sorcery 0.6.1 → 0.7.1

data/spec/sinatra_modular/db/migrate/brute_force_protection/20101224223626_add_brute_force_protection_to_users.rb

@@ -1,11 +0,0 @@
-class AddBruteForceProtectionToUsers < ActiveRecord::Migration
-  def self.up
-    add_column :users, :failed_logins_count, :integer, :default => 0
-    add_column :users, :lock_expires_at, :datetime, :default => nil
-  end
-
-  def self.down
-    remove_column :users, :lock_expires_at
-    remove_column :users, :failed_logins_count
-  end
-end

data/spec/sinatra_modular/db/migrate/core/20101224223620_create_users.rb

@@ -1,16 +0,0 @@
-class CreateUsers < ActiveRecord::Migration
-  def self.up
-    create_table :users do |t|
-      t.string :username,         :null => false
-      t.string :email,            :default => nil
-      t.string :crypted_password, :default => nil
-      t.string :salt,             :default => nil
-
-      t.timestamps
-    end
-  end
-
-  def self.down
-    drop_table :users
-  end
-end

data/spec/sinatra_modular/db/migrate/external/20101224223628_create_authentications.rb

@@ -1,14 +0,0 @@
-class CreateAuthentications < ActiveRecord::Migration
-  def self.up
-    create_table :authentications do |t|
-      t.integer :user_id, :null => false
-      t.string :provider, :uid, :null => false
-
-      t.timestamps
-    end
-  end
-
-  def self.down
-    drop_table :authentications
-  end
-end

data/spec/sinatra_modular/db/migrate/remember_me/20101224223623_add_remember_me_token_to_users.rb

@@ -1,15 +0,0 @@
-class AddRememberMeTokenToUsers < ActiveRecord::Migration
-  def self.up
-    add_column :users, :remember_me_token, :string, :default => nil
-    add_column :users, :remember_me_token_expires_at, :datetime, :default => nil
-    
-    add_index :users, :remember_me_token
-  end
-
-  def self.down
-    remove_index :users, :remember_me_token
-    
-    remove_column :users, :remember_me_token_expires_at
-    remove_column :users, :remember_me_token
-  end
-end

data/spec/sinatra_modular/db/migrate/reset_password/20101224223622_add_reset_password_to_users.rb

@@ -1,13 +0,0 @@
-class AddResetPasswordToUsers < ActiveRecord::Migration
-  def self.up
-    add_column :users, :reset_password_token, :string, :default => nil
-    add_column :users, :reset_password_token_expires_at, :datetime, :default => nil
-    add_column :users, :reset_password_email_sent_at, :datetime, :default => nil
-  end
-
-  def self.down
-    remove_column :users, :reset_password_email_sent_at
-    remove_column :users, :reset_password_token_expires_at
-    remove_column :users, :reset_password_token
-  end
-end

data/spec/sinatra_modular/filters.rb

@@ -1,27 +0,0 @@
-# --- before filters
-module Filters
-
-  def self.included(klass)
-    klass.class_eval do
-      ['/test_logout', '/some_action', '/test_should_be_logged_in'].each do |pattern|
-        before pattern do
-          require_login
-        end
-      end
-
-      before '/test_http_basic_auth' do
-        require_login_from_http_basic
-      end
-
-      # ----- test filters
-
-      before do
-        self.class.sorcery_vars = {}
-      end
-
-      after do
-        save_instance_vars
-      end
-    end
-  end
-end

data/spec/sinatra_modular/modular.rb

@@ -1,157 +0,0 @@
-require 'sinatra/base'
-#enable :sessions
-
-require 'sqlite3'
-require 'active_record'
-
-# establish connection
-ActiveRecord::Base.establish_connection(
-    :adapter => "sqlite3",
-    :database => ":memory:",
-    :verbosity => "quiet"
-)
-
-require 'action_mailer'
-ActionMailer::Base.delivery_method = :test
-require File.join(File.dirname(__FILE__), 'sorcery_mailer')
-
-# models
-require File.join(File.dirname(__FILE__), 'user')
-require 'sorcery'
-
-APP_ROOT = File.dirname(__FILE__)
-
-class Modular < Sinatra::Base
-  set :sessions, true
-
-#  ['/test_logout', '/some_action', '/test_should_be_logged_in'].each do |patt|
-#    before patt do
-#      require_login
-#    end
-#  end
-#
-#  before '/test_http_basic_auth' do
-#    require_login_from_http_basic
-#  end
-#
-## ----- test filters
-#
-#  before do
-#    self.class.sorcery_vars = {}
-#  end
-#
-#  after do
-#    save_instance_vars
-#  end
-
-  get '/' do
-
-  end
-
-  get '/test_login' do
-    @user = login(params[:username], params[:password])
-    @current_user = current_user
-    @logged_in = logged_in?
-    erb :test_login
-  end
-
-  get '/test_logout' do
-    session[:user_id] = User.first.id
-    logout
-    @current_user = current_user
-    @logged_in = logged_in?
-  end
-
-  get '/test_current_user' do
-    session[:user_id] = params[:id]
-    current_user
-  end
-
-  get '/some_action' do
-    erb ''
-  end
-
-  post '/test_return_to' do
-    session[:return_to_url] = params[:return_to_url] if params[:return_to_url]
-    @user = login(params[:username], params[:password])
-    redirect_back_or_to(:some_action)
-  end
-
-  get '/test_should_be_logged_in' do
-    erb ''
-  end
-
-  def test_not_authenticated_action
-    halt "test_not_authenticated_action"
-  end
-
-  def not_authenticated2
-    @session = session
-    save_instance_vars
-    redirect '/'
-  end
-
-# remember me
-
-  post '/test_login_with_remember' do
-    @user = login(params[:username], params[:password])
-    remember_me!
-    erb ''
-  end
-
-  post '/test_login_with_remember_in_login' do
-    @user = login(params[:username], params[:password], params[:remember])
-    erb ''
-  end
-
-  get '/test_login_from_cookie' do
-    @user = current_user
-    erb ''
-  end
-
-# http_basic
-
-  get '/test_http_basic_auth' do
-    erb "HTTP Basic Auth"
-  end
-
-# oauth
-
-  get '/login_at_test' do
-    login_at(:twitter)
-  end
-
-  get '/test_login_from' do
-    if @user = login_from(:twitter)
-      erb "Success!"
-    else
-      erb "Failed!"
-    end
-  end
-
-# oauth2
-
-  get '/login_at_test2' do
-    login_at(:facebook)
-  end
-
-  get '/test_login_from2' do
-    if @user = login_from(:facebook)
-      erb "Success!"
-    else
-      erb "Failed!"
-    end
-  end
-
-  get '/test_create_from_provider' do
-    provider = params[:provider]
-    login_from(provider)
-    if @user = create_from(provider)
-      erb "Success!"
-    else
-      erb "Failed!"
-    end
-  end
-
-  #run! if app_file == $2
-end

data/spec/sinatra_modular/myapp.rb

@@ -1,133 +0,0 @@
-require 'sinatra'
-enable :sessions
-
-require 'sqlite3'
-require 'active_record'
-
-# establish connection
-ActiveRecord::Base.establish_connection(
-  :adapter  => "sqlite3",
-  :database => ":memory:",
-  :verbosity => "quiet"
-)
-
-require 'action_mailer'
-ActionMailer::Base.delivery_method = :test
-require File.join(File.dirname(__FILE__),'sorcery_mailer')
-
-# models
-require File.join(File.dirname(__FILE__),'user')
-require 'sorcery'
-
-APP_ROOT = File.dirname(__FILE__)
-
-require File.join(File.dirname(__FILE__),'filters')
-
-get '/' do
-
-end
-
-get '/test_login' do
-  @user = login(params[:username],params[:password])
-  @current_user = current_user
-  @logged_in = logged_in?
-  erb :test_login
-end
-
-get '/test_logout' do
-  session[:user_id] = User.first.id
-  logout
-  @current_user = current_user
-  @logged_in = logged_in?
-end
-
-get '/test_current_user' do
-  session[:user_id] = params[:id]
-  current_user
-end
-
-get '/some_action' do
-  erb ''
-end
-
-post '/test_return_to' do
-  session[:return_to_url] = params[:return_to_url] if params[:return_to_url]
-  @user = login(params[:username], params[:password])
-  redirect_back_or_to(:some_action)
-end
-
-get '/test_should_be_logged_in' do
-  erb ''
-end
-
-def test_not_authenticated_action
-  halt "test_not_authenticated_action"
-end
-
-def not_authenticated2
-  @session = session
-  save_instance_vars
-  redirect '/'
-end
-
-# remember me
-
-post '/test_login_with_remember' do
-  @user = login(params[:username], params[:password])
-  remember_me!
-  erb ''
-end
-
-post '/test_login_with_remember_in_login' do
-  @user = login(params[:username], params[:password], params[:remember])
-  erb ''
-end
-
-get '/test_login_from_cookie' do
-  @user = current_user
-  erb ''
-end
-
-# http_basic
-
-get '/test_http_basic_auth' do
-  erb "HTTP Basic Auth"
-end
-
-# oauth
-
-get '/login_at_test' do
-  login_at(:twitter)
-end
-
-get '/test_login_from' do
-  if @user = login_from(:twitter)
-    erb "Success!"
-  else
-    erb "Failed!"
-  end
-end
-
-# oauth2
-
-get '/login_at_test2' do
-  login_at(:facebook)
-end
-
-get '/test_login_from2' do
-  if @user = login_from(:facebook)
-    erb "Success!"
-  else
-    erb "Failed!"
-  end
-end
-
-get '/test_create_from_provider' do
-  provider = params[:provider]
-  login_from(provider)
-  if @user = create_from(provider)
-    erb "Success!"
-  else
-    erb "Failed!"
-  end
-end

data/spec/sinatra_modular/sorcery_mailer.rb

@@ -1,25 +0,0 @@
-class SorceryMailer < ActionMailer::Base
-  
-  default :from => "notifications@example.com"
-  
-  def activation_needed_email(user)
-    @user = user
-    @url  = "http://example.com/login"
-    mail(:to => user.email,
-         :subject => "Welcome to My Awesome Site")
-  end
-  
-  def activation_success_email(user)
-    @user = user
-    @url  = "http://example.com/login"
-    mail(:to => user.email,
-         :subject => "Your account is now activated")
-  end
-  
-  def reset_password_email(user)
-    @user = user
-    @url  = "http://example.com/login"
-    mail(:to => user.email,
-         :subject => "Your password has been reset")
-  end
-end

data/spec/sinatra_modular/spec_modular/controller_activity_logging_spec.rb

@@ -1,85 +0,0 @@
-require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-
-describe Modular do
-  before(:all) do
-    ActiveRecord::Migrator.migrate("#{APP_ROOT}/db/migrate/activity_logging")
-  end
-  
-  after(:all) do
-    ActiveRecord::Migrator.rollback("#{APP_ROOT}/db/migrate/activity_logging")
-  end
-  
-  # ----------------- ACTIVITY LOGGING -----------------------
-  describe Modular, "with activity logging features" do
-    before(:all) do
-      sorcery_reload!([:activity_logging])
-      clear_cookies
-    end
-
-    before(:each) do
-      create_new_user
-    end
-
-    after(:each) do
-      User.delete_all
-    end
-
-    it "should respond to 'current_users'" do
-      get_sinatra_app(subject).should respond_to(:current_users)
-    end
-
-    it "'current_users' should be empty when no users are logged in" do
-      get_sinatra_app(subject).current_users.size.should == 0
-    end
-
-    it "should log login time on login" do
-      now = Time.now.utc
-      get "/test_login", :username => 'gizmo', :password => 'secret'
-      User.first.last_login_at.should_not be_nil
-      User.first.last_login_at.to_s(:db).should >= now.to_s(:db)
-      User.first.last_login_at.to_s(:db).should <= (now+2).to_s(:db)
-    end
-
-    it "should log logout time on logout" do
-      get "/test_login", :username => 'gizmo', :password => 'secret'
-      now = Time.now.utc
-      get "/test_logout"
-      User.first.last_logout_at.should_not be_nil
-      User.first.last_logout_at.to_s(:db).should >= now.to_s(:db)
-      User.first.last_logout_at.to_s(:db).should <= (now+2).to_s(:db)
-    end
-
-    it "should log last activity time when logged in" do
-      get "/test_login", :username => 'gizmo', :password => 'secret'
-      now = Time.now.utc
-      get "/some_action"
-      User.first.last_activity_at.to_s.should >= now.to_s(:db)
-      User.first.last_activity_at.to_s.should <= (now+2).to_s(:db)
-    end
-
-    it "'current_users' should hold the user object when 1 user is logged in" do
-      get "/test_login", :username => 'gizmo', :password => 'secret'
-      get "/some_action"
-      get_sinatra_app(subject).current_users.size.should == 1
-      get_sinatra_app(subject).current_users[0].should == @user
-    end
-
-    it "'current_users' should show all current_users, whether they have logged out before or not." do
-      user1 = create_new_user({:username => 'gizmo1', :email => "bla1@bla.com", :password => 'secret1'})
-      get "/test_login", :username => 'gizmo1', :password => 'secret1'
-      get "/some_action"
-      clear_user_without_logout
-      user2 = create_new_user({:username => 'gizmo2', :email => "bla2@bla.com", :password => 'secret2'})
-      get "/test_login", :username => 'gizmo2', :password => 'secret2'
-      get "/some_action"
-      clear_user_without_logout
-      user3 = create_new_user({:username => 'gizmo3', :email => "bla3@bla.com", :password => 'secret3'})
-      get "/test_login", :username => 'gizmo3', :password => 'secret3'
-      get "/some_action"
-      get_sinatra_app(subject).current_users.size.should == 3
-      get_sinatra_app(subject).current_users[0].should == user1
-      get_sinatra_app(subject).current_users[1].should == user2
-      get_sinatra_app(subject).current_users[2].should == user3
-    end
-  end
-end

data/spec/sinatra_modular/spec_modular/controller_brute_force_protection_spec.rb

@@ -1,70 +0,0 @@
-require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-
-describe Modular do
-  before(:all) do
-    ActiveRecord::Migrator.migrate("#{APP_ROOT}/db/migrate/brute_force_protection")
-  end
-  
-  after(:all) do
-    ActiveRecord::Migrator.rollback("#{APP_ROOT}/db/migrate/brute_force_protection")
-  end
-  
-  # ----------------- SESSION TIMEOUT -----------------------
-  describe Modular, "with brute force protection features" do
-    before(:all) do
-      sorcery_reload!([:brute_force_protection])
-    end
-    
-    before(:each) do
-      create_new_user
-    end
-    
-    after(:each) do
-      Sorcery::Controller::Config.reset!
-      sorcery_controller_property_set(:user_class, User)
-      User.delete_all
-      Timecop.return
-    end
-    
-    it "should count login retries" do
-      3.times {get "/test_login", :username => 'gizmo', :password => 'blabla'}
-      User.find_by_username('gizmo').failed_logins_count.should == 3
-    end
-    
-    it "should reset the counter on a good login" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 5)
-      3.times {get "/test_login", :username => 'gizmo', :password => 'blabla'}
-      get "/test_login", :username => 'gizmo', :password => 'secret'
-      User.find_by_username('gizmo').failed_logins_count.should == 0
-    end
-    
-    it "should lock user when number of retries reached the limit" do
-      User.find_by_username('gizmo').lock_expires_at.should be_nil
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 1)
-      get "/test_login", :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.should_not be_nil
-    end
-
-    it "should unlock after lock time period passes" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0.2)
-      get "/test_login", :username => 'gizmo', :password => 'blabla'
-      get "/test_login", :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.should_not be_nil
-      Timecop.travel(Time.now+0.3)
-      get "/test_login", :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.should be_nil
-    end
-
-    it "should not unlock if time period is 0 (permanent lock)" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      get "/test_login", :username => 'gizmo', :password => 'blabla'
-      get "/test_login", :username => 'gizmo', :password => 'blabla'
-      unlock_date = User.find_by_username('gizmo').lock_expires_at
-      Timecop.travel(Time.now+1)
-      get "/test_login", :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.to_s.should == unlock_date.to_s
-    end
-  end
-end

data/spec/sinatra_modular/spec_modular/controller_http_basic_auth_spec.rb

@@ -1,53 +0,0 @@
-require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-require 'base64'
-
-describe Modular do
-  
-  # ----------------- HTTP BASIC AUTH -----------------------
-  describe Modular, "with http basic auth features" do
-    before(:all) do
-      sorcery_reload!([:http_basic_auth])
-      create_new_user
-    end
-    
-    after(:each) do
-      get "/test_logout"
-    end
-    
-    it "requests basic authentication when before_filter is used" do
-      session[:http_authentication_used] = nil
-      get "/test_http_basic_auth"
-      last_response.status.should == 401
-      session[:http_authentication_used].should == true
-    end
-    
-    it "authenticates from http basic if credentials are sent" do
-      session[:http_authentication_used] = true
-      get "/test_http_basic_auth", {}, {"HTTP_AUTHORIZATION" => "Basic " + Base64::encode64("#{@user.username}:secret")}
-      last_response.should be_ok
-    end
-    
-    it "fails authentication if credentials are wrong" do
-      session[:http_authentication_used] = true
-      get "/test_http_basic_auth", {}, {"HTTP_AUTHORIZATION" => "Basic " + Base64::encode64("#{@user.username}:wrong!")}
-      last_response.should redirect_to 'http://example.org/'
-    end
-    
-    it "should allow configuration option 'controller_to_realm_map'" do
-      sorcery_controller_property_set(:controller_to_realm_map, {"1" => "2"})
-      Sorcery::Controller::Config.controller_to_realm_map.should == {"1" => "2"}
-    end
-    
-    it "should display the correct realm name configured for the controller" do
-      sorcery_controller_property_set(:controller_to_realm_map, {"application" => "Salad"})
-      get "/test_http_basic_auth"
-      last_response.headers["WWW-Authenticate"].should == "Basic realm=\"Salad\""
-    end
-    
-    it "should sign in the user's session on successful login" do
-      session[:http_authentication_used] = true
-      get "/test_http_basic_auth", {}, {"HTTP_AUTHORIZATION" => "Basic " + Base64::encode64("#{@user.username}:secret")}
-      session[:user_id].should == User.find_by_username(@user.username).id
-    end
-  end
-end