pollett 0.1.0

data/lib/generators/pollett/install/templates/db/migrate/add_pollett_to_users.rb

@@ -0,0 +1,21 @@
+class AddPollettToUsers < ActiveRecord::Migration
+  def up
+    change_table :users  do |t|
+<% config[:new_columns].values.each do |column| -%>
+      <%= column %>
+<% end -%>
+    end
+
+<% config[:new_indexes].values.each do |index| -%>
+    <%= index %>
+<% end -%>
+  end
+
+  def down
+    change_table :users do |t|
+<% if config[:new_columns].any? -%>
+      t.remove <%= new_columns.keys.map { |column| ":#{column}" }.join(",") %>
+<% end -%>
+    end
+  end
+end

data/lib/generators/pollett/install/templates/db/migrate/create_users.rb

@@ -0,0 +1,15 @@
+class CreateUsers < ActiveRecord::Migration
+  def change
+    create_table :users, id: :uuid do |t|
+      t.string :name, null: false
+      t.string :email, null: false
+      t.string :password_digest, null: false
+      t.string :reset_token
+
+      t.timestamps null: false
+    end
+
+    add_index :users, :email, unique: true
+    add_index :users, :reset_token, unique: true
+  end
+end

data/lib/generators/pollett/install/templates/initializer.rb

@@ -0,0 +1,3 @@
+Pollett.configure do |config|
+  config.reset_url = ->(token) { "https://example.com/#{token}/reset" }
+end

data/lib/generators/pollett/install/templates/user.rb

@@ -0,0 +1,3 @@
+class User < ActiveRecord::Base
+  include Pollett::User
+end

data/lib/pollett.rb

@@ -0,0 +1,20 @@
+require "active_model_serializers"
+require "servitore"
+
+require "pollett/concerns"
+require "pollett/configuration"
+require "pollett/engine"
+
+module Pollett
+  Unauthorized = Class.new(StandardError)
+
+  TOKEN_LENGTH = 32
+
+  def self.generate_token(length = TOKEN_LENGTH)
+    SecureRandom.urlsafe_base64(length)
+  end
+
+  def self.reset_url(token)
+    config.reset_url.call(token)
+  end
+end

data/lib/pollett/concerns.rb

@@ -0,0 +1,5 @@
+require "pollett/concerns/controllers"
+require "pollett/concerns/mailers"
+require "pollett/concerns/models"
+require "pollett/concerns/serializers"
+require "pollett/concerns/services"

data/lib/pollett/concerns/controllers.rb

@@ -0,0 +1,3 @@
+require "pollett/concerns/controllers/users_controller"
+require "pollett/concerns/controllers/sessions_controller"
+require "pollett/concerns/controllers/keys_controller"

data/lib/pollett/concerns/controllers/keys_controller.rb

@@ -0,0 +1,37 @@
+module Pollett
+  module Concerns
+    module Controllers
+      module KeysController
+        extend ActiveSupport::Concern
+
+        def index
+          render_list(scoped)
+        end
+
+        def create
+          key = current_user.keys.create!(safe_params)
+          render json: key, status: :created
+        end
+
+        def show
+          key = scoped.find(params[:id])
+          render json: key, status: :ok
+        end
+
+        def destroy
+          scoped.find(params[:id]).revoke!
+          head :no_content
+        end
+
+        private
+        def safe_params
+          params.permit(:client)
+        end
+
+        def scoped
+          current_user.keys.active
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/controllers/sessions_controller.rb

@@ -0,0 +1,43 @@
+module Pollett
+  module Concerns
+    module Controllers
+      module SessionsController
+        extend ActiveSupport::Concern
+
+        included do
+          skip_authentication only: [:create, :forgot]
+        end
+
+        def index
+          render_list(scoped)
+        end
+
+        def show
+          session = scoped.find(params[:id])
+          render json: session, status: :ok
+        end
+
+        def create
+          session = CreateSession.call(params)
+          activate_context(session)
+          render json: session, status: :created
+        end
+
+        def forgot
+          ResetPassword.call(params)
+          render json: { status: :accepted }, status: :accepted
+        end
+
+        def destroy
+          scoped.find(params[:id]).revoke!
+          head :no_content
+        end
+
+        private
+        def scoped
+          current_user.sessions.active
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/controllers/users_controller.rb

@@ -0,0 +1,28 @@
+module Pollett
+  module Concerns
+    module Controllers
+      module UsersController
+        extend ActiveSupport::Concern
+
+        def show
+          render json: current_user, status: :ok
+        end
+
+        def update
+          current_user.update!(safe_params)
+          render json: current_user, status: :ok
+        end
+
+        def destroy
+          current_user.destroy
+          head :no_content
+        end
+
+        private
+        def safe_params
+          params.permit(:name, :email, :password)
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/mailers.rb

@@ -0,0 +1 @@
+require "pollett/concerns/mailers/mailer"

data/lib/pollett/concerns/mailers/mailer.rb

@@ -0,0 +1,24 @@
+module Pollett
+  module Concerns
+    module Mailers
+      module Mailer
+        extend ActiveSupport::Concern
+
+        included do
+          default from: Pollett.config.from_email if Pollett.config.from_email
+        end
+
+        def welcome(user)
+          @user = user
+          mail(to: user.email)
+        end
+
+        def reset(user)
+          @user = user
+          @url = Pollett.reset_url(user.reset_token)
+          mail(to: user.email)
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/models.rb

@@ -0,0 +1,3 @@
+require "pollett/concerns/models/context"
+require "pollett/concerns/models/session"
+require "pollett/concerns/models/key"

data/lib/pollett/concerns/models/context.rb

@@ -0,0 +1,42 @@
+module Pollett
+  module Concerns
+    module Models
+      module Context
+        extend ActiveSupport::Concern
+
+        included do
+          belongs_to :user, class_name: Pollett.config.user_model_name
+
+          scope :active, -> { where("((type = 'Pollett::Session' AND accessed_at >= ?) OR (type = 'Pollett::Key')) AND revoked_at IS NULL", Pollett.config.timeout.ago) }
+        end
+
+        module ClassMethods
+          def authenticate(id)
+            active.find_by(id: id)
+          end
+        end
+
+        def revoked
+          revoked_at?
+        end
+
+        def active
+          !revoked
+        end
+
+        def access(request)
+          update({
+            accessed_at: current_time_from_proper_timezone,
+            ip: request.remote_ip,
+            user_agent: request.user_agent
+          })
+        end
+
+        def revoke!
+          self.revoked_at ||= current_time_from_proper_timezone
+          save!
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/models/key.rb

@@ -0,0 +1,13 @@
+module Pollett
+  module Concerns
+    module Models
+      module Key
+        extend ActiveSupport::Concern
+
+        included do
+          validates :client, presence: true
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/models/session.rb

@@ -0,0 +1,20 @@
+module Pollett
+  module Concerns
+    module Models
+      module Session
+        extend ActiveSupport::Concern
+
+        CLIENT = "App"
+
+        included do
+          before_create :set_client
+        end
+
+        private
+        def set_client
+          self.client = CLIENT
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/serializers.rb

@@ -0,0 +1,2 @@
+require "pollett/concerns/serializers/user_serializer"
+require "pollett/concerns/serializers/context_serializer"

data/lib/pollett/concerns/serializers/context_serializer.rb

@@ -0,0 +1,21 @@
+module Pollett
+  module Concerns
+    module Serializers
+      module ContextSerializer
+        extend ActiveSupport::Concern
+
+        included do
+          attributes :client,
+                     :active,
+                     :ip,
+                     :user_agent,
+                     :accessed_at,
+                     :created_at,
+                     :updated_at
+
+          belongs_to :user
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/serializers/user_serializer.rb

@@ -0,0 +1,16 @@
+module Pollett
+  module Concerns
+    module Serializers
+      module UserSerializer
+        extend ActiveSupport::Concern
+
+        included do
+          attributes :created_at,
+                     :updated_at,
+                     :name,
+                     :email
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/services.rb

@@ -0,0 +1,5 @@
+require "pollett/concerns/services/authenticate_user"
+require "pollett/concerns/services/change_password"
+require "pollett/concerns/services/create_session"
+require "pollett/concerns/services/register_user"
+require "pollett/concerns/services/reset_password"

data/lib/pollett/concerns/services/authenticate_user.rb

@@ -0,0 +1,21 @@
+module Pollett
+  module Concerns
+    module Services
+      module AuthenticateUser
+        extend ActiveSupport::Concern
+
+        include Servitore::Service
+
+        included do
+          param_reader :email, :password
+        end
+
+        def call
+          Pollett.config.user_model.find_by_normalized_email(email).tap do |u|
+            raise Unauthorized unless u && u.authenticate(password)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/services/change_password.rb

@@ -0,0 +1,21 @@
+module Pollett
+  module Concerns
+    module Services
+      module ChangePassword
+        extend ActiveSupport::Concern
+
+        include Servitore::Service
+
+        included do
+          param_reader :token, :password
+        end
+
+        def call
+          Pollett.config.user_model.find_by!(reset_token: token).tap do |u|
+            u.update!(password: password, reset_token: nil)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/services/create_session.rb

@@ -0,0 +1,27 @@
+module Pollett
+  module Concerns
+    module Services
+      module CreateSession
+        extend ActiveSupport::Concern
+
+        include Servitore::Service
+
+        def call
+          user = service.call(_params)
+          user.sessions.create!
+        end
+
+        private
+        def service
+          @service ||= if _params.key?(:name)
+            Pollett::RegisterUser
+          elsif _params.key?(:token)
+            Pollett::ChangePassword
+          else
+            Pollett::AuthenticateUser
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pollett/concerns/services/register_user.rb

@@ -0,0 +1,29 @@
+module Pollett
+  module Concerns
+    module Services
+      module RegisterUser
+        extend ActiveSupport::Concern
+
+        include Servitore::Service
+
+        PERMITTED = [:name, :email, :password]
+
+        def call
+          Pollett.config.user_model.create!(safe_params).tap do |user|
+            deliver_email(user) if Pollett.config.send_welcome_email
+          end
+        end
+
+        private
+        def safe_params
+          permitted = Pollett.config.whitelist | PERMITTED
+          _params.permit(*permitted)
+        end
+
+        def deliver_email(user)
+          Mailer.welcome(user).deliver_later
+        end
+      end
+    end
+  end
+end