loyal_passport 0.0.1

data/app/controllers/loyal_passport/users/sessions_controller.rb

@@ -0,0 +1,119 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  class Users::SessionsController < Devise::SessionsController
+    include ::LoyalPassport::Controllers::UsersBasic
+
+    def new
+      self.resource = resource_class.new(sign_in_params)
+      self.resource.remember_me ||= true
+      clean_up_passwords(resource)
+      respond_with(resource, serialize_options(resource))
+    end
+
+    def create
+      super
+    end
+  end
+end
+
+#   prepend_before_filter :require_no_authentication, :only => [ :new, :create ]
+#   prepend_before_filter :allow_params_authentication!, :only => :create
+#   prepend_before_filter { request.env["devise.skip_timeout"] = true }
+# 
+#   # GET /resource/sign_in
+#   def new
+#     self.resource = resource_class.new(sign_in_params)
+#     clean_up_passwords(resource)
+#     respond_with(resource, serialize_options(resource))
+#   end
+# 
+#   # POST /resource/sign_in
+#   def create
+#     self.resource = warden.authenticate!(auth_options)
+#     set_flash_message(:notice, :signed_in) if is_navigational_format?
+#     sign_in(resource_name, resource)
+#     respond_with resource, :location => after_sign_in_path_for(resource)
+#   end
+# 
+#   # DELETE /resource/sign_out
+#   def destroy
+#     redirect_path = after_sign_out_path_for(resource_name)
+#     signed_out = (Devise.sign_out_all_scopes ? sign_out : sign_out(resource_name))
+#     set_flash_message :notice, :signed_out if signed_out && is_navigational_format?
+# 
+#     # We actually need to hardcode this as Rails default responder doesn't
+#     # support returning empty response on GET request
+#     respond_to do |format|
+#       format.all { head :no_content }
+#       format.any(*navigational_formats) { redirect_to redirect_path }
+#     end
+#   end
+# 
+#   protected
+# 
+#   def sign_in_params
+#     devise_parameter_sanitizer.for(:sign_in)
+#   end
+# 
+#   def serialize_options(resource)
+#     methods = resource_class.authentication_keys.dup
+#     methods = methods.keys if methods.is_a?(Hash)
+#     methods << :password if resource.respond_to?(:password)
+#     { :methods => methods, :only => [:password] }
+#   end
+# 
+#   def auth_options
+#     { :scope => resource_name, :recall => "#{controller_path}#new" }
+#   end
+
+
+# class Devise::SessionsController < DeviseController
+#   prepend_before_filter :require_no_authentication, :only => [ :new, :create ]
+#   prepend_before_filter :allow_params_authentication!, :only => :create
+#   prepend_before_filter { request.env["devise.skip_timeout"] = true }
+# 
+#   # GET /resource/sign_in
+#   def new
+#     resource = build_resource(nil, :unsafe => true)
+#     clean_up_passwords(resource)
+#     respond_with(resource, serialize_options(resource))
+#   end
+# 
+#   # POST /resource/sign_in
+#   def create
+#     resource = warden.authenticate!(auth_options)
+#     set_flash_message(:notice, :signed_in) if is_navigational_format?
+#     sign_in(resource_name, resource)
+#     respond_with resource, :location => after_sign_in_path_for(resource)
+#   end
+# 
+#   # DELETE /resource/sign_out
+#   def destroy
+#     redirect_path = after_sign_out_path_for(resource_name)
+#     signed_out = (Devise.sign_out_all_scopes ? sign_out : sign_out(resource_name))
+#     set_flash_message :notice, :signed_out if signed_out
+# 
+#     # We actually need to hardcode this as Rails default responder doesn't
+#     # support returning empty response on GET request
+#     respond_to do |format|
+#       format.any(*navigational_formats) { redirect_to redirect_path }
+#       format.all do
+#         head :no_content
+#       end
+#     end
+#   end
+# 
+#   protected
+# 
+#   def serialize_options(resource)
+#     methods = resource_class.authentication_keys.dup
+#     methods = methods.keys if methods.is_a?(Hash)
+#     methods << :password if resource.respond_to?(:password)
+#     { :methods => methods, :only => [:password] }
+#   end
+# 
+#   def auth_options
+#     { :scope => resource_name, :recall => "#{controller_path}#new" }
+#   end
+# end
+# 

data/app/controllers/loyal_passport/users/unlocks_controller.rb

@@ -0,0 +1,7 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  class Users::UnlocksController < Devise::UnlocksController
+    include ::LoyalPassport::Controllers::UsersBasic
+
+  end
+end

data/app/helpers/loyal_passport/admin/loyal_passport/assignments_helper.rb

@@ -0,0 +1,5 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  module Admin::LoyalPassport::AssignmentsHelper
+  end
+end

data/app/helpers/loyal_passport/admin/loyal_passport/roles_helper.rb

@@ -0,0 +1,5 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  module Admin::LoyalPassport::RolesHelper
+  end
+end

data/app/helpers/loyal_passport/admin/users_helper.rb

@@ -0,0 +1,5 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  module Admin::UsersHelper
+  end
+end

data/app/helpers/loyal_passport/application_helper.rb

@@ -0,0 +1,5 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  module ApplicationHelper
+  end
+end

data/app/helpers/loyal_passport/users/confirmations_helper.rb

@@ -0,0 +1,8 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  module Users::ConfirmationsHelper
+    include DeviseHelper
+
+  end
+end
+

data/app/helpers/loyal_passport/users/omniauth_callbacks_helper.rb

@@ -0,0 +1,8 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  module Users::OmniauthCallbacksHelper
+    include DeviseHelper
+
+  end
+end
+

data/app/helpers/loyal_passport/users/passwords_helper.rb

@@ -0,0 +1,8 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  module Users::PasswordsHelper
+    include DeviseHelper
+
+  end
+end
+

data/app/helpers/loyal_passport/users/registrations_helper.rb

@@ -0,0 +1,8 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  module Users::RegistrationsHelper
+    include DeviseHelper
+
+  end
+end
+

data/app/helpers/loyal_passport/users/sessions_helper.rb

@@ -0,0 +1,8 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  module Users::SessionsHelper
+    include DeviseHelper
+
+  end
+end
+

data/app/helpers/loyal_passport/users/unlocks_helper.rb

@@ -0,0 +1,8 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  module Users::UnlocksHelper
+    include DeviseHelper
+
+  end
+end
+

data/app/mailers/loyal_passport/users/mailer.rb

@@ -0,0 +1,6 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport::Users
+  class Mailer < ::Devise::Mailer
+
+  end
+end

data/app/models/ability.rb

@@ -0,0 +1,47 @@
+# -*- encoding : utf-8 -*-
+class Ability
+  include ::CanCan::Ability
+
+  def initialize(current_user)
+    # if user.roles?(:admin)
+    #   can :manage, :all
+    # end
+
+    current_user ||= ::User.new # guest user (not logged in)
+
+    # 如果用户是超级管理员
+    if current_user && current_user.super_admin?
+      can :manage, :all
+    end
+
+    # 执行
+    LoyalPassport.config.cancan_abilities.each do |ability|
+      if ability.is_a?(String)
+        ability.constantize.new self, current_user
+      end
+    end
+
+    # Define abilities for the passed in user here. For example:
+    #
+    #   user ||= User.new # guest user (not logged in)
+    #   if user.admin?
+    #     can :manage, :all
+    #   else
+    #     can :read, :all
+    #   end
+    #
+    # The first argument to `can` is the action you are giving the user permission to do.
+    # If you pass :manage it will apply to every action. Other common actions here are
+    # :read, :create, :update and :destroy.
+    #
+    # The second argument is the resource the user can perform the action on. If you pass
+    # :all it will apply to every resource. Otherwise pass a Ruby class of the resource.
+    #
+    # The third argument is an optional hash of conditions to further filter the objects.
+    # For example, here the user can only update published articles.
+    #
+    #   can :update, Article, :published => true
+    #
+    # See the wiki for details: https://github.com/ryanb/cancan/wiki/Defining-Abilities
+  end
+end

data/app/models/concerns/loyal_passport/homeworks_able.rb

@@ -0,0 +1,36 @@
+# -*- encoding : utf-8 -*-
+# include Concerns::LoyalPassport::HomeworksAble
+module Concerns
+  module LoyalPassport
+    module HomeworksAble
+      def self.included base
+        base.class_eval do
+          include InstanceMethods
+
+          extend ::LoyalCore::Memoist
+
+          memoize :homework?, :unhomework?, :homeworks_array
+        end
+      end
+
+      module InstanceMethods
+
+        def homework? job_name, name
+          !(unhomework? job_name, name)
+        end
+
+        def homeworks_array
+          self.homeworks.to_a
+        end
+
+        def unhomework? job_name, name
+          self.homeworks_array.find { |homework|
+            homework.job_name == job_name.to_s &&
+              homework.name == name.to_s
+          }.nil?
+        end
+
+      end
+    end
+  end
+end

data/app/models/loyal_passport/ability.rb

@@ -0,0 +1,20 @@
+# -*- encoding : utf-8 -*-
+class LoyalPassport::Ability
+  def initialize ability, current_user
+    #            屏蔽用户
+    ability.can [:review], [::User] do |user|
+      # 不是超级用户          当前用户有相应权限                        被管理的用户有相应的权限
+      user.not_super_admin? && current_user.homework?(:review, :user) && user.unhomework?(:review, :user)
+    end
+
+    ability.can [:destroy, :block], [::User] do |user|
+      ability.can?(:review, user)
+    end
+
+    # 能更新用户的信息
+    ability.can [:update], [::User] do |user|
+      (current_user.id == user.id) || ability.can?(:review, user)
+    end
+
+  end
+end

data/app/models/loyal_passport/assignment.rb

@@ -0,0 +1,10 @@
+# -*- encoding : utf-8 -*-
+class LoyalPassport::Assignment < ActiveRecord::Base
+  attr_accessible :user_id, :role_id
+
+  belongs_to :role, class_name: 'LoyalPassport::Role'
+  belongs_to :user, class_name: 'User'
+
+  validates :role, :user, :presence => true
+  validates_uniqueness_of :user_id, :scope => [:role_id]
+end

data/app/models/loyal_passport/homework.rb

@@ -0,0 +1,42 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  class Homework < ActiveRecord::Base
+    attr_accessible :name, :job_name
+
+    belongs_to :role, :class_name => "LoyalPassport::Role"
+    validates_uniqueness_of :role_id, :scope => [:name, :job_name]
+    validates_presence_of :role_id, :name, :job_name
+
+    self.acts_as_tiny_cached
+
+    validate do |r|
+      r.errors.add :job_name, '没有配置' unless r.authoritie_job_config?
+    end
+
+    def self.authoritie_configs
+      ::LoyalPassport.config.authoritie_configs
+    end
+
+    def authoritie_job_config
+      @authoritie_job_config ||= (
+        config = (
+          (
+            self.class.authoritie_configs[self.name] || {}
+          )[:jobs] || {}
+        )[self.job_name]
+
+        case config
+        when Hash
+          config
+        when String
+          {:desc => config}
+        end
+      )
+    end
+
+    def authoritie_job_config?
+      self.authoritie_job_config.is_a?(Hash)
+    end
+
+  end
+end

data/app/models/loyal_passport/locker.rb

@@ -0,0 +1,16 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  class Locker < ActiveRecord::Base
+    # attr_accessible :title, :body
+
+    LOCKER_ABLE_LEVEL_CONFIG = ::LoyalCore::ConfigUtil.new(
+      { :key => :nothing, :value => 0,    :desc => '不能操作' },
+      { :key => :read,    :value => 2**0, :desc => '读' },
+      { :key => :write,   :value => 2**1, :desc => '写' },
+      { :key => :delete,  :value => 2**2, :desc => '删' }
+    )
+
+    self.loyal_core_acts_as_bit_able :level, :config => LOCKER_ABLE_LEVEL_CONFIG
+
+  end
+end

data/app/models/loyal_passport/oauth_bind.rb

@@ -0,0 +1,6 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  class OauthBind < ActiveRecord::Base
+    # attr_accessible :title, :body
+  end
+end

data/app/models/loyal_passport/oauth_info.rb

@@ -0,0 +1,36 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  class OauthInfo < ActiveRecord::Base
+    # attr_accessible :title, :body
+    STRATEGY_MAP_CONFIG = {
+      :github     => { :value => 1, :name => 'Github' },
+      :qq_connect => { :value => 2, :name => "QQ"}
+    }.freeze
+
+    STRATEGY_VALUES = STRATEGY_MAP_CONFIG.values.map do |_config|
+      _config[:value]
+    end.freeze
+
+    validates_inclusion_of :strategy_flag, :in => STRATEGY_VALUES
+
+    def self.save_with_callback_info strategy_name, strategy_id, info={}
+      strategy_flag = STRATEGY_MAP_CONFIG[strategy_name.to_sym][:value]
+
+      oauth_info_scope = self.class.where(
+        :strategy_flag => strategy_flag,
+        :strategy_id   => strategy_id
+      )
+
+      oauth_info = oauth_info_scope.first || oauth_info_scope.new
+
+      oauth_info.access_token      = info['credentials']['token']
+      oauth_info.expired_at        = Time.at(info['credentials']['expires_at'].to_i)
+      oauth_info.origin_avatar_url = info['info']['avatar']
+      oauth_info.gender            = info['info']['gender']
+      oauth_info.nick_name         = info['info']['nick_name']
+
+      oauth_info.save
+    end
+
+  end
+end

data/app/models/loyal_passport/oauth_login.rb

@@ -0,0 +1,9 @@
+# -*- encoding : utf-8 -*-
+module LoyalPassport
+  class OauthLogin < ActiveRecord::Base
+    # attr_accessible :title, :body
+
+    def self.authorize
+    end
+  end
+end

data/app/models/loyal_passport/role.rb

@@ -0,0 +1,25 @@
+# -*- encoding : utf-8 -*-
+class LoyalPassport::Role < ActiveRecord::Base
+  include ::Concerns::LoyalPassport::HomeworksAble
+
+  attr_accessible :permalink, :name, :instroduction, :description, :user_ids
+
+  self.acts_as_tiny_cached
+
+  # 角色分类 ###################
+  has_many :assignments, class_name: 'LoyalPassport::Assignment',
+    :foreign_key => :role_id, :dependent => :destroy
+
+  has_many :users, :class_name => 'User',
+    :through => :assignments
+
+  has_many :homeworks, :class_name => 'LoyalPassport::Homework',
+    :dependent => :destroy
+
+  self.strip_whitespace_before_validation :permalink, :name
+
+  # 不能为空，且唯一
+  validates :permalink, :presence => true, :uniqueness => true
+  validates :name, :presence => true
+
+end

data/app/models/session.rb

@@ -0,0 +1,10 @@
+# -*- encoding : utf-8 -*-
+class Session < ActiveRecord::Base
+  def self.sweep(time = 1.hour)
+    if time.is_a?(String)
+      time = time.split.inject { |count, unit| count.to_i.send(unit) }
+    end
+ 
+    delete_all "updated_at < '#{time.ago.to_s(:db)}'"
+  end
+end

data/app/models/user.rb

@@ -0,0 +1,99 @@
+# -*- encoding : utf-8 -*-
+class User < ActiveRecord::Base
+  include ::Concerns::LoyalPassport::HomeworksAble
+
+  # PERMALINK_REGEXP  = /^[A-Za-z0-9\_]+$/.freeze
+  PERMALINK_REGEXP  = /^[A-Za-z0-9]+$/.freeze
+
+  # attr_accessible :title, :body
+  attr_accessible :nick_name, :true_name, :role_ids, :permalink
+
+  self.apply_simple_captcha :message => I18n.t('activerecord.errors.models.user.attributes.captcha.message')
+
+  self.acts_as_tiny_cached
+
+  # 软删除
+  self.acts_as_paranoid
+
+  # Include default devise modules. Others available are:
+  # :token_authenticatable, :confirmable,
+  # :lockable, :timeoutable and :omniauthable
+  devise :database_authenticatable,
+    :registerable,
+    :recoverable,
+    :rememberable,
+    :trackable,
+    :validatable,
+    :token_authenticatable,
+    :confirmable,
+    :lockable,
+    :timeoutable,
+    :omniauthable
+
+  # Setup accessible (or protected) attributes for your model
+  attr_accessible :email, :password, :password_confirmation, :remember_me
+
+  validates :nick_name, :presence => true, :uniqueness => true,
+    :length => {:minimum => 2, :maximum => 12}
+
+  # 岗位分配 ##################
+  has_many :assignments, class_name: 'LoyalPassport::Assignment',
+    foreign_key: :user_id
+
+  has_many :roles, class_name: 'LoyalPassport::Role',
+    through: :assignments
+
+  has_many :homeworks, :class_name => 'LoyalPassport::Homework',
+    :through => :roles
+
+  # 去除空格
+  self.strip_whitespace_before_validation :email, :nick_name, :true_name,
+    :mobile_number, :permalink
+
+  validates_format_of :permalink, :with => PERMALINK_REGEXP, :multiline => true
+  validates_length_of :permalink, :minimum => 3, :maximum => 12
+
+  # 头像
+  self.loyal_core_acts_as_has_avatar :avatar
+
+  def ability
+    @ability ||= ::Ability.new(self)
+  end
+
+  # eg: some_user.can? :update, @article
+  delegate :can?, :cannot?, :to => :ability
+
+  def roles?(*args)
+    options = args.extract_options!
+
+    self.super_admin? || self.roles.exists?({:permalink => args})
+  end
+
+  def super_admin?
+    ['happy'].include?(self.nick_name)
+  end
+
+  def not_super_admin?
+    !super_admin?
+  end
+
+  extend ::LoyalCore::Memoist
+
+  memoize :not_super_admin?, :super_admin?
+
+  class << self
+    # 能注销帐号吗？
+    def can_cancel_account?
+      false && ::LoyalPassport.config.logics[:open_account_cancel?]
+    end
+  end
+
+  def can_cancel_account?
+    self.class.can_cancel_account? && !(
+      self.super_admin?  # 不是超级管理员
+    )
+  end
+
+  protected
+
+end

data/app/views/layouts/loyal_passport/application.html.erb

@@ -0,0 +1,42 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html>
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
+<title><%= I18n.t('loyal_passport.name') %></title>
+<%= stylesheet_link_tag    "loyal_passport/application", :media => "all" %>
+<%= javascript_include_tag "loyal_passport/application" %>
+<%= csrf_meta_tags %>
+</head>
+<body>
+
+<div id='nav' class='clearfix'>
+  <div class='nav-inner wrapper'>
+      <div class='status'>
+        <%= render :partial => 'loyal_passport/users/shared/status' %>
+      </div>
+    </div>
+  </div>
+</div>
+
+<div id='container' class='clearfix'>
+  <div class='content-block wrapper clearfix'>
+    <% if user_signed_in? %>
+      <%= render :partial => 'loyal_passport/users/shared/nav' %>
+    <% end %>
+
+    <%= render :partial => 'loyal_passport/users/shared/flashes' %>
+
+    <div class='main-content clearfix'>
+      <%= yield %>
+    </div>
+
+    <div class='side-content clearfix'>
+      <%= yield :side %>
+    </div>
+  </div>
+</div>
+
+<%= render :partial => 'loyal_passport/users/shared/footer' %>
+
+</body>
+</html>

data/app/views/loyal_passport/admin/loyal_passport/assignments/_assignment.html.erb

@@ -0,0 +1,15 @@
+<li>
+  <% if assignment.user %>
+    <%= link_to "#{assignment.user.nick_name}", loyal_passport_app.admin_user_url(
+      :id => assignment.user.id
+    ) %>
+         <% end %>
+    (
+    <%= link_to '删除', loyal_passport_app.admin_loyal_passport_assignment_url(
+      :return_to => request.url,
+      :id => assignment.id
+    ), :method => :delete, :data => {
+      :confirm => '你确定要删除吗？'
+    } %>
+  )
+</li>

data/app/views/loyal_passport/admin/loyal_passport/roles/_form.html.erb

@@ -0,0 +1,5 @@
+<%= f.text_field :name %>
+<%= f.text_field :permalink %>
+<%= f.text_area :instroduction, :style => 'height: 100px;' %>
+<%= f.text_area :description, :style => 'height: 200px;' %>
+<%= f.submit %>

data/app/views/loyal_passport/admin/loyal_passport/roles/edit.html.erb

@@ -0,0 +1,18 @@
+<h1>编辑角色</h1>
+
+<%= form_for(
+  @loyal_passport_role,
+  :url => loyal_passport_app.admin_loyal_passport_role_url(:id => @loyal_passport_role.id),
+  :builder => ::LoyalCore::ActionView::LabeledBuilder,
+  :as => :loyal_passport_role
+) do |f| %>
+  <%= render :partial => 'form', :locals => { :f => f } %>
+<% end %>
+
+<div>
+  <%= link_to "返回列表", loyal_passport_app.admin_loyal_passport_roles_url %>
+  <%= link_to "取消", loyal_passport_app.admin_loyal_passport_role_url(
+    :id => @loyal_passport_role.id
+  ) %>
+</div>
+