mno-enterprise-frontend 2.0.0

data/lib/mno-enterprise-frontend.rb

@@ -0,0 +1 @@
+require 'mno_enterprise/frontend'

data/lib/mno_enterprise/frontend.rb

@@ -0,0 +1,13 @@
+require 'less-rails'
+require 'jquery-rails'
+require 'haml'
+require 'ngannotate-rails'
+
+require 'mno_enterprise/api'
+
+module MaestranoEnterprise
+  module Frontend
+    require 'mno_enterprise/frontend/engine'
+    require 'mno_enterprise/frontend/assets_util'
+  end
+end

data/lib/mno_enterprise/frontend/assets_util.rb

@@ -0,0 +1,47 @@
+# Used by assets.js.erb to reference
+# images from Asset pipeline
+module MnoEnterprise
+  module Frontend
+    module AssetsUtil
+      def self.assets_url
+        self.config["environments"][Rails.env]["assets"]
+      end
+
+      def self.server_host
+        self.config["environments"][Rails.env]["host"]
+      end
+
+      def self.config
+        @@config ||= YAML.load_file(File.join(Rails.root, 'config', 'assets.yml'))
+
+        @@config
+      end
+
+      # Return the application root path
+      def self.root_path
+        Rails.root
+      end
+
+      # Return the engine root path
+      def self.engine_root_path
+        MnoEnterprise::Frontend::Engine.root
+      end
+
+      def self.images
+        [self.root_path, self.engine_root_path].map do |base_path|
+          Dir.glob(base_path.join("app/assets/images/**/*.*")).map do |path|
+            path.gsub(base_path.join("app/assets/images/").to_s, "")
+          end
+        end.flatten.uniq
+      end
+
+      def self.templates
+        [self.root_path, self.engine_root_path].map do |base_path|
+          Dir.glob(base_path.join("app/assets/templates/**/*.*")).map do |path|
+            path.gsub(base_path.join("app/assets/templates/").to_s, "")
+          end
+        end.flatten.uniq
+      end
+    end
+  end
+end

data/lib/mno_enterprise/frontend/concerns/README.md

@@ -0,0 +1,6 @@
+# MnoEnterprise::Frontend::Concerns
+
+Not to confuse MnoEnterprise::Concerns !
+
+Allows to extend further controllers already extended in mnoe-api
+

data/lib/mno_enterprise/frontend/concerns/controllers/pages_controller.rb

@@ -0,0 +1,25 @@
+module MnoEnterprise::Frontend::Concerns::Controllers::PagesController
+  extend ActiveSupport::Concern
+
+  #==================================================================
+  # Included methods
+  #==================================================================
+  # 'included do' causes the included code to be evaluated in the
+  # context where it is included rather than being executed in the module's context
+  included do
+    # including :launch from mnoe/api as before_filter with only redefine the filter
+    before_filter :authenticate_user!, only: [:myspace, :launch]
+    before_filter :redirect_to_lounge_if_unconfirmed, only: [:myspace, :launch]
+  end
+
+  #==================================================================
+  # Instance methods
+  #==================================================================
+  # GET /myspace
+  def myspace
+    # Meta Information
+    @meta[:title] = "Dashboard"
+    @meta[:description] = "Dashboard"
+    render layout: 'mno_enterprise/application_dashboard'
+  end
+end

data/lib/mno_enterprise/frontend/engine.rb

@@ -0,0 +1,13 @@
+module MnoEnterprise
+  module Frontend
+    class Engine < ::Rails::Engine
+      isolate_namespace MnoEnterprise
+
+      # Add assets
+      config.assets.precompile += %w( mno_enterprise/application_lib.js )
+
+      # To be able to load lib/mno_enterprise/concerns/...
+      config.autoload_paths += Dir["#{config.root}/lib/**/"]
+    end
+  end
+end

data/spec/controllers/mno_enterprise/auth/confirmations_controller_spec.rb

@@ -0,0 +1,84 @@
+require 'rails_helper'
+
+module MnoEnterprise
+  module Auth
+    
+    describe ConfirmationsController, type: :controller do
+      render_views
+      routes { MnoEnterprise::Engine.routes }
+      before { request.env["devise.mapping"] = Devise.mappings[:user] } #bypass devise router
+      
+      
+      let(:user) { build(:user) }
+      let(:new_email) { user.email + '.au' }
+      let(:email_params) {{ filter: { email: user.email }, limit: 1 }}
+      let(:new_email_params) {{ filter: { email: new_email }, limit: 1 }}
+      
+      before { allow(MnoEnterprise::User).to receive(:find_for_confirmation).with(any_args).and_return(user) }
+      
+      before { api_stub_for(get: "/users", params: email_params, respond_with: []) }
+      before { api_stub_for(get: "/users", respond_with: [user]) }
+      before { api_stub_for(get: "/org_invites", respond_with: []) }
+      before { api_stub_for(get: "/users/#{user.id}/organizations", respond_with: []) }
+      
+      before { api_stub_for(put: "/users/#{user.id}", respond_with: user) }
+      
+    
+      describe 'GET #show' do
+        subject { get :show, confirmation_token: user.confirmation_token }
+      
+        describe 'confirmed user confirming new email address' do
+          before { user.unconfirmed_email = new_email }
+          
+          before { subject }
+          it { expect(user.email).to eq(new_email) }
+          it { expect(response).to redirect_to(root_path) }
+        end
+      
+        describe 'unconfirmed user' do
+          before { user.confirmed_at = nil }
+          before { subject }
+          it { expect(response.code).to eq('200') }
+          it { expect(assigns(:confirmation_token)).to eq(user.confirmation_token) }
+        end
+      end
+    
+      describe 'PATCH #finalize' do
+        let(:previous_url) { nil }
+        let(:user_params) {{ name: 'Robert', surname: 'Jack', password: 'somepassword', confirmation_token: user.confirmation_token }}
+        subject { patch :finalize, user: user_params }
+        
+        before { session[:previous_url] = previous_url }
+        
+        describe 'confirmed user' do
+          before { subject }
+          it { expect(user.name).to_not eq(user_params[:name]) }
+          it { expect(response).to redirect_to(root_path) }
+        end
+        
+        describe 'unconfirmed user' do
+          before { user.confirmed_at = nil }
+          before { subject }
+          it { expect(user.name).to eq(user_params[:name]) }
+          it { expect(user.surname).to eq(user_params[:surname]) }
+          it { expect(user.password).to eq(user_params[:password]) }
+          it { expect(response).to redirect_to('/mnoe/myspace') }
+          
+          describe 'with previous url' do
+            let(:previous_url) { "/some/redirection" }
+            it { expect(response).to redirect_to(previous_url) }
+          end
+        end
+        
+        describe 'invalid confirmation token ' do
+          let(:user_with_errors) { obj = MnoEnterprise::User.new; obj.errors[:base] << "Invalid confirmation token"; obj }
+          before { allow(MnoEnterprise::User).to receive(:find_for_confirmation).with(any_args).and_return(user_with_errors) }
+          subject! { patch :finalize, user: user_params.merge(confirmation_token: 'invalid') }
+          it { expect(user.name).to_not eq(user_params[:name]) }
+          it { expect(response.code).to eq('200') }
+        end
+      end
+    end
+    
+  end
+end

data/spec/controllers/mno_enterprise/invoices_controller_spec.rb

@@ -0,0 +1,34 @@
+require 'rails_helper'
+
+module MnoEnterprise
+  describe InvoicesController, type: :controller do
+    render_views
+    routes { MnoEnterprise::Engine.routes }
+
+    # Stub controller ability
+    let!(:ability) { stub_ability }
+    before { allow(ability).to receive(:can?).with(any_args).and_return(true) }
+
+    # Stub model calls
+    let(:user) { build(:user) }
+    let(:organization) { build(:organization) }
+    let(:invoice) { build(:invoice, organization_id: organization.id) }
+    before { api_stub_for(get: "/users/#{user.id}", response: from_api(user)) }
+    before { api_stub_for(get: "/organizations/#{organization.id}", response: from_api(organization)) }
+    before { api_stub_for(get: "/users/#{user.id}/organizations/#{organization.id}", response: from_api(organization)) }
+    before { api_stub_for(get: "/invoices", params: { filter: { slug: '**' } }, response: from_api([invoice])) }
+
+
+    describe "GET #show" do
+      before { sign_in user }
+      subject { get :show, id: invoice.slug }
+
+      it_behaves_like "a navigatable protected user action"
+      it_behaves_like "a user protected resource"
+
+      it { subject; expect(response).to be_success }
+    end
+
+  end
+
+end

data/spec/controllers/mno_enterprise/pages_controller_spec.rb

@@ -0,0 +1,42 @@
+require 'rails_helper'
+
+module MnoEnterprise
+  describe PagesController, type: :controller do
+    render_views
+    routes { MnoEnterprise::Engine.routes }
+
+    let(:user) { build(:user) }
+    before { api_stub_for(get: "/users/#{user.id}", response: from_api(user)) }
+    before { api_stub_for(put: "/users/#{user.id}", response: from_api(user)) }
+
+    describe "GET #myspace" do
+      before { sign_in user }
+      subject { get :myspace }
+
+      it_behaves_like "a navigatable protected user action"
+
+      it "assigns the right meta information" do
+        get :myspace
+        meta = {}
+        meta[:title] = "Dashboard"
+        meta[:description] = "Dashboard"
+        expect(assigns(:meta)).to eq(meta)
+      end
+    end
+
+    # To be sure that we don't loose pages define in mnoe-api
+    describe 'GET #launch' do
+      let(:app_instance) { build(:app_instance) }
+      before { sign_in user }
+      before { api_stub_for(get: "/app_instances", response: from_api([app_instance])) }
+      subject { get :launch, id: app_instance.uid }
+
+      it_behaves_like "a navigatable protected user action"
+
+      it 'redirect to the mno enterprise launch page with a web token' do
+        subject
+        expect(response).to redirect_to(MnoEnterprise.router.launch_url(app_instance.uid, wtk: MnoEnterprise.jwt({user_id: user.uid})))
+      end
+    end
+  end
+end

data/spec/controllers/mno_enterprise/user_setup_controller_spec.rb

@@ -0,0 +1,33 @@
+require 'rails_helper'
+
+module MnoEnterprise
+  describe UserSetupController, type: :controller do
+    render_views
+    routes { MnoEnterprise::Engine.routes }
+    
+    # Create user and organization + mutual associations
+    let(:organization) { build(:organization) }
+    let(:user) { build(:user) }
+    before { api_stub_for(get: "/users/#{user.id}", response: from_api(user)) }
+    before { allow(organization).to receive(:users).and_return([user]) }
+    before { allow_any_instance_of(User).to receive(:organizations).and_return([organization]) }
+    
+    
+    
+    describe 'GET #index' do
+      subject { get :index }
+      
+      describe 'guest' do
+        before { subject }
+        it { expect(response).to redirect_to(new_user_session_path) }
+      end
+      
+      describe 'signed in' do
+        before { sign_in user }
+        before { subject }
+        it { expect(response).to be_success }
+      end
+    end
+    
+  end
+end

data/spec/controllers/mno_enterprise/webhook/o_auth_controller_spec.rb

@@ -0,0 +1,76 @@
+require 'rails_helper'
+
+# Test here in addition to mnoe-api to see that it's working properly with myspace_url
+module MnoEnterprise
+  describe Webhook::OAuthController, type: :controller do
+    render_views
+    routes { MnoEnterprise::Engine.routes }
+
+    # Stub controller ability
+    let!(:ability) { stub_ability }
+    let(:extra_params) { {some: 'param'} }
+    before { allow(ability).to receive(:can?).with(any_args).and_return(true) }
+
+    # Stub model calls
+    let(:user) { build(:user) }
+    let(:organization) { build(:organization) }
+    let(:app) { build(:app) }
+    let(:app_instance) { build(:app_instance) }
+    before { api_stub_for(get: "/users/#{user.id}", response: from_api(user)) }
+    before { api_stub_for(get: "/app_instances", response: from_api([app_instance])) }
+    before { allow_any_instance_of(MnoEnterprise::AppInstance).to receive(:app).and_return(app) }
+
+    describe 'GET #authorize' do
+      let(:redir_params) { extra_params.reject { |k, v| k.to_sym == :perform } }
+      let(:redirect_url) { MnoEnterprise.router.authorize_oauth_url(app_instance.uid, redir_params.merge(wtk: MnoEnterprise.jwt(user_id: user.uid))) }
+      subject { get :authorize, extra_params.merge(id: app_instance.uid) }
+      before { sign_in user }
+
+      it_behaves_like "a navigatable protected user action"
+      it_behaves_like "a user protected resource"
+
+      it { subject; expect(response).to be_success }
+      it { subject; expect(assigns(:redirect_to)).to eq(redirect_url) }
+
+      Webhook::OAuthController::PROVIDERS_WITH_OPTIONS.each do |provider|
+        describe "#{provider.capitalize} provider" do
+          let(:app) { build(:app, nid: provider.parameterize) }
+          it { subject; expect(response).to render_template("providers/#{provider.parameterize}") }
+
+          context 'with perform=true' do
+            let(:extra_params) { {perform: true} }
+            it { subject; expect(assigns(:redirect_to)).to eq(redirect_url) }
+          end
+        end
+      end
+    end
+
+    describe 'GET #callback' do
+      subject { get :callback, id: app_instance.uid }
+
+      it { subject; expect(response).to redirect_to(myspace_path) }
+    end
+
+    describe 'GET #disconnect' do
+      let(:redirect_url) { MnoEnterprise.router.disconnect_oauth_url(app_instance.uid, extra_params.merge(wtk: MnoEnterprise.jwt(user_id: user.uid))) }
+      subject { get :disconnect, extra_params.merge(id: app_instance.uid) }
+      before { sign_in user }
+
+      it_behaves_like "a navigatable protected user action"
+      it_behaves_like "a user protected resource"
+
+      it { subject; expect(response).to redirect_to(redirect_url) }
+    end
+
+    describe 'GET #sync' do
+      let(:redirect_url) { MnoEnterprise.router.sync_oauth_url(app_instance.uid, extra_params.merge(wtk: MnoEnterprise.jwt(user_id: user.uid))) }
+      before { sign_in user }
+      subject { get :sync, extra_params.merge(id: app_instance.uid) }
+
+      it_behaves_like "a navigatable protected user action"
+      it_behaves_like "a user protected resource"
+
+      it { subject; expect(response).to redirect_to(redirect_url) }
+    end
+  end
+end

data/spec/rails_helper.rb

@@ -0,0 +1,92 @@
+# This file is copied to spec/ when you run 'rails generate rspec:install'
+ENV["RAILS_ENV"] ||= 'test'
+require 'spec_helper'
+require 'her'
+require 'factory_girl_rails'
+require 'fakeweb'
+
+require 'mno_enterprise/testing_support/user_action_shared'
+
+# Load the Dummy application
+begin
+  require File.expand_path("../dummy/config/environment", __FILE__)
+rescue LoadError
+  puts "Could not load dummy application. Please ensure you have run `bundle exec rake test_app`"
+end
+# require File.expand_path("../../spec/dummy/config/environment.rb",  __FILE__)
+
+require 'rspec/rails'
+
+# Check Dummy application migrations
+ActiveRecord::Migrator.migrations_paths = [File.expand_path("../../spec/dummy/db/migrate", __FILE__)]
+ActiveRecord::Migrator.migrations_paths << File.expand_path('../../db/migrate', __FILE__)
+
+
+# Requires supporting ruby files with custom matchers and macros, etc, in
+# spec/support/ and its subdirectories. Files matching `spec/**/*_spec.rb` are
+# run as spec files by default. This means that files in spec/support that end
+# in _spec.rb will both be required and run as specs, causing the specs to be
+# run twice. It is recommended that you do not name files matching this glob to
+# end with _spec.rb. You can configure this pattern with the --pattern
+# option on the command line or in ~/.rspec, .rspec or `.rspec-local`.
+Dir[Rails.root.join("../..","spec/support/**/*.rb")].each { |f| require f }
+
+# Require all factories
+# Dir[Rails.root.join("../..", "spec/factories/**/*.rb")].each {|f| require f }
+require 'mno_enterprise/testing_support/factories'
+
+# Checks for pending migrations before tests are run.
+# If you are not using ActiveRecord, you can remove this line.
+ActiveRecord::Migration.maintain_test_schema!
+
+RSpec.configure do |config|
+  # Remove this line if you're not using ActiveRecord or ActiveRecord fixtures
+  # config.fixture_path = "#{::Rails.root}/spec/fixtures"
+
+  # If you're not using ActiveRecord, or you'd prefer not to run each of your
+  # examples within a transaction, remove the following line or assign false
+  # instead of true.
+  # config.use_transactional_fixtures = true
+
+  # Include FactoryGirl methods to avoid typing FactoryGirl.create(...)
+  config.include FactoryGirl::Syntax::Methods
+
+  # Include MnoEnterpriseApiTestHelper
+  # Enable API stub helpers (e.g.: api_stub_for)
+  config.include MnoEnterpriseApiTestHelper
+
+  # Include ability test helper
+  config.include AbilityTestHelper, type: :controller
+
+  # Include devise tests
+  config.include Devise::TestHelpers, type: :controller
+
+  # Reset API stubs before each step
+  config.before :each do
+    api_stub_reset
+  end
+
+  config.before(:suite) do
+    FakeWeb.allow_net_connect = false
+    FakeWeb.register_uri(:post, 'https://my_tenant_id:my_tenant_access_key@api-enterprise.maestrano.com/api/mnoe/v1/audit_events', status: 200)
+  end
+
+  config.after(:suite) do
+    FakeWeb.allow_net_connect = true
+  end
+
+  # RSpec Rails can automatically mix in different behaviours to your tests
+  # based on their file location, for example enabling you to call `get` and
+  # `post` in specs under `spec/controllers`.
+  #
+  # You can disable this behaviour by removing the line below, and instead
+  # explicitly tag your specs with their type, e.g.:
+  #
+  #     RSpec.describe UsersController, :type => :controller do
+  #       # ...
+  #     end
+  #
+  # The different available types are documented in the features, such as in
+  # https://relishapp.com/rspec/rspec-rails/docs
+  config.infer_spec_type_from_file_location!
+end