: Benutzer
+  classes:
+    ecm/user_area/create_default_user_service: 'Dienst zum Erstellen eines Standard-Benutzers'
+  ecm:
+    user_area:
+      navigation: &navigation
+        edit: Mein Account
+        new: Registrieren
+        not_signed_in: Nicht angemeldet
+        sign_in: Einloggen
+        sign_out: Ausloggen
+      navigation_dropdown: 
+        <<: *navigation
+      sessions:
+        base:
+          new:
+            back: Zurück
+            title: Einloggen
+      users:
+        base:
+          edit:
+            back: Zurück
+            show: Anzeigen
+            title: Mein Account
+          new:
+            back: Zurück
+            title: Registrieren
+  helpers:
+    submit:
+      user_session:
+        create: 'Einloggen'
+      user:
+        create: 'Registrieren'
+        update: 'Aktualisieren'
+  messages:
+    confirmations:
+      ecm_user_area:
+        send_instructions: 'Sie erhalten in wenigen Minuten eine E-Mail, mit der Sie Ihre Registrierung bestätigen können.'
+    success:
+      ecm_user_area:
+        signed_in: 'Erfolgreich angemeldet.'
+        signed_out: 'Erfolgreich abgemeldet.'
+    failures:
+      ecm_user_area:
+        authentication_failed: 'Sie müssen sich anmelden oder registrieren, bevor Sie fortfahren können.'
+  routes:
+    users: benutzer