rails_com 1.2.9 → 1.3.0

data/app/models/com/ext/state_machine.rb

@@ -0,0 +1,82 @@
+# frozen_string_literal: true
+module Com
+  module Ext::StateMachine
+
+    # to defined next_xxx_states in class
+
+    # obj.next_to state: 'xxx'
+    def next_to(options = {}, &block)
+      options.each do |column, value|
+        if self.class.method_defined? "next_#{column}_states"
+          _next_state = self.send("next_#{column}_states").first
+        else
+          _next_state = next_state(column, &block)
+        end
+
+        if _next_state == value.to_s
+          assign_attributes(column => value)
+        else
+          error_msg = "Next state is wrong, should be #{_next_state}"
+          errors.add column, error_msg
+          raise ActiveRecord::Rollback, error_msg
+        end
+      end
+    end
+
+    def next_to!(options = {}, &block)
+      self.next_to(options, &block)
+      self.save!
+    end
+
+    def trigger_to(options = {}, &block)
+      options.each do |column, value|
+        if self.class.method_defined? "next_#{column}_states"
+          _next_states = self.send "next_#{column}_states"
+        else
+          _next_states = next_states(column, &block)
+        end
+
+        if _next_states.include?(value.to_s)
+          assign_attributes(column => value)
+        else
+          error_msg = "Next state is wrong, should be one of #{_next_states.join(', ')}"
+          errors.add column, error_msg
+          raise ActiveRecord::Rollback, error_msg
+        end
+      end
+    end
+
+    def trigger_to!(options = {}, &block)
+      self.trigger_to(options, &block)
+      self.save!
+    end
+
+    def next_state(state_name, &block)
+      next_states(state_name, &block).first
+    end
+
+    # obj.next_states(:state) do |result|
+    #   result.reject
+    # end
+    def next_states(state_name, &block)
+      _states = self.class.send(state_name.to_s.pluralize)
+      _states = _states.keys
+      _state = self.send(state_name)
+
+      if _state.nil?
+        next_index = 0
+      else
+        i = _states.index(_state)
+        next_index = i + 1
+      end
+      result = _states[next_index..(_states.size - 1)]
+
+      if block_given?
+        yield block.call(result)
+      else
+        result
+      end
+    end
+
+  end
+end

data/app/models/com/ext/taxon.rb

@@ -0,0 +1,81 @@
+# required fields
+# :parent_id
+require 'closure_tree'
+module Com
+  module Ext::Taxon
+
+    def self.included(model)
+      if model.table_exists? && model.column_names.include?('position')
+        model.has_closure_tree order: 'position'
+      else
+        model.has_closure_tree
+      end
+      model.include Com::Ext::TaxonPrepend
+
+      model.attribute :parent_ancestors, :json, default: {}
+      model.before_validation :sync_parent_id, if: -> { parent_ancestors_changed? && (parent_ancestors.presence != parent_ancestors_was.presence) }
+      model.before_validation :set_parent_ancestors, if: -> { parent.present? && parent_ancestors.blank? }  # todo 考虑 parent 改变的情况
+      model.hierarchy_class.attribute :generations, :integer, null: false
+      model.hierarchy_class.attribute :created_at, :datetime, null: true  # 需要 created_at/updated_at 可为空值
+      model.hierarchy_class.attribute :updated_at, :datetime, null: true
+      model.hierarchy_class.index [:ancestor_id, :descendant_id, :generations], unique: true, name: "#{model.name.underscore}_anc_desc_idx"
+
+      def model.max_depth
+        self.hierarchy_class.maximum(:generations).to_i + 1
+      end
+
+      def model.extract_multi_attributes(pairs)
+        _pairs = pairs.select { |k, _| k.include?('(') }
+        _real = {}
+        r = self.new.send :extract_callstack_for_multiparameter_attributes, _pairs
+        r.each do |k, v|
+          _real[k.sub(/ancestors$/, 'id')] = v.values.compact.last
+        end
+        _real
+      end
+    end
+
+    def depth_str
+      (0..self.class.max_depth - self.depth).to_a.reverse.join
+    end
+
+    def set_parent_ancestors
+      self.parent_ancestors = Hash(parent.parent_ancestors).merge! parent.depth.to_s => parent.id
+    end
+
+    def sync_parent_id
+      _parent_id = Hash(parent_ancestors).values.compact.last
+      if _parent_id
+        self.parent_id = _parent_id
+      else
+        self.parent_id = nil
+      end
+    end
+
+    def middle?
+      parent_id.present? && depth < self.class.max_depth
+    end
+
+    def sheer_descendant_ids(c_ids = child_ids)
+      @sheer_descendant_ids ||= c_ids.dup
+      get_ids = self.class.where(parent_id: c_ids).pluck(:id)
+      if get_ids.present?
+        _get_ids = get_ids - @sheer_descendant_ids
+        @sheer_descendant_ids.concat get_ids
+        sheer_descendant_ids(_get_ids)
+      else
+        @sheer_descendant_ids
+      end
+    end
+
+    def sheer_ancestor_ids
+      node, node_ids = self, []
+      until (node_ids + [self.id]).include?(node.parent_id)
+        node_ids << node.parent_id
+        node = node.parent
+      end
+      node_ids
+    end
+
+  end
+end

data/app/models/com/ext/taxon_prepend.rb

@@ -0,0 +1,21 @@
+module Com
+  module Ext::TaxonPrepend
+
+    def self_and_siblings
+      if self.class.column_names.include?('organ_id')
+        super.where(organ_id: self.organ_id)
+      else
+        super
+      end
+    end
+
+    def depth
+      if parent
+        parent.depth + 1
+      else
+        super
+      end
+    end
+
+  end
+end

data/app/models/com/info.rb

@@ -0,0 +1,5 @@
+module Com
+  class Info < ApplicationRecord
+    include Model::Info
+  end
+end

data/app/models/com/meta_action.rb

@@ -0,0 +1,5 @@
+module Com
+  class MetaAction < ApplicationRecord
+    include Model::MetaAction
+  end
+end

data/app/models/com/meta_business.rb

@@ -0,0 +1,5 @@
+module Com
+  class MetaBusiness < ApplicationRecord
+    include Model::MetaBusiness
+  end
+end

data/app/models/com/meta_column.rb

@@ -0,0 +1,5 @@
+module Com
+  class MetaColumn < ApplicationRecord
+    include Model::MetaColumn
+  end
+end

data/app/models/com/meta_controller.rb

@@ -0,0 +1,5 @@
+module Com
+  class MetaController < ApplicationRecord
+    include Model::MetaController
+  end
+end

data/app/models/com/meta_model.rb

@@ -0,0 +1,5 @@
+module Com
+  class MetaModel < ApplicationRecord
+    include Model::MetaModel
+  end
+end

data/app/models/com/meta_namespace.rb

@@ -0,0 +1,5 @@
+module Com
+  class MetaNamespace < ApplicationRecord
+    include Model::MetaNamespace
+  end
+end

data/app/models/com/meta_operation.rb

@@ -0,0 +1,5 @@
+module Com
+  class MetaOperation < ApplicationRecord
+    include Model::MetaOperation
+  end
+end

data/app/models/com/meta_route.rb

@@ -0,0 +1,5 @@
+module Com
+  class MetaRoute < ApplicationRecord
+    include Model::MetaRoute
+  end
+end

data/app/models/com/model/acme_account.rb

@@ -0,0 +1,70 @@
+require 'acme-client'
+module Com
+  module Model::AcmeAccount
+    extend ActiveSupport::Concern
+
+    included do
+      attribute :email, :string
+      attribute :kid, :string
+
+      has_many :acme_orders, dependent: :destroy_async
+
+      if ActiveStorage::Blob.services.instance_values.dig('configurations', :acme)
+        has_one_attached :private_pem, service: :acme
+      else
+        has_one_attached :private_pem
+      end
+
+      after_create_commit :generate_account
+
+      validates :email, uniqueness: true
+    end
+
+    def private_key
+      return @private_key if defined? @private_key
+      if private_pem_blob
+        @private_key = OpenSSL::PKey::RSA.new(private_pem_blob.download)
+      else
+        @private_key = OpenSSL::PKey::RSA.new(4096)
+      end
+    end
+
+    def generate_account
+      store_private_pem unless private_pem_blob
+      self.update(kid: account.kid)
+    end
+
+    def store_private_pem
+      Tempfile.open do |file|
+        file.binmode
+        file.write private_key.to_pem
+        file.rewind
+        self.private_pem.attach io: file, filename: "#{email}.pem"
+      end
+    end
+
+    def client
+      return @client if defined? @client
+
+      if self.kid
+        @client = Acme::Client.new(private_key: private_key, directory: directory, kid: kid)
+      else
+        @client = Acme::Client.new(private_key: private_key, directory: directory)
+      end
+    end
+
+    def directory
+      RailsCom.config.acme_url
+    end
+
+    def contact
+      "mailto:#{email}"
+    end
+
+    def account
+      return @account if defined? @account
+      @account = client.new_account(contact: contact, terms_of_service_agreed: true)
+    end
+
+  end
+end

data/app/models/com/model/acme_identifier.rb

@@ -0,0 +1,132 @@
+module Com
+  module Model::AcmeIdentifier
+    extend ActiveSupport::Concern
+
+    included do
+      attribute :identifier, :string
+      attribute :file_name, :string
+      attribute :file_content, :string
+      attribute :token, :string
+      attribute :record_name, :string
+      attribute :record_content, :string
+      attribute :domain, :string
+      attribute :wildcard, :boolean
+      attribute :url, :string
+      attribute :dns_valid, :boolean, default: false
+      attribute :file_valid, :boolean, default: false
+
+      belongs_to :acme_order
+
+      enum status: {
+        pending: 'pending',
+        valid: 'valid',
+        invalid: 'invalid'
+      }, _prefix: true
+
+      before_save :renew_dns_valid, if: -> { record_content_changed? }
+      before_save :renew_file_valid, if: -> { file_content_changed? }
+      before_save :compute_wildcard, if: -> { identifier_changed? && identifier.present? }
+    end
+
+    def renew_dns_valid
+      self.dns_valid = false
+    end
+
+    def renew_file_valid
+      self.file_valid = false
+    end
+
+    def compute_wildcard
+      if identifier.start_with?('*.')
+        self.wildcard = true
+        self.domain = identifier.delete_prefix('*.')
+      else
+        self.domain = identifier
+      end
+    end
+
+    # todo use aliyun temply
+    def ensure_dns
+      r = AliDns.add_acme_record domain, record_content
+      if r['RecordId']
+        AliDns.check_record(domain, record_content)
+      end
+    end
+
+    def dns_resolv
+      Resolv::DNS.open do |dns|
+        records = dns.getresources dns_host, Resolv::DNS::Resource::IN::TXT
+        records.map!(&:data)
+      end
+    end
+
+    def dns_verify?
+      unless dns_resolv.include?(record_content)
+        ensure_dns
+      end
+
+      auth = authorization
+      auth.dns.request_validation
+      if auth.reload && auth.status == 'valid'
+        self.update dns_valid: true, status: 'valid'
+      end
+      dns_valid
+    end
+
+    def auto_verify
+      if file_name.present? && file_content.present?
+        file_verify?
+      else
+        dns_verify?
+      end
+    end
+
+    def file_verify?
+      file_path = Rails.root.join('public', file_name)
+
+      unless file_path.file? && file_path.read == file_content
+        file_path.dirname.exist? || file_path.dirname.mkpath
+        File.open(file_path, 'w') do |f|
+          f.write file_content
+        end
+      end
+
+      auth = authorization
+      auth.http.request_validation
+      if auth.reload && auth.status == 'valid'
+        self.update file_valid: true, status: 'valid'
+      end
+
+      file_valid
+    end
+
+    def save_auth(auth = authorization)
+      update(
+        record_name: auth.dns&.record_name,
+        record_content: auth.dns&.record_content,
+        file_name: auth.http&.filename,
+        file_content: auth.http&.file_content,
+        url: auth.url,
+        status: auth.status
+      )
+    end
+
+    def dns_host
+      "#{record_name}.#{domain}"
+    end
+
+    def authorization
+      auth = acme_order.order.authorizations.find { |i| domain == i.domain && wildcard.present? == i.wildcard.present? }
+    rescue Acme::Client::Error::BadNonce
+      retry
+    else
+      save_auth(auth)
+      auth
+    end
+
+    def deactivate
+      acme_order.acme_account.client.deactivate_authorization(url: url)
+    end
+
+  end
+end

data/app/models/com/model/acme_order.rb

@@ -0,0 +1,139 @@
+require 'acme-client'
+module Com
+  module Model::AcmeOrder
+    extend ActiveSupport::Concern
+
+    included do
+      attribute :orderid, :string
+      attribute :url, :string
+      attribute :issued_at, :datetime
+      attribute :expire_at, :datetime, comment: '过期时间'
+
+      enum status: {
+        pending: 'pending',
+        ready: 'ready',
+        valid: 'valid',
+        invalid: 'invalid'
+      }, _prefix: true
+
+      belongs_to :acme_account
+      has_many :acme_identifiers, dependent: :delete_all
+      accepts_nested_attributes_for :acme_identifiers
+
+      if ActiveStorage::Blob.services.instance_values.dig('configurations', :acme)
+        has_one_attached :private_pem, service: :acme
+        has_one_attached :cert_key, service: :acme
+      else
+        has_one_attached :private_pem
+        has_one_attached :cert_key
+      end
+
+      after_update_commit :renew_before_expired, if: -> { saved_change_to_issued_at? && issued_at.present? }
+    end
+
+    # status: pending
+    def order(renewal = false)
+      if defined?(@order) && !renewal
+        return @order
+      end
+
+      if !renewal && url
+        begin
+          @order = acme_account.client.order(url: url)
+        rescue Acme::Client::Error::BadNonce
+          retry
+        rescue Acme::Client::Error::NotFound => e
+          @order = renew_order
+        end
+      else
+        @order = renew_order
+      end
+
+      @order
+    end
+
+    # x
+    def renew_order
+      r = acme_account.client.new_order(identifiers: identifiers)
+    rescue Acme::Client::Error::BadNonce
+      retry
+    else
+      self.orderid = r.to_h[:url].split('/')[-1]
+      self.assign_attributes r.to_h.slice(:status, :url)
+      self.save
+      r
+    end
+
+    def get_cert(tries = 2)
+      case order.status
+      when 'invalid'
+        order(true)
+      when 'pending'
+        acme_identifiers.map(&:authorization)
+        acme_identifiers.map(&:auto_verify).all?(true) && order.reload
+      when 'ready'
+        finalize
+      when 'valid'
+        cert # order.certificate_url.present?
+      end
+    rescue
+      retry unless (tries -= 1).zero?
+    end
+
+    def identifiers
+      acme_identifiers.pluck(:identifier).sort
+    end
+
+    def identifiers_string
+      r = identifiers.first
+      r = r.delete_prefix '*.'
+      r.gsub('.', '_')
+    end
+
+    def common_name
+      identifiers.first
+    end
+
+    def csr
+      return @csr if defined? @csr
+      @csr = Acme::Client::CertificateRequest.new(names: identifiers, subject: { common_name: common_name })
+      Tempfile.open do |file|
+        file.binmode
+        file.write @csr.private_key.to_pem
+        file.rewind
+        self.private_pem.attach io: file, filename: "#{identifiers_string}.key"
+      end
+      @csr
+    end
+
+    # status: valid
+    def finalize
+      order.finalize(csr: csr)
+    rescue Acme::Client::Error::BadNonce
+      retry
+    ensure
+      self.status = order.status
+      self.save
+    end
+
+    def cert
+      r = order.certificate
+    rescue Acme::Client::Error::BadNonce
+      retry
+    else
+      file = Tempfile.new
+      file.binmode
+      file.write r
+      file.rewind
+      self.issued_at = Time.current
+      self.status = order.status
+      self.cert_key.attach io: file, filename: "#{identifiers_string}.pem"
+      r
+    end
+
+    def renew_before_expired
+      AcmeJob.set(wait_until: issued_at + 2.months).perform_later(self)
+    end
+
+  end
+end

data/app/models/com/model/blob_default.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+module Com
+  module Model::BlobDefault
+    extend ActiveSupport::Concern
+
+    included do
+      attribute :record_class, :string, comment: 'AR 类名，如 User'
+      attribute :name, :string, comment: '名称, attach 名称，如：avatar'
+
+      has_one_attached :file
+
+      after_commit :delete_default_cache, on: [:create, :destroy]
+      after_update_commit :delete_default_cache
+    end
+
+    def delete_default_cache
+      r = Rails.cache.delete('blob_default/default')
+      logger.debug "Cache key blob_default/default delete: #{r}"
+    end
+
+    class_methods do
+      def defaults
+        Rails.cache.fetch('blob_default/default') do
+          BlobDefault.includes(:file_attachment).map do |i|
+            ["#{i.record_class}_#{i.name}", i.file_attachment&.blob_id]
+          end.compact.to_h
+        end
+      end
+
+      def cache_clear
+        Rails.cache.delete('blob_default/default')
+      end
+    end
+
+  end
+end

data/app/models/com/model/cache_list.rb

@@ -0,0 +1,15 @@
+module Com
+  module Model::CacheList
+    extend ActiveSupport::Concern
+
+    included do
+      attribute :path, :string
+      attribute :key, :string
+    end
+
+    def etag
+
+    end
+
+  end
+end

data/app/models/com/model/csp.rb

@@ -0,0 +1,23 @@
+module Com
+  module Model::Csp
+    extend ActiveSupport::Concern
+
+    included do
+      attribute :document_uri, :string
+      attribute :referrer, :string
+      attribute :violated_directive, :string
+      attribute :effective_directive, :string
+      attribute :original_policy, :string
+      attribute :disposition, :string
+      attribute :blocked_uri, :string
+      attribute :line_number, :string
+      attribute :column_number, :string
+      attribute :source_file, :string
+      attribute :status_code, :string
+      attribute :script_sample, :string
+
+      default_scope -> { order(id: :desc) }
+    end
+
+  end
+end