hyper-mesh 0.4.0

data/lib/synchromesh/reactive_record/permission_patches.rb

@@ -0,0 +1,43 @@
+# acting user is the acting user... okay
+
+class ActiveRecord::Base
+
+  def view_permitted?(attribute)
+    HyperMesh::InternalPolicy.accessible_attributes_for(self, acting_user).include? attribute.to_sym
+  end
+
+  def create_permitted?
+    false
+  end
+
+  def update_permitted?
+    false
+  end
+
+  def destroy_permitted?
+    false
+  end
+end
+
+module HyperMesh
+  class InternalPolicy
+
+    def self.accessible_attributes_for(model, acting_user)
+      user_channels = ClassConnectionRegulation.connections_for(acting_user, false) +
+        InstanceConnectionRegulation.connections_for(acting_user, false)
+      internal_policy = InternalPolicy.new(model, model.attribute_names, user_channels)
+      ChannelBroadcastRegulation.broadcast(internal_policy)
+      InstanceBroadcastRegulation.broadcast(model, internal_policy)
+      internal_policy.accessible_attributes_for
+    end
+
+    def accessible_attributes_for
+      accessible_attributes = Set.new
+      @channel_sets.each do |channel, attribute_set|
+        accessible_attributes.merge attribute_set
+      end
+      accessible_attributes << :id unless accessible_attributes.empty?
+      accessible_attributes
+    end
+  end
+end

data/lib/synchromesh/synchromesh.rb

@@ -0,0 +1,155 @@
+require 'synchromesh/configuration'
+# Provides the configuration and the two basic routines for the server
+# to indicate that records have changed: after_change and after_destroy
+module HyperMesh
+
+  extend Configuration
+
+  def self.config_reset
+    load File.join(File.dirname(__FILE__), 'reactive_record', 'permission_patches.rb')
+    Object.send(:remove_const, :Application) if @fake_application_defined
+    policy = begin
+      Object.const_get 'ApplicationPolicy'
+    rescue Exception => e
+      raise e unless e.is_a?(NameError) && e.message == "uninitialized constant ApplicationPolicy"
+    end
+    application = begin
+      Object.const_get('Application')
+    rescue Exception => e
+      raise e unless e.is_a?(NameError) && e.message == "uninitialized constant Application"
+    end if policy
+    if policy && !application
+      Object.const_set 'Application', Class.new
+      @fake_application_defined = true
+    end
+    @pusher = nil
+    Connection.build_tables
+  end
+
+  define_setting(:transport, :none) do |transport|
+    if transport == :action_cable
+      require 'synchromesh/action_cable'
+      opts[:refresh_channels_every] = :never
+    else
+      require 'pusher' if transport == :pusher
+      opts[:refresh_channels_every] = nil if opts[:refresh_channels_every] == :never
+    end
+  end
+
+  define_setting :opts, {}
+  define_setting :channel_prefix
+  define_setting :client_logging, true
+
+  def self.app_id
+    opts[:app_id] || Pusher.app_id if transport == :pusher
+  end
+
+  def self.key
+    opts[:key] || Pusher.key if transport == :pusher
+  end
+
+  def self.secret
+    opts[:secret] || Pusher.secret if transport == :pusher
+  end
+
+  def self.encrypted
+    opts.key?(:encrypted) ? opts[:encrypted] : true
+  end
+
+  def self.expire_polled_connection_in
+    opts[:expire_polled_connection_in] || (5 * 60)
+  end
+
+  def self.seconds_between_poll
+    opts[:seconds_between_poll] || 0.5
+  end
+
+  def self.expire_new_connection_in
+    opts[:expire_new_connection_in] || 10.seconds
+  end
+
+  def self.refresh_channels_timeout
+    opts[:refresh_channels_timeout] || 5.seconds
+  end
+
+  def self.refresh_channels_every
+    opts[:refresh_channels_every] || 2.minutes
+  end
+
+  def self.refresh_channels
+    new_channels = pusher.channels[:channels].collect do |channel|
+      channel.gsub(/^#{Regexp.quote(HyperMesh.channel)}/,'')
+    end
+  end
+
+  def self.send(channel, data)
+    if on_console?
+      send_to_server(channel, data)
+    elsif transport == :pusher
+      pusher.trigger("#{HyperMesh.channel}-#{data[1][:channel]}", *data)
+    elsif transport == :action_cable
+      ActionCable.server.broadcast("synchromesh-#{channel}", message: data[0], data: data[1])
+    end
+  end
+
+  def self.on_console?
+    defined?(Rails::Console) #&& transport == :action_cable &&
+      #defined?(ActionCable::Server::Base) &&
+      #ActionCable::Server::Base.config.cable['adapter'] == 'async'
+  end
+
+  def self.send_to_server(channel, data)
+    salt = SecureRandom.hex
+    authorization = HyperMesh.authorization(salt, channel, data[1][:broadcast_id])
+    raise 'no server running' unless Connection.root_path
+    uri = URI("#{Connection.root_path}console_update")
+    http = Net::HTTP.new(uri.host, uri.port)
+    request = Net::HTTP::Post.new(uri.path, 'Content-Type' => 'application/json')
+    if uri.scheme = 'https'
+      http.use_ssl = true
+      http.verify_mode = OpenSSL::SSL::VERIFY_NONE
+    end
+    request.body = {
+      channel: channel, data: data, salt: salt, authorization: authorization
+    }.to_json
+    http.request(request)
+  end
+
+  def self.pusher
+    unless @pusher
+      unless channel_prefix
+        self.transport = nil
+        raise '******** NO CHANNEL PREFIX SET ***************'
+      end
+      @pusher = Pusher::Client.new(
+        opts || { app_id: app_id, key: key, secret: secret }
+      )
+    end
+    @pusher
+  end
+
+  def self.channel
+    "private-#{channel_prefix}"
+  end
+
+  def self.authorization(salt, channel, session_id)
+    secret_key = Rails.application.secrets[:secret_key_base]
+    Digest::SHA1.hexdigest(
+      "salt: #{salt}, channel: #{channel}, session_id: #{session_id}, secret_key: #{secret_key}"
+    )
+  end
+
+  def self.after_commit(operation, model)
+    InternalPolicy.regulate_broadcast(model) do |data|
+      if HyperMesh.on_console? && Connection.root_path
+        HyperMesh.send_to_server(data[:channel], [operation, data])
+      else
+        Connection.send_to_channel(data[:channel], [operation, data])
+      end
+    end
+  rescue Exception
+    nil  # this is because during db migration we have problems... should investigate more...
+  end
+
+  Connection.transport = self
+end

data/lib/synchromesh/synchromesh_controller.rb

@@ -0,0 +1,154 @@
+module ReactiveRecord
+  Engine.routes.append do
+
+    module ::WebConsole
+      class Middleware
+      private
+        def acceptable_content_type?(headers)
+          Mime::Type.parse(headers['Content-Type'] || '').first == Mime[:html]
+        end
+      end
+    end if defined? ::WebConsole::Middleware
+
+    module ::Rails
+      module Rack
+        class Logger < ActiveSupport::LogSubscriber
+          unless method_defined? :pre_synchromesh_call
+            alias pre_synchromesh_call call
+            def call(env)
+              if !HyperMesh.opts[:noisy] && env['HTTP_X_SYNCHROMESH_SILENT_REQUEST']
+                Rails.logger.silence do
+                  pre_synchromesh_call(env)
+                end
+              else
+                pre_synchromesh_call(env)
+              end
+            end
+          end
+        end
+      end
+    end if defined?(::Rails::Rack::Logger)
+
+    class HyperMeshController < ::ApplicationController
+      protect_from_forgery except: [:console_update]
+
+      def client_id
+        params[:client_id]
+      end
+
+      before_action do
+        session.delete 'synchromesh-dummy-init' unless session.id
+      end
+
+      def channels(user = acting_user, session_id = session.id)
+        HyperMesh::AutoConnect.channels(session_id, user)
+      end
+
+      def can_connect?(channel, user = acting_user)
+        HyperMesh::InternalPolicy.regulate_connection(
+          user,
+          HyperMesh::InternalPolicy.channel_to_string(channel)
+        )
+        true
+      rescue
+        nil
+      end
+
+      def view_permitted?(model, attr, user = acting_user)
+        !!model.check_permission_with_acting_user(user, :view_permitted?, attr)
+      rescue
+        nil
+      end
+
+      def viewable_attributes(model, user = acting_user)
+        model.attributes.select { |attr| view_permitted?(model, attr, user) }
+      end
+
+      [:create, :update, :destroy].each do |op|
+        define_method "#{op}_permitted?" do |model, user = acting_user|
+          begin
+            !!model.check_permission_with_acting_user(user, "#{op}_permitted?".to_sym)
+          rescue
+            nil
+          end
+        end
+      end
+
+      def debug_console
+        if Rails.env.development?
+          render inline: "<style>div#console {height: 100% !important;}</style>\n".html_safe
+          #  "<div>additional helper methods: channels, can_connect? "\
+          #  "viewable_attributes, view_permitted?, create_permitted?, "\
+          #  "update_permitted? and destroy_permitted?</div>\n".html_safe
+          console
+        else
+          head :unauthorized
+        end
+      end
+
+      def subscribe
+        HyperMesh::InternalPolicy.regulate_connection(try(:acting_user), params[:channel])
+        root_path = request.original_url.gsub(/synchromesh-subscribe.*$/, '')
+        HyperMesh::Connection.open(params[:channel], client_id, root_path)
+        head :ok
+      rescue Exception
+        head :unauthorized
+      end
+
+      def read
+        root_path = request.original_url.gsub(/synchromesh-read.*$/, '')
+        data = HyperMesh::Connection.read(client_id, root_path)
+        render json: data
+      end
+
+      def pusher_auth
+        channel = params[:channel_name].gsub(/^#{Regexp.quote(HyperMesh.channel)}\-/,'')
+        HyperMesh::InternalPolicy.regulate_connection(acting_user, channel)
+        response = HyperMesh.pusher.authenticate(params[:channel_name], params[:socket_id])
+        render json: response
+      rescue Exception => e
+        head :unauthorized
+      end
+
+      def action_cable_auth
+        channel = params[:channel_name].gsub(/^#{Regexp.quote(HyperMesh.channel)}\-/,'')
+        HyperMesh::InternalPolicy.regulate_connection(acting_user, channel)
+        salt = SecureRandom.hex
+        authorization = HyperMesh.authorization(salt, channel, client_id)
+        render json: {authorization: authorization, salt: salt}
+      rescue Exception
+        head :unauthorized
+      end
+
+      def connect_to_transport
+        root_path = request.original_url.gsub(/synchromesh-connect-to-transport.*$/, '')
+        render json: HyperMesh::Connection.connect_to_transport(params[:channel], client_id, root_path)
+      end
+
+      def console_update
+        authorization = HyperMesh.authorization(params[:salt], params[:channel], params[:data][1][:broadcast_id]) #params[:data].to_json)
+        return head :unauthorized if authorization != params[:authorization]
+        HyperMesh::Connection.send_to_channel(params[:channel], params[:data])
+        head :no_content
+      rescue
+        head :unauthorized
+      end
+
+    end unless defined? HyperMeshController
+
+    match 'synchromesh-subscribe/:client_id/:channel',
+          to: 'hyper_mesh#subscribe', via: :get
+    match 'synchromesh-read/:client_id',
+          to: 'hyper_mesh#read', via: :get
+    match 'synchromesh-pusher-auth',
+          to: 'hyper_mesh#pusher_auth', via: :post
+    match 'synchromesh-action-cable-auth/:client_id/:channel_name',
+          to: 'hyper_mesh#action_cable_auth', via: :post
+    match 'synchromesh-connect-to-transport/:client_id/:channel',
+          to: 'hyper_mesh#connect_to_transport', via: :get
+    match 'console',
+          to: 'hyper_mesh#debug_console', via: :get
+    match 'console_update',
+          to: 'hyper_mesh#console_update', via: :post
+  end
+end

data/reactive_record_test_app/Gemfile

@@ -0,0 +1,15 @@
+source "http://rubygems.org"
+gem "rails"
+gem 'sqlite3'
+gem 'react-rails'
+gem 'opal', '~> 0.9.0'
+gem 'opal-rails'
+gem 'therubyracer'
+gem 'jquery-cookie-rails'
+gem 'byebug'
+gem 'pry-rails'
+gem 'pry-rescue'
+gem 'opal-rspec-rails', github: 'opal/opal-rspec-rails'
+gem 'hyper-mesh', path: "../.."
+gem 'web-console'
+gem 'hyper-trace'

data/reactive_record_test_app/Gemfile.lock

@@ -0,0 +1,209 @@
+GIT
+  remote: git://github.com/opal/opal-rspec-rails.git
+  revision: 0b8dc2745bee1aa59fe56323cc6d6493d2129cfc
+  specs:
+    opal-rspec-rails (0.1.0)
+      opal (~> 0.9.2)
+      opal-rails (~> 0.9.0.dev)
+      opal-rspec (~> 0.5.0)
+
+PATH
+  remote: ../..
+  specs:
+    hyper-mesh (0.4.0)
+      activerecord (>= 0.3.0)
+      hyper-react (>= 0.10.0)
+    hyper-trace (0.3.1)
+      opal
+
+GEM
+  remote: http://rubygems.org/
+  specs:
+    actionmailer (4.2.7.1)
+      actionpack (= 4.2.7.1)
+      actionview (= 4.2.7.1)
+      activejob (= 4.2.7.1)
+      mail (~> 2.5, >= 2.5.4)
+      rails-dom-testing (~> 1.0, >= 1.0.5)
+    actionpack (4.2.7.1)
+      actionview (= 4.2.7.1)
+      activesupport (= 4.2.7.1)
+      rack (~> 1.6)
+      rack-test (~> 0.6.2)
+      rails-dom-testing (~> 1.0, >= 1.0.5)
+      rails-html-sanitizer (~> 1.0, >= 1.0.2)
+    actionview (4.2.7.1)
+      activesupport (= 4.2.7.1)
+      builder (~> 3.1)
+      erubis (~> 2.7.0)
+      rails-dom-testing (~> 1.0, >= 1.0.5)
+      rails-html-sanitizer (~> 1.0, >= 1.0.2)
+    activejob (4.2.7.1)
+      activesupport (= 4.2.7.1)
+      globalid (>= 0.3.0)
+    activemodel (4.2.7.1)
+      activesupport (= 4.2.7.1)
+      builder (~> 3.1)
+    activerecord (4.2.7.1)
+      activemodel (= 4.2.7.1)
+      activesupport (= 4.2.7.1)
+      arel (~> 6.0)
+    activesupport (4.2.7.1)
+      i18n (~> 0.7)
+      json (~> 1.7, >= 1.7.7)
+      minitest (~> 5.1)
+      thread_safe (~> 0.3, >= 0.3.4)
+      tzinfo (~> 1.1)
+    arel (6.0.3)
+    babel-source (5.8.35)
+    babel-transpiler (0.7.0)
+      babel-source (>= 4.0, < 6)
+      execjs (~> 2.0)
+    binding_of_caller (0.7.2)
+      debug_inspector (>= 0.0.1)
+    builder (3.2.2)
+    byebug (9.0.5)
+    coderay (1.1.1)
+    coffee-script-source (1.10.0)
+    concurrent-ruby (1.0.2)
+    connection_pool (2.2.0)
+    debug_inspector (0.0.2)
+    erubis (2.7.0)
+    execjs (2.7.0)
+    globalid (0.3.7)
+      activesupport (>= 4.1.0)
+    hike (1.2.3)
+    hyper-react (0.10.0)
+      opal (>= 0.8.0)
+      opal-activesupport (>= 0.2.0)
+      react-rails
+    i18n (0.7.0)
+    interception (0.5)
+    jquery-cookie-rails (1.3.1.1)
+      railties (>= 3.2.0, < 5.0)
+    jquery-rails (4.2.1)
+      rails-dom-testing (>= 1, < 3)
+      railties (>= 4.2.0)
+      thor (>= 0.14, < 2.0)
+    json (1.8.3)
+    libv8 (3.16.14.15)
+    loofah (2.0.3)
+      nokogiri (>= 1.5.9)
+    mail (2.6.4)
+      mime-types (>= 1.16, < 4)
+    method_source (0.8.2)
+    mime-types (3.1)
+      mime-types-data (~> 3.2015)
+    mime-types-data (3.2016.0521)
+    mini_portile2 (2.1.0)
+    minitest (5.9.1)
+    nokogiri (1.6.8.1)
+      mini_portile2 (~> 2.1.0)
+    opal (0.9.4)
+      hike (~> 1.2)
+      sourcemap (~> 0.1.0)
+      sprockets (~> 3.1)
+      tilt (>= 1.4)
+    opal-activesupport (0.3.0)
+      opal (>= 0.5.0, < 1.0.0)
+    opal-jquery (0.4.2)
+      opal (>= 0.7.0, < 0.11.0)
+    opal-rails (0.9.0)
+      jquery-rails
+      opal (>= 0.8.0, < 0.11)
+      opal-activesupport (>= 0.0.5)
+      opal-jquery (~> 0.4.0)
+      rails (>= 4.0, < 6.0)
+      sprockets-rails (< 3.0)
+    opal-rspec (0.5.0)
+      opal (>= 0.8.0, < 0.10)
+    pry (0.10.4)
+      coderay (~> 1.1.0)
+      method_source (~> 0.8.1)
+      slop (~> 3.4)
+    pry-rails (0.3.4)
+      pry (>= 0.9.10)
+    pry-rescue (1.4.4)
+      interception (>= 0.5)
+      pry
+    rack (1.6.4)
+    rack-test (0.6.3)
+      rack (>= 1.0)
+    rails (4.2.7.1)
+      actionmailer (= 4.2.7.1)
+      actionpack (= 4.2.7.1)
+      actionview (= 4.2.7.1)
+      activejob (= 4.2.7.1)
+      activemodel (= 4.2.7.1)
+      activerecord (= 4.2.7.1)
+      activesupport (= 4.2.7.1)
+      bundler (>= 1.3.0, < 2.0)
+      railties (= 4.2.7.1)
+      sprockets-rails
+    rails-deprecated_sanitizer (1.0.3)
+      activesupport (>= 4.2.0.alpha)
+    rails-dom-testing (1.0.7)
+      activesupport (>= 4.2.0.beta, < 5.0)
+      nokogiri (~> 1.6.0)
+      rails-deprecated_sanitizer (>= 1.0.1)
+    rails-html-sanitizer (1.0.3)
+      loofah (~> 2.0)
+    railties (4.2.7.1)
+      actionpack (= 4.2.7.1)
+      activesupport (= 4.2.7.1)
+      rake (>= 0.8.7)
+      thor (>= 0.18.1, < 2.0)
+    rake (11.3.0)
+    react-rails (1.9.0)
+      babel-transpiler (>= 0.7.0)
+      coffee-script-source (~> 1.8)
+      connection_pool
+      execjs
+      railties (>= 3.2)
+      tilt
+    ref (2.0.0)
+    slop (3.6.0)
+    sourcemap (0.1.1)
+    sprockets (3.7.0)
+      concurrent-ruby (~> 1.0)
+      rack (> 1, < 3)
+    sprockets-rails (2.3.3)
+      actionpack (>= 3.0)
+      activesupport (>= 3.0)
+      sprockets (>= 2.8, < 4.0)
+    sqlite3 (1.3.11)
+    therubyracer (0.12.2)
+      libv8 (~> 3.16.14.0)
+      ref
+    thor (0.19.1)
+    thread_safe (0.3.5)
+    tilt (2.0.5)
+    tzinfo (1.2.2)
+      thread_safe (~> 0.1)
+    web-console (2.3.0)
+      activemodel (>= 4.0)
+      binding_of_caller (>= 0.7.2)
+      railties (>= 4.0)
+      sprockets-rails (>= 2.0, < 4.0)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  byebug
+  hyper-mesh!
+  hyper-trace
+  jquery-cookie-rails
+  opal (~> 0.9.0)
+  opal-rails
+  opal-rspec-rails!
+  pry-rails
+  pry-rescue
+  rails
+  react-rails
+  sqlite3
+  therubyracer
+  web-console
+
+BUNDLED WITH
+   1.12.5