j1-template 2020.0.0

data/lib/j1_app/j1_auth_manager/commands.rb

@@ -0,0 +1,18 @@
+module J1App
+  class Commands
+
+    FILES = %w(Rakefile config.ru .gitignore dotenv).freeze
+    VARS  = %w(client_id client_secret team_id org_name).freeze
+
+    def self.execute_command(*args)
+      output, status = Open3.capture2e(*args)
+      raise "Command `#{args.join(" ")}` failed: #{output}" unless status.exitstatus.zero?
+      output
+    end
+
+    def self.env_var_set?(var)
+      !ENV[var].to_s.blank?
+    end
+
+  end
+end

data/lib/j1_app/j1_auth_manager/config.rb

@@ -0,0 +1,238 @@
+module J1App
+
+  # set work dir to path
+  #
+  def self.work_dir
+    unless ARGV.grep(/config.ru/)[0] == nil
+      # set work dir to path of ARGV argument for config.ru
+      # if app is called from commandline
+      #
+      File.dirname(ARGV.grep(/config.ru/)[0])
+    else
+      # set work dir work dir if app is called from
+      # application manager (e.g. passenger)
+      # NOTE:
+      #   Unclear why File.join resolves the PATH correctly
+      #   but File.dirname doesn't
+      # File.dirname(Dir.pwd)
+      #
+      File.join(Dir.pwd, "")
+    end
+  end
+
+  def self.jekyll_config_file
+    File.join(Dir.pwd, '_config.yml')
+    # File.join(Dir.pwd, "_config.develop.yml")
+  end
+
+  def self.jekyll_config
+    @config ||= YAML.safe_load_file(jekyll_config_file)
+  rescue StandardError
+    {}
+  end
+
+  def self.auth_config_file
+    File.join(Dir.pwd, '_data/modules/authentication.yml')
+  end
+
+  def self.auth_config_data
+    @auth ||= YAML.safe_load_file(auth_config_file)
+  rescue StandardError
+    {}
+  end
+
+  def self.template_config_file
+    File.join(Dir.pwd, '_data/template_settings.yml')
+  end
+
+  def self.template_config
+    @template_config ||= YAML.safe_load_file(template_config_file)
+  rescue StandardError
+    {}
+  end
+
+  def self.template_private_data_file
+    File.join(Dir.pwd, '_data/private.yml')
+  end
+
+  def self.private_data
+    @private_data ||= YAML.safe_load_file(template_private_data_file)
+  rescue StandardError
+    {}
+  end
+
+  def self.middleware_data
+    private_data.fetch('middleware', {})
+  end
+
+  def self.oauth_data
+    middleware_data.fetch('oauth', {})
+  end
+
+  def self.destination
+    jekyll_config.fetch('destination', File.expand_path('_site', Dir.pwd))
+  end
+
+  def self.auth_settings
+    auth_config_data.fetch('settings', {})
+  end
+
+  def self.auth_config
+    # @auth['settings']['j1_auth']
+    auth_settings['j1_auth']
+  end
+
+  def self.user_settings
+    template_config.fetch('user', {})
+  end
+
+  def self.auth?
+    !!auth_config['enabled']
+  end
+
+  def self.ssl?
+    !!auth_config['ssl']
+  end
+
+  def self.whitelist
+    whitelist = auth_config['whitelist']
+    Regexp.new(whitelist.join("|")) unless whitelist.nil?
+  end
+
+  def self.public_content
+    public_content = auth_config['content']['public']
+    Regexp.new(public_content.join("|")) unless public_content.nil?
+  end
+
+  def self.active_providers
+    auth_config['providers']['activated']
+  end
+
+  def self.default_provider
+    auth_config['providers']['activated'][0]
+  end
+
+  def self.permissions
+    permission_profile = {
+        :protected   => [],
+        :private   => []
+    }
+
+    active_providers = auth_config['providers']['activated']
+
+    active_providers.each { |p|
+      provider_permissions = auth_config['providers']["#{p}"]['permissions']
+      provider_permissions.each do |perm|
+        permission_profile[:"#{perm}"] << "#{p}"
+      end
+    }
+    permission_profile
+  end
+
+  def self.get_condition(arg)
+    auth_config['provider']['condition']["#{arg}"]
+  end
+
+  def self.conditions (arg)
+    condition_profile = {}
+    provider = arg
+    provider_conditions = auth_config['providers']["#{provider}"]['conditions']
+    provider_conditions.each do |key, value|
+      condition_profile[key] = value
+    end
+    condition_profile
+  end
+
+  class ConfigError < RuntimeError
+    def message
+      "J1App is refusing to serve your site because your OAuth credentials are not properly configured"
+    end
+  end
+
+
+
+
+
+  # def self.provider_url(arg)
+  #   provider_url = {
+  #     'patreon'   => auth_config['provider']['provider_url']['patreon'],
+  #     'disqus'    => auth_config['provider']['provider_url']['disqus'],
+  #     'facebook'  => auth_config['provider']['provider_url']['facebook'],
+  #     'github'    => auth_config['provider']['provider_url']['github'],
+  #     'twitter'   => auth_config['provider']['provider_url']['twitter']
+  #   }
+  #   provider_url[arg]
+  # end
+
+  # def self.provider_scope(arg)
+  #   provider_scope = {
+  #     'patreon'   => auth_config['provider']['scope']['patreon'],
+  #     'disqus'    => auth_config['provider']['scope']['disqus'],
+  #     'facebook'  => auth_config['provider']['scope']['facebook'],
+  #     'github'    => auth_config['provider']['scope']['github'],
+  #     'twitter'   => auth_config['provider']['scope']['twitter']
+  #   }
+  #   provider_scope[arg].join(',')
+  # end
+
+  # def self.provider_data(arg)
+  #   provider_data = {
+  #       'patreon'   => auth_config['provider']['data']['patreon'],
+  #       'disqus'    => auth_config['provider']['data']['disqus'],
+  #       'facebook'  => auth_config['provider']['data']['facebook'],
+  #       'github'    => auth_config['provider']['data']['github'],
+  #       'twitter'   => auth_config['provider']['data']['twitter']
+  #   }
+  #   provider_data[arg].join(',')
+  # end
+
+  # def self.provider_condition(arg)
+  #   provider_condition = {
+  #       'patreon'   => auth_config['provider']['condition']['patreon'],
+  #       'disqus'    => auth_config['provider']['condition']['disqus'],
+  #       'facebook'  => auth_config['provider']['condition']['facebook'],
+  #       'github'    => auth_config['provider']['condition']['github'],
+  #       'twitter'   => auth_config['provider']['condition']['twitter']
+  #   }
+  #   provider_condition[arg]
+  # end
+
+  # def self.permissions_old
+  #   permission_profile = {
+  #       :protected   => [],
+  #       :private   => []
+  #   }
+  #
+  #   provider_permissions = auth_config['provider']['permission']
+  #   provider_permissions.each do |key, value|
+  #     my_key = key
+  #     value.each { |perm| permission_profile[:"#{perm}"] << key }
+  #   end
+  #   permission_profile
+  # end
+
+  # def self.get_provider_permissions (arg)
+  #   auth_config['provider']['permission']["#{arg}"].join(',')
+  # end
+
+  # def self.users
+  #   user_profile = {}
+  #
+  #   provider_users = auth_config['provider']['user']
+  #   provider_users.each do |key, value|
+  #     user_profile[key] = value
+  #   end
+  #   user_profile
+  # end
+
+  # def self.strategies
+  #   strategy_profile = {}
+  #
+  #   provider_strategies = auth_config['provider']['strategy']
+  #   provider_strategies.each do |key, value|
+  #     strategy_profile[key] = :"#{value}"
+  #   end
+  #   strategy_profile
+  # end
+
+end

data/lib/j1_app/j1_auth_manager/error_pages.rb

@@ -0,0 +1,44 @@
+# ------------------------------------------------------------------------------
+# ~/lib/j1_app/j1_auth_manager/omniauth/strategies/eror_pages.rb
+#
+# Provides plan error pages
+#
+# Product/Info:
+# https://jekyll.one
+#
+# Copyright (C) 2020 Juergen Adams
+#
+# J1 Template is licensed under the MIT License
+# See: https://github.com/jekyll-one-org/J1 Template/blob/master/LICENSE
+#
+# ------------------------------------------------------------------------------
+# NOTES
+#
+# ------------------------------------------------------------------------------
+module J1App
+  module ErrorPages
+
+  cc_access_denid = <<CC_ACCESS_DENIED
+  <!DOCTYPE html>
+  <html lang="en">
+    <head>
+      <!-- Simple HttpErrorPages | MIT License | https://github.com/AndiDittrich/HttpErrorPages -->
+      <meta charset="utf-8" />
+      <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+      <meta name="viewport" content="width=device-width, initial-scale=1" />
+      <title>We've got some trouble | Access Denied</title>
+      <style type="text/css">/*! normalize.css v5.0.0 | MIT License | github.com/necolas/normalize.css */html{font-family:sans-serif;line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,main{display:block}figure{margin:1em 40px}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent;-webkit-text-decoration-skip:objects}a:active,a:hover{outline-width:0}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:inherit}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}dfn{font-style:italic}mark{background-color:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}audio,video{display:inline-block}audio:not([controls]){display:none;height:0}img{border-style:none}svg:not(:root){overflow:hidden}button,input,optgroup,select,textarea{font-family:sans-serif;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,html [type=button]{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{border:1px solid silver;margin:0 2px;padding:.35em .625em .75em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}progress{display:inline-block;vertical-align:baseline}textarea{overflow:auto}[type=checkbox],[type=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-cancel-button,[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}details,menu{display:block}summary{display:list-item}canvas{display:inline-block}template{display:none}[hidden]{display:none}/*! Simple HttpErrorPages | MIT X11 License | https://github.com/AndiDittrich/HttpErrorPages */body,html{width:100%;height:100%;background-color:#21232a}body{color:#fff;text-align:center;text-shadow:0 2px 4px rgba(0,0,0,.5);padding:0;min-height:100%;-webkit-box-shadow:inset 0 0 100px rgba(0,0,0,.8);box-shadow:inset 0 0 100px rgba(0,0,0,.8);display:table;font-family:"Open Sans",Arial,sans-serif}h1{font-family:inherit;font-weight:500;line-height:1.1;color:inherit;font-size:36px}h1 small{font-size:68%;font-weight:400;line-height:1;color:#777}a{text-decoration:none;color:#fff;font-size:inherit;border-bottom:dotted 1px #707070}.lead{color:silver;font-size:21px;line-height:1.4}.cover{display:table-cell;vertical-align:middle;padding:0 20px}footer{position:fixed;width:100%;height:40px;left:0;bottom:0;color:#a0a0a0;font-size:14px}</style>
+    </head>
+    <body>
+      <div class="cover">
+        <h1>Control Center <small>access denied</small></h1>
+        <p class="lead">
+          Access the Control Center using provider #{current_provider} not possible.<br>
+          Please login into GitHub or sign out to continue.</p>
+      </div>
+    </body>
+  </html>
+CC_ACCESS_DENIED
+
+  end
+end

data/lib/j1_app/j1_auth_manager/helpers.rb

@@ -0,0 +1,166 @@
+module J1App
+  module Helpers
+
+    def public_content?
+      return true if request.path_info == '/authentication'
+      return true if request.path_info == '/info'
+      return true if request.path_info == '/redirect_after_callback'
+      !!(J1App.public_content && J1App.public_content.match(request.path_info))
+    end
+
+    def redirect_whitelisted?(redirect)
+      return true if redirect == '/authentication'
+      return true if redirect == '/info'
+      return true if redirect == '/redirect_after_callback'
+      !!(J1App.public_content && J1App.public_content.match(redirect))
+    end
+
+    def authentication_enabled?
+      return J1App.auth?
+    end
+
+    def warden
+      env['warden']
+    end
+
+    def authenticate!(*args)
+      warden.authenticate!(*args)
+    end
+
+    def authenticated?(*args)
+      warden.authenticated?(*args)
+    end
+
+    def category_whitelisted?(*args)
+      whitelist, user  = *args
+      return true if whitelist.include? 'all'
+      return true if whitelist.include? user
+      return false
+    end
+
+    def payment_activated?(payment)
+      return true if payment.any?
+      return false
+    end
+
+    def payment_valid?(payment_info)
+      return true if payment_info.nil?
+      return false
+    end
+
+    def logout!
+      warden.logout
+    end
+
+    def has_umlaut? (str)
+      !!(str =~ /[öäüÖÄÜß]/)
+    end
+
+    # def log_info! (*args)
+    #   scope, func, text, details = *args
+    #
+    #   if details.nil?
+    #     message = sprintf( "[%-20s] [%-20s] %s", "#{scope} ", "#{func}", "#{text}" )
+    #   else
+    #     message = sprintf( "[%-20s] [%-20s] %s: %s", "#{scope} ", "#{func}", "#{text}", "#{details}" )
+    #   end
+    #   logger.info "#{message}"
+    # end
+    #
+    # def log_error! (*args)
+    #   scope, func, text, details = *args
+    #
+    #   if details.nil?
+    #     message = sprintf( "[%-20s] [%-20s] %s", "#{scope} ", "#{func}", "#{text}" )
+    #   else
+    #     message = sprintf( "[%-20s] [%-20s] %s: %s", "#{scope} ", "#{func}", "#{text}", "#{details}" )
+    #   end
+    #   logger.error "#{message}"
+    # end
+
+    # def authentication_strategy
+    #   if !ENV["GITHUB_TEAM_ID"].to_s.blank?
+    #     :team
+    #   elsif !ENV["GITHUB_TEAM_IDS"].to_s.blank?
+    #     :teams
+    #   elsif !ENV["GITHUB_ORG_NAME"].to_s.blank?
+    #     :org
+    #   elsif !ENV['GITHUB_MEMBERS'].to_s.blank?
+    #     :member
+    #   end
+    # end
+
+    # --------------------------------------------------------------------------
+    #  merge: merge two hashes (input <- hash)
+    #
+    #  Example:
+    #   {% assign nav_bar_options = nav_bar_default | merge: nav_bar_config %}
+    # --------------------------------------------------------------------------
+    def merge(input, hash)
+      unless input.respond_to?(:to_hash)
+        raise ArgumentError.new("merge filter requires hash arguments: arg_input")
+      end
+      # if hash to merge is NOT a hash or empty return first hash (input)
+      unless hash.respond_to?(:to_hash)
+        input
+      end
+      if hash.nil? || hash.empty?
+        input
+      else
+        merged = input.dup
+        hash.each do |k, v|
+          merged[k] = v
+        end
+        merged
+      end
+    end
+
+    # --------------------------------------------------------------------------
+    #  writeCookie: 
+    #
+    #  Example:
+    #   
+    # --------------------------------------------------------------------------
+    def writeCookie(name, data)
+      session_encoded = Base64.encode64(data)
+      response.set_cookie(
+          name,
+          domain: false,
+          value: session_encoded.to_s,
+          path: '/'
+      )
+    end
+
+    # --------------------------------------------------------------------------
+    #  readCookie: 
+    #
+    #  Example:
+    #   
+    # --------------------------------------------------------------------------
+    def readCookie(name)
+      if env['HTTP_COOKIE'].include? name
+        session_encoded = request.cookies[name]
+        session_decoded = Base64.decode64(session_encoded)
+        session_data = JSON.parse(session_decoded)
+        return session_data
+      else
+        return {}
+      end
+    end
+
+    # --------------------------------------------------------------------------
+    #  existsCookie? 
+    #
+    #  Example:
+    #   
+    # --------------------------------------------------------------------------
+    def existsCookie? (name)
+      if env['HTTP_COOKIE'].include? name
+        return true
+      else
+        return false
+      end
+    end
+
+  end # END helpers
+end # END module