groovestack-auth 0.1.4 → 0.1.6

data/app/controllers/groovestack/auth/passwordless/sessions_controller.rb

@@ -0,0 +1,75 @@
+# frozen_string_literal: true
+
+module Groovestack
+  module Auth
+    module Passwordless
+      class SessionsController < ::Devise::SessionsController
+        skip_before_action :verify_authenticity_token # , only: :destroy
+
+        def create
+          self.resource = resource_class.find_for_authentication(email: create_params[:email])
+
+          if resource.blank?
+            # register a new account
+
+            u = ::User.new(email: create_params[:email], password: ::Devise.friendly_token[0, 20])
+            # u.skip_confirmation_notification!
+            u.save!
+
+            self.resource = u
+          end
+
+          send_magic_link(resource)
+
+          respond_to do |format|
+            format.html { redirect_to(after_magic_link_sent_path_for(resource), status: devise_redirect_status) }
+            format.json do
+              render json: { success: true, resource: resource.as_json, message: 'Magic link sent.' }, status: :ok
+            end
+          end
+        rescue StandardError => e
+          msg = "Passwordless Magic Link Send Failure for #{create_params[:email]}: #{e}"
+          ::Groovestack::Base.notify_error('Groovestack::Auth::Passwordless::SessionsController', msg)
+
+          respond_to do |format|
+            format.html { render :new, status: devise_error_status }
+            format.json do
+              render json: { error: 'User not found or unable to register account. Our team has been notified.' },
+                     status: :not_found
+            end
+          end
+        end
+
+        protected
+
+        def send_magic_link(resource)
+          resource.send_magic_link(remember_me: create_params[:remember_me])
+        end
+
+        def translation_scope
+          if action_name == 'create'
+            'devise.passwordless'
+          else
+            super
+          end
+        end
+
+        private
+
+        def create_params
+          resource_params.permit(:email, :remember_me)
+        end
+
+        # Devise < 4.9 fallback support
+        # See: https://github.com/heartcombo/devise/wiki/How-To:-Upgrade-to-Devise-4.9.0-%5BHotwire-Turbo-integration%5D
+        def devise_redirect_status
+          ::Devise.try(:responder).try(:redirect_status) || :found
+        end
+
+        def devise_error_status
+          ::Devise.try(:responder).try(:error_status) || :ok
+        end
+      end
+    end
+  end
+end

data/app/graphql/graphql/identity_extensions.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module GraphQL
+  module IdentityExtensions
+    extend ActiveSupport::Concern
+
+    included do
+      field :omniauth_data, ::GraphQL::Types::JSON, null: true, description: 'omniauth data'
+    end
+  end
+end

data/app/graphql/graphql/user_extensions.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module GraphQL
+  module UserExtensions
+    extend ActiveSupport::Concern
+
+    included do
+      # devise fields
+      field :last_login_at, ::GraphQL::Types::ISO8601DateTime, null: true, description: 'last login in at',
+                                                               method: :last_sign_in_at
+      field :sign_in_count, Integer, null: true, description: 'sign in count'
+    end
+  end
+end

data/app/models/concerns/groovestack/auth/authorized_fields_for_serialization.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Groovestack
+  module Auth
+    module AuthorizedFieldsForSerialization
+      extend ActiveSupport::Concern
+
+      # required for memoization during graphql serialization
+      def authorized_fields_for_serialization(user)
+        @authorized_fields_for_serialization ||= begin
+          Pundit.policy!(user, self).permitted_attributes_for_show
+        rescue StandardError => e
+          # NOTE: this is a fallback for when Pundit is not available
+          ::Groovestack::Base.notify_error(e)
+
+          []
+        end
+      end
+    end
+  end
+end

data/app/models/concerns/groovestack/auth/identity.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+module Groovestack
+  module Auth
+    module Identity
+      extend ActiveSupport::Concern
+
+      included do
+      end
+
+      class_methods do
+        def find_or_create_from_omniauth!(auth:, current_user: nil, user_attrs: {}) # rubocop:disable Metrics/AbcSize
+          where(provider: auth.provider, uid: auth.uid).first_or_create! do |identity|
+            # TODO
+            # possible cases
+            # 1. user exists in the system (i.e. we found an email for them)
+            # 2. user does not exist in the system (i.e. oauth email doesn't match anything in the system
+
+            user = current_user || ::User.find_by(email: auth.info.email)
+            user_attrs_to_assign = user_attrs[:priority] || {}
+
+            if user.nil?
+              user_attrs_to_assign = user_attrs_to_assign.merge(user_attrs[:defaults] || {})
+              user = User.new
+            end
+
+            attrs = auth['info'].to_hash.slice(*user.attribute_names)
+            user.assign_attributes(attrs.merge(user_attrs_to_assign))
+
+            user.save!
+
+            identity.omniauth_data = auth
+            identity.user = user
+          end
+        end
+      end
+    end
+  end
+end

data/app/models/concerns/groovestack/auth/user.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Groovestack
+  module Auth
+    module User
+      extend ActiveSupport::Concern
+
+      included do
+        # Include default devise modules.
+        devise(*Groovestack::Auth.devise_modules)
+      end
+    end
+  end
+end

data/app/views/devise/mailer/magic_link.html.erb

@@ -0,0 +1,9 @@
+<p>Hello <%= @resource.email %>!</p>
+
+<p>You can login using the code below:</p>
+
+<center>
+  <p style="font-size: 40px; font-weight: bold;"><%= @token %></p>
+</center>
+
+<p>Note that the code will expire in <%= Devise.passwordless_login_within.inspect %>.</p>          

data/config/initializers/core_config.rb

@@ -2,9 +2,6 @@
 
 ActiveSupport.on_load(:after_initialize) do # rubocop:disable Metrics/BlockLength
   if defined?(Groovestack::Config)
-    Groovestack::Config::App.dynamic_config << { key: :has_admins, build: proc { User.admins.count.positive? } }
-    Groovestack::Config::App.dynamic_config << { key: :user_roles, build: proc { User::ROLES } }
-
     Groovestack::Config::App.dynamic_config << {
       key: :oauth_providers,
       build: proc do
@@ -34,8 +31,5 @@ ActiveSupport.on_load(:after_initialize) do # rubocop:disable Metrics/BlockLengt
         }
       end
     }
-
-    # make AppConfig query public
-    ::Types::QueryType.fields['AppConfig'].instance_variable_set(:@authenticate, false) if defined?(::Types::QueryType)
   end
 end