punk 0.1.4 → 0.2.0

data/spec/actions/groups/punk/list_groups_action_spec.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+describe PUNK::ListGroupsAction do
+  let(:user) { create(:user) }
+  let(:tenant) { create(:tenant) }
+
+  context 'with no user provided' do
+    it 'returns a validation error' do
+      view = described_class.run(tenant: tenant).result.render(:json)
+      expect(view).to match('user is not present')
+    end
+  end
+
+  context 'with no tenant provided' do
+    it 'returns a validation error' do
+      view = described_class.run(user: user).result.render(:json)
+      expect(view).to match('tenant is not present')
+    end
+  end
+
+  context 'with valid arguments' do
+    let(:groups) { create_list(:group, 3, tenant: tenant) }
+
+    before do
+      user.add_tenant(tenant)
+      groups[0].add_user(user)
+      groups[1].add_user(user)
+    end
+
+    it 'returns groups for the tenant that the user is a member of' do
+      expect(tenant.groups.count).to eq(3)
+      view = JSON.parse(described_class.run(user: user, tenant: tenant).result.render(:json))
+      expect(view.map { |h| h['id'] }.sort).to eq([groups[0].id, groups[1].id].sort)
+    end
+  end
+end

data/spec/actions/sessions/punk/clear_session_action_spec.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+describe PUNK::ClearSessionAction do
+  context 'with no session provided' do
+    it 'returns a validation error' do
+      view = described_class.run.result.render(:json)
+      expect(view).to match('session is not present')
+      expect(view).to match('session is empty')
+    end
+  end
+
+  context 'with an inactive session provided' do
+    it 'returns a validation error' do
+      session = create(:session)
+      view = described_class.run(session: session).result.render(:json)
+      expect(view).to match('session is not in active state')
+      expect(view).to match('session may not clear')
+    end
+  end
+
+  context 'with an active session provided' do
+    it 'clears the session' do
+      session = create(:session, state: :active)
+      view = described_class.run(session: session).result.render(:json)
+      expect(view).to match('You have been logged out')
+      expect(session.deleted?).to be(true)
+    end
+  end
+end

data/spec/actions/sessions/punk/create_session_action_spec.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+describe PUNK::CreateSessionAction do
+  let(:remote_addr) { Faker::Internet.ip_v4_address }
+  let(:user_agent) { Faker::Internet.user_agent }
+
+  context 'with no claim provided' do
+    it 'returns a validation error' do
+      view = described_class.run(remote_addr: remote_addr, user_agent: user_agent).result.render(:json)
+      expect(view).to match('claim is not present')
+    end
+  end
+
+  context 'with an email claim provided' do
+    it 'created an identity and a session' do
+      email = Faker::Internet.email
+      view = described_class.run(claim: email, remote_addr: remote_addr, user_agent: user_agent).result.render(:json)
+      session = PUNK::Session.find(slug: ActiveSupport::JSON.decode(view)['slug'])
+      expect(session.identity.claim_type).to eq(:email)
+      expect(session.identity.claim).to eq(email)
+    end
+  end
+
+  context 'with a phone claim provided' do
+    it 'created an identity and a session' do
+      phone = generate(:phone)
+      view = described_class.run(claim: phone, remote_addr: remote_addr, user_agent: user_agent).result.render(:json)
+      session = PUNK::Session.find(slug: ActiveSupport::JSON.decode(view)['slug'])
+      expect(session.identity.claim_type).to eq(:phone)
+      expect(session.identity.claim).to eq(phone)
+    end
+  end
+end

data/spec/actions/sessions/punk/list_sessions_action_spec.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+describe PUNK::ListSessionsAction do
+  context 'with no user provided' do
+    it 'returns a validation error' do
+      view = described_class.run.result.render(:json)
+      expect(view).to match('user is not present')
+    end
+  end
+
+  context 'with a user provided' do
+    let(:user) { create(:user) }
+    let(:identity) { create(:identity, user: user) }
+
+    before do
+      create_list(:session, 3, state: 'active')
+      create_list(:session, 3, state: 'active', identity: identity)
+    end
+
+    it 'returns active sessions that the user belongs to' do
+      expect(PUNK::Session.count).to eq(6)
+      view = JSON.parse(described_class.run(user: user).result.render(:json))
+      expect(view.map { |h| h['id'] }.sort).to eq(user.active_sessions.map(&:id).sort)
+    end
+  end
+end

data/spec/actions/sessions/punk/verify_session_action_spec.rb

@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+describe PUNK::VerifySessionAction do
+  context 'with no session provided' do
+    it 'returns a validation error' do
+      view = described_class.run.result.render(:json)
+      expect(view).to match('session is not present')
+    end
+  end
+
+  context 'with no secret provided' do
+    it 'returns a validation error' do
+      session = create(:session)
+      view = described_class.run(session: session).result.render(:json)
+      expect(view).to match('secret is not present')
+    end
+  end
+
+  context 'with an inactive session provided' do
+    it 'returns a validation error' do
+      session = create(:session)
+      view = described_class.run(session: session, secret: 'xyzzy').result.render(:json)
+      expect(view).to match('session is not in pending state')
+      expect(view).to match('session may not verify')
+    end
+  end
+
+  context 'with a pending session provided' do
+    let(:session) { create(:session) }
+
+    before do
+      allow_any_instance_of(PUNK::SecretService).to receive(:process).and_return("xyzzy") # rubocop:disable RSpec/AnyInstance
+      PUNK::ChallengeClaimService.run(session: session)
+    end
+
+    it 'returns an error if the secret is not correct' do
+      expect { described_class.run(session: session, secret: 'qwerty') }.to raise_error(PUNK::BadRequest, "Secret is incorrect")
+    end
+
+    it 'expires the session after three failed attempts' do
+      described_class.run(session: session, secret: 'qwerty') rescue nil # rubocop:disable Style/RescueModifier
+      described_class.run(session: session, secret: 'qwerty') rescue nil # rubocop:disable Style/RescueModifier
+      expect { described_class.run(session: session, secret: 'qwerty') }.to raise_error(PUNK::BadRequest, "Too many attempts")
+    end
+
+    it 'expires the session if it is more than five minutes old' do
+      Timecop.travel(5.minutes.from_now)
+      view = described_class.run(session: session, secret: 'xyzzy').result.render(:json)
+      expect(view).to match('session may not verify')
+      expect(session.expired?).to be(true)
+    end
+
+    it 'verifies the session if the secret is correct' do
+      view = described_class.run(session: session, secret: 'xyzzy').result.render(:json)
+      expect(view).to match('We have succesfully verified your identity')
+      expect(session.active?).to be(true)
+    end
+  end
+end

data/spec/actions/tenants/punk/list_tenants_action_spec.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+describe PUNK::ListTenantsAction do
+  context 'with no user provided' do
+    it 'returns a validation error' do
+      view = described_class.run.result.render(:json)
+      expect(view).to match('user is not present')
+    end
+  end
+
+  context 'with a user provided' do
+    let(:user) { create(:user) }
+
+    before do
+      create_list(:tenant, 3)
+      3.times { create(:tenant).add_user(user) }
+    end
+
+    it 'returns tenants that the user belongs to' do
+      expect(PUNK::Tenant.count).to eq(6)
+      view = JSON.parse(described_class.run(user: user).result.render(:json))
+      expect(view.map { |h| h['id'] }.sort).to eq(user.tenants.map(&:id).sort)
+    end
+  end
+end

data/spec/actions/users/punk/list_group_users_action_spec.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+describe PUNK::ListGroupUsersAction do
+  context 'with no group provided' do
+    it 'returns a validation error' do
+      view = described_class.run.result.render(:json)
+      expect(view).to match('group is not present')
+    end
+  end
+
+  context 'with valid arguments' do
+    let(:group) { create(:group) }
+    let(:users) { create_list(:user, 3) }
+
+    before do
+      create_list(:user, 2)
+      users.each { |user| group.add_user(user) }
+    end
+
+    it 'returns users that are members of the given group' do
+      expect(PUNK::User.count).to eq(5)
+      view = JSON.parse(described_class.run(group: group).result.render(:json))
+      expect(view.map { |h| h['id'] }.sort).to eq(group.users.map(&:id).sort)
+    end
+  end
+end

data/spec/actions/users/punk/list_tenant_users_action_spec.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+describe PUNK::ListTenantUsersAction do
+  context 'with no tenant provided' do
+    it 'returns a validation error' do
+      view = described_class.run.result.render(:json)
+      expect(view).to match('tenant is not present')
+    end
+  end
+
+  context 'with valid arguments' do
+    let(:tenant) { create(:tenant) }
+    let(:users) { create_list(:user, 3) }
+
+    before do
+      create_list(:user, 2)
+      users.each { |user| tenant.add_user(user) }
+    end
+
+    it 'returns users that are members of the given tenant' do
+      expect(PUNK::User.count).to eq(5)
+      view = JSON.parse(described_class.run(tenant: tenant).result.render(:json))
+      expect(view.map { |h| h['id'] }.sort).to eq(tenant.users.map(&:id).sort)
+    end
+  end
+end

data/spec/factories/group.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+FactoryBot.define do
+  factory :group, class: 'PUNK::Group' do
+    to_create(&:save)
+
+    tenant
+
+    name { Faker::Name.name }
+    icon { Faker::Internet.url }
+  end
+end

data/spec/factories/group_user_metadata.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+FactoryBot.define do
+  factory :group_user_metadata, class: 'PUNK::GroupUserMetadata' do
+    to_create(&:save)
+
+    group
+    user
+  end
+end

data/spec/factories/identity.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+FactoryBot.define do
+  factory :identity, class: 'PUNK::Identity' do
+    to_create(&:save)
+
+    user
+
+    claim_type { ['email', 'phone'].sample }
+    claim do
+      case claim_type
+      when 'email'
+        Faker::Internet.email
+      when 'phone'
+        generate(:phone)
+      end
+    end
+  end
+end

data/spec/factories/session.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+FactoryBot.define do
+  factory :session, class: 'PUNK::Session' do
+    to_create(&:save)
+
+    identity
+
+    remote_addr { Faker::Internet.ip_v4_address }
+    user_agent { Faker::Internet.user_agent }
+  end
+end

data/spec/factories/tenant.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+FactoryBot.define do
+  factory :tenant, class: 'PUNK::Tenant' do
+    to_create(&:save)
+
+    name { Faker::Name.name }
+    icon { Faker::Internet.url }
+  end
+end

data/spec/factories/tenant_user_metadata.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+FactoryBot.define do
+  factory :tenant_user_metadata, class: 'PUNK::TenantUserMetadata' do
+    to_create(&:save)
+
+    tenant
+    user
+  end
+end

data/spec/factories/user.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+FactoryBot.define do
+  factory :user, class: 'PUNK::User' do
+    to_create(&:save)
+
+    name { Faker::Name.name }
+    icon { Faker::Internet.url }
+    email { Faker::Internet.email }
+    phone { generate(:phone) }
+  end
+end

data/spec/lib/commands/auth_spec.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+# describe 'auth', type: :feature do
+#   describe 'login command', type: :feature do
+#     it 'displays "not yet implemented"'
+#   end
+
+#   describe 'logout command', type: :feature do
+#     it 'displays "not yet implemented"'
+#   end
+# end

data/spec/lib/commands/generate_spec.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+describe 'generate command', type: :feature do
+  context 'when no tests have been written' do
+    it 'displays "not yet implemented"'
+  end
+end

data/spec/lib/commands/http_spec.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+# describe 'http', type: :feature do
+#   describe 'GET command', type: :feature do
+#     it 'displays "not yet implemented"'
+#   end
+
+#   describe 'PATCH command', type: :feature do
+#     it 'displays "not yet implemented"'
+#   end
+
+#   describe 'POST command', type: :feature do
+#     it 'displays "not yet implemented"'
+#   end
+
+#   describe 'PUT command', type: :feature do
+#     it 'displays "not yet implemented"'
+#   end
+
+#   describe 'DELETE command', type: :feature do
+#     it 'displays "not yet implemented"'
+#   end
+# end

data/spec/lib/commands/list_spec.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+describe 'list command', type: :feature do
+  context 'when no tests have been written' do
+    it 'displays "not yet implemented"'
+  end
+end

data/spec/lib/commands/swagger_spec.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+describe 'swagger command', type: :feature do
+  context 'when no tests have been written' do
+    it 'displays "not yet implemented"'
+  end
+end

data/spec/lib/engine/punk_env_spec.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+describe PUNK do
+  describe '.env' do
+    it 'loads environment' do
+      expect(described_class.get.trace).to eq('spec_test')
+    end
+
+    it 'loads configuration' do
+      expect(described_class.env.to_sym).to eq(:test)
+    end
+  end
+end