glib-web 0.5.5

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 3a631905663a326cc5d4da2aa0be179812d12aae
+  data.tar.gz: a167fd02e4db101e5067832225762ba410bc401b
+SHA512:
+  metadata.gz: 0a5094637dbe44532c384bd7e30a49bb3dd5377ef87cee6ea13da3528620aae8f2a43eba21f3077df4530a3356087851dcbd8be150d72a3ff1af70b4b3493afb
+  data.tar.gz: 03b85596d99b043700a6818feef54b6e45017e905800358502052a68bdf0d6cb472c64bc9bb352849a9628b587479bfbab41314da1543cb1f92317371639ac07

data/app/controllers/concerns/glib/auth/policy.rb

@@ -0,0 +1,148 @@
+require 'pundit'
+
+module Glib::Auth
+  module Policy
+    extend ActiveSupport::Concern
+
+    included do
+      include Pundit
+      include Overrides
+      extend ClassMethods
+
+      # TODO: Ultimately we want to uncomment this line, but:
+      # - Need to be able to set aside some time to run rspec tests to ensure nothing gets broken
+      # - Need to find a solution where we can reuse a single public policy
+      # after_action :verify_authorized
+
+      helper_method :policy, :can?, :cannot?
+    end
+
+    module Overrides
+
+      public  # Override
+      def policy(record, policy_name = nil)
+        policy_name ||= record
+
+        @__pundit_policies ||= {}
+        return @__pundit_policies[policy_name] if @__pundit_policies[policy_name]
+
+        if policy_name.is_a?(Symbol) && policy_name.to_s.ends_with?('_admin')
+          policy_class = CommonAdminPolicy
+        else
+          policy_class = Pundit::PolicyFinder.new(policy_name).policy
+        end
+
+        raise "Policy not found for #{policy_name.is_a?(Symbol) || policy_name.is_a?(Class) ? policy_name : policy_name.class}" unless policy_class
+
+        @__pundit_policies[policy_name] = policy_class.new(current_user, record, policy_name, self, request, params, *policy_class.args_builder.call(self))
+      end
+
+      # Expose protected method
+      public  # Override
+      def policy_scope(*args)
+        super
+      end
+    end
+
+    private
+    def raise_access_denied(record, policy)
+      raise UnauthorizedError.new(record: record, policy: policy, query: "#{action_name}?")
+    end
+
+    public
+    def can?(action, record)
+      policy(record).send("#{action}?")
+    end
+
+    public
+    def cannot?(action, record)
+      !policy(record).send("#{action}?")
+    end
+
+    # Inspired from https://github.com/ryanb/cancan/wiki/Non-RESTful-Controllers
+    public
+    def glib_authorize_resource(*args)
+      options = args.extract_options!
+      resource_name = args.first
+
+      resource_name ||= controller_name.split('/').last.singularize
+
+      if (resource_key = options[:class]).nil?
+        policy_name = resource_name.camelize.constantize
+      else
+        policy_name = case resource_key
+        when false
+          resource_name.to_sym
+        when Symbol, Class
+          resource_key
+        else
+          raise "Invalid resource class: #{resource_key}"
+        end
+      end
+
+      resource_instance = instance_variable_get("@#{resource_name}") || policy_name
+
+      query = "#{action_name}?"
+      policy_instance = policy(resource_instance, policy_name)
+      raise_access_denied(resource_instance, policy_instance) unless policy_instance.public_send(query)
+    end
+
+
+
+    class UnauthorizedError < Pundit::NotAuthorizedError
+    end
+
+
+
+    module ClassMethods
+      def glib_auth_init
+        @@__glib_auth_init = true
+
+        before_action :glib_load_resource
+        before_action :glib_authorize_resource
+      end
+
+      def glib_auth_inited?
+        @@__glib_auth_init ||= false
+      end
+
+      # TODO: Consider deprecating
+      public
+      def authorize_resource(*args)
+        options = args.extract_options!
+        resource_name = args.first
+
+        self.before_action(options.slice(:only, :except, :if, :unless)) do |controller|
+          resource_name ||= resource_name_from_controller
+
+          begin
+            if !(resource_key = options[:class]).nil?
+              resource = case resource_key
+              when false
+                resource_name.to_sym
+              when Symbol, Class
+                resource_key
+              else
+                raise "Invalid resource class: #{resource_key}"
+              end
+
+              authorize resource
+            elsif (resource_instance = controller.instance_variable_get("@#{resource_name}"))
+              authorize resource_instance
+            else
+              authorize resource_name.camelize.constantize
+            end
+          rescue Pundit::NotAuthorizedError => e
+            raise_access_denied(e.record, e.policy)
+          end
+
+          verify_authorized
+        end
+      end
+    end
+
+    def resource_name_from_controller
+      params[:controller].split('/').last.singularize
+    end
+  end
+end

data/app/controllers/concerns/glib/json/dynamic_text.rb

@@ -0,0 +1,126 @@
+module Glib::Json::DynamicText
+  def __json_traversal_register_dynamic_text
+    @__specs = {}
+    @__specs_db = {}
+
+    __json_traversal_on_traverse do |view|
+      extract_spec(view, 'text')
+    end
+
+    __json_traversal_on_complete do |view|
+      if @__specs.keys.size > 0
+        translated_texts = retrieve_texts(@__specs.keys)
+        # translated_texts = retrieve_local_texts(@__specs.keys).merge(retrieve_remote_texts(@__specs.keys))
+        translated_texts.each do |key, value|
+          @__specs[key].each do |spec|
+            spec.substitute_with(value)
+          end
+
+          if @__specs_db[key] && @__specs_db[key].images.attached?
+            @__specs[key].each do |spec|
+              spec.substitute_image_with(@__specs_db[key].images)
+            end
+          end
+        end
+      end
+    end
+  end
+
+  def retrieve_texts
+    # TODO: Check local memory
+    # TODO: Then check DTR
+  end
+
+  # def retrieve_remote_texts(keys)
+  #   retries = 0
+
+  #   begin
+  #     response = RestClient.get(ENV['DTR_URL'], { params: { keys: keys } })
+  #   rescue Errno::ECONNREFUSED, RestClient::InternalServerError, RestClient::Exceptions::OpenTimeout, RestClient::Exceptions::ReadTimeout
+  #     if (retries += 1) <= 3
+  #       puts "Timeout, retrying..."
+  #       retry
+  #     else
+  #       raise
+  #     end
+  #   end
+
+  #   JSON.parse(response)
+  # end
+
+  # def retrieve_local_texts(keys)
+  #   translated_texts = {}
+  #   db_keys = []
+
+  #   redis = Glib::DynamicText::Config.redis
+  #   contents = redis.pipelined do
+  #     keys.each do |key|
+  #       args = @__specs[key].first.args
+  #       options = {
+  #         scope: args.fetch(:scope, 'itinerarybuilder'),
+  #         lang: args.fetch(:lang, 'en')
+  #       }
+
+  #       scope_key = "#{options[:scope]}.#{options[:lang]}.#{key}"
+  #       redis.get(scope_key)
+  #     end
+  #   end
+
+  #   keys.each_with_index do |key, index|
+  #     if content = contents[index]
+  #       translated_texts[key] = content
+  #       db_keys << key if content.match(/\{\{image(\d)\}\}/)
+  #     else
+  #       db_keys << key
+  #     end
+  #   end
+
+  #   if db_keys.size > 0
+  #     texts = Glib::Text.where(key: db_keys)
+  #     texts.each do |text|
+  #       translated_texts[text.key] = text.content
+  #       @__specs_db[text.key] = text
+  #     end
+  #   end
+
+  #   translated_texts
+  # end
+
+  def extract_spec(view, prop)
+    if (spec = view[prop])
+      if spec.is_a?(Hash) && (key = spec['dt_key'])
+        @__specs[key] ||= []
+        @__specs[key] << TextSpec.new(view, prop, spec)
+      end
+    end
+  end
+
+  TextSpec = Struct.new(:view, :prop, :args) do
+    def substitute_with(text)
+      view[prop] = text.gsub(/\{\{(\w+)\}\}/) { args.fetch($1, "{{#{$1}}}") }
+    end
+
+    def substitute_image_with(images)
+      view[prop] = view[prop].gsub(/\{\{image(\d)\}\}/) {
+        if image = images[$1.to_i - 1]
+          image_server_url(image.blob.key)
+        else
+          "{{image#{$1}}}"
+        end
+      }
+    end
+
+    # TODO: Reuse method from DynamicTextsHelper
+    def image_server_url(blob_key)
+      return unless blob_key.present?
+
+      uri = URI::HTTPS.build(
+        host: 'imageserver-demo.herokuapp.com',
+        path: "/image/#{ENV['AWS_S3_BUCKET']}/#{blob_key}",
+        query: { w: 100, h: 100 }.to_param
+      )
+
+      uri.to_s
+    end
+  end
+end

data/app/controllers/concerns/glib/json/libs.rb

@@ -0,0 +1,144 @@
+module Glib::Json::Libs
+  extend ActiveSupport::Concern
+
+  included do
+    extend ClassMethods
+
+    helper_method :json_ui_app_bundle_id, :json_ui_app_build_version, :json_ui_app_device_os
+    helper_method :json_ui_app_is_android?, :json_ui_app_is_ios?, :json_ui_app_is_web?
+  end
+
+  def json_ui_app_bundle_id
+    @json_ui_app_bundle_id ||= request.headers['JsonUiApp-Bundle-Id']
+  end
+
+  def json_ui_app_build_version
+    @json_ui_app_build_version ||= request.headers['JsonUiApp-Build-Version']
+    @json_ui_app_build_version = params[:build_version] if @json_ui_app_build_version.nil? && Rails.env.development?  # For easy testing
+    @json_ui_app_build_version
+  end
+
+  def json_ui_app_device_os
+    @json_ui_app_device_os ||= request.headers['JsonUiApp-Device-Os']
+    @json_ui_app_device_os = params[:device_os] if @json_ui_app_device_os.nil? && Rails.env.development?  # For easy testing
+    @json_ui_app_device_os || 'web'
+  end
+
+  def json_ui_app_is_android?
+    json_ui_app_device_os == 'android'
+  end
+
+  def json_ui_app_is_ios?
+    json_ui_app_device_os == 'ios'
+  end
+
+  def json_ui_app_is_web?
+    json_ui_app_device_os == 'web'
+  end
+
+  def json_ui_render(template, args = {})
+    JSON.parse(render_to_string(template, locals: args))
+  end
+
+  def glib_force_json_ui
+    if params[:_render] != 'v1'
+      redirect_to url_for(params.to_unsafe_h.merge(_render: 'v1'))
+    end
+  end
+
+  def glib_json_handle_403
+    render file: Rails.root.join('public', '404.html'), status: :forbidden
+  end
+
+  def glib_json_handle_404
+    raise ActionController::RoutingError.new('Not Found')
+
+    # if json_ui_activated?
+    #   render file: Rails.root.join('public', '404.html'), status: :not_found
+    # else
+    #   raise exception
+    # end
+  end
+  
+  def glib_json_handle_500(exception)
+    if json_ui_activated? && Rails.env.production?
+      Rollbar.error(exception) if defined?(Rollbar)
+      render file: Rails.root.join('public', '500.html'), status: :internal_server_error
+    else
+      raise exception
+    end
+  end
+
+
+  module ClassMethods
+
+    def json_libs_init(options)
+      include Glib::Json::Transformation
+      include Glib::Json::Validation
+      include Glib::Json::Ui
+
+      include Glib::Json::Traversal
+      include Glib::Json::NewDynamicText
+
+      before_action do
+        __json_ui_start(options)
+      end
+
+      # Note that after_action gets executed in reverse
+      after_action do
+        __json_ui_commit(options)
+      end
+      after_action :__json_transformation_commit
+      after_action :__json_validate_perform
+
+      after_action :__json_traversal_perform
+      after_action :__json_traversal_register_dynamic_text
+    end
+
+    def json_libs_set_locale
+      before_action do
+        # Need to explicitly fallback to EN
+        I18n.locale = params[:_locale] || :en
+      rescue
+        I18n.locale = :en
+      end
+    end
+
+    def json_libs_force_json_ui
+      before_action :glib_force_json_ui
+    end
+
+    def json_libs_rescue_csrf
+      rescue_from ActionController::InvalidAuthenticityToken do |exception|
+        sign_out(:user)
+
+        respond_to do |format|
+          format.json do
+            render json: {
+              onResponse: {
+                action: 'windows/open-v1',
+                url: root_url
+              }
+            }
+          end
+        end
+      end
+    end
+
+    # Call this before other rescues. Later rescue_from statements will take precedence, so more specific
+    # rescues have to be declared later.
+    def json_libs_rescue_500
+      rescue_from StandardError do |exception|
+        glib_json_handle_500(exception)
+      end
+    end
+
+    def json_libs_rescue_404
+      # Removed because it doesn't seem to offer anything extra
+      # rescue_from ActiveRecord::RecordNotFound do |exception|
+      #   glib_json_handle_404
+      # end
+    end
+
+  end
+end

data/app/controllers/concerns/glib/json/new_dynamic_text.rb

@@ -0,0 +1,122 @@
+module Glib::Json::NewDynamicText
+  def __json_traversal_register_dynamic_text
+    @__specs = {}
+    @__specs_db = {}
+
+    __json_traversal_on_traverse do |view|
+      extract_spec(view, 'text')
+    end
+
+    __json_traversal_on_complete do |view|
+      if @__specs.keys.size > 0
+        # translated_texts = retrieve_remote_texts(@__specs.keys)
+        translated_texts = retrieve_local_texts(@__specs.keys).merge(retrieve_remote_texts(@__specs.keys))
+        translated_texts.each do |key, value|
+          @__specs[key].each do |spec|
+            spec.substitute_with(value)
+          end
+
+          if @__specs_db[key] && @__specs_db[key].images.attached?
+            @__specs[key].each do |spec|
+              spec.substitute_image_with(@__specs_db[key].images)
+            end
+          end
+        end
+      end
+    end
+  end
+
+  def retrieve_example_texts(keys)
+    examples_translations = {
+      'home.json_ui_garage.hello' => 'Hello {{name}}',
+      'home.json_ui_garage.greeting' => 'Good day!',
+      'home.json_ui_garage.greeting_with_image' => 'Good day! (with image)',
+    }
+
+    translated_texts = {}
+    keys.each do |key|
+      translated_texts[key] = examples_translations[key]
+    end
+    translated_texts
+  end
+
+  def retrieve_remote_texts(keys)
+    retries = 0
+
+    begin
+      response = RestClient.get(ENV['DTR_URL'], { params: { keys: keys } })
+    rescue Errno::ECONNREFUSED, RestClient::InternalServerError, RestClient::Exceptions::OpenTimeout, RestClient::Exceptions::ReadTimeout
+      if (retries += 1) <= 3
+        puts "Timeout, retrying..."
+        retry
+      else
+        raise
+      end
+    end
+
+    JSON.parse(response)
+  end
+
+  def retrieve_local_texts(keys)
+    translated_texts = {}
+    db_keys = []
+
+    redis = Glib::DynamicText::Config.redis
+    contents = redis.pipelined do
+      keys.each do |key|
+        args = @__specs[key].first.args
+        options = {
+          scope: args.fetch(:scope, 'itinerarybuilder'),
+          lang: args.fetch(:lang, 'en')
+        }
+
+        scope_key = "#{options[:scope]}.#{options[:lang]}.#{key}"
+        redis.get(scope_key)
+      end
+    end
+
+    keys.each_with_index do |key, index|
+      if content = contents[index]
+        translated_texts[key] = content
+        db_keys << key if content.match(/\{\{image(\d)\}\}/)
+      else
+        db_keys << key
+      end
+    end
+
+    if db_keys.size > 0
+      texts = Glib::Text.where(key: db_keys)
+      texts.each do |text|
+        translated_texts[text.key] = text.content
+        @__specs_db[text.key] = text
+      end
+    end
+
+    translated_texts
+  end
+
+  def extract_spec(view, prop)
+    if (spec = view[prop])
+      if spec.is_a?(Hash) && (key = spec['dt_key'])
+        @__specs[key] ||= []
+        @__specs[key] << TextSpec.new(view, prop, spec)
+      end
+    end
+  end
+
+  TextSpec = Struct.new(:view, :prop, :args) do
+    def substitute_with(text)
+      view[prop] = text.gsub(/\{\{(\w+)\}\}/) { args.fetch($1, "{{#{$1}}}") }
+    end
+
+    def substitute_image_with(images)
+      view[prop] = view[prop].gsub(/\{\{image(\d)\}\}/) {
+        if image = images[$1.to_i - 1]
+          ApplicationController.helpers.dynamic_image_url(image.blob.key)
+        else
+          "{{image#{$1}}}"
+        end
+      }
+    end
+  end
+end