lockbox_middleware 1.2.0 → 1.2.1

data/app/helpers/partners_helper.rb

@@ -0,0 +1,2 @@
+module PartnersHelper
+end

data/app/models/partner.rb

@@ -0,0 +1,129 @@
+class Partner < ActiveRecord::Base
+  
+  class CredentialStore
+    def [](access_key_id)
+      p = Partner.find_by_slug(access_key_id)
+      p.api_key if p
+    end
+  end
+  
+  acts_as_authentic do |c|
+    c.maintain_sessions = false
+  end
+  
+  include RFC822
+  validates_presence_of :phone_number, :name, :organization, :email
+  validates_presence_of :api_key, :on => :update
+  validates_format_of :email, :with => EmailAddressRegularExpression
+  validates_uniqueness_of :api_key, :slug
+  
+  before_create :create_api_key, :create_slug
+  
+  MAX_RESPONSE_CACHE_TIME = 1.hour
+  
+  def self.credential_store
+    @cr ||= CredentialStore.new
+  end
+  
+  def max_response_cache_time
+    MAX_RESPONSE_CACHE_TIME
+  end
+  
+  def phone_number
+    (self.attributes["phone_number"] || "").to_phone(:area_code => true)
+  end
+  
+  def phone_number=(_phone_number)
+    @attributes["phone_number"] = _phone_number.to_s.gsub(/[^0-9]+/, '')
+  end
+  
+  def cache_key
+    cache_timestamp = 1.hour.until(Time.at(max_requests_reset_time)).strftime("%m%d%y_%H")
+    "#{Time.now.strftime("#{api_key}_#{cache_timestamp}")}"
+  end
+  
+  def self.find_and_authenticate(api_key)
+    p = Partner.find_by_api_key(api_key)
+    auth = authenticate(p).authorized
+    {:partner => p, :authorized => auth, :may_cache => p.max_requests.blank?}
+  end
+
+  def self.authenticate(p)
+    if p.is_a?(String)
+      p = find_by_api_key(p)
+    end
+    if p
+      p.increment_request_count
+    else
+      p = new
+    end
+    p
+  end
+  
+  def current_request_count
+    count = Rails.cache.read(cache_key, :raw => true)
+    if count.nil?
+      count = 0
+      Rails.cache.write(cache_key, count, :raw => true)
+    end
+    count.to_i
+  end
+
+  def max_requests_reset_time
+    1.hour.since(Time.parse(Time.now.strftime("%Y-%m-%d %H:00:00"))).to_i
+  end
+
+  def unlimited?
+    max_requests.blank?
+  end
+  
+  def requests_remaining
+    max_requests.blank? ? nil : max_requests - current_request_count
+  end
+  
+  def increment_request_count
+    ret = Rails.cache.increment(cache_key)
+    if ret.nil?
+      ret = 1
+      Rails.cache.write(cache_key, ret, :raw => true)
+    end
+    ret.to_i
+  end
+  
+  def authorized
+    return false unless id
+    if unlimited?
+      true
+    elsif requests_remaining > 0
+      true
+    else
+      false
+    end
+  end
+  
+  private
+  
+  def secure_digest(*args)
+    Digest::SHA1.hexdigest(args.flatten.join('--'))
+  end
+  
+  def make_api_key
+    secure_digest(Time.now, (1..10).map{ rand.to_s })
+  end
+  
+  def create_api_key
+    write_attribute :api_key, make_api_key
+  end
+  
+  def make_slug
+    if !organization.blank?
+      organization.parameterize
+    else
+      name.parameterize
+    end
+  end
+  
+  def create_slug
+    write_attribute :slug, make_slug
+  end
+end

data/app/models/partner_mailer.rb

@@ -0,0 +1,25 @@
+class PartnerMailer < ActionMailer::Base
+  
+  def confirmation(partner)
+    set_host
+    recipients partner.email
+    from "test@foo.org"
+    subject "Partner Account Confirmation"
+    body :partner => partner
+  end
+  
+  def fetch_password(partner)
+    set_host
+    recipients partner.email
+    from "test@foo.org"
+    subject "Fetch Password"
+    body :partner => partner
+  end
+  
+  private
+  
+  def set_host
+    default_url_options[:host] = App[:host]
+  end
+
+end

data/app/models/partner_session.rb

@@ -0,0 +1,2 @@
+class PartnerSession < Authlogic::Session::Base
+end

data/app/views/admin/show.html.erb

@@ -0,0 +1,6 @@
+
+<div id="admin">
+  <ul>
+    <li><%= link_to 'Partners', admin_partners_path %></li>
+  </ul>
+</div>

data/app/views/authentication/four_two_oh.html.erb

@@ -0,0 +1,4 @@
+<div class="dialog">
+  <h1>Too many requests per hour.</h1>
+  <p>You have been rate limited. Please try again after <%= Time.at(@partner.max_requests_reset_time).strftime("%I:%M:%S %p %Z") %>.</p>
+</div>

data/app/views/fetch_password/index.html.erb

@@ -0,0 +1,4 @@
+<% form_for @partner, :url => singular_fetch_password_path do |p| %>
+  <%= p.text_field :email, :label => "Email" %>
+  <%= submit_tag "Fetch" %>
+<% end %>

data/app/views/fetch_password/show.html.erb

@@ -0,0 +1,6 @@
+<%= error_messages_for :partner %>
+<% form_for @partner || current_user, :url => singular_fetch_password_path, :html => { :method => :put } do |p| %>
+  <%= p.password_field :password, :label => "Password" %>
+  <%= p.password_field :password_confirmation, :label => "Password Confirmation" %>
+  <%= submit_tag "Update" %>
+<% end %>

data/app/views/home/show.html.erb

@@ -0,0 +1,20 @@
+<h1 class="title">API Services</h1>
+
+<p>
+  Lockbox is an infrastructure for managing partner access to our API services.   
+</p>
+
+<% if current_user %>
+  <div>
+    Access your <%= link_to 'Partner Page', partner_path(current_user.api_key) %>. 
+  </div>
+<% else %>
+  <div style="float:left; padding:20px;">
+    <h3><%= link_to 'Login', login_path %></h3>
+    To access information on your API key
+  </div>
+  <div style="float:left; padding:20px;">
+    <h3><%= link_to 'Signup', signup_path %></h3>
+    To get access to API services
+  </div>
+<% end %>

data/app/views/layouts/admin.html.erb

@@ -0,0 +1,42 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
+       "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta http-equiv="content-type" content="text/html;charset=UTF-8" />
+  <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js" type="text/javascript"></script> 
+  <%= javascript_include_merged :admin %>
+  <%= active_scaffold_includes %>
+
+  <title><%= APP_TITLE %></title>
+  <%= stylesheet_link_merged :admin %>
+  <!--[if IE]>
+  <%= stylesheet_link_merged :ie %>
+  <![endif]-->
+</head>
+<body>
+  <div id="container" class="container">
+    <div id="left" class="span-4">
+    </div>
+    <div id="center" class="span-24">
+      <div id="header" class="span-24 last">
+        <%= render :partial => "shared/header" %>
+      </div>
+      <div id="main" class="span-24 last">
+        <%= yield %>
+      </div>
+      <div id="main_bottom" class="span-24 last">
+        <div id="main_bottom_left">
+        </div>
+        <div id="main_bottom_right">
+        </div>
+      </div>
+      <div id="footer" class = "span-24 last">
+        <%= render :partial => "shared/footer" %>
+      </div>
+    </div>
+    <div id="right" class="span-4 last">
+    </div>
+  </div>
+</body>
+</html>

data/app/views/layouts/application.html.erb

@@ -0,0 +1,48 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
+       "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+  <meta http-equiv="content-type" content="text/html;charset=UTF-8" />
+  <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js" type="text/javascript"></script> 
+  <%= javascript_include_merged :application %>
+  <title><%= APP_TITLE %></title>
+  <%= stylesheet_link_merged :application %>
+  <!--[if IE]>
+  <%= stylesheet_link_merged :ie %>
+  <![endif]-->
+</head>
+<body>
+  <div id="container" class="container">
+    <div id="left" class="span-4">
+    </div>
+    <div id="center" class="span-24">
+      <div id="header" class="span-24 last">
+        <%= render :partial => "shared/header" %>
+      </div>
+      <div id="main" class="span-24 last">
+        <div id="session_header">
+          <%= session_header %>
+        </div>
+        <div id="flash">
+          <%= flash_helper %>
+        </div>
+        <div class="content-wrapper">
+          <%= yield %>
+        </div>
+      </div>
+      <div id="main_bottom" class="span-24 last">
+        <div id="main_bottom_left">
+        </div>
+        <div id="main_bottom_right">
+        </div>
+      </div>
+      <div id="footer" class = "span-24 last">
+        <%= render :partial => "shared/footer" %>
+      </div>
+    </div>
+    <div id="right" class="span-4 last">
+    </div>
+  </div>
+</body>
+</html>

data/app/views/partner_mailer/confirmation.text.html.erb

@@ -0,0 +1,30 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html>
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+  <title><%= App[:title] %></title>
+</head>
+<body>
+
+  <table width="700" cellpadding="0" cellspacing="0" align="center" bgcolor="#ffffff">
+    <tr>
+      <td style="padding:0px 50px;">
+        <table width="600" cellpadding="0" cellspacing="0" align="center" bgcolor="#ffffff">
+          <tr>
+            <td style="padding:10px;font-size:12px;font-family:Arial, Helvetica,Verdana,sans-serif;">
+              Welcome!
+              <br/>
+              <br/>
+              You need to confirm your email address before you can use this site:
+              <br/>
+
+              <%= link_to "#{root_url}confirm/#{@partner.perishable_token}", "#{root_url}confirm/#{@partner.perishable_token}" %>
+
+            </td>
+          </tr>
+        </table>
+      </td>
+    </tr>
+  </table>
+</body>
+</html>

data/app/views/partner_mailer/confirmation.text.plain.erb

@@ -0,0 +1,5 @@
+Welcome!
+
+You need to confirm your email address before you can use this site:
+          
+<%=  "#{root_url}confirm/#{@partner.perishable_token}" %>

data/app/views/partner_mailer/fetch_password.text.html.erb

@@ -0,0 +1,32 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html>
+<head>
+  <meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
+  <title><%= App[:title] %></title>
+</head>
+<body>
+
+  <table width="700" cellpadding="0" cellspacing="0" align="center" bgcolor="#ffffff">
+    <tr>
+      <td style="padding:0px 50px;">
+        <table width="600" cellpadding="0" cellspacing="0" align="center" bgcolor="#ffffff">
+          <tr>
+            <td style="padding:10px;font-size:12px;font-family:Arial, Helvetica,Verdana,sans-serif;">
+
+              Someone requested a new password for your API credentials account:
+              <br/>
+
+              <%= link_to fetch_password_url(:id => @partner.perishable_token), fetch_password_url(:id => @partner.perishable_token) %>
+              <br/>
+              <br/>
+
+              If you did not request a password change, you may ignore this message.
+
+            </td>
+          </tr>
+        </table>
+      </td>
+    </tr>
+  </table>
+</body>
+</html>

data/app/views/partner_mailer/fetch_password.text.plain.erb

@@ -0,0 +1,5 @@
+Someone requested a new password for your API credentials account:
+
+<%= url_for(fetch_password_url(:id => @partner.perishable_token)) %>
+
+If you did not request a password change, you may ignore this message. 

data/app/views/partner_sessions/new.html.erb

@@ -0,0 +1,9 @@
+<% form_for @partner_session do |p| %>
+  <%= p.text_field :email %>
+  <%= p.password_field :password %>
+  <%= submit_tag "Login" %>
+<% end %>
+
+  <p>
+    <%= link_to "Did you forget your password?", fetch_password_index_path %>
+  </p>

data/app/views/partners/_form.html.erb

@@ -0,0 +1,7 @@
+  <%= f.text_field :name %>
+  <%= f.text_field :phone_number %>
+  <%= f.text_field :email %>
+  <%= f.text_field :organization %>
+  <%= f.password_field :password %>
+  <%= f.password_field :password_confirmation %>
+  <%= f.submit submit_name %>

data/app/views/partners/edit.html.erb

@@ -0,0 +1,5 @@
+<%= error_messages_for :partner %>
+
+<% form_for @partner, :url => partner_path, :html => { :method => :put } do |f| %>
+  <%= render :partial => 'form', :locals => { :f => f, :submit_name => "Update" } %>
+<% end %>

data/app/views/partners/new.html.erb

@@ -0,0 +1,6 @@
+<h1>New Partner</h1>
+<%= error_messages_for :partner %>
+
+<% form_for @partner do |f| %>
+  <%= render :partial => 'form', :locals => { :f => f, :submit_name => "Save" } %>
+<% end %>

data/app/views/partners/show.html.erb

@@ -0,0 +1,48 @@
+<h1><%= @partner.name %></h1>
+
+
+<table class="pretty-table">
+  <thead>
+    <tr>
+      <th>Property</th>
+      <th>Value</th>
+    </tr>
+  </thead>
+
+  <tr>
+    <td>API Key</td>
+    <td><%= @partner.api_key %></td>
+  </tr>
+  <tr class="odd">
+    <td>Unlimited Key</td>
+    <td><%= @partner.unlimited? ? 'Yes' : 'No' %></td>
+  </tr>
+  <tr>
+    <td>Organization</td>
+    <td><%= @partner.organization %></td>
+  </tr>
+  <tr class="odd">
+    <td>Phone Number</td>
+    <td><%= @partner.phone_number %></td>
+  </tr>
+
+  <tr>
+    <td>Email</td>
+    <td><%= @partner.email %></td>
+  </tr>
+
+  <% if !@partner.unlimited? %>
+    <tr class="odd">
+      <td>Requests Left this Hour</td>
+      <td><%= @partner.unlimited? ?  'No Limit' : @partner.requests_remaining %></td>
+    </tr>
+    <tr>
+      <td>Requests Allowed Per Hour</td>
+      <td><%=@partner.max_requests %></td>
+    </tr>
+    <tr class="odd">
+      <td>Rate Limit Reset Time</td>
+      <td><%=Time.at(@partner.max_requests_reset_time)%></td>
+    </tr>
+  <% end %> 
+</table>