groovestack-auth 0.1.5 → 0.1.6

data/app/graphql/graphql/identity_extensions.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module GraphQL
+  module IdentityExtensions
+    extend ActiveSupport::Concern
+
+    included do
+      field :omniauth_data, ::GraphQL::Types::JSON, null: true, description: 'omniauth data'
+    end
+  end
+end

data/app/graphql/graphql/user_extensions.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module GraphQL
+  module UserExtensions
+    extend ActiveSupport::Concern
+
+    included do
+      # devise fields
+      field :last_login_at, ::GraphQL::Types::ISO8601DateTime, null: true, description: 'last login in at',
+                                                               method: :last_sign_in_at
+      field :sign_in_count, Integer, null: true, description: 'sign in count'
+    end
+  end
+end

data/app/models/concerns/groovestack/auth/authorized_fields_for_serialization.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Groovestack
+  module Auth
+    module AuthorizedFieldsForSerialization
+      extend ActiveSupport::Concern
+
+      # required for memoization during graphql serialization
+      def authorized_fields_for_serialization(user)
+        @authorized_fields_for_serialization ||= begin
+          Pundit.policy!(user, self).permitted_attributes_for_show
+        rescue StandardError => e
+          # NOTE: this is a fallback for when Pundit is not available
+          ::Groovestack::Base.notify_error(e)
+
+          []
+        end
+      end
+    end
+  end
+end

data/app/models/concerns/groovestack/auth/identity.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+module Groovestack
+  module Auth
+    module Identity
+      extend ActiveSupport::Concern
+
+      included do
+      end
+
+      class_methods do
+        def find_or_create_from_omniauth!(auth:, current_user: nil, user_attrs: {}) # rubocop:disable Metrics/AbcSize
+          where(provider: auth.provider, uid: auth.uid).first_or_create! do |identity|
+            # TODO
+            # possible cases
+            # 1. user exists in the system (i.e. we found an email for them)
+            # 2. user does not exist in the system (i.e. oauth email doesn't match anything in the system
+
+            user = current_user || ::User.find_by(email: auth.info.email)
+            user_attrs_to_assign = user_attrs[:priority] || {}
+
+            if user.nil?
+              user_attrs_to_assign = user_attrs_to_assign.merge(user_attrs[:defaults] || {})
+              user = User.new
+            end
+
+            attrs = auth['info'].to_hash.slice(*user.attribute_names)
+            user.assign_attributes(attrs.merge(user_attrs_to_assign))
+
+            user.save!
+
+            identity.omniauth_data = auth
+            identity.user = user
+          end
+        end
+      end
+    end
+  end
+end

data/app/models/concerns/groovestack/auth/user.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Groovestack
+  module Auth
+    module User
+      extend ActiveSupport::Concern
+
+      included do
+        # Include default devise modules.
+        devise(*Groovestack::Auth.devise_modules)
+      end
+    end
+  end
+end

data/app/views/devise/mailer/magic_link.html.erb

@@ -0,0 +1,9 @@
+<p>Hello <%= @resource.email %>!</p>
+
+<p>You can login using the code below:</p>
+
+<center>
+  <p style="font-size: 40px; font-weight: bold;"><%= @token %></p>
+</center>
+
+<p>Note that the code will expire in <%= Devise.passwordless_login_within.inspect %>.</p>          

data/config/initializers/core_config.rb

@@ -2,9 +2,6 @@
 
 ActiveSupport.on_load(:after_initialize) do # rubocop:disable Metrics/BlockLength
   if defined?(Groovestack::Config)
-    Groovestack::Config::App.dynamic_config << { key: :has_admins, build: proc { User.admins.count.positive? } }
-    Groovestack::Config::App.dynamic_config << { key: :user_roles, build: proc { User::ROLES } }
-
     Groovestack::Config::App.dynamic_config << {
       key: :oauth_providers,
       build: proc do
@@ -34,8 +31,5 @@ ActiveSupport.on_load(:after_initialize) do # rubocop:disable Metrics/BlockLengt
         }
       end
     }
-
-    # make AppConfig query public
-    ::Types::QueryType.fields['AppConfig'].instance_variable_set(:@authenticate, false) if defined?(::Types::QueryType)
   end
 end