tennpipes-su 3.6.6

data/test/generators/test_admin_page_generator.rb

@@ -0,0 +1,140 @@
+require File.expand_path(File.dirname(__FILE__) + '/../helper')
+
+class Person
+  def self.properties
+    [:id, :name, :age, :email].map { |c| OpenStruct.new(:name => c) }
+  end
+end
+
+class Page
+  def self.properties
+    [:id, :name, :body].map { |c| OpenStruct.new(:name => c) }
+  end
+end
+
+describe "AdminPageGenerator" do
+  before do 
+    @apptmp = "#{Dir.tmpdir}/tennpipes-tests/#{SecureRandom.hex}"
+    `mkdir -p #{@apptmp}`
+  end
+
+  after do
+    `rm -rf #{@apptmp}`
+  end
+
+  describe 'the admin page generator' do
+    it 'should fail outside app root' do
+      out, err = capture_io { generate(:admin_page, 'foo', "-r=#{@apptmp}/sample_project") }
+      assert_match(/not at the root/, out)
+      assert_no_file_exists("#{@apptmp}/admin")
+    end
+
+    it 'should fail without an existent model' do
+      capture_io { generate(:project, 'sample_project', '-e=slim', "--root=#{@apptmp}", '-d=activerecord') }
+      capture_io { generate(:admin_app, "--root=#{@apptmp}/sample_project") }
+      assert_raises(Tennpipes::Admin::Generators::OrmError) { generate(:admin_page, 'foo', "-r=#{@apptmp}/sample_project") }
+    end
+
+    it 'should correctly generate a new page' do
+      capture_io { generate(:project, 'sample_project', '-e=slim', "--root=#{@apptmp}", '-d=datamapper','-e=haml') }
+      capture_io { generate(:admin_app, "--root=#{@apptmp}/sample_project") }
+      capture_io { generate(:model, 'person', "name:string", "age:integer", "email:string", "--root=#{@apptmp}/sample_project") }
+      capture_io { generate(:admin_page, 'person', "--root=#{@apptmp}/sample_project") }
+      assert_file_exists "#{@apptmp}/sample_project/admin/controllers/people.rb"
+      assert_match_in_file "SampleProject::Admin.controllers :people do", "#{@apptmp}/sample_project/admin/controllers/people.rb"
+      assert_match_in_file "role.project_module :people, '/people'", "#{@apptmp}/sample_project/admin/app.rb"
+      assert_match_in_file "elsif Tennpipes.env == :development && params[:bypass]", "#{@apptmp}/sample_project/admin/controllers/sessions.rb"
+    end
+
+    # users can override certain templates from a generators/templates folder in the destination_root
+    it "should use custom generator templates from the project root, if they exist" do
+      capture_io { generate(:project, 'sample_project', '-e=slim', "--root=#{@apptmp}", '-d=datamapper','-e=haml') }
+      custom_template_path = "#{@apptmp}/sample_project/generators/templates/haml/page/"
+      `mkdir -p #{custom_template_path} && echo "%h1= 'Hello, custom generator' " > #{custom_template_path}index.haml.tt`
+      capture_io { generate(:admin_app, "--root=#{@apptmp}/sample_project") }
+      capture_io { generate(:model, 'person', "name:string", "age:integer", "email:string", "--root=#{@apptmp}/sample_project") }
+      capture_io { generate(:admin_page, 'person', "--root=#{@apptmp}/sample_project") }
+      assert_match_in_file(/Hello, custom generator/, "#{@apptmp}/sample_project/admin/views/people/index.haml")
+    end
+
+    describe "renderers" do
+      it 'should correctly generate a new page with haml' do
+        capture_io { generate(:project, 'sample_project', '-e=slim', "--root=#{@apptmp}", '-d=datamapper','-e=haml') }
+        capture_io { generate(:admin_app, "--root=#{@apptmp}/sample_project") }
+        capture_io { generate(:model, 'person', "name:string", "age:integer", "email:string", "--root=#{@apptmp}/sample_project") }
+        capture_io { generate(:admin_page, 'person', "--root=#{@apptmp}/sample_project") }
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/_form.haml"
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/edit.haml"
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/index.haml"
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/new.haml"
+        %w(name age email).each do |field|
+          assert_match_in_file "label :#{field}", "#{@apptmp}/sample_project/admin/views/people/_form.haml"
+          assert_match_in_file "text_field :#{field}", "#{@apptmp}/sample_project/admin/views/people/_form.haml"
+        end
+        assert_match_in_file "check_box_tag :bypass", "#{@apptmp}/sample_project/admin/views/sessions/new.haml"
+      end
+
+      it 'should correctly generate a new page with erb' do
+        capture_io { generate(:project, 'sample_project', '-e=slim', "--root=#{@apptmp}", '-d=datamapper','-e=erb') }
+        capture_io { generate(:admin_app, "--root=#{@apptmp}/sample_project") }
+        capture_io { generate(:model, 'person', "name:string", "age:integer", "email:string", "--root=#{@apptmp}/sample_project") }
+        capture_io { generate(:admin_page, 'person', "--root=#{@apptmp}/sample_project") }
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/_form.erb"
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/edit.erb"
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/index.erb"
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/new.erb"
+        %w(name age email).each do |field|
+          assert_match_in_file "label :#{field}", "#{@apptmp}/sample_project/admin/views/people/_form.erb"
+          assert_match_in_file "text_field :#{field}", "#{@apptmp}/sample_project/admin/views/people/_form.erb"
+        end
+        assert_match_in_file "check_box_tag :bypass", "#{@apptmp}/sample_project/admin/views/sessions/new.erb"
+      end
+
+      it 'should correctly generate a new page with slim' do
+        capture_io { generate(:project, 'sample_project', '-e=slim', "--root=#{@apptmp}", '-d=datamapper','-e=slim') }
+        capture_io { generate(:admin_app, "--root=#{@apptmp}/sample_project") }
+        capture_io { generate(:model, 'person', "name:string", "age:integer", "email:string", "--root=#{@apptmp}/sample_project") }
+        capture_io { generate(:admin_page, 'person', "--root=#{@apptmp}/sample_project") }
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/_form.slim"
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/edit.slim"
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/index.slim"
+        assert_file_exists "#{@apptmp}/sample_project/admin/views/people/new.slim"
+        %w(name age email).each do |field|
+          assert_match_in_file "label :#{field}", "#{@apptmp}/sample_project/admin/views/people/_form.slim"
+          assert_match_in_file "text_field :#{field}", "#{@apptmp}/sample_project/admin/views/people/_form.slim"
+        end
+        assert_match_in_file "check_box_tag :bypass", "#{@apptmp}/sample_project/admin/views/sessions/new.slim"
+      end
+    end
+
+    it 'should correctly generate a new tennpipes admin application with multiple models at the same time' do
+      capture_io { generate(:project, 'sample_project', '-e=slim', "--root=#{@apptmp}", '-d=datamapper','-e=haml') }
+      capture_io { generate(:admin_app, "--root=#{@apptmp}/sample_project") }
+      capture_io { generate(:model, 'person', "name:string", "age:integer", "email:string", "-root=#{@apptmp}/sample_project") }
+      capture_io { generate(:model, 'page', "name:string", "body:string", "-root=#{@apptmp}/sample_project") }
+      capture_io { generate(:admin_page, 'person', 'page', "--root=#{@apptmp}/sample_project") }
+      # For Person
+      assert_file_exists "#{@apptmp}/sample_project/admin/controllers/people.rb"
+      assert_file_exists "#{@apptmp}/sample_project/admin/views/people/_form.haml"
+      assert_file_exists "#{@apptmp}/sample_project/admin/views/people/edit.haml"
+      assert_file_exists "#{@apptmp}/sample_project/admin/views/people/index.haml"
+      assert_file_exists "#{@apptmp}/sample_project/admin/views/people/new.haml"
+      %w(name age email).each do |field|
+        assert_match_in_file "label :#{field}", "#{@apptmp}/sample_project/admin/views/people/_form.haml"
+        assert_match_in_file "text_field :#{field}", "#{@apptmp}/sample_project/admin/views/people/_form.haml"
+      end
+      assert_match_in_file "role.project_module :people, '/people'", "#{@apptmp}/sample_project/admin/app.rb"
+      # For Page
+      assert_file_exists "#{@apptmp}/sample_project/admin/controllers/pages.rb"
+      assert_file_exists "#{@apptmp}/sample_project/admin/views/pages/_form.haml"
+      assert_file_exists "#{@apptmp}/sample_project/admin/views/pages/edit.haml"
+      assert_file_exists "#{@apptmp}/sample_project/admin/views/pages/index.haml"
+      assert_file_exists "#{@apptmp}/sample_project/admin/views/pages/new.haml"
+      %w(name body).each do |field|
+        assert_match_in_file "label :#{field}", "#{@apptmp}/sample_project/admin/views/pages/_form.haml"
+        assert_match_in_file "text_field :#{field}", "#{@apptmp}/sample_project/admin/views/pages/_form.haml"
+      end
+      assert_match_in_file "role.project_module :pages, '/pages'", "#{@apptmp}/sample_project/admin/app.rb"
+    end
+  end
+end

data/test/helper.rb

@@ -0,0 +1,47 @@
+ENV['RACK_ENV'] = 'test'
+TENNPIPES_ROOT = File.dirname(__FILE__) unless defined? TENNPIPES_ROOT
+
+require 'minitest/autorun'
+require 'minitest/pride'
+require 'mocha/setup'
+require 'rack/test'
+require 'thor/group'
+require 'dm-core'
+require 'tennpipes-su'
+
+require 'ext/minitest-spec'
+require 'ext/rack-test-methods'
+
+Tennpipes::Generators.load_components!
+
+module Kernel
+  def load_fixture(file)
+    Object.send(:remove_const, :Account)  if defined?(Account)
+    Object.send(:remove_const, :Category) if defined?(Category)
+    file += ".rb" if file !~ /.rb$/
+    capture_io { load File.join(File.dirname(__FILE__), "fixtures", file) }
+  end
+end
+
+class MiniTest::Spec
+  include Rack::Test::Methods
+
+  # Sets up a Sinatra::Base subclass defined with the block
+  # given. Used in setup or individual spec methods to establish
+  # the application.
+  def mock_app(base=Tennpipes::Application, &block)
+    @app = Sinatra.new base do
+      register Tennpipes::Helpers
+      instance_eval &block
+    end
+  end
+
+  def app
+    Rack::Lint.new(@app)
+  end
+
+  # generate(:admin_app, "-r=#{@apptmp}/sample_project")
+  def generate(name, *params)
+    "Tennpipes::Generators::#{name.to_s.camelize}".constantize.start(params)
+  end
+end

data/test/test_admin_application.rb

@@ -0,0 +1,271 @@
+require File.expand_path(File.dirname(__FILE__) + '/helper')
+
+describe "AdminApplication" do
+
+  def setup
+    load_fixture 'sequel'
+  end
+
+  describe "session id setting" do
+    it "should provide it if it doesn't exist" do
+      mock_app do
+        register Tennpipes::Admin::AccessControl
+      end
+
+      assert_equal @app.session_id, "_tennpipes_#{File.basename(Tennpipes.root)}_#{@app.app_name}".to_sym
+    end
+
+    # it "should preserve it if it already existed" do
+    #   Tennpipes.configure_apps { enable :sessions; set :session_id, "foo" }
+
+    #   mock_app do
+    #     register Tennpipes::Admin::AccessControl
+    #   end
+
+    #   assert_equal @app.session_id, "foo"
+    # end
+  end
+
+  it 'should require correctly login' do
+    mock_app do
+      register Tennpipes::Admin::AccessControl
+      enable :sessions
+
+      # Do a simple mapping
+      access_control.roles_for :any do |role|
+        role.protect  "/foo"
+      end
+
+      get "/foo", :provides => [:html, :js] do
+        "foo"
+      end
+
+      get "/unauthenticated" do
+        "unauthenticated"
+      end
+
+    end
+
+    get "/foo"
+    assert_equal "You don't have permission for this resource", body
+
+    get "/unauthenticated"
+    assert_equal "unauthenticated", body
+  end
+
+  it 'should set basic roles with store location and login page' do
+    mock_app do
+      set    :app_name, :basic_app
+      register Tennpipes::Admin::AccessControl
+      enable :store_location
+      enable :sessions
+      set    :login_page, "/login"
+
+      access_control.roles_for :any do |role|
+        role.protect "/foo"
+      end
+
+      # Prepare a basic page
+      get "/login" do
+        redirect_back_or_default("/foo") if logged_in?
+        set_current_account(Account.admin)
+        "login page"
+      end
+
+      get "/foo" do
+        "foo"
+      end
+    end
+
+    get "/foo"
+    follow_redirect!
+    assert_equal "login page", body
+
+    get "/foo"
+    assert_equal "foo", body
+
+    get "/login"
+    follow_redirect!
+    assert_equal "foo", body
+  end
+
+  it 'should set advanced roles with store location and login page' do
+    mock_app do
+      register Tennpipes::Admin::AccessControl
+      enable :sessions
+
+      access_control.roles_for :any do |role|
+        role.protect "/"
+        role.allow "/login"
+        role.allow "/any"
+      end
+
+      access_control.roles_for :admin do |role|
+        role.project_module :settings, "/settings"
+      end
+
+      access_control.roles_for :editor do |role|
+        role.project_module :posts, "/posts"
+      end
+
+      # Prepare a basic page
+      get "/login(/:role)?" do
+        set_current_account(Account.send(params[:role])) if params[:role]
+        "logged as #{params[:role] || "any"}"
+      end
+
+      get "/any"      do; "any";      end
+      get "/settings" do; "settings"; end
+      get "/posts"    do; "posts";    end
+    end
+
+    assert @app.access_control.allowed?(Account.admin, "/login")
+    assert @app.access_control.allowed?(Account.admin, "/any")
+    assert @app.access_control.allowed?(Account.admin, "/settings")
+    assert ! @app.access_control.allowed?(Account.admin, "/posts")
+
+    assert @app.access_control.allowed?(Account.editor, "/login")
+    assert @app.access_control.allowed?(Account.editor, "/any")
+    assert ! @app.access_control.allowed?(Account.editor, "/settings")
+    assert @app.access_control.allowed?(Account.editor, "/posts")
+
+    get "/login"
+    assert_equal "logged as any", body
+
+    get "/any"
+    assert_equal "any", body
+
+    get "/settings"
+    assert_equal "You don't have permission for this resource", body
+
+    get "/posts"
+    assert_equal "You don't have permission for this resource", body
+
+    get "/login/admin"
+    assert_equal "logged as admin", body
+
+    get "/any"
+    assert_equal "any", body
+
+    get "/settings"
+    assert_equal "settings", body
+
+    get "/posts"
+    assert_equal "You don't have permission for this resource", body
+
+    get "/login/editor"
+    assert_equal "logged as editor", body
+
+    get "/any"
+    assert_equal "any", body
+
+    get "/settings"
+    assert_equal "You don't have permission for this resource", body
+
+    get "/posts"
+    assert_equal "posts", body
+  end
+
+  it 'should emulate an ecommerce app' do
+    mock_app do
+      register Tennpipes::Admin::AccessControl
+      enable :sessions
+
+      access_control.roles_for :any do |role|
+        role.protect "/cart"
+        role.allow "/cart/add"
+        role.allow "/cart/empty"
+      end
+
+      get "/login" do
+        set_current_account(Account.admin)
+        "Logged in"
+      end
+
+      get "/cart/checkout" do
+        "Checkout"
+      end
+
+      get "/cart/add" do
+        "Product Added"
+      end
+
+      get "/cart/empty" do
+        "Cart Empty"
+      end
+    end
+
+    get "/cart/checkout"
+    assert_equal "You don't have permission for this resource", body
+
+    get "/cart/add"
+    assert_equal "Product Added", body
+
+    get "/cart/empty"
+    assert_equal "Cart Empty", body
+
+    get "/login"
+    assert_equal "Logged in", body
+
+    get "/cart/checkout"
+    assert_equal "Checkout", body
+
+    get "/cart/add"
+    assert_equal "Product Added", body
+
+    get "/cart/empty"
+    assert_equal "Cart Empty", body
+  end
+
+  it 'should check access control helper' do
+    mock_app do
+      register Tennpipes::Admin::AccessControl
+      enable :sessions
+
+      access_control.roles_for :any do |role|
+        role.project_module :foo, "/foo"
+        role.project_module :bar, "/bar"
+      end
+
+      access_control.roles_for :admin do |role|
+        role.project_module :admin, "/admin"
+      end
+
+      access_control.roles_for :editor do |role|
+        role.project_module :editor, "/editor"
+      end
+
+      get "/login" do
+        set_current_account(Account.admin)
+        "Logged in"
+      end
+
+      get "/roles" do
+        access_control.roles.join(", ")
+      end
+
+      get "/modules" do
+        project_modules.map { |pm| "#{pm.name} => #{pm.path}" }.join(", ")
+      end
+
+      get "/modules-prefixed" do
+        project_modules.map { |pm| "#{pm.name} => #{pm.path("/admin")}" }.join(", ")
+      end
+    end
+
+    get "/roles"
+    assert_equal "admin, editor", body
+
+    get "/modules"
+    assert_equal "foo => /foo, bar => /bar", body
+
+    get "/modules-prefixed"
+    assert_equal "foo => /admin/foo, bar => /admin/bar", body
+
+    get "/login"
+    assert_equal "Logged in", body
+
+    get "/modules"
+    assert_equal "admin => /admin", body
+  end
+end