gsterndale-warrant 0.0.0 → 0.2.0

data/test/rails_root/vendor/gems/thoughtbot-clearance-0.4.0/lib/clearance/app/controllers/application_controller.rb

@@ -0,0 +1,82 @@
+module Clearance
+  module App
+    module Controllers
+      module ApplicationController
+    
+        def self.included(controller)
+          controller.class_eval do
+            
+            helper_method :current_user
+            helper_method :signed_in?
+        
+            def current_user
+              user_from_session || user_from_cookie
+            end
+
+            def signed_in?
+              ! current_user.nil?
+            end
+            
+            protected
+            
+            def authenticate
+              deny_access unless signed_in?
+            end
+
+            def user_from_session
+              if session[:user_id] && session[:salt]
+                user = User.find_by_id_and_salt(session[:user_id], session[:salt])
+              end
+              user && user.email_confirmed? ? user : nil
+            end
+
+            def user_from_cookie
+              if cookies[:remember_token]
+                user = User.find_by_remember_token(cookies[:remember_token])
+              end
+              user && user.remember? ? user : nil
+            end
+
+            # Hook
+            def sign_user_in(user)
+              sign_in(user)
+            end
+
+            def sign_in(user)
+              if user
+                session[:user_id] = user.id
+                session[:salt]    = user.salt
+              end
+            end
+
+            def redirect_back_or(default)
+              session[:return_to] ||= params[:return_to]
+              if session[:return_to] 
+                redirect_to(session[:return_to])
+              else 
+                redirect_to(default)
+              end
+              session[:return_to] = nil
+            end
+
+            def redirect_to_root
+              redirect_to root_url
+            end
+
+            def store_location
+              session[:return_to] = request.request_uri
+            end
+
+            def deny_access(flash_message = nil, opts = {})
+              store_location
+              flash[:failure] = flash_message if flash_message
+              render :template => "/sessions/new", :status => :unauthorized 
+            end
+            
+          end
+        end
+        
+      end
+    end
+  end
+end

data/test/rails_root/vendor/gems/thoughtbot-clearance-0.4.0/lib/clearance/app/controllers/confirmations_controller.rb

@@ -0,0 +1,42 @@
+module Clearance
+  module App
+    module Controllers
+      module ConfirmationsController
+    
+        def self.included(controller)
+          controller.class_eval do
+            
+            before_filter :existing_user?, :only => :new
+            filter_parameter_logging :salt
+        
+            def new
+              create
+            end
+
+            def create
+              @user.confirm_email!
+              sign_user_in(@user)
+              flash[:success] = "Confirmed email and signed in."
+              redirect_to url_after_create
+            end
+        
+            private
+            
+            def existing_user?
+              @user = User.find_by_id_and_salt(params[:user_id], params[:salt])
+              if @user.nil?
+                render :nothing => true, :status => :not_found
+              end
+            end
+
+            def url_after_create
+              root_url
+            end
+            
+          end
+        end
+        
+      end
+    end
+  end
+end

data/test/rails_root/vendor/gems/thoughtbot-clearance-0.4.0/lib/clearance/app/controllers/passwords_controller.rb

@@ -0,0 +1,68 @@
+module Clearance
+  module App
+    module Controllers
+      module PasswordsController
+
+        def self.included(controller)
+          controller.class_eval do
+            
+            before_filter :existing_user?, :only => [:edit, :update]
+            filter_parameter_logging :password, :password_confirmation
+            
+            def new
+            end
+
+            def create
+              user = User.find_by_email(params[:password][:email])
+              if user.nil?
+                flash.now[:notice] = "Unknown email"
+                render :action => :new
+              else
+                ClearanceMailer.deliver_change_password user
+                flash[:notice] = "Details for changing your password " <<
+                                 "have been sent to #{user.email}"
+                redirect_to url_after_create
+              end
+            end
+
+            def edit
+              @user = User.find_by_email_and_encrypted_password(params[:email],
+                                                                params[:password])
+            end
+
+            def update
+              @user = User.find_by_email_and_encrypted_password(params[:email],
+                                                                params[:password])
+              if @user.update_attributes params[:user]
+                sign_user_in(@user)
+                redirect_to url_after_update
+              else
+                render :action => :edit
+              end
+            end
+            
+            private
+            
+            def existing_user?
+              user = User.find_by_email_and_encrypted_password(params[:email],
+                                                               params[:password])
+              if user.nil?
+                render :nothing => true, :status => :not_found
+              end
+            end
+
+            def url_after_create
+              new_session_url
+            end
+            
+            def url_after_update
+              root_url
+            end
+            
+          end
+        end
+        
+      end
+    end
+  end
+end

data/test/rails_root/vendor/gems/thoughtbot-clearance-0.4.0/lib/clearance/app/controllers/sessions_controller.rb

@@ -0,0 +1,68 @@
+module Clearance
+  module App
+    module Controllers
+      module SessionsController
+
+        def self.included(controller)
+          controller.class_eval do
+            
+            protect_from_forgery :except => :create
+            filter_parameter_logging :password
+        
+            def create
+              @user = User.authenticate(params[:session][:email], 
+                                        params[:session][:password])
+              if @user.nil?
+                flash.now[:notice] = "Bad email or password."
+                render :action => :new
+              else
+                if @user.email_confirmed?
+                  remember(@user) if remember?
+                  sign_user_in(@user)
+                  flash[:notice] = "Signed in successfully"
+                  redirect_back_or url_after_create
+                else
+                  deny_access("User has not confirmed email.")
+                end
+              end
+            end
+
+            def destroy
+              forget(current_user)
+              reset_session
+              flash[:notice] = "You have been signed out."
+              redirect_to url_after_destroy
+            end
+        
+            private
+            
+            def remember?
+              params[:session] && params[:session][:remember_me] == "1"
+            end
+            
+            def remember(user)
+              user.remember_me!
+              cookies[:remember_token] = { :value   => user.remember_token, 
+                                           :expires => user.remember_token_expires_at }
+            end
+
+            def forget(user)
+              user.forget_me! if user
+              cookies.delete :remember_token
+            end
+
+            def url_after_create
+              root_url
+            end
+
+            def url_after_destroy
+              new_session_url
+            end
+            
+          end
+        end
+          
+      end
+    end
+  end
+end

data/test/rails_root/vendor/gems/thoughtbot-clearance-0.4.0/lib/clearance/app/controllers/users_controller.rb

@@ -0,0 +1,40 @@
+module Clearance
+  module App
+    module Controllers
+      module UsersController
+
+        def self.included(controller)
+          controller.class_eval do
+            
+            before_filter :redirect_to_root, :only => [:new, :create], :if => :signed_in?
+            filter_parameter_logging :password
+        
+            def new
+              @user = User.new(params[:user])
+            end
+
+            def create
+              @user = User.new params[:user]
+              if @user.save
+                ClearanceMailer.deliver_confirmation @user
+                flash[:notice] = "You will receive an email within the next few minutes. " <<
+                                 "It contains instructions for you to confirm your account."
+                redirect_to url_after_create
+              else
+                render :action => "new"
+              end
+            end
+        
+            private
+            
+            def url_after_create
+              new_session_url
+            end
+            
+          end
+        end
+
+      end
+    end
+  end
+end

data/test/rails_root/vendor/gems/thoughtbot-clearance-0.4.0/lib/clearance/app/models/clearance_mailer.rb

@@ -0,0 +1,29 @@
+module Clearance
+  module App
+    module Models
+      module ClearanceMailer
+    
+        def self.included(mailer)
+          mailer.class_eval do
+        
+            def change_password(user)
+              from       DO_NOT_REPLY
+              recipients user.email
+              subject    "Change your password"
+              body       :user => user
+            end
+
+            def confirmation(user)
+              from       DO_NOT_REPLY
+              recipients user.email
+              subject   "Account confirmation"
+              body      :user => user
+            end
+        
+          end
+        end
+        
+      end
+    end
+  end
+end

data/test/rails_root/vendor/gems/thoughtbot-clearance-0.4.0/lib/clearance/app/models/user.rb

@@ -0,0 +1,85 @@
+require 'digest/sha2'
+
+module Clearance
+  module App
+    module Models
+      module User
+    
+        def self.included(model)
+          model.class_eval do
+        
+            attr_accessible :email, :password, :password_confirmation
+            attr_accessor :password, :password_confirmation
+
+            validates_presence_of     :email
+            validates_presence_of     :password, :if => :password_required?
+            validates_confirmation_of :password, :if => :password_required?
+            validates_uniqueness_of   :email, :case_sensitive => false
+            validates_format_of       :email, :with => %r{.+@.+\..+}
+
+            before_save :initialize_salt, :encrypt_password, :downcase_email
+        
+            def self.authenticate(email, password)
+              user = find(:first, :conditions => ['LOWER(email) = ?', email.to_s.downcase])
+              user && user.authenticated?(password) ? user : nil
+            end
+
+            def authenticated?(password)
+              encrypted_password == encrypt(password)
+            end
+
+            def encrypt(string)
+              Digest::SHA512.hexdigest("--#{salt}--#{string}--")
+            end
+
+            def remember?
+              remember_token_expires_at && Time.now.utc < remember_token_expires_at
+            end
+
+            def remember_me!
+              remember_me_until 2.weeks.from_now.utc
+            end
+
+            def remember_me_until(time)
+              self.update_attribute :remember_token_expires_at, time
+              self.update_attribute :remember_token, 
+                encrypt("--#{remember_token_expires_at}--#{password}--")
+            end
+
+            def forget_me!
+              self.update_attribute :remember_token_expires_at, nil
+              self.update_attribute :remember_token, nil
+            end
+
+            def confirm_email!
+              self.update_attribute :email_confirmed, true
+            end
+        
+            protected
+
+            def initialize_salt
+              if new_record?
+                self.salt = encrypt("--#{Time.now.utc.to_s}--#{password}--")
+              end
+            end
+
+            def encrypt_password
+              return if password.blank?
+              self.encrypted_password = encrypt(password)
+            end
+
+            def password_required?
+              encrypted_password.blank? || !password.blank?
+            end
+            
+            def downcase_email
+              self.email = email.to_s.downcase
+            end
+        
+          end
+        end
+  
+      end
+    end
+  end
+end

data/test/rails_root/vendor/gems/thoughtbot-clearance-0.4.0/lib/clearance/test/functional/confirmations_controller_test.rb

@@ -0,0 +1,44 @@
+module Clearance
+  module Test
+    module Functional
+      module ConfirmationsControllerTest
+
+        def self.included(controller_test)
+          controller_test.class_eval do
+            
+            should_filter_params :salt
+            
+            context "Given a user whose email has not been confirmed" do
+              setup { @user = Factory(:registered_user) }
+              
+              context "on GET to #new with correct id and salt" do
+                setup do
+                  get :new, :user_id => @user.to_param, :salt => @user.salt
+                end
+
+                should_set_the_flash_to /confirmed email/i
+                should_set_the_flash_to /signed in/i
+                should_be_signed_in_and_email_confirmed_as { @user }
+                should_redirect_to_url_after_create
+              end
+              
+              context "on GET to #new with incorrect salt" do
+                setup do
+                  salt = ""
+                  assert_not_equal salt, @user.salt
+
+                  get :new, :user_id => @user.to_param, :salt => salt
+                end
+
+                should_respond_with :not_found
+                should_render_nothing
+              end
+            end
+          
+          end
+        end
+
+      end
+    end
+  end
+end

data/test/rails_root/vendor/gems/thoughtbot-clearance-0.4.0/lib/clearance/test/functional/passwords_controller_test.rb

@@ -0,0 +1,175 @@
+module Clearance
+  module Test
+    module Functional
+      module PasswordsControllerTest
+
+        def self.included(controller_test)
+          controller_test.class_eval do
+
+            should_route :get, '/users/1/password/edit', 
+              :action  => 'edit', :user_id => '1'
+
+            context 'with a user' do
+              setup { @user = Factory(:registered_user) }
+
+              context 'A GET to #new' do
+                setup { get :new, :user_id => @user.to_param }
+
+                should_respond_with :success
+                should_render_template "new"
+              end
+
+              context "A POST to #create" do
+                context "with an existing user's email address" do
+                  setup do
+                    ActionMailer::Base.deliveries.clear
+
+                    post :create, :password => { :email => @user.email }
+                  end
+                  
+                  should "send the change your password email" do
+                    assert_sent_email do |email|
+                      email.subject =~ /change your password/i
+                    end
+                  end
+                  
+                  should "set a :notice flash with the user email address" do
+                    assert_match /#{@user.email}/, flash[:notice]
+                  end
+
+                  should_redirect_to_url_after_create
+                end
+
+                context "with a non-existent email address" do
+                  setup do
+                    email = "user1@example.com"
+                    assert ! User.exists?(['email = ?', email])
+                    ActionMailer::Base.deliveries.clear
+
+                    post :create, :password => { :email => email }
+                  end
+
+                  should "not send a password reminder email" do
+                    assert ActionMailer::Base.deliveries.empty?
+                  end
+
+                  should "set a :notice flash" do
+                    assert_not_nil flash.now[:notice]
+                  end
+
+                  should_render_template "new"
+                end
+              end
+
+              context "A GET to #edit" do
+                context "with an existing user's id and password" do
+                  setup do
+                    get :edit, 
+                      :user_id  => @user.to_param, 
+                      :password => @user.encrypted_password, 
+                      :email    => @user.email
+                  end
+
+                  should "find the user with the given id and password" do
+                    assert_equal @user, assigns(:user)
+                  end
+
+                  should_respond_with :success
+                  should_render_template "edit"
+
+                  should "have a form for the user's email, password, and password confirm" do
+                    update_path = ERB::Util.h(user_password_path(@user,
+                          :password => @user.encrypted_password,
+                          :email    => @user.email))
+
+                    assert_select 'form[action=?]', update_path do
+                      assert_select 'input[name=_method][value=?]', 'put'
+                      assert_select 'input[name=?]', 'user[password]'
+                      assert_select 'input[name=?]', 'user[password_confirmation]'
+                    end
+                  end
+                end
+
+                context "with an existing user's id but not password" do
+                  setup do
+                    get :edit, :user_id => @user.to_param, :password => ""
+                  end
+
+                  should_respond_with :not_found
+                  should_render_nothing
+                end
+              end
+
+              context "A PUT to #update" do
+                context "with an existing user's id but not password" do
+                  setup do
+                    put :update, :user_id => @user.to_param, :password => ""
+                  end
+
+                  should "not update the user's password" do
+                    assert_not_equal @encrypted_new_password, @user.encrypted_password
+                  end
+
+                  should_not_be_signed_in
+                  should_respond_with :not_found
+                  should_render_nothing
+                end
+
+                context "with a matching password and password confirmation" do
+                  setup do
+                    new_password = "new_password"
+                    @encrypted_new_password = @user.encrypt(new_password)
+                    assert_not_equal @encrypted_new_password, @user.encrypted_password
+
+                    put(:update,
+                        :user_id  => @user,
+                        :email    => @user.email,
+                        :password => @user.encrypted_password,
+                        :user => {
+                          :password              => new_password,
+                          :password_confirmation => new_password
+                        })
+                    @user.reload
+                  end
+
+                  should "update the user's password" do
+                    assert_equal @encrypted_new_password, @user.encrypted_password
+                  end
+
+                  should_be_signed_in_as { @user }
+                  should_redirect_to_url_after_update
+                end
+
+                context "with password but blank password confirmation" do
+                  setup do
+                    new_password = "new_password"
+                    @encrypted_new_password = @user.encrypt(new_password)
+
+                    put(:update,
+                        :user_id => @user.to_param,
+                        :password => @user.encrypted_password,
+                        :user => {
+                          :password => new_password,
+                          :password_confirmation => ''
+                        })
+                    @user.reload
+                  end
+
+                  should "not update the user's password" do
+                    assert_not_equal @encrypted_new_password, @user.encrypted_password
+                  end
+
+                  should_not_be_signed_in
+                  should_respond_with :not_found
+                  should_render_nothing
+                end
+              end
+            end
+          
+          end
+        end
+
+      end
+    end
+  end
+end