sorcery 0.8.6 → 0.9.1

data/lib/sorcery/model/adapters/datamapper.rb

@@ -1,123 +0,0 @@
-module Sorcery
-  module Model
-    module Adapters
-      module DataMapper
-        def self.included(klass)
-          klass.extend ClassMethods
-          klass.send(:include, InstanceMethods)
-        end
-
-        module InstanceMethods
-          def increment(attr)
-            self[attr] ||= 0
-            self[attr] += 1
-            self
-          end
-
-          def update_many_attributes(attrs)
-            attrs.each do |name, value|
-              value = value.utc if value.is_a?(ActiveSupport::TimeWithZone)
-              self.send(:"#{name}=", value)
-            end
-            self.class.get(self.id).update(attrs)
-          end
-
-          def update_single_attribute(name, value)
-            update_many_attributes(name => value)
-          end
-
-          def sorcery_save(options = {})
-            if options.key?(:validate) && ! options[:validate]
-              save!
-            else
-              save
-            end
-          end
-        end
-
-        module ClassMethods
-          def find(id)
-            get(id)
-          end
-
-          def delete_all
-            destroy
-          end
-
-          # NOTE
-          # DM Adapter dependent
-          # DM creates MySQL tables case insensitive by default
-          # http://datamapper.lighthouseapp.com/projects/20609-datamapper/tickets/1105
-          def find_by_credentials(credentials)
-            credential = credentials[0].dup
-            credential.downcase! if @sorcery_config.downcase_username_before_authenticating
-            @sorcery_config.username_attribute_names.each do |name|
-              @user = first(name => credential)
-              break if @user
-            end
-            !!@user ? get(@user.id) : nil
-          end
-
-          def find_by_provider_and_uid(provider, uid)
-            @user_klass ||= ::Sorcery::Controller::Config.user_class.to_s.constantize
-            user = first(@user_klass.sorcery_config.provider_attribute_name => provider, @user_klass.sorcery_config.provider_uid_attribute_name => uid)
-            !!user ? get(user.id) : nil
-          end
-
-          def find_by_id(id)
-            find(id)
-          rescue ::DataMapper::ObjectNotFoundError
-            nil
-          end
-
-          def find_by_activation_token(token)
-            user = first(sorcery_config.activation_token_attribute_name => token)
-            !!user ? get(user.id) : nil
-          end
-
-          def find_by_remember_me_token(token)
-            user = first(sorcery_config.remember_me_token_attribute_name => token)
-            !!user ? get(user.id) : nil
-          end
-
-          def find_by_username(username)
-            user = nil
-            sorcery_config.username_attribute_names.each do |name|
-              user = first(name => username)
-              break if user
-            end
-            !!user ? get(user.id) : nil
-          end
-
-          def transaction(&blk)
-            tap(&blk)
-          end
-
-          def find_by_sorcery_token(token_attr_name, token)
-            user = first(token_attr_name => token)
-            !!user ? get(user.id) : nil
-          end
-
-          def find_by_email(email)
-            user = first(sorcery_config.email_attribute_name => email)
-            !!user ? get(user.id) : nil
-          end
-
-          # NOTE
-          # DM Adapter dependent
-          def get_current_users
-            unless self.repository.adapter.is_a?(::DataMapper::Adapters::MysqlAdapter)
-              raise 'Unsupported DataMapper Adapter'
-            end
-            config = sorcery_config
-            ret = all(config.last_logout_at_attribute_name => nil) |
-                  all(config.last_activity_at_attribute_name.gt => config.last_logout_at_attribute_name)
-            ret = ret.all(config.last_activity_at_attribute_name.not => nil)
-            ret = ret.all(config.last_activity_at_attribute_name.gt => config.activity_timeout.seconds.ago.utc)
-            ret
-          end
-        end
-      end
-    end
-  end
-end

data/lib/sorcery/model/adapters/mongo_mapper.rb

@@ -1,60 +0,0 @@
-module Sorcery
-  module Model
-    module Adapters
-      module MongoMapper
-        extend ActiveSupport::Concern
-
-        included do
-          extend Sorcery::Model
-        end
-
-        def increment(attr)
-          self.class.increment(id, attr => 1)
-        end
-
-        def sorcery_save(options = {})
-          if options.delete(:raise_on_failure) && options[:validate] != false
-            save! options
-          else
-            save options
-          end
-        end
-
-        def update_many_attributes(attrs)
-          update_attributes(attrs)
-        end
-
-        module ClassMethods
-          def credential_regex(credential)
-            return { :$regex =>  /^#{Regexp.escape(credential)}$/i  }  if (@sorcery_config.downcase_username_before_authenticating)
-            return credential
-          end
-
-          def find_by_credentials(credentials)
-            @sorcery_config.username_attribute_names.each do |attribute|
-              @user = where(attribute => credential_regex(credentials[0])).first
-              break if @user
-            end
-            @user
-          end
-
-          def find_by_id(id)
-            find(id)
-          end
-
-          def find_by_activation_token(token)
-            where(sorcery_config.activation_token_attribute_name => token).first
-          end
-
-          def transaction(&blk)
-            tap(&blk)
-          end
-
-          def find_by_sorcery_token(token_attr_name, token)
-            where(token_attr_name => token).first
-          end
-        end
-      end
-    end
-  end
-end

data/lib/sorcery/model/adapters/mongoid.rb

@@ -1,88 +0,0 @@
-module Sorcery
-  module Model
-    module Adapters
-      module Mongoid
-        module InstanceMethods
-          def increment(attr)
-            self.inc(attr, 1)
-          end
-
-          def update_many_attributes(attrs)
-            attrs.each do |name, value|
-              attrs[name] = value.utc if value.is_a?(ActiveSupport::TimeWithZone)
-              self.send(:"#{name}=", value)
-            end
-            self.class.where(:_id => self.id).update_all(attrs)
-          end
-
-          def update_single_attribute(name, value)
-            update_many_attributes(name => value)
-          end
-
-          def sorcery_save(options = {})
-            mthd = options.delete(:raise_on_failure) ? :save! : :save
-            self.send(mthd, options)
-          end
-        end
-
-        module ClassMethods
-          def credential_regex(credential)
-            return { :$regex =>  /^#{Regexp.escape(credential)}$/i  } if (@sorcery_config.downcase_username_before_authenticating)
-            credential
-          end
-
-          def find_by_credentials(credentials)
-            @sorcery_config.username_attribute_names.each do |attribute|
-              @user = where(attribute => credential_regex(credentials[0])).first
-              break if @user
-            end
-            @user
-          end
-
-          def find_by_provider_and_uid(provider, uid)
-            @user_klass ||= ::Sorcery::Controller::Config.user_class.to_s.constantize
-            where(@user_klass.sorcery_config.provider_attribute_name => provider, @user_klass.sorcery_config.provider_uid_attribute_name => uid).first
-          end
-
-          def find_by_id(id)
-            find(id)
-          rescue ::Mongoid::Errors::DocumentNotFound
-            nil
-          end
-
-          def find_by_activation_token(token)
-            where(sorcery_config.activation_token_attribute_name => token).first
-          end
-
-          def find_by_remember_me_token(token)
-            where(sorcery_config.remember_me_token_attribute_name => token).first
-          end
-
-          def find_by_username(username)
-            query = sorcery_config.username_attribute_names.map {|name| {name => username}}
-            any_of(*query).first
-          end
-
-          def transaction(&blk)
-            tap(&blk)
-          end
-
-          def find_by_sorcery_token(token_attr_name, token)
-            where(token_attr_name => token).first
-          end
-
-          def find_by_email(email)
-            where(sorcery_config.email_attribute_name => email).first
-          end
-
-          def get_current_users
-            config = sorcery_config
-            where(config.last_activity_at_attribute_name.ne => nil) \
-            .where("this.#{config.last_logout_at_attribute_name} == null || this.#{config.last_activity_at_attribute_name} > this.#{config.last_logout_at_attribute_name}") \
-            .where(config.last_activity_at_attribute_name.gt => config.activity_timeout.seconds.ago.utc).order_by([:_id,:asc])
-          end
-        end
-      end
-    end
-  end
-end

data/lib/sorcery/test_helpers/rails.rb

@@ -1,7 +0,0 @@
-module Sorcery
-  module TestHelpers
-    module Rails
-
-    end
-  end
-end

data/spec/active_record/controller_activity_logging_spec.rb

@@ -1,29 +0,0 @@
-require 'spec_helper'
-
-require 'shared_examples/controller_activity_logging_shared_examples'
-
-describe SorceryController, :active_record => true do
-  before(:all) do
-    ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/activity_logging")
-    User.reset_column_information
-  end
-
-  after(:all) do
-    ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/activity_logging")
-
-    sorcery_controller_property_set(:register_login_time, true)
-    sorcery_controller_property_set(:register_logout_time, true)
-    sorcery_controller_property_set(:register_last_activity_time, true)
-    # sorcery_controller_property_set(:last_login_from_ip_address_name, true)
-  end
-
-  # ----------------- ACTIVITY LOGGING -----------------------
-  context "with activity logging features" do
-    after(:each) do
-      User.delete_all
-    end
-
-    it_behaves_like "controller_activity_logging"
-
-  end
-end

data/spec/active_record/controller_brute_force_protection_spec.rb

@@ -1,158 +0,0 @@
-require 'spec_helper'
-
-describe SorceryController, :active_record => true do
-
-  let(:db_user) { User.find_by_email 'bla@bla.com' }
-  let!(:user) { create_new_user }
-
-  def request_test_login
-    get :test_login, :email => 'bla@bla.com', :password => 'blabla'
-  end
-
-  before(:all) do
-    ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/brute_force_protection")
-    User.reset_column_information
-  end
-
-  after(:all) do
-    ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/brute_force_protection")
-  end
-
-  # ----------------- SESSION TIMEOUT -----------------------
-  describe "brute force protection features" do
-
-    before(:all) do
-      sorcery_reload!([:brute_force_protection])
-    end
-
-
-    after(:each) do
-      Sorcery::Controller::Config.reset!
-      sorcery_controller_property_set(:user_class, User)
-      Timecop.return
-    end
-
-    it "counts login retries" do
-      3.times { request_test_login }
-      expect(db_user.failed_logins_count).to eq 3
-    end
-
-    it "generates unlock token before mail is sent" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      sorcery_model_property_set(:unlock_token_mailer, SorceryMailer)
-      3.times { request_test_login }
-      expect(ActionMailer::Base.deliveries.last.body.to_s.match(db_user.unlock_token)).not_to be_nil
-    end
-
-    it "unlocks after entering unlock token" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      sorcery_model_property_set(:unlock_token_mailer, SorceryMailer)
-      3.times { request_test_login }
-
-      expect(db_user.unlock_token).not_to be_nil
-
-      token = db_user.unlock_token
-      user = User.load_from_unlock_token(token)
-
-      expect(user).not_to be_nil
-
-      user.unlock!
-      expect(User.load_from_unlock_token(db_user.unlock_token)).to be_nil
-    end
-
-    it "resets the counter on a good login" do
-      # dirty hack for rails 4
-      allow(@controller).to receive(:register_last_activity_time_to_db)
-
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 5)
-      3.times { request_test_login }
-      get :test_login, :email => 'bla@bla.com', :password => 'secret'
-
-      expect(db_user.failed_logins_count).to eq 0
-    end
-
-    it "locks user when number of retries reached the limit" do
-      expect(db_user.lock_expires_at).to be_nil
-
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 1)
-      request_test_login
-
-      expect(db_user.reload.lock_expires_at).not_to be_nil
-    end
-
-    it "unlocks after lock time period passes" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0.2)
-      2.times { request_test_login }
-
-      expect(db_user.reload.lock_expires_at).not_to be_nil
-
-      Timecop.travel(Time.now.in_time_zone + 0.3)
-      request_test_login
-
-      expect(db_user.reload.lock_expires_at).to be_nil
-    end
-
-    it "doest not unlock if time period is 0 (permanent lock)" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      2.times { request_test_login }
-      unlock_date = db_user.lock_expires_at
-      Timecop.travel(Time.now.in_time_zone + 1)
-      request_test_login
-
-      expect(db_user.lock_expires_at.to_s).to eq unlock_date.to_s
-    end
-
-    context "unlock_token_mailer_disabled is true" do
-
-      before(:each) do
-        sorcery_model_property_set(:unlock_token_mailer_disabled, true)
-        sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-        sorcery_model_property_set(:login_lock_time_period, 0)
-        sorcery_model_property_set(:unlock_token_mailer, SorceryMailer)
-      end
-
-      it "generates unlock token after user locked" do
-        3.times { request_test_login }
-
-        expect(db_user.unlock_token).not_to be_nil
-      end
-
-      it "doest *not* automatically send unlock mail" do
-        old_size = ActionMailer::Base.deliveries.size
-        3.times { request_test_login }
-
-        expect(ActionMailer::Base.deliveries.size).to eq old_size
-      end
-
-    end
-
-    context "unlock_token_mailer_disabled is false" do
-
-      before(:each) do
-        sorcery_model_property_set(:unlock_token_mailer_disabled, false)
-        sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-        sorcery_model_property_set(:login_lock_time_period, 0)
-        sorcery_model_property_set(:unlock_token_mailer, SorceryMailer)
-      end
-
-      it "sets the unlock token after user locked" do
-        3.times { request_test_login }
-
-        expect(db_user.unlock_token).not_to be_nil
-      end
-
-      it "automatically sends unlock mail" do
-        old_size = ActionMailer::Base.deliveries.size
-        3.times { request_test_login }
-
-        expect(ActionMailer::Base.deliveries.size).to eq old_size + 1
-      end
-
-    end
-
-  end
-end

data/spec/active_record/controller_spec.rb

@@ -1,8 +0,0 @@
-require 'spec_helper'
-require 'shared_examples/controller_shared_examples'
-
-describe SorceryController, :active_record => true do
-
-  it_should_behave_like "sorcery_controller"
-  
-end

data/spec/active_record/integration_spec.rb

@@ -1,23 +0,0 @@
-require 'spec_helper'
-
-describe "the login process", :type => :request, :active_record => true do
-  before(:all) do
-    sorcery_reload!
-    create_new_user
-  end
-
-  after(:all) do
-  end
-end
-#   it "handles unverified request", :js => true do
-#     visit root_path
-#     #save_and_open_page
-#     fill_in 'Username', :with => 'gizmo1'
-#     fill_in 'Password', :with => 'secret'
-#     # <input name="authenticity_token" type="hidden" value="+8M9lXnjnhAW/mAuzwI9Mmy6hM+00qZJa8VMQUg+NmM=">
-#     page.execute_script("$$('hidden').value='mezuza'")
-#     #save_and_open_page
-#     click_button 'Login'
-#     save_and_open_page
-#   end
-# end

data/spec/datamapper/controller_activity_logging_spec.rb

@@ -1,17 +0,0 @@
-require 'spec_helper'
-require 'shared_examples/controller_activity_logging_shared_examples'
-
-describe SorceryController, :datamapper => true do
-
-  # ----------------- ACTIVITY LOGGING -----------------------
-  context "with activity logging features" do
-    after(:each) do
-      # NOTE dm-constraints supports only pg and mysql
-      Authentication.all.destroy
-      User.delete_all
-    end
-
-    it_behaves_like "controller_activity_logging"
-
-  end
-end

data/spec/datamapper/controller_spec.rb

@@ -1,8 +0,0 @@
-require 'spec_helper'
-require 'shared_examples/controller_shared_examples'
-
-describe SorceryController, :datamapper => true do
-
-  it_should_behave_like "sorcery_controller"
-
-end

data/spec/datamapper/user_activity_logging_spec.rb

@@ -1,9 +0,0 @@
-require 'spec_helper'
-
-require 'shared_examples/user_activity_logging_shared_examples'
-
-describe User, "with activity logging submodule", :datamapper => true do
-
-  it_behaves_like "rails_3_activity_logging_model"
-
-end

data/spec/mongo_mapper/controller_spec.rb

@@ -1,8 +0,0 @@
-require 'spec_helper'
-require 'shared_examples/controller_shared_examples'
-
-describe SorceryController, :mongo_mapper => true do
-
-  it_should_behave_like "sorcery_controller"
-  
-end

data/spec/mongoid/controller_activity_logging_spec.rb

@@ -1,16 +0,0 @@
-require 'spec_helper'
-require 'shared_examples/controller_activity_logging_shared_examples'
-
-describe SorceryController, :mongoid => true do
-
-  # ----------------- ACTIVITY LOGGING -----------------------
-  context "with activity logging features" do
-    after(:each) do
-      User.delete_all
-    end
-
-
-    it_behaves_like "controller_activity_logging"
-
-  end
-end

data/spec/mongoid/controller_spec.rb

@@ -1,8 +0,0 @@
-require 'spec_helper'
-require 'shared_examples/controller_shared_examples'
-
-describe SorceryController, :mongoid => true do
-
-  it_should_behave_like "sorcery_controller"
-  
-end

data/spec/rails_app/public/404.html

@@ -1,26 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>The page you were looking for doesn't exist (404)</title>
-  <style type="text/css">
-    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
-    div.dialog {
-      width: 25em;
-      padding: 0 4em;
-      margin: 4em auto 0 auto;
-      border: 1px solid #ccc;
-      border-right-color: #999;
-      border-bottom-color: #999;
-    }
-    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
-  </style>
-</head>
-
-<body>
-  <!-- This file lives in public/404.html -->
-  <div class="dialog">
-    <h1>The page you were looking for doesn't exist.</h1>
-    <p>You may have mistyped the address or the page may have moved.</p>
-  </div>
-</body>
-</html>

data/spec/rails_app/public/422.html

@@ -1,26 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>The change you wanted was rejected (422)</title>
-  <style type="text/css">
-    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
-    div.dialog {
-      width: 25em;
-      padding: 0 4em;
-      margin: 4em auto 0 auto;
-      border: 1px solid #ccc;
-      border-right-color: #999;
-      border-bottom-color: #999;
-    }
-    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
-  </style>
-</head>
-
-<body>
-  <!-- This file lives in public/422.html -->
-  <div class="dialog">
-    <h1>The change you wanted was rejected.</h1>
-    <p>Maybe you tried to change something you didn't have access to.</p>
-  </div>
-</body>
-</html>

data/spec/rails_app/public/500.html

@@ -1,26 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>We're sorry, but something went wrong (500)</title>
-  <style type="text/css">
-    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
-    div.dialog {
-      width: 25em;
-      padding: 0 4em;
-      margin: 4em auto 0 auto;
-      border: 1px solid #ccc;
-      border-right-color: #999;
-      border-bottom-color: #999;
-    }
-    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
-  </style>
-</head>
-
-<body>
-  <!-- This file lives in public/500.html -->
-  <div class="dialog">
-    <h1>We're sorry, but something went wrong.</h1>
-    <p>We've been notified about this issue and we'll take a look at it shortly.</p>
-  </div>
-</body>
-</html>

data/spec/rails_app/public/javascripts/application.js

@@ -1,2 +0,0 @@
-// Place your application-specific JavaScript functions and classes here
-// This file is automatically included by javascript_include_tag :defaults