mori 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 0ee64fc60f4aa320446d6cddccf5be8fa3bbf432
+  data.tar.gz: 0702dbfb25aec136a1f6bb806efb41001a487922
+SHA512:
+  metadata.gz: 941665ac96f3de8512dfc6c0d4cf73eae75dccd3d725ca1ef6176331df94d7f9e5720ed96d13ad13246643a989f17e7f33a964494d931809a3187b4521d1e8d7
+  data.tar.gz: 0ce4f4f2fc046f623ba0368ba74a9faa6b10eee0254f07d40bc857df081a7a53b86cd3241c7922ffee5989f959f0b8e5724a7eecf905a74141ffedf23b573bf8

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2014 YOURNAME
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,6 @@
+# Mori
+
+## Badgers
+[![Code Climate](https://codeclimate.com/github/pineworks/mori.png)](https://codeclimate.com/github/pineworks/mori)
+[![Build Status](https://travis-ci.org/pineworks/mori.png?branch=master)](https://travis-ci.org/pineworks/mori)
+[![Coverage Status](https://coveralls.io/repos/pineworks/mori/badge.png?branch=master)](https://coveralls.io/r/pineworks/mori?branch=master)

data/Rakefile

@@ -0,0 +1,29 @@
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rdoc/task'
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'Mori'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+APP_RAKEFILE = File.expand_path("../spec/dummy/Rakefile", __FILE__)
+load 'rails/tasks/engine.rake'
+
+Bundler::GemHelper.install_tasks
+
+Dir[File.join(File.dirname(__FILE__), 'tasks/**/*.rake')].each {|f| load f }
+
+require 'rspec/core'
+require 'rspec/core/rake_task'
+desc "Run all specs in spec directory (excluding plugin specs)"
+RSpec::Core::RakeTask.new(:spec => 'app:db:test:prepare')
+
+task :default => :spec

data/app/assets/javascripts/mori/application.js

@@ -0,0 +1,13 @@
+// This is a manifest file that'll be compiled into application.js, which will include all the files
+// listed below.
+//
+// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
+// or vendor/assets/javascripts of plugins, if any, can be referenced here using a relative path.
+//
+// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
+// compiled file.
+//
+// Read Sprockets README (https://github.com/sstephenson/sprockets#sprockets-directives) for details
+// about supported directives.
+//
+//= require_tree .

data/app/assets/stylesheets/mori/application.css

@@ -0,0 +1,13 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or vendor/assets/stylesheets of plugins, if any, can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the top of the
+ * compiled file, but it's generally better to create a new file per style scope.
+ *
+ *= require_self
+ *= require_tree .
+ */

data/app/controllers/mori/registrations_controller.rb

@@ -0,0 +1,23 @@
+class Mori::RegistrationsController < MoriController
+  def new
+    if current_user
+      redirect_to Mori.configuration.after_login_url
+    end
+    @user = Mori::User.new
+  end
+
+  def create
+    @user = Mori::User.new(user_params)
+    if @user.save
+      warden.set_user(@user)
+      redirect_to Mori.configuration.after_signup_url
+    else
+      render "new"
+    end
+  end
+  private
+
+  def user_params
+    params.require(:mori_user).permit(:username, :email, :password)
+  end
+end

data/app/controllers/mori/sessions_controller.rb

@@ -0,0 +1,17 @@
+class Mori::SessionsController < MoriController
+  def new
+    redirect_to Mori.configuration.after_login_url if current_user
+    @user = Mori::User.new
+    flash.now.alert = warden.message if warden.message.present?
+  end
+
+  def create
+    warden.authenticate!
+    redirect_to Mori.configuration.after_login_url, notice: "You have logged in"
+  end
+
+  def destroy
+    warden.logout
+    redirect_to Mori.configuration.after_logout_url
+  end
+end

data/app/controllers/mori_controller.rb

@@ -0,0 +1,8 @@
+class MoriController < ApplicationController
+  def current_user
+    warden.user
+  end
+  def warden
+    env['warden']
+  end
+end

data/app/helpers/mori_helper.rb

@@ -0,0 +1,5 @@
+module MoriHelper
+  def logout_link(text="Log Out")
+    link_to text, logout_path, :method => :delete
+  end
+end

data/app/mailers/mori/mailer.rb

@@ -0,0 +1,17 @@
+module Mori
+  class Mailer < ActionMailer::Base
+    default from: Mori.configuration.from_email
+
+    def password_reset_notification(user)
+      @user = user
+      mail(to: user.email, subject: "Your password on #{Mori.configuration.application_name} has been reset")
+    end
+    def invite_user(user)
+      @user = user
+      mail(to: user.email, subject: "You've been invited to #{Mori.configuration.application_name}")
+    end
+    def confirm_email(user)
+      @user = user
+    end
+  end
+end

data/app/models/mori/user.rb

@@ -0,0 +1,85 @@
+require 'email_validator'
+
+module Mori
+  include BCrypt
+  class User < ActiveRecord::Base
+    include Mori::Token
+
+    if Mori.configuration.account_database
+      establish_connection Mori.configuration.account_database
+    end
+
+    validates :email, email: { strict_mode: true }, presence: true, uniqueness: true
+    validates :password, presence: true, unless: :invitation_token?
+    validates :password_reset_token, uniqueness: true, if: :password_reset_token?
+    validates :invitation_token, uniqueness: true, if: :invitation_token?
+
+    before_save :encrypt_password, :if => Proc.new { |user| user.password_changed? }
+    before_validation :normalize_email, :if => Proc.new{ |user| user.email_changed? }
+    before_create :send_email_confirmation, :if => Proc.new { |user| user.password.present? }
+
+    # Methods called by ActiveRecord
+
+    def encrypt_password
+      self.password = self.password.encrypt
+    end
+    def normalize_email
+      self.email = self.email.normalize
+    end
+    def send_email_confirmation
+      self.confirmation_token = SecureRandom.hex(25)
+      self.confirmation_sent = Date.today
+      Mailer.confirm_email(self)
+    end
+
+    def accept_invitation(token,new_password)
+      user = User.find_by_invitation_token(token)
+      raise 'Expired Invitation Token' if user.invitation_sent < Date.today - 2.weeks
+      user.password = new_password
+      user.save
+      user
+    end
+    def reset_password(token,new_password)
+      raise 'Invalid Password Reset Token' unless token == self.password_reset_token
+      raise 'Expired Reset Token' if self.password_reset_sent < Date.today - 2.weeks
+      self.password = new_password
+      self.save
+      self
+    end
+
+    def self.invite(email)
+      user = User.create({:email => email, :invitation_token => generate_token, :invitation_sent => Date.today})
+      Mailer.invite_user(user)
+    end
+    def self.forgot_password(email)
+      user = User.find_by_email(email)
+      user.password_reset_token = generate_token
+      user.password_reset_sent = Date.today
+      Mailer.password_reset_notification(user)
+      user.save
+    end
+    def self.change_password(email, password, new_password)
+      user = User.find_by_normalized_email(email.normalize)
+      raise "Passwords do not match" if ::BCrypt::Password.new(user.password) != password
+      user.password = new_password
+      user.save
+      user
+    end
+    def self.confirm_email(email, token)
+      user = User.find_by_confirmation_token(token)
+      raise 'Invalid Confirmation Token' if user.blank?
+      raise 'Expired Confirmation Token' if user.confirmation_sent < Date.today - 2.weeks
+      user.confirmed = true
+      user.save
+      user
+    end
+    def authenticate(password)
+      raise 'Invalid Login' if ::BCrypt::Password.new(self.password) != password
+      true
+    end
+    protected
+    def self.find_by_normalized_email(email)
+      User.find_by_email(email.normalize)
+    end
+  end
+end

data/app/views/layouts/mori/application.html.erb

@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Mori</title>
+  <%= stylesheet_link_tag    "mori/application", media: "all" %>
+  <%= javascript_include_tag "mori/application" %>
+  <%= csrf_meta_tags %>
+</head>
+<body>
+
+<%= yield %>
+
+</body>
+</html>

data/app/views/mori/mailer/confirm_email.html.erb

@@ -0,0 +1 @@
+h1 Hilo

data/app/views/mori/mailer/invite_user.html.erb

@@ -0,0 +1 @@
+<h1> I'm the invitation email </h1>

data/app/views/mori/mailer/password_reset_notification.html.erb

@@ -0,0 +1 @@
+I am email!

data/app/views/mori/registrations/new.slim

@@ -0,0 +1,9 @@
+h1 New User
+= form_for @user, :url => '/registrations', :method => :post  do |f|
+  div.container
+    = f.label :email
+    = f.email_field :email
+  div.container
+    = f.label :password
+    = f.password_field :password
+  = f.submit

data/app/views/mori/sessions/new.slim

@@ -0,0 +1,8 @@
+= form_for @user, :url => sessions_path, :method => :post, :html => { :id => "new_session"} do |f|
+  =f.label :email
+  =f.text_field :email
+
+  =f.label :password
+  =f.password_field :password
+  
+  =f.submit "Log In", :id => "submit_button"

data/config/database.travis.yml

@@ -0,0 +1,27 @@
+postgresql: &postgresql
+  adapter: postgresql
+  username: postgres
+  password:
+  database: mori_<%= Rails.env %>
+  min_messages: ERROR
+
+user:
+  adapter: postgresql
+  username: postgres
+  password:
+  database: mori_users
+
+defaults: &defaults
+  pool: 5
+  timeout: 5000
+  host: localhost
+  <<: *<%= ENV['DB'] || "postgresql" %>
+  
+development:
+  <<: *defaults
+
+test:
+  <<: *defaults
+
+production:
+  <<: *defaults

data/config/initializers/warden.rb

@@ -0,0 +1,27 @@
+Rails.application.config.middleware.use Warden::Manager do |manager|
+  manager.default_strategies :password
+  manager.failure_app = Mori::SessionsController.action(:new)
+end
+
+Warden::Manager.serialize_into_session do |user|
+  user.id
+end
+
+Warden::Manager.serialize_from_session do |id|
+  Mori::User.find(id)
+end
+
+Warden::Strategies.add(:password) do
+  def valid?
+    params['mori_user']['email'] and params['mori_user']['password']
+  end
+
+  def authenticate!
+    user = Mori::User.find_by_email(params['mori_user']['email'])
+    if user and user.authenticate(params['mori_user']['password'])
+      success! user
+    else
+      fail "Invalid login credentials"
+    end
+  end
+end

data/config/locales/mori.en.yml

@@ -0,0 +1,17 @@
+en:
+  mori_mailer:
+    confirm_email:
+      opening:
+        "Welcome to %{application_name}"
+      intro:
+        "Please note that some actions will require you to have a confirmed email. Follow the link below to confirm your email"
+      closing:
+        "If you didn't sign up for %{application_name}, please ignore this email"
+    invitation_email:
+      opening:
+        "You've been invited to %{application_name}"
+      intro:
+        "Follow the link below to accept the invitation"
+      closing:
+        "If you don't wish to accept the invitation to %{application_name}, simply ignore this email"
+

data/config/routes.rb

@@ -0,0 +1,9 @@
+Rails.application.routes.draw do
+  resources :registrations, :controller => 'mori/registrations', :only => [:new, :create]
+  resources :sessions, :controller => 'mori/sessions', :only => [:new, :create, :destroy]
+  get '/login' => 'mori/sessions#new', :as => 'login'
+  delete '/logout' => 'mori/sessions#destroy', :as => 'logout'
+  if Mori.configuration.allow_sign_up?
+    get '/sign_up' => 'mori/registrations#new', :as => 'sign_up'
+  end
+end

data/db/migrate/20140126052000_enable_hstore.rb

@@ -0,0 +1,9 @@
+class EnableHstore < ActiveRecord::Migration
+  def self.up
+    execute 'CREATE EXTENSION hstore'
+  end
+
+  def self.down
+    execute 'DROP EXTENSION hstore'
+  end
+end

data/db/migrate/20140128055658_create_mori_users.rb

@@ -0,0 +1,33 @@
+class CreateMoriUsers < ActiveRecord::Migration
+  def change
+    create_table :mori_users do |t|
+
+      t.string :email
+      t.text :password
+
+      # Invite Related
+      t.string :invitation_token
+      t.datetime :invitation_sent
+
+      # Password Reset
+      t.string :password_reset_token
+      t.datetime :password_reset_sent
+
+      # Confirmable
+      t.boolean :confirmed
+      t.string :confirmation_token
+      t.datetime :confirmation_sent
+
+      # Group Relation
+      t.integer :group_id
+
+      # Application specific attributes
+      t.hstore :data, :default => {}
+
+      t.timestamps
+
+    end
+    add_index :mori_users, :email
+    add_index :mori_users, :group_id
+  end
+end