sinatra-authentication-oran 0.0.1

data/lib/models/tc_adapter.rb

@@ -0,0 +1,101 @@
+module TcAdapter
+  def self.included(base)
+    base.extend ClassMethods
+    base.class_eval {
+      include TcAdapter::InstanceMethods
+      alias :class_id :id
+    }
+  end
+
+  module ClassMethods
+    #TODO add pagination
+    def all
+      result = TcUser.query do |q|
+        q.order_by 'created_at_i', :numdesc
+      end
+
+      #these will be the same for all adapters, they should be defined in the user class, and these methods should have a different name?
+      result.collect {|instance| self.new instance }
+    end
+
+    def get(hash)
+      if hash[:id]
+        pk = hash[:id]
+        if pk.length > 0
+          result = TcUser.get(pk)
+        else
+          nil
+        end
+      else
+        result = TcUser.query do |q|
+          hash.each do |key, value|
+            q.add key.to_s, :streq, value.to_s
+          end
+        end[0]
+      end
+      #elsif hash[:email]
+      #  result = TcUser.query do |q|
+      #    q.add 'email', :streq, hash[:email]
+      #  end[0]
+        #the zero is because this returns an array but get should return the first result
+      #end
+
+      if result
+        self.new result
+      else
+        nil
+      end
+    end
+
+    def set(attributes)
+      user = TcUser.query do |q|
+        q.add 'email', :streq, attributes['email']
+      end
+
+      if user == [] #no user
+        self.new TcUser.set(attributes)
+      else
+        if attributes['email'].length == 0
+          error = 'You need to provide an email address'
+        else
+          error = 'That email is already taken'
+        end
+
+        TcUser.new(attributes, error)
+      end
+    end
+
+    def set!(attributes)
+      self.new TcUser.set!(attributes)
+    end
+
+    def delete(pk)
+      #true or false
+      !!TcUser.delete(pk)
+    end
+  end
+
+  module InstanceMethods
+    def update(attributes)
+      @instance.update attributes
+    end
+
+  def errors
+    @instance.errors.join(', ')
+  end
+
+  def valid
+    @instance.errors.length == 0
+  end
+
+    def method_missing(meth, *args, &block)
+      #cool I just found out * on an array turn the array into a list of args for a function
+      @instance.send(meth, *args, &block)
+    end
+
+    #this was the only thing that didn't get passed on to method_missing because this is a method of object doh
+    def id
+      @instance.id
+    end
+  end
+end

data/lib/sinatra-authentication-o.rb

@@ -0,0 +1,305 @@
+require 'sinatra/base'
+require File.expand_path("../models/abstract_user", __FILE__)
+
+module Sinatra
+  module SinatraAuthentication
+    def self.registered(app)
+      #INVESTIGATE
+      #the possibility of sinatra having an array of view_paths to load from
+      #PROBLEM
+      #sinatra 9.1.1 doesn't have multiple view capability anywhere
+      #so to get around I have to do it totally manually by
+      #loading the view from this path into a string and rendering it
+      app.set :sinatra_authentication_view_path, File.expand_path('../views/', __FILE__)
+      unless defined?(options.template_engine)
+        app.set :template_engine, :slim
+      end
+
+      app.get '/users/?' do
+        login_required
+        redirect "/" unless current_user.admin?
+
+        @users = User.all
+        if @users != []
+          send options.template_engine, get_view_as_string("index.#{options.template_engine}"), :layout => use_layout?
+        else
+          redirect '/signup'
+        end
+      end
+
+      app.get '/users/:id/?' do
+        login_required
+
+        @user = User.get(:id => params[:id])
+        send options.template_engine,  get_view_as_string("show.#{options.template_engine}"), :layout => use_layout?
+      end
+
+      #convenience for ajax but maybe entirely stupid and unnecesary
+      app.get '/logged_in' do
+        if session[:user]
+          "true"
+        else
+          "false"
+        end
+      end
+
+      app.get '/login/?' do
+        if session[:user]
+          redirect '/'
+        else
+          send options.template_engine, get_view_as_string("login.#{options.template_engine}"), :layout => use_layout?
+        end
+      end
+
+      app.post '/login/?' do
+        if user = User.authenticate(params[:name], params[:password])
+          session[:user] = user.id
+
+          if Rack.const_defined?('Flash')
+            flash[:notice] = "Login successful."
+          end
+
+          if session[:return_to]
+            redirect_url = session[:return_to]
+            session[:return_to] = false
+            redirect redirect_url
+          else
+            redirect '/'
+          end
+        else
+          if Rack.const_defined?('Flash')
+            flash[:error] = "The email or password you entered is incorrect."
+          end
+          redirect '/login'
+        end
+      end
+
+      app.get '/logout/?' do
+        session[:user] = nil
+        if Rack.const_defined?('Flash')
+          flash[:notice] = "Logout successful."
+        end
+        return_to = ( session[:return_to] ? session[:return_to] : '/' )
+        redirect return_to
+      end
+
+      app.get '/signup/?' do
+        if session[:user]
+          redirect '/'
+        else
+          send options.template_engine, get_view_as_string("signup.#{options.template_engine}"), :layout => use_layout?
+        end
+      end
+
+      app.post '/signup/?' do
+        @user = User.set(params[:user])
+        if @user.valid && @user.id
+          session[:user] = @user.id
+          if Rack.const_defined?('Flash')
+            flash[:notice] = "Account created."
+          end
+          redirect '/'
+        else
+          if Rack.const_defined?('Flash')
+            flash[:error] = "There were some problems creating your account: #{@user.errors}."
+          end
+          redirect '/signup?' + hash_to_query_string(params['user'])
+        end
+      end
+
+      app.get '/users/:id/edit/?' do
+        login_required
+        redirect "/users" unless current_user.admin? || current_user.id.to_s == params[:id]
+        @user = User.get(:id => params[:id])
+        send options.template_engine, get_view_as_string("edit.#{options.template_engine}"), :layout => use_layout?
+      end
+
+      app.post '/users/:id/edit/?' do
+        login_required
+        redirect "/users" unless current_user.admin? || current_user.id.to_s == params[:id]
+
+        user = User.get(:id => params[:id])
+        user_attributes = params[:user]
+        if params[:user][:password] == ""
+            user_attributes.delete("password")
+            user_attributes.delete("password_confirmation")
+        end
+
+        if user.update(user_attributes)
+          if Rack.const_defined?('Flash')
+            flash[:notice] = 'Account updated.'
+          end
+          redirect '/'
+        else
+          if Rack.const_defined?('Flash')
+            flash[:error] = "Whoops, looks like there were some problems with your updates: #{user.errors}."
+          end
+          redirect "/users/#{user.id}/edit?" + hash_to_query_string(user_attributes)
+        end
+      end
+
+      app.get '/users/:id/delete/?' do
+        login_required
+        redirect "/users" unless current_user.admin? || current_user.id.to_s == params[:id]
+
+        if User.delete(params[:id])
+          if Rack.const_defined?('Flash')
+            flash[:notice] = "User deleted."
+          end
+        else
+          if Rack.const_defined?('Flash')
+            flash[:error] = "Deletion failed."
+          end
+        end
+        redirect '/'
+      end
+
+
+      if Sinatra.const_defined?('FacebookObject')
+        app.get '/connect/?' do
+          if fb[:user]
+            if current_user.class != GuestUser
+              user = current_user
+            else
+              user = User.get(:fb_uid => fb[:user])
+            end
+
+            if user
+              if !user.fb_uid || user.fb_uid != fb[:user]
+                user.update :fb_uid => fb[:user]
+              end
+              session[:user] = user.id
+            else
+              user = User.set!(:fb_uid => fb[:user])
+              session[:user] = user.id
+            end
+          end
+          redirect '/'
+        end
+
+        app.get '/receiver' do
+          %[<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+            <html xmlns="http://www.w3.org/1999/xhtml" >
+              <body>
+                <script src="http://static.ak.connect.facebook.com/js/api_lib/v0.4/XdCommReceiver.js" type="text/javascript"></script>
+              </body>
+            </html>]
+        end
+      end
+    end
+  end
+
+  module Helpers
+    def hash_to_query_string(hash)
+      hash.collect {|k,v| "#{k}=#{v}"}.join('&')
+    end
+
+    def login_required
+      #not as efficient as checking the session. but this inits the fb_user if they are logged in
+      if current_user.class != GuestUser
+        return true
+      else
+        session[:return_to] = request.fullpath
+        redirect '/login'
+        return false
+      end
+    end
+
+    def current_user
+      if session[:user]
+        User.get(:id => session[:user])
+      else
+        GuestUser.new
+      end
+    end
+
+    def logged_in?
+      !!session[:user]
+    end
+
+    def use_layout?
+      !request.xhr?
+    end
+
+    #BECAUSE sinatra 9.1.1 can't load views from different paths properly
+    def get_view_as_string(filename)
+      view = File.join(settings.sinatra_authentication_view_path, filename)
+      data = ""
+      f = File.open(view, "r")
+      f.each_line do |line|
+        data += line
+      end
+      return data
+    end
+
+    def render_login_logout(html_attributes = {:class => ""})
+    css_classes = html_attributes.delete(:class)
+    parameters = ''
+    html_attributes.each_pair do |attribute, value|
+      parameters += "#{attribute}=\"#{value}\" "
+    end
+
+      result = "<div id='sinatra-authentication-login-logout' >"
+      if logged_in?
+        logout_parameters = html_attributes
+        # a tad janky?
+        logout_parameters.delete(:rel)
+        result += "<a href='/users/#{current_user.id}/edit' class='#{css_classes} sinatra-authentication-edit' #{parameters}>Edit account</a> "
+        if Sinatra.const_defined?('FacebookObject')
+          if fb[:user]
+            result += "<a href='javascript:FB.Connect.logoutAndRedirect(\"/logout\");' class='#{css_classes} sinatra-authentication-logout' #{logout_parameters}>Logout</a>"
+          else
+            result += "<a href='/logout' class='#{css_classes} sinatra-authentication-logout' #{logout_parameters}>Logout</a>"
+          end
+        else
+          result += "<a href='/logout' class='#{css_classes} sinatra-authentication-logout' #{logout_parameters}>Logout</a>"
+        end
+      else
+        result += "<a href='/signup' class='#{css_classes} sinatra-authentication-signup' #{parameters}>Signup</a> "
+        result += "<a href='/login' class='#{css_classes} sinatra-authentication-login' #{parameters}>Login</a>"
+      end
+
+      result += "</div>"
+    end
+
+    if Sinatra.const_defined?('FacebookObject')
+      def render_facebook_connect_link(text = 'Login using facebook', options = {:size => 'small'})
+          if options[:size] == 'small'
+            size = 'Small'
+          elsif options[:size] == 'medium'
+            size = 'Medium'
+          elsif options[:size] == 'large'
+            size = 'Large'
+          elsif options[:size] == 'xlarge'
+            size = 'BigPun'
+          else
+            size = 'Small'
+          end
+
+          %[<a href="#" onclick="FB.Connect.requireSession(function(){document.location = '/connect';}); return false;" class="fbconnect_login_button FBConnectButton FBConnectButton_#{size}">
+              <span id="RES_ID_fb_login_text" class="FBConnectButton_Text">
+                #{text}
+              </span>
+            </a>]
+      end
+    end
+  end
+
+  register SinatraAuthentication
+end
+
+class GuestUser
+  def guest?
+    true
+  end
+
+  def permission_level
+    0
+  end
+
+  # current_user.admin? returns false. current_user.has_a_baby? returns false.
+  # (which is a bit of an assumption I suppose)
+  def method_missing(m, *args)
+    return false
+  end
+end

data/lib/sinatra-authentication.rb

@@ -0,0 +1,305 @@
+require 'sinatra/base'
+require File.expand_path("../models/abstract_user", __FILE__)
+
+module Sinatra
+  module SinatraAuthentication
+    def self.registered(app)
+      #INVESTIGATE
+      #the possibility of sinatra having an array of view_paths to load from
+      #PROBLEM
+      #sinatra 9.1.1 doesn't have multiple view capability anywhere
+      #so to get around I have to do it totally manually by
+      #loading the view from this path into a string and rendering it
+      app.set :sinatra_authentication_view_path, File.expand_path('../views/', __FILE__)
+      unless defined?(options.template_engine)
+        app.set :template_engine, :slim
+      end
+
+      app.get '/users/?' do
+        login_required
+        redirect "/" unless current_user.admin?
+
+        @users = User.all
+        if @users != []
+          send options.template_engine, get_view_as_string("index.#{options.template_engine}"), :layout => use_layout?
+        else
+          redirect '/signup'
+        end
+      end
+
+      app.get '/users/:id/?' do
+        login_required
+
+        @user = User.get(:id => params[:id])
+        send options.template_engine,  get_view_as_string("show.#{options.template_engine}"), :layout => use_layout?
+      end
+
+      #convenience for ajax but maybe entirely stupid and unnecesary
+      app.get '/logged_in' do
+        if session[:user]
+          "true"
+        else
+          "false"
+        end
+      end
+
+      app.get '/login/?' do
+        if session[:user]
+          redirect '/'
+        else
+          send options.template_engine, get_view_as_string("login.#{options.template_engine}"), :layout => use_layout?
+        end
+      end
+
+      app.post '/login/?' do
+        if user = User.authenticate(params[:name], params[:password])
+          session[:user] = user.id
+
+          if Rack.const_defined?('Flash')
+            flash[:notice] = "Login successful."
+          end
+
+          if session[:return_to]
+            redirect_url = session[:return_to]
+            session[:return_to] = false
+            redirect redirect_url
+          else
+            redirect '/'
+          end
+        else
+          if Rack.const_defined?('Flash')
+            flash[:error] = "The email or password you entered is incorrect."
+          end
+          redirect '/login'
+        end
+      end
+
+      app.get '/logout/?' do
+        session[:user] = nil
+        if Rack.const_defined?('Flash')
+          flash[:notice] = "Logout successful."
+        end
+        return_to = ( session[:return_to] ? session[:return_to] : '/' )
+        redirect return_to
+      end
+
+      app.get '/signup/?' do
+        if session[:user]
+          redirect '/'
+        else
+          send options.template_engine, get_view_as_string("signup.#{options.template_engine}"), :layout => use_layout?
+        end
+      end
+
+      app.post '/signup/?' do
+        @user = User.set(params[:user])
+        if @user.valid && @user.id
+          session[:user] = @user.id
+          if Rack.const_defined?('Flash')
+            flash[:notice] = "Account created."
+          end
+          redirect '/'
+        else
+          if Rack.const_defined?('Flash')
+            flash[:error] = "There were some problems creating your account: #{@user.errors}."
+          end
+          redirect '/signup?' + hash_to_query_string(params['user'])
+        end
+      end
+
+      app.get '/users/:id/edit/?' do
+        login_required
+        redirect "/users" unless current_user.admin? || current_user.id.to_s == params[:id]
+        @user = User.get(:id => params[:id])
+        send options.template_engine, get_view_as_string("edit.#{options.template_engine}"), :layout => use_layout?
+      end
+
+      app.post '/users/:id/edit/?' do
+        login_required
+        redirect "/users" unless current_user.admin? || current_user.id.to_s == params[:id]
+
+        user = User.get(:id => params[:id])
+        user_attributes = params[:user]
+        if params[:user][:password] == ""
+            user_attributes.delete("password")
+            user_attributes.delete("password_confirmation")
+        end
+
+        if user.update(user_attributes)
+          if Rack.const_defined?('Flash')
+            flash[:notice] = 'Account updated.'
+          end
+          redirect '/'
+        else
+          if Rack.const_defined?('Flash')
+            flash[:error] = "Whoops, looks like there were some problems with your updates: #{user.errors}."
+          end
+          redirect "/users/#{user.id}/edit?" + hash_to_query_string(user_attributes)
+        end
+      end
+
+      app.get '/users/:id/delete/?' do
+        login_required
+        redirect "/users" unless current_user.admin? || current_user.id.to_s == params[:id]
+
+        if User.delete(params[:id])
+          if Rack.const_defined?('Flash')
+            flash[:notice] = "User deleted."
+          end
+        else
+          if Rack.const_defined?('Flash')
+            flash[:error] = "Deletion failed."
+          end
+        end
+        redirect '/'
+      end
+
+
+      if Sinatra.const_defined?('FacebookObject')
+        app.get '/connect/?' do
+          if fb[:user]
+            if current_user.class != GuestUser
+              user = current_user
+            else
+              user = User.get(:fb_uid => fb[:user])
+            end
+
+            if user
+              if !user.fb_uid || user.fb_uid != fb[:user]
+                user.update :fb_uid => fb[:user]
+              end
+              session[:user] = user.id
+            else
+              user = User.set!(:fb_uid => fb[:user])
+              session[:user] = user.id
+            end
+          end
+          redirect '/'
+        end
+
+        app.get '/receiver' do
+          %[<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+            <html xmlns="http://www.w3.org/1999/xhtml" >
+              <body>
+                <script src="http://static.ak.connect.facebook.com/js/api_lib/v0.4/XdCommReceiver.js" type="text/javascript"></script>
+              </body>
+            </html>]
+        end
+      end
+    end
+  end
+
+  module Helpers
+    def hash_to_query_string(hash)
+      hash.collect {|k,v| "#{k}=#{v}"}.join('&')
+    end
+
+    def login_required
+      #not as efficient as checking the session. but this inits the fb_user if they are logged in
+      if current_user.class != GuestUser
+        return true
+      else
+        session[:return_to] = request.fullpath
+        redirect '/login'
+        return false
+      end
+    end
+
+    def current_user
+      if session[:user]
+        User.get(:id => session[:user])
+      else
+        GuestUser.new
+      end
+    end
+
+    def logged_in?
+      !!session[:user]
+    end
+
+    def use_layout?
+      !request.xhr?
+    end
+
+    #BECAUSE sinatra 9.1.1 can't load views from different paths properly
+    def get_view_as_string(filename)
+      view = File.join(settings.sinatra_authentication_view_path, filename)
+      data = ""
+      f = File.open(view, "r")
+      f.each_line do |line|
+        data += line
+      end
+      return data
+    end
+
+    def render_login_logout(html_attributes = {:class => ""})
+    css_classes = html_attributes.delete(:class)
+    parameters = ''
+    html_attributes.each_pair do |attribute, value|
+      parameters += "#{attribute}=\"#{value}\" "
+    end
+
+      result = "<div id='sinatra-authentication-login-logout' >"
+      if logged_in?
+        logout_parameters = html_attributes
+        # a tad janky?
+        logout_parameters.delete(:rel)
+        result += "<a href='/users/#{current_user.id}/edit' class='#{css_classes} sinatra-authentication-edit' #{parameters}>Edit account</a> "
+        if Sinatra.const_defined?('FacebookObject')
+          if fb[:user]
+            result += "<a href='javascript:FB.Connect.logoutAndRedirect(\"/logout\");' class='#{css_classes} sinatra-authentication-logout' #{logout_parameters}>Logout</a>"
+          else
+            result += "<a href='/logout' class='#{css_classes} sinatra-authentication-logout' #{logout_parameters}>Logout</a>"
+          end
+        else
+          result += "<a href='/logout' class='#{css_classes} sinatra-authentication-logout' #{logout_parameters}>Logout</a>"
+        end
+      else
+        result += "<a href='/signup' class='#{css_classes} sinatra-authentication-signup' #{parameters}>Signup</a> "
+        result += "<a href='/login' class='#{css_classes} sinatra-authentication-login' #{parameters}>Login</a>"
+      end
+
+      result += "</div>"
+    end
+
+    if Sinatra.const_defined?('FacebookObject')
+      def render_facebook_connect_link(text = 'Login using facebook', options = {:size => 'small'})
+          if options[:size] == 'small'
+            size = 'Small'
+          elsif options[:size] == 'medium'
+            size = 'Medium'
+          elsif options[:size] == 'large'
+            size = 'Large'
+          elsif options[:size] == 'xlarge'
+            size = 'BigPun'
+          else
+            size = 'Small'
+          end
+
+          %[<a href="#" onclick="FB.Connect.requireSession(function(){document.location = '/connect';}); return false;" class="fbconnect_login_button FBConnectButton FBConnectButton_#{size}">
+              <span id="RES_ID_fb_login_text" class="FBConnectButton_Text">
+                #{text}
+              </span>
+            </a>]
+      end
+    end
+  end
+
+  register SinatraAuthentication
+end
+
+class GuestUser
+  def guest?
+    true
+  end
+
+  def permission_level
+    0
+  end
+
+  # current_user.admin? returns false. current_user.has_a_baby? returns false.
+  # (which is a bit of an assumption I suppose)
+  def method_missing(m, *args)
+    return false
+  end
+end