tdiary 3.2.2.20130507

data/tdiary/rack/assets/precompile.rb

@@ -0,0 +1,37 @@
+# -*- coding: utf-8 -*-
+require 'coffee-script'
+require 'fileutils'
+
+module TDiary
+	module Rack
+		module Assets
+			class Precompile
+				def initialize(app, environment = nil)
+					@app = app
+					@environment = environment
+				end
+
+				def call( env )
+					@environment.each_file do |script|
+						next unless script.to_s =~ /\.coffee\z/
+						js_path = Pathname.new(script.to_s.gsub(/\.coffee\z/, '.js'))
+
+						if !FileTest.exist?(js_path) || FileUtils.uptodate?(script, [js_path])
+							File.open(js_path, 'w') do |js|
+								js.write CoffeeScript.compile(File.read(script))
+							end
+						end
+					end if @environment
+					@app.call( env )
+				end
+			end
+		end
+	end
+end
+
+# Local Variables:
+# mode: ruby
+# indent-tabs-mode: t
+# tab-width: 3
+# ruby-indent-level: 3
+# End:

data/tdiary/rack/auth/basic.rb

@@ -0,0 +1,38 @@
+require 'rack'
+require 'webrick/httpauth/htpasswd'
+
+module TDiary
+	module Rack
+		module Auth
+			class PasswordFileNotFound < StandardError; end
+
+			class Basic
+				def initialize(app, file = '.htpasswd')
+					@authenticator = ::Rack::Auth::Basic.new(app) do |user, pass|
+						unless File.exist?(file)
+							raise PasswordFileNotFound.new("#{file} is not found. Please create it by htpasswd program.")
+						end
+						htpasswd = WEBrick::HTTPAuth::Htpasswd.new(file)
+						crypted = htpasswd.get_passwd(nil, user, false)
+						crypted == pass.crypt(crypted) if crypted
+					end
+				end
+
+				def call(env)
+					begin
+						@authenticator.call(env)
+					rescue PasswordFileNotFound => e
+						[403, {"Content-Type" => "text/plain"}, [e.message]]
+					end
+				end
+			end
+		end
+	end
+end
+
+# Local Variables:
+# mode: ruby
+# indent-tabs-mode: t
+# tab-width: 3
+# ruby-indent-level: 3
+# End:

data/tdiary/rack/auth/omniauth.rb

@@ -0,0 +1,51 @@
+require 'omniauth'
+
+module TDiary
+	module Rack
+		module Auth
+			class OmniAuth
+				def initialize(app, provider, &block)
+					@app = app
+					@provider = provider
+					@authz = block
+				end
+
+				def call(env)
+					auth = env['rack.session']['auth']
+					return login(env) unless auth
+					env['REMOTE_USER'] = "#{auth.uid}@#{auth.provider}"
+					return forbidden unless @authz.call(auth)
+					@app.call(env)
+				end
+
+				def login(env)
+					env['rack.session']['tdiary.auth.redirect'] =
+						"#{env['REQUEST_PATH']}?#{env['QUERY_STRING']}"
+					redirect = "#{::OmniAuth.config.path_prefix}/#{@provider}"
+					[302, {'Content-Type' => 'text/plain', 'Location' => redirect}, []]
+				end
+
+				def logout(env)
+					env['rack.session']['user_id'] = nil
+				end
+
+				def forbidden
+					[403, {'Content-Type' => 'text/plain'}, ['forbidden']]
+				end
+
+				class CallbackHandler
+					def call(env)
+						# reset sesstion to prevend session fixation attack
+						# see: http://www.ipa.go.jp/security/vuln/documents/website_security.pdf (section 1.4)
+						env['rack.session.options'][:renew] = true
+						auth = env['omniauth.auth']
+						env['rack.session']['auth'] = auth
+						env['REMOTE_USER'] = "#{auth.uid}@#{auth.provider}"
+						redirect = env['rack.session']['tdiary.auth.redirect'] || '/'
+						[302, {'Content-Type' => 'text/plain', 'Location' => redirect}, []]
+					end
+				end
+			end
+		end
+	end
+end

data/tdiary/rack/html_anchor.rb

@@ -0,0 +1,31 @@
+# -*- coding: utf-8 -*-
+require 'rack/request'
+
+module TDiary
+	module Rack
+		class HtmlAnchor
+			def initialize( app )
+				@app = app
+			end
+
+			def call( env )
+				if env['PATH_INFO'].match(/(.*\/)([0-9\-]+)(p(\d\d))?\.html$/)
+					env["PATH_INFO"] = $1
+					date = $2
+					anchor = $4
+					env["QUERY_STRING"] += "&" unless env["QUERY_STRING"].empty?
+					env["QUERY_STRING"] += "date=#{date}"
+					env["QUERY_STRING"] += "&p=#{anchor}" if anchor
+				end
+				@app.call( env )
+			end
+		end
+	end
+end
+
+# Local Variables:
+# mode: ruby
+# indent-tabs-mode: t
+# tab-width: 3
+# ruby-indent-level: 3
+# End:

data/tdiary/rack/valid_request_path.rb

@@ -0,0 +1,36 @@
+# -*- coding: utf-8 -*-
+
+module TDiary
+	module Rack
+		class ValidRequestPath
+			def initialize( app )
+				@app = app
+			end
+
+			def call( env )
+				valid_paths = [
+					%r{^/$},
+					%r{^/index\.(rb|cgi)$},
+					%r{^/([0-9\-p]+)\.html$}
+				]
+				valid_paths.each do |path|
+					return @app.call(env) if env['PATH_INFO'].match(path)
+				end
+
+				body = "Not Found: #{env['PATH_INFO']}"
+				if env["REQUEST_METHOD"] == "HEAD"
+					[404, {'Content-Type' => 'text/plain', 'Content-Length' => body.length.to_s}, []]
+				else
+					[404, {'Content-Type' => 'text/plain'}, [body]]
+				end
+			end
+		end
+	end
+end
+
+# Local Variables:
+# mode: ruby
+# indent-tabs-mode: t
+# tab-width: 3
+# ruby-indent-level: 3
+# End:

data/tdiary/referer_manager.rb

@@ -0,0 +1,80 @@
+# -*- coding: utf-8; -*-
+#
+# module RefererManager
+#	Management referers in a day. Include in Diary class.
+#
+
+module TDiary
+	module RefererManager
+		private
+		#
+		# call this method when initialize
+		#
+		def init_referers
+			@referers = {}
+			@new_referer = true # for compatibility
+		end
+
+		public
+		def add_referer( ref, count = 1 )
+			newer_referer
+			ref = ref.sub( /#.*$/, '' ).sub( /\?\d{8}$/, '' )
+			if /^([^:]+:\/\/)([^\/]+)/ =~ ref
+				ref = $1 + $2.downcase + $'
+			end
+			begin
+				uref = CGI::unescape( ref )
+			rescue => e
+				return if defined?(::Encoding) && e.class == ::Encoding::CompatibilityError
+			end
+			if pair = @referers[uref] then
+				pair = [pair, ref] if pair.class != Array # for compatibility
+				@referers[uref] = [pair[0] + count, pair[1]]
+			else
+				@referers[uref] = [count, ref]
+			end
+		end
+
+		def clear_referers
+			@referers = {}
+		end
+
+		def count_referers
+			@referers.size
+		end
+
+		def each_referer( limit = 10 )
+			newer_referer
+			# dirty workaround to avoid recursive sort that
+			# causes SecurityError in @secure=true
+			# environment since
+			# http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=16081
+			@referers.values.sort_by{|e| "%08d_%s" % e}.reverse.each_with_index do |ary,idx|
+				break if idx >= limit
+				yield ary[0], ary[1]
+			end
+		end
+
+		private
+		def newer_referer
+			unless @new_referer then # for compatibility
+				@referers.keys.each do |ref|
+					count = @referers[ref]
+					if count.class != Array then
+						@referers.delete( ref )
+						@referers[CGI::unescape( ref )] = [count, ref]
+					end
+				end
+				@new_referer = true
+			end
+		end
+	end
+end
+
+# Local Variables:
+# mode: ruby
+# indent-tabs-mode: t
+# tab-width: 3
+# ruby-indent-level: 3
+# End:
+# vim: ts=3

data/tdiary/request.rb

@@ -0,0 +1,217 @@
+# -*- coding: utf-8 -*-
+# stolen from okkez http://github.com/hiki/hiki/blob/rack/hiki/request.rb
+module TDiary
+	if Object.const_defined?( :Rack )
+		Request = ::Rack::Request
+		class ::Rack::Request
+			alias remote_addr ip
+		end
+		Request.class_eval { include RequestExtension }
+	else
+		raise RuntimeError, 'Do not use CGI class!' if Object.const_defined?( :Rack )
+		# CGI を Rack::Request っぽいインターフェイスに変換する
+		class Request
+			include RequestExtension
+
+			attr_reader :env, :cgi
+			def initialize( env, cgi = CGI.new )
+				@cgi = cgi
+				@env = env
+			end
+
+			def params
+				return @params if @params
+				@params = { }
+				@cgi.params.each{|k, v|
+					v = v.uniq
+					case v.size
+					when 0
+						@params[k] = nil
+					when 1
+						@params[k] = v[0]
+					else
+						@params[k] = v
+					end
+				}
+				@params
+			end
+
+			def []( key )
+				params[key.to_s]
+			end
+
+			def []=( key, val )
+				params[key.to_s] = val
+			end
+
+			def request_method
+				@env['REQUEST_METHOD']
+			end
+
+			def header( header )
+				@cgi.header( header )
+			end
+
+			def get?
+				request_method == 'GET'
+			end
+
+			def head?
+				request_method == 'HEAD'
+			end
+
+			def post?
+				request_method == 'POST'
+			end
+
+			def put?
+				request_method == 'PUT'
+			end
+
+			def delete?
+				request_method == 'DELETE'
+			end
+
+			def xhr?
+				@env["HTTP_X_REQUESTED_WITH"] == "XMLHttpRequest"
+			end
+
+			def accept_encoding
+				raise NameError, 'not implemented : accept_encoding'
+			end
+
+			def body
+				raise NameError, 'not implemented : body'
+			end
+
+			def content_charset
+				@env['CONTENT_CHARSET']
+			end
+
+			def content_length
+				@env['CONTENT_LENGTH']
+			end
+
+			def content_type
+				@env['CONTENT_TYPE']
+			end
+
+			def remote_addr
+				@env['REMOTE_ADDR']
+			end
+
+			def cookies
+				return @cookies if @cookies
+				@cookies = { }
+				@cgi.cookies.each{|k, v|
+					case v.size
+					when 0
+						@cookies[k] = nil
+					when 1
+						@cookies[k] = v[0]
+					else
+						@cookies[k] = v
+					end
+				}
+				@cookies
+			end
+
+			def form_data?
+				raise NameError, 'not implemented : form_data?'
+			end
+
+			def fullpath
+				raise NameError, 'not implemented : fullpath'
+			end
+
+			def host
+				# Remove port number.from Rack::Response
+				( @env["HTTP_HOST"] || @env["SERVER_NAME"] ).gsub( /:\d+\z/, '' )
+			end
+
+			def ip
+				raise NameError, 'not implemented : ip'
+			end
+
+			def media_type
+				raise NameError, 'not implemented : madia_type'
+			end
+
+			def media_type_params
+				raise NameError, 'not implemented : media_type_params'
+			end
+
+			def openid_request
+				raise NameError, 'not implemented : openid_request'
+			end
+
+			def openid_response
+				raise NameError, 'not implemented : openid_response'
+			end
+
+			def parseable_data?
+				raise NameError, 'not implemented : parseable_data?'
+			end
+
+			def path
+				raise NameError, 'not implemented : path'
+			end
+
+			def path_info
+				@env['PATH_INFO'].to_s
+			end
+
+			def path_info=( s )
+				raise NameError, 'not implemented : path_info='
+			end
+
+			def port
+				raise NameError, 'not implemented : port'
+			end
+
+			def query_string
+				raise NameError, 'not implemented : query_string'
+			end
+
+			def referer
+				raise NameError, 'not implemented : referer'
+			end
+			alias referrer referer
+
+			def schema
+				raise NameError, 'not implemented : schema'
+			end
+
+			def script_name
+				@env['SCRIPT_NAME']
+			end
+
+			def session_options
+				raise NameError, 'not implemented : session_options'
+			end
+
+			def url
+				raise NameError, 'not implemented : url'
+			end
+
+			def user_agent
+				@cgi.user_agent
+			end
+
+			def base_url
+				@cgi.base_url
+			end
+
+			def values_at( *keys )
+				raise NameError, 'not implemented : values_at'
+			end
+		end
+	end
+end
+
+# Local Variables:
+# mode: ruby
+# indent-tabs-mode: t
+# tab-width: 3
+# ruby-indent-level: 3
+# End: