ixtlan-user-management 0.1.0

data/Gemfile

@@ -0,0 +1,4 @@
+source :rubygems
+gemspec
+# needed for jruby 1.6.8 - inside Mavenfile it does not work
+gem 'jruby-openssl', :platform => :java

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright (c) 2008 Kristian Meier
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,64 @@
+ixtlan-remote
+-------------
+
+* [![Build Status](https://secure.travis-ci.org/mkristian/ixtlan-remote.png)](http://travis-ci.org/mkristian/ixtlan-remote)
+* [![Dependency Status](https://gemnasium.com/mkristian/ixtlan-remote.png)](https://gemnasium.com/mkristian/ixtlan-remote)
+* [![Code Climate](https://codeclimate.com/badge.png)](https://codeclimate.com/github/mkristian/ixtlan-remote)
+
+the idea is to register the remote rest(ful) servers at one place and then just talk to a rest-manager to make a rest http request.
+
+for example configure the 'users' server like this
+
+     rest = Ixtlan::Remote::Rest.new
+     rest.server( :users ) do |s|
+        s.url = 'http://example.com/rest'
+        s.add_model( Admin )
+        s.add_model( Account, "path/to/accounts" )
+        s.add_model( Locale )
+     end
+
+now you can do something like this:
+
+    a = rest.create( Admin.new( :id => 1, :name => 'me and the corner' ) ) # #<Admin @id=1 @name="me and the corner">
+    rest.retrieve( Admin, 1 )                                              # #<Admin @id=1 @name="me and the corner">
+    a.name = 'me'
+    rest.update( a )                                                       # #<Admin @id=1 @name="me">
+    rest.delete( a )
+
+or the same with less magic
+
+    a = rest.create( :admins, { :id => 1, :name => 'me and the corner' } # #<Admin @id=1 @name="me and the corner">
+    rest.retrieve( :admins )                                             # [#<Admin @id=1 @name="me and the corner">]
+    rest.update( :admins, 1, { :id => 1, :name => 'me' } )               # #<Admin @id=1 @name="me">
+    rest.delete( :admins, 1 )
+
+where the last argument is the payload and the first argument is the model (either Class, String or Symbol). the rest will be joined as "path" and appended to the baseurl of the model.
+
+the instantiation of the model objects (Admin, Account, etc) works either with passng in the attributes into the constructor (Admin.new( attributes ), etc) or with DataMapper it will try to load the object first from the datastore and then updates its attributes (no save only update on local object).
+
+sync
+----
+
+possible setting: there are loosely coupled miniapps which share data between them but only one miniapp can modify that data. i.e. one app manages users/groups and their authentication, another app allows to translate the i18n of apps and manages the list of allowed locales, etc. so let's say there are user data (a subset of the users-app user) and locale data which are needed in an app then you can sync them lke this:
+
+     sync = Ixtlan::Remote::Sync.new( rest )
+     sync.register( Locale )
+
+     sync.do_it # i.e. "update Locale - total: 1  success: 1  failures: 0"
+
+that `sync.do_it` can run in a cronjob and your data gets easily syncronized between miniapps. one could call it a master-slave setup for quasi static data. quasi static like users or locales or venue locations or list of countries etc. quasi static since you sync with a cronjob maybe running once a day or maybe each hour. for volatile data you better use the remote server directly, i.e. for authentication.
+    
+Contributing
+------------
+
+1. Fork it
+2. Create your feature branch (`git checkout -b my-new-feature`)
+3. Commit your changes (`git commit -am 'Added some feature'`)
+4. Push to the branch (`git push origin my-new-feature`)
+5. Create new Pull Request
+
+meta-fu
+-------
+
+enjoy :) 
+

data/lib/ixtlan/passwords.rb

@@ -0,0 +1,72 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'yaml'
+require 'erb'
+module Ixtlan
+  class HashWithDefault < ::Hash
+    def get( key, default = HashWithDefault.new )
+      self[ key ] || default
+    end
+  end
+
+  class Passwords
+
+    def self.symbolize_keys(h)
+      result = HashWithDefault.new
+
+      h.each do |k, v|
+        v = ' ' if v.nil?
+        if v.is_a?(Hash)
+          result[k.to_sym] = symbolize_keys(v) unless v.size == 0
+        else
+          result[k.to_sym] = v unless k.to_sym == v.to_sym
+        end
+      end
+      result
+    end
+
+    def self.load( file )
+      rel_file = File.expand_path( file ).sub( /#{File.expand_path '.' }\/?/, '' )
+      if File.exists?( file )
+        warn "[Passwords] Loaded #{rel_file} file"
+        symbolize_keys( YAML::load( ERB.new( IO.read( file ) ).result ) )
+      else
+        warn "[Passwords] No #{rel_file} file to load"
+      end
+    end
+
+    def self.config( file = 'password.yml' )
+      @config ||= load( file ) || HashWithDefault.new
+    end
+
+    def self.[]( key )
+      @config[ key ]
+    end
+
+    def self.get( key, default = nil )
+      if default
+        @config.get( key, default )
+      else
+        @config.get( key )
+      end
+    end
+  end
+end

data/lib/ixtlan/user_management/application_model.rb

@@ -0,0 +1,30 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+module Ixtlan
+  module UserManagement
+    class Application
+      include Virtus
+
+      attribute :name, String
+      attribute :url, String
+    end
+  end
+end

data/lib/ixtlan/user_management/application_resource.rb

@@ -0,0 +1,48 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+module Ixtlan
+  module UserManagement
+    class Application
+      include DataMapper::Resource
+
+      def self.storage_name(arg)
+        'ixtlan_applications'
+      end
+
+      # key for selectng the IdentityMap should remain this class if
+      # there is no single table inheritance with Discriminator in place
+      # i.e. the subclass used as key for the IdentityMap
+      def self.base_model
+        self
+      end
+
+      property :id, Serial, :auto_validation => false
+
+      property :name, String, :required => true, :unique => true, :length => 32
+      property :url, String, :required => true, :format => /^https?\:\/\/[a-z0-9\-\.]+(\.[a-z0-9]+)*(\:[0-9]+)?(\/\S*)?$/, :length => 64, :lazy => true
+      property :updated_at, DateTime, :required => true, :lazy => true
+
+      # do not record timestamps since they are set from outside
+      def set_timestamps_on_save
+      end
+    end
+  end
+end

data/lib/ixtlan/user_management/authentication_model.rb

@@ -0,0 +1,31 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'virtus'
+module Ixtlan
+  module UserManagement
+    class Authentication
+      include Virtus
+
+      attribute :login, String
+      attribute :password, String
+    end
+  end
+end

data/lib/ixtlan/user_management/authenticator.rb

@@ -0,0 +1,63 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'ixtlan/user_management/authentication_model'
+module Ixtlan
+  module UserManagement
+    class Authenticator
+
+      def initialize( restserver )
+        @restserver = restserver
+      end
+
+      def user_new( params )
+        User.new( params )
+      end
+
+      def login( username_or_email, password )
+        user = nil
+        @restserver.create( Authentication.new(:login => username_or_email, :password => password) ) do |json, req|
+          user = user_new( JSON.load( json ) ) unless json.strip == ''
+          nil
+        end
+        user
+      end
+      
+      def reset_password( username_or_email )
+        result = nil
+        @restserver.create( Authentication.new( :login => username_or_email ), 
+                            :reset_password ) do |json, req|
+          result = json unless json.strip == ''
+          #tell restserver to ignore response
+          nil
+        end
+        result
+      end
+
+      def ping( user )
+        # do nothing
+      end
+
+      def logout( user )
+        # do nothing
+      end
+    end
+  end
+end

data/lib/ixtlan/user_management/domain_resource.rb

@@ -0,0 +1,78 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+module Ixtlan
+  module UserManagement
+    class Domain
+
+      include DataMapper::Resource
+
+      def self.storage_name(arg)
+        'ixtlan_domains'
+      end
+
+      # key for selectng the IdentityMap should remain this class if
+      # there is no single table inheritance with Discriminator in place
+      # i.e. the subclass used as key for the IdentityMap
+      def self.base_model
+        self
+      end
+
+      ALL_ID = 1
+      DEFAULT_ID = 2
+
+      ALL_NAME= 'ALL'
+      DEFAULT_NAME = 'DEFAULT'
+
+      def self.ALL
+        first_or_create( :id => ALL_ID, :name => ALL_NAME )
+      end
+
+      def self.DEFAULT
+        first_or_create( :id => DEFAULT_ID, :name => DEFAULT_NAME )
+      end
+
+      def self.almost_all( args = {} )
+        all( { :id.gt => ALL_ID }.merge( args ) )
+      end
+
+      def self.first_or_create( args )
+        first( args ) || create!( args.merge( {:updated_at => DateTime.new( 1 ) } ) )
+      end
+
+      property :id, Serial  
+      property :name, String, :unique => true, :format => /ALL|DEFAULT|^[a-z]+$/,:required => true, :length => 32
+
+      timestamps :updated_at
+
+      # do not record timestamps since they are set from outside
+      def set_timestamps_on_save
+      end
+
+      def all?
+        name == ALL_NAME
+      end
+
+      def default?
+        name == DEFAULT_NAME
+      end
+    end
+  end
+end

data/lib/ixtlan/user_management/dummy_authentication.rb

@@ -0,0 +1,70 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+module Ixtlan
+  module UserManagement
+    module DummyAuthentication
+
+      def self.need_dummy?( rest, server )
+        url = rest.to_server( server ).url
+        (url =~ /localhost/ || url =~ /127.0.0.1/ || url =~ /::1/) && !(ENV['SSO'] == 'true' || ENV['SSO'] == '')
+      end
+
+      def login(login, password)
+        if ! login.blank? && password.blank?
+          result = setup_user
+          result.login = login.sub( /\[.*/, '' )
+          result.name = result.login.capitalize
+          result.groups = [ setup_group( login ) ]
+          result.applications = [] if result.respond_to? :applications
+          result
+        end
+      end
+
+      protected
+
+      def setup_user
+        if u = user_model.get!(1)
+          result = u
+        else
+          result.id = 1
+          result.updated_at = DateTime.now
+        end
+      end
+
+      def user_model
+        User
+      end
+        
+      def setup_group( login )
+        group_for( Group, login )
+      end
+
+      def group_for( model, login )
+        model.new('name' => login.sub( /\[.*/, '' ) )
+      end
+
+      def split( login )
+        login.sub( /.*\[/ , '' ).sub( /\].*/, '' ).split( /,/ )
+      end
+
+    end
+  end
+end

data/lib/ixtlan/user_management/group_model.rb

@@ -0,0 +1,31 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'virtus'
+module Ixtlan
+  module UserManagement
+    class Group
+      include Virtus
+
+      attribute :name, String
+      attribute :associations, Array[Object]
+    end
+  end
+end

data/lib/ixtlan/user_management/session_cuba.rb

@@ -0,0 +1,69 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'ixtlan/user_management/session_plugin'
+
+module Ixtlan
+  module UserManagement
+  
+    class SessionCuba < CubaAPI
+
+      plugin SessionPlugin
+
+      define do
+        on post, :reset_password do
+          if msg = self.class.authenticator.reset_password( login_and_password[ 0 ] )
+            log msg
+            head 200
+          else
+            log "user/email not found"
+            head 404
+          end
+        end
+
+        on post do
+          user = self.class.authenticator.login( *login_and_password )
+          if user      
+            current_user( user )
+            # be compliant with rack-protection and rack-csrf
+            csrf = session[ :csrf ] || session[ "csrf.token" ]
+            res[ 'X-CSRF-TOKEN' ] = csrf if csrf
+            write self.class.sessions.create( user )
+          else
+            log "access denied"
+            head 403
+          end
+        end
+        
+        on get, :ping do
+          self.class.authenticator.ping( current_user )
+          head 200
+        end
+        
+        on delete, current_user do
+          self.class.authenticator.logout( current_user )
+          log "logout"
+          reset_current_user
+          head 200
+        end
+      end
+    end
+  end
+end

data/lib/ixtlan/user_management/session_manager.rb

@@ -0,0 +1,70 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'ixtlan/user_management/user_serializer'
+require 'ixtlan/user_management/session_model'
+require 'ixtlan/user_management/session_serializer'
+
+module Ixtlan
+  module UserManagement
+    class SessionManager
+
+      attr_accessor :idle_session_timeout, :block
+
+      def initialize( &block )
+        @block = block || lambda { [] }
+      end
+      
+      def serializer( user )
+        UserSerializer.new( user )
+      end
+
+      def to_session( user )
+        serializer( user ).use( :session ).to_hash
+      end
+
+      if User.respond_to?( :properties )
+        def from_session( data ) 
+          if data
+            data = data.dup
+            groups = (data.delete( 'groups' ) || []).collect do |g|
+              Group.new( g )
+            end
+            user = User.first( :login => data[ 'login' ] )
+            user.groups = groups
+            user
+          end
+        end
+      else
+        def from_session( data ) 
+          if data
+            User.new( data )
+          end
+        end
+      end
+
+      def create( user )
+        Session.new( 'user' => user,
+                     'permissions' => block.call( user.groups ),
+                     'idle_session_timeout' => idle_session_timeout )
+      end
+    end
+  end
+end

data/lib/ixtlan/user_management/session_model.rb

@@ -0,0 +1,36 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'virtus'
+module Ixtlan
+  module UserManagement
+    class Session
+      include Virtus
+
+      attribute :idle_session_timeout, Integer
+      attribute :user, User
+      attribute :permissions, Array[Object]
+
+      def to_s
+        "Session( #{user.name}<#{user.login}> groups[ #{user.groups.collect { |g| g.name }.join ',' } ] #{idle_session_timeout} )"
+      end
+    end
+  end
+end

data/lib/ixtlan/user_management/session_plugin.rb

@@ -0,0 +1,51 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'ixtlan/user_management/authenticator'
+
+module Ixtlan
+  module UserManagement
+    module SessionPlugin
+
+      module ClassMethods
+        def authenticator
+          self[ :authenticator ] ||= Authenticator.new( self[ :rest ] )
+        end
+      end
+
+      def log( msg )
+        if self.respond_to? :audit
+          audit( msg, { :username => login } )
+        else
+          warn( "[#{login}] #{msg}" )
+        end
+      end
+  
+      def login_and_password
+        auth = req[:authentication] || req
+        [ auth[:login] || auth[:email], auth[:password] ]
+      end
+      
+      def login
+        login_and_password[ 0 ]
+      end
+    end
+  end
+end

data/lib/ixtlan/user_management/session_serializer.rb

@@ -0,0 +1,41 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'ixtlan/babel/serializer'
+module Ixtlan
+  module UserManagement
+    class SessionSerializer < Ixtlan::Babel::Serializer
+
+      root 'session'
+
+      add_context(:single,
+                  :only => [:idle_session_timeout],
+                  :include => { 
+                    :user => {
+                    },
+                    :permissions => {
+                      :include => [:actions, :associations]
+                    }
+                  }
+                  )
+      
+    end
+  end
+end

data/lib/ixtlan/user_management/user_model.rb

@@ -0,0 +1,36 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'ixtlan/user_management/group_model'
+module Ixtlan
+  module UserManagement
+    class User
+      include Virtus
+
+      attribute :login, String
+      attribute :name, String
+      attribute :groups, Array[Group]
+
+      def initialize( params = {} )
+        super params[ 'user' ] || params
+      end
+    end
+  end
+end

data/lib/ixtlan/user_management/user_resource.rb

@@ -0,0 +1,55 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+module Ixtlan
+  module UserManagement
+    class User
+
+      include DataMapper::Resource
+
+      def self.storage_name(arg)
+        'ixtlan_users'
+      end
+
+      # key for selectng the IdentityMap should remain this class if
+      # there is no single table inheritance with Discriminator in place
+      # i.e. the subclass used as key for the IdentityMap
+      def self.base_model
+        self
+      end
+
+      property :id, Serial, :auto_validation => false
+      
+      property :login, String, :required => true, :unique => true, :length => 32
+      property :name, String, :required => true, :length => 128
+      property :updated_at, DateTime, :required => true
+
+      attr_accessor :groups, :applications
+
+      # do not record timestamps since they are set from outside
+      def set_timestamps_on_save
+      end
+
+      def to_s
+        "User( #{name} <#{login}> )"
+      end
+    end
+  end
+end

data/lib/ixtlan/user_management/user_serializer.rb

@@ -0,0 +1,35 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'ixtlan/babel/serializer'
+module Ixtlan
+  module UserManagement
+    class UserSerializer < Ixtlan::Babel::Serializer
+
+      add_context(:session,
+                  :only => [:login, :name],
+                  :include=> { 
+                    :groups => {
+                      :only => [:name]
+                    }
+                  })
+    end
+  end
+end

data/lib/ixtlan/user_management.rb

@@ -0,0 +1,20 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#

data/lib/ixtlan-user-management.rb

@@ -0,0 +1,21 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'ixtlan/user_management'

data/lib/ixtlan_user_management.rb

@@ -0,0 +1,21 @@
+#
+# Copyright (C) 2013 Christian Meier
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+require 'ixtlan/user_management'

metadata

@@ -0,0 +1,166 @@
+--- !ruby/object:Gem::Specification
+name: ixtlan-user-management
+version: !ruby/object:Gem::Version
+  prerelease:
+  version: 0.1.0
+platform: ruby
+authors:
+- Christian Meier
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2013-02-19 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rake
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 10.0.2
+    none: false
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 10.0.2
+    none: false
+  prerelease: false
+  type: :development
+- !ruby/object:Gem::Dependency
+  name: minitest
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 4.3.0
+    none: false
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 4.3.0
+    none: false
+  prerelease: false
+  type: :development
+- !ruby/object:Gem::Dependency
+  name: dm-sqlite-adapter
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.0
+    none: false
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.0
+    none: false
+  prerelease: false
+  type: :development
+- !ruby/object:Gem::Dependency
+  name: dm-migrations
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.0
+    none: false
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.0
+    none: false
+  prerelease: false
+  type: :development
+- !ruby/object:Gem::Dependency
+  name: copyright-header
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+    none: false
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+    none: false
+  prerelease: false
+  type: :development
+- !ruby/object:Gem::Dependency
+  name: json
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+    none: false
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+    none: false
+  prerelease: false
+  type: :development
+description: helper for managing users with login/password via local db or remote rest-services
+email:
+- m.kristian@web.de
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/ixtlan-user-management.rb
+- lib/ixtlan_user_management.rb
+- lib/ixtlan/passwords.rb
+- lib/ixtlan/user_management.rb
+- lib/ixtlan/user_management/user_serializer.rb
+- lib/ixtlan/user_management/authenticator.rb
+- lib/ixtlan/user_management/dummy_authentication.rb
+- lib/ixtlan/user_management/user_model.rb
+- lib/ixtlan/user_management/session_serializer.rb
+- lib/ixtlan/user_management/group_model.rb
+- lib/ixtlan/user_management/user_resource.rb
+- lib/ixtlan/user_management/session_manager.rb
+- lib/ixtlan/user_management/session_plugin.rb
+- lib/ixtlan/user_management/application_resource.rb
+- lib/ixtlan/user_management/domain_resource.rb
+- lib/ixtlan/user_management/authentication_model.rb
+- lib/ixtlan/user_management/session_model.rb
+- lib/ixtlan/user_management/application_model.rb
+- lib/ixtlan/user_management/session_cuba.rb
+- MIT-LICENSE
+- README.md
+- Gemfile
+homepage: https://github.com/mkristian/ixtlan-user-management
+licenses:
+- MIT
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: !binary |-
+        MA==
+  none: false
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: !binary |-
+        MA==
+  none: false
+requirements: []
+rubyforge_project:
+rubygems_version: 1.8.24
+signing_key:
+specification_version: 3
+summary: helper for managing users with login/password
+test_files: []