mks_auth 1.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 7a19971c004cdf2626990b271aad7b31cf7e34b8
+  data.tar.gz: 8f8fab8db2e21550287d3587812aa474b3993c91
+SHA512:
+  metadata.gz: ed68674e71fbe258b766159790b33e6d1204587659678ab82c495218176c172fd6574169292c62efd6c94e9f727a88388f3b9d0ef106462c181d6146dda3092e
+  data.tar.gz: eac9332b341c7ab51e78b7d118cdc649ca9fba7571fbd600a03a726d6de1c7a72e3bc82182289a67303c20ef1cbc6f1fee57a61cdfe56d301747aad18fd3c44e

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2016 
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,28 @@
+# MksAuth
+Short description and motivation.
+
+## Usage
+How to use my plugin.
+
+## Installation
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'mks_auth'
+```
+
+And then execute:
+```bash
+$ bundle
+```
+
+Or install it yourself as:
+```bash
+$ gem install mks_auth
+```
+
+## Contributing
+Contribution directions go here.
+
+## License
+The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).

data/Rakefile

@@ -0,0 +1,37 @@
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rdoc/task'
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'MksAuth'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.md')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+APP_RAKEFILE = File.expand_path('../spec/dummy/Rakefile', __FILE__)
+
+load 'rails/tasks/engine.rake'
+
+load 'rails/tasks/statistics.rake'
+
+Bundler::GemHelper.install_tasks
+
+Dir[File.join(File.dirname(__FILE__), 'tasks/**/*.rake')].each {|f| load f }
+
+require 'bundler/gem_tasks'
+
+require 'rspec/core'
+
+require 'rspec/core/rake_task'
+
+desc 'Run all specs in spec directory (excluding plugin specs)'
+
+RSpec::Core::RakeTask.new(:spec => 'app:db:test:prepare')
+
+task :default => :spec

data/app/assets/config/mks_auth_manifest.js

@@ -0,0 +1,2 @@
+//= link_directory ../javascripts/mks_auth .js
+//= link_directory ../stylesheets/mks_auth .css

data/app/assets/javascripts/mks_auth/application.js

@@ -0,0 +1,13 @@
+// This is a manifest file that'll be compiled into application.js, which will include all the files
+// listed below.
+//
+// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
+// or any plugin's vendor/assets/javascripts directory can be referenced here using a relative path.
+//
+// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
+// compiled file. JavaScript code in this file should be added after the last require_* statement.
+//
+// Read Sprockets README (https://github.com/rails/sprockets#sprockets-directives) for details
+// about supported directives.
+//
+//= require_tree .

data/app/assets/stylesheets/mks_auth/application.css

@@ -0,0 +1,15 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or any plugin's vendor/assets/stylesheets directory can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the bottom of the
+ * compiled file so the styles you add here take precedence over styles defined in any other CSS/SCSS
+ * files in this directory. Styles in this file should be added after the last require_* statement.
+ * It is generally better to create a new file per style scope.
+ *
+ *= require_tree .
+ *= require_self
+ */

data/app/controllers/mks/auth/access_controller.rb

@@ -0,0 +1,51 @@
+require_dependency 'mks/auth/application_controller'
+
+module Mks
+  module Auth
+    class AccessController < ApplicationController
+      before_action :confirm_logged_in, :except => [:attempt_login, :logout, :menu, :csrf_token]
+
+      def csrf_token
+        cookies['XSRF-TOKEN'] = form_authenticity_token if protect_against_forgery?
+        render json: {success: true}
+      end
+
+      def attempt_login
+        code = Rails.configuration.app_code
+        app_module = ApplicationModule.find_by(code: code)
+        user = User.find_by(email: params[:email].downcase)
+
+        if user && user.application_module.id == app_module.id
+          if user.authenticate(params[:password])
+            login_user user
+            roles = user.roles.map(&:name)
+            response = { success: true, data: {user_id: user.id, user_full_name: user.full_name, roles: roles }}
+            render json: response
+          else
+            render json: {success: false, errors: "Invalid username or password"}
+          end
+        else
+          render json: {success: false, errors: "User doesn't exist or is not allowed!"}
+        end
+      end
+
+      def logout
+        logout_user if logged_in?
+        render json: { success: true }
+      end
+
+      def menu
+        render json: {success: true, data: fetch_menus}
+      end
+
+      def check_login
+        if session[:user_id]
+          user = User.find(session[:user_id])
+          render json: {success: true, data: user.full_name}
+        else
+          render json: {success: false}
+        end
+      end
+    end
+  end
+end

data/app/controllers/mks/auth/application_controller.rb

@@ -0,0 +1,25 @@
+module Mks
+  module Auth
+    class ApplicationController < ActionController::Base
+      include AccessHelper
+      include ApplicationHelper
+
+      private
+
+      def confirm_logged_in
+        if session[:user_id]
+          true
+        else
+          redirect_to '/'
+          false
+        end
+      end
+
+      protected
+
+      def verified_request?
+        super || valid_authenticity_token?(session, request.headers['X-XSRF-TOKEN'])
+      end
+    end
+  end
+end

data/app/controllers/mks/auth/application_modules_controller.rb

@@ -0,0 +1,60 @@
+require_dependency 'mks/auth/application_controller'
+
+module Mks
+  module Auth
+    class ApplicationModulesController < ApplicationController
+      before_action :set_application_module, only: [:show, :edit, :update, :destroy]
+
+      # GET /application_modules
+      def index
+        @application_modules = ApplicationModule.all
+      end
+
+      # GET /application_modules/new
+      def new
+        @application_module = ApplicationModule.new
+      end
+
+      # GET /application_modules/1/edit
+      def edit
+      end
+
+      # POST /application_modules
+      def create
+        @application_module = ApplicationModule.new(application_module_params)
+
+        if @application_module.save
+          redirect_to @application_module, notice: 'Application module was successfully created.'
+        else
+          render :new
+        end
+      end
+
+      # PATCH/PUT /application_modules/1
+      def update
+        if @application_module.update(application_module_params)
+          redirect_to @application_module, notice: 'Application module was successfully updated.'
+        else
+          render :edit
+        end
+      end
+
+      # DELETE /application_modules/1
+      def destroy
+        @application_module.destroy
+        redirect_to application_modules_url, notice: 'Application module was successfully destroyed.'
+      end
+
+      private
+      # Use callbacks to share common setup or constraints between actions.
+      def set_application_module
+        @application_module = ApplicationModule.find(params[:id])
+      end
+
+      # Only allow a trusted parameter "white list" through.
+      def application_module_params
+        params.require(:application_module).permit(:code, :name)
+      end
+    end
+  end
+end

data/app/controllers/mks/auth/user_roles_controller.rb

@@ -0,0 +1,52 @@
+require_dependency 'mks/auth/application_controller'
+
+module Mks
+  module Auth
+    class UserRolesController < ApplicationController
+      # before_action :confirm_logged_in
+
+      # GET /user_roles
+      def index
+        @user_roles = UserRole.all.order(:name)
+        response = { success: true, data: @user_roles }
+        render json: response
+      end
+
+      def get_assigned_roles
+        user = User.find(params[:user_id])
+        user_roles = UserRole.all.order(:name)
+        data = []
+        user_roles.each do |user_role|
+          item = {id: user_role.id, name: user_role.name}
+          if user.roles.include? user_role
+            item[:selected] = true
+          else
+            item[:selected] = false
+          end
+          data << item
+        end
+        response = { success: true, data: data }
+        render json: response
+      end
+
+      def assign_roles
+        user = User.find(params[:user_id])
+        roles = params[:roles]
+
+        roles.each do |role|
+          user_role = UserRole.find role[:id]
+          if role[:selected]
+            user.roles << user_role
+          else
+            user.roles.destroy user_role
+          end
+        end
+
+        user.save
+
+        response = { success: true, message: 'Role assignment successful!' }
+        render json: response
+      end
+    end
+  end
+end

data/app/controllers/mks/auth/users_controller.rb

@@ -0,0 +1,67 @@
+require_dependency 'mks/auth/application_controller'
+
+module Mks
+  module Auth
+    class UsersController < ApplicationController
+      before_action :set_user, only: [:update]
+
+      def index
+        @users = User.where(application_module_id: app_module.id)
+        response = { success: true, data: @users }
+        render json: response
+      end
+
+      def roles
+        user = User.find(session[:user_id])
+        data = user.roles.map { |role| {id: role.id, name: role.name} }
+        response = {success: true, data: data}
+        render json: response
+      end
+
+      def fetch_by_role
+        r = params[:role]
+        role = UserRole.find_by(name: r)
+        unless role
+          raise 'Role not found'
+        end
+        response = { success: true, data: role.users }
+        render json: response
+      end
+
+      def create
+        @user = User.new(user_params)
+        @user.application_module_id = app_module.id
+        if @user.save
+          response = { success: true, message: 'User saved successfully' }
+          render json: response
+        else
+          errors = Mks::Common::Util.error_messages @user, 'User'
+          response = { success: false, errors: errors }
+          render json: response
+        end
+      end
+
+      def update
+        if @user.update(user_params)
+          response = { success: true, message: 'User updated successfully' }
+          render json: response
+        else
+          errors = Mks::Common::Util.error_messages @user, 'User'
+          response = { success: false, errors: errors }
+          render json: response
+        end
+      end
+
+      private
+      # Use callbacks to share common setup or constraints between actions.
+      def set_user
+        @user = User.find(params[:id])
+      end
+
+      # Never trust parameters from the scary internet, only allow the white list through.
+      def user_params
+        params.require(:user).permit(:first_name, :last_name, :email, :password)
+      end
+    end
+  end
+end

data/app/helpers/mks/auth/access_helper.rb

@@ -0,0 +1,47 @@
+module Mks
+  module Auth
+    module AccessHelper
+      def login_user(user)
+        session[:user_id] = user.id
+      end
+
+      def current_user
+        @current_user ||= User.find_by(id: session[:user_id])
+      end
+
+      def logged_in?
+        !current_user.nil?
+      end
+
+      def logout_user
+        session.delete(:user_id)
+        @current_user = nil
+        @menus = nil
+      end
+
+      def fetch_menus
+        if @menus.nil?
+          roles = current_user.roles
+          app_module = current_user.application_module
+
+          @menus = []
+          roles.each do |role|
+            if role
+              menu_list = role.menus.where(:parent => nil, :application_module => app_module)
+              menu_list.each do |menu|
+                children = []
+                menu.children.order(:text).each do |child|
+                  if child.roles.include? role
+                    children << {'text': child.text, 'className': child.class_name, 'iconCls': child.icon_cls}
+                  end
+                end
+                @menus << {'text': menu.text, 'children': children, 'iconCls': menu.icon_cls}
+              end
+            end
+          end
+        end
+        @menus
+      end
+    end
+  end
+end

data/app/helpers/mks/auth/application_helper.rb

@@ -0,0 +1,10 @@
+module Mks
+  module Auth
+    module ApplicationHelper
+      def app_module
+        code = Rails.configuration.app_code
+        ApplicationModule.find_by(code: code)
+      end
+    end
+  end
+end