muck-comments 0.1.6 → 0.1.7

data/test/rails_root/test/factories.rb

@@ -0,0 +1,75 @@
+Factory.sequence :email do |n|
+  "somebody#{n}@example.com"
+end
+
+Factory.sequence :login do |n|
+  "inquire#{n}"
+end
+
+Factory.sequence :name do |n|
+  "a_name#{n}"
+end
+
+Factory.sequence :title do |n|
+  "a_title#{n}"
+end
+
+Factory.sequence :abbr do |n|
+  "abbr#{n}"
+end
+
+Factory.sequence :description do |n|
+  "This is the description: #{n}"
+end
+
+Factory.sequence :uri do |n|
+  "n#{n}.example.com"
+end
+
+Factory.define :state do |f|
+  f.name { Factory.next(:name) }
+  f.abbreviation { Factory.next(:abbr) }
+  f.country {|a| a.association(:country) }
+end
+
+Factory.define :country do |f|
+  f.name { Factory.next(:name) }
+  f.abbreviation { Factory.next(:abbr) }
+end
+
+Factory.define :user do |f|
+  f.login { Factory.next(:login) }
+  f.email { Factory.next(:email) }
+  f.password 'inquire_pass'
+  f.password_confirmation 'inquire_pass'
+  f.first_name 'test'
+  f.last_name 'guy'
+  f.terms_of_service true
+  f.activated_at DateTime.now
+end
+
+Factory.define :permission do |f|
+  f.role {|a| a.association(:role)}
+  f.user {|a| a.association(:user)}
+end
+
+Factory.define :role do |f|
+  f.rolename 'administrator'
+end
+
+Factory.define :comment do |f|
+  f.body { Factory.next(:description) }
+  f.user {|a| a.association(:user)}
+  f.commentable {|a| a.association(:user)}
+end
+
+Factory.define :domain_theme do |f|
+  f.name { Factory.next(:name) }
+  f.uri { Factory.next(:uri) }
+end
+
+Factory.define :theme do |f|
+  f.name { Factory.next(:name) }
+end
+
+

data/test/rails_root/test/functional/comments_controller_test.rb

@@ -0,0 +1,72 @@
+require File.dirname(__FILE__) + '/../test_helper'
+
+class Muck::CommentsControllerTest < ActionController::TestCase
+
+  tests Muck::CommentsController
+
+  context "comments controller" do
+    setup do
+      @user = Factory(:user)
+    end
+    
+    context "GET new" do
+      setup do
+        get :new, make_parent_params(@user)
+      end
+      should_not_set_the_flash
+      should_respond_with :success
+      should_render_template :new
+    end
+
+    context "GET index using comment" do
+      setup do
+        @comment = Factory(:comment, :commentable => @user)
+        child = Factory(:comment, :commentable => @user)
+        child.move_to_child_of(@comment)
+        get :index, :format => 'html', :id => @comment.id
+      end
+      should_not_set_the_flash
+      should_respond_with :success
+      should_render_template :index
+    end
+      
+    context "GET index using parent" do
+      setup do
+        # create a few comments to be displayed
+        comment = Factory(:comment, :commentable => @user)
+        child = Factory(:comment, :commentable => @user)
+        child.move_to_child_of(comment)
+        get :index, make_parent_params(@user).merge(:format => 'html')
+      end
+      should_not_set_the_flash
+      should_respond_with :success
+      should_render_template :index
+    end
+  
+    context "logged in" do
+      setup do
+        activate_authlogic
+        login_as @user
+        @comment = Factory(:comment, :user => @user)
+      end
+      context "delete comment" do
+        should "delete comment" do
+          assert_difference "Comment.count", -1 do
+            delete :destroy, { :id => @comment.to_param, :format => 'json' }          
+            assert @response.body.include?(I18n.t('muck.comments.comment_removed'))
+          end
+        end
+      end
+    end
+    
+    context "create comment" do
+      should " be able to create a comment" do
+        assert_difference "Comment.count" do
+          post :create,  make_parent_params(@user).merge(:format => 'json', :comment => { :body => 'test' })
+        end
+      end
+    end
+    
+  end
+  
+end

data/test/rails_root/test/shoulda_macros/controller.rb

@@ -0,0 +1,49 @@
+module MuckControllerMacros
+
+  def should_require_login(*args)
+    args = Hash[*args]
+    login_url = args.delete :login_url
+    args.each do |action, verb|
+      should "Require login for '#{action}' action" do
+        if [:put, :delete].include?(verb) # put and delete require an id even if it is a bogus one
+          send(verb, action, :id => 1)
+        else
+          send(verb, action)
+        end
+        assert_redirected_to(login_url)
+      end
+    end
+  end
+
+  def should_require_role(role, redirect_url, *actions)
+    actions.each do |action|
+      should "require role for '#{action}' action" do
+        get(action)
+        ensure_flash(/permission/i)
+        assert_response :redirect
+      end
+    end
+  end
+  
+  #from: http://blog.internautdesign.com/2008/9/11/more-on-custom-shoulda-macros-scoping-of-instance-variables
+  def should_not_allow action, object, url= "/login", msg=nil
+    msg ||= "a #{object.class.to_s.downcase}" 
+    should "not be able to #{action} #{msg}" do
+      object = eval(object, self.send(:binding), __FILE__, __LINE__)
+      get action, :id => object.id
+      assert_redirected_to url
+    end
+  end
+
+  def should_allow action, object, msg=nil
+    msg ||= "a #{object.class.to_s.downcase}" 
+    should "be able to #{action} #{msg}" do
+      object = eval(object, self.send(:binding), __FILE__, __LINE__)
+      get action, :id => object.id
+      assert_response :success
+    end
+  end
+
+end
+
+ActionController::TestCase.extend(MuckControllerMacros)

data/test/rails_root/test/shoulda_macros/forms.rb

@@ -0,0 +1,32 @@
+module ShouldaFormMacros
+  def self.should_have_form(opts)
+    model = self.name.gsub(/ControllerTest$/, '').singularize.downcase
+    model = model[model.rindex('::')+2..model.size] if model.include?('::')
+    http_method, hidden_http_method = form_http_method opts[:method]
+    should "have a #{model} form" do
+      assert_select "form[action=?][method=#{http_method}]", eval(opts[:action]) do
+        if hidden_http_method
+          assert_select "input[type=hidden][name=_method][value=#{hidden_http_method}]"
+        end
+        opts[:fields].each do |attribute, type|
+          attribute = attribute.is_a?(Symbol) ? "#{model}[#{attribute.to_s}]" : attribute
+          assert_select "input[type=#{type.to_s}][name=?]", attribute
+        end
+        assert_select "input[type=submit]"
+      end
+    end
+  end
+
+  def self.form_http_method(http_method)
+    http_method = http_method.nil? ? 'post' : http_method.to_s
+    if http_method == "post" || http_method == "get"
+      return http_method, nil
+    else
+      return "post", http_method
+    end
+  end  
+end
+
+class ActiveSupport::TestCase
+  extend ShouldaFormMacros
+end

data/test/rails_root/test/shoulda_macros/models.rb

@@ -0,0 +1,50 @@
+module ShouldaModelMacros
+
+  def should_sanitize(*attributes)
+    bad_scripts = [
+      %|';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>|,
+      %|'';!--"<XSS>=&{()}|,
+      %|<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>|,
+      %|<IMG SRC="javascript:alert('XSS');">|,
+      %|<IMG SRC=javascript:alert('XSS')>|,
+      %|<IMG SRC=JaVaScRiPt:alert('XSS')>|,
+      %|<IMG SRC=JaVaScRiPt:alert('XSS')>|,
+      %|<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>|,
+      %|<IMG """><SCRIPT>alert("XSS")</SCRIPT>">|,
+      %|<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>|,
+      %|<A HREF="h
+      tt	p://6&#9;6.000146.0x7.147/">XSS</A>|,
+      %|<script>alert('message');</script>| ]
+      
+    klass = model_class
+    attributes.each do |attribute|
+      attribute = attribute.to_sym
+      should "white list #{attribute}" do
+        assert object = klass.find(:first), "Can't find first #{klass}"
+        bad_scripts.each do |bad_value|
+          object.send("#{attribute}=", bad_value)
+          object.save
+          clean_value = object.send("#{attribute}")
+          assert !clean_value.include?(bad_value), "#{attribute} is not white listed. #{bad_value} made it through"
+        end
+      end
+    end
+  end
+
+  def should_accept_nested_attributes_for(*attr_names)
+    klass = self.name.gsub(/Test$/, '').constantize
+ 
+    context "#{klass}" do
+      attr_names.each do |association_name|
+        should "accept nested attrs for #{association_name}" do
+          assert  klass.instance_methods.include?("#{association_name}_attributes="),
+                  "#{klass} does not accept nested attributes for #{association_name}"
+        end
+      end
+    end
+  end
+end
+
+class ActiveSupport::TestCase
+  extend ShouldaModelMacros
+end

data/test/rails_root/test/shoulda_macros/pagination.rb

@@ -0,0 +1,53 @@
+module ShouldaPaginationMacros
+  # Example:
+  #  context "a GET to index logged in as admin" do
+  #    setup do
+  #      login_as_admin 
+  #      get :index
+  #    end
+  #    should_paginate_collection :users
+  #    should_display_pagination
+  #  end
+  def self.should_paginate_collection(collection_name)
+    should "paginate #{collection_name}" do
+      assert collection = assigns(collection_name), 
+        "Controller isn't assigning to @#{collection_name.to_s}."
+      assert_kind_of WillPaginate::Collection, collection, 
+        "@#{collection_name.to_s} isn't a WillPaginate collection."
+    end
+  end
+  
+  def self.should_display_pagination
+    should "display pagination" do
+      assert_select "div.pagination", { :minimum => 1 }, 
+        "View isn't displaying pagination. Add <%= will_paginate @collection %>."
+    end
+  end
+  
+  # Example:
+  #  context "a GET to index not logged in as admin" do
+  #    setup { get :index }
+  #    should_not_paginate_collection :users
+  #    should_not_display_pagination
+  #  end
+  def self.should_not_paginate_collection(collection_name)
+    should "not paginate #{collection_name}" do
+      assert collection = assigns(collection_name), 
+        "Controller isn't assigning to @#{collection_name.to_s}."
+      assert_not_equal WillPaginate::Collection, collection.class, 
+        "@#{collection_name.to_s} is a WillPaginate collection."
+    end
+  end
+  
+  def self.should_not_display_pagination
+    should "not display pagination" do
+      assert_select "div.pagination", { :count => 0 }, 
+        "View is displaying pagination. Check your logic."
+    end
+  end
+end
+
+
+class ActiveSupport::TestCase
+  extend ShouldaPaginationMacros
+end

data/test/rails_root/test/shoulda_macros/plugins.rb

@@ -0,0 +1,34 @@
+module ShouldaPluginMacros
+
+  def self.should_act_as_taggable_on_steroids
+    klass = self.name.gsub(/Test$/, '').constantize
+
+    should "include ActsAsTaggableOnSteroids methods" do
+      assert klass.extended_by.include?(ActiveRecord::Acts::Taggable::ClassMethods)
+      assert klass.extended_by.include?(ActiveRecord::Acts::Taggable::SingletonMethods)
+      assert klass.include?(ActiveRecord::Acts::Taggable::InstanceMethods)
+    end
+
+    should_have_many :taggings, :tags
+  end
+
+
+  def self.should_act_as_list
+    klass = self.name.gsub(/Test$/, '').constantize
+
+    context "To support acts_as_list" do
+      should_have_db_column('position', :type => :integer)
+    end
+
+    should "include ActsAsList methods" do
+      assert klass.include?(ActiveRecord::Acts::List::InstanceMethods)
+    end
+
+    should_have_instance_methods :acts_as_list_class, :position_column, :scope_condition
+  end
+
+end
+
+ActiveSupport::TestCase.extend(ShouldaPluginMacros)
+Test::Unit::TestCase.extend(ShouldaPluginMacros)
+ActionController::TestCase.extend(ShouldaPluginMacros)

data/test/rails_root/test/test_helper.rb

@@ -0,0 +1,48 @@
+$:.reject! { |e| e.include? 'TextMate' }
+ENV["RAILS_ENV"] = "test"
+require File.expand_path(File.dirname(__FILE__) + "/../config/environment")
+require 'test_help'
+require 'ruby-debug'
+gem 'thoughtbot-factory_girl' # from github
+require 'factory_girl'
+require 'authlogic/test_case'
+require 'redgreen' rescue LoadError
+require File.expand_path(File.dirname(__FILE__) + '/factories')
+require File.join(File.dirname(__FILE__), 'shoulda_macros', 'controller')
+require File.join(File.dirname(__FILE__), 'shoulda_macros', 'models')
+
+class ActiveSupport::TestCase 
+  self.use_transactional_fixtures = true
+  self.use_instantiated_fixtures  = false
+
+  include Authlogic::TestCase
+  
+  def login_as(user)
+    success = UserSession.create(user)
+    if !success
+      errors = user.errors.full_messages.to_sentence
+      message = 'User has not been activated' if !user.active?
+      raise "could not login as #{user.to_param}.  Please make sure the user is valid. #{message} #{errors}"
+    end
+    UserSession.find
+  end
+  
+  def assure_logout
+    user_session = UserSession.find
+    user_session.destroy if user_session
+  end
+  
+  def ensure_flash(val)
+    assert_contains flash.values, val, ", Flash: #{flash.inspect}"
+  end
+  
+  # For Selenium
+  # setup do |session|
+  #   session.host! "localhost:3001"
+  # end
+  
+  def make_parent_params(parent)
+    { :parent_id => parent.id, :parent_type => parent.class.to_s }
+  end
+    
+end

data/test/rails_root/test/unit/comment_test.rb

@@ -0,0 +1,63 @@
+require File.dirname(__FILE__) + '/../test_helper'
+
+class CommentTest < ActiveSupport::TestCase
+  
+  context "Comment" do
+    setup do
+      @user = Factory(:user)
+      @comment = @user.comments.build(:body => 'a test comment')
+      @comment.user = @user
+      @comment.save!
+    end
+    
+    should_validate_presence_of :body
+    should_belong_to :user
+    should_belong_to :commentable
+    
+    should_have_named_scope :by_newest
+    should_have_named_scope :by_oldest
+    should_have_named_scope :recent
+    
+    should "require body" do
+      assert_no_difference 'Comment.count' do
+        u = Factory.build(:comment, :body => nil)
+        assert !u.valid?
+        assert u.errors.on(:body)
+      end
+    end
+        
+    should "not have a parent if it is a root Comment" do
+      assert_nil @comment.parent
+    end
+
+    should " be able to see how many child Comments it has" do
+      assert_equal @comment.children.size, 0
+    end
+
+    should "be able to add child Comments" do
+      # Set commentable to be the same for each comment or else you will get 'Impossible move, target node cannot be inside moved tree.' since the comments would be in a different scope.  (Comments are scoped to commentable)
+      parent = Factory(:comment, :commentable => @user)
+      child = Factory(:comment, :commentable => @user)
+      child.move_to_child_of(parent)
+      assert_equal parent.children.size, 1
+    end    
+
+    context "after having a child added" do
+      setup do
+        # Set commentable to be the same for each comment or else you will get 'Impossible move, target node cannot be inside moved tree.' since the comments would be in a different scope.  (Comments are scoped to commentable)
+        @child = Factory(:comment, :commentable => @user)
+        @child.move_to_child_of(@comment)
+      end
+    
+      should "be able to be referenced by its child" do
+        assert_equal @child.parent, @comment
+      end
+    
+      should "be able to see its child" do
+        assert_equal @comment.children.first, @child
+      end
+    end
+    
+  end
+
+end

data/test/rails_root/test/unit/user_test.rb

@@ -0,0 +1,23 @@
+require File.dirname(__FILE__) + '/../test_helper'
+
+# Used to test muck_friend_user
+class UserTest < ActiveSupport::TestCase
+
+  context "A class that is commentable" do
+    setup do
+      @user = Factory(:user)
+      @comment = @user.comments.build(:body => 'a test comment')
+      @comment.user = @user
+      @comment.save!
+    end
+    
+    should "have comments" do
+      assert_equal 1, @user.comments.length
+    end
+    should "have comment cache" do
+      @user.reload
+      assert_equal 1, @user.comment_count
+    end
+  end
+
+end

data/test/rails_root/vendor/plugins/ssl_requirement/README

@@ -0,0 +1,43 @@
+SSL Requirement
+===============
+
+SSL requirement adds a declarative way of specifying that certain actions
+should only be allowed to run under SSL, and if they're accessed without it,
+they should be redirected.
+
+Example:
+
+  class ApplicationController < ActiveRecord::Base
+    include SslRequirement
+  end
+
+  class AccountController < ApplicationController
+    ssl_required :signup, :payment
+    ssl_allowed :index
+    
+    def signup
+      # Non-SSL access will be redirected to SSL
+    end
+    
+    def payment
+      # Non-SSL access will be redirected to SSL
+    end
+
+    def index
+      # This action will work either with or without SSL
+    end
+
+    def other
+      # SSL access will be redirected to non-SSL
+    end
+  end
+  
+You can overwrite the protected method ssl_required? to rely on other things
+than just the declarative specification. Say, only premium accounts get SSL.
+
+P.S.: Beware when you include the SslRequirement module. At the time of
+inclusion, it'll add the before_filter that validates the declarations. Some
+times you'll want to run other before_filters before that. They should then be
+declared ahead of including this module.
+
+Copyright (c) 2005 David Heinemeier Hansson, released under the MIT license

data/test/rails_root/vendor/plugins/ssl_requirement/lib/ssl_requirement.rb

@@ -0,0 +1,62 @@
+# Copyright (c) 2005 David Heinemeier Hansson
+#
+# Permission is hereby granted, free of charge, to any person obtaining
+# a copy of this software and associated documentation files (the
+# "Software"), to deal in the Software without restriction, including
+# without limitation the rights to use, copy, modify, merge, publish,
+# distribute, sublicense, and/or sell copies of the Software, and to
+# permit persons to whom the Software is furnished to do so, subject to
+# the following conditions:
+#
+# The above copyright notice and this permission notice shall be
+# included in all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+module SslRequirement
+  def self.included(controller)
+    controller.extend(ClassMethods)
+    controller.before_filter(:ensure_proper_protocol)
+  end
+
+  module ClassMethods
+    # Specifies that the named actions requires an SSL connection to be performed (which is enforced by ensure_proper_protocol).
+    def ssl_required(*actions)
+      write_inheritable_array(:ssl_required_actions, actions)
+    end
+
+    def ssl_allowed(*actions)
+      write_inheritable_array(:ssl_allowed_actions, actions)
+    end
+  end
+  
+  protected
+    # Returns true if the current action is supposed to run as SSL
+    def ssl_required?
+      (self.class.read_inheritable_attribute(:ssl_required_actions) || []).include?(action_name.to_sym)
+    end
+    
+    def ssl_allowed?
+      (self.class.read_inheritable_attribute(:ssl_allowed_actions) || []).include?(action_name.to_sym)
+    end
+
+  private
+    def ensure_proper_protocol
+      return true if ssl_allowed?
+
+      if ssl_required? && !request.ssl?
+        redirect_to "https://" + request.host + request.request_uri
+        flash.keep
+        return false
+      elsif request.ssl? && !ssl_required?
+        redirect_to "http://" + request.host + request.request_uri
+        flash.keep
+        return false
+      end
+    end
+end