stormpath-rails 1.0.0.beta.2 → 1.1.0.beta

data/app/controllers/stormpath/rails/base_controller.rb

@@ -0,0 +1,10 @@
+class Stormpath::Rails::BaseController < ApplicationController
+
+  layout 'stormpath'
+
+  private
+
+  def set_flash_message(key, message)
+    flash[key] = message if message.present?
+  end
+end

data/app/controllers/stormpath/rails/omniauth_controller.rb

@@ -0,0 +1,11 @@
+class Stormpath::Rails::OmniauthController < Stormpath::Rails::BaseController
+  def create
+    result = create_omniauth_user('facebook', params[:access_token])
+    user = find_or_create_user_from_account(result.account)
+
+    initialize_session user 
+    set_flash_message :notice, "Successfully signed in"
+
+    redirect_to root_path
+  end
+end

data/app/controllers/stormpath/rails/passwords_controller.rb

@@ -0,0 +1,56 @@
+class Stormpath::Rails::PasswordsController < Stormpath::Rails::BaseController
+  before_filter :redirect_password_reset_disabled, only: :forgot
+
+  def forgot_send
+    result = reset_password(params[:password][:email])
+
+    if result.success?
+      render template: 'passwords/email_sent'
+    else
+      set_flash_message :error, "Invalid email address."
+      render template: 'passwords/forgot'
+    end
+  end
+
+  def forgot
+    render template: 'passwords/forgot'
+  end
+
+  def forgot_change
+    result = verify_email_token params[:sptoken]
+
+    if result.success?
+      @account_url = result.account_url
+      render template: "passwords/forgot_change"
+    else
+      render template: "passwords/forgot_change_failed"
+    end
+  end
+
+  def forgot_update
+    @account_url = params[:account_url]
+    if passwords_match?
+      result = update_password(params[:account_url], params[:password][:original])
+      if result.success?
+        render template: "passwords/forgot_complete"
+      else
+        set_flash_message :error, result.error_message
+        render template: "passwords/forgot_change"
+      end
+
+    else
+      set_flash_message :error, 'Passwords do not match.'
+      render template: "passwords/forgot_change"
+    end
+  end
+
+  private
+
+  def passwords_match?
+    params[:password][:original] == params[:password][:repeated]
+  end
+
+  def redirect_password_reset_disabled
+    redirect_to root_path unless configuration.forgot_password.enabled
+  end
+end

data/app/controllers/stormpath/rails/sessions_controller.rb

@@ -0,0 +1,52 @@
+class Stormpath::Rails::SessionsController < Stormpath::Rails::BaseController
+  before_filter :redirect_signed_in_users, only: :new
+
+  def create
+    result = authenticate user_from_params
+
+    if result.success?
+      @user = find_user_by_email params[:session][:email]
+      initialize_session(@user)
+
+      redirect_to configuration.login.next_uri, notice: 'Successfully signed in'
+    else
+      set_flash_message :error, result.error_message
+      render template: "sessions/new"
+    end
+  end
+
+  def destroy
+    logout
+    set_flash_message :notice, 'You have been logged out successfully.'
+    redirect_to configuration.logout.next_uri
+  end
+
+  def new
+    if configuration.id_site.enabled?
+      redirect_to id_site_login_url
+    else
+      render template: "sessions/new"
+    end
+  end
+
+  def redirect
+    user_data = handle_id_site_callback(request.url)
+    @user = find_user_by_email user_data.email
+    initialize_session(@user)
+
+    redirect_to configuration.id_site.next_uri, notice: 'Successfully signed in'
+  end
+
+  private
+
+  def user_from_params
+    ::User.new.tap do |user|
+      user.email = params[:session][:email]
+      user.password = params[:session][:password]
+    end
+  end
+
+  def redirect_signed_in_users
+    redirect_to root_path if signed_in?
+  end
+end

data/app/controllers/stormpath/rails/users_controller.rb

@@ -0,0 +1,65 @@
+class Stormpath::Rails::UsersController < Stormpath::Rails::BaseController
+  def create
+    @user = user_from_params
+    result = create_stormpath_account @user
+
+    if result.success?
+      @user.save
+
+      if configuration.verify_email.enabled?
+        render template: "users/verification_email_sent"
+      else
+        initialize_session(@user)
+        set_flash_message :notice, 'Your account was created successfully'
+        redirect_to configuration.register.next_uri
+      end
+    else
+      set_flash_message :error, result.error_message
+      render template: "users/new"
+    end
+  end
+
+  def new
+    if configuration.id_site.enabled?
+      redirect_to id_site_register_url
+    else
+      if signed_in?
+        redirect_to root_path
+      else
+        @user = user_from_params
+        render template: "users/new"
+      end
+    end
+  end
+
+  def verify
+    result = verify_email_token params[:sptoken]
+
+    if result.success?
+      @account_url = result.account_url
+      render template: "users/verification_complete"
+    else
+      render template: "users/verification_failed"
+    end
+  end
+
+  private
+
+  def user_from_params
+    email = user_params.delete(:email)
+    password = user_params.delete(:password)
+    given_name = user_params.delete(:given_name)
+    surname = user_params.delete(:surname)
+
+    ::User.new.tap do |user|
+      user.email = email
+      user.password = password
+      user.given_name = given_name
+      user.surname = surname
+    end
+  end
+
+  def user_params
+    params[:user] || Hash.new
+  end
+end

data/app/helpers/social_helper.rb

@@ -0,0 +1,13 @@
+module SocialHelper
+  def box_class
+    facebook_login_enabled? ? 'small col-sm-8' : 'large col-sm-12' 
+  end
+
+  def label_class
+    facebook_login_enabled? ? 'col-sm-12' : 'col-sm-4'
+  end
+
+  def input_class
+    facebook_login_enabled? ? 'col-sm-12' : 'col-sm-8'
+  end
+end

data/app/views/layouts/stormpath.html.erb

@@ -0,0 +1,31 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>StormAuth</title>
+  <%= stylesheet_link_tag  "//fonts.googleapis.com/css?family=Open+Sans:300italic,300,400italic,400,600italic,600,700italic,700,800italic,800" %>
+  <%= stylesheet_link_tag  "//netdna.bootstrapcdn.com/bootstrap/3.1.1/css/bootstrap.min.css" %>
+  <%= stylesheet_link_tag    'application', media: 'all', 'data-turbolinks-track' => true %>
+  <%= stylesheet_link_tag    'stormpath', media: 'all', 'data-turbolinks-track' => true %>
+  <%= javascript_include_tag 'application', 'data-turbolinks-track' => true %>
+  <%= csrf_meta_tags %>
+</head>
+<body class="login">
+
+  <% if flash[:notice] %>
+    <div class="alert alert-info"><%= flash[:notice] %></div>
+  <% end %>
+
+  <% if flash[:success] %>
+    <div class="alert alert-success"><%= flash[:success] %></div>
+  <% end %>
+
+  <% if signed_in? %>
+    <p>Logged in as: <%= current_user.given_name %></p>
+    <%= link_to "Log out", sign_out_path, method: :delete %>
+  <% end %>
+
+  <%= yield %>
+
+  <script src="//netdna.bootstrapcdn.com/bootstrap/3.1.1/js/bootstrap.min.js"></script>
+</body>
+</html>

data/app/views/passwords/email_sent.html.erb

@@ -0,0 +1,15 @@
+<div class="container custom-container">
+  <div class="va-wrapper">
+    <div class="view login-view container">
+      <div class="box row">
+        <div class="email-password-area col-xs-12 large col-sm-12">
+          <div class="header">
+            <span>Your password reset email has been sent!</span>
+            <p>We have sent a password reset email to the email address you have provided.</p>
+            <p>Please check your inbox to continue.</p>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>

data/app/views/passwords/forgot.html.erb

@@ -0,0 +1,33 @@
+<div class="container custom-container">
+  <div class="va-wrapper">
+    <div class="view login-view container">
+      <div class="box row">
+        <div class="email-password-area col-xs-12 large col-sm-12">
+          <div class="header">
+            <span>Forgot your password?</span>
+            <p>Enter your email address below to reset your password. You will be sent an email which you will need to open to continue. You may need to check your spam folder.</p>
+          </div>
+
+          <% if flash[:error] %>
+            <div class="alert alert-danger bad-login">
+              <p><%= flash[:error] %></p>
+            </div>
+          <% end %>
+
+          <%= form_for :password, html: { class: "login-form form-horizontal" }, url: forgot_send_path do |form| %>
+            <div class="form-group group-email">
+              <%= form.label :email, class: "col-sm-4" %>
+              <div class="col-sm-8">
+                <%= form.text_field :email, placeholder: 'Email', class: "form-control" %>
+              </div>
+            </div>
+            <div>
+              <%= button_tag "Submit", :class => "login btn btn-login btn-sp-green", :type => "submit" %>
+            </div>
+          <% end %>
+        </div>
+      </div>
+      <%= link_to "Back to Log In", sign_in_path, class: "forgot" %>
+    </div>
+  </div>
+</div>

data/app/views/passwords/forgot_change.html.erb

@@ -0,0 +1,38 @@
+<div class="container custom-container">
+  <div class="va-wrapper">
+    <div class="view login-view container">
+      <div class="box row">
+        <div class="email-password-area col-xs-12 large col-sm-12">
+          <div class="header">
+            <span>Change Your Password</span>
+            <p>Enter your new account password below.  Once confirmed, you'll be logged into your account and your new password will be active.</p>
+          </div>
+
+          <% if flash[:error] %>
+            <div class="alert alert-danger bad-login">
+              <p><%= flash[:error] %></p>
+            </div>
+          <% end %>
+
+          <%= form_for :password, html: { class: "login-form form-horizontal" }, url: forgot_update_path(@account_url) do |form| %>
+            <div class="form-group group-password">
+              <%= form.label :original, class: "col-sm-4" %>
+              <div class="col-sm-8">
+                <%= form.password_field :original, placeholder: 'Password', class: "form-control" %>
+              </div>
+            </div>
+            <div class="form-group group-password">
+              <%= form.label :repeated, 'Password (Again)', class: "col-sm-4" %>
+              <div class="col-sm-8">
+                <%= form.password_field :repeated, placeholder: 'Password (Again)', class: "form-control" %>
+              </div>
+            </div>
+            <div>
+              <%= button_tag "Submit", :class => "login btn btn-login btn-sp-green", :type => "submit" %>
+            </div>
+          <% end %>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>

data/app/views/passwords/forgot_change_failed.html.erb

@@ -0,0 +1,14 @@
+<div class="container custom-container">
+  <div class="va-wrapper">
+    <div class="view login-view container">
+      <div class="box row">
+        <div class="email-password-area col-xs-12 large col-sm-12">
+          <div class="header">
+            <span>Password Reset Failed</span>
+            <p>Your password reset attempt has failed.  This might happen for several reasons: your reset token might be expired, it might have already been used, or we may just be having issues right now!  Please try again, and if you're still having problems, contact the site administrator for help!</p>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>

data/app/views/passwords/forgot_complete.html.erb

@@ -0,0 +1,19 @@
+<div class="container custom-container">
+  <div class="va-wrapper">
+    <div class="view login-view container">
+      <div class="box row">
+        <div class="email-password-area col-xs-12 large col-sm-12">
+          <div class="header">
+            <span>Password Change Complete!</span>
+            <p>Your password has been changed, and you have been logged into your account.  You will be redirected back to the site in 5 seconds.</p>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>
+
+<script type="text/javascript">
+  var delay = 5000;
+  setTimeout(function(){ window.location = "<%= sign_in_path %>"; }, delay);
+</script>

data/app/views/sessions/_facebook_login_form.erb

@@ -0,0 +1,31 @@
+<%= button_tag "Facebook", class: "btn btn-social btn-facebook", "onclick" => "facebookLogin()" %>
+
+<script type="text/javascript">
+  function facebookLogin() {
+    var FB = window.FB;
+
+    FB.login(function(response) {
+      console.log(response);
+
+      if (response.status === 'connected') {
+        window.location.replace("<%= omniauth_login_path %>" + '?access_token=' + response.authResponse.accessToken);
+      }
+    });
+  }
+
+  window.fbAsyncInit = function() {
+    FB.init({
+      appId      : <%= facebook_app_id %>,
+      xfbml      : true,
+      version    : 'v2.4'
+    });
+  };
+
+  (function(d, s, id){
+     var js, fjs = d.getElementsByTagName(s)[0];
+     if (d.getElementById(id)) {return;}
+     js = d.createElement(s); js.id = id;
+     js.src = "//connect.facebook.net/en_US/sdk.js";
+     fjs.parentNode.insertBefore(js, fjs);
+   }(document, 'script', 'facebook-jssdk'));
+</script>

data/app/views/sessions/_form.html.erb

@@ -0,0 +1,31 @@
+<div class="email-password-area col-xs-12 <%= box_class %>">
+  <div class="header">
+    <span>Log in or <%= link_to "Create Account", sign_up_path %></span>
+  </div>
+
+  <% if flash[:error] %>
+    <div class="alert alert-danger bad-login">
+      <p><%= flash[:error] %></p>
+    </div>
+  <% end %>
+
+  <%= form_for :session, url: session_path, html: {class: "login-form form-horizontal"} do |form| %>
+    <div class="form-group group-email">
+      <%= form.label :email, class: label_class %>
+      <div class="<%= input_class %>">
+        <%= form.text_field :email, type: 'text', placeholder: 'Email', class: "form-control", id: "session-email" %>
+      </div>
+    </div>
+
+    <div class="form-group group-password">
+      <%= form.label :password, class: label_class %>
+      <div class="<%= input_class %>">
+        <%= form.password_field :password, type: 'password', placeholder: 'Password', class: "form-control" %>
+      </div>
+    </div>
+
+    <div>
+      <%= button_tag "Log in", :class => "login btn btn-login btn-sp-green", :type => "submit" %>
+    </div>
+  <% end %>
+</div>

data/app/views/sessions/_google_login_form.html.erb

@@ -0,0 +1,3 @@
+<%= button_tag "Google", class: "btn btn-social btn-google", "onclick" => "facebookLogin()" %>
+
+

data/app/views/sessions/_social_auth.html.erb

@@ -0,0 +1,7 @@
+<% if facebook_login_enabled? %>
+  <%= render partial: '/sessions/facebook_login_form' %>
+<% end %>
+
+<% if google_login_enabled? %>
+  <%= render partial: '/sessions/google_login_form' %>
+<% end %>

data/app/views/sessions/new.html.erb

@@ -0,0 +1,21 @@
+<div class="container custom-container">
+  <div class="va-wrapper">
+    <div class="view login-view container">
+      <div class="box row">
+        <%= render partial: '/sessions/form' %>
+        <% if social_auth? %>
+          <div class="social-area col-xs-12 col-sm-4">
+            <div class="header">
+              &nbsp;
+            </div>
+            <label>Easy 1-click login:</label>
+            <%= render partial: '/sessions/social_auth' %>
+          </div>
+        <% end %>
+      </div>
+      <% if Stormpath::Rails.config.forgot_password.enabled %>
+        <%= link_to "Forgot Password?", forgot_path, class: "forgot" %>
+      <% end %>
+    </div>
+  </div>
+</div>

data/app/views/users/_form.html.erb

@@ -0,0 +1,43 @@
+<div class="col-sm-12">
+  <div class="header">
+    <span>Create Account</span>
+  </div>
+
+  <% if flash[:error] %>
+    <div class="alert alert-danger">
+      <p><%= flash[:error] %></p>
+    </div>
+  <% end %>
+
+  <%= form_for @user, html: { class: "registration-form form-horizontal sp-form" } do |form| %>
+    <div form-group="true" class="form-group group-first-name">
+      <%= form.label :given_name, "First Name", class: "col-sm-4" %>
+      <div class="col-sm-8">
+        <%= form.text_field :given_name, placeholder: "First Name", class: "form-control" %>
+      </div>
+    </div>
+
+    <div form-group="true" class="form-group group-first-name">
+      <%= form.label :surname, "Last Name", class: "col-sm-4" %>
+      <div class="col-sm-8">
+        <%= form.text_field :surname, placeholder: "Last Name", class: "form-control" %>
+      </div>
+    </div>
+
+    <div form-group="true" class="form-group group-first-name">
+      <%= form.label :email, "Email", class: "col-sm-4" %>
+      <div class="col-sm-8">
+        <%= form.text_field :email, placeholder: "Email", class: "form-control" %>
+      </div>
+    </div>
+
+    <div form-group="true" class="form-group group-first-name">
+      <%= form.label :password, "Password", class: "col-sm-4" %>
+      <div class="col-sm-8">
+        <%= form.password_field :password, placeholder: "Password", class: "form-control" %>
+      </div>
+    </div>
+
+    <%= button_tag "Create Account", :class => "btn btn-register btn-sp-green", :type => "submit" %>
+  <% end %>
+</div>

data/app/views/users/new.html.erb

@@ -0,0 +1,10 @@
+<div class="container custom-container">
+  <div class="va-wrapper">
+    <div class="view registration-view container">
+      <div class="box row">
+        <%= render partial: '/users/form' %>
+      </div>
+      <%= link_to "Back to Log In", sign_in_path, class: "to-login" %>
+    </div>
+  </div>
+</div>

data/app/views/users/verification_complete.html.erb

@@ -0,0 +1,20 @@
+<div class="container custom-container">
+  <div class="va-wrapper">
+    <div class="view login-view container">
+      <div class="box row">
+        <div class="email-password-area col-xs-12 large col-sm-12">
+          <div class="header">
+            <span>Account Verification Complete!</span>
+            <p>Before you can log into your account, you need to activate your account by clicking the link we sent to you at your email address.</p>
+            <p>Your account has been verified, and you have been logged into your account.  You will be redirected back to the site in 5 seconds.</p>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>
+
+<script type="text/javascript">
+  var delay = 5000;
+  setTimeout(function(){ window.location = "<%= root_path %>"; }, delay);
+</script>

data/app/views/users/verification_email_sent.html.erb

@@ -0,0 +1,15 @@
+<div class="container custom-container">
+  <div class="va-wrapper">
+    <div class="view login-view container">
+      <div class="box row">
+        <div class="email-password-area col-xs-12 large col-sm-12">
+          <div class="header">
+            <span>Your account verification email has been sent!</span>
+            <p>Before you can log into your account, you need to activate your account by clicking the link we sent to you at your email address.</p>
+            <p>Please check your inbox to continue.</p>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>

data/app/views/users/verification_failed.html.erb

@@ -0,0 +1,14 @@
+<div class="container custom-container">
+  <div class="va-wrapper">
+    <div class="view login-view container">
+      <div class="box row">
+        <div class="email-password-area col-xs-12 large col-sm-12">
+          <div class="header">
+            <span>Verification Failed</span>
+            <p>Your account verification has failed.  This might happen for several reasons: your verification token might be expired, it might have already been used, or we may just be having issues right now!  Please try again, and if you're still having problems, contact the site administrator for help!</p>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>

data/app/views/users/verification_resend.html.erb

@@ -0,0 +1,14 @@
+<div class="container custom-container">
+  <div class="va-wrapper">
+    <div class="view login-view container">
+      <div class="box row">
+        <div class="email-password-area col-xs-12 large col-sm-12">
+          <div class="header">
+            <span>Didn't receive your account verification email?</span>
+            <p>Enter your email address below and we'll resend your account verification email.  You will be sent an email which you will need to open to continue. You may need to check your spam folder.</p>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "stormpath/rails"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start

data/bin/rails

@@ -0,0 +1,12 @@
+#!/usr/bin/env ruby
+# This command will automatically be run when you run "rails" with Rails 4 gems installed from the root of your application.
+
+ENGINE_ROOT = File.expand_path('../..', __FILE__)
+ENGINE_PATH = File.expand_path('../../lib/stormpath/rails/engine', __FILE__)
+
+# Set up gems listed in the Gemfile.
+ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../../Gemfile', __FILE__)
+require 'bundler/setup' if File.exist?(ENV['BUNDLE_GEMFILE'])
+
+require 'rails/all'
+require 'rails/engine/commands'

data/bin/rake

@@ -0,0 +1,16 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by Bundler.
+#
+# The application 'rake' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'pathname'
+ENV['BUNDLE_GEMFILE'] ||= File.expand_path("../../Gemfile",
+  Pathname.new(__FILE__).realpath)
+
+require 'rubygems'
+require 'bundler/setup'
+
+load Gem.bin_path('rake', 'rake')

data/bin/rspec

@@ -0,0 +1,16 @@
+#!/usr/bin/env ruby
+#
+# This file was generated by Bundler.
+#
+# The application 'rspec' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+
+require 'pathname'
+ENV['BUNDLE_GEMFILE'] ||= File.expand_path("../../Gemfile",
+  Pathname.new(__FILE__).realpath)
+
+require 'rubygems'
+require 'bundler/setup'
+
+load Gem.bin_path('rspec-core', 'rspec')