sorcery 0.8.2 → 0.9.0

data/spec/rails3/public/javascripts/rails.js

@@ -1,175 +0,0 @@
-(function() {
-  // Technique from Juriy Zaytsev
-  // http://thinkweb2.com/projects/prototype/detecting-event-support-without-browser-sniffing/
-  function isEventSupported(eventName) {
-    var el = document.createElement('div');
-    eventName = 'on' + eventName;
-    var isSupported = (eventName in el);
-    if (!isSupported) {
-      el.setAttribute(eventName, 'return;');
-      isSupported = typeof el[eventName] == 'function';
-    }
-    el = null;
-    return isSupported;
-  }
-
-  function isForm(element) {
-    return Object.isElement(element) && element.nodeName.toUpperCase() == 'FORM'
-  }
-
-  function isInput(element) {
-    if (Object.isElement(element)) {
-      var name = element.nodeName.toUpperCase()
-      return name == 'INPUT' || name == 'SELECT' || name == 'TEXTAREA'
-    }
-    else return false
-  }
-
-  var submitBubbles = isEventSupported('submit'),
-      changeBubbles = isEventSupported('change')
-
-  if (!submitBubbles || !changeBubbles) {
-    // augment the Event.Handler class to observe custom events when needed
-    Event.Handler.prototype.initialize = Event.Handler.prototype.initialize.wrap(
-      function(init, element, eventName, selector, callback) {
-        init(element, eventName, selector, callback)
-        // is the handler being attached to an element that doesn't support this event?
-        if ( (!submitBubbles && this.eventName == 'submit' && !isForm(this.element)) ||
-             (!changeBubbles && this.eventName == 'change' && !isInput(this.element)) ) {
-          // "submit" => "emulated:submit"
-          this.eventName = 'emulated:' + this.eventName
-        }
-      }
-    )
-  }
-
-  if (!submitBubbles) {
-    // discover forms on the page by observing focus events which always bubble
-    document.on('focusin', 'form', function(focusEvent, form) {
-      // special handler for the real "submit" event (one-time operation)
-      if (!form.retrieve('emulated:submit')) {
-        form.on('submit', function(submitEvent) {
-          var emulated = form.fire('emulated:submit', submitEvent, true)
-          // if custom event received preventDefault, cancel the real one too
-          if (emulated.returnValue === false) submitEvent.preventDefault()
-        })
-        form.store('emulated:submit', true)
-      }
-    })
-  }
-
-  if (!changeBubbles) {
-    // discover form inputs on the page
-    document.on('focusin', 'input, select, texarea', function(focusEvent, input) {
-      // special handler for real "change" events
-      if (!input.retrieve('emulated:change')) {
-        input.on('change', function(changeEvent) {
-          input.fire('emulated:change', changeEvent, true)
-        })
-        input.store('emulated:change', true)
-      }
-    })
-  }
-
-  function handleRemote(element) {
-    var method, url, params;
-
-    var event = element.fire("ajax:before");
-    if (event.stopped) return false;
-
-    if (element.tagName.toLowerCase() === 'form') {
-      method = element.readAttribute('method') || 'post';
-      url    = element.readAttribute('action');
-      params = element.serialize();
-    } else {
-      method = element.readAttribute('data-method') || 'get';
-      url    = element.readAttribute('href');
-      params = {};
-    }
-
-    new Ajax.Request(url, {
-      method: method,
-      parameters: params,
-      evalScripts: true,
-
-      onComplete:    function(request) { element.fire("ajax:complete", request); },
-      onSuccess:     function(request) { element.fire("ajax:success",  request); },
-      onFailure:     function(request) { element.fire("ajax:failure",  request); }
-    });
-
-    element.fire("ajax:after");
-  }
-
-  function handleMethod(element) {
-    var method = element.readAttribute('data-method'),
-        url = element.readAttribute('href'),
-        csrf_param = $$('meta[name=csrf-param]')[0],
-        csrf_token = $$('meta[name=csrf-token]')[0];
-
-    var form = new Element('form', { method: "POST", action: url, style: "display: none;" });
-    element.parentNode.insert(form);
-
-    if (method !== 'post') {
-      var field = new Element('input', { type: 'hidden', name: '_method', value: method });
-      form.insert(field);
-    }
-
-    if (csrf_param) {
-      var param = csrf_param.readAttribute('content'),
-          token = csrf_token.readAttribute('content'),
-          field = new Element('input', { type: 'hidden', name: param, value: token });
-      form.insert(field);
-    }
-
-    form.submit();
-  }
-
-
-  document.on("click", "*[data-confirm]", function(event, element) {
-    var message = element.readAttribute('data-confirm');
-    if (!confirm(message)) event.stop();
-  });
-
-  document.on("click", "a[data-remote]", function(event, element) {
-    if (event.stopped) return;
-    handleRemote(element);
-    event.stop();
-  });
-
-  document.on("click", "a[data-method]", function(event, element) {
-    if (event.stopped) return;
-    handleMethod(element);
-    event.stop();
-  });
-
-  document.on("submit", function(event) {
-    var element = event.findElement(),
-        message = element.readAttribute('data-confirm');
-    if (message && !confirm(message)) {
-      event.stop();
-      return false;
-    }
-
-    var inputs = element.select("input[type=submit][data-disable-with]");
-    inputs.each(function(input) {
-      input.disabled = true;
-      input.writeAttribute('data-original-value', input.value);
-      input.value = input.readAttribute('data-disable-with');
-    });
-
-    var element = event.findElement("form[data-remote]");
-    if (element) {
-      handleRemote(element);
-      event.stop();
-    }
-  });
-
-  document.on("ajax:after", "form", function(event, element) {
-    var inputs = element.select("input[type=submit][disabled=true][data-disable-with]");
-    inputs.each(function(input) {
-      input.value = input.readAttribute('data-original-value');
-      input.removeAttribute('data-original-value');
-      input.disabled = false;
-    });
-  });
-})();

data/spec/rails3/public/robots.txt

@@ -1,5 +0,0 @@
-# See http://www.robotstxt.org/wc/norobots.html for documentation on how to use the robots.txt file
-#
-# To ban all spiders from the entire site uncomment the next two lines:
-# User-Agent: *
-# Disallow: /

data/spec/rails3/script/rails

@@ -1,6 +0,0 @@
-#!/usr/bin/env ruby
-# This command will automatically be run when you run "rails" with Rails 3 gems installed from the root of your application.
-
-APP_PATH = File.expand_path('../../config/application',  __FILE__)
-require File.expand_path('../../config/boot',  __FILE__)
-require 'rails/commands'

data/spec/rails3/spec/controller_activity_logging_spec.rb

@@ -1,130 +0,0 @@
-require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-
-describe ApplicationController do
-  before(:all) do
-    ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/activity_logging")
-  end
-  
-  after(:all) do
-    ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/activity_logging")
-    sorcery_controller_property_set(:register_login_time, true)
-    sorcery_controller_property_set(:register_logout_time, true)
-    sorcery_controller_property_set(:register_last_activity_time, true)
-    sorcery_controller_property_set(:last_login_from_ip_address, true)
-  end
-  
-  # ----------------- ACTIVITY LOGGING -----------------------
-  describe ApplicationController, "with activity logging features" do
-    before(:all) do
-      sorcery_reload!([:activity_logging])
-    end
-
-    before(:each) do
-      create_new_user
-    end
-
-    after(:each) do
-      User.delete_all
-    end
-    
-    specify { subject.should respond_to(:current_users) }
-
-    it "'current_users' should be empty when no users are logged in" do
-      subject.current_users.size.should == 0
-    end
-
-    it "should log login time on login" do
-      now = Time.now.in_time_zone
-      login_user
-      @user.last_login_at.should_not be_nil
-      @user.last_login_at.to_s(:db).should >= now.to_s(:db)
-      @user.last_login_at.to_s(:db).should <= (now+2).to_s(:db)
-    end
-
-    it "should log logout time on logout" do
-      login_user
-      now = Time.now.in_time_zone
-      logout_user
-      User.first.last_logout_at.should_not be_nil
-      User.first.last_logout_at.to_s(:db).should >= now.to_s(:db)
-      User.first.last_logout_at.to_s(:db).should <= (now+2).to_s(:db)
-    end
-
-    it "should log last activity time when logged in" do
-      login_user
-      now = Time.now.in_time_zone
-      get :some_action
-      User.first.last_activity_at.to_s(:db).should >= now.to_s(:db)
-      User.first.last_activity_at.to_s(:db).should <= (now+2).to_s(:db)
-    end
-
-    it "should log last IP address when logged in" do
-      login_user
-      get :some_action
-      User.first.last_login_from_ip_address.should == "0.0.0.0"
-    end
-
-    it "should update nothing but activity fields" do
-      original_user_name = User.first.username
-      login_user
-      get :some_action_making_a_non_persisted_change_to_the_user
-      User.first.username.should == original_user_name
-    end
-    
-    it "'current_users' should hold the user object when 1 user is logged in" do
-      login_user
-      get :some_action
-      subject.current_users.size.should == 1
-      subject.current_users[0].should == @user
-    end
-
-    it "'current_users' should show all current_users, whether they have logged out before or not." do
-      user1 = create_new_user({:username => 'gizmo1', :email => "bla1@bla.com", :password => 'secret1'})
-      login_user(user1)
-      get :some_action
-      clear_user_without_logout
-      user2 = create_new_user({:username => 'gizmo2', :email => "bla2@bla.com", :password => 'secret2'})
-      login_user(user2)
-      get :some_action
-      clear_user_without_logout
-      user3 = create_new_user({:username => 'gizmo3', :email => "bla3@bla.com", :password => 'secret3'})
-      login_user(user3)
-      get :some_action
-      subject.current_users.size.should == 3
-      subject.current_users[0].should == user1
-      subject.current_users[1].should == user2
-      subject.current_users[2].should == user3
-    end
-    
-    it "should not register login time if configured so" do
-      sorcery_controller_property_set(:register_login_time, false)
-      now = Time.now.in_time_zone
-      login_user
-      @user.last_login_at.should be_nil
-    end
-    
-    it "should not register logout time if configured so" do
-      sorcery_controller_property_set(:register_logout_time, false)
-      now = Time.now.in_time_zone
-      login_user
-      logout_user
-      @user.last_logout_at.should be_nil
-    end
-    
-    it "should not register last activity time if configured so" do
-      sorcery_controller_property_set(:register_last_activity_time, false)
-      now = Time.now.in_time_zone
-      login_user
-      get :some_action
-      @user.last_activity_at.should be_nil
-    end
-
-    it "should not register last IP address if configured so" do
-      sorcery_controller_property_set(:register_last_ip_address, false)
-      ip_address = "127.0.0.1"
-      login_user
-      get :some_action
-      @user.last_activity_at.should be_nil
-    end
-  end
-end

data/spec/rails3/spec/controller_brute_force_protection_spec.rb

@@ -1,96 +0,0 @@
-require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-
-describe ApplicationController do
-  before(:all) do
-    ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/brute_force_protection")
-  end
-
-  after(:all) do
-    ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/brute_force_protection")
-  end
-
-  # ----------------- SESSION TIMEOUT -----------------------
-  describe ApplicationController, "with brute force protection features" do
-    before(:all) do
-      sorcery_reload!([:brute_force_protection])
-      create_new_user
-    end
-
-    after(:each) do
-      Sorcery::Controller::Config.reset!
-      sorcery_controller_property_set(:user_class, User)
-      Timecop.return
-    end
-
-    it "should count login retries" do
-      3.times {get :test_login, :username => 'gizmo', :password => 'blabla'}
-      User.find_by_username('gizmo').failed_logins_count.should == 3
-    end
-
-    it "should generate unlock token after user locked" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      sorcery_model_property_set(:unlock_token_mailer, SorceryMailer)
-      3.times {get :test_login, :username => "gizmo", :password => "blabla"}
-      User.find_by_username('gizmo').unlock_token.should_not be_nil
-    end
-
-    it "should generate unlock token before mail is sent" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      sorcery_model_property_set(:unlock_token_mailer, SorceryMailer)
-      3.times {get :test_login, :username => "gizmo", :password => "blabla"}
-      ActionMailer::Base.deliveries.last.body.to_s.match(User.find_by_username('gizmo').unlock_token).should_not be_nil
-    end
-
-    it "should unlock after entering unlock token" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      sorcery_model_property_set(:unlock_token_mailer, SorceryMailer)
-      3.times {get :test_login, :username => "gizmo", :password => "blabla"}
-      User.find_by_username('gizmo').unlock_token.should_not be_nil
-      token = User.find_by_username('gizmo').unlock_token
-      user = User.load_from_unlock_token(token)
-      user.should_not be_nil
-      user.unlock!
-      User.load_from_unlock_token(token).should be_nil
-    end
-
-
-    it "should reset the counter on a good login" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 5)
-      3.times {get :test_login, :username => 'gizmo', :password => 'blabla'}
-      get :test_login, :username => 'gizmo', :password => 'secret'
-      User.find_by_username('gizmo').failed_logins_count.should == 0
-    end
-
-    it "should lock user when number of retries reached the limit" do
-      User.find_by_username('gizmo').lock_expires_at.should be_nil
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 1)
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.should_not be_nil
-    end
-
-    it "should unlock after lock time period passes" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0.2)
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.should_not be_nil
-      Timecop.travel(Time.now.in_time_zone + 0.3)
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.should be_nil
-    end
-
-    it "should not unlock if time period is 0 (permanent lock)" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      unlock_date = User.find_by_username('gizmo').lock_expires_at
-      Timecop.travel(Time.now.in_time_zone + 1)
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.to_s.should == unlock_date.to_s
-    end
-  end
-end

data/spec/rails3/spec/controller_http_basic_auth_spec.rb

@@ -1,50 +0,0 @@
-require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-
-describe ApplicationController do
-  
-  # ----------------- HTTP BASIC AUTH -----------------------
-  describe ApplicationController, "with http basic auth features" do
-    before(:all) do
-      sorcery_reload!([:http_basic_auth])
-      create_new_user
-    end
-    
-    after(:each) do
-      logout_user
-    end
-    
-    it "requests basic authentication when before_filter is used" do
-      get :test_http_basic_auth
-      response.code.should == "401"
-    end
-    
-    it "authenticates from http basic if credentials are sent" do
-      @request.env["HTTP_AUTHORIZATION"] = "Basic " + Base64::encode64("#{@user.username}:secret")
-      get :test_http_basic_auth, nil, :http_authentication_used => true
-      response.should be_a_success
-    end
-    
-    it "fails authentication if credentials are wrong" do
-      @request.env["HTTP_AUTHORIZATION"] = "Basic " + Base64::encode64("#{@user.username}:wrong!")
-      get :test_http_basic_auth, nil, :http_authentication_used => true
-      response.code.should redirect_to root_url
-    end
-    
-    it "should allow configuration option 'controller_to_realm_map'" do
-      sorcery_controller_property_set(:controller_to_realm_map, {"1" => "2"})
-      Sorcery::Controller::Config.controller_to_realm_map.should == {"1" => "2"}
-    end
-    
-    it "should display the correct realm name configured for the controller" do
-      sorcery_controller_property_set(:controller_to_realm_map, {"application" => "Salad"})
-      get :test_http_basic_auth
-      response.headers["WWW-Authenticate"].should == "Basic realm=\"Salad\""
-    end
-    
-    it "should sign in the user's session on successful login" do
-      @request.env["HTTP_AUTHORIZATION"] = "Basic " + Base64::encode64("#{@user.username}:secret")
-      get :test_http_basic_auth, nil, :http_authentication_used => true
-      session[:user_id].should == User.find_by_username(@user.username).id
-    end
-  end
-end