simplest_auth 0.2.10 → 0.3.1

data/.gitignore

@@ -0,0 +1,5 @@
+/pkg/
+/doc/
+/coverage/
+Gemfile.lock
+/package/*

data/.rvmrc

@@ -0,0 +1 @@
+rvm 1.9.2@simplest_auth --create

data/Gemfile

@@ -0,0 +1,2 @@
+source :rubygems
+gemspec

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright (c) 2008 Tony Pitale of Viget Labs
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/Rakefile

@@ -2,7 +2,7 @@ require 'rubygems'
 require 'rake/gempackagetask'
 require 'rake/testtask'
 
-require 'lib/simplest_auth/version'
+require File.expand_path('../lib/simplest_auth/version', __FILE__)
 
 task :default => :test
 
@@ -15,8 +15,12 @@ spec = Gem::Specification.new do |s|
   s.homepage        = 'http://viget.com/extend'
   s.files           = %w(README.textile Rakefile) + Dir.glob("lib/**/*")
   s.test_files      = Dir.glob("test/**/*_test.rb")
-  
+
   s.add_dependency('bcrypt-ruby', '~> 2.1.1')
+
+  s.add_development_dependency('shoulda')
+  s.add_development_dependency('mocha')
+  s.add_development_dependency('activemodel')
 end
 
 Rake::GemPackageTask.new(spec) do |pkg|
@@ -38,7 +42,7 @@ end
 
 begin
   require 'rcov/rcovtask'
-  
+
   desc "Generate RCov coverage report"
   Rcov::RcovTask.new(:rcov) do |t|
     t.test_files = FileList['test/**/*_test.rb']

data/lib/simplest_auth.rb

@@ -10,4 +10,6 @@ end
 
 # SimplestAuth
 require 'simplest_auth/model'
-require 'simplest_auth/controller'
+require 'simplest_auth/controller'
+require 'simplest_auth/sessions_controller'
+require 'simplest_auth/session'

data/lib/simplest_auth/controller.rb

@@ -46,7 +46,7 @@ module SimplestAuth
         if user_class.respond_to?(:get)
           user_class.get(current_user_id)
         else
-          user_class.find(current_user_id)
+          current_user_id && user_class.where(:id => current_user_id).first
         end
       end || clear_session
     end

data/lib/simplest_auth/model.rb

@@ -34,27 +34,27 @@ module SimplestAuth
 
       def authenticate(email, password)
         if active_record?
-          klass = find_by_email(email)
+          found = where(:email => email).first
         elsif data_mapper? || mongo_mapper?
-          klass = first(:email => email)
+          found = first(:email => email)
         end
 
-        (klass && klass.authentic?(password)) ? klass : nil
+        (found && found.authentic?(password)) ? found : nil
       end
 
       def authenticate_by(ident)
         if active_record?
           instance_eval <<-EOM
             def authenticate(#{ident}, password)
-              klass = find_by_#{ident}(#{ident})
-              (klass && klass.authentic?(password)) ? klass : nil
+              found = where(:#{ident} => #{ident}).first
+              (found && found.authentic?(password)) ? found : nil
             end
           EOM
         elsif data_mapper? || mongo_mapper?
           instance_eval <<-EOM
             def authenticate(#{ident}, password)
-              klass = first(:#{ident} => #{ident})
-              (klass && klass.authentic?(password)) ? klass : nil
+              found = first(:#{ident} => #{ident})
+              (found && found.authentic?(password)) ? found : nil
             end
           EOM
         end

data/lib/simplest_auth/session.rb

@@ -0,0 +1,57 @@
+module SimplestAuth
+  module Session
+    extend ActiveSupport::Concern
+
+    included do
+      include ActiveModel::Validations
+      include ActiveModel::Conversion
+
+      attr_accessor :email, :password
+
+      validates :email, :presence => true
+      validates :password, :presence => true
+
+      validate :user_exists_for_credentials, :if => :credentials_supplied?
+    end
+
+    module ClassMethods
+      def set_user_class_name(user_class_name)
+        @user_class_name = user_class_name
+      end
+
+      def user_class_name
+        @user_class_name || 'User'
+      end
+
+      def user_class
+        user_class_name.constantize
+      end
+    end
+
+    def initialize(attributes = {})
+      attributes.each {|k,v| send("#{k}=", v) }
+    end
+
+    def user_class
+      self.class.user_class
+    end
+
+    def user
+      @user ||= user_class.authenticate(email, password)
+    end
+
+    def persisted?
+      false
+    end
+
+    private
+
+    def user_exists_for_credentials
+      errors.add(:base, "#{user_class} not found for supplied credentials") unless user.present?
+    end
+
+    def credentials_supplied?
+      email.present? && password.present?
+    end
+  end
+end

data/lib/simplest_auth/sessions_controller.rb

@@ -0,0 +1,59 @@
+module SimplestAuth
+  module SessionsController
+    extend ActiveSupport::Concern
+
+    module ClassMethods
+
+      def set_session_class_name(session_class_name)
+        @session_class_name = session_class_name
+      end
+
+      def session_class_name
+        @session_class_name || 'Session'
+      end
+
+    end
+
+    def new
+      @session = session_class.new
+    end
+
+    def create
+      sign_user_in_or_render
+    end
+
+    def destroy
+      sign_user_out
+    end
+
+    private
+
+    def sign_user_in_or_render(options = {})
+      message      = options[:message] || 'You have signed in successfully'
+      redirect_url = options[:url] || root_url
+
+      @session = session_class.new(params[:session])
+      if @session.valid?
+        self.current_user = @session.user
+        flash[:notice] = message
+        redirect_to redirect_url
+      else
+        render :new
+      end
+    end
+
+    def sign_user_out(options = {})
+      message      = options[:message] || 'You have signed out'
+      redirect_url = options[:url] || root_url
+
+      self.current_user = nil
+      flash[:notice] = message
+      redirect_to redirect_url
+    end
+
+    def session_class
+      self.class.session_class_name.constantize
+    end
+
+  end
+end

data/lib/simplest_auth/version.rb

@@ -2,8 +2,8 @@ module SimplestAuth
   module Version
     
     MAJOR = 0
-    MINOR = 2
-    TINY  = 10
+    MINOR = 3
+    TINY  = 1
     
     def self.to_s # :nodoc:
       [MAJOR, MINOR, TINY].join('.')

data/simplest_auth.gemspec

@@ -0,0 +1,43 @@
+# -*- encoding: utf-8 -*-
+lib = File.expand_path('../lib/', __FILE__)
+$:.unshift lib unless $:.include?(lib)
+
+require 'simplest_auth/version'
+
+Gem::Specification.new do |s|
+  s.name = %q{simplest_auth}
+  s.version = SimplestAuth::Version.to_s
+
+  s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
+  s.authors = ["Tony Pitale"]
+  s.date = %q{2011-03-30}
+  s.email = %q{developers@viget.com}
+  s.homepage = %q{http://viget.com/extend}
+  s.require_paths = ["lib"]
+  s.rubygems_version = %q{1.3.7}
+  s.summary = %q{Simple implementation of authentication for Rails}
+  s.files              = `git ls-files`.split("\n") rescue ''
+  s.test_files         = `git ls-files -- {test,spec,features}/*`.split("\n")
+
+  if s.respond_to? :specification_version then
+    current_version = Gem::Specification::CURRENT_SPECIFICATION_VERSION
+    s.specification_version = 3
+
+    if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
+      s.add_runtime_dependency(%q<bcrypt-ruby>, [">= 2.1.1"])
+      s.add_development_dependency(%q<shoulda>, [">= 0"])
+      s.add_development_dependency(%q<mocha>, [">= 0"])
+      s.add_development_dependency(%q<activemodel>, [">= 0"])
+    else
+      s.add_dependency(%q<bcrypt-ruby>, ["~> 2.1.1"])
+      s.add_dependency(%q<shoulda>, [">= 0"])
+      s.add_dependency(%q<mocha>, [">= 0"])
+      s.add_dependency(%q<activemodel>, [">= 0"])
+    end
+  else
+    s.add_dependency(%q<bcrypt-ruby>, ["~> 2.1.1"])
+    s.add_dependency(%q<shoulda>, [">= 0"])
+    s.add_dependency(%q<mocha>, [">= 0"])
+    s.add_dependency(%q<activemodel>, [">= 0"])
+  end
+end

data/test/test_helper.rb

@@ -0,0 +1,19 @@
+require 'rubygems'
+require 'test/unit'
+require 'shoulda'
+require 'mocha'
+
+require 'active_model'
+
+require File.dirname(__FILE__) + '/../lib/simplest_auth'
+
+# Global dummy objects used in multiple tests
+
+class Session
+  include SimplestAuth::Session
+end
+
+class User
+  def self.authenticate(email, password)
+  end
+end

data/test/unit/simplest_auth/ar_model_test.rb

@@ -1,4 +1,4 @@
-require File.dirname(__FILE__) + '/../../test_helper'
+require File.expand_path('../../../test_helper', __FILE__)
 
 ARUser = Class.new
 
@@ -20,10 +20,11 @@ class ARUserTest < Test::Unit::TestCase
 
       should "have a default authenticate to email" do
         user = mock do |m|
+          m.expects(:first).returns(m)
           m.expects(:authentic?).with('password').returns(true)
         end
 
-        ARUser.expects(:find_by_email).with('joe@schmoe.com').returns(user)
+        ARUser.expects(:where).with(:email => 'joe@schmoe.com').returns(user)
         assert_equal user, ARUser.authenticate('joe@schmoe.com', 'password')
       end
 
@@ -32,12 +33,13 @@ class ARUserTest < Test::Unit::TestCase
           ARUser.authenticate_by :username
         end
 
-        should "find a user with email for authentication" do
+        should "find a user with username for authentication" do
           user = mock do |m|
+            m.expects(:first).returns(m)
             m.expects(:authentic?).with('password').returns(true)
           end
 
-          ARUser.expects(:find_by_username).with('joeschmoe').returns(user)
+          ARUser.expects(:where).with(:username => 'joeschmoe').returns(user)
           assert_equal user, ARUser.authenticate('joeschmoe', 'password')
         end
       end

data/test/unit/simplest_auth/controller_test.rb

@@ -1,4 +1,4 @@
-require File.dirname(__FILE__) + '/../../test_helper'
+require File.expand_path('../../../test_helper', __FILE__)
 
 class User
   class RecordNotFound < StandardError; end
@@ -15,7 +15,7 @@ class ControllerTest < Test::Unit::TestCase
       stubs(:logged_in?).returns(true)
       assert authorized?
     end
-    
+
     should "redirect to a new session if access is denied" do
       stubs(:store_location)
       expects(:redirect_to).with("")
@@ -23,7 +23,7 @@ class ControllerTest < Test::Unit::TestCase
       stubs(:flash).returns({})
       access_denied
     end
-    
+
     should "set the error flash if access is denied" do
       stubs(:store_location)
       stubs(:redirect_to).with("")
@@ -34,7 +34,7 @@ class ControllerTest < Test::Unit::TestCase
       access_denied
       assert_equal "blah", flash_stub[:error]
     end
-    
+
     should "store the location of the desired page before redirecting" do
       expects(:store_location)
       stubs(:redirect_to)
@@ -42,25 +42,25 @@ class ControllerTest < Test::Unit::TestCase
       stubs(:flash).returns({})
       access_denied
     end
-    
+
     should "store the location of the current request to session" do
       expects(:session).returns({})
       stubs(:request).returns(stub(:request_uri => ''))
       store_location
     end
-    
+
     should "redirect back to the stored uri" do
       stubs(:session).returns({:return_to => 'somewhere'})
       expects(:redirect_to).with('somewhere')
       redirect_back_or_default('')
     end
-    
+
     should "redirect to a default location if the session url is nil" do
       stubs(:session).returns({:return_to => nil})
       expects(:redirect_to).with('default')
       redirect_back_or_default('default')
     end
-    
+
     should "clear the session stored url after redirect" do
       session = {:return_to => 'somewhere'}
       stubs(:session).returns(session)
@@ -68,23 +68,23 @@ class ControllerTest < Test::Unit::TestCase
       redirect_back_or_default('')
       assert_nil session[:return_to]
     end
-    
+
     should "know if login is required from authorized method" do
       stubs(:authorized?).returns(true)
       assert login_required
     end
-    
+
     should "consider access denied if login is required and not authorized" do
       stubs(:authorized?).returns(false)
       expects(:access_denied)
       login_required
     end
-    
+
     should "know if a user is logged in" do
       stubs(:current_user_id).returns(1)
       assert logged_in?
     end
-    
+
     should "know if a user is not logged in" do
       stubs(:current_user_id).returns(nil)
       assert_equal false, logged_in?
@@ -101,53 +101,62 @@ class ControllerTest < Test::Unit::TestCase
     end
 
     should "#find the current user when #get fails" do
-      user_stub = stub()
-      user_stub.stubs(:find).with(1).returns("user")
-      
-      stubs(:current_user_id).returns(1)
-      stubs(:user_class).returns(user_stub)
-      
+      user = mock do |m|
+        m.expects(:where).with(:id => '1').returns(m)
+        m.expects(:first).returns("user")
+      end
+      stubs(:current_user_id).returns('1')
+      stubs(:user_class).returns(user)
+
       assert_equal "user", current_user
     end
-    
+
     should "clear session and return nil for the current user if it doesn't exist" do
-      User.stubs(:find).with('1').returns(nil)
+      user = mock do |m|
+        m.expects(:where).with(:id => '1').returns(m)
+        m.expects(:first).returns(nil)
+      end
       stubs(:current_user_id).with().returns('1')
+      stubs(:user_class).returns(user)
       stubs(:clear_session)
 
       assert_nil current_user
     end
-    
+
     should "be able to clear its session variables" do
       expects(:session).with().returns(mock() {|m| m.expects(:[]=).with(:user_id, nil) })
       clear_session
     end
-    
+
     should "allow assigning to the current user" do
       stubs(:session).returns({})
       user = mock(:id => 1)
       self.current_user = user
     end
-    
+
     should "save the current user to avoid lookup" do
       stubs(:session).returns({})
       user = stub(:id => 1)
       self.current_user = user
       assert_equal user, current_user
     end
-    
+
     should "know the current user id from session" do
       stubs(:session).returns({:user_id => 1})
       assert_equal 1, current_user_id
     end
-    
+
     should "have a default login error message" do
       assert_equal "Login or Registration Required", login_message
     end
 
     should "return the current_user, repeatedly" do
-      User.expects(:find).with(1).returns("user")
-      expects(:current_user_id).returns(1)
+      user = mock do |m|
+        m.expects(:where).with(:id => 1).returns(m)
+        m.expects(:first).returns("user")
+      end
+      stubs(:user_class).returns(user)
+      stubs(:current_user_id).returns(1)
 
       assert_equal "user", current_user
     end
@@ -157,5 +166,5 @@ class ControllerTest < Test::Unit::TestCase
       assert_equal :user_id, session_key
     end
   end
-  
+
 end

data/test/unit/simplest_auth/dm_model_test.rb

@@ -1,4 +1,4 @@
-require File.dirname(__FILE__) + '/../../test_helper'
+require File.expand_path('../../../test_helper', __FILE__)
 
 DMUser = Class.new
 
@@ -27,7 +27,7 @@ class DMUserTest < Test::Unit::TestCase
         DMUser.expects(:first).with(:email => 'joe@schmoe.com').returns(user)
         assert_equal user, DMUser.authenticate('joe@schmoe.com', 'password')
       end
-  
+
       context "with authenticate_by set to username" do
         setup do
           DMUser.authenticate_by :username

data/test/unit/simplest_auth/model_test.rb

@@ -1,4 +1,4 @@
-require File.dirname(__FILE__) + '/../../test_helper'
+require File.expand_path('../../../test_helper', __FILE__)
 
 class User; end
 
@@ -42,7 +42,7 @@ class UserTest < Test::Unit::TestCase
       password_stub = stub
       password_stub.stubs(:==).with('password').returns(false)
       Password.stubs(:new).with('abcdefg').returns(password_stub)
-      
+
       assert_equal false, @user.authentic?('password')
     end
 
@@ -50,7 +50,7 @@ class UserTest < Test::Unit::TestCase
       password_stub = mock
       password_stub.expects(:==).with('password').returns(true)
       Password.stubs(:new).with('abcdefg').returns(password_stub)
-      
+
       @user.authentic?('password')
     end
 
@@ -58,7 +58,7 @@ class UserTest < Test::Unit::TestCase
       password_stub = stub
       password_stub.stubs(:==).with('password').returns(true)
       Password.expects(:new).with('abcdefg').returns(password_stub)
-      
+
       @user.authentic?('password')
     end
 

data/test/unit/simplest_auth/session_test.rb

@@ -0,0 +1,107 @@
+require File.expand_path('../../../test_helper', __FILE__)
+
+class AdminSession
+  include SimplestAuth::Session
+end
+
+class Admin
+end
+
+class SimplestAuth::SessionTest < Test::Unit::TestCase
+
+  context "The Session class" do
+    should "have a default value for the user class name" do
+      assert_equal 'User', ::Session.user_class_name
+    end
+
+    should "know the user class name when it's set" do
+      OtherSession = Class.new do
+        include SimplestAuth::Session
+        set_user_class_name 'Admin'
+      end
+      assert_equal 'Admin', OtherSession.user_class_name
+    end
+
+    should "know the user class" do
+      AdminSession.stubs(:user_class_name).with().returns('Admin')
+      assert_equal Admin, AdminSession.user_class
+    end
+  end
+
+  context "An instance of the Session class" do
+    should "not have an email by default" do
+      assert_nil Session.new.email
+    end
+
+    should "not have a password by default" do
+      assert_nil Session.new.password
+    end
+
+    should "know the email address when set" do
+      session = Session.new(:email => 'user@host.com')
+      assert_equal 'user@host.com', session.email
+    end
+
+    should "know the password when set" do
+      session = Session.new(:password => 'password')
+      assert_equal 'password', session.password
+    end
+
+    should "require an email to be present" do
+      session = Session.new
+      session.valid?
+
+      assert_equal ["can't be blank"], session.errors[:email]
+    end
+
+    should "require the password to be present" do
+      session = Session.new
+      session.valid?
+
+      assert_equal ["can't be blank"], session.errors[:password]
+    end
+
+    should "know the user class" do
+      session = Session.new
+      assert_equal User, session.user_class
+    end
+
+    should "know that there's no user" do
+      User.stubs(:authenticate).with('user@host.com', 'password').returns(nil)
+
+      session = Session.new(:email => 'user@host.com', :password => 'password')
+      assert_nil session.user
+    end
+
+    should "know that there's a user" do
+      User.stubs(:authenticate).with('user@host.com', 'password').returns('user')
+
+      session = Session.new(:email => 'user@host.com', :password => 'password')
+      assert_equal 'user', session.user
+    end
+
+    should "not set errors on base if there is no email or password" do
+      session = Session.new(:email => ' ', :password => ' ')
+      session.valid?
+
+      assert_equal [], session.errors[:base]
+    end
+
+    should "set an error when there is no user" do
+      session = Session.new(:email => 'user@host.com', :password => 'password')
+      User.stubs(:authenticate).with('user@host.com', 'password').returns(nil)
+
+      session.valid?
+      assert_equal ["User not found for supplied credentials"], session.errors[:base]
+    end
+
+    should "not set an error when there is a user" do
+      session = Session.new
+      session.stubs(:user).with().returns(User.new)
+
+      session.valid?
+      assert_equal [], session.errors[:base]
+    end
+  end
+
+end

data/test/unit/simplest_auth/sessions_controller_test.rb

@@ -0,0 +1,201 @@
+require File.expand_path('../../../test_helper', __FILE__)
+
+module DummyController
+  def params
+    {}
+  end
+
+  def current_user=(user)
+  end
+
+  def flash
+    Hash.new
+  end
+
+  def redirect_to(path)
+  end
+
+  def render(action)
+  end
+
+  def root_url
+    '/'
+  end
+end
+
+class SessionsController
+  include SimplestAuth::SessionsController
+  include DummyController
+end
+
+class CustomSession
+end
+
+class CustomSessionsController
+  include SimplestAuth::SessionsController
+  include DummyController
+
+  set_session_class_name 'CustomSession'
+
+  def create
+    sign_user_in_or_render(:message => 'Hi', :url => '/admin')
+  end
+
+  def destroy
+    sign_user_out(:message => 'Bye', :url => '/survey')
+  end
+end
+
+class SimplestAuth::SessionsControllerTest < Test::Unit::TestCase
+
+  context "An instance of the SessionsController" do
+    should "know the default session class" do
+      assert_equal Session, SessionsController.new.send(:session_class)
+    end
+
+    should "be able to override the session class that is used" do
+      controller = CustomSessionsController.new
+      assert_equal CustomSession, controller.send(:session_class)
+    end
+  end
+
+  context "Requests" do
+    setup do
+      @controller = ::SessionsController.new
+      @session    = ::Session.new
+    end
+
+    context "a GET to :new" do
+      should "assign to @session" do
+        ::Session.stubs(:new).with().returns(@session)
+
+        @controller.new
+
+        assert_equal @session, @controller.instance_variable_get(:@session)
+      end
+    end
+
+    context "a POST to :create" do
+      should "assign to @session" do
+        ::Session.stubs(:new).with('key' => 'value').returns(@session)
+        @controller.stubs(:params).with().returns(:session => {'key' => 'value'})
+
+        @controller.create
+
+        assert_equal @session, @controller.instance_variable_get(:@session)
+      end
+
+      context "when successful" do
+        setup do
+          @session.stubs(:valid?).with().returns(true)
+          ::Session.stubs(:new).returns(@session)
+        end
+
+        should "save the user in session when successful" do
+          user = User.new
+          @session.stubs(:user).with().returns(user)
+
+          @controller.expects(:current_user=).with(user)
+
+          @controller.create
+        end
+
+        should "set the flash when successful" do
+          flash = mock()
+          flash.expects(:[]=).with(:notice, 'You have signed in successfully')
+          @controller.stubs(:flash).with().returns(flash)
+
+          @controller.create
+        end
+
+        should "redirect when successful" do
+          @controller.expects(:redirect_to).with('/')
+          @controller.create
+        end
+      end
+
+      context "when unsuccessful" do
+        setup do
+          @session.stubs(:valid?).with().returns(false)
+          ::Session.stubs(:new).returns(@session)
+        end
+
+        should "render when unsuccessful" do
+          @controller.expects(:render).with(:new)
+          @controller.create
+        end
+
+        should "not redirect when unsuccessful" do
+          @controller.expects(:redirect_to).never
+          @controller.create
+        end
+      end
+    end
+
+    context "a DELETE to :destroy" do
+
+      should "remove the user from session" do
+        @controller.expects(:current_user=).with(nil)
+        @controller.destroy
+      end
+
+      should "set the flash" do
+        flash = mock() {|f| f.expects(:[]=).with(:notice, 'You have signed out') }
+        @controller.stubs(:flash).with().returns(flash)
+
+        @controller.destroy
+      end
+
+      should "redirect" do
+        @controller.expects(:redirect_to).with('/')
+        @controller.destroy
+      end
+
+    end
+
+    context "with a custom controller" do
+      setup do
+        @session = ::CustomSession.new
+        @session.stubs(:user).returns(stub())
+        @session.stubs(:valid?).returns(true)
+
+        ::CustomSession.stubs(:new).returns(@session)
+
+        @controller = CustomSessionsController.new
+      end
+
+      context "a POST to :create" do
+        should "set the appropriate flash message" do
+          flash = mock() {|f| f.expects(:[]=).with(:notice, 'Hi') }
+
+          @controller.stubs(:flash).with().returns(flash)
+
+          @controller.create
+        end
+
+        should "redirect to the specified URL" do
+          @controller.expects(:redirect_to).with('/admin')
+
+          @controller.create
+        end
+      end
+
+      context "a DELETE to :destroy" do
+        should "set the appropriate flash message" do
+          flash = mock() {|f| f.expects(:[]=).with(:notice, 'Bye') }
+          @controller.stubs(:flash).with().returns(flash)
+
+          @controller.destroy
+        end
+
+        should "redirect to the specified URL" do
+          @controller.expects(:redirect_to).with('/survey')
+
+          @controller.destroy
+        end
+      end
+    end
+
+  end
+
+end

metadata

@@ -1,94 +1,115 @@
---- !ruby/object:Gem::Specification 
+--- !ruby/object:Gem::Specification
 name: simplest_auth
-version: !ruby/object:Gem::Version 
-  hash: 3
-  prerelease: false
-  segments: 
-  - 0
-  - 2
-  - 10
-  version: 0.2.10
+version: !ruby/object:Gem::Version
+  version: 0.3.1
+  prerelease: 
 platform: ruby
-authors: 
+authors:
 - Tony Pitale
 autorequire: 
 bindir: bin
 cert_chain: []
-
-date: 2010-07-15 00:00:00 -04:00
-default_executable: 
-dependencies: 
-- !ruby/object:Gem::Dependency 
+date: 2011-03-30 00:00:00.000000000Z
+dependencies:
+- !ruby/object:Gem::Dependency
   name: bcrypt-ruby
-  prerelease: false
-  requirement: &id001 !ruby/object:Gem::Requirement 
+  requirement: &70100279761160 !ruby/object:Gem::Requirement
     none: false
-    requirements: 
-    - - ~>
-      - !ruby/object:Gem::Version 
-        hash: 9
-        segments: 
-        - 2
-        - 1
-        - 1
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
         version: 2.1.1
   type: :runtime
-  version_requirements: *id001
+  prerelease: false
+  version_requirements: *70100279761160
+- !ruby/object:Gem::Dependency
+  name: shoulda
+  requirement: &70100279760320 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: *70100279760320
+- !ruby/object:Gem::Dependency
+  name: mocha
+  requirement: &70100279759400 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: *70100279759400
+- !ruby/object:Gem::Dependency
+  name: activemodel
+  requirement: &70100279757840 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: *70100279757840
 description: 
-email: tony.pitale@viget.com
+email: developers@viget.com
 executables: []
-
 extensions: []
-
 extra_rdoc_files: []
-
-files: 
+files:
+- .gitignore
+- .rvmrc
+- Gemfile
+- MIT-LICENSE
 - README.textile
 - Rakefile
+- lib/simplest_auth.rb
 - lib/simplest_auth/controller.rb
 - lib/simplest_auth/model.rb
+- lib/simplest_auth/session.rb
+- lib/simplest_auth/sessions_controller.rb
 - lib/simplest_auth/version.rb
-- lib/simplest_auth.rb
+- simplest_auth.gemspec
+- test/test_helper.rb
 - test/unit/simplest_auth/ar_model_test.rb
 - test/unit/simplest_auth/controller_test.rb
 - test/unit/simplest_auth/dm_model_test.rb
 - test/unit/simplest_auth/model_test.rb
-has_rdoc: true
+- test/unit/simplest_auth/session_test.rb
+- test/unit/simplest_auth/sessions_controller_test.rb
 homepage: http://viget.com/extend
 licenses: []
-
 post_install_message: 
 rdoc_options: []
-
-require_paths: 
+require_paths:
 - lib
-required_ruby_version: !ruby/object:Gem::Requirement 
+required_ruby_version: !ruby/object:Gem::Requirement
   none: false
-  requirements: 
-  - - ">="
-    - !ruby/object:Gem::Version 
-      hash: 3
-      segments: 
-      - 0
-      version: "0"
-required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
-  requirements: 
-  - - ">="
-    - !ruby/object:Gem::Version 
-      hash: 3
-      segments: 
-      - 0
-      version: "0"
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
 requirements: []
-
 rubyforge_project: 
-rubygems_version: 1.3.7
+rubygems_version: 1.8.10
 signing_key: 
 specification_version: 3
 summary: Simple implementation of authentication for Rails
-test_files: 
+test_files:
+- test/test_helper.rb
 - test/unit/simplest_auth/ar_model_test.rb
 - test/unit/simplest_auth/controller_test.rb
 - test/unit/simplest_auth/dm_model_test.rb
 - test/unit/simplest_auth/model_test.rb
+- test/unit/simplest_auth/session_test.rb
+- test/unit/simplest_auth/sessions_controller_test.rb