quo_vadis 1.3.2 → 2.0.1

data/test/dummy/public/javascripts/rails.js

@@ -1,175 +0,0 @@
-(function() {
-  // Technique from Juriy Zaytsev
-  // http://thinkweb2.com/projects/prototype/detecting-event-support-without-browser-sniffing/
-  function isEventSupported(eventName) {
-    var el = document.createElement('div');
-    eventName = 'on' + eventName;
-    var isSupported = (eventName in el);
-    if (!isSupported) {
-      el.setAttribute(eventName, 'return;');
-      isSupported = typeof el[eventName] == 'function';
-    }
-    el = null;
-    return isSupported;
-  }
-
-  function isForm(element) {
-    return Object.isElement(element) && element.nodeName.toUpperCase() == 'FORM'
-  }
-
-  function isInput(element) {
-    if (Object.isElement(element)) {
-      var name = element.nodeName.toUpperCase()
-      return name == 'INPUT' || name == 'SELECT' || name == 'TEXTAREA'
-    }
-    else return false
-  }
-
-  var submitBubbles = isEventSupported('submit'),
-      changeBubbles = isEventSupported('change')
-
-  if (!submitBubbles || !changeBubbles) {
-    // augment the Event.Handler class to observe custom events when needed
-    Event.Handler.prototype.initialize = Event.Handler.prototype.initialize.wrap(
-      function(init, element, eventName, selector, callback) {
-        init(element, eventName, selector, callback)
-        // is the handler being attached to an element that doesn't support this event?
-        if ( (!submitBubbles && this.eventName == 'submit' && !isForm(this.element)) ||
-             (!changeBubbles && this.eventName == 'change' && !isInput(this.element)) ) {
-          // "submit" => "emulated:submit"
-          this.eventName = 'emulated:' + this.eventName
-        }
-      }
-    )
-  }
-
-  if (!submitBubbles) {
-    // discover forms on the page by observing focus events which always bubble
-    document.on('focusin', 'form', function(focusEvent, form) {
-      // special handler for the real "submit" event (one-time operation)
-      if (!form.retrieve('emulated:submit')) {
-        form.on('submit', function(submitEvent) {
-          var emulated = form.fire('emulated:submit', submitEvent, true)
-          // if custom event received preventDefault, cancel the real one too
-          if (emulated.returnValue === false) submitEvent.preventDefault()
-        })
-        form.store('emulated:submit', true)
-      }
-    })
-  }
-
-  if (!changeBubbles) {
-    // discover form inputs on the page
-    document.on('focusin', 'input, select, texarea', function(focusEvent, input) {
-      // special handler for real "change" events
-      if (!input.retrieve('emulated:change')) {
-        input.on('change', function(changeEvent) {
-          input.fire('emulated:change', changeEvent, true)
-        })
-        input.store('emulated:change', true)
-      }
-    })
-  }
-
-  function handleRemote(element) {
-    var method, url, params;
-
-    var event = element.fire("ajax:before");
-    if (event.stopped) return false;
-
-    if (element.tagName.toLowerCase() === 'form') {
-      method = element.readAttribute('method') || 'post';
-      url    = element.readAttribute('action');
-      params = element.serialize();
-    } else {
-      method = element.readAttribute('data-method') || 'get';
-      url    = element.readAttribute('href');
-      params = {};
-    }
-
-    new Ajax.Request(url, {
-      method: method,
-      parameters: params,
-      evalScripts: true,
-
-      onComplete:    function(request) { element.fire("ajax:complete", request); },
-      onSuccess:     function(request) { element.fire("ajax:success",  request); },
-      onFailure:     function(request) { element.fire("ajax:failure",  request); }
-    });
-
-    element.fire("ajax:after");
-  }
-
-  function handleMethod(element) {
-    var method = element.readAttribute('data-method'),
-        url = element.readAttribute('href'),
-        csrf_param = $$('meta[name=csrf-param]')[0],
-        csrf_token = $$('meta[name=csrf-token]')[0];
-
-    var form = new Element('form', { method: "POST", action: url, style: "display: none;" });
-    element.parentNode.insert(form);
-
-    if (method !== 'post') {
-      var field = new Element('input', { type: 'hidden', name: '_method', value: method });
-      form.insert(field);
-    }
-
-    if (csrf_param) {
-      var param = csrf_param.readAttribute('content'),
-          token = csrf_token.readAttribute('content'),
-          field = new Element('input', { type: 'hidden', name: param, value: token });
-      form.insert(field);
-    }
-
-    form.submit();
-  }
-
-
-  document.on("click", "*[data-confirm]", function(event, element) {
-    var message = element.readAttribute('data-confirm');
-    if (!confirm(message)) event.stop();
-  });
-
-  document.on("click", "a[data-remote]", function(event, element) {
-    if (event.stopped) return;
-    handleRemote(element);
-    event.stop();
-  });
-
-  document.on("click", "a[data-method]", function(event, element) {
-    if (event.stopped) return;
-    handleMethod(element);
-    event.stop();
-  });
-
-  document.on("submit", function(event) {
-    var element = event.findElement(),
-        message = element.readAttribute('data-confirm');
-    if (message && !confirm(message)) {
-      event.stop();
-      return false;
-    }
-
-    var inputs = element.select("input[type=submit][data-disable-with]");
-    inputs.each(function(input) {
-      input.disabled = true;
-      input.writeAttribute('data-original-value', input.value);
-      input.value = input.readAttribute('data-disable-with');
-    });
-
-    var element = event.findElement("form[data-remote]");
-    if (element) {
-      handleRemote(element);
-      event.stop();
-    }
-  });
-
-  document.on("ajax:after", "form", function(event, element) {
-    var inputs = element.select("input[type=submit][disabled=true][data-disable-with]");
-    inputs.each(function(input) {
-      input.value = input.readAttribute('data-original-value');
-      input.removeAttribute('data-original-value');
-      input.disabled = false;
-    });
-  });
-})();

data/test/dummy/script/rails

@@ -1,6 +0,0 @@
-#!/usr/bin/env ruby
-# This command will automatically be run when you run "rails" with Rails 3 gems installed from the root of your application.
-
-APP_PATH = File.expand_path('../../config/application',  __FILE__)
-require File.expand_path('../../config/boot',  __FILE__)
-require 'rails/commands'

data/test/integration/activation_test.rb

@@ -1,108 +0,0 @@
-require 'test_helper'
-
-class ActivationTest < ActiveSupport::IntegrationCase
-
-  teardown do
-    Capybara.reset_sessions!
-  end
-
-  test 'a user can be invited' do
-    user = User.new_for_activation :name => 'Bob', :email => 'bob@example.com'
-    assert user.save
-    assert QuoVadis::SessionsController.new.invite_to_activate user
-
-    assert ActionMailer::Base.deliveries.last
-    assert !ActionMailer::Base.deliveries.empty?
-    email = ActionMailer::Base.deliveries.last
-
-    assert_equal ['bob@example.com'],      email.to
-    assert_equal ['noreply@example.com'],  email.from
-    assert_equal 'Activate your account',  email.subject
-    # Why doesn't this use the default url option set up in test/test_helper.rb#9?
-    assert_match Regexp.new(Regexp.escape(invitation_url user.token, :host => 'www.example.com')), email.encoded
-  end
-
-  test 'a user without email cannot be invited' do
-    user = User.new_for_activation :name => 'Bob'
-    assert user.save
-    assert ! QuoVadis::SessionsController.new.invite_to_activate(user)
-  end
-
-  test 'user can accept a valid invitation and set valid credentials' do
-    user = User.new_for_activation :name => 'Bob', :email => 'bob@example.com'
-    user.generate_token
-    assert user.save
-
-    visit invitation_url(user.token, :host => 'www.example.com')
-    fill_in 'Username', :with => 'bob'
-    fill_in 'Password', :with => 'secret'
-    click_button 'Save my details'
-    assert_equal root_path, current_path
-    within '.flash.notice' do
-      assert page.has_content?("Your account is active and you're now signed in.")
-    end
-    assert_nil user.reload.token
-    assert_nil user.token_created_at
-  end
-
-  test 'user can accept a valid invitation but not set invalid credentials' do
-    user = User.new_for_activation :name => 'Bob', :email => 'bob@example.com'
-    user.generate_token
-    assert user.save
-
-    visit invitation_url(user.token, :host => 'www.example.com')
-    fill_in 'Username', :with => 'bob'
-    fill_in 'Password', :with => ''
-    click_button 'Save my details'
-    assert_equal activation_path(user.token), current_path
-    assert user.reload.token
-    assert user.token_created_at
-  end
-
-  test 'user cannot view an expired invitation' do
-    user = User.new_for_activation :name => 'Bob', :email => 'bob@example.com'
-    user.generate_token
-    assert user.save
-    user.update_attributes :token_created_at => 1.day.ago
-
-    visit invitation_url(user.token, :host => 'www.example.com')
-    assert_equal root_path, current_path
-    within '.flash.alert' do
-      assert page.has_content?("Sorry, this link isn't valid anymore.")
-    end
-  end
-
-  test 'user cannot accept an expired invitation' do
-    user = User.new_for_activation :name => 'Bob', :email => 'bob@example.com'
-    user.generate_token
-    assert user.save
-
-    visit invitation_url(user.token, :host => 'www.example.com')
-    user.update_attributes :token_created_at => 1.day.ago
-    fill_in 'Username', :with => 'bob'
-    fill_in 'Password', :with => 'secret'
-    click_button 'Save my details'
-    assert_equal root_path, current_path
-    within '.flash.alert' do
-      assert page.has_content?("Sorry, this link isn't valid anymore.")
-    end
-  end
-
-  test 'data can be passed to invitation email' do
-    user = User.new_for_activation :name => 'Bob', :email => 'bob@example.com'
-    assert user.save
-    assert QuoVadis::SessionsController.new.invite_to_activate user, :foo => 'Barbaz'
-    email = ActionMailer::Base.deliveries.last
-    assert_match Regexp.new('Barbaz'), email.encoded
-  end
-
-  test 'data can be passed to invitation email to override :from and :subject' do
-    user = User.new_for_activation :name => 'Bob', :email => 'bob@example.com'
-    assert user.save
-    assert QuoVadis::SessionsController.new.invite_to_activate user,
-      :subject => 'Foo', :from => 'Bar <bar@example.com>'
-    email = ActionMailer::Base.deliveries.last
-    assert_equal ['bar@example.com'], email.from
-    assert_equal 'Foo', email.subject
-  end
-end

data/test/integration/authenticate_test.rb

@@ -1,39 +0,0 @@
-require 'test_helper'
-
-class AuthenticationTest < ActiveSupport::IntegrationCase
-
-  teardown do
-    Capybara.reset_sessions!
-  end
-
-  test 'action not requiring authentication' do
-    visit articles_path
-
-    assert_equal articles_path, current_path
-    within 'h1' do
-      assert page.has_content?('Articles')
-    end
-  end
-
-  test 'action requiring authentication' do
-    # try to see page
-    visit new_article_path
-    
-    # test we need to authenticate
-    assert_equal sign_in_path, current_path
-    within '.flash.notice' do
-      assert page.has_content? 'Please sign in first.'
-    end
-
-    # sign in
-    user_factory 'Bob', 'bob', 'secret'
-    sign_in_as 'bob', 'secret'
-    visit new_article_path
-
-    # test we can now see page
-    assert_equal new_article_path, current_path
-    within 'h1' do
-      assert page.has_content?('New Article')
-    end
-  end
-end

data/test/integration/blocked_test.rb

@@ -1,23 +0,0 @@
-require 'test_helper'
-
-class BlockedTest < ActiveSupport::IntegrationCase
-
-  test 'sign-in process can be blocked' do
-    user_factory 'Bob', 'bob', 'secret'
-    user_factory 'Jim', 'jim', 'secret'
-
-    QuoVadis.blocked = Proc.new do |controller|
-      controller.params[:username] == 'bob'
-    end
-
-    sign_in_as 'bob', 'secret'
-    within '.flash' do
-      assert page.has_content?('Sorry, your account is blocked.')
-    end
-
-    sign_in_as 'jim', 'secret'
-    within '.flash' do
-      assert page.has_content?('You have successfully signed in.')
-    end
-  end
-end

data/test/integration/config_test.rb

@@ -1,132 +0,0 @@
-require 'test_helper'
-
-class ConfigTest < ActiveSupport::IntegrationCase
-
-  setup do
-    user_factory 'Bob', 'bob', 'secret'
-  end
-
-  test 'signed_in_url config' do
-    sign_in_as 'bob', 'secret'
-    assert_equal root_path, current_path
-    visit sign_out_path
-
-    QuoVadis.signed_in_url = :articles
-
-    sign_in_as 'bob', 'secret'
-    assert_equal articles_path, current_path
-  end
-
-  test 'signed_in_url proc config' do
-    QuoVadis.signed_in_url = Proc.new do |user, controller|
-      user.name == 'Bob' ? :articles : :root
-    end
-    sign_in_as 'bob', 'secret'
-    assert_equal articles_path, current_path
-
-    QuoVadis.signed_in_url = Proc.new do |user, controller|
-      user.name != 'Bob' ? :articles : :root
-    end
-    sign_in_as 'bob', 'secret'
-    assert_equal root_path, current_path
-  end
-
-  test 'override_original_url config' do
-    visit new_article_path
-    assert_equal sign_in_path, current_path
-    sign_in_as 'bob', 'secret'
-    assert_equal new_article_path, current_path
-    visit sign_out_path
-
-    QuoVadis.override_original_url = true
-
-    visit new_article_path
-    assert_equal sign_in_path, current_path
-    sign_in_as 'bob', 'secret'
-    assert_equal root_path, current_path
-  end
-
-  test 'blocked config' do
-    QuoVadis.blocked = Proc.new do |controller|
-      controller.params[:username] == 'bob'
-    end
-    sign_in_as 'bob', 'secret'
-    within '.flash' do
-      assert page.has_content?('Sorry, your account is blocked.')
-    end
-    sign_in_as 'jim', 'secret'
-    within '.flash' do
-      assert page.has_no_content?('Sorry, your account is blocked.')
-    end
-  end
-
-  test 'signed_out_url config' do
-    visit sign_out_path
-    assert_equal root_path, current_path
-
-    QuoVadis.signed_out_url = :articles
-
-    visit sign_out_path
-    assert_equal articles_path, current_path
-  end
-
-  test 'signed_in_hook' do
-    QuoVadis.signed_in_hook = Proc.new do |user, request|
-      user.update_attributes :name => 'Robert'
-    end
-    sign_in_as 'bob', 'secret'
-    within '#topnav' do
-      assert page.has_content?('You are signed in as Robert.')
-    end
-  end
-
-  test 'failed_sign_in hook' do
-    QuoVadis.failed_sign_in_hook = Proc.new do |request|
-      request.flash[:muppet] = request.params[:username]
-    end
-    sign_in_as 'bob', 'wrong'
-    within '.flash.muppet' do
-      assert page.has_content?('bob')
-    end
-  end
-
-  test 'signed_out hook' do
-    QuoVadis.signed_out_hook = Proc.new do |user, request|
-      request.flash[:fyi] = user.name
-    end
-    sign_in_as 'bob', 'secret'
-    visit sign_out_path
-
-    within '.flash.fyi' do
-      assert page.has_content?('Bob')
-    end
-  end
-
-  test 'layout config' do
-    QuoVadis.layout = 'sessions'
-    visit sign_in_path
-    assert page.has_content?('Sessions layout')
-  end
-
-  test 'change-password mailer from config' do
-    QuoVadis.from = 'jim@example.com'
-    (user = User.last).generate_token
-    email = QuoVadis::Notifier.change_password(user)
-    assert_equal ['jim@example.com'], email.from
-  end
-
-  test 'change-password mailer subject config' do
-    QuoVadis.subject_change_password = 'You idiot!'
-    (user = User.last).generate_token
-    email = QuoVadis::Notifier.change_password(user)
-    assert_equal 'You idiot!', email.subject
-  end
-
-  test 'invitation mailer subject config' do
-    QuoVadis.subject_invitation = 'Wooha'
-    (user = User.last).generate_token
-    email = QuoVadis::Notifier.invite(user)
-    assert_equal 'Wooha', email.subject
-  end
-
-end