simple_user 0.1.3.2

data/app/helpers/simple_user/application_helper.rb

@@ -0,0 +1,13 @@
+module SimpleUser
+  module ApplicationHelper
+
+	def print_yes_or_no(value)
+		value ? "Yes" : "No"
+	end
+
+	def link_to_login(label = "Login", options = {})
+		link_to label, my_engine.new_user_session_path, options
+	end
+	
+  end
+end

data/app/helpers/simple_user/links_helper.rb

@@ -0,0 +1,9 @@
+module SimpleUser
+  module LinksHelper
+
+	def login(label = "Login", options = {})
+		link_to label, simple_user.new_user_session_path, options
+	end
+	
+  end
+end

data/app/models/ability.rb

@@ -0,0 +1,25 @@
+class Ability
+  include CanCan::Ability
+
+  def initialize(admin_user)
+  	admin_user ||= SimpleUser::AdminUser.new
+
+  	puts "ADMIN USER: #{admin_user.inspect}"
+
+    if admin_user.has_role? :admin
+    	can :manage, :all
+    else
+	    if admin_user.has_role? :role_manager
+	    	can :manage, SimpleUser::AdminUser
+	    	can :manage, Role
+	    elsif admin_user.has_role? :admin_user_manager
+	    	can :manage, SimpleUser::AdminUser	    		
+	    end
+
+	    if admin_user.has_role? :user_manager
+	    	can :manage, SimpleUser::User    	
+	    end
+    end
+  end
+
+end

data/app/models/role.rb

@@ -0,0 +1,18 @@
+class Role < ActiveRecord::Base
+
+=begin
+  has_and_belongs_to_many :simple_user_admin_users, 
+  						  :class_name => "AdminUser", 
+  						  :join_table => :simple_user_users_roles, 
+                          :foreign_key => :simple_user_role_id
+  						  #:association_foreign_key => "simple_user_admin_user_id"
+=end
+
+
+  has_and_belongs_to_many :admin_users, :join_table => "users_roles"
+
+  belongs_to :resource, :polymorphic => true
+  
+  scopify
+
+end

data/app/models/simple_user/admin_user.rb

@@ -0,0 +1,48 @@
+module SimpleUser
+  class AdminUser < ActiveRecord::Base
+
+    rolify  
+    #resourcify
+
+    #has_and_belongs_to_many :roles, :join_table => :users_roles, :foreign_key => "user_id"
+    #has_many :simple_user_users_roles, :foreign_key => :user_id
+    #has_and_belongs_to_many :simple_user_roles, :join_table => :simple_user_users_roles
+    
+    #has_and_belongs_to_many :roles, :join_table => :simple_user_users_roles
+=begin
+    has_and_belongs_to_many :simple_user_roles, 
+                            :class_name => "Role", 
+                            :join_table => :simple_user_users_roles, 
+                            :foreign_key => :simple_user_admin_user_id
+=end    
+    #has_and_belongs_to_many :simple_user_admin_users, :join_table => :simple_user_users_roles
+    has_and_belongs_to_many :roles, :join_table => "users_roles", :foreign_key => :simple_user_admin_user_id
+
+    # Include default devise modules. Others available are:
+    # :token_authenticatable, :confirmable,
+    # :lockable, :timeoutable and :omniauthable
+    devise :database_authenticatable, :registerable,
+           :recoverable, :rememberable, :trackable, :validatable
+
+    # Setup accessible (or protected) attributes for your model
+    attr_accessible :email, :password, :password_confirmation, :remember_me, :username, :active
+    attr_accessible :temporal_roles
+    attr_accessor :temporal_roles
+    
+    validates :email, :uniqueness => true
+    validates :username, :uniqueness => true
+
+    def get_roles
+      @temporal_roles = roles.collect{ |role| role.name }.join(", ")
+    end
+
+    def banned?
+      !active
+    end
+
+    def self.get_editable_admins_except(admin_id)
+      joins(:roles).where("roles.name <> ? AND simple_user_admin_users.id <> ?", "admin", admin_id).group(:id)
+    end
+    
+  end
+end

data/app/models/simple_user/authentication.rb

@@ -0,0 +1,9 @@
+module SimpleUser
+  class Authentication < ActiveRecord::Base
+    
+    belongs_to :user
+    
+    attr_accessible :provider, :token, :uid, :user_id
+
+  end
+end

data/app/models/simple_user/user.rb

@@ -0,0 +1,92 @@
+module SimpleUser
+  class User < ActiveRecord::Base
+    
+    resourcify
+    
+    has_many :authentications, :dependent => :delete_all
+    
+    # Include default devise modules. Others available are:
+    # :token_authenticatable, :confirmable,
+    # :lockable, :timeoutable and :omniauthable
+    devise :database_authenticatable, :registerable,
+           :recoverable, :rememberable, :trackable, :validatable
+
+    attr_accessible :email, :password, :password_confirmation, :remember_me, :username, :first_name, :last_name, :active
+    
+    validates :email, :uniqueness => true
+    validates :username, :uniqueness => true
+
+    def self.build_new_auth(auth)
+      email = ""
+
+      if auth['provider'] == 'facebook'
+        user = User.find_by_email(auth['extra']['raw_info']['email'])
+      end
+
+      user ||= User.new
+      user.apply_omniauth(auth)
+      return user
+    end
+
+    def apply_omniauth(auth)  
+      #Generates random usernames and passwords for the first time
+      if self.id.nil?
+        tmp_password = generate_random(8)
+        tmp_username = generate_random(6)
+      end
+
+      #Gets AUTH information
+      if auth['provider'] == 'facebook'
+        #Saves username and email for the first time
+        if self.id.nil?
+          tmp_username = auth['extra']['raw_info']['username'] rescue generate_random(6)
+          self.email = auth['extra']['raw_info']['email']
+        end
+
+        self.first_name = auth['extra']['raw_info']['first_name'] if self.first_name.nil?
+        self.last_name = auth['extra']['raw_info']['last_name'] if self.last_name.nil?
+      end
+
+      #Check if the username exists in the database and if it exists replace it with a new one, for the first time
+      if self.id.nil?
+        invalid_username = true
+
+        while invalid_username
+          tmp_user = User.find_by_username(tmp_username) rescue nil
+          if tmp_user.nil?
+            invalid_username = false
+          else
+            tmp_username = generate_random(6)
+          end
+        end
+      end
+
+      #Sets main values for the first time
+      if self.id.nil?
+        self.username = tmp_username
+        self.password = tmp_password 
+        self.password_confirmation = tmp_password
+      end
+
+      #Saves the authentication
+      authentications.build(:provider => auth['provider'], :uid => auth['uid'], :token => auth['credentials']['token'])
+    end
+
+    def full_name
+      first_name.to_s + " " + last_name.to_s
+    end
+
+    def banned?
+      !active
+    end
+
+    private
+      def generate_random(str_length)
+        charlist = ("a".."z").to_a + ("A".."Z").to_a + ("0".."9").to_a
+        generate_str = ""
+        1.upto(str_length) {|i| generate_str << charlist[rand(charlist.size-1)]}
+        return generate_str
+      end
+
+  end
+end

data/app/views/layouts/simple_user/application.html.erb

@@ -0,0 +1,28 @@
+<!DOCTYPE html>
+<html>
+	<head>
+		<title>SimpleUser</title>
+		<%= stylesheet_link_tag    "application", :media => "all" %>
+		<%= javascript_include_tag "application" %>
+		<%= csrf_meta_tags %>
+	</head>
+
+	<body>
+		<div>
+			<%= render "menu_users" %> || <%= render "menu_admin_users" %>
+		</div>
+		
+		<div>
+			<% flash.each do |name, msg| %>
+				<div class="alert alert-<%= name == :notice ? "success" : "error" %>">
+			    	<a class="close" data-dismiss="alert">×</a>
+			    	<%= msg %>
+			  	</div>
+		 	<% end %>
+		</div>
+
+		<div>
+			<%= yield %>
+		</div>	
+	</body>
+</html>

data/app/views/simple_user/admin_users/_form.html.erb

@@ -0,0 +1,15 @@
+<%= simple_form_for @admin_user, :html => { :class => 'form-horizontal' } do |f| %>
+  <%= f.input :username, :required => true %>
+  <%= f.input :email, :required => true %>
+  <%= f.input :password, :required => @required_password %>
+  <%= f.input :password_confirmation, :required => @required_password %>
+
+  <% if can? :manage, Role %>
+  	<%= f.input :temporal_roles, :label => "Roles" %>
+    <%= f.input :active %>
+  <% end %>
+
+  <div class="actions">
+    <%= f.button :submit %>
+  </div>
+<% end %>

data/app/views/simple_user/admin_users/confirmations/new.html.erb

@@ -0,0 +1,16 @@
+<h2>Resend confirmation instructions</h2>
+
+<%= simple_form_for(resource, :as => resource_name, :url => confirmation_path(resource_name), :html => { :method => :post }) do |f| %>
+  <%= f.error_notification %>
+  <%= f.full_error :confirmation_token %>
+
+  <div class="form-inputs">
+    <%= f.input :email, :required => true, :autofocus => true %>
+  </div>
+
+  <div class="form-actions">
+    <%= f.button :submit, "Resend confirmation instructions" %>
+  </div>
+<% end %>
+
+<%= render "devise/shared/links" %>

data/app/views/simple_user/admin_users/edit.html.erb

@@ -0,0 +1,6 @@
+<h1>Editing admin_user</h1>
+
+<%= render 'form' %>
+
+<%= link_to 'Show', @admin_user %> |
+<%= link_to 'Back', admin_users_path %>

data/app/views/simple_user/admin_users/index.html.erb

@@ -0,0 +1,27 @@
+<h1>Administrators</h1>
+
+<table>
+  <tr>
+    <th>Email</th>
+    <th>Username</th>
+    <th>Active</th>
+    <th></th>
+    <th></th>
+    <th></th>
+  </tr>
+
+<% @admin_users.each do |admin_user| %>
+  <tr>
+    <td><%= admin_user.email %></td>
+    <td><%= admin_user.username %></td>
+    <td><%= print_yes_or_no admin_user.active %></td>
+    <td><%= link_to 'Show', admin_user %></td>
+    <td><%= link_to 'Edit', edit_admin_user_path(admin_user) %></td>
+    <td><%= link_to 'Destroy', admin_user, method: :delete, data: { confirm: 'Are you sure?' } %></td>
+  </tr>
+<% end %>
+</table>
+
+<br />
+
+<%= link_to 'New Admin user', new_admin_user_path %>

data/app/views/simple_user/admin_users/mailer/confirmation_instructions.html.erb

@@ -0,0 +1,5 @@
+<p>Welcome <%= @email %>!</p>
+
+<p>You can confirm your account email through the link below:</p>
+
+<p><%= link_to 'Confirm my account', confirmation_url(@resource, :confirmation_token => @resource.confirmation_token) %></p>

data/app/views/simple_user/admin_users/mailer/reset_password_instructions.html.erb

@@ -0,0 +1,8 @@
+<p>Hello <%= @resource.email %>!</p>
+
+<p>Someone has requested a link to change your password. You can do this through the link below.</p>
+
+<p><%= link_to 'Change my password', edit_password_url(@resource, :reset_password_token => @resource.reset_password_token) %></p>
+
+<p>If you didn't request this, please ignore this email.</p>
+<p>Your password won't change until you access the link above and create a new one.</p>

data/app/views/simple_user/admin_users/mailer/unlock_instructions.html.erb

@@ -0,0 +1,7 @@
+<p>Hello <%= @resource.email %>!</p>
+
+<p>Your account has been locked due to an excessive number of unsuccessful sign in attempts.</p>
+
+<p>Click the link below to unlock your account:</p>
+
+<p><%= link_to 'Unlock my account', unlock_url(@resource, :unlock_token => @resource.unlock_token) %></p>

data/app/views/simple_user/admin_users/new.html.erb

@@ -0,0 +1,5 @@
+<h1>New admin_user</h1>
+
+<%= render 'form' %>
+
+<%= link_to 'Back', admin_users_path %>

data/app/views/simple_user/admin_users/passwords/edit.html.erb

@@ -0,0 +1,19 @@
+<h2>Change your password</h2>
+
+<%= simple_form_for(resource, :as => resource_name, :url => password_path(resource_name), :html => { :method => :put }) do |f| %>
+  <%= f.error_notification %>
+
+  <%= f.input :reset_password_token, :as => :hidden %>
+  <%= f.full_error :reset_password_token %>
+
+  <div class="form-inputs">
+    <%= f.input :password, :label => "New password", :required => true, :autofocus => true %>
+    <%= f.input :password_confirmation, :label => "Confirm your new password", :required => true %>
+  </div>
+
+  <div class="form-actions">
+    <%= f.button :submit, "Change my password" %>
+  </div>
+<% end %>
+
+<%= render "devise/shared/links" %>

data/app/views/simple_user/admin_users/passwords/new.html.erb

@@ -0,0 +1,15 @@
+<h2>Forgot your password?</h2>
+
+<%= simple_form_for(resource, :as => resource_name, :url => password_path(resource_name), :html => { :method => :post }) do |f| %>
+  <%= f.error_notification %>
+
+  <div class="form-inputs">
+    <%= f.input :email, :required => true, :autofocus => true %>
+  </div>
+
+  <div class="form-actions">
+    <%= f.button :submit, "Send me reset password instructions" %>
+  </div>
+<% end %>
+
+<%= render "devise/shared/links" %>

data/app/views/simple_user/admin_users/registrations/edit.html.erb

@@ -0,0 +1,28 @@
+<h2>Edit <%= resource_name.to_s.humanize %></h2>
+
+<%= simple_form_for(resource, :as => resource_name, :url => registration_path(resource_name), :html => { :method => :put }) do |f| %>
+  <%= f.error_notification %>
+
+  <div class="form-inputs">
+    <%= f.input :username, :required => true, :autofocus => true %>
+    <%= f.input :email, :required => true, :autofocus => true %>
+
+    <% if devise_mapping.confirmable? && resource.pending_reconfirmation? %>
+      <p>Currently waiting confirmation for: <%= resource.unconfirmed_email %></p>
+    <% end %>
+
+    <%= f.input :password, :autocomplete => "off", :hint => "leave it blank if you don't want to change it", :required => false %>
+    <%= f.input :password_confirmation, :required => false %>
+    <%= f.input :current_password, :hint => "we need your current password to confirm your changes", :required => true %>
+  </div>
+
+  <div class="form-actions">
+    <%= f.button :submit, "Update" %>
+  </div>
+<% end %>
+
+<h3>Cancel my account</h3>
+
+<p>Unhappy? <%= link_to "Cancel my account", registration_path(resource_name), :data => { :confirm => "Are you sure?" }, :method => :delete %>.</p>
+
+<%= link_to "Back", :back %>

data/app/views/simple_user/admin_users/registrations/new.html.erb

@@ -0,0 +1,18 @@
+<h2>Sign up</h2>
+
+<%= simple_form_for(resource, :as => resource_name, :url => registration_path(resource_name)) do |f| %>
+  <%= f.error_notification %>
+
+  <div class="form-inputs">
+    <%= f.input :username, :required => true, :autofocus => true %>
+    <%= f.input :email, :required => true, :autofocus => true %>
+    <%= f.input :password, :required => true %>
+    <%= f.input :password_confirmation, :required => true %>
+  </div>
+
+  <div class="form-actions">
+    <%= f.button :submit, "Sign up" %>
+  </div>
+<% end %>
+
+<%= render "devise/shared/links" %>

data/app/views/simple_user/admin_users/sessions/new.html.erb

@@ -0,0 +1,15 @@
+<h2>Sign in</h2>
+
+<%= simple_form_for(resource, :as => resource_name, :url => session_path(resource_name)) do |f| %>
+  <div class="form-inputs">
+    <%= f.input :username, :required => true, :autofocus => true %>
+    <%= f.input :password, :required => true %>
+    <%= f.input :remember_me, :as => :boolean if devise_mapping.rememberable? %>
+  </div>
+
+  <div class="form-actions">
+    <%= f.button :submit, "Sign in" %>
+  </div>
+<% end %>
+
+<%= render "devise/shared/links" %>