sorcery 0.8.5 → 0.9.0

data/spec/active_record/controller_remember_me_spec.rb

@@ -1,96 +0,0 @@
-require 'spec_helper'
-
-describe SorceryController do
-
-  # ----------------- REMEMBER ME -----------------------
-  describe SorceryController, "with remember me features" do
-
-    before(:all) do
-      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/remember_me")
-      User.reset_column_information
-      sorcery_reload!([:remember_me])
-    end
-
-    before(:each) do
-      create_new_user
-    end
-
-    after(:all) do
-      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/remember_me")
-    end
-
-    after(:each) do
-      session = nil
-      cookies = nil
-      User.delete_all
-    end
-
-    it "should set cookie on remember_me!" do
-      post :test_login_with_remember, :email => 'bla@bla.com', :password => 'secret'
-      # @request.cookies.merge!(cookies)
-      # cookies = ActionDispatch::Cookies::CookieJar.build(@request)
-      cookies.signed["remember_me_token"].should == assigns[:current_user].remember_me_token
-    end
-
-    it "should clear cookie on forget_me!" do
-      cookies["remember_me_token"] == {:value => 'asd54234dsfsd43534', :expires => 3600}
-      get :test_logout
-      cookies["remember_me_token"].should be_nil
-    end
-
-    it "login(email,password,remember_me) should login and remember" do
-      post :test_login_with_remember_in_login, :email => 'bla@bla.com', :password => 'secret', :remember => "1"
-      # cookies = ActionDispatch::Cookies::CookieJar.build(@request)
-      cookies.signed["remember_me_token"].should_not be_nil
-      cookies.signed["remember_me_token"].should == assigns[:user].remember_me_token
-    end
-
-    it "logout should also forget_me!" do
-      session[:user_id] = @user.id
-      get :test_logout_with_remember
-      cookies["remember_me_token"].should be_nil
-    end
-
-    it "should login_from_cookie" do
-      session[:user_id] = @user.id
-      subject.remember_me!
-      subject.instance_eval do
-        @current_user = nil
-      end
-      session[:user_id] = nil
-      get :test_login_from_cookie
-      assigns[:current_user].should == @user
-    end
-
-    it "should not remember_me! when not asked to, even if third parameter is used" do
-      post :test_login_with_remember_in_login, :email => 'bla@bla.com', :password => 'secret', :remember => "0"
-      cookies["remember_me_token"].should be_nil
-    end
-
-    it "should not remember_me! when not asked to" do
-      post :test_login, :email => 'bla@bla.com', :password => 'secret'
-      cookies["remember_me_token"].should be_nil
-    end
-
-    # --- login_user(user) ---
-    specify { should respond_to(:auto_login) }
-
-    it "auto_login(user) should login a user instance without remembering" do
-      create_new_user
-      session[:user_id] = nil
-      subject.auto_login(@user)
-      get :test_login_from_cookie
-      assigns[:current_user].should == @user
-      cookies["remember_me_token"].should be_nil
-    end
-
-    it "auto_login(user, true) should login a user instance with remembering" do
-      create_new_user
-      session[:user_id] = nil
-      subject.auto_login(@user, true)
-      get :test_login_from_cookie
-      assigns[:current_user].should == @user
-      cookies["remember_me_token"].should_not be_nil
-    end
-  end
-end

data/spec/active_record/controller_session_timeout_spec.rb

@@ -1,55 +0,0 @@
-require 'spec_helper'
-
-describe SorceryController do
-
-  # ----------------- SESSION TIMEOUT -----------------------
-  describe SorceryController, "with session timeout features" do
-    before(:all) do
-      sorcery_reload!([:session_timeout])
-      sorcery_controller_property_set(:session_timeout,0.5)
-      create_new_user
-    end
-
-    after(:each) do
-      Timecop.return
-    end
-
-    it "should not reset session before session timeout" do
-      login_user
-      get :test_should_be_logged_in
-      session[:user_id].should_not be_nil
-      response.should be_a_success
-    end
-
-    it "should reset session after session timeout" do
-      login_user
-      Timecop.travel(Time.now.in_time_zone+0.6)
-      get :test_should_be_logged_in
-      session[:user_id].should be_nil
-      response.should be_a_redirect
-    end
-
-    context "with 'session_timeout_from_last_action'" do
-      it "should not logout if there was activity" do
-        sorcery_controller_property_set(:session_timeout_from_last_action, true)
-        get :test_login, :email => 'bla@bla.com', :password => 'secret'
-        Timecop.travel(Time.now.in_time_zone+0.3)
-        get :test_should_be_logged_in
-        session[:user_id].should_not be_nil
-        Timecop.travel(Time.now.in_time_zone+0.3)
-        get :test_should_be_logged_in
-        session[:user_id].should_not be_nil
-        response.should be_a_success
-      end
-
-      it "with 'session_timeout_from_last_action' should logout if there was no activity" do
-        sorcery_controller_property_set(:session_timeout_from_last_action, true)
-        get :test_login, :email => 'bla@bla.com', :password => 'secret'
-        Timecop.travel(Time.now.in_time_zone+0.6)
-        get :test_should_be_logged_in
-        session[:user_id].should be_nil
-        response.should be_a_redirect
-      end
-    end
-  end
-end

data/spec/active_record/controller_spec.rb

@@ -1,182 +0,0 @@
-require 'spec_helper'
-
-describe SorceryController do
-
-  # ----------------- PLUGIN CONFIGURATION -----------------------
-  describe SorceryController, "plugin configuration" do
-    before(:all) do
-      sorcery_reload!
-    end
-
-    after(:each) do
-      Sorcery::Controller::Config.reset!
-      sorcery_reload!
-    end
-
-    it "should enable configuration option 'user_class'" do
-      sorcery_controller_property_set(:user_class, "TestUser")
-      Sorcery::Controller::Config.user_class.should == "TestUser"
-    end
-
-    it "should enable configuration option 'not_authenticated_action'" do
-      sorcery_controller_property_set(:not_authenticated_action, :my_action)
-      Sorcery::Controller::Config.not_authenticated_action.should equal(:my_action)
-    end
-
-  end
-
-  # ----------------- PLUGIN ACTIVATED -----------------------
-  describe SorceryController, "when activated with sorcery" do
-    before(:all) do
-      sorcery_reload!
-      User.delete_all
-    end
-
-    before(:each) do
-      create_new_user
-    end
-
-    after(:each) do
-      Sorcery::Controller::Config.reset!
-      sorcery_reload!
-      User.delete_all
-      sorcery_controller_property_set(:user_class, User)
-      sorcery_model_property_set(:username_attribute_names, [:email])
-    end
-
-    specify { should respond_to(:login) }
-
-    specify { should respond_to(:logout) }
-
-    specify { should respond_to(:logged_in?) }
-
-    specify { should respond_to(:current_user) }
-
-    it "login(username,password) should return the user when success and set the session with user.id" do
-      get :test_login, :email => 'bla@bla.com', :password => 'secret'
-      assigns[:user].should == @user
-      session[:user_id].should == @user.id
-    end
-
-    it "login(email,password) should return the user when success and set the session with user.id" do
-      get :test_login, :email => 'bla@bla.com', :password => 'secret'
-      assigns[:user].should == @user
-      session[:user_id].should == @user.id
-    end
-
-    it "login(username,password) should return nil and not set the session when failure" do
-      get :test_login, :email => 'bla@bla.com', :password => 'opensesame!'
-      assigns[:user].should be_nil
-      session[:user_id].should be_nil
-    end
-
-    it "login(email,password) should return the user when success and set the session with the _csrf_token" do
-      get :test_login, :email => 'bla@bla.com', :password => 'secret'
-      session[:_csrf_token].should_not be_nil
-    end
-
-    it "login(username,password) should return nil and not set the session when upper case username" do
-      get :test_login, :email => 'BLA@BLA.COM', :password => 'secret'
-      assigns[:user].should be_nil
-      session[:user_id].should be_nil
-    end
-
-    it "login(username,password) should return the user and set the session with user.id when upper case username and config is downcase before authenticating" do
-      sorcery_model_property_set(:downcase_username_before_authenticating, true)
-      get :test_login, :email => 'BLA@BLA.COM', :password => 'secret'
-      assigns[:user].should == @user
-      session[:user_id].should == @user.id
-    end
-
-    it "login(username,password) should return nil and not set the session when user was created with upper case username, config is default, and log in username is lower case" do
-      create_new_user({:username => "", :email => "BLA1@BLA.COM", :password => 'secret1'})
-      get :test_login, :email => 'bla1@bla.com', :password => 'secret1'
-      assigns[:user].should be_nil
-      session[:user_id].should be_nil
-    end
-
-    it "login(username,password) should return the user and set the session with user.id when user was created with upper case username and config is downcase before authenticating" do
-      sorcery_model_property_set(:downcase_username_before_authenticating, true)
-      create_new_user({:username => "", :email => "BLA1@BLA.COM", :password => 'secret1'})
-      get :test_login, :email => 'bla1@bla.com', :password => 'secret1'
-      assigns[:user].should == @user
-      session[:user_id].should == @user.id
-    end
-
-    it "logout should clear the session" do
-      cookies[:remember_me_token] = nil
-      session[:user_id] = @user.id
-      get :test_logout
-      session[:user_id].should be_nil
-    end
-
-    it "logged_in? should return true if logged in" do
-      session[:user_id] = @user.id
-      subject.logged_in?.should be_true
-    end
-
-    it "logged_in? should return false if not logged in" do
-      session[:user_id] = nil
-      subject.logged_in?.should be_false
-    end
-
-    it "current_user should return the user instance if logged in" do
-      create_new_user
-      session[:user_id] = @user.id
-      2.times { subject.current_user.should == @user } # memoized!
-    end
-
-    it "current_user should return false if not logged in" do
-      session[:user_id] = nil
-      2.times { subject.current_user.should == false } # memoized!
-    end
-
-    specify { should respond_to(:require_login) }
-
-    it "should call the configured 'not_authenticated_action' when authenticate before_filter fails" do
-      session[:user_id] = nil
-      sorcery_controller_property_set(:not_authenticated_action, :test_not_authenticated_action)
-      get :test_logout
-      response.body.should == "test_not_authenticated_action"
-    end
-
-    it "require_login before_filter should save the url that the user originally wanted" do
-      get :some_action
-      session[:return_to_url].should == "http://test.host/some_action"
-      response.should redirect_to("http://test.host/")
-    end
-
-    it "require_login before_filter should not save the url that the user originally wanted upon all non-get http methods" do
-      [:post, :put, :delete].each do |m|
-        self.send(m, :some_action)
-        session[:return_to_url].should be_nil
-      end
-    end
-
-    it "on successful login the user should be redirected to the url he originally wanted" do
-      session[:return_to_url] = "http://test.host/some_action"
-      post :test_return_to, :email => 'bla@bla.com', :password => 'secret'
-      response.should redirect_to("http://test.host/some_action")
-      flash[:notice].should == "haha!"
-    end
-
-
-    # --- auto_login(user) ---
-    specify { should respond_to(:auto_login) }
-
-    it "auto_login(user) should login a user instance" do
-      session[:user_id] = nil
-      subject.auto_login(@user)
-      subject.logged_in?.should be_true
-    end
-
-    it "auto_login(user) should work even if current_user was already set to false" do
-      get :test_logout
-      session[:user_id].should be_nil
-      subject.current_user.should be_false
-      get :test_auto_login
-      assigns[:result].should == User.find(:first)
-    end
-  end
-
-end

data/spec/active_record/integration_spec.rb

@@ -1,23 +0,0 @@
-require 'spec_helper'
-
-describe "the login process", :type => :request do
-  before(:all) do
-    sorcery_reload!
-    create_new_user
-  end
-
-  after(:all) do
-  end
-end
-#   it "handles unverified request", :js => true do
-#     visit root_path
-#     #save_and_open_page
-#     fill_in 'Username', :with => 'gizmo1'
-#     fill_in 'Password', :with => 'secret'
-#     # <input name="authenticity_token" type="hidden" value="+8M9lXnjnhAW/mAuzwI9Mmy6hM+00qZJa8VMQUg+NmM=">
-#     page.execute_script("$$('hidden').value='mezuza'")
-#     #save_and_open_page
-#     click_button 'Login'
-#     save_and_open_page
-#   end
-# end

data/spec/mongo_mapper/controller_spec.rb

@@ -1,175 +0,0 @@
-require 'spec_helper'
-
-describe SorceryController do
-
-  # ----------------- PLUGIN CONFIGURATION -----------------------
-  describe SorceryController, "plugin configuration" do
-    before(:all) do
-      sorcery_reload!
-    end
-
-    after(:each) do
-      Sorcery::Controller::Config.reset!
-      sorcery_reload!
-    end
-
-    it "should enable configuration option 'user_class'" do
-      sorcery_controller_property_set(:user_class, "TestUser")
-      Sorcery::Controller::Config.user_class.should == "TestUser"
-    end
-
-    it "should enable configuration option 'not_authenticated_action'" do
-      sorcery_controller_property_set(:not_authenticated_action, :my_action)
-      Sorcery::Controller::Config.not_authenticated_action.should equal(:my_action)
-    end
-
-  end
-
-  # ----------------- PLUGIN ACTIVATED -----------------------
-  describe SorceryController, "when activated with sorcery" do
-    before(:all) do
-      sorcery_reload!
-      User.delete_all
-    end
-
-    before(:each) do
-      create_new_user
-    end
-
-    after(:each) do
-      Sorcery::Controller::Config.reset!
-      sorcery_reload!
-      User.delete_all
-      sorcery_controller_property_set(:user_class, User)
-      sorcery_model_property_set(:username_attribute_names, [:username, :email])
-    end
-
-    specify { should respond_to(:login) }
-
-    specify { should respond_to(:logout) }
-
-    specify { should respond_to(:logged_in?) }
-
-    specify { should respond_to(:current_user) }
-
-    it "login(username,password) should return the user when success and set the session with user.id" do
-      get :test_login, :email => 'bla@bla.com', :password => 'secret'
-      assigns[:user].should == @user
-      session[:user_id].should == @user.id
-    end
-
-    it "login(email,password) should return the user when success and set the session with user.id" do
-      get :test_login, :email => 'bla@bla.com', :password => 'secret'
-      assigns[:user].should == @user
-      session[:user_id].should == @user.id
-    end
-
-    it "login(username,password) should return nil and not set the session when failure" do
-      get :test_login, :email => 'bla@bla.com', :password => 'opensesame!'
-      assigns[:user].should be_nil
-      session[:user_id].should be_nil
-    end
-
-    it "login(username,password) should return nil and not set the session when upper case username" do
-      get :test_login, :email => 'BLA@BLA.COM', :password => 'secret'
-      assigns[:user].should be_nil
-      session[:user_id].should be_nil
-    end
-
-    it "login(email,password) should return the user when success and set the session with the _csrf_token" do
-      get :test_login, :email => 'bla@bla.com', :password => 'secret'
-      session[:_csrf_token].should_not be_nil
-    end
-
-    it "login(username,password) should return the user and set the session with user.id when upper case username and config is downcase before authenticating" do
-      sorcery_model_property_set(:downcase_username_before_authenticating, true)
-      get :test_login, :email => 'BLA@BLA.COM', :password => 'secret'
-      assigns[:user].should == @user
-      session[:user_id].should == @user.id
-    end
-
-    it "login(username,password) should return nil and not set the session when user was created with upper case username, config is default, and log in username is lower case" do
-      create_new_user({:username => 'GIZMO1', :email => "BLA1@BLA.com", :password => 'secret1'})
-      get :test_login, :email => 'bla1@bla.com', :password => 'secret1'
-      assigns[:user].should be_nil
-      session[:user_id].should be_nil
-    end
-
-    it "login(username,password) should return the user and set the session with user.id when user was created with upper case username and config is downcase before authenticating" do
-      sorcery_model_property_set(:downcase_username_before_authenticating, true)
-      create_new_user({:username => 'GIZMO1', :email => "BLA1@BLA.com", :password => 'secret1'})
-      get :test_login, :email => 'bla1@bla.com', :password => 'secret1'
-      assigns[:user].should == @user
-      session[:user_id].should == @user.id
-    end
-
-    it "logout should clear the session" do
-      cookies[:remember_me_token] = nil
-      session[:user_id] = @user.id
-      get :test_logout
-      session[:user_id].should be_nil
-    end
-
-    it "logged_in? should return true if logged in" do
-      session[:user_id] = @user.id
-      subject.logged_in?.should be_true
-    end
-
-    it "logged_in? should return false if not logged in" do
-      session[:user_id] = nil
-      subject.logged_in?.should be_false
-    end
-
-    it "current_user should return the user instance if logged in" do
-      create_new_user
-      session[:user_id] = @user.id
-      subject.current_user.should == @user
-    end
-
-    it "current_user should return false if not logged in" do
-      session[:user_id] = nil
-      subject.current_user.should == false
-    end
-
-    specify { should respond_to(:require_login) }
-
-    it "should call the configured 'not_authenticated_action' when authenticate before_filter fails" do
-      session[:user_id] = nil
-      sorcery_controller_property_set(:not_authenticated_action, :test_not_authenticated_action)
-      get :test_logout
-      response.body.should == "test_not_authenticated_action"
-    end
-
-    it "require_login before_filter should save the url that the user originally wanted" do
-      get :some_action
-      session[:return_to_url].should == "http://test.host/some_action"
-      response.should redirect_to("http://test.host/")
-    end
-
-    it "require_login before_filter should not save the url that the user originally wanted upon all non-get http methods" do
-      [:post, :put, :delete].each do |m|
-        self.send(m, :some_action)
-        session[:return_to_url].should be_nil
-      end
-    end
-
-    it "on successful login the user should be redirected to the url he originally wanted" do
-      session[:return_to_url] = "http://test.host/some_action"
-      post :test_return_to, :username => 'gizmo', :password => 'secret'
-      response.should redirect_to("http://test.host/some_action")
-      flash[:notice].should == "haha!"
-    end
-
-
-    # --- login_user(user) ---
-    specify { should respond_to(:auto_login) }
-
-    it "auto_login(user) should login a user instance" do
-      create_new_user
-      session[:user_id] = nil
-      subject.auto_login(@user)
-      subject.logged_in?.should be_true
-    end
-  end
-
-end

data/spec/mongoid/controller_activity_logging_spec.rb

@@ -1,111 +0,0 @@
-require 'spec_helper'
-
-describe SorceryController do
-
-  # ----------------- ACTIVITY LOGGING -----------------------
-  describe SorceryController, "with activity logging features" do
-    before(:all) do
-      sorcery_reload!([:activity_logging])
-    end
-
-    before(:each) do
-      create_new_user
-    end
-
-    after(:each) do
-      User.delete_all
-    end
-
-    specify { subject.should respond_to(:current_users) }
-
-    it "'current_users' should be empty when no users are logged in" do
-      subject.current_users.size.should == 0
-    end
-
-    it "should log login time on login" do
-      now = Time.now.utc
-      login_user
-      @user.last_login_at.should_not be_nil
-      @user.last_login_at.utc.to_s.should >= now.utc.to_s
-      @user.last_login_at.utc.to_s.should <= (now.utc+2).to_s
-    end
-
-    it "should log logout time on logout" do
-      login_user
-      now = Time.now.utc
-      logout_user
-      User.first.last_logout_at.utc.should_not be_nil
-      User.first.last_logout_at.utc.to_s.should >= now.utc.to_s
-      User.first.last_logout_at.utc.to_s.should <= (now.utc+2).to_s
-    end
-
-    it "should log last activity time when logged in" do
-      login_user
-      now = Time.now.utc
-      get :some_action
-      User.first.last_activity_at.utc.should >= now.utc
-      User.first.last_activity_at.utc.should <= (now.utc+2)
-    end
-
-    it "should log last IP address when logged in" do
-      login_user
-      get :some_action
-      User.first.last_login_from_ip_address.should == "0.0.0.0"
-    end
-
-    it "should update nothing but activity fields" do
-      original_user_name = User.first.username
-      login_user
-      get :some_action_making_a_non_persisted_change_to_the_user
-      User.first.username.should == original_user_name
-    end
-
-    it "'current_users' should hold the user object when 1 user is logged in" do
-      login_user
-      get :some_action
-      subject.current_users.size.should == 1
-      subject.current_users[0].should == @user
-    end
-
-    it "'current_users' should show all current_users, whether they have logged out before or not." do
-      user1 = create_new_user({:username => 'gizmo1', :email => "bla1@bla.com", :password => 'secret1'})
-      login_user(user1)
-      get :some_action
-      clear_user_without_logout
-      user2 = create_new_user({:username => 'gizmo2', :email => "bla2@bla.com", :password => 'secret2'})
-      login_user(user2)
-      get :some_action
-      clear_user_without_logout
-      user3 = create_new_user({:username => 'gizmo3', :email => "bla3@bla.com", :password => 'secret3'})
-      login_user(user3)
-      get :some_action
-      subject.current_users.size.should == 3
-      subject.current_users[0].should == user1
-      subject.current_users[1].should == user2
-      subject.current_users[2].should == user3
-    end
-
-    it "should not register login time if configured so" do
-      sorcery_controller_property_set(:register_login_time, false)
-      now = Time.now.in_time_zone
-      login_user
-      @user.last_login_at.should be_nil
-    end
-
-    it "should not register logout time if configured so" do
-      sorcery_controller_property_set(:register_logout_time, false)
-      now = Time.now.in_time_zone
-      login_user
-      logout_user
-      @user.last_logout_at.should be_nil
-    end
-
-    it "should not register last activity time if configured so" do
-      sorcery_controller_property_set(:register_last_activity_time, false)
-      now = Time.now.in_time_zone
-      login_user
-      get :some_action
-      @user.last_activity_at.should be_nil
-    end
-  end
-end