heroku_config_vars 0.0.2.pre

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2013 YOURNAME
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1 @@
+TODO

data/Rakefile

@@ -0,0 +1,30 @@
+#!/usr/bin/env rake
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+begin
+  require 'rdoc/task'
+rescue LoadError
+  require 'rdoc/rdoc'
+  require 'rake/rdoctask'
+  RDoc::Task = Rake::RDocTask
+end
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'HerokuConfigVars'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+APP_RAKEFILE = File.expand_path("../spec/dummy/Rakefile", __FILE__)
+load 'rails/tasks/engine.rake'
+
+
+
+Bundler::GemHelper.install_tasks
+
+load "rspec/rails/tasks/rspec.rake"

data/app/assets/javascripts/heroku_config_vars/application.js

@@ -0,0 +1,15 @@
+// This is a manifest file that'll be compiled into application.js, which will include all the files
+// listed below.
+//
+// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
+// or vendor/assets/javascripts of plugins, if any, can be referenced here using a relative path.
+//
+// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
+// the compiled file.
+//
+// WARNING: THE FIRST BLANK LINE MARKS THE END OF WHAT'S TO BE PROCESSED, ANY BLANK LINE SHOULD
+// GO AFTER THE REQUIRES BELOW.
+//
+//= require jquery
+//= require jquery_ujs
+//= require_tree .

data/app/assets/javascripts/heroku_config_vars/var_form.js

@@ -0,0 +1,28 @@
+
+$(function(){
+
+  // Make deleting nice
+  $('td.delete').each(function(){
+    var $td = $(this);
+    var $tr = $td.parents('tr');
+    var $box = $td.find('[type="checkbox"]');
+    //$box.hide()
+    $box.change(function(){
+      $box.get(0).checked ? $tr.addClass('deleted') : $tr.removeClass('deleted');
+    });
+  });
+
+  // Dynamically add new text fields as they're used
+  $('tr.new input.new_key').blur(function(){
+    var $input  = $(this)
+    var input   = this;
+    var $tr     = $input.parents('tr');
+
+    if ( $input.val() == '' || $tr.next().length > 0 ) return;
+
+    $tr.clone(true).insertAfter($tr).find('input').each(function(){
+      $(this).val('');
+    });
+  });
+
+});

data/app/assets/stylesheets/heroku_config_vars/application.css

@@ -0,0 +1,31 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or vendor/assets/stylesheets of plugins, if any, can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the top of the
+ * compiled file, but it's generally better to create a new file per style scope.
+ *
+ *= require_self
+ *= require_tree .
+ */
+
+body {
+  font-family: helvetica;
+  font-size: smaller;
+}
+
+a {
+  color: #66f;
+  text-decoration: none;
+}
+
+a:hover {
+    color: #fff;
+    background-color: #66f; }
+
+label {
+  cursor: pointer;
+}

data/app/assets/stylesheets/heroku_config_vars/button.css.scss

@@ -0,0 +1,54 @@
+.button {
+  color: #fff;
+  border: 1px solid;
+  border-radius: 3px;
+  text-align: center;
+  padding: 5px 16px;
+  font-size: 13px;
+  font-weight: 600;
+  cursor: pointer;
+  overflow: visible;
+  text-decoration: none;
+
+  &.happy {
+    $hue-adjustment: 260;
+    border-top-color:     adjust-hue(#2270ab, $hue-adjustment);
+    border-right-color:   adjust-hue(#18639a, $hue-adjustment);
+    border-bottom-color:  adjust-hue(#0f568b, $hue-adjustment);
+    border-left-color:    adjust-hue(#18639a, $hue-adjustment);
+    background: adjust-hue(#2180ce, $hue-adjustment);
+    background: -webkit-gradient(linear, left top, left bottom, from(adjust-hue(#33a0e8, $hue-adjustment)), to(adjust-hue(#2180ce, $hue-adjustment)));
+    text-shadow: adjust-hue(#355782, $hue-adjustment) 0 1px 2px;
+    box-shadow: 0 1px 1px rgba(0,0,0,0.3),inset 0px 1px 0px adjust-hue(#83c5f1, $hue-adjustment);
+
+    &:hover {
+      border-top-color:     adjust-hue(#0070cc, $hue-adjustment);
+      border-right-color:   adjust-hue(#006ac1, $hue-adjustment);
+      border-bottom-color:  adjust-hue(#005ca6, $hue-adjustment);
+      border-left-color:    adjust-hue(#006ac1, $hue-adjustment);
+      box-shadow: 0 1px 1px rgba(0,0,0,0.3),inset 0 0 3px adjust-hue(#35bff4, $hue-adjustment);
+      background: -webkit-gradient(linear, left top, left bottom, from(adjust-hue(#43b0f8, $hue-adjustment)), to(adjust-hue(#3190de, $hue-adjustment)));
+    }
+  }
+
+  &.sad {
+    $hue-adjustment: 150;
+    border-top-color:     adjust-hue(#2270ab, $hue-adjustment);
+    border-right-color:   adjust-hue(#18639a, $hue-adjustment);
+    border-bottom-color:  adjust-hue(#0f568b, $hue-adjustment);
+    border-left-color:    adjust-hue(#18639a, $hue-adjustment);
+    background: adjust-hue(#2180ce, $hue-adjustment);
+    background: -webkit-gradient(linear, left top, left bottom, from(adjust-hue(#33a0e8, $hue-adjustment)), to(adjust-hue(#2180ce, $hue-adjustment)));
+    text-shadow: adjust-hue(#355782, $hue-adjustment) 0 1px 2px;
+    box-shadow: 0 1px 1px rgba(0,0,0,0.3),inset 0px 1px 0px adjust-hue(#83c5f1, $hue-adjustment);
+
+    &:hover {
+      border-top-color:     adjust-hue(#0070cc, $hue-adjustment);
+      border-right-color:   adjust-hue(#006ac1, $hue-adjustment);
+      border-bottom-color:  adjust-hue(#005ca6, $hue-adjustment);
+      border-left-color:    adjust-hue(#006ac1, $hue-adjustment);
+      box-shadow: 0 1px 1px rgba(0,0,0,0.3),inset 0 0 3px adjust-hue(#35bff4, $hue-adjustment);
+      background: -webkit-gradient(linear, left top, left bottom, from(adjust-hue(#43b0f8, $hue-adjustment)), to(adjust-hue(#3190de, $hue-adjustment)));
+    }
+  }
+}

data/app/assets/stylesheets/heroku_config_vars/menu.css.scss

@@ -0,0 +1,36 @@
+ul.submenu {
+  height: 32px;
+  list-style: none;
+  margin: 0 -20px;
+  padding: 0 20px;
+  background: #eee;
+  border-bottom: 1px #ccc solid;
+  clear: both;
+
+  li.admin {
+    float: right;
+  }
+  .menu-option {
+    font-size: 16px;
+    float: left;
+    padding: 0.25em 1em;
+    margin: 5px 10px -1px 0;
+    border: 1px solid #ccc;
+    height: 18px;
+    border-bottom-color: #fff;
+    background: #fff;
+  }
+
+  a {
+    padding: 0;
+  }
+
+  a .menu-option {
+    border-bottom: none;
+  }
+
+  a:hover .menu-option {
+    background: #aaa;
+  }
+
+}

data/app/assets/stylesheets/heroku_config_vars/table.css.scss

@@ -0,0 +1,28 @@
+table {
+  border-collapse: collapse;
+
+  th {
+    text-align: left;
+  }
+
+  td, th {
+    border: 1px #ccc;
+    border-style: solid none;
+    padding: 0.5em;
+  }
+
+  input {
+    padding: 0.25em;
+  }
+
+  input.new_value,
+  input.var_value {
+    width: 50em;
+  }
+
+  tr.deleted, tr.deleted input {
+    text-decoration: line-through;
+    color: #bbb;
+  }
+}
+

data/app/controllers/heroku_config_vars/application_controller.rb

@@ -0,0 +1,46 @@
+class HerokuConfigVars::ApplicationController < ApplicationController
+
+  before_filter :require_authenticated
+  before_filter :recommend_https, :if => :insecure?
+
+  AUTH_METHOD = :heroku_config_authorized?
+
+  def env
+    @env = ENV
+  end
+
+  private
+
+    def require_authenticated
+      # This is where we shell out to ApplicationController
+      # raising RoutingError will render 404 in production
+      if not respond_to? AUTH_METHOD
+        raise ActionController::RoutingError.new <<-ERROR.strip_heredoc
+          `#{AUTH_METHOD}` must be implemented in ApplicationController and return true for authorized users.
+
+          e.g.
+          class ApplicationController < ActionController::Base
+            ...
+            
+            def #{AUTH_METHOD}
+              current_user.admin?
+            end
+            
+            ...
+          end
+        ERROR
+      elsif not heroku_config_authorized?
+        raise ActionController::RoutingError.new ':heroku_config_authorized? returned false'
+      end
+    end
+
+
+    def recommend_https
+      render :recommend_https
+    end
+
+    def insecure?
+      not request.ssl? and (session[:insecure] ||= params[:insecure]) != 'ok'
+    end
+
+end

data/app/controllers/heroku_config_vars/heroku_apps_controller.rb

@@ -0,0 +1,50 @@
+module HerokuConfigVars
+  class HerokuAppsController < ApplicationController
+
+    before_filter :require_heroku_app, :only => [:show, :edit, :update]
+
+    def new
+      @heroku_app = HerokuApp.find
+    end
+
+    def create
+      @heroku_app = HerokuApp.new params[:heroku_app]
+      if @heroku_app.save
+        redirect_to heroku_app_path
+      else
+        render :new
+      end
+    end
+
+    def update
+      vars = params[:heroku_app][:vars]
+      vars.merge! hashify_new_vars
+      vars.except! *params[:remove].keys if params[:remove]
+      heroku_app.vars = vars
+      return render :confirmation unless params[:confirmation]
+      if heroku_app.save
+        redirect_to edit_heroku_app_path, notice: 'Configuration updated'
+      else
+        heroku_app.load_vars
+        render :edit
+      end
+    end
+
+    private
+
+      def require_heroku_app
+        redirect_to new_heroku_app_path unless heroku_app && heroku_app.loaded?
+      end
+
+      def heroku_app
+        @heroku_app ||= HerokuApp.find
+      end
+
+      def hashify_new_vars
+        {}.tap do |vars|
+          params[:add].each {|h| vars.store h['key'], h['value'] if h['key'].present? } if params[:add]
+        end
+      end
+
+  end
+end

data/app/helpers/heroku_config_vars/application_helper.rb

@@ -0,0 +1,8 @@
+module HerokuConfigVars
+  module ApplicationHelper
+    def menu_link(text, url, html_options={})
+      text = content_tag :span, text, :class => 'menu-option'
+      link_to_unless_current text, url, html_options
+    end
+  end
+end

data/app/models/heroku_config_vars/heroku_app.rb

@@ -0,0 +1,138 @@
+module HerokuConfigVars
+  class HerokuApp
+    extend ActiveModel::Naming
+    include ActiveModel::Conversion
+    include ActiveModel::Validations
+
+    attr_accessor :vars
+
+    attr_reader :loaded
+    attr_reader :current_vars
+
+    alias_method :loaded?,    :loaded
+    alias_method :persisted?, :loaded
+
+    validates_presence_of :app_name
+    validates_presence_of :api_key
+
+    def self.find
+      attrs = {
+        app_name: ENV['HEROKU_APP_NAME'],
+        api_key:  ENV['HEROKU_API_KEY']
+      }
+
+      new(attrs) do |app|
+        app.load_vars if app.valid?
+      end
+    end
+
+    def initialize(attrs={})
+      @vars = {}
+      @current_vars = {}
+      @loaded = false
+
+      self.attributes = attrs
+
+      yield self if block_given?
+    end
+
+    def attributes=(attrs={})
+      attrs.each do |key, value|
+        self.send "#{key}=", value
+      end
+    end
+
+    def app_name
+      @app_name ||= @vars['HEROKU_APP_NAME'].presence
+    end
+
+    def app_name=(value)
+      @app_name = @vars['HEROKU_APP_NAME'] = value
+    end
+
+    def api_key
+      @api_key ||= @vars['HEROKU_API_KEY'].presence
+    end
+
+    def api_key=(value)
+      @api_key = @vars['HEROKU_API_KEY'] = value
+    end
+
+    def id
+      app_name
+    end
+
+    def load_vars
+      catch_heroku_errors do
+        Rails.logger.debug 'Loading config'
+        @vars = connection.get_config_vars(app_name).body
+        @current_vars = @vars.dup.freeze
+        @loaded = true
+      end
+    end
+
+    def save
+      save_to_heroku and save_to_env if valid?
+    end
+
+    def removed_vars
+      current_vars ? current_vars.except(*vars.keys) : {}
+    end
+
+    def added_vars
+      vars.except *current_vars.keys
+    end
+
+    def kept_vars
+      current_vars.slice *vars.keys
+    end
+
+    def updated_vars
+      changes.slice(*kept_vars.keys)
+    end
+
+    def updated_and_added_vars
+      changes.slice(*vars.keys)
+    end
+
+    def changes
+      @changes ||= vars.diff current_vars
+    end
+
+    private
+
+      def connection
+        Heroku::API.new api_key: api_key
+      end
+
+      def catch_heroku_errors
+        Rails.logger.debug "Connecting to Heroku"
+        begin
+          yield
+        rescue Heroku::API::Errors::Unauthorized => e
+          errors.add :api_key, "is invalid (#{e.class.name})"
+        rescue Heroku::API::Errors::Forbidden, Heroku::API::Errors::NotFound => e
+          errors.add :app_name, "is invalid (#{e.class.name})"
+        rescue Heroku::API::Errors::RequestFailed => e
+          errors.add :base, "Request failed: " << e.response.body
+        end
+        errors.blank?
+      end
+
+      def save_to_heroku
+        Rails.logger.debug 'Updating config'
+        catch_heroku_errors { connection.put_config_vars(app_name, updated_and_added_vars) }
+        removed_vars.each do |key, _|
+          Rails.logger.debug "deleting #{key}"
+          catch_heroku_errors { connection.delete_config_var(app_name, key) }
+        end
+        errors.blank?
+      end
+
+      def save_to_env
+        ENV.update vars
+        removed_vars.each { |key, _| ENV.delete key }
+      end
+
+  end
+end

data/app/views/heroku_config_vars/application/env.html.erb

@@ -0,0 +1,14 @@
+<h2>ENV</h2>
+
+<table>
+  <%- @env.sort.each do |key, value| -%>
+    <tr>
+      <th>
+        <%= key %>
+      </th>
+      <td>
+        <%= value %>
+      </td>
+    </tr>
+  <%- end -%>
+</table>

data/app/views/heroku_config_vars/application/recommend_https.html.erb

@@ -0,0 +1,6 @@
+<h2>WARNING</h2>
+
+<p>You are trying to view sensitive application configuration over an <strong>insecure connection</strong>.</p>
+<p>It is highly recommended that you view this over https.</p>
+<%= link_to 'Switch to secure connection', {only_path: false, protocol: 'https'}, class: 'happy button' %>
+<%= link_to 'Continue insecurely', {insecure: :ok}, class: 'sad button' %>

data/app/views/heroku_config_vars/heroku_apps/_errors.html.erb

@@ -0,0 +1,5 @@
+<ul>
+  <%- heroku_app.errors.full_messages.each do |msg| -%>
+    <li><%= msg %></li>
+  <%- end -%>
+</ul>

data/app/views/heroku_config_vars/heroku_apps/confirmation.html.erb

@@ -0,0 +1,73 @@
+<h2>Please confirm...</h2>
+
+<%- if @heroku_app.changes.any? %>
+  <%- if @heroku_app.added_vars.any? -%>
+    <h3>These configuration variables will be added:</h3>
+    <table>
+      <%- @heroku_app.added_vars.each do |key, value| -%>
+        <tr>
+          <th>
+            <%= key %>
+          </th>
+          <td>
+            <%= value %>
+          </td>
+        </tr>
+      <%- end -%>
+    </table>
+  <%- end -%>
+
+  <%- if @heroku_app.updated_vars.any? -%>
+    <h3>These configuration variables will be updated:</h3>
+    <table>
+      <%- @heroku_app.updated_vars.each do |key, value| -%>
+        <tr>
+          <th>
+            <%= key %>
+          </th>
+          <td>
+            <%= @heroku_app.current_vars[key] %>
+          </td>
+          <td>
+            &rarr;
+          </td>
+          <td>
+            <%= value %>
+          </td>
+        </tr>
+      <%- end -%>
+    </table>
+  <%- end -%>
+
+  <%- if @heroku_app.removed_vars.any? -%>
+    <h3>These configuration variables will be removed:</h3>
+    <table>
+      <%- @heroku_app.removed_vars.each do |key, value| -%>
+        <tr class="deleted">
+          <th>
+            <%= key %>
+          </th>
+          <td>
+            <%= value %>
+          </td>
+        </tr>
+      <%- end -%>
+    </table>
+  <%- end -%>
+
+  <%= form_for @heroku_app, url: {confirmation: true} do |f| %>
+    <%- @heroku_app.vars.each do |key, value| -%>
+      <%= hidden_field_tag "heroku_app[vars][#{key}]", value %>
+    <%- end -%>
+
+    <p>
+      <%= submit_tag "Update and restart app" %>
+    </p>
+  <%- end -%>
+
+<%- else -%>
+  <p>No changes made.</p>
+<%- end -%>
+
+
+<p><%= link_to 'Cancel', edit_heroku_app_path %></p>

data/app/views/heroku_config_vars/heroku_apps/edit.html.erb

@@ -0,0 +1,37 @@
+<h2>
+  <%= link_to @heroku_app.app_name, heroku_app_path %>
+  &rarr;
+  Edit Configuration
+</h2>
+
+<%= render 'errors', heroku_app: @heroku_app if @heroku_app.errors.any? %>
+
+<%= form_for @heroku_app, url: heroku_app_path do |f| %>
+  <table>
+    <%- @heroku_app.vars.sort.each do |key, value| -%>
+      <tr>
+        <th><%= label_tag "heroku_app[vars][#{key}]", key %></th>
+        <td><%= text_field_tag "heroku_app[vars][#{key}]", value, class: 'var_value' %></td>
+        <td class="delete">
+          <%= label_tag "remove[#{key}]" do %>
+            <%= check_box_tag "remove[#{key}]" %>
+            Delete
+          <%- end -%>
+        </td>
+      </tr>
+    <%- end -%>
+    <tr class="new">
+      <th><%= text_field_tag "add[][key]", nil, id: nil, class: 'new_key' %></th>
+      <td><%= text_field_tag "add[][value]", nil, id: nil, class: 'new_value' %></td>
+      <td></td>
+    </tr>
+  </table>
+
+  <p>
+    <%= f.submit "Prepare..." %>
+  </p>
+<%- end -%>
+
+<p>
+  <%= link_to 'Cancel', heroku_app_path %>
+</p>

data/app/views/heroku_config_vars/heroku_apps/new.html.erb

@@ -0,0 +1,21 @@
+<h2>One Time Setup</h2>
+
+<%= render 'errors', heroku_app: @heroku_app if @heroku_app.errors.any? %>
+
+<%= form_for @heroku_app, url: heroku_app_path do |f| %>
+  <h3>Connection Details</h3>
+  <table>
+    <tr>
+      <th><%= f.label :app_name, "App Name" %></th>
+      <td><%= f.text_field :app_name %></td>
+    </tr>
+    <tr>
+      <th><%= f.label :api_key, "API Key" %></th>
+      <td><%= f.text_field :api_key %></td>
+    </tr>
+  </table>
+
+  <p>
+    <%= f.submit "Save" %>
+  </p>
+<%- end -%>

data/app/views/heroku_config_vars/heroku_apps/show.html.erb

@@ -0,0 +1,20 @@
+<h2>
+  <%= @heroku_app.app_name %>
+</h2>
+
+<table>
+  <%- @heroku_app.vars.sort.each do |key, value| -%>
+    <tr>
+      <th>
+        <%= key %>
+      </th>
+      <td>
+        <%= value %>
+      </td>
+    </tr>
+  <%- end -%>
+</table>
+
+<p>
+  <%= link_to 'Edit', edit_heroku_app_path %>
+</p>