sorcery 0.1.1 → 0.2.0

data/spec/rails3/app_root/spec/spec_helper.rb

@@ -0,0 +1,61 @@
+$: << File.join(File.dirname(__FILE__), '..', '..', 'lib' )
+
+require 'simplecov'
+SimpleCov.root File.join(File.dirname(__FILE__), "..", "..", "app_root" )
+SimpleCov.start do
+  add_filter "/config/"
+  
+  add_group 'Controllers', 'app/controllers'
+  add_group 'Models', 'app/models'
+  add_group 'Helpers', 'app/helpers'
+  add_group 'Libraries', 'lib'
+  add_group 'Plugins', 'vendor/plugins'
+  add_group 'Migrations', 'db/migrate'
+end
+
+require 'spork'
+
+Spork.prefork do
+  # Set the default environment to sqlite3's in_memory database
+  ENV['RAILS_ENV'] ||= 'in_memory'
+  ENV['RAILS_ROOT'] = 'app_root'
+  
+  # Load the Rails environment and testing framework
+  require "#{File.dirname(__FILE__)}/../config/environment"
+  #require "#{File.dirname(__FILE__)}/../../init" # for plugins
+  require 'rspec/rails'
+
+  RSpec.configure do |config|
+    config.use_transactional_fixtures = true
+    config.use_instantiated_fixtures  = false
+    config.include RSpec::Rails::ControllerExampleGroup, :example_group => { :file_path => /controller(.)*_spec.rb$/ }
+
+    config.before(:suite) do
+      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/core")
+    end
+
+    config.after(:suite) do
+      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/core")
+    end
+  end
+  
+  #----------------------------------------------------------------
+  # needed when running individual specs
+  require File.join(File.dirname(__FILE__), '..','app','models','user')
+  require File.join(File.dirname(__FILE__), '..','app','models','authentication')
+
+  class TestUser < ActiveRecord::Base
+    activate_sorcery!
+  end
+
+  class TestMailer < ActionMailer::Base
+
+  end
+  
+  include ::Sorcery::TestHelpers
+  
+end
+
+Spork.each_run do
+  # This code will be run each time you run your specs.
+end

data/spec/rails3/{user_activation_spec.rb → app_root/spec/user_activation_spec.rb}

@@ -1,5 +1,5 @@
 require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-require File.expand_path(File.dirname(__FILE__) + '/app_root/app/mailers/sorcery_mailer')
+require File.expand_path(File.dirname(__FILE__) + '/../app/mailers/sorcery_mailer')
 
 describe "User with activation submodule" do
   before(:all) do
@@ -13,53 +13,53 @@ describe "User with activation submodule" do
   # ----------------- PLUGIN CONFIGURATION -----------------------
   describe User, "loaded plugin configuration" do
     before(:all) do
-      plugin_model_configure([:user_activation], :sorcery_mailer => ::SorceryMailer)
+      sorcery_reload!([:user_activation], :user_activation_mailer => ::SorceryMailer)
     end
   
     after(:each) do
       User.sorcery_config.reset!
-      plugin_model_configure([:user_activation], :sorcery_mailer => ::SorceryMailer)
+      sorcery_reload!([:user_activation], :user_activation_mailer => ::SorceryMailer)
     end
     
     it "should enable configuration option 'activation_state_attribute_name'" do
-      plugin_set_model_config_property(:activation_state_attribute_name, :status)
+      sorcery_model_property_set(:activation_state_attribute_name, :status)
       User.sorcery_config.activation_state_attribute_name.should equal(:status)    
     end
     
-    it "should enable configuration option 'activation_code_attribute_name'" do
-      plugin_set_model_config_property(:activation_code_attribute_name, :code)
-      User.sorcery_config.activation_code_attribute_name.should equal(:code)    
+    it "should enable configuration option 'activation_token_attribute_name'" do
+      sorcery_model_property_set(:activation_token_attribute_name, :code)
+      User.sorcery_config.activation_token_attribute_name.should equal(:code)    
     end
     
-    it "should enable configuration option 'sorcery_mailer'" do
-      plugin_set_model_config_property(:sorcery_mailer, TestMailer)
-      User.sorcery_config.sorcery_mailer.should equal(TestMailer)    
+    it "should enable configuration option 'user_activation_mailer'" do
+      sorcery_model_property_set(:user_activation_mailer, TestMailer)
+      User.sorcery_config.user_activation_mailer.should equal(TestMailer)    
     end
     
     it "should enable configuration option 'activation_needed_email_method_name'" do
-      plugin_set_model_config_property(:activation_needed_email_method_name, :my_activation_email)
+      sorcery_model_property_set(:activation_needed_email_method_name, :my_activation_email)
       User.sorcery_config.activation_needed_email_method_name.should equal(:my_activation_email)
     end
     
     it "should enable configuration option 'activation_success_email_method_name'" do
-      plugin_set_model_config_property(:activation_success_email_method_name, :my_activation_email)
+      sorcery_model_property_set(:activation_success_email_method_name, :my_activation_email)
       User.sorcery_config.activation_success_email_method_name.should equal(:my_activation_email)
     end
     
     it "if mailer is nil on activation, throw exception!" do
-      expect{plugin_model_configure([:user_activation])}.to raise_error(ArgumentError)
+      expect{sorcery_reload!([:user_activation])}.to raise_error(ArgumentError)
     end
   end
 
   # ----------------- ACTIVATION PROCESS -----------------------
   describe User, "activation process" do
     before(:all) do
-      plugin_model_configure([:user_activation], :sorcery_mailer => ::SorceryMailer)
+      sorcery_reload!([:user_activation], :user_activation_mailer => ::SorceryMailer)
     end
     
     it "should generate an activation code on registration" do
       create_new_user
-      @user.activation_code.should_not be_nil
+      @user.activation_token.should_not be_nil
     end
     
     it "should initialize user state to 'pending'" do
@@ -74,12 +74,12 @@ describe "User with activation submodule" do
     
     it "should clear activation code and change state to 'active' on activation" do
       create_new_user
-      activation_code = @user.activation_code
+      activation_token = @user.activation_token
       @user.activate!
       @user2 = User.find(@user.id) # go to db to make sure it was saved and not just in memory
-      @user2.activation_code.should be_nil
+      @user2.activation_token.should be_nil
       @user2.activation_state.should == "active"
-      User.find_by_activation_code(activation_code).should be_nil
+      User.find_by_activation_token(activation_token).should be_nil
     end
     
     it "should send the user an activation email" do
@@ -113,14 +113,14 @@ describe "User with activation submodule" do
     end
     
     it "activation needed email is optional" do
-      plugin_set_model_config_property(:activation_needed_email_method_name, nil)
+      sorcery_model_property_set(:activation_needed_email_method_name, nil)
       old_size = ActionMailer::Base.deliveries.size
       create_new_user
       ActionMailer::Base.deliveries.size.should == old_size
     end
     
     it "activation success email is optional" do
-      plugin_set_model_config_property(:activation_success_email_method_name, nil)
+      sorcery_model_property_set(:activation_success_email_method_name, nil)
       create_new_user
       old_size = ActionMailer::Base.deliveries.size
       @user.activate!
@@ -130,7 +130,7 @@ describe "User with activation submodule" do
 
   describe User, "prevent non-active login feature" do
     before(:all) do
-      plugin_model_configure([:user_activation], :sorcery_mailer => ::SorceryMailer)
+      sorcery_reload!([:user_activation], :user_activation_mailer => ::SorceryMailer)
     end
     
     it "should not allow a non-active user to authenticate" do
@@ -140,9 +140,49 @@ describe "User with activation submodule" do
     
     it "should allow a non-active user to authenticate if configured so" do
       create_new_user
-      plugin_set_model_config_property(:prevent_non_active_users_to_login, false)
+      sorcery_model_property_set(:prevent_non_active_users_to_login, false)
       User.authenticate(@user.username,'secret').should be_true
     end
   end
   
+  describe User, "load_from_activation_token" do
+    before(:all) do
+      sorcery_reload!([:user_activation], :user_activation_mailer => ::SorceryMailer)
+    end
+    
+    it "load_from_activation_token should return user when token is found" do
+      create_new_user
+      User.load_from_activation_token(@user.activation_token).should == @user
+    end
+    
+    it "load_from_activation_token should NOT return user when token is NOT found" do
+      create_new_user
+      User.load_from_activation_token("a").should == nil
+    end
+    
+    it "load_from_activation_token should return user when token is found and not expired" do
+      sorcery_model_property_set(:activation_token_expiration_period, 500)
+      create_new_user
+      User.load_from_activation_token(@user.activation_token).should == @user
+    end
+    
+    it "load_from_activation_token should NOT return user when token is found and expired" do
+      sorcery_model_property_set(:activation_token_expiration_period, 0.1)
+      create_new_user
+      sleep 0.5
+      User.load_from_activation_token(@user.activation_token).should == nil
+    end
+    
+    it "load_from_activation_token should return nil if token is blank" do
+      User.load_from_activation_token(nil).should == nil
+      User.load_from_activation_token("").should == nil
+    end
+    
+    it "load_from_activation_token should always be valid if expiration period is nil" do
+      sorcery_model_property_set(:activation_token_expiration_period, nil)
+      create_new_user
+      User.load_from_activation_token(@user.activation_token).should == @user
+    end
+  end
+  
 end

data/spec/rails3/app_root/spec/user_activity_logging_spec.rb

@@ -0,0 +1,36 @@
+require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
+
+describe "User with activity logging submodule" do
+  before(:all) do
+  end
+  
+  after(:all) do
+  end
+
+  # ----------------- PLUGIN CONFIGURATION -----------------------
+  describe User, "loaded plugin configuration" do
+    before(:all) do
+      sorcery_reload!([:activity_logging])
+    end
+  
+    after(:each) do
+      User.sorcery_config.reset!
+    end
+    
+    it "should allow configuration option 'last_login_at_attribute_name'" do
+      sorcery_model_property_set(:last_login_at_attribute_name, :login_time)
+      User.sorcery_config.last_login_at_attribute_name.should equal(:login_time)
+    end
+    
+    it "should allow configuration option 'last_logout_at_attribute_name'" do
+      sorcery_model_property_set(:last_logout_at_attribute_name, :logout_time)
+      User.sorcery_config.last_logout_at_attribute_name.should equal(:logout_time)
+    end
+    
+    it "should allow configuration option 'last_activity_at_attribute_name'" do
+      sorcery_model_property_set(:last_activity_at_attribute_name, :activity_time)
+      User.sorcery_config.last_activity_at_attribute_name.should equal(:activity_time)
+    end
+  end
+
+end

data/spec/rails3/app_root/spec/user_brute_force_protection_spec.rb

@@ -0,0 +1,76 @@
+require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
+
+describe "User with brute_force_protection submodule" do
+  before(:all) do
+    ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/brute_force_protection")
+  end
+  
+  after(:all) do
+    ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/brute_force_protection")
+  end
+
+  # ----------------- PLUGIN CONFIGURATION -----------------------
+  describe User, "loaded plugin configuration" do
+  
+    before(:all) do
+      sorcery_reload!([:brute_force_protection])
+      create_new_user
+    end
+  
+    after(:each) do
+      User.sorcery_config.reset!
+    end
+    
+    it "should respond to 'failed_logins_count'" do
+      @user.should respond_to(:failed_logins_count)
+    end
+    
+    it "should respond to 'lock_expires_at'" do
+      @user.should respond_to(:failed_logins_count)
+    end
+ 
+    it "should enable configuration option 'failed_logins_count_attribute_name'" do
+      sorcery_model_property_set(:failed_logins_count_attribute_name, :my_count)
+      User.sorcery_config.failed_logins_count_attribute_name.should equal(:my_count)    
+    end
+    
+    it "should enable configuration option 'lock_expires_at_attribute_name'" do
+      sorcery_model_property_set(:lock_expires_at_attribute_name, :expires)
+      User.sorcery_config.lock_expires_at_attribute_name.should equal(:expires)    
+    end
+    
+    it "should enable configuration option 'consecutive_login_retries_amount_allowed'" do
+      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 34)
+      User.sorcery_config.consecutive_login_retries_amount_limit.should equal(34)    
+    end
+    
+    it "should enable configuration option 'login_lock_time_period'" do
+      sorcery_model_property_set(:login_lock_time_period, 2.hours)
+      User.sorcery_config.login_lock_time_period.should == 2.hours    
+    end
+  end
+
+  # ----------------- PLUGIN ACTIVATED -----------------------
+  describe User, "when activated with sorcery" do
+  
+    before(:all) do
+      sorcery_reload!([:brute_force_protection])
+    end
+  
+    before(:each) do
+      User.delete_all
+    end
+
+    # it "should increment failed_logins_count on a failed login" do
+    #   create_new_user
+    #   
+    # end
+    # 
+    # it "should set lock expiry (effectively lock user) when failed_logins_count reaches max within max period" do
+    #   create_new_user
+    #   @user.lock_expires_at.should == Time.now.utc + 30
+    # end
+ 
+  end
+  
+end

data/spec/rails3/app_root/spec/user_oauth_spec.rb

@@ -0,0 +1,39 @@
+require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
+
+describe "User with oauth submodule" do
+  before(:all) do
+    ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/oauth")
+  end
+  
+  after(:all) do
+    ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/oauth")
+  end
+
+  # ----------------- PLUGIN CONFIGURATION -----------------------
+  describe User, "loaded plugin configuration" do
+  
+    before(:all) do
+      sorcery_reload!([:oauth])
+      sorcery_controller_property_set(:oauth_providers, [:twitter])
+      sorcery_model_property_set(:authentications_class, Authentication)
+      sorcery_controller_oauth_property_set(:twitter, :key, "eYVNBjBDi33aa9GkA3w")
+      sorcery_controller_oauth_property_set(:twitter, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
+      sorcery_controller_oauth_property_set(:twitter, :callback_url, "http://blabla.com")
+      create_new_external_user(:twitter)
+    end
+    
+    it "should respond to 'load_from_provider'" do
+      User.should respond_to(:load_from_provider)
+    end
+    
+    it "'load_from_provider' should load user if exists" do
+      User.load_from_provider(:twitter,123).should == @user
+    end
+    
+    it "'load_from_provider' should return nil if user doesn't exist" do
+      User.load_from_provider(:twitter,980342).should be_nil
+    end
+    
+  end
+  
+end

data/spec/rails3/{user_remember_me_spec.rb → app_root/spec/user_remember_me_spec.rb}

@@ -12,7 +12,7 @@ describe "User with remember_me submodule" do
   # ----------------- PLUGIN CONFIGURATION -----------------------
   describe User, "loaded plugin configuration" do
     before(:all) do
-      plugin_model_configure([:remember_me])
+      sorcery_reload!([:remember_me])
     end
   
     after(:each) do
@@ -20,12 +20,12 @@ describe "User with remember_me submodule" do
     end
     
     it "should allow configuration option 'remember_me_token_attribute_name'" do
-      plugin_set_model_config_property(:remember_me_token_attribute_name, :my_token)
+      sorcery_model_property_set(:remember_me_token_attribute_name, :my_token)
       User.sorcery_config.remember_me_token_attribute_name.should equal(:my_token)
     end
 
     it "should allow configuration option 'remember_me_token_expires_at_attribute_name'" do
-      plugin_set_model_config_property(:remember_me_token_expires_at_attribute_name, :my_expires)
+      sorcery_model_property_set(:remember_me_token_expires_at_attribute_name, :my_expires)
       User.sorcery_config.remember_me_token_expires_at_attribute_name.should equal(:my_expires)
     end
     
@@ -48,7 +48,7 @@ describe "User with remember_me submodule" do
     
     it "should set an expiration based on 'remember_me_for' attribute" do
       create_new_user
-      plugin_set_model_config_property(:remember_me_for, 2 * 60 * 60 * 24)
+      sorcery_model_property_set(:remember_me_for, 2 * 60 * 60 * 24)
       @user.remember_me!
       @user.remember_me_token_expires_at.to_s.should == (Time.now + 2 * 60 * 60 * 24).utc.to_s
     end

data/spec/rails3/app_root/spec/user_reset_password_spec.rb

@@ -0,0 +1,178 @@
+require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
+
+describe "User with reset_password submodule" do
+  before(:all) do
+    ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/reset_password")
+  end
+  
+  after(:all) do
+    ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/reset_password")
+  end
+
+  # ----------------- PLUGIN CONFIGURATION -----------------------
+  describe User, "loaded plugin configuration" do
+  
+    before(:all) do
+      sorcery_reload!([:reset_password], :reset_password_mailer => ::SorceryMailer)
+    end
+  
+    after(:each) do
+      User.sorcery_config.reset!
+    end
+    
+    it "should respond to 'deliver_reset_password_instructions!'" do
+      create_new_user
+      @user.should respond_to(:deliver_reset_password_instructions!)
+    end
+    
+    it "should respond to 'reset_password!" do
+      create_new_user
+      @user.should respond_to(:reset_password!)
+    end
+    
+    it "should respond to 'load_from_reset_password_token'" do
+      create_new_user
+      User.should respond_to(:load_from_reset_password_token)
+    end
+    
+    it "should allow configuration option 'reset_password_token_attribute_name'" do
+      sorcery_model_property_set(:reset_password_token_attribute_name, :my_code)
+      User.sorcery_config.reset_password_token_attribute_name.should equal(:my_code)
+    end
+    
+    it "should allow configuration option 'reset_password_mailer'" do
+      sorcery_model_property_set(:reset_password_mailer, TestUser)
+      User.sorcery_config.reset_password_mailer.should equal(TestUser)
+    end
+    
+    it "should allow configuration option 'reset_password_email_method_name'" do
+      sorcery_model_property_set(:reset_password_email_method_name, :my_mailer_method)
+      User.sorcery_config.reset_password_email_method_name.should equal(:my_mailer_method)
+    end
+    
+    it "should allow configuration option 'reset_password_expiration_period'" do
+      sorcery_model_property_set(:reset_password_expiration_period, 16)
+      User.sorcery_config.reset_password_expiration_period.should equal(16)
+    end
+    
+    it "should allow configuration option 'reset_password_email_sent_at_attribute_name'" do
+      sorcery_model_property_set(:reset_password_email_sent_at_attribute_name, :blabla)
+      User.sorcery_config.reset_password_email_sent_at_attribute_name.should equal(:blabla)
+    end
+    
+    it "should allow configuration option 'reset_password_time_between_emails'" do
+      sorcery_model_property_set(:reset_password_time_between_emails, 16)
+      User.sorcery_config.reset_password_time_between_emails.should equal(16)
+    end
+  end
+
+  # ----------------- PLUGIN ACTIVATED -----------------------
+  describe User, "when activated with sorcery" do
+  
+    before(:all) do
+      sorcery_reload!([:reset_password], :reset_password_mailer => ::SorceryMailer)
+    end
+  
+    before(:each) do
+      User.delete_all
+    end
+
+    it "load_from_reset_password_token should return user when token is found" do
+      create_new_user
+      @user.deliver_reset_password_instructions!
+      User.load_from_reset_password_token(@user.reset_password_token).should == @user
+    end
+    
+    it "load_from_reset_password_token should NOT return user when token is NOT found" do
+      create_new_user
+      @user.deliver_reset_password_instructions!
+      User.load_from_reset_password_token("a").should == nil
+    end
+    
+    it "load_from_reset_password_token should return user when token is found and not expired" do
+      create_new_user
+      sorcery_model_property_set(:reset_password_expiration_period, 500)
+      @user.deliver_reset_password_instructions!
+      User.load_from_reset_password_token(@user.reset_password_token).should == @user
+    end
+    
+    it "load_from_reset_password_token should NOT return user when token is found and expired" do
+      create_new_user
+      sorcery_model_property_set(:reset_password_expiration_period, 0.1)
+      @user.deliver_reset_password_instructions!
+      sleep 0.5
+      User.load_from_reset_password_token(@user.reset_password_token).should == nil
+    end
+    
+    it "load_from_reset_password_token should always be valid if expiration period is nil" do
+      create_new_user
+      sorcery_model_property_set(:reset_password_expiration_period, nil)
+      @user.deliver_reset_password_instructions!
+      User.load_from_reset_password_token(@user.reset_password_token).should == @user
+    end
+    
+    it "load_from_reset_password_token should return nil if token is blank" do
+      User.load_from_reset_password_token(nil).should == nil
+      User.load_from_reset_password_token("").should == nil
+    end
+    
+    it "'deliver_reset_password_instructions!' should generate a reset_password_token" do
+      create_new_user
+      @user.reset_password_token.should be_nil
+      @user.deliver_reset_password_instructions!
+      @user.reset_password_token.should_not be_nil
+    end
+
+    it "the reset_password_token should be random" do
+      create_new_user
+      sorcery_model_property_set(:reset_password_time_between_emails, 0)
+      @user.deliver_reset_password_instructions!
+      old_password_code = @user.reset_password_token
+      @user.deliver_reset_password_instructions!
+      @user.reset_password_token.should_not == old_password_code
+    end
+
+    it "should send an email on reset" do
+      create_new_user
+      old_size = ActionMailer::Base.deliveries.size
+      @user.deliver_reset_password_instructions!
+      ActionMailer::Base.deliveries.size.should == old_size + 1
+    end
+
+    it "when reset_password! is called, should delete reset_password_token" do
+      create_new_user
+      @user.deliver_reset_password_instructions!
+      @user.reset_password_token.should_not be_nil
+      @user.reset_password!(:password => "blabulsdf")
+      @user.save!
+      @user.reset_password_token.should be_nil
+    end
+    
+    it "should not send an email if time between emails has not passed since last email" do
+      create_new_user
+      sorcery_model_property_set(:reset_password_time_between_emails, 10000)
+      old_size = ActionMailer::Base.deliveries.size
+      @user.deliver_reset_password_instructions!
+      ActionMailer::Base.deliveries.size.should == old_size + 1
+      @user.deliver_reset_password_instructions!
+      ActionMailer::Base.deliveries.size.should == old_size + 1
+    end
+    
+    it "should send an email if time between emails has passed since last email" do
+      create_new_user
+      sorcery_model_property_set(:reset_password_time_between_emails, 0.5)
+      old_size = ActionMailer::Base.deliveries.size
+      @user.deliver_reset_password_instructions!
+      ActionMailer::Base.deliveries.size.should == old_size + 1
+      sleep 0.5
+      @user.deliver_reset_password_instructions!
+      ActionMailer::Base.deliveries.size.should == old_size + 2
+    end
+    
+    it "if mailer is nil on activation, throw exception!" do
+      expect{sorcery_reload!([:reset_password])}.to raise_error(ArgumentError)
+    end
+    
+  end
+  
+end