eucalypt 0.8.0 → 0.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 771a431c14d309ed211df539c99b3e25ab84e915ca74701daea4e14fcf5adf47
-  data.tar.gz: 333f258faf7446501ed5700009f34300cb7226160dda5722ebde2bb12b164767
+  metadata.gz: '059e655c54b7cb64868221dfe948c1463bc3b11b50ab52ad633911f5b39b94f0'
+  data.tar.gz: adcb2767cda8d8645c7fc364076010a1240d12a6ee660e375a6b145986d7eb2e
 SHA512:
-  metadata.gz: 3c1a78bcaf7f2804dc6a3557930e3c74f9bc4aafa4be272ecd0c224a7d9b6f4b610d27cdfa5c2897e19f88e9bdda088b88bff93caaf63fa15604317b55d370dc
-  data.tar.gz: 054f855e42dd04196f5d3fbb9fc4e1400f98479bb72d44202a358690a5fa67a280f1e785d27ef34b21fcb841fc453183d0076ff25edda5fc136b5e079d0194c3
+  metadata.gz: 49fcbe9658765775d525f96636756b6f7a7d1021b3ca4d9733345c5bfbf527d0ddbfd858d8e0112bdd9f1158050ff77d373856e9bdebafb3ae1ccc58822f8796
+  data.tar.gz: 1852878c661320e2a65cb5593decadc5dc3bfafe77b3cb4e1a374c902cf2868557be5acc68186a95c32a35ab7da3e15e07a4f8591607ffb222cc14dbb2f98d89

data/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2018-2020 Edwin Onuonga
+Copyright (c) 2018-2020 Edwin Onuonga <ed@eonu.net>
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -18,4 +18,4 @@ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+SOFTWARE.

data/README.md

@@ -104,11 +104,34 @@ The structure of a generated application looks like the following:
 | JS compressing       | [Uglifier](https://github.com/lautis/uglifier)               |
 | Logging              | [Lumberjack](https://github.com/bdurand/lumberjack)          |
 | Specs                | [RSpec](http://rspec.info/) + [Rack-Test](https://github.com/rack-test/rack-test) + [Shoulda-Matchers](http://matchers.shoulda.io/) |
-| Encryption           | [BCrypt](https://github.com/codahale/bcrypt-ruby)            |
-| Authentication       | [Warden](https://github.com/wardencommunity/warden)          |
-| Authorization        | [Pundit](https://github.com/varvet/pundit)                   |
 
-## Acknowledgements
+# Contributors
+
+<table>
+	<thead>
+		<tr>
+		  <th align="center">
+        <a href="https://github.com/eonu">
+        <img src="https://avatars0.githubusercontent.com/u/24795571?s=460&v=4" alt="Edwin Onuonga" width="60px">
+        <br/><sub><b>Edwin Onuonga</b></sub>
+        </a>
+        <br/>
+        <a href="mailto:ed@eonu.net">✉️</a>
+        <a href="https://eonu.net">🌍</a>
+			</th>
+      <th align="center">
+        <a href="https://github.com/ahmgeek">
+        <img src="https://avatars3.githubusercontent.com/u/4132009?s=460&v=4" alt="Ahmad" width="60px">
+        <br/><sub><b>Ahmad</b></sub>
+        </a>
+        <br/>
+        <a href="mailto:ahmgeek@icloud.com">✉️</a>
+        <a href="https://ahmgeek.com/">🌍</a>
+			</th>
+			<!-- Add more <th></th> blocks for more contributors -->
+		</tr>
+	</thead>
+</table>
 
 <p align="center">
   <b>Eucalypt</b> &copy; 2018-2020, Edwin Onuonga - Released under the <a href="http://mit-license.org/">MIT</a> License.<br/>

data/lib/eucalypt.rb

@@ -3,7 +3,6 @@ require 'eucalypt/core/cli/core'
 require 'eucalypt/blog/namespaces/blog/cli/blog'
 require 'eucalypt/generate/namespaces/generate/cli/generate'
 require 'eucalypt/destroy/namespaces/destroy/cli/destroy'
-require 'eucalypt/security/namespaces/security/cli/security'
 require 'eucalypt/migration/namespaces/migration/cli/migration'
 require 'eucalypt/static'
 require 'eucalypt/controller'

data/lib/eucalypt/core/cli/init.rb

@@ -10,8 +10,6 @@ module Eucalypt
     option :blog, type: :boolean, default: false, aliases: '-b', desc: 'Set up the blog environment'
     option :route, type: :string, default: 'blog', aliases: '-r', desc: 'Specify a route for the blog application'
     option :silence, type: :boolean, default: false, aliases: '-s', desc: 'Silence `git init` and `bundle install` commands'
-    option :warden, type: :boolean, default: false, aliases: '-w', desc: 'Set up Warden authentication'
-    option :pundit, type: :boolean, default: false, aliases: '-p', desc: 'Set up Pundit authorization'
     desc "init [NAME]", "Sets up your application".colorize(:grey)
     def init(name)
       current_directory = File.expand_path ?.
@@ -56,11 +54,6 @@ module Eucalypt
           end
         end
 
-        inside(root) do
-          Eucalypt::CLI.start %w[security warden setup] if options[:warden]
-          Eucalypt::CLI.start %w[security pundit setup] if options[:warden] && options[:pundit]
-        end
-
         puts if options[:git] || options[:bundle]
         inside(root) { run(options[:silence] ? 'git init --quiet' : 'git init') } if options[:git]
         puts if options[:git] && options[:bundle]

data/lib/eucalypt/errors.rb

@@ -54,30 +54,6 @@ module Eucalypt
         puts " - Ensure you have run the setup command `#{command.colorize(:bold)}`."
       end
 
-      def no_user_model
-        Out.error "Couldn't find a user model."
-        puts
-        Out.info
-        command = 'eucalypt security warden setup'
-        puts " - Ensure you have run the setup command `#{command.colorize(:bold)}`."
-      end
-
-      def no_role_model
-        Out.error "Couldn't find a role model."
-        puts
-        Out.info
-        command = 'eucalypt security pundit setup'
-        puts " - Ensure you have run the setup command `#{command.colorize(:bold)}`."
-      end
-
-      def no_policy(policy_name)
-        Out.error "Couldn't find a #{policy_name} role model or policy file."
-        puts
-        Out.info
-        command = "eucalypt security policy g #{policy_name}"
-        puts " - Ensure you have run the setup command `#{command.colorize(:bold)}`."
-      end
-
       def invalid_columns(invalid_declarations, invalid_types)
         puts if invalid_declarations.any? || invalid_types.any?
         if invalid_declarations.any?

data/lib/eucalypt/generate/namespaces/generate-controller/cli/generate-controller.rb

@@ -18,9 +18,7 @@ module Eucalypt
         controller.generate(
           name: name,
           spec: options[:spec],
-          rest: options[:rest],
-          policy: false,
-          headless: false
+          rest: options[:rest]
         )
       else
         Eucalypt::Error.wrong_directory

data/lib/eucalypt/generate/namespaces/generate-controller/generators/controller.rb

@@ -14,13 +14,12 @@ module Eucalypt
         File.join File.dirname(__dir__), 'templates'
       end
 
-      def generate(spec: true, rest: false, policy: false, headless: false, name:)
+      def generate(spec: true, rest: false, name:)
         controller = Inflect.new(:controller, name)
 
         route = '/' << (rest ? controller.route_name.pluralize : controller.route_name)
 
         controller_file_name = String.build do |s|
-          s << 'policy_' if policy
           s << 'rest_' if rest
           s << 'controller.tt'
         end
@@ -34,8 +33,7 @@ module Eucalypt
           class_name: controller.class_name,
           helper_class_name: helper.class_name,
           resource: controller.resource,
-          resources: controller.resources,
-          headless: headless
+          resources: controller.resources
         }
 
         template(controller_template, controller.file_path, config)

data/lib/eucalypt/generate/namespaces/generate/cli/generate-scaffold.rb

@@ -9,8 +9,6 @@ module Eucalypt
 
     option :no, aliases: '-n', type: :array, default: [], enum: %w[m ms c cs h hs], desc: "Omit specified scaffold files"
     option :rest, aliases: '-r', type: :boolean, default: false,  desc: "Generate REST routes for the controller"
-    option :policy, aliases: '-p', type: :boolean, default: false, desc: "Generate a policy with the scaffold"
-    option :headless, type: :boolean, aliases: '-H', default: false, desc: "Policy with no associated model"
     option :table, type: :boolean, default: true, desc: "Generate a table migration"
     desc "scaffold [NAME] *[COLUMN∶TYPE]", "Generates a scaffold".colorize(:grey)
     def scaffold(name, *columns)
@@ -40,24 +38,12 @@ module Eucalypt
         if controller
           controller = Eucalypt::Generators::Controller.new
           controller.destination_root = directory
-          policy = options[:rest] && options[:policy]
-          headless = options[:policy] && options[:headless]
           controller.generate(
             name: name,
             spec: controller_spec,
-            rest: options[:rest],
-            policy: policy,
-            headless: headless
+            rest: options[:rest]
           )
         end
-
-        if options[:policy]
-          args = ['security', 'policy', 'generate', name]
-          args << '--headless' if options[:headless]
-          args << %w[-p read add edit delete] if options[:rest]
-          args.flatten!
-          Eucalypt::CLI.start(args)
-        end
       else
         Eucalypt::Error.wrong_directory
       end

data/lib/eucalypt/helpers/inflect.rb

@@ -37,7 +37,7 @@ module Eucalypt
           resources(string).camelize
         end
 
-        %i[controller helper policy].each do |type|
+        %i[controller helper].each do |type|
           define_method type do |string|
             s = resource(string.singularize)
             if s.end_with? "_#{type}"

data/lib/eucalypt/load.rb

@@ -10,9 +10,7 @@ ApplicationController.helpers ApplicationHelper if defined? ApplicationHelper
 
 Eucalypt.require 'app', 'helpers', '{main_helper.rb}'
 Eucalypt.require 'app', 'controllers', 'main_controller.rb'
-Eucalypt.require 'app', '{models}', '{roles}', '*.rb'
-Eucalypt.require 'app', '{models,policies,helpers,controllers}', '*.rb'
+Eucalypt.require 'app', '{models,helpers,controllers}', '*.rb'
 
-require 'eucalypt/security/permissions'
 require 'eucalypt/core/helpers/default_index'
 require 'eucalypt/core/helpers/maintenance'

data/lib/eucalypt/migration/namespaces/migration/cli/migration.rb

@@ -1,3 +1,4 @@
+require 'active_record'
 require 'eucalypt/migration/namespaces/migration-create/cli/create'
 require 'eucalypt/migration/namespaces/migration-add/cli/add'
 require 'eucalypt/migration/namespaces/migration-drop/cli/drop'

data/lib/eucalypt/version.rb

@@ -1,7 +1,7 @@
 module Eucalypt
   VERSION = {
     major: 0,
-    minor: 8,
+    minor: 9,
     patch: 0,
     meta: nil
   }.compact.values.join('.').freeze

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: eucalypt
 version: !ruby/object:Gem::Version
-  version: 0.8.0
+  version: 0.9.0
 platform: ruby
 authors:
 - Edwin Onuonga
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-05-15 00:00:00.000000000 Z
+date: 2019-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -268,7 +268,6 @@ files:
 - lib/eucalypt/generate/namespaces/generate-controller/cli/generate-controller.rb
 - lib/eucalypt/generate/namespaces/generate-controller/generators/controller.rb
 - lib/eucalypt/generate/namespaces/generate-controller/templates/controller/controller.tt
-- lib/eucalypt/generate/namespaces/generate-controller/templates/controller/policy_rest_controller.tt
 - lib/eucalypt/generate/namespaces/generate-controller/templates/controller/rest_controller.tt
 - lib/eucalypt/generate/namespaces/generate-controller/templates/controller_spec.tt
 - lib/eucalypt/generate/namespaces/generate-helper/cli/generate-helper.rb
@@ -321,31 +320,6 @@ files:
 - lib/eucalypt/migration/namespaces/migration-rename/generators/table.rb
 - lib/eucalypt/migration/namespaces/migration/cli/migration.rb
 - lib/eucalypt/root.rb
-- lib/eucalypt/security/confirm.rb
-- lib/eucalypt/security/helpers.rb
-- lib/eucalypt/security/namespaces/security-policy-permission/cli/security-policy-permission.rb
-- lib/eucalypt/security/namespaces/security-policy-permission/generators/policy-permission.rb
-- lib/eucalypt/security/namespaces/security-policy-permission/templates/add_permission_to_policy_migration.tt
-- lib/eucalypt/security/namespaces/security-policy-role/cli/security-policy-role.rb
-- lib/eucalypt/security/namespaces/security-policy/cli/security-policy.rb
-- lib/eucalypt/security/namespaces/security-policy/generators/policy.rb
-- lib/eucalypt/security/namespaces/security-policy/templates/create_policy_roles_migration.tt
-- lib/eucalypt/security/namespaces/security-policy/templates/policy.tt
-- lib/eucalypt/security/namespaces/security-policy/templates/policy_role.tt
-- lib/eucalypt/security/namespaces/security-pundit/cli/security-pundit.rb
-- lib/eucalypt/security/namespaces/security-pundit/generators/role.rb
-- lib/eucalypt/security/namespaces/security-pundit/templates/create_roles_migration.tt
-- lib/eucalypt/security/namespaces/security-pundit/templates/pundit.tt
-- lib/eucalypt/security/namespaces/security-warden/cli/security-warden.rb
-- lib/eucalypt/security/namespaces/security-warden/generators/auth_controller.rb
-- lib/eucalypt/security/namespaces/security-warden/generators/user.rb
-- lib/eucalypt/security/namespaces/security-warden/templates/auth_controller.tt
-- lib/eucalypt/security/namespaces/security-warden/templates/auth_login.tt
-- lib/eucalypt/security/namespaces/security-warden/templates/create_users_table_migration.tt
-- lib/eucalypt/security/namespaces/security-warden/templates/user.tt
-- lib/eucalypt/security/namespaces/security-warden/templates/warden.tt
-- lib/eucalypt/security/namespaces/security/cli/security.rb
-- lib/eucalypt/security/permissions.rb
 - lib/eucalypt/static.rb
 - lib/eucalypt/version.rb
 homepage: https://eucalypt.gitbook.io/eucalypt

data/lib/eucalypt/generate/namespaces/generate-controller/templates/controller/policy_rest_controller.tt

@@ -1,96 +0,0 @@
-class <%= config[:class_name] %> < Eucalypt::Controller(route: '<%= config[:route] %>')
-  helpers <%= config[:helper_class_name] %> if defined? <%= config[:helper_class_name] %>
-
-  # You can use the following authentication helper methods in your views:
-  # `current_user` - The User model object for the current user.
-  # `authenticated?` (alias `logged_in?`) - Whether or not a user is logged in.
-
-  # You can also use authorization helpers in your views.
-  # These are useful for conditional displays to users with the correct permissions.
-  # - e.g. Showing a form for editing <%= config[:resources] %>
-  <% if config[:headless] %>
-  # Authorization helpers are used in the following way (if using headless policies):
-  # - `authorized?(:<%= config[:resource] %>, :read?)`
-  # - `authorized?(:<%= config[:resource] %>, :add?)`
-  # - `authorized?(:<%= config[:resource] %>, :edit?)`
-  # - `authorized?(:<%= config[:resource] %>, :delete?)`
-  <% else %>
-  # Authorization helpers are used in the following way:
-  # - `authorized?(<%= config[:constant] %>, :read?)`
-  # - `authorized?(<%= config[:constant] %>, :add?)`
-  # - `authorized?(<%= config[:constant] %>, :edit?)`
-  # - `authorized?(<%= config[:constant] %>, :delete?)`
-  <% end %>
-  # GET - Browse
-  get '/' do
-    # NOTE: To skip browse permission checks, comment out the `authenticate` and `authorize` lines.
-    authenticate
-    authorize <%= config[:constant] %>, :read?
-    @<%= config[:resources] %> = <%= config[:constant] %>.all
-    # Render the <%= config[:resources] %> as JSON, or create a view
-    content_type :json
-    @<%= config[:resources] %>.to_json
-  rescue Pundit::NotAuthorizedError
-    status 401 # Unauthorized
-    redirect '/'
-  end
-
-  # GET - Read
-  get '/:id' do |id|
-    # NOTE: To skip read permission checks, comment out the `authenticate` and `authorize` lines.
-    authenticate
-    @<%= config[:resource] %> = <%= config[:constant] %>.find id
-    authorize @<%= config[:resource] %>, :read?
-    # Render the <%= config[:resource] %> as JSON, or create a view
-    content_type :json
-    @<%= config[:resource] %>.to_json
-  rescue ActiveRecord::RecordNotFound
-    status 404 # Resource not found
-    redirect to '/'
-  rescue Pundit::NotAuthorizedError
-    status 401 # Unauthorized
-    redirect to '/'
-  end
-
-  # POST - Edit
-  post '/:id/edit' do |id|
-    authenticate
-    <%= config[:resource] %> = <%= config[:constant] %>.find id
-    authorize <%= config[:resource] %>, :edit?
-    <%= config[:resource] %>.update! params['<%= config[:resource] %>']
-    redirect to "/#{id}"
-  rescue ActiveRecord::RecordNotFound
-    status 404 # Resource not found
-    redirect to "/#{id}"
-  rescue Pundit::NotAuthorizedError
-    status 401 # Unauthorized
-    redirect to '/'
-  end
-
-  # POST - Add
-  post '/' do
-    authenticate
-    <%= config[:resource] %> = <%= config[:constant] %>.new params['<%= config[:resource] %>']
-    authorize <%= config[:resource] %>, :add?
-    <%= config[:resource] %>.save!
-    redirect to "/#{<%= config[:resource] %>.id}"
-  rescue Pundit::NotAuthorizedError
-    status 401 # Unauthorized
-    redirect to '/'
-  end
-
-  # POST - Delete
-  post '/:id/delete' do |id|
-    authenticate
-    <%= config[:resource] %> = <%= config[:constant] %>.find id
-    authorize <%= config[:resource] %>, :delete?
-    <%= config[:resource] %>.destroy!
-    redirect to '/'
-  rescue ActiveRecord::RecordNotFound
-    status 404 # Resource not found
-    redirect to "/#{id}"
-  rescue Pundit::NotAuthorizedError
-    status 401 # Unauthorized
-    redirect to '/'
-  end
-end

data/lib/eucalypt/security/confirm.rb

@@ -1,38 +0,0 @@
-class User < ActiveRecord::Base
-  def with_confirm(*fields)
-    return if fields.empty?
-    fields.map(&:to_sym).each {|field| instance_variable_set "@with_confirm_#{field}", true }
-    class_eval do
-      attr_accessor *fields.map {|field| "#{field}_confirmation".to_sym }
-      attr_reader *fields.map {|field| field.to_sym }.reject {|field| field != :password}
-    end
-
-    fields.each do |field|
-      confirm = "confirm_#{field}".to_sym
-      define_singleton_method confirm do
-        if instance_variable_get "@with_#{confirm}"
-          case field
-          when :password
-            return if @password.nil?
-            unless authenticate @password_confirmation
-              errors.add :password_confirmation, "Passwords don't match"
-            end
-          else
-            actual = self.send field
-            return if actual.nil?
-            confirmation = instance_variable_get "@#{field}_confirmation"
-            unless actual == confirmation
-              errors.add "#{field}_confirmation", "#{field.to_s.pluralize.capitalize} don't match"
-            end
-          end
-        end
-      end
-
-      class_eval do
-        private confirm
-        validate confirm
-      end
-    end
-    self
-  end
-end

data/lib/eucalypt/security/helpers.rb

@@ -1,22 +0,0 @@
-require 'active_support'
-require 'active_support/core_ext'
-require 'thor'
-require 'eucalypt/helpers'
-require 'eucalypt/generate/namespaces/generate/cli/generate'
-
-module Eucalypt
-  class Security < Thor
-    module Helpers
-      include Eucalypt::Helpers
-      include Eucalypt::Helpers::Messages
-      using Colorize
-
-      def create_config_file(type, directory)
-        config_relative = File.join 'config', "#{type}.rb"
-        config_file = File.join(directory, config_relative)
-        Out.warning "#{type.to_s.capitalize} config file #{config_relative.colorize(:bold)} already exists." if File.file? config_file
-        template "#{type}.tt", config_file
-      end
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-policy-permission/cli/security-policy-permission.rb

@@ -1,60 +0,0 @@
-require 'thor'
-require 'eucalypt/errors'
-require 'eucalypt/helpers'
-require 'eucalypt/security/namespaces/security-policy-permission/generators/policy-permission'
-require 'eucalypt/list'
-
-module Eucalypt
-  class SecurityPolicyPermission < Thor
-    include Thor::Actions
-    include Eucalypt::Helpers
-    using Colorize
-    extend Eucalypt::List
-
-    desc "generate [POLICY] [PERMISSION]", "Create a new Pundit policy permission".colorize(:grey)
-    def generate(name, permission)
-      directory = File.expand_path('.')
-      if Eucalypt.app? directory
-        # Check for authorization gems
-        return unless Gemfile.check(%w[pundit], 'eucalypt security pundit setup', directory)
-
-        # Check for user model
-        unless File.exist? File.join(directory, 'app', 'models', 'user.rb')
-          Eucalypt::Error.no_user_model
-          return
-        end
-
-        # Check for role model
-        unless File.exist? File.join(directory, 'app', 'models', 'role.rb')
-          Eucalypt::Error.no_role_model
-          return
-        end
-
-        policy = Inflect.new(:policy, name)
-
-        # Check for policy file and policy role model
-        policy_file = File.join(directory, 'app', 'policies', policy.file_name)
-        policy_role_model = File.join(directory, 'app', 'models', 'roles', "#{policy.resource}_role.rb")
-        unless File.exist?(policy_file) && File.exist?(policy_role_model)
-          Eucalypt::Error.no_policy(policy.resource)
-          return
-        end
-
-        policy_permission = Eucalypt::Generators::PolicyPermission.new
-        policy_permission.destination_root = directory
-
-        # Add permission record to policy role table
-        policy_permission.generate(policy_name: policy.resource, permission: Inflect.resource_keep_inflection(permission))
-      else
-        Eucalypt::Error.wrong_directory
-      end
-    end
-
-    # def destroy()
-    # end
-
-    def self.banner(task, namespace = false, subcommand = true)
-      "#{basename} security policy #{task.formatted_usage(self, true, subcommand).split(':').join(' ')}"
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-policy-permission/generators/policy-permission.rb

@@ -1,28 +0,0 @@
-require 'active_support'
-require 'active_support/core_ext'
-require 'thor'
-require 'eucalypt/helpers'
-
-module Eucalypt
-  module Generators
-    class PolicyPermission < Thor::Group
-      include Thor::Actions
-      include Eucalypt::Helpers
-
-      def self.source_root
-        File.join File.dirname(__dir__), 'templates'
-      end
-
-      def generate(policy_name:, permission:)
-        sleep 1
-        migration = Eucalypt::Helpers::Migration[
-          title: "add_#{permission}_permission_to_#{policy_name}_policy",
-          template: 'add_permission_to_policy_migration.tt'
-        ]
-        return unless migration.create_anyway? if migration.exists?
-        config = {migration_title: migration.title.camelize, policy_name: policy_name, permission: permission}
-        template migration.template, migration.file_path, config
-      end
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-policy-permission/templates/add_permission_to_policy_migration.tt

@@ -1,5 +0,0 @@
-class <%= config[:migration_title] %> < ActiveRecord::Migration[<%= ActiveRecord::Migration.current_version %>]
-  def change
-    <%= config[:policy_name].camelize %>Role.create permission: '<%= config[:permission] %>'
-  end
-end

data/lib/eucalypt/security/namespaces/security-policy-role/cli/security-policy-role.rb

@@ -1,64 +0,0 @@
-require 'thor'
-require 'eucalypt/errors'
-require 'eucalypt/helpers'
-require 'eucalypt/list'
-
-module Eucalypt
-  class SecurityPolicyRole < Thor
-    include Thor::Actions
-    include Eucalypt::Helpers
-    using Colorize
-    extend Eucalypt::List
-
-    desc "generate [POLICY] [ROLE]", "Create a new Pundit policy role".colorize(:grey)
-    def generate(name, role)
-      directory = File.expand_path('.')
-      if Eucalypt.app? directory
-        # Check for authorization gems
-        return unless Gemfile.check(%w[pundit], 'eucalypt security pundit setup', directory)
-
-        # Check for user model
-        unless File.exist? File.join(directory, 'app', 'models', 'user.rb')
-          Eucalypt::Error.no_user_model
-          return
-        end
-
-        # Check for role model
-        unless File.exist? File.join(directory, 'app', 'models', 'role.rb')
-          Eucalypt::Error.no_role_model
-          return
-        end
-
-        policy = Inflect.new(:policy, name)
-
-        # Check for policy file and policy role model
-        policy_file = File.join(directory, 'app', 'policies', policy.file_name)
-        policy_role_model = File.join(directory, 'app', 'models', 'roles', "#{policy.resource}_role.rb")
-        unless File.exist?(policy_file) && File.exist?(policy_role_model)
-          Eucalypt::Error.no_policy(policy.resource)
-          return
-        end
-
-        # Add role column to policy roles table
-        Dir.chdir(directory) do
-          args = %w[migration add column]
-          args << "#{policy.resource}_roles"
-          args << Inflect.resource(role)
-          args << 'boolean'
-          args << %w[-o default:false]
-          args.flatten!
-          Eucalypt::CLI.start(args)
-        end
-      else
-        Eucalypt::Error.wrong_directory
-      end
-    end
-
-    # def destroy()
-    # end
-
-    def self.banner(task, namespace = false, subcommand = true)
-      "#{basename} security policy #{task.formatted_usage(self, true, subcommand).split(':').join(' ')}"
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-policy/cli/security-policy.rb

@@ -1,81 +0,0 @@
-require 'thor'
-require 'eucalypt/errors'
-require 'eucalypt/helpers'
-require 'eucalypt/security/namespaces/security-policy/generators/policy'
-require 'eucalypt/security/namespaces/security-policy-permission/cli/security-policy-permission'
-require 'eucalypt/security/namespaces/security-policy-role/cli/security-policy-role'
-require 'eucalypt/list'
-
-module Eucalypt
-  class SecurityPolicy < Thor
-    include Thor::Actions
-    include Eucalypt::Helpers
-    using Colorize
-    extend Eucalypt::List
-
-    option :headless, type: :boolean, aliases: '-H', default: false, desc: "Policy with no associated model"
-    option :permissions, type: :array, aliases: '-p', default: [], desc: "Permissions to generate along with the policy"
-    desc "generate [NAME]", "Create a new Pundit policy".colorize(:grey)
-    def generate(name)
-      directory = File.expand_path('.')
-      if Eucalypt.app? directory
-        # Check for authorization gems
-        return unless Gemfile.check(%w[pundit], 'eucalypt security pundit setup', directory)
-
-        # Check for user model
-        unless File.exist? File.join(directory, 'app', 'models', 'user.rb')
-          Eucalypt::Error.no_user_model
-          return
-        end
-
-        # Check for role model
-        unless File.exist? File.join(directory, 'app', 'models', 'role.rb')
-          Eucalypt::Error.no_role_model
-          return
-        end
-
-        policy = Inflect.new(:policy, name)
-
-        policy_generator = Eucalypt::Generators::Policy.new
-        policy_generator.destination_root = directory
-
-        # Generate policy file
-        policy_generator.generate(headless: options[:headless], name: name)
-
-        # Create policy roles table
-        policy_generator.generate_policy_roles_migration(policy: policy.resource)
-
-        # Create policy role model
-        policy_generator.generate_policy_role_model(policy: policy)
-
-        # Add policy column to user roles table
-        Dir.chdir(directory) do
-          args = %w[migration add column]
-          args << 'roles'
-          args << policy.resource
-          args << 'string'
-          args << %w[-o default:default]
-          args.flatten!
-          Eucalypt::CLI.start(args)
-        end
-
-        # Generate permissions
-        options[:permissions].each do |permission|
-          Eucalypt::CLI.start(['security', 'policy', 'permission', 'generate', policy.resource, permission])
-        end
-      else
-        Eucalypt::Error.wrong_directory
-      end
-    end
-
-    #def destroy()
-    #end
-
-    def self.banner(task, namespace = false, subcommand = true)
-      "#{basename} security #{task.formatted_usage(self, true, subcommand).split(':').join(' ')}"
-    end
-
-    register(Eucalypt::SecurityPolicyPermission, 'permission', 'permission [COMMAND]', 'Pundit policy permission commands'.colorize(:grey))
-    register(Eucalypt::SecurityPolicyRole, 'role', 'role [COMMAND]', 'Pundit policy role commands'.colorize(:grey))
-  end
-end

data/lib/eucalypt/security/namespaces/security-policy/generators/policy.rb

@@ -1,41 +0,0 @@
-require 'active_support'
-require 'active_support/core_ext'
-require 'thor'
-require 'eucalypt/helpers'
-
-module Eucalypt
-  module Generators
-    class Policy < Thor::Group
-      include Thor::Actions
-      include Eucalypt::Helpers
-
-      def self.source_root
-        File.join File.dirname(__dir__), 'templates'
-      end
-
-      def generate(headless:, name:)
-        policy = Inflect.new(:policy, name)
-        config = {class_name: policy.class_name, resource: policy.resource, constant: policy.constant, headless: headless}
-        template 'policy.tt', policy.file_path, config
-      end
-
-      def generate_policy_role_model(policy:)
-        roles_directory = File.join 'app', 'models', 'roles'
-        role_model_file = File.join roles_directory, "#{policy.resource}_role.rb"
-
-        empty_directory roles_directory unless File.directory? roles_directory
-
-        config = {constant: policy.constant}
-        template 'policy_role.tt', role_model_file, config
-      end
-
-      def generate_policy_roles_migration(policy:)
-        sleep 1
-        migration = Eucalypt::Helpers::Migration[title: "create_#{policy}_roles", template: 'create_policy_roles_migration.tt']
-        return unless migration.create_anyway? if migration.exists?
-        config = {migration_title: migration.title.camelize, policy: policy}
-        template migration.template, migration.file_path, config
-      end
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-policy/templates/create_policy_roles_migration.tt

@@ -1,11 +0,0 @@
-class <%= config[:migration_title] %> < ActiveRecord::Migration[<%= ActiveRecord::Migration.current_version %>]
-  def change
-    create_table :<%= config[:policy] %>_roles do |t|
-      t.string :permission, null: false
-      t.boolean :admin, default: true
-      t.boolean :default, default: false
-    end
-
-    add_index :<%= config[:policy] %>_roles, :permission, unique: true
-  end
-end

data/lib/eucalypt/security/namespaces/security-policy/templates/policy.tt

@@ -1,8 +0,0 @@
-class <%= config[:class_name] %><%= " < Struct.new(:user, :#{config[:resource]})" if config[:headless] %>
-  attr_reader :user, :<%= config[:resource] %>
-
-  def initialize(user, <%= config[:resource] %>)
-    @user = user
-    @<%= config[:resource] %> = <%= config[:resource] %>
-  end
-end

data/lib/eucalypt/security/namespaces/security-policy/templates/policy_role.tt

@@ -1,3 +0,0 @@
-class <%= config[:constant] %>Role < ActiveRecord::Base
-  validates :permission, uniqueness: true
-end

data/lib/eucalypt/security/namespaces/security-pundit/cli/security-pundit.rb

@@ -1,77 +0,0 @@
-require 'thor'
-require 'eucalypt/helpers'
-require 'eucalypt/security/helpers'
-require 'eucalypt/security/namespaces/security-pundit/generators/role'
-require 'eucalypt/list'
-
-module Eucalypt
-  class SecurityPundit < Thor
-    include Thor::Actions
-    include Eucalypt::Helpers
-    include Eucalypt::Helpers::Messages
-    include Eucalypt::Helpers::Gemfile
-    include Eucalypt::Security::Helpers
-    using Colorize
-    extend Eucalypt::List
-
-    def self.source_root
-      File.join File.dirname(__dir__), 'templates'
-    end
-
-    desc "setup", "Set up Pundit authorization".colorize(:grey)
-    def setup
-      directory = File.expand_path('.')
-      if Eucalypt.app? directory
-        # Check if user model exists
-        user_model_file = File.join(directory, 'app', 'models', 'user.rb')
-        unless File.file? user_model_file
-          Eucalypt::Error.no_user_model
-          return
-        end
-
-        Out.setup "Setting up Pundit authorization..."
-
-        # Add Pundit to Gemfile
-        gemfile_add('Authorization', {pundit: '~> 2.0'}, directory)
-
-        # Create Pundit config file
-        create_config_file(:pundit, directory)
-
-        # Create roles migration
-        Eucalypt::Generators::Role.new.generate_roles_migration
-
-        # Create Role model
-        role_model_file = File.join(directory, 'app', 'models', 'role.rb')
-        Out.warning "Role model already exists." if File.file? role_model_file
-        Dir.chdir(directory) do
-          Eucalypt::CLI.start(%w[generate model role --no-spec --no-table])
-        end
-
-        # Add belongs_to to Role model
-        File.open(role_model_file) do |f|
-          insert = "  belongs_to :user"
-          inject_into_class(role_model_file, 'Role', "#{insert}\n") unless f.read.include? insert
-        end
-
-        # Add relationship to User model
-        File.open(user_model_file) do |f|
-          contents = f.read
-          insert = "  has_one :role, dependent: :destroy\n"
-          inject_into_file(user_model_file, insert, before: /  include BCrypt/) unless contents.include? insert
-          insert = "  after_save :create_role\n\n"
-          inject_into_file(user_model_file, insert, before: /  include BCrypt/) unless contents.include? insert
-          insert = "\n  private\n\n  def create_role\n    self.role = Role.new\n  end\n"
-          inject_into_file(user_model_file, insert, before: /^end/) unless contents.include? insert
-        end
-
-        Out.info "Ensure you run `#{'eucalypt rake db:migrate'.colorize(:bold)}` to create the necessary tables for Pundit."
-      else
-        Eucalypt::Error.wrong_directory
-      end
-    end
-
-    def self.banner(task, namespace = false, subcommand = true)
-      "#{basename} security #{task.formatted_usage(self, true, subcommand).split(':').join(' ')}"
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-pundit/generators/role.rb

@@ -1,24 +0,0 @@
-require 'active_support'
-require 'active_support/core_ext'
-require 'thor'
-require 'eucalypt/helpers'
-
-module Eucalypt
-  module Generators
-    class Role < Thor::Group
-      include Thor::Actions
-      include Eucalypt::Helpers
-
-      def self.source_root
-        File.join File.dirname(__dir__), 'templates'
-      end
-
-      def generate_roles_migration
-        sleep 1
-        migration = Eucalypt::Helpers::Migration[title: "create_roles", template: 'create_roles_migration.tt']
-        return unless migration.create_anyway? if migration.exists?
-        template migration.template, migration.file_path
-      end
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-pundit/templates/create_roles_migration.tt

@@ -1,7 +0,0 @@
-class CreateRoles < ActiveRecord::Migration[<%= ActiveRecord::Migration.current_version %>]
-  def change
-    create_table :roles do |t|
-      t.references :user, foreign_key: true
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-pundit/templates/pundit.tt

@@ -1,11 +0,0 @@
-class ApplicationController < Sinatra::Base
-  # Include Pundit for authorization
-  include Pundit
-
-  helpers do
-    def authorized?(object, permission)
-      return false unless authenticated?
-      policy(object).send permission
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-warden/cli/security-warden.rb

@@ -1,77 +0,0 @@
-require 'thor'
-require 'eucalypt/helpers'
-require 'eucalypt/security/helpers'
-require 'eucalypt/security/namespaces/security-warden/generators/user'
-require 'eucalypt/security/namespaces/security-warden/generators/auth_controller'
-require 'eucalypt/list'
-
-module Eucalypt
-  class SecurityWarden < Thor
-    include Thor::Actions
-    include Eucalypt::Helpers
-    include Eucalypt::Helpers::Messages
-    include Eucalypt::Helpers::Gemfile
-    include Eucalypt::Security::Helpers
-    using Colorize
-    using String::Builder
-    extend Eucalypt::List
-
-    def self.source_root
-      File.join File.dirname(__dir__), 'templates'
-    end
-
-    option :controller, type: :boolean, default: true, desc: "Include an authentication controller"
-    desc "setup", "Set up Warden authentication".colorize(:grey)
-    def setup
-      directory = File.expand_path('.')
-      if Eucalypt.app? directory
-        Out.setup "Setting up Warden authentication..."
-
-        # Add Warden and BCrypt to Gemfile
-        gemfile_add('Authentication and encryption', {warden: '~> 1.2', bcrypt: '~> 3.1'}, directory)
-
-        # Create Warden config file
-        create_config_file(:warden, directory)
-
-        # Add middleware to config.ru
-        middleware = String.build do |s|
-          s << "\nuse Warden::Manager do |config|\n"
-          s << "  config.serialize_into_session{|user| user.id}\n"
-          s << "  config.serialize_from_session{|id| User.find(id)}\n"
-          s << "  config.scope_defaults :default, strategies: [:password], action: 'auth/invalid'\n"
-          s << "  config.failure_app = self\n"
-          s << "end\n"
-        end
-
-        config_ru = File.join(directory, 'config.ru')
-
-        File.open config_ru do |f|
-          contents = f.read
-          inject_into_file(config_ru, middleware, after: /require_relative 'app'\n/) unless contents.include? 'use Warden::Manager'
-        end
-
-        user = Eucalypt::Generators::User.new
-
-        # Create user migration
-        user.generate_migration
-
-        # Create user model
-        user.generate_model(directory)
-
-        if options[:controller]
-          auth_controller = Eucalypt::Generators::AuthController.new
-          auth_controller.destination_root = directory
-          auth_controller.generate
-        end
-
-        Out.info "Ensure you run `#{'eucalypt rake db:migrate'.colorize(:bold)}` to create the necessary tables for Warden."
-      else
-        Eucalypt::Error.wrong_directory
-      end
-    end
-
-    def self.banner(task, namespace = false, subcommand = true)
-      "#{basename} security #{task.formatted_usage(self, true, subcommand).split(':').join(' ')}"
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-warden/generators/auth_controller.rb

@@ -1,34 +0,0 @@
-require 'active_support'
-require 'active_support/core_ext'
-require 'thor'
-require 'eucalypt/helpers'
-
-module Eucalypt
-  module Generators
-    class AuthController < Thor::Group
-      include Thor::Actions
-      include Eucalypt::Helpers
-      using String::Builder
-
-      def self.source_root
-        File.join File.dirname(__dir__), 'templates'
-      end
-
-      def generate
-        template 'auth_controller.tt', File.join('app', 'controllers', 'authentication_controller.rb')
-
-        config = {}
-        config[:data] = String.build do |s|
-          s << "<%=\n"
-          s << "  form_for :user, '/auth/login' do\n"
-          s << "    text_field :username\n"
-          s << "    password_field :password\n"
-          s << "    submit 'Login'\n"
-          s << "  end\n"
-          s << "%>"
-        end
-        template 'auth_login.tt', File.join('app', 'views', 'authentication', 'login.erb'), config
-      end
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-warden/generators/user.rb

@@ -1,37 +0,0 @@
-require 'active_support'
-require 'active_support/core_ext'
-require 'thor'
-require 'eucalypt/helpers'
-require 'active_record'
-
-module Eucalypt
-  module Generators
-    class User < Thor::Group
-      include Thor::Actions
-      include Eucalypt::Helpers
-      include Eucalypt::Helpers::Messages
-
-      def self.source_root
-        File.join File.dirname(__dir__), 'templates'
-      end
-
-      def generate_migration
-        sleep 1
-        migration = Eucalypt::Helpers::Migration[title: 'create_users', template: 'create_users_table_migration.tt']
-        return unless migration.create_anyway? if migration.exists?
-        template migration.template, migration.file_path
-      end
-
-      def generate_model(directory)
-        model_file = File.join(directory, 'app', 'models', 'user.rb')
-
-        if File.file? model_file
-          Out.warning 'User model already exists.'
-          return
-        end
-
-        template 'user.tt', model_file
-      end
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-warden/templates/auth_controller.tt

@@ -1,25 +0,0 @@
-class AuthenticationController < Eucalypt::Controller(route: '/auth')
-  helpers AuthenticationHelper if defined? AuthenticationHelper
-
-  get '/login' do
-    redirect '/' if authenticated?
-    erb :'authentication/login', layout: false
-  end
-
-  post '/login' do
-    redirect '/' if authenticated?
-    authenticate
-    redirect session[:return_to] || '/'
-  end
-
-  get '/logout' do
-    env['warden'].logout
-    redirect to '/login'
-  end
-
-  post '/invalid' do
-    session[:return_to] = env['warden.options'][:attempted_path]
-    status 403 # Unauthenticated
-    redirect to '/login'
-  end
-end

data/lib/eucalypt/security/namespaces/security-warden/templates/auth_login.tt

@@ -1 +0,0 @@
-<%= config[:data] %>

data/lib/eucalypt/security/namespaces/security-warden/templates/create_users_table_migration.tt

@@ -1,9 +0,0 @@
-class CreateUsers < ActiveRecord::Migration[<%= ActiveRecord::Migration.current_version %>]
-  def change
-    create_table :users do |t|
-      t.string :username, null: false
-      t.string :encrypted_password, null: false
-      t.timestamps
-    end
-  end
-end

data/lib/eucalypt/security/namespaces/security-warden/templates/user.tt

@@ -1,16 +0,0 @@
-require 'eucalypt/security/confirm'
-class User < ActiveRecord::Base
-  validates :username, presence: true, uniqueness: true
-  validates :encrypted_password, presence: true
-
-  include BCrypt
-
-  def authenticate(attempt)
-    Password.new(self.encrypted_password) == attempt
-  end
-
-  def password=(entered_password)
-    @password = Password.create(entered_password)
-    self.encrypted_password = @password
-  end
-end

data/lib/eucalypt/security/namespaces/security-warden/templates/warden.tt

@@ -1,35 +0,0 @@
-class ApplicationController < Sinatra::Base
-  # Configure Warden for authentication
-  enable :sessions
-
-  Warden::Manager.before_failure {|env,opts| env['REQUEST_METHOD'] = 'POST'}
-
-  Warden::Strategies.add(:password) do
-    def valid?
-      params['user'] && params['user']['username'] && params['user']['password']
-    end
-    def authenticate!
-      unless (user = User.find_by_username params['user']['username'])
-        fail! 'The username you entered does not exist'
-      else
-        user.authenticate(params['user']['password']) ? success!(user) : fail!('Could not log in')
-      end
-    end
-  end
-
-  helpers do
-    def current_user
-      env['warden'].user
-    end
-
-    def authenticated?
-      !!current_user
-    end
-
-    def authenticate
-      env['warden'].authenticate!
-    end
-
-    alias_method :logged_in?, :authenticated?
-  end
-end

data/lib/eucalypt/security/namespaces/security/cli/security.rb

@@ -1,29 +0,0 @@
-require 'eucalypt/errors'
-require 'eucalypt/security/namespaces/security-warden/cli/security-warden'
-require 'eucalypt/security/namespaces/security-pundit/cli/security-pundit'
-require 'eucalypt/security/namespaces/security-policy/cli/security-policy'
-require 'eucalypt/helpers'
-require 'eucalypt/list'
-
-module Eucalypt
-  class Security < Thor
-    include Thor::Actions
-    include Eucalypt::Helpers
-    using Colorize
-    extend Eucalypt::List
-
-    def self.banner(task, namespace = false, subcommand = true)
-      basename + ' ' + task.formatted_usage(self, true, subcommand).split(':').join(' ')
-    end
-
-    register(Eucalypt::SecurityWarden, 'warden', 'warden [COMMAND]', 'Configure Warden authentication'.colorize(:grey))
-    register(Eucalypt::SecurityPundit, 'pundit', 'pundit [COMMAND]', 'Configure Pundit authorization'.colorize(:grey))
-    register(Eucalypt::SecurityPolicy, 'policy', 'policy [COMMAND]', 'Pundit policy commands'.colorize(:grey))
-  end
-
-  class CLI < Thor
-    include Eucalypt::Helpers
-    using Colorize
-    register(Security, 'security', 'security [COMMAND]', 'Manage authentication and authorization'.colorize(:grey))
-  end
-end

data/lib/eucalypt/security/permissions.rb

@@ -1,27 +0,0 @@
-require 'active_record'
-require 'active_support/core_ext'
-
-Eucalypt.glob('app', '{policies}', '*.rb') do |file|
-  policy_name        = File.basename file, '.rb'
-  policy_constant    = policy_name.camelize.constantize
-  resource_name      = policy_name.gsub '_policy', ''
-  roles_name         = "#{resource_name}_roles"
-  role_constant_name = roles_name.singularize.camelize
-  role_constant      = role_constant_name.constantize
-
-  if ActiveRecord::Base.connection.table_exists? roles_name
-    level = ActiveRecord::Base.logger.level
-    begin
-      ActiveRecord::Base.logger.level = :unknown
-      role_constant.pluck(:permission).each do |permission|
-        policy_constant.define_method "#{permission}?" do
-          role_constant.find_by(permission: permission).send(user.role.send resource_name)
-        end
-      end
-    rescue => exception
-      throw exception
-    ensure
-      ActiveRecord::Base.logger.level = level
-    end
-  end
-end