RubyGems - oath - Versions diffs - 1.1.0 - Mend

oath 1.1.0

Files changed (94) hide show

checksums.yaml +7 -0
data/.gitignore +7 -0
data/.rspec +1 -0
data/.travis.yml +3 -0
data/Gemfile +3 -0
data/Gemfile.lock +165 -0
data/LICENSE.txt +22 -0
data/NEWS.rdoc +118 -0
data/README.md +384 -0
data/Rakefile +6 -0
data/lib/oath.rb +132 -0
data/lib/oath/back_door.rb +53 -0
data/lib/oath/configuration.rb +149 -0
data/lib/oath/constraints/signed_in.rb +14 -0
data/lib/oath/constraints/signed_out.rb +14 -0
data/lib/oath/controller_helpers.rb +161 -0
data/lib/oath/failure_app.rb +48 -0
data/lib/oath/field_map.rb +56 -0
data/lib/oath/param_transformer.rb +38 -0
data/lib/oath/railtie.rb +11 -0
data/lib/oath/services.rb +5 -0
data/lib/oath/services/authentication.rb +40 -0
data/lib/oath/services/password_reset.rb +27 -0
data/lib/oath/services/sign_in.rb +25 -0
data/lib/oath/services/sign_out.rb +24 -0
data/lib/oath/services/sign_up.rb +42 -0
data/lib/oath/strategies/password_strategy.rb +42 -0
data/lib/oath/test/controller_helpers.rb +43 -0
data/lib/oath/test/helpers.rb +24 -0
data/lib/oath/version.rb +4 -0
data/lib/oath/warden_setup.rb +47 -0
data/oath.gemspec +30 -0
data/spec/features/user/user_signs_in_spec.rb +14 -0
data/spec/features/user/user_signs_in_through_back_door_spec.rb +11 -0
data/spec/features/user/user_tries_to_access_constrained_routes_spec.rb +18 -0
data/spec/features/user/user_tries_to_access_http_auth_page_spec.rb +9 -0
data/spec/features/visitor/visitor_fails_to_sign_up_spec.rb +10 -0
data/spec/features/visitor/visitor_is_unauthorized_spec.rb +8 -0
data/spec/features/visitor/visitor_signs_in_via_invalid_form_spec.rb +11 -0
data/spec/features/visitor/visitor_signs_up_spec.rb +40 -0
data/spec/features/visitor/visitor_tries_to_access_constrained_routes_spec.rb +14 -0
data/spec/features/visitor/visitor_uses_remember_token_spec.rb +13 -0
data/spec/oath/configuration_spec.rb +11 -0
data/spec/oath/controller_helpers_spec.rb +180 -0
data/spec/oath/field_map_spec.rb +19 -0
data/spec/oath/services/authentication_spec.rb +25 -0
data/spec/oath/services/password_reset_spec.rb +24 -0
data/spec/oath/services/sign_in_spec.rb +13 -0
data/spec/oath/services/sign_out_spec.rb +13 -0
data/spec/oath/services/sign_up_spec.rb +49 -0
data/spec/oath/strategies/password_strategy_spec.rb +23 -0
data/spec/oath/test_controller_helpers_spec.rb +63 -0
data/spec/oath/test_helpers_spec.rb +97 -0
data/spec/oath_spec.rb +27 -0
data/spec/rails_app/Rakefile +7 -0
data/spec/rails_app/app/assets/images/rails.png +0 -0
data/spec/rails_app/app/assets/javascripts/application.js +13 -0
data/spec/rails_app/app/assets/stylesheets/application.css +13 -0
data/spec/rails_app/app/controllers/application_controller.rb +4 -0
data/spec/rails_app/app/controllers/basic_auth_controller.rb +7 -0
data/spec/rails_app/app/controllers/constrained_to_users_controller.rb +5 -0
data/spec/rails_app/app/controllers/constrained_to_visitors_controller.rb +5 -0
data/spec/rails_app/app/controllers/failures_controller.rb +5 -0
data/spec/rails_app/app/controllers/invalid_sessions_controller.rb +2 -0
data/spec/rails_app/app/controllers/posts_controller.rb +6 -0
data/spec/rails_app/app/controllers/sessions_controller.rb +26 -0
data/spec/rails_app/app/controllers/users_controller.rb +23 -0
data/spec/rails_app/app/helpers/application_helper.rb +2 -0
data/spec/rails_app/app/models/user.rb +10 -0
data/spec/rails_app/app/views/invalid_sessions/new.html.erb +4 -0
data/spec/rails_app/app/views/layouts/application.html.erb +18 -0
data/spec/rails_app/app/views/posts/index.html.erb +1 -0
data/spec/rails_app/app/views/sessions/new.html.erb +5 -0
data/spec/rails_app/app/views/users/new.html.erb +5 -0
data/spec/rails_app/config.ru +4 -0
data/spec/rails_app/config/application.rb +58 -0
data/spec/rails_app/config/boot.rb +6 -0
data/spec/rails_app/config/database.yml +25 -0
data/spec/rails_app/config/environment.rb +5 -0
data/spec/rails_app/config/environments/development.rb +29 -0
data/spec/rails_app/config/environments/production.rb +54 -0
data/spec/rails_app/config/environments/test.rb +29 -0
data/spec/rails_app/config/initializers/backtrace_silencers.rb +7 -0
data/spec/rails_app/config/initializers/inflections.rb +15 -0
data/spec/rails_app/config/initializers/secret_token.rb +7 -0
data/spec/rails_app/config/routes.rb +24 -0
data/spec/rails_app/db/seeds.rb +7 -0
data/spec/rails_app/public/404.html +26 -0
data/spec/rails_app/public/422.html +26 -0
data/spec/rails_app/public/500.html +25 -0
data/spec/rails_app/public/favicon.ico +0 -0
data/spec/rails_app/script/rails +6 -0
data/spec/spec_helper.rb +37 -0
metadata +325 -0

data/spec/rails_app/app/controllers/users_controller.rb ADDED

@@ -0,0 +1,23 @@
+class UsersController < ApplicationController
+  def new
+    @user = User.new
+  end
+  def create
+    @user = sign_up(user_params)
+    if @user.valid?
+      sign_in(@user)
+      redirect_to posts_path
+    else
+      render :new
+    end
+  end
+  private
+  def user_params
+    params.require(:user).permit(:email, :password)
+  end
+end

data/spec/rails_app/app/helpers/application_helper.rb ADDED

	@@ -0,0 +1,2 @@
1	+ module ApplicationHelper
2	+ end

data/spec/rails_app/app/models/user.rb ADDED

@@ -0,0 +1,10 @@
+require 'active_hash'
+class User < ActiveHash::Base
+  include ActiveModel::Validations
+  attr_accessor :email, :password_digest, :password
+  validates :email, presence: true
+  def self.find_by(params)
+    where(params).first
+  end
+end

data/spec/rails_app/app/views/invalid_sessions/new.html.erb ADDED

@@ -0,0 +1,4 @@
+<%= form_for :session do |f| %>
+  <%= f.text_field :password %>
+  <%= f.submit 'go' %>
+<% end %>

data/spec/rails_app/app/views/layouts/application.html.erb ADDED

@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>RailsApp</title>
+  <%= stylesheet_link_tag    "application", :media => "all" %>
+  <%= javascript_include_tag "application" %>
+  <%= csrf_meta_tags %>
+</head>
+<body>
+  <% if signed_in? %>
+    <%= link_to "Sign out", sign_out_path, method: :delete %>
+  <% else %>
+    <%= link_to "Sign in", sign_in_path %>
+  <% end %>
+<%= yield %>
+</body>
+</html>

data/spec/rails_app/app/views/posts/index.html.erb ADDED

	@@ -0,0 +1 @@
1	+ Posts

data/spec/rails_app/app/views/sessions/new.html.erb ADDED

@@ -0,0 +1,5 @@
+<%= form_for :session do |f| %>
+  <%= f.text_field :email %>
+  <%= f.text_field :password %>
+  <%= f.submit 'go' %>
+<% end %>

data/spec/rails_app/app/views/users/new.html.erb ADDED

@@ -0,0 +1,5 @@
+<%= form_for @user, url: users_path do |f| %>
+  <%= f.text_field :email %>
+  <%= f.text_field :password %>
+  <%= f.submit 'go' %>
+<% end %>

data/spec/rails_app/config.ru ADDED

@@ -0,0 +1,4 @@
+# This file is used by Rack-based servers to start the application.
+require ::File.expand_path('../config/environment',  __FILE__)
+run RailsApp::Application

data/spec/rails_app/config/application.rb ADDED

@@ -0,0 +1,58 @@
+require File.expand_path('../boot', __FILE__)
+# Pick the frameworks you want:
+require "active_record/railtie"
+require "action_controller/railtie"
+# require "action_mailer/railtie"
+# require "active_resource/railtie"
+# require "sprockets/railtie"
+# require "rails/test_unit/railtie"
+if defined?(Bundler)
+  # If you precompile assets before deploying to production, use this line
+  Bundler.require(*Rails.groups(:assets => %w(development test)))
+  # If you want your assets lazily compiled in production, use this line
+  # Bundler.require(:default, :assets, Rails.env)
+end
+require 'oath'
+module RailsApp
+  class Application < Rails::Application
+    # Settings in config/environments/* take precedence over those specified here.
+    # Application configuration should go into files in config/initializers
+    # -- all .rb files in that directory are automatically loaded.
+    # Custom directories with classes and modules you want to be autoloadable.
+    # config.autoload_paths += %W(#{config.root}/extras)
+    # Only load the plugins named here, in the order given (default is alphabetical).
+    # :all can be used as a placeholder for all plugins not explicitly named.
+    # config.plugins = [ :exception_notification, :ssl_requirement, :all ]
+    # Activate observers that should always be running.
+    # config.active_record.observers = :cacher, :garbage_collector, :forum_observer
+    # Set Time.zone default to the specified zone and make Active Record auto-convert to this zone.
+    # Run "rake -D time" for a list of tasks for finding time zone names. Default is UTC.
+    # config.time_zone = 'Central Time (US & Canada)'
+    # The default locale is :en and all translations from config/locales/*.rb,yml are auto loaded.
+    # config.i18n.load_path += Dir[Rails.root.join('my', 'locales', '*.{rb,yml}').to_s]
+    # config.i18n.default_locale = :de
+    # Configure the default encoding used in templates for Ruby 1.9.
+    config.encoding = "utf-8"
+    # Configure sensitive parameters which will be filtered from the log file.
+    config.filter_parameters += [:password]
+    # Enable escaping HTML in JSON.
+    config.active_support.escape_html_entities_in_json = true
+    # Use SQL instead of Active Record's schema dumper when creating the database.
+    # This is necessary if your schema can't be completely dumped by the schema dumper,
+    # like if you have constraints or database-specific column types
+    # config.active_record.schema_format = :sql
+  end
+end

data/spec/rails_app/config/boot.rb ADDED

@@ -0,0 +1,6 @@
+require 'rubygems'
+# Set up gems listed in the Gemfile.
+ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../../Gemfile', __FILE__)
+require 'bundler/setup' if File.exists?(ENV['BUNDLE_GEMFILE'])

data/spec/rails_app/config/database.yml ADDED

@@ -0,0 +1,25 @@
+# SQLite version 3.x
+#   gem install sqlite3
+#
+#   Ensure the SQLite 3 gem is defined in your Gemfile
+#   gem 'sqlite3'
+development:
+  adapter: sqlite3
+  database: db/development.sqlite3
+  pool: 5
+  timeout: 5000
+# Warning: The database defined as "test" will be erased and
+# re-generated from your development database when you run "rake".
+# Do not set this db to the same as development or production.
+test:
+  adapter: sqlite3
+  database: db/test.sqlite3
+  pool: 5
+  timeout: 5000
+production:
+  adapter: sqlite3
+  database: db/production.sqlite3
+  pool: 5
+  timeout: 5000

data/spec/rails_app/config/environment.rb ADDED

@@ -0,0 +1,5 @@
+# Load the rails application
+require File.expand_path('../application', __FILE__)
+# Initialize the rails application
+RailsApp::Application.initialize!

data/spec/rails_app/config/environments/development.rb ADDED

@@ -0,0 +1,29 @@
+RailsApp::Application.configure do
+  # Settings specified here will take precedence over those in config/application.rb
+  # In the development environment your application's code is reloaded on
+  # every request. This slows down response time but is perfect for development
+  # since you don't have to restart the web server when you make code changes.
+  config.cache_classes = false
+  # Log error messages when you accidentally call methods on nil.
+  config.whiny_nils = true
+  # Show full error reports and disable caching
+  config.consider_all_requests_local       = true
+  config.action_controller.perform_caching = false
+  # Print deprecation notices to the Rails logger
+  config.active_support.deprecation = :log
+  # Only use best-standards-support built into browsers
+  config.action_dispatch.best_standards_support = :builtin
+  # Raise exception on mass assignment protection for Active Record models
+  config.active_record.mass_assignment_sanitizer = :strict
+  # Log the query plan for queries taking more than this (works
+  # with SQLite, MySQL, and PostgreSQL)
+  config.active_record.auto_explain_threshold_in_seconds = 0.5
+end

data/spec/rails_app/config/environments/production.rb ADDED

@@ -0,0 +1,54 @@
+RailsApp::Application.configure do
+  # Settings specified here will take precedence over those in config/application.rb
+  # Code is not reloaded between requests
+  config.cache_classes = true
+  # Full error reports are disabled and caching is turned on
+  config.consider_all_requests_local       = false
+  config.action_controller.perform_caching = true
+  # Disable Rails's static asset server (Apache or nginx will already do this)
+  config.serve_static_assets = false
+  # Specifies the header that your server uses for sending files
+  # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for apache
+  # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx
+  # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
+  # config.force_ssl = true
+  # See everything in the log (default is :info)
+  # config.log_level = :debug
+  # Prepend all log lines with the following tags
+  # config.log_tags = [ :subdomain, :uuid ]
+  # Use a different logger for distributed setups
+  # config.logger = ActiveSupport::TaggedLogging.new(SyslogLogger.new)
+  # Use a different cache store in production
+  # config.cache_store = :mem_cache_store
+  # Enable serving of images, stylesheets, and JavaScripts from an asset server
+  # config.action_controller.asset_host = "http://assets.example.com"
+  # Disable delivery errors, bad email addresses will be ignored
+  # config.action_mailer.raise_delivery_errors = false
+  # Enable threaded mode
+  # config.threadsafe!
+  # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
+  # the I18n.default_locale when a translation can not be found)
+  config.i18n.fallbacks = true
+  # Send deprecation notices to registered listeners
+  config.active_support.deprecation = :notify
+  # Log the query plan for queries taking more than this (works
+  # with SQLite, MySQL, and PostgreSQL)
+  # config.active_record.auto_explain_threshold_in_seconds = 0.5
+end

data/spec/rails_app/config/environments/test.rb ADDED

@@ -0,0 +1,29 @@
+RailsApp::Application.configure do
+  # Settings specified here will take precedence over those in config/application.rb
+  config.middleware.insert_after Warden::Manager, Oath::BackDoor
+  # The test environment is used exclusively to run your application's
+  # test suite. You never need to work with it otherwise. Remember that
+  # your test database is "scratch space" for the test suite and is wiped
+  # and recreated between test runs. Don't rely on the data there!
+  config.cache_classes = true
+  # Configure static asset server for tests with Cache-Control for performance
+  config.serve_static_assets = true
+  config.static_cache_control = "public, max-age=3600"
+  # Show full error reports and disable caching
+  config.consider_all_requests_local       = true
+  config.action_controller.perform_caching = false
+  # Raise exceptions instead of rendering exception templates
+  config.action_dispatch.show_exceptions = false
+  # Disable request forgery protection in test environment
+  config.action_controller.allow_forgery_protection    = false
+  # Print deprecation notices to the stderr
+  config.active_support.deprecation = :stderr
+  config.eager_load  = false
+  config.secret_key_base = "1"
+end

data/spec/rails_app/config/initializers/backtrace_silencers.rb ADDED

@@ -0,0 +1,7 @@
+# Be sure to restart your server when you modify this file.
+# You can add backtrace silencers for libraries that you're using but don't wish to see in your backtraces.
+# Rails.backtrace_cleaner.add_silencer { |line| line =~ /my_noisy_library/ }
+# You can also remove all the silencers if you're trying to debug a problem that might stem from framework code.
+# Rails.backtrace_cleaner.remove_silencers!

data/spec/rails_app/config/initializers/inflections.rb ADDED

@@ -0,0 +1,15 @@
+# Be sure to restart your server when you modify this file.
+# Add new inflection rules using the following format
+# (all these examples are active by default):
+# ActiveSupport::Inflector.inflections do |inflect|
+#   inflect.plural /^(ox)$/i, '\1en'
+#   inflect.singular /^(ox)en/i, '\1'
+#   inflect.irregular 'person', 'people'
+#   inflect.uncountable %w( fish sheep )
+# end
+#
+# These inflection rules are supported but not enabled by default:
+# ActiveSupport::Inflector.inflections do |inflect|
+#   inflect.acronym 'RESTful'
+# end

data/spec/rails_app/config/initializers/secret_token.rb ADDED

@@ -0,0 +1,7 @@
+# Be sure to restart your server when you modify this file.
+# Your secret key for verifying the integrity of signed cookies.
+# If you change this key, all old signed cookies will become invalid!
+# Make sure the secret is at least 30 characters and all random,
+# no regular words or you'll be exposed to dictionary attacks.
+RailsApp::Application.config.secret_token = '840b3262c6147ca69157ebd545ff37817922cd1315d688d7ec3a864629ae89398604efeca261c8e40273b0306dbcf5c7f609f7b0dd4d12d213f1d6bd3dc169db'

data/spec/rails_app/config/routes.rb ADDED

@@ -0,0 +1,24 @@
+require 'oath/constraints/signed_in'
+require 'oath/constraints/signed_out'
+RailsApp::Application.routes.draw do
+  constraints Oath::Constraints::SignedIn.new do
+    resource :constrained_to_users, only: [:show]
+  end
+  constraints Oath::Constraints::SignedOut.new do
+    resource :constrained_to_visitors, only: [:show]
+  end
+  resources :posts, only: [:index]
+  resources :users, only: [:create]
+  resource :failure, only: [:show]
+  root to: "users#new"
+  get "sign_in" => "sessions#new"
+  post "sign_in" => "sessions#create"
+  delete "sign_out" => "sessions#destroy"
+  get "sign_up" => "users#new"
+  get "invalid_sign_in" => "invalid_sessions#new"
+  post "invalid_sign_in" => "invalid_sessions#create"
+  get "basic_auth" => "basic_auth#show"
+end

data/spec/rails_app/db/seeds.rb ADDED

@@ -0,0 +1,7 @@
+# This file should contain all the record creation needed to seed the database with its default values.
+# The data can then be loaded with the rake db:seed (or created alongside the db with db:setup).
+#
+# Examples:
+#
+#   cities = City.create([{ name: 'Chicago' }, { name: 'Copenhagen' }])
+#   Mayor.create(name: 'Emanuel', city: cities.first)

data/spec/rails_app/public/404.html ADDED

@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>The page you were looking for doesn't exist (404)</title>
+  <style type="text/css">
+    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
+    div.dialog {
+      width: 25em;
+      padding: 0 4em;
+      margin: 4em auto 0 auto;
+      border: 1px solid #ccc;
+      border-right-color: #999;
+      border-bottom-color: #999;
+    }
+    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
+  </style>
+</head>
+<body>
+  <!-- This file lives in public/404.html -->
+  <div class="dialog">
+    <h1>The page you were looking for doesn't exist.</h1>
+    <p>You may have mistyped the address or the page may have moved.</p>
+  </div>
+</body>
+</html>

data/spec/rails_app/public/422.html ADDED

@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>The change you wanted was rejected (422)</title>
+  <style type="text/css">
+    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
+    div.dialog {
+      width: 25em;
+      padding: 0 4em;
+      margin: 4em auto 0 auto;
+      border: 1px solid #ccc;
+      border-right-color: #999;
+      border-bottom-color: #999;
+    }
+    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
+  </style>
+</head>
+<body>
+  <!-- This file lives in public/422.html -->
+  <div class="dialog">
+    <h1>The change you wanted was rejected.</h1>
+    <p>Maybe you tried to change something you didn't have access to.</p>
+  </div>
+</body>
+</html>

data/spec/rails_app/public/500.html ADDED

@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>We're sorry, but something went wrong (500)</title>
+  <style type="text/css">
+    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
+    div.dialog {
+      width: 25em;
+      padding: 0 4em;
+      margin: 4em auto 0 auto;
+      border: 1px solid #ccc;
+      border-right-color: #999;
+      border-bottom-color: #999;
+    }
+    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
+  </style>
+</head>
+<body>
+  <!-- This file lives in public/500.html -->
+  <div class="dialog">
+    <h1>We're sorry, but something went wrong.</h1>
+  </div>
+</body>
+</html>