hashrocket-clearance 0.4.0

data/lib/clearance/test/test_helper.rb

@@ -0,0 +1,94 @@
+module Clearance 
+  module Test
+    module TestHelper
+    
+      def self.included(base)
+        base.class_eval do
+          include InstanceMethods
+          extend ClassMethods
+        end
+      end
+
+      module InstanceMethods
+        def login_as(user = nil)
+          user ||= Factory(:user)
+          @request.session[:user_id] = user.id
+          return user
+        end
+
+        def logout 
+          @request.session[:user_id] = nil
+        end
+      end
+    
+      module ClassMethods
+        def should_deny_access_on(command, opts = {})
+
+          context "on #{command}" do
+            setup { eval command }
+            should_deny_access(opts)
+          end
+        end
+
+        def should_deny_access(opts = {})
+          opts[:redirect] ||= "new_session_path"
+          should_redirect_to opts[:redirect]
+          if opts[:flash]
+            should_set_the_flash_to opts[:flash]
+          else
+            should_not_set_the_flash
+          end
+        end
+      
+        # should_have_form :action => 'admin_users_path',
+        #   :method => :get, 
+        #   :fields => { 'email' => :text }
+        # TODO: http_method should be pulled out
+        def should_have_form(opts)
+          model = self.name.gsub(/ControllerTest$/, '').singularize.downcase
+          model = model[model.rindex('::')+2..model.size] if model.include?('::')
+          http_method, hidden_http_method = form_http_method opts[:method]
+          should "have a #{model} form" do
+            assert_select "form[action=?][method=#{http_method}]", eval(opts[:action]) do
+              if hidden_http_method
+                assert_select "input[type=hidden][name=_method][value=#{hidden_http_method}]"
+              end
+              opts[:fields].each do |attribute, type|
+                attribute = attribute.is_a?(Symbol) ? "#{model}[#{attribute.to_s}]" : attribute
+                assert_select "input[type=#{type.to_s}][name=?]", attribute
+              end
+              assert_select "input[type=submit]"
+            end
+          end
+        end
+      
+        def form_http_method(http_method)
+          http_method = http_method.nil? ? 'post' : http_method.to_s
+          if http_method == "post" || http_method == "get"
+            return http_method, nil
+          else
+            return "post", http_method
+          end
+        end
+      
+        def logged_in_user_context(&blk)
+          context "A logged in user" do
+            setup do
+              @user = Factory :user
+              login_as @user
+            end
+            merge_block(&blk)
+          end
+        end
+      
+        def public_context(&blk)
+          context "The public" do
+            setup { logout }
+            merge_block(&blk)
+          end
+        end
+      end
+ 
+    end 
+  end
+end

data/lib/clearance/test/unit/clearance_mailer_test.rb

@@ -0,0 +1,65 @@
+module Clearance
+  module Test
+    module Unit
+      module ClearanceMailerTest
+  
+        def self.included(base)
+          base.class_eval do
+            context "A forgot password email" do
+              setup do
+                @user = Factory :user
+                @user.generate_reset_password_code
+                @email = ClearanceMailer.create_forgot_password @user
+              end
+
+              should "set its from address to DO_NOT_REPLY" do
+                assert_equal DO_NOT_REPLY, @email.from[0]
+              end
+
+              should "contain a link to edit the user's password" do
+                host = ActionMailer::Base.default_url_options[:host]
+                regexp = %r{http://#{host}/passwords/#{@user.reset_password_code}}
+                assert_match regexp, @email.body
+              end
+
+              should "be sent to the user" do
+                assert_equal [@user.email], @email.to
+              end
+
+              should "have a subject of '[PROJECT_NAME] Forgot your password'" do
+                assert_equal @email.subject, "[#{PROJECT_NAME.humanize}] Forgot your password"
+              end
+            end
+            
+            context "A confirmation email" do
+              setup do
+                @user = Factory :user
+                @user.generate_confirmation_code
+                @email = ClearanceMailer.create_confirmation @user
+              end
+
+              should 'set its recipient to the given user' do
+                assert_equal @user.email, @email.to[0]
+              end
+
+              should 'set its subject' do
+                assert_equal "[#{PROJECT_NAME.humanize}] Account confirmation", @email.subject
+              end
+
+              should 'set its from address to DO_NOT_REPLY' do
+                assert_equal DO_NOT_REPLY, @email.from[0]
+              end
+
+              should "contain a link to confirm the user's account" do
+                host = ActionMailer::Base.default_url_options[:host]
+                regexp = %r{http://#{host}/confirmations/#{@user.confirmation_code}}
+                assert_match regexp, @email.body
+              end
+            end
+          end
+        end
+
+      end
+    end  
+  end
+end

data/lib/clearance/test/unit/user_test.rb

@@ -0,0 +1,335 @@
+module Clearance
+  module Test
+    module Unit
+      module UserTest
+    
+        def self.included(base)
+          base.class_eval do
+            should_require_attributes :email, :password
+            should_have_instance_methods :old_password, :old_password=
+
+            should "require password validation on create" do
+              user = Factory.build(:user, :password => 'blah', :password_confirmation => 'boogidy')
+              assert !user.save
+              assert_match(/confirmation/i, user.errors.on(:password))
+            end
+
+            should "create a crypted_password on save" do
+              assert_not_nil Factory(:user, :crypted_password => nil).crypted_password
+            end
+            
+            should "generate a confirmation_code after create" do
+              assert_not_nil Factory(:user, :password => 'boogidy', :password_confirmation => 'boogidy').confirmation_code
+            end
+
+            context 'updating a password' do
+              setup do
+                @user = Factory(:user)
+                assert_not_nil @user.crypted_password
+                @crypt = @user.crypted_password
+                assert_not_nil @user.salt
+                @salt = @user.salt
+                @user.password = 'a_new_password'
+                @user.password_confirmation = 'a_new_password'
+                assert @user.save
+              end
+
+              should 'update a crypted_password' do
+                @user.reload
+                assert @user.crypted_password != @crypt
+              end
+            end
+        
+            context 'A user' do
+              setup do
+                @salt = 'salt'
+                User.any_instance.stubs(:initialize_salt)
+                @user = Factory :user, :salt => @salt
+                @password = @user.password
+              end
+          
+              should "require password validation on update" do
+                @user.update_attributes(:password => "blah", :password_confirmation => "boogidy")
+                assert !@user.save
+                assert_match(/confirmation/i, @user.errors.on(:password))
+              end
+          
+              should_require_unique_attributes :email
+          
+              context 'authenticating a user' do
+                context 'with good credentials' do
+                  setup do
+                    @result = User.authenticate @user.email, @password
+                  end
+
+                  should 'return true' do
+                    assert @result
+                  end
+                end
+
+                context 'with bad credentials' do
+                  setup do
+                    @result = User.authenticate @user.email, 'horribly_wrong_password'
+                  end
+
+                  should 'return false' do
+                    assert !@result
+                  end
+                end
+              end
+          
+              context 'authenticated?' do
+                context 'with good credentials' do
+                  setup do
+                    @result = @user.authenticated? @password
+                  end
+
+                  should 'return true' do
+                    assert @result
+                  end
+                end
+
+                context 'with bad credentials' do
+                  setup do
+                    @result = @user.authenticated? 'horribly_wrong_password'
+                  end
+
+                  should 'return false' do
+                    assert !@result
+                  end
+                end
+              end
+
+              context 'encrypt' do
+                setup do
+                  @crypted  = @user.encrypt(@password)
+                  @expected = Digest::SHA1.hexdigest("--#{@salt}--#{@password}--")
+                end
+
+                should 'create a Hash using SHA1 encryption' do
+                  assert_equal @expected, @crypted
+                  assert_not_equal @password, @crypted
+                end
+              end
+
+              context 'remember_me!' do
+                setup do
+                  assert_nil @user.remember_token
+                  assert_nil @user.remember_token_expires_at
+                  @user.remember_me!
+                end
+
+                should 'set the remember token and expiration date' do
+                  assert_not_nil @user.remember_token
+                  assert_not_nil @user.remember_token_expires_at
+                end
+
+                should 'remember_token?' do
+                  assert @user.remember_token?
+                end
+
+                context 'forget_me!' do
+                  setup do
+                    @user.forget_me!
+                  end
+
+                  should 'unset the remember token and expiration date' do
+                    assert_nil @user.remember_token
+                    assert_nil @user.remember_token_expires_at
+                  end
+
+                  should 'not remember_token?' do
+                    assert ! @user.remember_token?
+                  end
+                end
+              end
+
+              context 'remember_token?' do
+                context 'when token expires in the future' do
+                  setup do
+                    @user.update_attribute :remember_token_expires_at, 2.weeks.from_now.utc
+                  end
+
+                  should 'be true' do
+                    assert @user.remember_token?
+                  end
+                end
+
+                context 'when token expired' do
+                  setup do
+                    @user.update_attribute :remember_token_expires_at, 2.weeks.ago.utc
+                  end
+
+                  should 'be false' do
+                    assert ! @user.remember_token?
+                  end
+                end
+              end
+
+              context "User.authenticate with a valid email and password" do
+                setup do
+                  @found_user = User.authenticate @user.email, @user.password
+                end
+
+                should "find that user" do
+                  assert_equal @user, @found_user
+                end
+              end
+
+              context "When sent authenticate with an invalid email and password" do
+                setup do
+                  @found_user = User.authenticate "not", "valid" 
+                end
+
+                should "find nothing" do
+                  assert_nil @found_user
+                end
+              end
+            end
+
+            context "A user" do
+              setup do
+                @user = Factory :user
+              end
+              
+              context 'when sent #generate_confirmation_code' do
+                setup do
+                  @user = Factory.build(:user)
+                  assert ! @user.confirmed?
+                  assert_nil @user.confirmation_code
+                  @user.generate_confirmation_code
+                end
+                
+                should 'generate a confirmation code' do
+                  assert @user.confirmation_code
+                end
+                
+                should 'not be confirmed' do
+                  assert ! @user.confirmed?
+                end
+              end
+              
+              context 'when sent #confirm!' do
+                setup do
+                  assert ! @user.confirmed?
+                  @user.generate_confirmation_code
+                  assert @user.confirm!
+                  @user.reload
+                end
+
+                should 'mark the User record as confirmed' do
+                  assert @user.confirmed?
+                end
+                
+                should 'remove the confirmation code' do
+                  assert_nil @user.confirmation_code
+                end
+              end
+
+              context 'when sent #generate_reset_password_code' do
+                setup do
+                  assert_nil @user.reset_password_code
+                  @user.generate_reset_password_code
+                end
+                
+                should 'generate a reset password code' do
+                  assert @user.reset_password_code
+                end
+              end
+              
+              context 'when sent #reset_password' do
+                setup do
+                  assert_not_nil @user.crypted_password
+                  assert_nil @user.reset_password_code
+                  @user.generate_reset_password_code
+                end
+                
+                should 'change the password when passed a matching password and confirmation password' do
+                  old_pass = @user.crypted_password
+                  @user.reset_password(:password => 'new_password', :password_confirmation => 'new_password')
+                  assert_not_equal old_pass, @user.crypted_password
+                end
+                
+                should 'return true if the password is changed' do
+                  assert_equal true, @user.reset_password(:password => 'new_password', :password_confirmation => 'new_password')
+                end
+
+                should 'clear the reset_password_code after changing the password' do
+                  @user.reset_password(:password => 'new_password', :password_confirmation => 'new_password')
+                  assert_nil @user.reset_password_code
+                end
+                
+                should 'return nil if the password is not confirmed' do
+                  assert_nil @user.reset_password(:password => 'new_password', :password_confirmation => 'xnew_password')
+                end
+                
+                should 'not validate if only the confirmation password is passed in' do
+                  @user.reset_password(:password => '', :password_confirmation => 'new_password')
+                  assert @user.errors.on(:password)
+                end
+
+                should 'not validate without a password to confirm' do
+                  @user.reset_password(:password_confirmation => 'new_password')
+                  assert @user.errors.on(:password)
+                end
+
+                should 'not validate if only the password is passed in' do
+                  @user.reset_password(:password => 'new_password')
+                  assert @user.errors.on(:password)
+                end
+
+                should 'not validate if the password is not confirmed' do
+                  @user.reset_password(:password => 'new_password', :password_confirmation => 'xnew_password')
+                  assert @user.errors.on(:password)
+                end
+              end
+
+              context 'when sent #change_password' do
+                 setup do
+                   assert_not_nil @user.crypted_password
+                 end
+
+                 should 'change the password when passed an old password and matching password and confirmation password' do
+                   old_pass = @user.crypted_password
+                   @user.change_password(:old_password => 'password', :password => 'new_password', :password_confirmation => 'new_password')
+                   assert_not_equal old_pass, @user.crypted_password
+                 end
+
+                 should 'return true if the password is changed' do
+                   assert_equal true, @user.change_password(:old_password => 'password', :password => 'new_password', :password_confirmation => 'new_password')
+                 end
+
+                 should 'return false and not be valid if the old_password does not match' do
+                   assert ! @user.change_password(:old_password => 'something_else', :password => 'new_password', :password_confirmation => 'new_password')
+                   assert @user.errors.on(:old_password)
+                 end
+
+                 should 'return false and not be valid if only the confirmation password is passed in' do
+                   assert ! @user.change_password(:old_password => 'password', :password => '', :password_confirmation => 'new_password')
+                   assert @user.errors.on(:password)
+                 end
+
+                 should 'return false and not be valid without a password to confirm' do
+                   assert ! @user.change_password(:old_password => 'password', :password_confirmation => 'new_password')
+                   assert @user.errors.on(:password)
+                 end
+
+                 should 'return false and not be valid if only the password is passed in' do
+                   assert ! @user.change_password(:old_password => 'password', :password => 'new_password')
+                   assert @user.errors.on(:password)
+                 end
+
+                 should 'return false and not be valid if the password is not confirmed' do
+                   assert ! @user.change_password(:old_password => 'password', :password => 'new_password', :password_confirmation => 'xnew_password')
+                   assert @user.errors.on(:password)
+                 end
+               end
+
+            end
+          end
+        end
+
+      end
+    end
+  end
+end

data/lib/clearance/version.rb

@@ -0,0 +1,7 @@
+  module Clearance
+    module Version
+      MAJOR = 0
+      MINOR = 4
+      PATCH = 0
+    end
+  end

data/lib/clearance.rb

@@ -0,0 +1,19 @@
+require 'clearance/app/controllers/application_controller'
+require 'clearance/app/controllers/confirmations_controller'
+require 'clearance/app/controllers/facebook_sessions_controller'
+require 'clearance/app/controllers/passwords_controller'
+require 'clearance/app/controllers/sessions_controller'
+require 'clearance/app/controllers/users_controller'
+require 'clearance/app/models/user'
+require 'clearance/app/models/clearance_mailer'
+require 'clearance/app/models/clearance_facebook_mailer'
+require 'clearance/spec/controllers/sessions_controller_spec'
+require 'clearance/spec/models/user_spec'
+require 'clearance/test/functional/confirmations_controller_test'
+require 'clearance/test/functional/sessions_controller_test'
+require 'clearance/test/functional/users_controller_test'
+require 'clearance/test/functional/passwords_controller_test'
+require 'clearance/test/test_helper'
+require 'clearance/test/unit/user_test'
+require 'clearance/test/unit/clearance_mailer_test'
+require 'clearance/version'

data/test/rails_root/Capfile

@@ -0,0 +1,3 @@
+load 'deploy' if respond_to?(:namespace) # cap2 differentiator
+Dir['vendor/plugins/*/recipes/*.rb'].each { |plugin| load(plugin) }
+load 'config/deploy'

data/test/rails_root/Rakefile

@@ -0,0 +1,10 @@
+# Add your own tasks in files placed in lib/tasks ending in .rake,
+# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
+
+require(File.join(File.dirname(__FILE__), 'config', 'boot'))
+
+require 'rake'
+require 'rake/testtask'
+require 'rake/rdoctask'
+
+require 'tasks/rails'

data/test/rails_root/app/controllers/application.rb

@@ -0,0 +1,5 @@
+class ApplicationController < ActionController::Base
+  helper :all
+  protect_from_forgery
+  include Clearance::App::Controllers::ApplicationController
+end

data/test/rails_root/app/controllers/confirmations_controller.rb

@@ -0,0 +1,3 @@
+class ConfirmationsController < ApplicationController
+  include Clearance::App::Controllers::ConfirmationsController
+end

data/test/rails_root/app/controllers/passwords_controller.rb

@@ -0,0 +1,3 @@
+class PasswordsController < ApplicationController
+  include Clearance::App::Controllers::PasswordsController
+end

data/test/rails_root/app/controllers/sessions_controller.rb

@@ -0,0 +1,8 @@
+class SessionsController < ApplicationController
+  include Clearance::App::Controllers::SessionsController  
+  include Clearance::App::Controllers::FacebookSessionsController
+  
+  facebook_to_user_field_mappings \
+    :first_name => :first_name,
+    :last_name => :last_name
+end

data/test/rails_root/app/controllers/users_controller.rb

@@ -0,0 +1,3 @@
+class UsersController < ApplicationController
+  include Clearance::App::Controllers::UsersController
+end

data/test/rails_root/app/helpers/application_helper.rb

@@ -0,0 +1,5 @@
+module ApplicationHelper
+  def body_class
+    "#{controller.controller_name} #{controller.controller_name}-#{controller.action_name}"
+  end
+end

data/test/rails_root/app/helpers/confirmations_helper.rb

@@ -0,0 +1,2 @@
+module ConfirmationsHelper
+end

data/test/rails_root/app/helpers/passwords_helper.rb

@@ -0,0 +1,2 @@
+module PasswordsHelper
+end

data/test/rails_root/app/models/clearance_mailer.rb

@@ -0,0 +1,4 @@
+class ClearanceMailer < ActionMailer::Base
+  include Clearance::App::Models::ClearanceMailer
+  include Clearance::App::Models::ClearanceFacebookMailer
+end

data/test/rails_root/app/models/user.rb

@@ -0,0 +1,3 @@
+class User < ActiveRecord::Base
+  include Clearance::App::Models::User
+end

data/test/rails_root/app/views/clearance_mailer/confirmation.html.erb

@@ -0,0 +1 @@
+<%= confirmations_url :confirmation_code => @user.confirmation_code %>

data/test/rails_root/app/views/clearance_mailer/facebook_welcome.text.html.haml

@@ -0,0 +1,4 @@
+:plain
+  Welcome to #{PROJECT_NAME.humanize}!  Sign in at:
+  
+  #{root_url}

data/test/rails_root/app/views/clearance_mailer/forgot_password.html.erb

@@ -0,0 +1,6 @@
+Someone, hopefully you, has requested that we send you a link to reset your password.
+
+Here's the link:
+<%= edit_password_url(:id => @user.reset_password_code) %>
+
+If you didn't request this, no need to freak out, your password hasn't been changed.  You can just ignore this email.

data/test/rails_root/app/views/layouts/_flashes.erb

@@ -0,0 +1,5 @@
+<div id="flash">
+  <% flash.each do |key, value| -%>
+    <div id="flash_<%= key %>"><%=h value %></div>
+  <% end %>
+</div>

data/test/rails_root/app/views/layouts/application.html.erb

@@ -0,0 +1,14 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" 
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+  <head>
+    <meta http-equiv="Content-type" content="text/html; charset=utf-8" />
+    <title><%= PROJECT_NAME.humanize %></title>
+    <%= stylesheet_link_tag 'screen', :media => 'all' %>
+    <%= javascript_include_tag :defaults %>
+  </head>
+  <body class="<%= body_class %>">
+    <%= render :partial => 'layouts/flashes' %>
+    <%= yield %>
+  </body>
+</html>

data/test/rails_root/app/views/passwords/edit.html.erb

@@ -0,0 +1,18 @@
+<p>
+  You are resetting your password. Choose a new password below.
+</p>
+
+<%= error_messages_for :user %>
+<% form_tag(password_path(:id => @user.reset_password_code), :method => :put) do %>
+  <div class="password_field">
+    <%= label_tag :password, 'Choose password' %>
+    <%= password_field_tag :password %>
+  </div>
+  <div class="password_field">
+    <%= label_tag :password_confirmation, 'Verify password' %>
+    <%= password_field_tag :password_confirmation %>
+  </div>
+  <div class="submit_field">
+    <%= submit_tag 'Save this password' %>
+  </div>
+<% end %>

data/test/rails_root/app/views/passwords/new.html.erb

@@ -0,0 +1,15 @@
+<h2>Forgot your password</h2>
+
+<p>
+  We will email you a link to reset your password.
+</p>
+
+<% form_tag(passwords_path) do %>
+  <div class="text_field">
+    <%= label_tag :email, 'Email address' %>
+    <%= text_field_tag :email %>
+  </div>
+  <div class="submit_field">
+    <%= submit_tag 'Reset password' %>
+  </div>
+<% end %>