punk 0.0.3 → 0.2.0

data/spec/routes/plivo/get_plivo_spec.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+describe PUNK, "GET /plivo" do
+  include_context "Punk"
+
+  before do
+    get '/plivo.html'
+  end
+
+  it { is_expected.to be_successful }
+end

data/spec/routes/sessions/delete_session_spec.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+describe PUNK, "DELETE /sessions" do
+  include_context "Punk"
+
+  before do
+    delete '/sessions'
+  end
+
+  it { is_expected.not_to be_successful }
+end

data/spec/routes/sessions/get_sessions_spec.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+describe PUNK, "GET /sessions" do
+  include_context "Punk"
+
+  context 'when the user is not authenticated' do
+    before do
+      get '/sessions'
+    end
+
+    it { is_expected.not_to be_successful }
+  end
+
+  context 'when the user is authenticated' do
+    let(:user) { create(:user) }
+    let(:identity) { create(:identity, user: user, claim_type: 'phone') }
+
+    before do
+      login(identity.claim)
+      get '/sessions'
+    end
+
+    after do
+      logout
+    end
+
+    it { is_expected.to be_successful }
+    its(:body) { is_expected.to match(user.active_sessions.first.id) }
+  end
+end

data/spec/routes/sessions/patch_session_spec.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+describe PUNK, "PATCH /sessions" do
+  include_context "Punk"
+
+  before do
+    patch '/sessions'
+  end
+
+  it { is_expected.not_to be_successful }
+end

data/spec/routes/sessions/post_session_spec.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+describe PUNK, "POST /sessions" do
+  include_context "Punk"
+
+  before do
+    post '/sessions'
+  end
+
+  it { is_expected.not_to be_successful }
+end

data/spec/routes/swagger/get_swagger_spec.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+describe PUNK, "GET /swagger" do
+  include_context "Punk"
+
+  before do
+    get '/swagger'
+  end
+
+  it { is_expected.to be_successful }
+  its(:body) { is_expected.to match('"openapi": "3.0.0"') }
+end

data/spec/routes/tenants/get_tenants_spec.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+describe PUNK, "GET /tenants" do
+  include_context "Punk"
+
+  context 'when the user is not authenticated' do
+    before do
+      get '/tenants'
+    end
+
+    it { is_expected.not_to be_successful }
+  end
+
+  context 'when the user is authenticated' do
+    let(:tenant) { create(:tenant) }
+    let(:identity) { create(:identity, claim_type: 'phone') }
+
+    before do
+      identity.user.add_tenant(tenant)
+      login(identity.claim)
+      get '/tenants'
+    end
+
+    after do
+      logout
+    end
+
+    it { is_expected.to be_successful }
+    its(:body) { is_expected.to match(tenant.name) }
+  end
+end

data/spec/routes/users/get_users_spec.rb

@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+describe PUNK, "GET /users" do
+  include_context "Punk"
+
+  context 'when the user is not authenticated' do
+    before do
+      get '/users'
+    end
+
+    it { is_expected.not_to be_successful }
+  end
+
+  context 'when the user is authenticated' do
+    let(:tenant) { create(:tenant) }
+    let(:identity) { create(:identity, claim_type: 'phone') }
+    let(:group) { create(:group, tenant: tenant) }
+    let(:tenant_user) { create(:user) }
+    let(:group_user) { create(:user) }
+
+    before do
+      identity.user.add_tenant(tenant)
+      identity.user.add_group(group)
+      tenant_user.add_tenant(tenant)
+      group_user.add_tenant(tenant)
+      group_user.add_group(group)
+      login(identity.claim)
+    end
+
+    after do
+      logout
+    end
+
+    context 'without a group' do
+      before do
+        get "/users?tenant_id=#{tenant.id}"
+      end
+
+      it { is_expected.to be_successful }
+
+      its(:body) do
+        is_expected.to match(tenant_user.name)
+        is_expected.to match(group_user.name)
+      end
+    end
+
+    context 'with a group' do
+      before do
+        get "/users?tenant_id=#{tenant.id}&group_id=#{group.id}"
+      end
+
+      it { is_expected.to be_successful }
+
+      its(:body) do
+        is_expected.not_to match(tenant_user.name)
+        is_expected.to match(group_user.name)
+      end
+    end
+  end
+end

data/spec/services/punk/challenge_claim_service_spec.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+describe PUNK::ChallengeClaimService do
+  context 'with no specs written' do
+    it 'displays a warning'
+  end
+end

data/spec/services/punk/create_identities_service_spec.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+describe PUNK::CreateIdentitiesService do
+  before do
+    create(:user, phone: nil)
+    create(:user, email: nil)
+  end
+
+  it 'creates identities for users that are missing them' do
+    expect(PUNK::Identity.count).to eq(0)
+    described_class.run
+    expect(PUNK::Identity.count).to eq(2)
+  end
+end

data/spec/services/punk/generate_swagger_service_spec.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+describe PUNK::GenerateSwaggerService do
+  context 'with no specs written' do
+    it 'displays a warning'
+  end
+end

data/spec/services/punk/prove_claim_service_spec.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+describe PUNK::ProveClaimService do
+  context 'with no specs written' do
+    it 'displays a warning'
+  end
+end

data/spec/services/punk/secret_service_spec.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+describe PUNK::SecretService do
+  context 'with no specs written' do
+    it 'displays a warning'
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,122 @@
+# frozen_string_literal: true
+
+require 'simplecov'
+require 'coveralls'
+SimpleCov.start do
+  add_filter 'spec'
+  add_filter 'lib/punk/commands/auth.rb'
+  add_filter 'lib/punk/commands/generate.rb'
+  add_filter 'lib/punk/commands/http.rb'
+  add_filter 'lib/punk/commands/list.rb'
+  add_filter 'lib/punk/core/commands.rb'
+  add_filter 'lib/punk/framework/command.rb'
+  add_filter 'lib/punk/plugins/cors.rb'
+  add_filter 'lib/punk/plugins/ssl.rb'
+  add_filter 'lib/punk/startup/logger.rb'
+end
+Coveralls.wear!
+
+require_relative '../lib/punk'
+
+require 'factory_bot'
+require 'faker'
+require 'timecop'
+require 'securerandom'
+require 'vcr'
+require 'rack/test'
+
+Faker::Config.locale = 'en-US'
+
+FactoryBot.use_parent_strategy = false
+
+VCR.configure do |c|
+  c.ignore_localhost = true
+  c.cassette_library_dir = 'spec/vcr_cassettes'
+  c.hook_into :webmock
+  c.configure_rspec_metadata!
+end
+
+PUNK.init(task: 'spec', config: { app: { name: 'Punk Test' } }).exec
+
+Sidekiq.logger = SemanticLogger['PUNK::SKQ']
+
+RSpec.shared_context 'Punk' do # rubocop:disable RSpec/ContextWording
+  include Rack::Test::Methods
+
+  subject { last_response }
+
+  def app
+    PUNK.app
+  end
+
+  def login(claim)
+    PUNK.cache.delete(:plivo)
+    response =
+      PUNK.app.call(
+        "REQUEST_METHOD" => "POST",
+        "PATH_INFO" => "/sessions",
+        "CONTENT_TYPE" => "text/json",
+        "SCRIPT_NAME" => "",
+        "rack.input" => StringIO.new({ claim: claim }.to_json)
+      )
+    response = ActiveSupport::JSON.decode(response[-1].first).deep_symbolize_keys
+    slug = response[:slug]
+    PUNK::SendSmsWorker.drain
+    sms = PUNK.cache.get(:plivo).first
+    PUNK.app.call(
+      "REQUEST_METHOD" => "PATCH",
+      "PATH_INFO" => "/sessions/#{slug}",
+      "CONTENT_TYPE" => "text/json",
+      "SCRIPT_NAME" => "",
+      "rack.input" => StringIO.new({ secret: sms[:body][-7..-2] }.to_json)
+    )
+  end
+
+  def logout
+    PUNK.app.call(
+      "REQUEST_METHOD" => "DELETE",
+      "PATH_INFO" => "/sessions",
+      "SCRIPT_NAME" => "",
+      "rack.input" => StringIO.new
+    )
+  end
+end
+
+module Helpers
+  def valid_uuid?(data)
+    data.split('-').map { |s| Integer(s, 16) }.length == 5
+  end
+end
+
+FactoryBot.define do
+  sequence :phone do
+    phone = "+1#{Phony.normalize(Faker::PhoneNumber.cell_phone)}" until Phony.plausible?(phone)
+    phone
+  end
+
+  sequence :uuid do
+    SecureRandom.uuid
+  end
+end
+
+RSpec.configure do |config|
+  config.expect_with :rspec do |expectations|
+    expectations.include_chain_clauses_in_custom_matcher_descriptions = true
+  end
+
+  config.include Helpers
+
+  config.include FactoryBot::Syntax::Methods
+  config.before(:suite) do
+    FactoryBot.find_definitions
+  end
+  config.before do
+    Sidekiq::Worker.clear_all
+  end
+
+  config.around do |example|
+    PUNK.db.transaction(rollback: :always, auto_savepoint: true) { example.run }
+  end
+
+  PUNK.commands(:spec, config)
+end

data/spec/vcr_cassettes/PUNK_GeocodeSessionWorker/updates_the_session_data.yml

@@ -0,0 +1,57 @@
+---
+http_interactions:
+- request:
+    method: get
+    uri: http://api.ipstack.com/42.221.129.61?access_key=8125be66761ffcad1604896a17d00ac4
+    body:
+      encoding: US-ASCII
+      string: ''
+    headers:
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+      User-Agent:
+      - Ruby
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Tue, 12 Jan 2021 09:12:13 GMT
+      Content-Type:
+      - application/json; Charset=UTF-8
+      Transfer-Encoding:
+      - chunked
+      Connection:
+      - keep-alive
+      Set-Cookie:
+      - __cfduid=df0fa25d4e0073142f3e466cbb8e9237d1610442733; expires=Thu, 11-Feb-21
+        09:12:13 GMT; path=/; domain=.ipstack.com; HttpOnly; SameSite=Lax
+      X-Apilayer-Transaction-Id:
+      - caef65a2-5cd1-4be2-9d01-a3f045f5e011
+      Access-Control-Allow-Methods:
+      - GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS
+      Access-Control-Allow-Origin:
+      - "*"
+      X-Request-Time:
+      - '0.014'
+      Cf-Cache-Status:
+      - DYNAMIC
+      Cf-Request-Id:
+      - '0797770e3300003e76e7ab3000000001'
+      Report-To:
+      - '{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=Uenx5X7lc5Ezh895Wc50n0Isr6maHO6FOA%2BRfJjJmgQiXBdHDhrhjBNxBsssKN178ozv9zvrsBtroUCIEdQIEf9QvpWMnfD3bVh1gLHHV44%3D"}],"group":"cf-nel","max_age":604800}'
+      Nel:
+      - '{"report_to":"cf-nel","max_age":604800}'
+      Server:
+      - cloudflare
+      Cf-Ray:
+      - 6105c129e8443e76-ADL
+    body:
+      encoding: ASCII-8BIT
+      string: '{"ip":"42.221.129.61","type":"ipv4","continent_code":"AS","continent_name":"Asia","country_code":"CN","country_name":"China","region_code":"BJ","region_name":"Beijing","city":"Beijing","zip":"100038","latitude":39.912288665771484,"longitude":116.3658676147461,"location":{"geoname_id":1816670,"capital":"Beijing","languages":[{"code":"zh","name":"Chinese","native":"\u4e2d\u6587"}],"country_flag":"http:\/\/assets.ipstack.com\/flags\/cn.svg","country_flag_emoji":"\ud83c\udde8\ud83c\uddf3","country_flag_emoji_unicode":"U+1F1E8
+        U+1F1F3","calling_code":"86","is_eu":false}}'
+  recorded_at: Thu, 22 Sep 2022 09:28:13 GMT
+recorded_with: VCR 6.0.0

data/spec/vcr_cassettes/PUNK_IdentifySessionWorker/updates_the_session_data.yml

@@ -0,0 +1,112 @@
+---
+http_interactions:
+- request:
+    method: get
+    uri: http://api.userstack.com/detect?access_key=a4b1af0fb201d34a6d5e457c6b7adb00&ua=Mozilla/5.0%20(Windows%20NT%20x.y%3B%20Win64%3B%20x64%3B%20rv:10.0)%20Gecko/20100101%20Firefox/10.0
+    body:
+      encoding: US-ASCII
+      string: ''
+    headers:
+      User-Agent:
+      - Userstack gem/0.1.0
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Tue, 12 Jan 2021 09:12:14 GMT
+      Content-Type:
+      - application/json; Charset=UTF-8
+      Transfer-Encoding:
+      - chunked
+      Connection:
+      - keep-alive
+      Set-Cookie:
+      - __cfduid=db0548b42a779266f4790ea8166bdd4581610442733; expires=Thu, 11-Feb-21
+        09:12:13 GMT; path=/; domain=.userstack.com; HttpOnly; SameSite=Lax
+      X-Apilayer-Transaction-Id:
+      - 454d0588-d787-4d01-b289-5a0038a25ee7
+      Access-Control-Allow-Methods:
+      - GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS
+      Access-Control-Allow-Origin:
+      - "*"
+      X-Request-Time:
+      - '0.078'
+      Cf-Cache-Status:
+      - DYNAMIC
+      Cf-Request-Id:
+      - '079777114700003e638fb08000000001'
+      Report-To:
+      - '{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=pLrm5k%2Fi9dtcefUXSTR6PXZbtnMZKqUzyi02QEWLC47MbuX678rfUazHnI2eSEecDBP04Z058W04qlR%2FeqM7g1x6NblI0fMkzM4Prk76ikkanA%3D%3D"}],"group":"cf-nel","max_age":604800}'
+      Nel:
+      - '{"report_to":"cf-nel","max_age":604800}'
+      Server:
+      - cloudflare
+      Cf-Ray:
+      - 6105c12ed9223e63-ADL
+    body:
+      encoding: ASCII-8BIT
+      string: '{"ua":"Mozilla\/5.0 (Windows NT x.y; Win64; x64; rv:10.0) Gecko\/20100101
+        Firefox\/10.0","type":"browser","brand":null,"name":null,"url":"https:\/\/www.mozilla.org\/","os":{"name":"Windows","code":"windows","url":"https:\/\/en.wikipedia.org\/wiki\/Windows","family":"Windows","family_code":"windows","family_vendor":"Microsoft
+        Corporation.","icon":"https:\/\/assets.userstack.com\/icon\/os\/windows.png","icon_large":"https:\/\/assets.userstack.com\/icon\/os\/windows_big.png"},"device":{"is_mobile_device":false,"type":"desktop","brand":null,"brand_code":null,"brand_url":null,"name":null},"browser":{"name":"Firefox","version":"10.0","version_major":"10","engine":"Gecko"},"crawler":{"is_crawler":false,"category":null,"last_seen":null}}'
+  recorded_at: Thu, 22 Sep 2022 09:28:14 GMT
+- request:
+    method: get
+    uri: http://api.ipstack.com/92.177.45.168?access_key=8125be66761ffcad1604896a17d00ac4
+    body:
+      encoding: US-ASCII
+      string: ''
+    headers:
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+      User-Agent:
+      - Ruby
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Tue, 12 Jan 2021 09:12:15 GMT
+      Content-Type:
+      - application/json; Charset=UTF-8
+      Transfer-Encoding:
+      - chunked
+      Connection:
+      - keep-alive
+      Set-Cookie:
+      - __cfduid=d09629f587b5e96df54ed5c24f57106641610442734; expires=Thu, 11-Feb-21
+        09:12:14 GMT; path=/; domain=.ipstack.com; HttpOnly; SameSite=Lax
+      X-Apilayer-Transaction-Id:
+      - ed39795d-84f4-4260-85c9-356205d21f34
+      Access-Control-Allow-Methods:
+      - GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS
+      Access-Control-Allow-Origin:
+      - "*"
+      X-Request-Time:
+      - '0.014'
+      Cf-Cache-Status:
+      - DYNAMIC
+      Cf-Request-Id:
+      - '07977713f000003e5edc09b000000001'
+      Report-To:
+      - '{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=zwkDF9e6nBBIRQ9DRnQhJakXNshZyHSuVB0GDGhrqPJBADBFWnsUL6pQU0eXUHnxouMS5Ec%2Fzd%2BJSe4NZXkogkQ1QCR1vil1gaEo2USlO%2Fs%3D"}],"group":"cf-nel","max_age":604800}'
+      Nel:
+      - '{"report_to":"cf-nel","max_age":604800}'
+      Server:
+      - cloudflare
+      Cf-Ray:
+      - 6105c1331d423e5e-ADL
+    body:
+      encoding: ASCII-8BIT
+      string: '{"ip":"92.177.45.168","type":"ipv4","continent_code":"EU","continent_name":"Europe","country_code":"ES","country_name":"Spain","region_code":"CT","region_name":"Catalonia","city":"Tarragona","zip":"43002","latitude":41.1220588684082,"longitude":1.249400019645691,"location":{"geoname_id":3108288,"capital":"Madrid","languages":[{"code":"es","name":"Spanish","native":"Espa\u00f1ol"},{"code":"eu","name":"Basque","native":"Euskara"},{"code":"ca","name":"Catalan","native":"Catal\u00e0"},{"code":"gl","name":"Galician","native":"Galego"},{"code":"oc","name":"Occitan","native":"Occitan"}],"country_flag":"http:\/\/assets.ipstack.com\/flags\/es.svg","country_flag_emoji":"\ud83c\uddea\ud83c\uddf8","country_flag_emoji_unicode":"U+1F1EA
+        U+1F1F8","calling_code":"34","is_eu":true}}'
+  recorded_at: Thu, 22 Sep 2022 09:28:15 GMT
+recorded_with: VCR 6.0.0