mno-enterprise-api 2.0.0

data/app/controllers/mno_enterprise/jpi/v1/marketplace_controller.rb

@@ -0,0 +1,22 @@
+module MnoEnterprise
+  class Jpi::V1::MarketplaceController < ApplicationController
+    respond_to :json
+
+    # GET /mnoe/mnoe/jpi/v1/marketplace
+    def index
+      @apps = if MnoEnterprise.marketplace_listing
+        MnoEnterprise::App.where('nid.in' => MnoEnterprise.marketplace_listing).to_a
+      else
+        MnoEnterprise::App.all.to_a
+      end
+
+      @categories = MnoEnterprise::App.categories(@apps)
+      @categories.delete('Most Popular')
+    end
+
+    # GET /mnoe/jpi/v1/marketplace/1
+    def show
+      @app = MnoEnterprise::App.find(params[:id])
+    end
+  end
+end

data/app/controllers/mno_enterprise/jpi/v1/organizations_controller.rb

@@ -0,0 +1,5 @@
+module MnoEnterprise
+  class Jpi::V1::OrganizationsController < Jpi::V1::BaseResourceController
+    include MnoEnterprise::Concerns::Controllers::Jpi::V1::OrganizationsController
+  end
+end

data/app/controllers/mno_enterprise/jpi/v1/shopping_cart_controller.rb

@@ -0,0 +1,93 @@
+module MnoEnterprise
+  class Jpi::V1::ShoppingCartController < ApplicationController
+    # before_filter :authenticate_user!, except: [:apps]
+    # before_filter :inject_cart_and_authorize, only: [:show,:upsert_item,:remove_item,:checkout]
+    #
+    # # When a user signs in from the shopping
+    # # cart, the CSRF token seems to change therefore
+    # # preventing any POST request later on
+    # # TODO: We should be able to grab the new CSRF token on
+    # # login and inject it in angular
+    # skip_before_filter :verify_authenticity_token
+    #
+    # # GET /mnoe/jpi/v1/shopping_cart/apps
+    # # params:
+    # # - ensure_apps: [{ app: {id: 16 } }] (as string) -- ensure that some apps are present in the list
+    # def apps
+    #   @apps = App.active.to_a
+    #
+    #   if params[:ensure_apps].present?
+    #     begin
+    #       id_list = JSON.parse(params[:ensure_apps]).map { |h| (h['app']||{})['id'] }.compact
+    #       @apps += App.where(id: id_list).to_a
+    #       @apps.uniq!
+    #     rescue
+    #     end
+    #   end
+    #
+    #   @apps.sort! { |a,b| a.name <=> b.name }
+    #
+    #   render json: @apps.map { |a| Shopping::Cart.hash_for_app(a) }
+    # end
+    #
+    # # GET /mnoe/jpi/v1/shopping_cart/organizations
+    # def organizations
+    #   @orgs = Organization.accessible_by(Ability.new(current_user)).sort_by { |o| o.name }
+    # end
+    #
+    # # GET /mnoe/jpi/v1/shopping_cart/1
+    # def show
+    # end
+    #
+    # # POST /mnoe/jpi/v1/shopping_cart
+    # # TODO: add test for bundle parameter on create
+    # def create
+    #   organization = Organization.find(params[:shopping_cart][:organization_id])
+    #   bundle = params[:shopping_cart][:bundle]
+    #   authorize! :purchase, organization
+    #
+    #   @cart = Shopping::Cart.create(requestor: current_user, beneficiary: organization, bundle: bundle)
+    #
+    #   render 'show'
+    # end
+    #
+    # # PUT /mnoe/jpi/v1/shopping_cart/1/upsert_item
+    # def upsert_item
+    #   @item = @cart.add_item!(params[:item])
+    #   render 'show_item'
+    # end
+    #
+    # # PUT /mnoe/jpi/v1/shopping_cart/1/remove_item
+    # def remove_item
+    #   @item = @cart.remove_item!(params[:item])
+    #   render 'show_item'
+    # end
+    #
+    # # PUT /mnoe/jpi/v1/shopping_cart/1/checkout
+    # def checkout
+    #   if @cart.checkout!(params[:credit_card])
+    #     render 'show'
+    #   else
+    #     render json: @cart.errors, status: :bad_request
+    #   end
+    #
+    # end
+    #
+    # #============================================
+    # # Private Methods
+    # #============================================
+    # private
+    #   # Inject @cart and authorize access
+    #   # TODO: use CanCan for authorization
+    #   def inject_cart_and_authorize
+    #     @cart = Shopping::Cart.find(params[:id])
+    #
+    #     unless @cart.requestor == current_user
+    #       render json: { errors: 'unauthorized' }, status: :unauthorized
+    #       return false
+    #     end
+    #
+    #     return true
+    #   end
+  end
+end

data/app/controllers/mno_enterprise/jpi/v1/teams_controller.rb

@@ -0,0 +1,88 @@
+# This controller uses nesting (under organizations) and shallow routes
+module MnoEnterprise
+  class Jpi::V1::TeamsController < Jpi::V1::BaseResourceController
+    respond_to :json
+
+    # GET /mnoe/jpi/v1/organizations/:organization_id/teams
+    def index
+      authorize! :read, parent_organization
+      @teams = parent_organization.teams
+    end
+
+    # GET /mnoe/jpi/v1/teams/:id
+    def show
+      @team = MnoEnterprise::Team.find(params[:id])
+      authorize! :read, @team.organization
+    end
+
+    # POST /mnoe/jpi/v1/organizations/:organization_id/teams
+    def create
+      authorize! :manage_teams, parent_organization
+      @team = parent_organization.teams.create(team_params)
+
+      render 'show'
+    end
+
+    # PUT /mnoe/jpi/v1/teams/:id
+    def update
+      @team = MnoEnterprise::Team.find(params[:id])
+      authorize! :manage_teams, @team.organization
+
+      # Update regular attributes
+      @team.update_attributes(team_params)
+
+      # # Update permissions
+      if params[:team] && params[:team][:app_instances]
+        list = params[:team][:app_instances].select { |e| e != {} }
+        @team.set_access_to(list)
+      end
+
+      render 'show'
+    end
+
+    # PUT /mnoe/jpi/v1/teams/:id/add_users
+    def add_users
+      @team = MnoEnterprise::Team.find(params[:id])
+      authorize! :manage_teams, @team.organization
+
+      # Add users
+      if params[:team] && params[:team][:users]
+        id_list = params[:team][:users].map { |h| h[:id] }.compact
+        users = @team.organization.users.where('id.in' => id_list)
+        users.each { |u| @team.add_user(u) }
+      end
+
+      render 'show'
+    end
+
+    # PUT /mnoe/jpi/v1/teams/:id/remove_users
+    def remove_users
+      @team = MnoEnterprise::Team.find(params[:id])
+      authorize! :manage_teams, @team.organization
+
+      # Add users
+      if params[:team] && params[:team][:users]
+        id_list = params[:team][:users].map { |h| h[:id] }.compact
+        users = @team.organization.users.where('id.in' => id_list)
+        users.each { |u| @team.remove_user(u) }
+      end
+
+      render 'show'
+    end
+
+    # DELETE /mnoe/jpi/v1/teams/:id
+    def destroy
+      @team = MnoEnterprise::Team.find(params[:id])
+      authorize! :manage_teams, @team.organization
+      @team.destroy
+
+      head :no_content
+    end
+
+    private
+
+    def team_params
+      params.require(:team).permit(:name)
+    end
+  end
+end

data/app/controllers/mno_enterprise/org_invites_controller.rb

@@ -0,0 +1,5 @@
+module MnoEnterprise
+  class OrgInvitesController < ApplicationController
+    include MnoEnterprise::Concerns::Controllers::OrgInvitesController
+  end
+end

data/app/controllers/mno_enterprise/pages_controller.rb

@@ -0,0 +1,5 @@
+module MnoEnterprise
+  class PagesController < ApplicationController
+    include MnoEnterprise::Concerns::Controllers::PagesController
+  end
+end

data/app/controllers/mno_enterprise/provision_controller.rb

@@ -0,0 +1,5 @@
+module MnoEnterprise
+  class ProvisionController < ApplicationController
+    include MnoEnterprise::Concerns::Controllers::ProvisionController
+  end
+end

data/app/controllers/mno_enterprise/status_controller.rb

@@ -0,0 +1,27 @@
+# Health Check endpoint
+module MnoEnterprise
+  class StatusController < ApplicationController
+    # Simple check to see that the app is up
+    # Returns:
+    #   {status: 'Ok'}
+    def ping
+      render json: {status: 'Ok'}
+    end
+
+    # Version check
+    # Returns:
+    #   {
+    #     'app-version': '9061048-6811c4a',
+    #     'mno-enterprise-version': '0.0.1',
+    #     'env': 'test'
+    #   }
+    def version
+      data = {
+          'app-version' => MnoEnterprise::APP_VERSION,
+          'mno-enteprise-version' => MnoEnterprise::VERSION,
+          'env' => Rails.env
+      }
+      render json: data
+    end
+  end
+end

data/app/controllers/mno_enterprise/webhook/o_auth_controller.rb

@@ -0,0 +1,5 @@
+module MnoEnterprise
+  class Webhook::OAuthController < ApplicationController
+    include MnoEnterprise::Concerns::Controllers::Webhook::OAuthController
+  end
+end

data/app/mailers/mno_enterprise/system_notification_mailer.rb

@@ -0,0 +1,5 @@
+module MnoEnterprise
+  class SystemNotificationMailer < ActionMailer::Base
+    include MnoEnterprise::Concerns::Mailers::SystemNotificationMailer
+  end
+end

data/app/models/mno_enterprise/health_check.rb

@@ -0,0 +1,16 @@
+module MnoEnterprise
+  class HealthCheck
+    # Check API connection with Mno-Hub
+    # any code that returns blank on success and non blank string upon failure
+    def self.perform_mno_hub_check
+      # TODO: less expensive test
+      if MnoEnterprise::App.first
+        ''
+      else
+        'MNO-HUB'
+      end
+    rescue => e
+      "MNO-HUB: #{e}. "
+    end
+  end
+end

data/app/views/devise/password_expired/show.html.haml

@@ -0,0 +1,32 @@
+.registration
+  .container
+    .row
+      .login-box-wrapper
+        .login-box-title
+          %h2 You password has expired. Please renew it.
+        .login-box
+          .brand-logo
+
+            = form_for(resource, as: resource_name, url: mno_enterprise.user_password_expired_path, :html => { method: :put, class: 'form-horizontal' }) do |f|
+              = devise_error_messages!
+
+              .row
+                .col-sm-6
+                  = f.label :current_password, "Current password"
+                  = f.password_field :current_password, :class => 'form-control'
+
+              .row
+                .col-sm-6
+                  = f.label :password, "New password"
+                  = f.password_field :password, :class => 'form-control'
+
+                .col-sm-6
+                  = f.label :password_confirmation, "Confirm new password"
+                  = f.password_field :password_confirmation, :class => 'form-control'
+
+              %br
+
+              .row
+                .col-sm-12
+                  .text-center
+                    = f.submit "Change my password", class: "btn btn-warning"

data/app/views/mno_enterprise/auth/confirmations/default/_form.html.haml

@@ -0,0 +1,49 @@
+%div{ 'ng-init' => "user = { $pwdScore: {}, name: '#{resource.name}', surname: '#{resource.surname}' }" }
+
+= form_for(resource, as: resource_name, :url => mno_enterprise.user_confirmation_finalize_path, :html => { 'name' => 'loginForm', :class => 'autofill-detect text-center' }) do |f|
+
+  .row
+    .col-sm-12
+      = f.text_field :name, placeholder: "*First Name", required: true, 'ng-model' => 'user.name', class:'form-control'
+  
+  %br
+  
+  .row
+    .col-sm-12
+      = f.text_field :surname, placeholder: "*Last Name", required: true, 'ng-model' => 'user.surname', class: 'form-control'
+  
+  - if @phone_required && MnoEnterprise.style.devise.phone_required
+    %br
+    .row
+      .col-sm-12
+        .phone
+          = f.select :phone_country_code, options_for_select(Country.all.map { |country,code| c = Country.new(code); ["#{c.alpha2} +#{c.country_code}", code]}, MnoEnterprise.app_country), {}, class: 'form-control unstyled'
+          = f.text_field :phone, placeholder: "*Phone", required: true, 'ng-model' => 'user.phone_number', class: 'form-control'
+  
+  %br
+  
+  - # Password: two validation styles offered
+  .row
+    .col-sm-12
+      - if !!MnoEnterprise.style.devise.password_complexity_deep_check
+        %div{'mno-password' => 'user', form: "loginForm"}
+    
+        .text-center.ng-hide{ 'ng-show' => 'user.$pwdScore.showTip' }
+          %small.text-danger Password is not strong enough. Try mixing letters, numbers and cases
+      
+      - else
+        .input-group
+          = f.password_field :password, :placeholder => "*Choose Password", 'ng-model' => 'user.password', class: 'form-control', 'ng-minlength' => 6, 'mno-password-strength' => true, "password-score" => 'user.$pwdScore', :required => true
+          %span.input-group-addon.classic.pw-strength-indicator{'ng-class' => 'user.$pwdScore.class' }
+            {{ user.$pwdScore.value }}
+          
+        .text-center.ng-hide{ 'ng-show' => 'user.$pwdScore.showTip' }
+          %small.text-danger Password is not strong enough. Try mixing letters, numbers and cases
+      
+  
+  = f.hidden_field :confirmation_token, value: @confirmation_token
+  
+  %br/
+  %div
+    %button{ :class => "btn btn-warning btn-login", :type => "submit", 'ng-click' => 'hasClicked = true', 'ng-disabled' => 'loginForm.$invalid', 'ng-hide' => 'hasClicked' } Confirm my account
+    %img.ng-hide{ 'ng-src' => asset_path('mno_enterprise/loader-32x32-bg-inverse.gif'), 'ng-show' => 'hasClicked' }

data/app/views/mno_enterprise/auth/confirmations/default/_lounge.html.haml

@@ -0,0 +1,34 @@
+.banners.promo.dark.darkblue.confirmation-lounge
+  .container
+    .row
+      .col-md-8.col-md-offset-2
+        .row
+          .align-center
+            %i.fa.fa-envelope
+            %h4 Congratulations! We've sent you a confirmation link, please check your email inbox.
+            %h5 If you did not receive the email please click resend.
+          
+          %div{ 'ng-init' => "email = '#{@resource.email}'"}
+            = form_for(@resource, :as => resource_name, :url => mno_enterprise.user_confirmation_path, :html => { 'name' => 'form', :class => 'dark form-horizontal', :autocomplete => "off" }) do |f|
+              - unless devise_error_messages!.empty?
+                %div
+                  .alert.alert-error
+                    %button.close{ 'data-dismiss' => "alert" } ×
+                    = devise_error_messages!
+              .spacer2
+              .form-group
+                .col-sm-6.col-sm-offset-2
+                  .input-prepend
+                    = f.email_field :email, :placeholder => "Email", :required => true, 'ng-model' => 'email', :class => 'input-xlarge'
+                .col-sm-2
+                  %button{ :class => "btn btn-lg btn-warning", :type => "submit", 'ng-click' => 'hasClicked = true', 'ng-disabled' => 'form.$invalid', 'ng-hide' => 'hasClicked' } Resend!
+                  %img{ class: 'loader-sm', 'ng-src' => asset_path('mno_enterprise/loader-32x32-bg-main.gif'), 'ng-show' => 'hasClicked' }
+
+    .spacer2
+    .row
+      .col-md-12
+        .align-center
+          %h5
+            Or if you prefer you can send an email to our
+            = mail_to support_email, "customer care service", subject: "Signup Verification"
+            directly and we'll activate it for you.

data/app/views/mno_enterprise/auth/confirmations/default/_show.html.haml

@@ -0,0 +1,10 @@
+.registration
+  .container
+    .row
+      //.col-md-6.col-md-offset-3
+      .login-box-wrapper
+        .login-box-title
+          %h2 Almost there
+        .login-box
+          .brand-logo
+          = render "mno_enterprise/auth/confirmations/default/form"

data/app/views/mno_enterprise/auth/confirmations/lounge.html.haml

@@ -0,0 +1,4 @@
+- if MnoEnterprise.style.design.material
+  = render "mno_enterprise/auth/confirmations/material/lounge"
+- else
+  = render "mno_enterprise/auth/confirmations/default/lounge"

data/app/views/mno_enterprise/auth/confirmations/material/_form.html.haml

@@ -0,0 +1,44 @@
+%div{ 'ng-init' => "user = { $pwdScore: {}, name: '#{resource.name}', surname: '#{resource.surname}' }" }
+
+= form_for(resource, as: resource_name, :url => mno_enterprise.user_confirmation_finalize_path, :html => { 'name' => 'loginForm', :class => 'text-center' }) do |f|
+  = f.hidden_field :confirmation_token, value: @confirmation_token
+  
+  %div{ layout: '', 'layout-sm' => 'column' }
+    %md-input-container{ flex: '' }
+      %label Name
+      = f.text_field :name, required: true, 'ng-model' => 'user.name'
+  
+    %md-input-container{ flex: '' }
+      %label Surname
+      = f.text_field :surname, required: true, 'ng-model' => 'user.surname'
+  
+  
+  
+  - if @phone_required && MnoEnterprise.style.devise.phone_required
+    %div{ layout: '', 'layout-sm' => 'column' }
+      
+      %md-input-container
+        %md-select{ placeholder: "Ext.", 'ng-model' => "user.phone_country_code", style: 'line-height: 26px;' }
+          %md-option{ 'ng-value' => 'opt.alpha2', 'ng-repeat' => "opt in #{ Country.all.map {|cntry, alpha2| {alpha2: alpha2, code: Country.new(alpha2).country_code} }.to_json }"  }
+            {{ opt.alpha2 }} +{{ opt.code }}
+        = f.hidden_field :phone_country_code, 'ng-model' => 'user.phone_country_code'
+      
+      %md-input-container{ flex: '' }
+        %label Phone
+        = f.text_field :phone, required: true, 'ng-model' => 'user.phone_number'
+  
+  %div{'mno-password' => 'user', form: "loginForm"}
+
+
+  %div
+    %button{ class: "md-raised md-accent", 'md-button' => true, type: "submit", 'ng-click' => 'hasClicked = true', 'ng-disabled' => 'loginForm.$invalid' } Create Account
+  
+  %br
+  
+  %div
+    %p 
+      By clicking 'Create Account' you are agreeing to
+      = "#{MnoEnterprise.app_name}'s"
+      Terms of Use and Privacy Policy
+  
+  %md-progress-linear{ 'md-mode' => "indeterminate", 'ng-show' => 'hasClicked' }