goma 0.0.1.rc2 → 0.0.1.rc3

data/lib/generators/test_unit/goma/scaffold/templates/functional_test.rb

@@ -0,0 +1,51 @@
+require 'test_helper'
+
+<% module_namespacing do -%>
+class <%= controller_class_name %>ControllerTest < ActionController::TestCase
+  setup do
+    @<%= singular_table_name %> = <%= table_name %>(:one)
+  end
+
+  test "should get index" do
+    get :index
+    assert_response :success
+    assert_not_nil assigns(:<%= table_name %>)
+  end
+
+  test "should get new" do
+    get :new
+    assert_response :success
+  end
+
+  test "should create <%= singular_table_name %>" do
+    assert_difference('<%= class_name %>.count') do
+      post :create, <%= "#{singular_table_name}: { #{attributes_hash} }" %>
+    end
+
+    assert_redirected_to <%= singular_table_name %>_path(assigns(:<%= singular_table_name %>))
+  end
+
+  test "should show <%= singular_table_name %>" do
+    get :show, id: <%= "@#{singular_table_name}" %>
+    assert_response :success
+  end
+
+  test "should get edit" do
+    get :edit, id: <%= "@#{singular_table_name}" %>
+    assert_response :success
+  end
+
+  test "should update <%= singular_table_name %>" do
+    patch :update, id: <%= "@#{singular_table_name}" %>, <%= "#{singular_table_name}: { #{attributes_hash} }" %>
+    assert_redirected_to <%= singular_table_name %>_path(assigns(:<%= singular_table_name %>))
+  end
+
+  test "should destroy <%= singular_table_name %>" do
+    assert_difference('<%= class_name %>.count', -1) do
+      delete :destroy, id: <%= "@#{singular_table_name}" %>
+    end
+
+    assert_redirected_to <%= index_helper %>_path
+  end
+end
+<% end -%>

data/lib/generators/test_unit/goma/scaffold/templates/oauth_functional_test.rb

@@ -0,0 +1,6 @@
+require 'test_helper'
+
+<% module_namespacing do -%>
+class <%= controller_class_name %>ControllerTest < ActionController::TestCase
+end
+<% end -%>

data/lib/generators/test_unit/goma/scaffold/templates/password_functional_test.rb

@@ -0,0 +1,67 @@
+require 'test_helper'
+
+<% module_namespacing do -%>
+class <%= controller_class_name %>ControllerTest < ActionController::TestCase
+  setup do
+    @<%= resource_name %> = <%= resource_name.pluralize %>(:one)
+  end
+
+  test "should get new" do
+    get :new
+    assert_response :success
+  end
+
+  test "should resend reset password token with <%= goma_config.email_attribute_name %>" do
+    @<%= resource_name %>.send_reset_password_instructions!
+    <%= goma_config.reset_password_token_attribute_name %> = @<%= resource_name %>.<%= goma_config.unlock_token_attribute_name %>
+    assert_difference 'ActionMailer::Base.deliveries.size', 1 do
+      post :create, <%= goma_config.authentication_keys.to_field_name %>: @<%= resource_name %>.<%= goma_config.email_attribute_name %>
+    end
+    assert_redirected_to <%= login_url %>
+    @<%= resource_name %>.reload
+    assert_not_equal <%= goma_config.reset_password_token_attribute_name %>, @<%= resource_name %>.<%= goma_config.reset_password_token_attribute_name %>
+  end
+
+
+  test "should get edit" do
+    @<%= resource_name %>.send_reset_password_instructions!
+    <%= goma_config.reset_password_token_to_send_attribute_name %> = @<%= resource_name %>.<%= goma_config.reset_password_token_to_send_attribute_name %>
+    get :edit, id: <%= goma_config.reset_password_token_to_send_attribute_name %>
+    assert_response :success
+    assert_match /<input[^>]*type="hidden"[^>]*value="#{<%= goma_config.reset_password_token_to_send_attribute_name %>}"/, response.body
+  end
+
+  test "should update password" do
+    @<%= resource_name %>.send_reset_password_instructions!
+    <%= goma_config.reset_password_token_to_send_attribute_name %> = @<%= resource_name %>.<%= goma_config.reset_password_token_to_send_attribute_name %>
+    patch :update, id: <%= goma_config.reset_password_token_to_send_attribute_name %>, <%= resource_name %>: { <%= goma_config.reset_password_token_to_send_attribute_name %>: <%= goma_config.reset_password_token_to_send_attribute_name %>, <%= goma_config.password_attribute_name %>: 'newpassword', <%= goma_config.password_confirmation_attribute_name %>: 'newpassword' }
+    assert_redirected_to root_path
+    @<%= resource_name %>.reload
+    assert @<%= resource_name %>.valid_password? 'newpassword'
+    refute @<%= resource_name %>.valid_password? 'password'
+  end
+
+  test "should not update password with wrong token" do
+    @<%= resource_name %>.send_reset_password_instructions!
+    <%= goma_config.reset_password_token_to_send_attribute_name %> = @<%= resource_name %>.<%= goma_config.reset_password_token_to_send_attribute_name %>
+    patch :update, id: <%= goma_config.reset_password_token_to_send_attribute_name %>, <%= resource_name %>: { <%= goma_config.reset_password_token_to_send_attribute_name %>: 'oops', <%= goma_config.password_attribute_name %>: 'newpassword', <%= goma_config.password_confirmation_attribute_name %>: 'newpassword' }
+    assert_template :edit
+    assert_match /make sure you used the full URL provided/, flash[:alert]
+    @<%= resource_name %>.reload
+    refute @<%= resource_name %>.valid_password? 'newpassword'
+    assert @<%= resource_name %>.valid_password? 'password'
+  end
+
+  test "should not update password with expired token" do
+    @<%= resource_name %>.send_reset_password_instructions!
+    <%= goma_config.reset_password_token_to_send_attribute_name %> = @<%= resource_name %>.<%= goma_config.reset_password_token_to_send_attribute_name %>
+    @<%= resource_name %>.update_column(:<%= goma_config.reset_password_token_sent_at_attribute_name %>, <%= expire(goma_config.reset_password_within) %>.ago)
+    patch :update, id: <%= goma_config.reset_password_token_to_send_attribute_name %>, <%= resource_name %>: { <%= goma_config.reset_password_token_to_send_attribute_name %>: <%= goma_config.reset_password_token_to_send_attribute_name %>, <%= goma_config.password_attribute_name %>: 'newpassword', <%= goma_config.password_confirmation_attribute_name %>: 'newpassword' }
+    assert_template :new
+    assert_match /The password reset URL you visited has expired/, flash[:alert]
+    @<%= resource_name %>.reload
+    refute @<%= resource_name %>.valid_password? 'newpassword'
+    assert @<%= resource_name %>.valid_password? 'password'
+  end
+end
+<% end -%>

data/lib/generators/test_unit/goma/scaffold/templates/session_functional_test.rb

@@ -0,0 +1,122 @@
+require 'test_helper'
+
+<% module_namespacing do -%>
+class <%= controller_class_name %>ControllerTest < ActionController::TestCase
+  setup do
+    @<%= resource_name %> = <%= resource_name.pluralize %>(:one)
+  end
+
+  test "should get new" do
+    get :new
+    assert_response :success
+  end
+
+<% goma_config.authentication_keys.each do |key| -%>
+  test "should login with <%= key %>" do
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    refute logged_in?
+<% else -%>
+    refute <%= resource_name %>_logged_in?
+<% end -%>
+    post :create, <%= "#{goma_config.authentication_keys.to_field_name}: @#{resource_name}.#{key}, #{goma_config.password_attribute_name}: 'password'" %>
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    assert logged_in?
+<% else -%>
+    assert <%= resource_name %>_logged_in?
+<% end -%>
+    assert_redirected_to root_path
+    assert_match /Login successful/, flash[:notice]
+  end
+
+  test "should not login with <%= key %> with wrong password" do
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    refute logged_in?
+<% else -%>
+    refute <%= resource_name %>_logged_in?
+<% end -%>
+    post :create, <%= "#{goma_config.authentication_keys.to_field_name}: @#{resource_name}.#{key}, #{goma_config.password_attribute_name}: 'wrongpass'" %>
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    refute logged_in?
+<% else -%>
+    refute <%= resource_name %>_logged_in?
+<% end -%>
+    assert_template :new
+    assert_match /Login failed/, flash[:alert]
+  end
+
+<% if goma_config.modules.include? :confirmable -%>
+<% if goma_config.allow_unactivated_access_for > 0 -%>
+  test "should login unactivated <%= resource_name %> with <%= key %> for <%= goma_config.allow_unactivated_access_for %>" do
+    unactivated_<%= resource_name %> = <%= resource_name.pluralize %>(:unactivated_<%= resource_name %>)
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    refute logged_in?
+<% else -%>
+    refute <%= resource_name %>_logged_in?
+<% end -%>
+    post :create, <%= "#{goma_config.authentication_keys.to_field_name}: @#{resource_name}.#{key}, #{goma_config.password_attribute_name}: 'password'" %>
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    assert logged_in?
+<% else -%>
+    assert <%= resource_name %>_logged_in?
+<% end -%>
+    assert_redirected_to root_path
+    assert_match /Login successful/, flash[:alert]
+  end
+
+  test "should not login unactivated <%= resource_name %> with <%= key %> <%= goma_config.allow_unactivated_access_for %> passed after registration" do
+    unactivated_<%= resource_name %> = <%= resource_name.pluralize %>(:unactivated_<%= resource_name %>)
+    unactivated_<%= resource_name %>.update_column(:created_at, <%= expire(goma_config.allow_unactivated_access_for) %>.ago)
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    refute logged_in?
+<% else -%>
+    refute <%= resource_name %>_logged_in?
+<% end -%>
+    post :create, <%= "#{goma_config.authentication_keys.to_field_name}: @#{resource_name}.#{key}, #{goma_config.password_attribute_name}: 'password'" %>
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    refute logged_in?
+<% else -%>
+    refute <%= resource_name %>_logged_in?
+<% end -%>
+    assert_template :new
+    assert_match /Not activated/, flash[:alert]
+  end
+
+<% else -%>
+  test "should not login unactivated <%= resource_name %> with <%= key %>" do
+    unactivated_<%= resource_name %> = <%= resource_name.pluralize %>(:unactivated_<%= resource_name %>)
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    refute logged_in?
+<% else -%>
+    refute <%= resource_name %>_logged_in?
+<% end -%>
+    post :create, <%= "#{goma_config.authentication_keys.to_field_name}: unactivated_#{resource_name}.#{key}, #{goma_config.password_attribute_name}: 'password'" %>
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    refute logged_in?
+<% else -%>
+    refute <%= resource_name %>_logged_in?
+<% end -%>
+    assert_template :new
+    assert_match /Not activated/, flash[:alert]
+  end
+<% end # if goma_config.allow_unactivated_access_for > 0 -%>
+<% end # if goma_config.modules.include? :confirmable -%>
+<% end # goma_config.authentication_keys.each do |key| -%>
+
+  test "should logout <%= resource_name %>" do
+    force_login(@<%= resource_name %>)
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    assert logged_in?
+<% else -%>
+    assert <%= resource_name %>_logged_in?
+<% end -%>
+    delete :destroy, id: <%= "@#{resource_name}" %>
+    assert_redirected_to root_path
+    assert_match /Logged out/, flash[:notice]
+<% if resource_name.to_sym == goma_config.default_scope -%>
+    refute logged_in?
+<% else -%>
+    refute <%= resource_name %>_logged_in?
+<% end -%>
+  end
+end
+<% end -%>

data/lib/generators/test_unit/goma/scaffold/templates/unlock_functional_test.rb

@@ -0,0 +1,47 @@
+require 'test_helper'
+
+<% module_namespacing do -%>
+class <%= controller_class_name %>ControllerTest < ActionController::TestCase
+<% if goma_config.unlock_strategies.include? :email -%>
+  setup do
+    @<%= resource_name %> = <%= resource_name.pluralize %>(:one)
+  end
+
+  test "should get new" do
+    get :new
+    assert_response :success
+  end
+
+  test "should resend unlock token with <%= goma_config.email_attribute_name %>" do
+    @<%= resource_name %>.lock_access!
+    <%= goma_config.unlock_token_attribute_name %> = @<%= resource_name %>.<%= goma_config.unlock_token_attribute_name %>
+    assert_difference 'ActionMailer::Base.deliveries.size', 1 do
+      post :create, <%= goma_config.authentication_keys.to_field_name %>: @<%= resource_name %>.<%= goma_config.email_attribute_name %>
+    end
+    assert_redirected_to <%= login_url %>
+    @<%= resource_name %>.reload
+    assert_not_equal <%= goma_config.unlock_token_attribute_name %>, @<%= resource_name %>.<%= goma_config.unlock_token_attribute_name %>
+  end
+
+  test "should unlock <%= resource_name %>" do
+    @<%= resource_name %>.lock_access!
+    <%= goma_config.unlock_token_to_send_attribute_name %> = @<%= resource_name%>.<%= goma_config.unlock_token_to_send_attribute_name %>
+    get :show, id: <%= goma_config.unlock_token_to_send_attribute_name %>
+    assert_redirected_to <%= login_url %>
+    assert_match /Your account has been unlocked successfully/, flash[:notice]
+    @<%= resource_name %>.reload
+    refute @<%=resource_name %>.access_locked?
+  end
+
+  test "should not unlock <%= resource_name %> with wrong token" do
+    @<%= resource_name %>.lock_access!
+    <%= goma_config.unlock_token_to_send_attribute_name %> = @<%= resource_name%>.<%= goma_config.unlock_token_to_send_attribute_name %>
+    get :show, id: 'oops'
+    assert_template :new
+    assert_match /Not found any account by this URL/, flash[:alert]
+    @<%= resource_name %>.reload
+    assert @<%=resource_name %>.access_locked?
+  end
+<% end -%>
+end
+<% end -%>

data/lib/generators/test_unit/goma/scaffold/templates/user_functional_test.rb

@@ -0,0 +1,118 @@
+require 'test_helper'
+
+<% module_namespacing do -%>
+class <%= controller_class_name %>ControllerTest < ActionController::TestCase
+  setup do
+    @<%= singular_table_name %> = <%= table_name %>(:one)
+  end
+
+  test "should get index" do
+    get :index
+    assert_response :success
+    assert_not_nil assigns(:<%= table_name %>)
+  end
+
+  test "should get new" do
+    get :new
+    assert_response :success
+  end
+
+  test "should create <%= singular_table_name %>" do
+    assert_difference('<%= class_name %>.count') do
+      post :create, <%= "#{singular_table_name}: #{new_resource_attributes.inspect19}" %>
+    end
+
+    assert_redirected_to <%= login_path %>
+  end
+
+  test "should show <%= singular_table_name %>" do
+    get :show, id: <%= "@#{singular_table_name}" %>
+    assert_response :success
+  end
+
+  test "should not get edit unless logged in" do
+    get :edit, id: <%= "@#{singular_table_name}" %>
+    assert_redirected_to root_path
+    assert_match /Login required/, flash[:alert]
+  end
+
+  test "should get edit" do
+    force_login(@user)
+    get :edit, id: <%= "@#{singular_table_name}" %>
+    assert_response :success
+  end
+
+  test "should not get edit of another user" do
+    force_login(@<%= singular_table_name %>)
+    get :edit, id: <%= table_name %>(:two)
+    assert_redirected_to root_url
+  end
+
+<% if goma_config.modules.include? :confirmable -%>
+  test "should not update <%= goma_config.email_attribute_name %> unless logged in" do
+    original_email = @<%= singular_table_name %>.<%= goma_config.email_attribute_name %>
+    patch :update, id: <%= "@#{singular_table_name}" %>, <%= "#{singular_table_name}: { #{goma_config.email_attribute_name}: 'new@example.com' }" %>
+    assert_redirected_to root_path
+    assert_match /Login required/, flash[:alert]
+    @<%= singular_table_name %>.reload
+    assert_equal original_email, @<%= singular_table_name %>.<%= goma_config.email_attribute_name %>
+    assert_equal nil, @<%= singular_table_name %>.<%= goma_config.unconfirmed_email_attribute_name %>
+  end
+
+  test "should confirm <%= goma_config.email_attribute_name %> before update" do
+    force_login(@<%= singular_table_name %>)
+    original_email = @<%= singular_table_name %>.<%= goma_config.email_attribute_name %>
+    assert_difference 'ActionMailer::Base.deliveries.size', 1 do
+      patch :update, id: <%= "@#{singular_table_name}" %>, <%= "#{singular_table_name}: { #{goma_config.email_attribute_name}: 'new@example.com' }" %>
+    end
+    assert_redirected_to <%= singular_table_name %>_path(assigns(:<%= singular_table_name %>))
+    assert_match /we need to verify your new email address/, flash[:notice]
+    @<%= singular_table_name %>.reload
+    assert_equal original_email, @<%= singular_table_name %>.<%= goma_config.email_attribute_name %>
+    assert_equal 'new@example.com', @<%= singular_table_name %>.<%= goma_config.unconfirmed_email_attribute_name %>
+  end
+
+<% auth_keys = goma_config.authentication_keys - [goma_config.email_attribute_name] -%>
+<% else -%>
+<% auth_keys = goma_config.authentication_keys -%>
+<% end -%>
+<% auth_keys.each do |key| -%>
+<% new_value = key == goma_config.email_attribute_name ? 'new@example.com' : "new_#{key}" %>
+  test "should not update <%= key %> unless logged in" do
+    original = @<%= singular_table_name %>.<%= key %>
+    patch :update, id: <%= "@#{singular_table_name}" %>, <%= "#{singular_table_name}: { #{key}: '#{new_value}' }" %>
+    assert_redirected_to root_path
+    @<%= singular_table_name %>.reload
+    assert_equal original, @<%= singular_table_name %>.<%= key %>
+    assert_match /Login required/, flash[:alert]
+  end
+
+  test "should update <%= key %>" do
+    force_login(@<%= singular_table_name %>)
+    patch :update, id: <%= "@#{singular_table_name}" %>, <%= "#{singular_table_name}: { #{key}: '#{new_value}' }" %>
+    assert_redirected_to <%= singular_table_name %>_path(assigns(:<%= singular_table_name %>))
+    @<%= singular_table_name %>.reload
+    assert_equal '<%= new_value %>', @<%= singular_table_name %>.<%= key %>
+  end
+
+<% end -%>
+
+  test "should not destroy <%= singular_table_name %> unless logged in" do
+    assert_no_difference('<%= class_name %>.count') do
+      delete :destroy, id: <%= "@#{singular_table_name}" %>
+    end
+
+    assert_redirected_to root_path
+    assert_match /Login required/, flash[:alert]
+  end
+
+  test "should destroy <%= singular_table_name %>" do
+    force_login(@<%= singular_table_name %>)
+    assert_difference('<%= class_name %>.count', -1) do
+      delete :destroy, id: <%= "@#{singular_table_name}" %>
+    end
+
+    assert_redirected_to <%= index_helper %>_path
+  end
+end
+<% end -%>

data/lib/goma.rb

@@ -33,6 +33,6 @@ require 'rails'
 
 require 'goma/config'
 require 'goma/token_generator'
-require 'goma/test_helpers' if Rails.env == 'test'
+require 'goma/controller_test_helpers' if Rails.env == 'test'
 
 require 'goma/railtie'

data/lib/goma/config.rb

@@ -109,7 +109,6 @@ module Goma
     config_accessor(:locked_at_attribute_name)                     { :locked_at }
     config_accessor(:unlock_in)                                    { 1.hour }
     config_accessor(:unlock_token_attribute_name)                  { :unlock_token }
-    config_accessor(:unlock_token_sent_at_attribute_name)          { :unlock_token_sent_at }
     config_accessor(:unlock_token_to_send_attribute_name)          { :raw_unlock_token }
 
     # Recoverable

data/lib/goma/controller_test_helpers.rb

@@ -0,0 +1,65 @@
+module Goma
+  # Goma::ControllerTestHelpers provides a facility to test controllers in isolation
+  # Most of the code was extracted from Devise's Devise::TestHelpers.
+  module ControllerTestHelpers
+    def self.included(base)
+      base.class_eval do
+        setup :setup_controller_for_warden, :warden if respond_to?(:setup)
+      end
+    end
+
+    # Override process to consider warden.
+    def process(*)
+      # Make sure we always return @response, a la ActionController::TestCase::Behavior#process, even if warden interrupts
+      _catch_warden {super} || @response
+    end
+
+    # We need to setup the environment variables and the response in the controller
+    def setup_controller_for_warden
+      @request.env['action_controller.instance'] = @controller
+    end
+
+    # Quick access to Warden::Proxy.
+    def warden
+      @warden ||= begin
+        manager = Warden::Manager.new(nil, &Rails.application.config.middleware.detect{|m| m.name == 'Warden::Manager'}.block)
+        @request.env['warden'] = Warden::Proxy.new(@request.env, manager)
+      end
+    end
+
+    protected
+
+    # Catch warden continuations and handle like the middleware would.
+    # Returns nil when interrupted, otherwise the normal result of the block.
+    def _catch_warden(&block)
+      result = catch(:warden, &block)
+
+      if result.is_a?(Hash) && !warden.custom_failure? && !@controller.send(:performed?)
+        result[:action] ||= :unauthenticated
+
+        env = @controller.request.env
+        env['PATH_INFO'] = "/#{result[:action]}"
+        env['warden.options'] = result
+        Warden::Manager._run_callbacks(:before_failure, env, result)
+
+        status, headers, body = warden.config[:failure_app].call(env).to_a
+        @controller.send :render, :status => status, :text => body,
+          :content_type => headers['Content-Type'], :location => headers['Location']
+
+        nil
+      else
+        result
+      end
+    end
+
+    def method_missing(m, *args)
+      name = m.to_s
+      if name =~ /^(?:(#{Goma.config.scopes.join('|')})_)?(?:login!?|logout|logged_in\?)$/ || name == 'force_login' || name =~ /^current_(#{Goma.config.scopes.join('|')})$/
+        @controller.send(m, *args)
+      else
+        super
+      end
+    end
+  end
+end
+