refinerycms 0.9.7.15 → 0.9.8

data/vendor/refinerycms/authentication/config/routes.rb

@@ -0,0 +1,26 @@
+Refinery::Application.routes.draw do
+
+  resource :session
+  match '/users/reset/:reset_code', :to => 'users#reset', :as => 'reset_users'
+  resources :users, :only => [:new, :create] do
+    collection do
+      get :forgot
+      post :forgot
+    end
+  end
+
+  scope(:path => 'refinery', :as => 'admin', :module => 'admin') do
+    resources :users do
+      collection do
+        post :update_positions do
+          collection do
+            get :update_positions
+          end
+        end
+      end
+    end
+  end
+
+  match '/login',  :to => 'sessions#new',     :as => 'login'
+  match '/logout', :to => 'sessions#destroy', :as => 'logout'
+end

data/vendor/refinerycms/authentication/lib/authenticated_system.rb

@@ -0,0 +1,129 @@
+module AuthenticatedSystem
+  protected
+    def current_user_session
+      @current_user_session ||= UserSession.find
+    end
+
+    # Returns true or false if the user is logged in.
+    # Preloads @current_user with the user model if they're logged in.
+    def logged_in?
+      !!current_user
+    end
+
+    def current_user
+      @current_user ||= current_user_session && current_user_session.record
+    end
+
+    def require_user
+      unless current_user
+        store_location
+        flash[:notice] = "You must be logged in to access this page"
+        redirect_to login_path
+        return false
+      end
+    end
+
+    def require_no_user
+      if current_user
+        store_location
+        flash[:notice] = "You must be logged out to access this page"
+        redirect_to account_path
+        return false
+      end
+    end
+
+    # Check if the user is authorized
+    #
+    # Override this method in your controllers if you want to restrict access
+    # to only a few actions or if you want to check if the user
+    # has the correct rights.
+    #
+    # Example:
+    #
+    #  # only allow nonbobs
+    #  def authorized?
+    #    current_user.login != "bob"
+    #  end
+    def authorized?
+      logged_in?
+    end
+
+    # Filter method to enforce a login requirement.
+    #
+    # To require logins for all actions, use this in your controllers:
+    #
+    #   before_filter :login_required
+    #
+    # To require logins for specific actions, use this in your controllers:
+    #
+    #   before_filter :login_required, :only => [ :edit, :update ]
+    #
+    # To skip this in a subclassed controller:
+    #
+    #   skip_before_filter :login_required
+    #
+    def login_required
+      authorized? || access_denied
+    end
+
+    #def require_user
+    #  unless current_user
+    #    store_location
+    #    flash[:notice] = "You must be logged in to access this page"
+    #    redirect_to login_path
+    #    return false
+    #  end
+    #end
+
+    #def require_no_user
+    #  if current_user
+    #    store_location
+    #    flash[:notice] = "You must be logged out to access this page"
+    #    redirect_to account_path
+    #    return false
+    #  end
+    #end
+
+    # Redirect as appropriate when an access request fails.
+    #
+    # The default action is to redirect to the login screen.
+    #
+    # Override this method in your controllers if you want to have special
+    # behavior in case the user is not authorized
+    # to access the requested action.  For example, a popup window might
+    # simply close itself.
+    def access_denied
+      respond_to do |format|
+        format.html do
+          store_location
+          redirect_to new_session_path
+        end
+        format.any do
+          request_http_basic_authentication 'Web Password'
+        end
+      end
+    end
+
+    # Store the URI of the current request in the session.
+    #
+    # We can return to this location by calling #redirect_back_or_default.
+    def store_location
+      session[:return_to] = request.fullpath
+    end
+
+    # Redirect to the URI stored by the most recent store_location call or
+    # to the passed default.
+    def redirect_back_or_default(default)
+      redirect_to(session[:return_to] || default)
+      session[:return_to] = nil
+    end
+
+    def refinery_user?
+      logged_in? && current_user.has_role?(:refinery)
+    end
+
+    def self.included(base)
+      base.send :helper_method, :current_user, :current_user_session, :logged_in?, :refinery_user? if base.respond_to? :helper_method
+    end
+
+end

data/vendor/refinerycms/authentication/lib/authentication.rb

@@ -0,0 +1,31 @@
+require 'authlogic'
+require 'refinery'
+
+module Refinery
+  module Authentication
+
+    class Engine < Rails::Engine
+      config.autoload_paths += %W( #{config.root}/lib )
+
+      config.after_initialize do
+        Refinery::Plugin.register do |plugin|
+          plugin.name = "refinery_users"
+          plugin.version = %q{0.9.8}
+          plugin.menu_match = /(refinery|admin)\/users$/
+          plugin.activity = {
+            :class => User,
+            :title => 'login'
+          }
+          plugin.url = {:controller => "/admin/users"}
+        end
+      end
+    end
+  end
+
+  class << self
+    attr_accessor :authentication_login_field
+    def authentication_login_field
+      @authentication_login_field ||= 'login'
+    end
+  end
+end

data/vendor/refinerycms/authentication/test/unit/user_test.rb

@@ -0,0 +1,164 @@
+require File.dirname(__FILE__) + '/../test_helper'
+
+class UserTest < Test::Unit::TestCase
+  # Be sure to include AuthenticatedTestHelper in test/test_helper.rb instead.
+  # Then, you can remove it from this and the functional test.
+  include AuthenticatedTestHelper
+  fixtures :users
+
+  def test_should_create_user
+    assert_difference 'User.count' do
+      user = create_user
+      assert !user.new_record?, "#{user.errors.full_messages.to_sentence}"
+    end
+  end
+
+  def test_should_initialize_activation_code_upon_creation
+    user = create_user
+    user.reload
+    assert_not_nil user.activation_code
+  end
+
+  def test_should_create_and_start_in_pending_state
+    user = create_user
+    user.reload
+    assert user.pending?
+  end
+
+
+  def test_should_require_login
+    assert_no_difference 'User.count' do
+      u = create_user(:login => nil)
+      assert u.errors.on(:login)
+    end
+  end
+
+  def test_should_require_password
+    assert_no_difference 'User.count' do
+      u = create_user(:password => nil)
+      assert u.errors.on(:password)
+    end
+  end
+
+  def test_should_require_password_confirmation
+    assert_no_difference 'User.count' do
+      u = create_user(:password_confirmation => nil)
+      assert u.errors.on(:password_confirmation)
+    end
+  end
+
+  def test_should_require_email
+    assert_no_difference 'User.count' do
+      u = create_user(:email => nil)
+      assert u.errors.on(:email)
+    end
+  end
+
+  def test_should_reset_password
+    users(:quentin).update_attributes(:password => 'new password', :password_confirmation => 'new password')
+    assert_equal users(:quentin), User.authenticate('quentin', 'new password')
+  end
+
+  def test_should_not_rehash_password
+    users(:quentin).update_attributes(:login => 'quentin2')
+    assert_equal users(:quentin), User.authenticate('quentin2', 'test')
+  end
+
+  def test_should_authenticate_user
+    assert_equal users(:quentin), User.authenticate('quentin', 'test')
+  end
+
+  def test_should_set_remember_token
+    users(:quentin).remember_me
+    assert_not_nil users(:quentin).remember_token
+    assert_not_nil users(:quentin).remember_token_expires_at
+  end
+
+  def test_should_unset_remember_token
+    users(:quentin).remember_me
+    assert_not_nil users(:quentin).remember_token
+    users(:quentin).forget_me
+    assert_nil users(:quentin).remember_token
+  end
+
+  def test_should_remember_me_for_one_week
+    before = 1.week.from_now.utc
+    users(:quentin).remember_me_for 1.week
+    after = 1.week.from_now.utc
+    assert_not_nil users(:quentin).remember_token
+    assert_not_nil users(:quentin).remember_token_expires_at
+    assert users(:quentin).remember_token_expires_at.between?(before, after)
+  end
+
+  def test_should_remember_me_until_one_week
+    time = 1.week.from_now.utc
+    users(:quentin).remember_me_until time
+    assert_not_nil users(:quentin).remember_token
+    assert_not_nil users(:quentin).remember_token_expires_at
+    assert_equal users(:quentin).remember_token_expires_at, time
+  end
+
+  def test_should_remember_me_default_two_weeks
+    before = 2.weeks.from_now.utc
+    users(:quentin).remember_me
+    after = 2.weeks.from_now.utc
+    assert_not_nil users(:quentin).remember_token
+    assert_not_nil users(:quentin).remember_token_expires_at
+    assert users(:quentin).remember_token_expires_at.between?(before, after)
+  end
+
+  def test_should_register_passive_user
+    user = create_user(:password => nil, :password_confirmation => nil)
+    assert user.passive?
+    user.update_attributes(:password => 'new password', :password_confirmation => 'new password')
+    user.register!
+    assert user.pending?
+  end
+
+  def test_should_suspend_user
+    users(:quentin).suspend!
+    assert users(:quentin).suspended?
+  end
+
+  def test_suspended_user_should_not_authenticate
+    users(:quentin).suspend!
+    assert_not_equal users(:quentin), User.authenticate('quentin', 'test')
+  end
+
+  def test_should_unsuspend_user_to_active_state
+    users(:quentin).suspend!
+    assert users(:quentin).suspended?
+    users(:quentin).unsuspend!
+    assert users(:quentin).active?
+  end
+
+  def test_should_unsuspend_user_with_nil_activation_code_and_activated_at_to_passive_state
+    users(:quentin).suspend!
+    User.update_all :activation_code => nil, :activated_at => nil
+    assert users(:quentin).suspended?
+    users(:quentin).reload.unsuspend!
+    assert users(:quentin).passive?
+  end
+
+  def test_should_unsuspend_user_with_activation_code_and_nil_activated_at_to_pending_state
+    users(:quentin).suspend!
+    User.update_all :activation_code => 'foo-bar', :activated_at => nil
+    assert users(:quentin).suspended?
+    users(:quentin).reload.unsuspend!
+    assert users(:quentin).pending?
+  end
+
+  def test_should_delete_user
+    assert_nil users(:quentin).deleted_at
+    users(:quentin).delete!
+    assert_not_nil users(:quentin).deleted_at
+    assert users(:quentin).deleted?
+  end
+
+protected
+  def create_user(options = {})
+    record = User.new({ :login => 'quire', :email => 'quire@example.com', :password => 'quire', :password_confirmation => 'quire' }.merge(options))
+    record.register! if record.valid?
+    record
+  end
+end

data/vendor/refinerycms/core/app/controllers/admin/dialogs_controller.rb

@@ -0,0 +1,24 @@
+class Admin::DialogsController < Admin::BaseController
+
+  def show
+    if (@dialog_type = params[:id].try(:downcase))
+      url_params = params.reject {|key, value| key =~ /(action)|(controller)/}
+
+      @iframe_src = if @dialog_type == 'image'
+        insert_admin_images_url(:modal => true)
+      elsif @dialog_type == 'link'
+        link_to_admin_pages_dialogs_url(url_params.merge(:id => nil))
+      end
+
+      render :layout => false
+
+    else
+      render :nothing => true
+    end
+  end
+
+  def from_dialog?
+    true
+  end
+
+end

data/vendor/refinerycms/core/app/views/admin/_head.html.erb

@@ -0,0 +1,56 @@
+<%
+  # Internet Explorer is fine with JS caching, but cache CSS and kaboom.
+  # Would be great if someone could fix this?
+  js_caching = RefinerySetting.find_or_set(:use_resource_caching, Rails.root.writable?)
+  css_caching = js_caching && request.env['HTTP_USER_AGENT'] !~ /MSIE/
+
+-%>
+<head>
+  <meta charset='<%= Refinery::Application.config.encoding %>' />
+  <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
+  <title><%= RefinerySetting.find_or_set(:site_name, 'Company Name') -%> - Refinery</title>
+  <%= csrf_meta_tag %>
+  <%= render(:partial => '/shared/html5_for_ie.js').html_safe if request.env['HTTP_USER_AGENT'] =~ /MSIE/ %>
+
+  <%= stylesheet_link_tag 'refinery/site_bar',
+                          'refinery/refinery',
+                          'refinery/ui',
+                          'refinery/tooltips',
+                          'wymeditor/skins/refinery/skin',
+                          :cache => (css_caching ? "cache/refinery" : false) -%>
+
+  <%= yield :head_before_javascript_libraries -%>
+  <%= javascript_include_tag 'refinery/i18n' -%>
+  <script type='text/javascript'>I18n.locale = '<%= I18n.locale %>';</script>
+
+  <%= jquery_include_tags(:caching => js_caching) -%>
+
+  <% #TODO: Find out why the master branch doesn't work! %>
+  <%#= javascript_include_tag 'http://github.com/rails/jquery-ujs/raw/master/src/rails.js' %>
+  <%= javascript_include_tag 'http://github.com/rails/jquery-ujs/raw/f01a685c8200b76c4cc2c606accb135da5ad5444/src/rails.js' %>
+
+
+  <%= javascript_include_tag 'jquery/jquery.corner.js',
+                             'jquery/jquery.textTruncate.js',
+                             'jquery/jquery.html5-placeholder-shim.js',
+                             'jquery/jquery.timers.js',
+                             'jquery/jquery.jcarousel.js',
+                             :cache => (js_caching ? "cache/jquery-plugins" : false) unless login? -%>
+
+  <%= yield :head_after_javascript_libraries -%>
+
+  <%= javascript_include_tag 'wymeditor/jquery.refinery.wymeditor.js',
+                             'admin',
+                             'refinery/boot_wym',
+                             'refinery/core',
+                             'refinery/admin',
+                             :cache => (js_caching ? "cache/admin" : false) unless login? -%>
+  <%= javascript_include_tag 'refinery/core' if login? -%>
+
+  <% if request.env['HTTP_USER_AGENT'] =~ /MSIE/ -%>
+    <%= "<!--[if lt IE 8]>#{stylesheet_link_tag 'refinery/ie-less-than-8'}<![endif]-->".html_safe -%>
+    <%= "<!--[if IE 8]>#{stylesheet_link_tag 'refinery/ie-less-than-9'}<![endif]-->".html_safe -%>
+  <% end -%>
+
+  <%= yield :head -%>
+</head>