rodauth 0.10.0 → 1.0.0

data/lib/roda/plugins/rodauth/change_password.rb

@@ -1,42 +0,0 @@
-class Roda
-  module RodaPlugins
-    module Rodauth
-      ChangePassword = Feature.define(:change_password) do
-        route 'change-password'
-        notice_flash 'Your password has been changed'
-        error_flash 'There was an error changing your password'
-        view 'change-password', 'Change Password'
-        after
-        additional_form_tags
-        button 'Change Password'
-        redirect
-        require_account
-
-        get_block do |r, auth|
-          auth.change_password_view
-        end
-
-        post_block do |r, auth|
-          if r[auth.password_param] == r[auth.password_confirm_param]
-            if auth.password_meets_requirements?(r[auth.password_param].to_s)
-              auth.transaction do
-                auth.set_password(r[auth.password_param])
-                auth.after_change_password
-              end
-              auth.set_notice_flash auth.change_password_notice_flash
-              r.redirect(auth.change_password_redirect)
-            else
-              @password_error = auth.password_does_not_meet_requirements_message
-            end
-          else
-            @password_error = auth.passwords_do_not_match_message
-          end
-
-          auth.set_error_flash auth.change_password_error_flash
-          auth.change_password_view
-        end
-      end
-    end
-  end
-end
-

data/lib/roda/plugins/rodauth/close_account.rb

@@ -1,42 +0,0 @@
-class Roda
-  module RodaPlugins
-    module Rodauth
-      CloseAccount = Feature.define(:close_account) do
-        route 'close-account'
-        notice_flash 'Your account has been closed'
-        view 'close-account', 'Close Account'
-        additional_form_tags
-        button 'Close Account'
-        redirect
-        require_account
-
-        auth_value_methods :account_closed_status_value
-        auth_methods :close_account
-
-        get_block do |r, auth|
-          auth.close_account_view
-        end
-
-        post_block do |r, auth|
-          auth.transaction do
-            auth.close_account
-            auth.after_close_account
-          end
-          auth.clear_session
-
-          auth.set_notice_flash auth.close_account_notice_flash
-          r.redirect(auth.close_account_redirect)
-        end
-
-        def account_closed_status_value
-          3
-        end
-
-        def close_account
-          account.update(account_status_id=>account_closed_status_value)
-          account.db[password_hash_table].where(account_id=>account_id_value).delete
-        end
-      end
-    end
-  end
-end

data/lib/roda/plugins/rodauth/create_account.rb

@@ -1,92 +0,0 @@
-class Roda
-  module RodaPlugins
-    module Rodauth
-      CreateAccount = Feature.define(:create_account) do
-        depends :login
-        route 'create-account'
-        error_flash "There was an error creating your account"
-        view 'create-account', 'Create Account'
-        after
-        button 'Create Account'
-        additional_form_tags
-        redirect
-
-        auth_value_methods :create_account_autologin?, :create_account_link, :create_account_notice_flash
-        auth_methods :new_account, :save_account
-
-        get_block do |r, auth|
-          auth.create_account_view
-        end
-
-        post_block do |r, auth|
-          login = r[auth.login_param].to_s
-          password = r[auth.password_param].to_s
-          auth._new_account(login)
-          if login == r[auth.login_confirm_param]
-            if password == r[auth.password_confirm_param]
-              if auth.password_meets_requirements?(password)
-                auth.transaction do
-                  if auth.save_account
-                    auth.set_password(password) unless auth.account_password_hash_column
-                    auth.after_create_account
-                    if auth.create_account_autologin?
-                      auth.update_session
-                    end
-                    auth.set_notice_flash auth.create_account_notice_flash
-                    r.redirect(auth.create_account_redirect)
-                  else
-                    @login_error = auth.login_errors_message
-                  end
-                end
-              else
-                @password_error = auth.password_does_not_meet_requirements_message
-              end
-            else
-              @password_error = auth.passwords_do_not_match_message
-            end
-          else
-            @login_error = auth.logins_do_not_match_message
-          end
-
-          auth.set_error_flash auth.create_account_error_flash
-          auth.create_account_view
-        end
-
-        def create_account_notice_flash
-          "Your account has been created"
-        end
-
-        def create_account_link
-          "<p><a href=\"#{prefix}/#{create_account_route}\">Create a New Account</a></p>"
-        end
-
-        def login_form_footer
-          super + create_account_link
-        end
-
-        def create_account_autologin?
-          false
-        end
-
-        def new_account(login)
-          @account = account_model.new(login_column=>login)
-          if account_password_hash_column
-            account.set(account_password_hash_column=>password_hash(request[password_param].to_s))
-          end
-          unless skip_status_checks?
-            account.set(account_status_id=>account_initial_status_value)
-          end
-          @account
-        end
-        
-        def _new_account(login)
-          @account = new_account(login)
-        end
-
-        def save_account
-          account.save(:raise_on_failure=>false)
-        end
-      end
-    end
-  end
-end

data/lib/roda/plugins/rodauth/lockout.rb

@@ -1,292 +0,0 @@
-class Roda
-  module RodaPlugins
-    module Rodauth
-      Lockout = Feature.define(:lockout) do
-        depends :login
-        route 'unlock-account'
-
-        auth_value_methods(
-          :account_lockouts_id_column,
-          :account_lockouts_deadline_column,
-          :account_lockouts_key_column,
-          :account_lockouts_table,
-          :account_login_failures_id_column,
-          :account_login_failures_number_column,
-          :account_login_failures_table,
-          :max_invalid_logins,
-          :unlock_account_additional_form_tags,
-          :unlock_account_autologin?,
-          :unlock_account_button,
-          :unlock_account_email_subject,
-          :unlock_account_key_param,
-          :unlock_account_notice_flash,
-          :unlock_account_redirect,
-          :unlock_account_request_additional_form_tags,
-          :unlock_account_request_button,
-          :unlock_account_request_notice_flash,
-          :unlock_account_request_redirect,
-          :unlock_account_route
-        )
-        auth_methods(
-          :after_unlock_account,
-          :after_unlock_account_request,
-          :clear_invalid_login_attempts,
-          :create_unlock_account_email,
-          :generate_unlock_account_key,
-          :get_unlock_account_key,
-          :invalid_login_attempted,
-          :locked_out?,
-          :send_unlock_account_email,
-          :unlock_account_request_view,
-          :unlock_account_email_body,
-          :unlock_account_email_link,
-          :unlock_account,
-          :unlock_account_key,
-          :unlock_account_view
-        )
-
-        get_block do |r, auth|
-          if auth._account_from_unlock_key(r[auth.unlock_account_key_param].to_s)
-            auth.unlock_account_view
-          else
-            auth.set_redirect_error_flash auth.no_matching_unlock_account_key_message
-            r.redirect auth.require_login_redirect
-          end
-        end
-
-        post_block do |r, auth|
-          if login = r[auth.login_param]
-            if auth._account_from_login(login.to_s)
-              auth.transaction do
-                auth.send_unlock_account_email
-                auth.after_unlock_account_request
-              end
-              auth.set_notice_flash auth.unlock_account_request_notice_flash
-              r.redirect auth.unlock_account_request_redirect
-            end
-          elsif key = r[auth.unlock_account_key_param]
-            if auth._account_from_unlock_key(key.to_s)
-              auth.unlock_account
-              auth.after_unlock_account
-              if auth.unlock_account_autologin?
-                auth.update_session
-              end
-              auth.set_notice_flash auth.unlock_account_notice_flash
-              r.redirect(auth.unlock_account_redirect)
-            end
-          end
-        end
-
-        def before_login_attempt
-          super
-          if locked_out?
-            set_error_flash login_error_flash
-            response.write unlock_account_request_view
-            request.halt
-          end
-        end
-
-        def after_login
-          super
-          clear_invalid_login_attempts
-        end
-
-        def after_login_failure
-          super
-          invalid_login_attempted
-        end
-
-        def after_unlock_account
-        end
-
-        def after_unlock_account_request
-        end
-
-        alias unlock_account_route lockout_route
-
-        def unlock_account_autologin?
-          false
-        end
-
-        def unlock_account_notice_flash
-          "Your account has been unlocked"
-        end
-
-        def unlock_account_redirect
-          default_redirect
-        end
-
-        def unlock_account_button
-          'Unlock Account'
-        end
-
-        def unlock_account_additional_form_tags
-        end
-
-        def unlock_account_request_notice_flash
-          "An email has been sent to you with a link to unlock your account"
-        end
-
-        def unlock_account_request_redirect
-          default_redirect
-        end
-
-        def unlock_account_request_button
-          'Request Account Unlock'
-        end
-
-        def unlock_account_request_additional_form_tags
-        end
-
-        # This is solely for bruteforce protection, so we allow 100 tries.
-        def max_invalid_logins
-          100
-        end
-
-        def account_login_failures_table
-          :account_login_failures
-        end
-
-        def account_login_failures_id_column
-          :id
-        end
-
-        def account_login_failures_number_column
-          :number
-        end
-
-        def account_login_failures_dataset
-          db[account_login_failures_table].where(account_login_failures_id_column=>account_id_value)
-        end
-
-        def account_lockouts_table
-          :account_lockouts
-        end
-
-        def account_lockouts_id_column
-          :id
-        end
-
-        def account_lockouts_key_column
-          :key
-        end
-
-        def account_lockouts_deadline_column
-          :deadline
-        end
-
-        def account_lockouts_dataset
-          db[account_lockouts_table].where(account_lockouts_id_column=>account_id_value)
-        end
-
-        def locked_out?
-          if lockout = account_lockouts_dataset.first
-            if Time.now < lockout[account_lockouts_deadline_column]
-              true
-            else
-              unlock_account
-              false
-            end
-          else
-            false
-          end
-        end
-
-        def unlock_account
-          transaction do
-            account_login_failures_dataset.delete
-            account_lockouts_dataset.delete
-          end
-        end
-
-        def unlock_account_request_view
-          view('unlock-account-request', 'Request Account Unlock')
-        end
-
-        def unlock_account_view
-          view('unlock-account', 'Unlock Account')
-        end
-
-        def no_matching_unlock_account_key_message
-          'No matching unlock account key'
-        end
-
-        def clear_invalid_login_attempts
-          unlock_account
-        end
-
-        def invalid_login_attempted
-          number = account_login_failures_dataset.
-            returning(account_login_failures_number_column).
-            where(account_login_failures_id_column=>account_id_value).
-            with_sql(:update_sql, account_login_failures_number_column=>Sequel.expr(account_login_failures_number_column)+1).
-            single_value
-
-          unless number
-            account_login_failures_dataset.insert(account_login_failures_id_column=>account_id_value)
-            number = 1
-          end
-
-          if number >= max_invalid_logins
-            @unlock_account_key_value = generate_unlock_account_key
-            account_lockouts_dataset.insert(account_lockouts_id_column=>account_id_value, account_lockouts_key_column=>unlock_account_key_value)
-          end
-        end
-
-        def get_unlock_account_key
-          account_lockouts_dataset.get(account_lockouts_key_column)
-        end
-
-        def generate_unlock_account_key
-          random_key
-        end
-
-        attr_reader :unlock_account_key_value
-
-        def _account_from_unlock_key(key)
-          @account = account_from_unlock_key(key)
-        end
-
-        def account_from_unlock_key(key)
-          id, key = key.split('_', 2)
-          id_column = account_lockouts_id_column
-          ds = db[account_lockouts_table].
-            select(account_lockouts_id_column).
-            where(account_lockouts_id_column=>id, account_lockouts_key_column=>key)
-          account_model.where(account_id=>ds).first
-        end
-
-        def unlock_account_key_param
-          'key'
-        end
-
-        def create_unlock_account_email
-          create_email(unlock_account_email_subject, unlock_account_email_body)
-        end
-
-        def send_unlock_account_email
-          @unlock_account_key_value = get_unlock_account_key
-          create_unlock_account_email.deliver!
-        end
-
-        def unlock_account_email_body
-          render('unlock-account-email')
-        end
-
-        def unlock_account_email_link
-          "#{request.base_url}#{prefix}/#{unlock_account_route}?#{unlock_account_key_param}=#{account_id_value}_#{unlock_account_key_value}"
-        end
-
-        def unlock_account_email_subject
-          'Unlock Account'
-        end
-
-        def after_close_account
-          super
-          account_login_failures_dataset.delete
-          account_lockouts_dataset.delete
-        end
-      end
-    end
-  end
-end