ishapi 0.1.8.128 → 0.1.8.133

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e26aad09c6af260d542b74b6e1a6a564b68ac017f31b4106bdce3fd1844b05eb
-  data.tar.gz: ba6375f1492c1ea70ba95fc16451fdd5d72bb1c8a86cd4591d74a65925daf736
+  metadata.gz: 214eb06a86cd16e99e941a3c22331117b6fde6f617d21149b26584718e81535b
+  data.tar.gz: 21b011a4ca8f9daf09753bb6ca3df95c5f8b536d321b586b9b193bcf65c03546
 SHA512:
-  metadata.gz: f05096a461bf556e9dff7577f5bba7935f8abd7eb9dcf43802c63b8fe4dd21848c7914144e9ecfe11f241f132ad484b6461d0ec05c62a198fb8f6eeb5f2de2e3
-  data.tar.gz: ffdc24477420e93b1162121d79f9c1a587bbcb1d73e7cf99f59696b81004b46c4460c0af3c61ad012837de02c0fe9ce69564eed86787fb00e5bdc10c079baf8b
+  metadata.gz: 4bbfa9c73cb0e80eb74a7c52c2e40f120239445caabb62c153b65c21fe77258f088b289b18eab506b8a0a759ae913edae63c6561fbca2464b869ced7176a98a7
+  data.tar.gz: 3c62e845e6ec976248c8c94cd34b4bc87a370548319b8b2459560e0ed610c369ceac97e00dc5f76bb9c9805ba2d1c238b43897fd74c4a01e9722e6832694b8ee

data/app/controllers/ishapi/application_controller.rb

@@ -7,7 +7,7 @@ module Ishapi
 
     # before_action :check_profile, except: [ :test ]
     before_action :set_current_ability
-    
+
     check_authorization
     skip_before_action :verify_authenticity_token
 
@@ -26,9 +26,19 @@ module Ishapi
         "client_id=#{FB[params['domain']][:app]}&client_secret=#{FB[params['domain']][:secret]}&" +
         "fb_exchange_token=#{accessToken}"
       j = JSON.parse response.body
+      puts! j, 'fb response'
       @long_term_token = j['access_token']
 
-      render json: { long_term_token: @long_term_token }
+      # get user email
+      @graph            = Koala::Facebook::API.new( accessToken )
+      @me               = @graph.get_object( 'me', :fields => 'email' )
+      @current_user     = User.where( :email => @me['email'] ).first
+      @profile          = @current_user.profile
+
+      # send the jwt to client
+      @jwt_token = encode(user_id: @current_user.id)
+
+      render json: { long_term_token: @long_term_token, jwt_token: @jwt_token }
     end
 
     #
@@ -75,9 +85,9 @@ module Ishapi
         # puts! result, 'googleauth result'
 
         decoded_token = JWT.decode params[:idToken], nil, false
-        
+
         @current_user = User.find_by email: decoded_token[0]['email']
-        
+
       elsif 'facebook' == provider
         # accessToken ||= params[:fb_long_access_token]
 
@@ -101,7 +111,7 @@ module Ishapi
           @current_user     = User.where( :email => @me['email'] ).first
           @current_user   ||= User.create! email: @me['email'], password: SecureRandom.urlsafe_base64
 
-          @current_profile = @current_user.profile          
+          @current_profile = @current_user.profile
           if !@current_profile
             begin
               g = Gallery.find '5e1495e2d697f768ad0779eb'
@@ -120,9 +130,15 @@ module Ishapi
 
         puts! @current_user, 'current_user'
         puts! @current_profile, 'current_profile'
-        # byebug
+
+      elsif 'jwt' == provider
+        decoded = decode(params[:jwt_token])
+        puts! decoded, 'decoded'
+        @current_user = User.find decoded[:user_id]
+
       else
         puts! 'check_multiprofile(): no access token'
+        raise "ww1 - not implemented"
       end
 
       sign_in @current_user, scope: :user
@@ -132,13 +148,16 @@ module Ishapi
     # this doesn't generate long-lived token, doesn't update user_profile
     # this is only for facebook now
     def check_profile
+      puts! params, 'params'
+
       # return check_multiprofile 'google'
-      return check_multiprofile 'facebook'
+      # return check_multiprofile 'facebook'
+      return check_multiprofile 'jwt'
 
       # puts! params, 'params'
       # puts! current_user, 'current_user'
       # puts! @current_user, '@current_user'
-      
+
       accessToken   = request.headers[:accessToken]
       accessToken ||= params[:fb_long_access_token]
       accessToken ||= params[:accessToken]
@@ -201,7 +220,7 @@ module Ishapi
       @current_order   = @current_profile.current_order
       # orders.where( :submitted_at => nil ).first || ::CoTailors::Order.new( :profile_id => @current_profile.id )
     end
-    
+
     def get_long_token accessToken
       url = "https://graph.facebook.com/oauth/access_token?grant_type=fb_exchange_token&" +
             "client_id=#{FB[params['domain']][:app]}&client_secret=#{FB[params['domain']][:secret]}&fb_exchange_token=#{accessToken}"
@@ -221,5 +240,17 @@ module Ishapi
       puts a.inspect
     end
 
+    # jwt
+    def encode(payload, exp = 2.hours.from_now)
+      payload[:exp] = exp.to_i
+      JWT.encode(payload, Rails.application.secrets.secret_key_base.to_s)
+    end
+
+    # jwt
+    def decode(token)
+      decoded = JWT.decode(token, Rails.application.secrets.secret_key_base.to_s)[0]
+      HashWithIndifferentAccess.new decoded
+    end
+
   end
 end

data/app/controllers/ishapi/my/my_controller.rb

@@ -3,10 +3,19 @@ module Ishapi
   module My
     class MyController < Ishapi::ApplicationController
 
-      before_action :set_profile
+      # before_action :set_profile # this is DoS on FB - disabled
+      before_action :do_login
 
       private
 
+      def do_login
+        puts! params, 'params'
+
+        token = decode(params[:jwtToken])
+        puts! token, 'token'
+        @current_user = User.find(token["user_id"])
+      end
+
       def set_profile
         begin
           @graph   = Koala::Facebook::API.new( params[:accessToken] )

data/app/controllers/ishapi/my/videos_controller.rb

@@ -0,0 +1,14 @@
+
+module Ishapi
+  module My
+    class VideosController < Ishapi::My::MyController
+
+      def index
+        authorize! :my_index, Video
+        @videos = @current_user.profile.videos.unscoped.where( is_trash: false ).order_by( created_at: :desc ).limit(20)
+      end
+
+    end
+  end
+end
+

data/app/controllers/ishapi/user_profiles_controller.rb

@@ -10,6 +10,8 @@ module Ishapi
     end
 
     def my
+      puts! params, 'params 233'
+
       @profile = current_user.profile
       authorize! :show, @profile
     end

data/app/models/ishapi/ability.rb

@@ -56,7 +56,7 @@ class Ishapi::Ability
     can [ :my_index, :show ], Report do |report|
       report.is_public
     end
-    
+
     can [ :fb_sign_in, :long_term_token, :open_permission, :welcome_home ], Ishapi
 
     can [ :index, :show ], Site
@@ -66,11 +66,14 @@ class Ishapi::Ability
       tag.is_public
     end
 
+    #
+    # V
+    #
     can [ :index ], Venue
     can [ :show ], Venue do |venue|
       venue.is_public
     end
-    can [ :index ], Video
+    can [ :index, :my_index ], Video
     can [ :show ], Video do |video|
       video.is_public
     end

data/app/views/ishapi/galleries/_show.jbuilder

@@ -1,8 +1,21 @@
 #
 # ishapi / galleries / _show
 #
-
 json.id           gallery.id.to_s
+json.item_type    'gallery'
 json.name         gallery.name
 json.galleryname  gallery.galleryname
 json.description  gallery.description
+json.username     gallery.username || 'piousbox'
+json.n_photos     gallery.photos.length
+json.slug         gallery.galleryname
+json.subhead      gallery.subhead
+json.partial!    'ishapi/application/meta', :item => gallery
+if gallery.is_premium
+  json.premium_tier gallery.premium_tier
+  json.is_premium   gallery.premium_tier > 0
+  json.is_purchased current_user.profile.has_premium_purchase( gallery )
+  json.partial!    'ishapi/photos/index',     :photos => [ gallery.photos[0] ]
+else
+  json.partial!    'ishapi/photos/index',     :photos => gallery.photos
+end

data/app/views/ishapi/galleries/show.jbuilder

@@ -5,10 +5,8 @@
 this_key = [ @gallery, params.permit! ]
 json.cache! this_key do
   json.gallery do
-    json.partial! 'ishapi/galleries/show', gallery: @gallery   
-    json.partial! 'ishapi/photos/index', :photos => @gallery.photos 
-
     json.partial! 'ishapi/application/meta', item: @gallery
+    json.partial! 'ishapi/galleries/show', gallery: @gallery
   end
 end
 

data/app/views/ishapi/my/videos/index.jbuilder

@@ -0,0 +1,9 @@
+
+json.videos(@videos) do |video|
+  json.created_at video.created_at
+  json.id         video.id.to_s
+  json.name       video.name
+  json.thumb_url  video.thumb
+  json.video_url  video.video
+end
+

data/app/views/ishapi/photos/_index.jbuilder

@@ -1,6 +1,7 @@
 
 #
 # ishapi / photos / _index
+# @deprecated, ishapi / galleries / _show is preferred
 #
 
 json.photos do

data/config/routes.rb

@@ -7,7 +7,7 @@ Ishapi::Engine.routes.draw do
   get 'cities',                :to => 'cities#index'
   get 'cities/view/:cityname', :to => 'cities#show'
   get 'cities/features',       :to => 'cities#features'
- 
+
   post 'co_tailors/orders',                 :to => 'orders#create'
   post 'co_tailors/order_items',            :to => 'order_items#create'
   post 'co_tailors/measurements',           :to => 'measurements#update'
@@ -16,7 +16,7 @@ Ishapi::Engine.routes.draw do
   end
 
   post 'do_purchase', to: 'gameui#do_purchase'
-  
+
   get 'events/view/:eventname',      :to => 'events#show'
 
   get  'galleries',                   :to => 'galleries#index'
@@ -35,8 +35,10 @@ Ishapi::Engine.routes.draw do
   namespace :my do
     # post 'reports', :to => 'reports#index'
     get  'reports', :to => 'reports#index'
+    get 'videos', to: 'videos#index'
+    post 'videos', to: 'videos#index'
   end
-  
+
   post 'payments', :to => 'payments#create'
 
   get 'profiles/view/:username', :to => 'user_profiles#show'
@@ -64,7 +66,7 @@ Ishapi::Engine.routes.draw do
 
   get 'venues', :to => 'venues#index'
   get 'venues/view/:venuename', :to => 'venues#show'
- 
+
   resources :videos
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ishapi
 version: !ruby/object:Gem::Version
-  version: 0.1.8.128
+  version: 0.1.8.133
 platform: ruby
 authors:
 - piousbox
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-03-22 00:00:00.000000000 Z
+date: 2020-07-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -207,6 +207,7 @@ files:
 - app/controllers/ishapi/measurements_controller.rb
 - app/controllers/ishapi/my/my_controller.rb
 - app/controllers/ishapi/my/reports_controller.rb
+- app/controllers/ishapi/my/videos_controller.rb
 - app/controllers/ishapi/newsitems_controller.rb
 - app/controllers/ishapi/order_items_controller.rb
 - app/controllers/ishapi/orders_controller.rb
@@ -248,6 +249,7 @@ files:
 - app/views/ishapi/maps/index.jbuilder
 - app/views/ishapi/maps/show.jbuilder
 - app/views/ishapi/measurements/_show.jbuilder
+- app/views/ishapi/my/videos/index.jbuilder
 - app/views/ishapi/newsitems/_index.jbuilder
 - app/views/ishapi/newsitems/index.jbuilder
 - app/views/ishapi/orders/_item.jbuilder