hippo-fw 0.9.1

data/lib/hippo/user.rb

@@ -0,0 +1,152 @@
+require 'jwt'
+
+module Hippo
+
+    class User < Hippo::Model
+
+        has_secure_password
+        validates :login, :name, :email, presence: true, uniqueness: { case_sensitive: false }
+        validates :email, email: true, uniqueness: { case_sensitive: false }
+        validates :password, length: { minimum: 6 }, allow_nil: true
+
+        whitelist_attributes :password
+
+        def roles
+            @cached_roles ||= Access::RoleCollection.new(self)
+        end
+
+        def workspace_data
+            my_data = attributes.slice('id','login','name','email','created_at',
+                                       'created_by','updated_at','updated_by','role_names', 'options')
+            screens = Hippo::Screen.select{|s| s.viewable_by?(self) }.map{|s| s.identifier }
+            { user: my_data, access: Access.for_user(self), screens: screens }
+        end
+
+        # @param model [Hippo::Model]
+        # @param attribute [Symbol]
+        # @return [Boolean] Can the User view the model?
+        def can_read?(model, attribute = nil)
+            roles.can_read?(model, attribute)
+        end
+
+        # @param model [Hippo::Model]
+        # @param attribute [Symbol]
+        # @return [Boolean] Can the User create and update the model?
+        def can_write?(model, attribute = nil)
+            roles.can_write?(model, attribute)
+        end
+
+        # @param model [Hippo::Model]
+        # @param id [Numberic] the id for the model
+        # @return [Boolean] Can the User delete the model?
+        def can_delete?(model, id)
+            roles.can_delete?(model, id)
+        end
+
+        # We override the default implementation so that we can guarantee
+        # that the current user can always update their own information
+        USER_EDITABLE_ATTRIBUTES=[:name, :email, :password]
+        def setting_attribute_is_allowed?(name, user)
+            ( !new_record? && user.id == self.id && USER_EDITABLE_ATTRIBUTES.include?(name) ) ? true : super
+        end
+        def can_write_attributes?( attr, user )
+            ( !new_record? && user.id == self.id ) ? true : super
+        end
+        def self.can_write_attributes?( attr, user )
+            ( attr[:id] && attr[:id].to_i == user.id ) ? true : super
+        end
+
+        # @return [Boolan] does the user have the "administrator" role?
+        def admin?
+            roles.include? 'administrator'
+        end
+
+        def jwt_token
+            JWT.encode({'uid' => id}, Hippo.config.session_secret_key_base, 'HS256')
+        end
+
+        def self.for_jwt_token(token)
+            payload = JWT.decode(
+                token, Hippo.config.session_secret_key_base, true, { :algorithm => 'HS256' }
+            )
+            if payload.length && (uid = payload.first['uid'])
+                return where(id: uid).first
+            end
+        end
+
+        # If all that's needed is the user's id, see `current_id`,
+        # that method does not not attempt to instantiate a User
+        # Defaults to nil
+        # @return [User] The user who's currently interacting with Hippo.
+        def self.current
+            uid = Thread.current[:hippo_current_user]
+            if uid.is_a?(User)
+                uid
+            else
+                user = Thread.current[:hippo_current_user] = User.find_by_id(uid)
+                return user ? user.id : nil
+            end
+        end
+
+        # Retrieve the current id of the user we're proxying for.
+        # get's a bit complicated since we can proxy both for a user object
+        # or just the user's id
+        # @return [Fixnum] current user's ID.  If the current user is not set, returns 0
+        def self.current_id
+            uid = Thread.current[:hippo_current_user]
+            if uid.nil?
+                0
+            elsif uid.is_a?(User)
+                uid.id
+            else
+                uid
+            end
+        end
+
+        # sets the user for the duration of the block
+        # @example Inside a Rails controller
+        #
+        #     class DocumentsController < ApplicationController
+        #         around_filter :set_hippo_user
+        #
+        #         # update's the Document's owner to current
+        #         # But sets all the notes to be owned by admin
+        #         def update_owner
+        #             doc = Document.find(params[:id])
+        #             doc.current_owner = Hippo::User.current
+        #             Hippo::User.scoped_to( admin_user ) do
+        #                 doc.notes.each{ |note| note.set_owner_to_current! } # will set to Hippoe::User.current
+        #             end
+        #         end
+        #
+        #         private
+        #
+        #         def set_hippo_user
+        #             Hippo::User.scoped_to( session[:user_id] ) do
+        #                  yield
+        #             end
+        #          end
+        #      end
+        #
+        # @return [UserProxy] self
+        def self.scoped_to( user )
+            prev_user, Thread.current[:hippo_current_user] = self.current, user
+            yield user
+        ensure
+            Thread.current[:hippo_current_user] = prev_user
+        end
+
+        def self.seed_admin_account
+            where(login: 'admin').first || create!(name: "Admin", email: "admin@test.com",
+                                                   password: 'password',
+                                                   login: 'admin', role_names: ['administrator'])
+        end
+    end
+
+    require_relative "access/track_modifications"
+
+    # We can only use the TrackModifications concern after the User model is defined
+    Model.send(:include, Concerns::TrackModifications )
+
+    User.tracks_user_modifications
+end

data/lib/hippo/validators/all.rb

@@ -0,0 +1,2 @@
+require_relative "set"
+require_relative "email"

data/lib/hippo/validators/email.rb

@@ -0,0 +1,17 @@
+# A custom validator "email".
+# Doesn't really validate an email completely
+# It simply asserts that the email string has one (and only one)
+# @ (at symbol). This is mainly
+# to give user feedback and not to assert the e-mail validity.
+
+class EmailValidator < ActiveModel::EachValidator
+
+    # Regex originated from the Devise gem
+    REGEX = /\A[^@]+@([^@\.]+\.)+[^@\.]+\z/
+
+    def validate_each( rec, attr, value)
+        unless value.present? && value.match( REGEX )
+            rec.errors.add attr, options[:message] || 'does not appear to be a valid email'
+        end
+    end
+end

data/lib/hippo/validators/set.rb

@@ -0,0 +1,18 @@
+# A custom validator "set".  It's similar to :presence validator
+# Unlike :presence, :set doesn't care whether the associated record is valid or not, just that it is present
+# Also unlike :presence, it only works on belongs_to
+class SetValidator < ActiveModel::EachValidator
+
+    def validate_each( record, attribute, value)
+        association = record.class.reflect_on_association( attribute )
+
+        if association.nil? || !association.belongs_to?
+            raise ArgumentError, "Cannot validate existence on #{record.class} #{attribute}, not a :belongs_to association"
+        end
+
+        if record.send( attribute ).nil?
+            record.errors.add( attribute, "is not set")
+        end
+
+    end
+end

data/lib/hippo/version.rb

@@ -0,0 +1,5 @@
+module Hippo
+
+    VERSION = "0.9.1"
+
+end

data/lib/hippo/workspace.rb

@@ -0,0 +1,4 @@
+module Hippo
+    module Workspace
+    end
+end

data/lib/hippo/workspace/config/screens.rb

@@ -0,0 +1,6 @@
+Hippo::Screen.for_extension 'workspace' do | screens |
+
+    screens.define "workspace-layout" do | screen |
+        screen.asset = 'hippo/workspace'
+    end
+end

data/package.json

@@ -0,0 +1,82 @@
+{
+  "name": "hippo-fw",
+  "version": "0.7.0",
+  "description": "Hippo is a framework for easily writing single page web applications",
+  "main": "index.js",
+  "repository": "https://github.com/argosity/hippo",
+  "author": "Nathan Stitt <nathan@stitt.org>",
+  "license": "MIT",
+  "files": [
+    "client"
+  ],
+  "dependencies": {
+    "babel-core": "^6.21.0",
+    "babel-eslint": "latest",
+    "babel-jest": "^18.0.0",
+    "babel-loader": "^6.2.10",
+    "babel-plugin-lodash": "^3.2.11",
+    "babel-plugin-transform-decorators-legacy": "^1.3.4",
+    "babel-plugin-transform-es2015-modules-commonjs": "^6.23.0",
+    "babel-plugin-transform-flow-strip-types": "^6.22.0",
+    "babel-plugin-transform-function-bind": "^6.22.0",
+    "babel-plugin-transform-runtime": "^6.15.0",
+    "babel-preset-es2015-loose": "^8.0.0",
+    "babel-preset-latest": "^6.16.0",
+    "babel-preset-react": "^6.16.0",
+    "babel-preset-stage-0": "^6.22.0",
+    "babel-preset-stage-1": "^6.16.0",
+    "big.js": "^3.1.3",
+    "classnames": "^2.2.5",
+    "core-decorators": "^0.17.0",
+    "css-loader": "^0.26.1",
+    "date-fns": "^1.28.2",
+    "domtastic": "^0.12.3",
+    "enzyme": "^2.8.2",
+    "eslint": "^3.13.1",
+    "eslint-config-argosity": "1.0.5",
+    "file-loader": "^0.11.1",
+    "flexboxgrid": "^6.3.1",
+    "grommet": "^1.4.0",
+    "history": "3.2.1",
+    "html-webpack-plugin": "^2.28.0",
+    "identity-obj-proxy": "^3.0.0",
+    "invariant": "^2.2.2",
+    "jest": "^19.0.2",
+    "jest-enzyme": "^3.1.0",
+    "jest-fetch-mock": "^1.0.7",
+    "js-yaml": "^3.8.2",
+    "jsdom": "^10.1.0",
+    "lodash": "^4.17.4",
+    "loglevel": "^1.4.1",
+    "mobx": "^3.0.0",
+    "mobx-decorated-models": "^0.5.1",
+    "mobx-react": "^4.1.0",
+    "node-sass": "^4.5.0",
+    "pluralize": "^3.1.0",
+    "prop-types": "^15.5.8",
+    "qs": "^6.3.0",
+    "react": "^15.4.2",
+    "react-addons-shallow-compare": "^15.4.2",
+    "react-addons-test-utils": "^15.4.2",
+    "react-async-component": "^0.2.2",
+    "react-dom": "^15.4.2",
+    "react-dropzone": "^3.10.0",
+    "react-flexbox-grid": "https://github.com/nathanstitt/react-flexbox-grid.git#devel",
+    "react-hot-loader": "3.0.0-beta.6",
+    "react-motion": "^0.4.7",
+    "react-router": "^3.0.2",
+    "react-sidebar": "^2.3.0",
+    "react-test-renderer": "^15.4.2",
+    "react-virtualized": "^9.0.0",
+    "rsvp": "^3.3.3",
+    "sass-loader": "^4.1.1",
+    "sprintf-js": "^1.0.3",
+    "style-loader": "^0.13.1",
+    "url-loader": "^0.5.8",
+    "validator": "^6.2.1",
+    "webpack": "v2.2.0-rc.4",
+    "webpack-dev-server": "v2.2.0-rc.0",
+    "whatwg-fetch": "^2.0.2",
+    "when-dom-ready": "^1.2.4"
+  }
+}

data/spec/client/.eslintrc.js

@@ -0,0 +1,20 @@
+module.exports = {
+    "globals": {
+        "beforeEach": false,
+        "afterEach": false,
+        "describe": false,
+        "xdescribe": false,
+        "fdescribe": false,
+        "it": false,
+        "xit": false,
+        "fit": false,
+        "expect": false,
+        "shallow": false,
+        "mount": false,
+        "console": false,
+        "jest": false
+    },
+    "rules": {
+        "no-console": 0
+    }
+};

data/spec/client/access/login-dialog.spec.jsx

@@ -0,0 +1,28 @@
+jest.mock('hippo/models/sync');
+jest.mock('hippo/config');
+
+import React  from 'react';
+
+import User        from 'hippo/user';
+import Config      from 'hippo/config';
+import LoginDialog from 'hippo/access/login-dialog';
+
+describe('Login Dialog', () => {
+    beforeEach(() => (Config.access_token = '0123456789'));
+    afterEach(() => (Config.access_token = ''));
+
+    it('does not render when user isnt logged in', () => {
+        expect(User.isLoggedIn).toBe(true);
+        const dialog = shallow(<LoginDialog />);
+        expect(dialog).not.toHaveRendered('LoginForm');
+    });
+
+    it('is hidden when user logins successfully', () => {
+        const dialog = shallow(<LoginDialog />);
+        expect(User.isLoggedIn).toEqual(true);
+        expect(dialog).not.toHaveRendered('LoginForm');
+        return User.logout().then(() => {
+            expect(dialog).not.toHaveRendered('LoginForm');
+        });
+    });
+});

data/spec/client/components/__snapshots__/asset.spec.jsx.snap

@@ -0,0 +1,48 @@
+// Jest Snapshot v1, https://goo.gl/fbAQLP
+
+exports[`Asset Component renders and matches snapshot 1`] = `
+<div
+  className="asset form-field"
+>
+  <div
+    className="grommetux-form-field grommetux-form-field--size-medium"
+    onClick={[Function]}
+  >
+    <label
+      className="grommetux-form-field__label"
+      htmlFor={undefined}
+    >
+      Asset
+    </label>
+    <span
+      className="grommetux-form-field__contents"
+    >
+      <div
+        className="drop-zone"
+        onClick={[Function]}
+        onDragEnter={[Function]}
+        onDragLeave={[Function]}
+        onDragOver={[Function]}
+        onDragStart={[Function]}
+        onDrop={[Function]}
+        style={Object {}}
+      >
+        <div>
+          Drop a file here, or click to select one to upload.
+        </div>
+        <input
+          accept={undefined}
+          multiple={false}
+          onChange={[Function]}
+          style={
+            Object {
+              "display": "none",
+            }
+          }
+          type="file"
+        />
+      </div>
+    </span>
+  </div>
+</div>
+`;

data/spec/client/components/__snapshots__/network-activity-overlay.spec.jsx.snap

@@ -0,0 +1,35 @@
+// Jest Snapshot v1, https://goo.gl/fbAQLP
+
+exports[`Network Activity Overlay matches snapshot 1`] = `
+<div
+  className="network-activity-overlay"
+>
+  <div
+    className="mask"
+  >
+    <div
+      className="message"
+    >
+      <svg
+        aria-label="Spinning"
+        className="grommetux-icon-spinning grommetux-icon-spinning--medium grommetux-icon-spinning--responsive"
+        role="img"
+        version="1.1"
+        viewBox="0 0 48 48"
+      >
+        <circle
+          cx="24"
+          cy="24"
+          fill="none"
+          r="21"
+          stroke="#979797"
+          strokeWidth="6"
+        />
+      </svg>
+      <span>
+        Deleting…
+      </span>
+    </div>
+  </div>
+</div>
+`;

data/spec/client/components/__snapshots__/query-builder.spec.jsx.snap

@@ -0,0 +1,82 @@
+// Jest Snapshot v1, https://goo.gl/fbAQLP
+
+exports[`Query Builder Component renders and matches snapshot 1`] = `
+<div
+  className="query-builder"
+>
+  <div
+    className="grommetux-box grommetux-box--direction-row grommetux-box--responsive grommetux-box--pad-between-small"
+    id={undefined}
+    onClick={undefined}
+    role={undefined}
+    style={Object {}}
+    tabIndex={undefined}
+  >
+    <div
+      className="grommetux-box grommetux-box--direction-column grommetux-box--responsive grommetux-box--pad-none grommetux-menu grommetux-menu--column grommetux-menu--large grommetux-menu--controlled grommetux-menu__control"
+      id={undefined}
+      onClick={undefined}
+      role={undefined}
+      style={Object {}}
+      tabIndex={undefined}
+    >
+      <button
+        aria-label="Open  Menu"
+        className="grommetux-button grommetux-button--plain"
+        disabled={false}
+        href={undefined}
+        onBlur={[Function]}
+        onClick={[Function]}
+        onFocus={[Function]}
+        onMouseDown={[Function]}
+        onMouseUp={[Function]}
+        type="button"
+      >
+        <span
+          className="grommetux-button__icon"
+        >
+          <span>
+            <svg
+              aria-label="down"
+              className="grommetux-control-icon grommetux-control-icon-down grommetux-control-icon--responsive"
+              height="24px"
+              role="img"
+              version="1.1"
+              viewBox="0 0 24 24"
+              width="24px"
+            >
+              <polyline
+                fill="none"
+                points="7.086 3.174 17.086 13.174 7.086 23.174"
+                stroke="#000"
+                strokeWidth="2"
+                transform="scale(1 -1) rotate(-89 -1.32 0)"
+              />
+            </svg>
+             
+            IsAdmin?
+             
+            Starts With
+          </span>
+        </span>
+      </button>
+    </div>
+    <input
+      autoComplete="off"
+      autoFocus={true}
+      className="grommetux-text-input grommetux-input"
+      defaultValue={undefined}
+      onChange={[Function]}
+      onFocus={[Function]}
+      onKeyDown={[Function]}
+      placeholder={undefined}
+      style={
+        Object {
+          "flex": 1,
+        }
+      }
+      value=""
+    />
+  </div>
+</div>
+`;