janus 0.7.0 → 0.8.0

data/test/integration/users/sessions_test.rb

@@ -0,0 +1,18 @@
+require 'test_helper'
+
+class Users::SessionsTest < ActionDispatch::IntegrationTest
+  fixtures :all
+
+  test "sign in and out" do
+    visit new_user_session_path
+    fill_in 'user_email', :with => users(:julien).email
+    fill_in 'user_password', :with => 'secret'
+    find('input[name=commit]').click
+
+    assert_equal user_path, page.current_path
+    find('h1').has_content?('Welcome ' + users(:julien).email)
+
+    page.driver.submit :delete, destroy_user_session_path, {}
+    assert_equal root_path, page.current_path
+  end
+end

data/test/integration/users/token_authenticatable_test.rb

@@ -0,0 +1,42 @@
+require 'test_helper'
+
+class Users::TokenAuthenticatableTest < ActionDispatch::IntegrationTest
+  fixtures :all
+
+  setup do
+    @user = users(:julien)
+    @user.reset_authentication_token!
+  end
+
+  test "should sign user in from token" do
+    visit root_url(:auth_token => @user.authentication_token)
+    assert_authenticated
+  end
+
+  test "should not sign user with invalid token" do
+    visit root_url(:auth_token => 'unknown token')
+    assert_not_authenticated
+  end
+
+  test "should reuse token" do
+    Janus::Config.stub(:reusable_authentication_token, true) do
+      token = @user.authentication_token
+      visit root_url(:auth_token => token)
+      sign_out :user
+
+      visit root_url(:auth_token => token)
+      assert_authenticated
+    end
+  end
+
+  test "shouldn't reuse token" do
+    Janus::Config.stub(:reusable_authentication_token, false) do
+      token = @user.authentication_token
+      visit root_url(:auth_token => token)
+      sign_out :user
+
+      visit root_url(:auth_token => token)
+      assert_not_authenticated
+    end
+  end
+end

data/test/integration/users/trackable_test.rb

@@ -0,0 +1,22 @@
+require 'test_helper'
+
+class Users::TrackableTest < ActionDispatch::IntegrationTest
+  fixtures :all
+
+  test "should track user" do
+    current_sign_in_at = users(:julien).reload.current_sign_in_at
+    sign_in users(:julien)
+    assert_not_equal current_sign_in_at, users(:julien).reload.current_sign_in_at
+  end
+
+  test "remote authentication should not track user" do
+    sign_in users(:julien)
+
+    current_sign_in_at = users(:julien).reload.current_sign_in_at
+
+    visit root_url(:host => 'test.host')
+    click_link 'sign_in'
+
+    assert_equal current_sign_in_at, users(:julien).reload.current_sign_in_at
+  end
+end

data/test/rails_app/.gitignore

@@ -0,0 +1,4 @@
+.bundle
+db/*.sqlite3
+log/*.log
+tmp/

data/test/rails_app/Rakefile

@@ -0,0 +1,7 @@
+# Add your own tasks in files placed in lib/tasks ending in .rake,
+# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
+
+require File.expand_path('../config/application', __FILE__)
+require 'rake'
+
+RailsApp::Application.load_tasks

data/test/rails_app/app/controllers/admins/sessions_controller.rb

@@ -0,0 +1,11 @@
+class Admins::SessionsController < Janus::SessionsController
+  respond_to :html
+
+  def after_sign_in_url(admin)
+    root_url
+  end
+
+  # def valid_remote_host?(host)
+  #   ['www.example.com', 'test.host'].include?(host)
+  # end
+end

data/test/rails_app/app/controllers/application_controller.rb

@@ -0,0 +1,9 @@
+class ApplicationController < ActionController::Base
+  protect_from_forgery
+
+  helper_method :main_site_host
+
+  def main_site_host
+    'www.example.com'
+  end
+end

data/test/rails_app/app/controllers/blogs_controller.rb

@@ -0,0 +1,6 @@
+class BlogsController < ApplicationController
+  respond_to :html
+
+  def show
+  end
+end

data/test/rails_app/app/controllers/home_controller.rb

@@ -0,0 +1,4 @@
+class HomeController < ApplicationController
+  def index
+  end
+end

data/test/rails_app/app/controllers/users/confirmations_controller.rb

@@ -0,0 +1,3 @@
+class Users::ConfirmationsController < Janus::ConfirmationsController
+  respond_to :html
+end

data/test/rails_app/app/controllers/users/passwords_controller.rb

@@ -0,0 +1,3 @@
+class Users::PasswordsController < Janus::PasswordsController
+  respond_to :html
+end

data/test/rails_app/app/controllers/users/registrations_controller.rb

@@ -0,0 +1,17 @@
+class Users::RegistrationsController < Janus::RegistrationsController
+  respond_to :html
+
+  def after_sign_up_url(user)
+    user_url
+  end
+
+  def user_params
+    if params.respond_to?(:permit)
+      # Rails 4 (or Rails 3 + strong_parameters)
+      params.require(:user).permit(:email, :current_password, :password, :password_confirmation)
+    else
+      # Rails 3
+      params[:user].slice(:email, :current_password, :password, :password_confirmation)
+    end
+  end
+end

data/test/rails_app/app/controllers/users/sessions_controller.rb

@@ -0,0 +1,11 @@
+class Users::SessionsController < Janus::SessionsController
+  respond_to :html
+
+  def after_sign_in_url(user)
+    user_url
+  end
+
+  def valid_remote_host?(host)
+    ['www.example.com', 'test.host'].include?(host)
+  end
+end

data/test/rails_app/app/controllers/users_controller.rb

@@ -0,0 +1,9 @@
+class UsersController < ApplicationController
+  before_filter :authenticate_user!
+
+  respond_to :html, :xml
+
+  def show
+    respond_with(current_user)
+  end
+end

data/test/rails_app/app/helpers/application_helper.rb

@@ -0,0 +1,2 @@
+module ApplicationHelper
+end

data/test/rails_app/app/mailers/user_mailer.rb

@@ -0,0 +1,3 @@
+class UserMailer < Janus::Mailer
+  default from: 'me@example.com'
+end

data/test/rails_app/app/models/admin.rb

@@ -0,0 +1,3 @@
+class Admin < ActiveRecord::Base
+  include Janus::Models::DatabaseAuthenticatable
+end

data/test/rails_app/app/models/remote_token.rb

@@ -0,0 +1,6 @@
+class RemoteToken < ActiveRecord::Base
+  include Janus::Models::RemoteToken
+
+  belongs_to :user
+  validates_presence_of :user
+end

data/test/rails_app/app/models/user.rb

@@ -0,0 +1,8 @@
+class User < ActiveRecord::Base
+  include Janus::Models::DatabaseAuthenticatable
+  include Janus::Models::Confirmable
+  include Janus::Models::Rememberable
+  include Janus::Models::RemoteAuthenticatable
+  include Janus::Models::TokenAuthenticatable
+  include Janus::Models::Trackable
+end

data/test/rails_app/app/views/admins/sessions/new.html.erb

@@ -0,0 +1,30 @@
+<h1><%= t 'janus.sessions.new.sign_in' %></h1>
+
+<%= form_for @admin, :url => admin_session_path, :method => :post do |f| %>
+  <%= hidden_field_tag :return_to, params[:return_to] if params[:return_to] %>
+
+  <%= janus_error_messages %>
+
+  <% Admin.authentication_keys.each do |key| %>
+    <div class="field">
+      <%= f.label key %>
+      <%= f.text_field key %>
+    </div>
+  <% end %>
+
+  <div class="field">
+    <%= f.label :password %>
+    <%= f.password_field :password %>
+  </div>
+
+  <% if @admin.respond_to?(:remember_me!) %>
+    <div class="field">
+      <%= check_box_tag :remember_me, '1' %>
+      <%= label_tag :remember_me, Admin.human_attribute_name(:remember_me) %>
+    </div>
+  <% end %>
+
+  <div class="actions">
+    <%= f.submit t('janus.sessions.new.sign_in_btn') %>
+  </div>
+<% end %>

data/test/rails_app/app/views/blogs/show.html.erb

@@ -0,0 +1,2 @@
+<h1>Blog</h1>
+

data/test/rails_app/app/views/home/index.html.erb

@@ -0,0 +1,2 @@
+<h1>Home</h1>
+

data/test/rails_app/app/views/layouts/application.html.erb

@@ -0,0 +1,28 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Janus</title>
+  <%= stylesheet_link_tag :all %>
+  <%= javascript_include_tag :defaults %>
+  <%= csrf_meta_tag %>
+</head>
+<body>
+
+<header>
+  <p>Janus</p>
+  
+  <p class="user">
+    <% if user_signed_in? %>
+      <%= link_to current_user.email, user_url(:host => main_site_host), :id => 'my_page' %>
+    <% else %>
+      <%= link_to 'Sign in',
+        new_user_session_url(:host => main_site_host, :return_to => request.url),
+        :id => 'sign_in' %>
+    <% end %>
+  </p>
+</header>
+
+<%= yield %>
+
+</body>
+</html>

data/test/rails_app/app/views/user_mailer/confirmation_instructions.html.erb

@@ -0,0 +1,7 @@
+<p><%= t('janus.mailer.hello') %><p>
+
+<p><%= t('janus.mailer.confirmation_instructions.confirm') %></p>
+
+<p><%= link_to t('janus.mailer.confirmation_instructions.confirm_my_account'),
+  user_confirmation_url(@user.class.confirmation_key => @user.confirmation_token) %></p>
+

data/test/rails_app/app/views/user_mailer/confirmation_instructions.text.erb

@@ -0,0 +1,7 @@
+<%= t('janus.mailer.hello') %>
+
+<%= t('janus.mailer.confirmation_instructions.confirm') %>
+
+<%= link_to t('janus.mailer.confirmation_instructions.confirm_my_account'),
+  user_confirmation_url(@user.class.confirmation_key => @user.confirmation_token) %>
+

data/test/rails_app/app/views/user_mailer/reset_password_instructions.html.erb

@@ -0,0 +1,9 @@
+<p><%= t('janus.mailer.hello') %><p>
+
+<p><%= t('janus.mailer.reset_password_instructions.infos') %></p>
+
+<p><%= link_to t('janus.mailer.reset_password_instructions.change_password_link'),
+  edit_user_password_url(:token => @user.reset_password_token) %></p>
+
+<p><%= t('janus.mailer.reset_password_instructions.please_ignore_your_password_wont_change') %></p>
+

data/test/rails_app/app/views/user_mailer/reset_password_instructions.text.erb

@@ -0,0 +1,7 @@
+<%= t('janus.mailer.hello') %>
+
+<%= t('janus.mailer.reset_password_instructions.infos') %>
+<%= edit_user_password_url(:token => @user.reset_password_token) %>
+
+<%= t('janus.mailer.reset_password_instructions.please_ignore_your_password_wont_change') %>
+

data/test/rails_app/app/views/users/confirmations/new.html.erb

@@ -0,0 +1,16 @@
+<h1><%= t 'janus.confirmations.new.resend_confirmation_instructions' %></h1>
+
+<%= form_for resource, :url => confirmation_path(janus_scope), :method => :post do |f| %>
+  <%= janus_error_messages %>
+
+  <% resource.class.authentication_keys.each do |key| %>
+    <div class="field">
+      <%= f.label key %>
+      <%= f.text_field key %>
+    </div>
+  <% end %>
+
+  <div class="actions">
+    <%= f.submit t('janus.confirmations.new.send_instructions_btn') %>
+  </div>
+<% end %>

data/test/rails_app/app/views/users/passwords/edit.html.erb

@@ -0,0 +1,21 @@
+<h1><%= t 'janus.passwords.edit.change_password' %></h1>
+
+<%= form_for resource, :url => password_path(janus_scope), :method => :put do |f| %>
+  <%= janus_error_messages %>
+
+  <%= f.hidden_field :reset_password_token %>
+
+  <div class="field">
+    <%= f.label :password %>
+    <%= f.password_field :password %>
+  </div>
+
+  <div class="field">
+    <%= f.label :password_confirmation %>
+    <%= f.password_field :password_confirmation %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit t('janus.passwords.edit.change_password_btn') %>
+  </div>
+<% end %>

data/test/rails_app/app/views/users/passwords/new.html.erb

@@ -0,0 +1,16 @@
+<h1><%= t 'janus.passwords.new.forgot_password' %></h1>
+
+<%= form_for resource, :url => password_path(janus_scope), :method => :post do |f| %>
+  <%= janus_error_messages %>
+
+  <% resource_class.authentication_keys.each do |key| %>
+    <div class="field">
+      <%= f.label key %>
+      <%= f.text_field key %>
+    </div>
+  <% end %>
+
+  <div class="actions">
+    <%= f.submit t('janus.passwords.new.send_instructions_btn') %>
+  </div>
+<% end %>

data/test/rails_app/app/views/users/registrations/edit.html.erb

@@ -0,0 +1,31 @@
+<h1><%= t 'janus.registrations.edit.my_account' %></h1>
+
+<%= form_for resource, :url => registration_path(janus_scope), :method => :put do |f| %>
+  <%= janus_error_messages %>
+
+  <% resource_class.authentication_keys.each do |key| %>
+    <div class="field">
+      <%= f.label key %>
+      <%= f.text_field key %>
+    </div>
+  <% end %>
+
+  <div class="field">
+    <%= f.label :current_password %>
+    <%= f.password_field :current_password %>
+  </div>
+
+  <div class="field">
+    <%= f.label :password %>
+    <%= f.password_field :password %>
+  </div>
+
+  <div class="field">
+    <%= f.label :password_confirmation %>
+    <%= f.password_field :password_confirmation %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit t('janus.registrations.edit.save_changes_btn') %>
+  </div>
+<% end %>

data/test/rails_app/app/views/users/registrations/new.html.erb

@@ -0,0 +1,26 @@
+<h1><%= t 'janus.registrations.new.sign_up' %></h1>
+
+<%= form_for resource, :url => registration_path(janus_scope) do |f| %>
+  <%= janus_error_messages %>
+
+  <% resource_class.authentication_keys.each do |key| %>
+    <div class="field">
+      <%= f.label key %>
+      <%= f.text_field key %>
+    </div>
+  <% end %>
+
+  <div class="field">
+    <%= f.label :password %>
+    <%= f.password_field :password %>
+  </div>
+
+  <div class="field">
+    <%= f.label :password_confirmation %>
+    <%= f.password_field :password_confirmation %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit t('janus.registrations.new.sign_up_btn') %>
+  </div>
+<% end %>