spree 0.0.5

data/starter-app/vendor/plugins/spree/app/controllers/admin/reports_controller.rb

@@ -0,0 +1,53 @@
+class Admin::ReportsController < Admin::BaseController
+  require_role "admin"
+  
+  AVAILABLE_REPORTS = {
+    :sales_total => {:name => "Sales Total", :description => "Sales Total For All Orders"}
+  }
+
+  def index
+    @reports = AVAILABLE_REPORTS
+  end
+  
+  def sales_total
+    c = build_conditions
+    @item_total = Order.sum(:item_total, :conditions => c)
+    @ship_total = Order.sum(:ship_amount, :conditions => c)
+    @tax_total = Order.sum(:tax_amount, :conditions => c)
+    @sales_total = Order.sum(:total, :conditions => c)
+  end
+
+  private 
+  
+      def date_conditions
+        return nil unless params[:search]
+        
+        @search = SearchCriteria.new(params[:search])
+        
+        unless @search.valid?
+          flash.now[:error] = "Invalid search criteria.  Please check your results."
+          return nil
+        end
+
+        p = {}
+        c = []
+        if not @search.start.blank?
+          c << "(orders.created_at between :start and :stop)"
+          p.merge! :start => @search.start.to_date
+          @search.stop = Date.today + 1 if @search.stop.blank?
+          p.merge! :stop => @search.stop.to_date + 1.day 
+        end
+        
+        return nil if c.empty? 
+        
+        {:conditions => c, :parameters => p}
+      end
+  
+      def build_conditions
+        dc = date_conditions
+        return nil if dc.nil?
+        c = dc[:conditions]
+        p = dc[:parameters]
+        [(c.to_sentence :skip_last_comma=>true).gsub(",", " and "), p]
+      end
+end

data/starter-app/vendor/plugins/spree/app/controllers/admin/users_controller.rb

@@ -0,0 +1,45 @@
+# this clas was inspired (heavily) from the mephisto admin architecture
+
+class Admin::UsersController < Admin::BaseController
+  
+  def index
+    @users = User.find(:all, :page => {:size => 15, :current =>params[:page], :first => 1})
+  end
+
+  def show
+    @user = User.find(params[:id])
+  end
+
+  def edit
+    if request.post?
+      @user = User.find(params[:id])
+      if @user.update_attributes(params[:user])
+        flash[:notice] = 'User was successfully updated.'
+      end
+    else
+      @user = User.find(params[:id])
+    end
+  end
+  
+  def destroy
+    @user = User.find(params[:id])
+    @user.destroy
+    flash[:notice] = "User was successfully deleted."
+    redirect_to :action => 'index'
+  end
+
+  def new
+    if request.post?
+      @user = User.new(params[:user])
+      if @user.save
+        flash[:notice] = 'User was successfully created.'
+        redirect_to :action => "index"      
+      else
+        flash[:error] = "Problem saving user."
+      end
+    else
+      @user = User.new
+    end
+  end
+  
+end

data/starter-app/vendor/plugins/spree/app/controllers/admin/variations_controller.rb

@@ -0,0 +1,73 @@
+class Admin::VariationsController < Admin::BaseController
+
+  def new
+    @variation = Variation.new
+    render :layout => false
+  end
+
+  def create
+    @product = Product.find(params[:id])
+    variation = Variation.new
+    variation.option = Option.find(params[:option_id])
+    variation.option_value = OptionValue.find(params[:option_value_id])
+    variation.product = @product
+    logger.debug("product: " + variation.product.inspect)
+    logger.debug("option_value: " + variation.option_value.inspect)
+    
+    variation.save!
+    flash[:notice] = 'Variation was successfully created.'
+    redirect_to :controller => 'products', :action => 'edit', :id => @product    
+  rescue Exception => e
+    logger.error("unable to create variation")
+    logger.error("message: " + e.message)
+    flash[:error] = ' Problem saving variation'
+    redirect_to :controller => 'products', :action => 'edit', :id => @product
+  end
+
+  # delete the variation (ajax call from either product or category edit screen)
+  def delete
+    v = Variation.find(params[:id])
+    if v.variable_type == "Product"
+      @product = Product.find v.variable_id  
+      @variations = @product.variations
+    else
+      @category = Category.find v.variable_id
+      @variations = @category.variations
+    end
+    v.destroy
+    render :update do |page|
+      #page.replace_html 'variations', :partial => 'updated_template'
+      page.replace_html 'variations', :partial => 'shared/variations', :locals => {:variations => @variations, :product => @product, :category => @category}
+      #render :partial => 'shared/variations', :locals => {:variations => @product.variations, :product => @product, :category => @category}
+    end
+  end
+
+  # AJAX method to show variations based on change in parent category (during category edit)
+  def category_variations
+    category = Category.find_or_create_by_id(params[:category_id])
+    if (params[:parent_id].blank?)
+      category.parent = Category.find(:first)
+    else
+      category.parent = Category.find(params[:parent_id])      
+    end
+    
+    render  :partial => 'shared/variations',
+            :locals => {:variations => category.variations, :category => category},
+            :layout => false
+  end
+
+  # AJAX method to show variations based on change in category (during product edit)
+  def product_variations
+    product = Product.find_or_create_by_id(params[:product_id])
+    if (params[:category_id].blank?)
+      product.category = Category.find(:first)
+    else
+      product.category = Category.find(params[:category_id])      
+    end
+    
+    render  :partial => 'shared/variations',
+            :locals => {:variations => product.variations, :product => product},
+            :layout => false
+  end
+  
+end

data/starter-app/vendor/plugins/spree/app/controllers/cart_controller.rb

@@ -0,0 +1,45 @@
+class CartController < RailsCart::BaseController
+  before_filter :find_cart
+  before_filter :store_previous_location
+  
+  def index
+    if request.post?
+      params[:item].each do |key, values|
+        if values[:quantity].to_i == 0
+          CartItem.destroy(key)
+        else
+          CartItem.update(key, values)
+        end
+      end
+    end
+  end
+  
+  def add
+    product = Product.find(params[:product][:id])
+    variation_id = params[:variation_id]
+    if variation_id.blank? 
+      variation = nil
+    else
+      variation = Variation.find(variation_id)
+    end
+    item = @cart.add_product(product, variation)
+    @cart.save
+    item.save
+    
+    redirect_to :action => :index
+  end
+
+  def empty
+    @cart.cart_items.destroy_all
+    redirect_to :controller => :store, :action => :index
+  end
+  
+  private
+  def store_previous_location
+    session[:PREVIOUS_LOCATION] = nil
+    #ignore redirects or direct navigation cases
+    return if request.referer.nil? or /cart/.match request.referer
+    session[:PREVIOUS_LOCATION] = request.referer
+  end  
+  
+end

data/starter-app/vendor/plugins/spree/app/controllers/checkout_controller.rb

@@ -0,0 +1,184 @@
+class CheckoutController < RailsCart::BaseController
+  before_filter :find_order, :except => [:index, :thank_you]
+  
+  require_role 'admin', :only => :comp 
+  
+  def index
+    find_cart
+    # remove any incomplete orders in the db associated with the session
+    if session[:order_id]
+      begin 
+        Order.destroy session[:order_id] 
+      rescue
+        # do nothing - order already removed from the database
+      end
+      session[:order_id] = nil
+    end
+    if @cart.nil? || @cart.cart_items.empty?
+      render :template => 'checkout/empty_cart' and return
+    end
+    redirect_to :action => :addresses
+  end
+
+  def addresses
+    @user = User.new
+    @states = State.find(:all, :order => 'name')
+    @countries = Country.find(:all)
+    
+    if request.post?
+      #TODO - eventually we need to grab user out of session once we support user accounts for orders
+      @user = User.new(params[:user]) unless params[:user].empty?
+      @user.password = "changeme"
+      @user.password_confirmation = "changeme"
+      #TODO - eventually you will be able to configure type of account support, for now its just anonymous
+      @user.login = User.generate_login
+      
+      @different_shipping = params[:different_shipping]
+      @bill_address = Address.new(params[:bill_address])
+      #if only one country available there will be no choice (and user will post nothing)
+      @bill_address.country ||= Country.find(:first)
+
+
+      params[:ship_address] = params[:bill_address].dup unless params[:different_shipping]
+      @ship_address = Address.new(params[:ship_address])
+      @ship_address.country ||= Country.find(:first)      
+
+      render :action => 'addresses' and return unless @user.valid? and @bill_address.valid? and 
+        @ship_address.valid?      
+
+      @order.bill_address = @bill_address
+      @order.ship_address = @ship_address
+      @order.user = @user
+      
+      #if only one shipping method available there will be no choice (and user will post nothing)
+      @order.ship_method = params[:order][:ship_method] if params[:order]
+      @order.ship_method ||= 1
+
+      @order.ship_amount = calculate_shipping(@order)
+      @order.save
+          
+      redirect_to :action => 'final_confirmation'
+    end
+  end
+  
+  def final_confirmation 
+    if request.post?
+      @cc = ActiveMerchant::Billing::CreditCard.new(params[:creditcard])
+      @cc.first_name = @order.bill_address.firstname
+      @cc.last_name = @order.bill_address.lastname
+      
+      @order.number = Order.generate_order_number 
+      @order.ip_address =  request.env['REMOTE_ADDR']
+
+      render :action => 'final_confirmation' and return unless @cc.valid?      
+  
+      # authorize creditcard
+      response = authorize_creditcard(@cc)
+      
+      unless response.success?
+        # TODO - optionally handle gateway down scenario by accepting the order and putting into a special state
+        msg = "Problem authorizing credit card ... \n#{response.params['error']}"
+        logger.error(msg)
+        flash[:error] = msg
+        render :action => 'final_confirmation' and return
+      end
+      
+      # Note: Create an ActiveRecord compatible object to store in our database
+      @order.credit_card = CreditCard.new_from_active_merchant(@cc)
+      @order.credit_card.txns << Txn.new(
+        :amount => @order.total,
+        :response_code => response.authorization,
+        :txn_type => Txn::TxnType::AUTHORIZE
+      )
+
+      @order.status = Order::Status::AUTHORIZED  
+      finalize_order
+
+      # send email confirmation
+      OrderMailer.deliver_confirm(@order)
+      redirect_to :action => :thank_you, :id => @order.id and return
+    else
+      @order.ship_amount = calculate_shipping(@order)
+      @order.tax_amount = calculate_tax(@order)
+    end
+  end
+  
+  def comp
+    @order.number = Order.generate_order_number 
+    @order.ip_address =  request.env['REMOTE_ADDR']
+
+    @order.line_items.each do |li|
+      li.price = 0
+    end
+    @order.ship_amount = 0
+    @order.tax_amount = 0
+    
+    @order.order_operations << OrderOperation.new(
+      :operation_type => OrderOperation::OperationType::COMP,
+      :user => current_user
+    )
+
+    @order.status = Order::Status::PAID
+    finalize_order
+
+    # send email confirmation
+    OrderMailer.deliver_confirm(@order)
+    
+    redirect_to :action => :thank_you, :id => @order.id and return
+  end
+  
+  def thank_you
+    @order = Order.find(params[:id])
+  end
+  
+  def cvv
+    render :layout => false
+  end
+  
+  private
+      def find_order
+        id = session[:order_id]
+        unless id.blank?
+          @order = Order.find(id)
+        else
+          @order = Order.new_from_cart(find_cart)
+          @order.status = Order::Status::INCOMPLETE
+          @order.save
+          session[:order_id] = @order.id    
+          @order
+        end
+      end
+
+      def finalize_order
+        if @order.save
+          #TODO - send confirmation email
+          session[:order_id] = nil
+          # destroy cart (if applicable)
+          cart = find_cart
+          cart.destroy unless cart.new_record?
+          session[:cart_id] = nil
+        else
+          logger.error("problem with saving order " + @order.inspect)
+          redirect_to :action => :incomplete
+        end        
+      end
+
+      def authorize_creditcard(creditcard)
+        gw = payment_gateway 
+        # ActiveMerchant is configured to use cents so we need to multiply order total by 100
+        gw.authorize(@order.total * 100, creditcard, Order.gateway_options(@order))
+      end
+      
+      def calculate_shipping(order)
+        # convert the enumeration into the title, replace spaces so we can convert to class
+        sm = (Order::ShipMethod.from_value order.ship_method).sub(/ /, '')
+        sc = sm.constantize.new
+        sc.shipping_cost(order)
+      end
+      
+      def calculate_tax(order)
+        # use the environment to specify the name of the tax calculator class a string
+        tc = TAX_CALCULATOR.constantize
+        tc.calc_tax(order)
+      end
+end

data/starter-app/vendor/plugins/spree/app/controllers/rails_cart/base_controller.rb

@@ -0,0 +1,47 @@
+class RailsCart::BaseController < ApplicationController
+  # See ActionController::RequestForgeryProtection for details
+  # Uncomment the :secret if you're not using the cookie session store
+  #protect_from_forgery :secret => '55a66755bef2c41d411bd5486c001b16'
+  
+  #include AuthenticatedSystem
+  #include RoleRequirementSystem
+  
+  CalendarDateSelect.format = :american
+  
+  # unique cookie name to distinguish our session data from others'
+  session :session_key => SESSION_KEY
+
+  #model :order, :address
+  
+  filter_parameter_logging "password"
+  
+  def find_cart
+    id = session[:cart_id]    
+    unless id.blank?
+      @cart = Cart.find_or_create_by_id(id)
+    else
+      @cart = Cart.create
+      session[:cart_id] = @cart.id
+    end
+  end
+
+  def access_denied
+    if logged_in?
+      access_forbidden
+    else
+      store_location
+      redirect_to login_path
+    end
+    false  
+  end
+
+  def access_forbidden
+    render :text => 'Access Forbidden', :layout => true, :status => 401
+  end
+  
+  # Instantiates the selected PAYMENT_GATEWAY and initializes with GATEWAY_OPTIONS (configured in environment.rb)
+  def payment_gateway
+    ActiveMerchant::Billing::Base.gateway_mode = :test unless RAILS_ENV == "production"
+    PAYMENT_GATEWAY.constantize.new(GATEWAY_OPTIONS)
+  end
+end