tight-engine 0.0.1 → 0.0.2

data/lib/tight-engine/url.rb

@@ -0,0 +1,27 @@
+module Tight
+  module Engine
+    module Url
+      def se_url( obj, method = :show, opts = {} )
+        if method.kind_of? Hash
+          opts = method
+          method = :show
+        end
+        url = case obj
+        when NewsArticle
+          '/news' / method / obj.slug
+        when FormsCard
+          '/forms' / method / obj.slug
+        when Page
+          obj.path
+        else
+          swift.module_root ? swift.module_root / method / obj.slug : '/'
+        end
+        if opts[:absolute]
+          absolute_url url
+        else
+          url
+        end
+      end
+    end
+  end
+end

data/lib/tight-engine/utils.rb

@@ -0,0 +1,62 @@
+require 'uri'
+require 'cgi'
+
+module Tight
+  module Engine
+    module Utils
+      def report_error( error, subsystem = 'system', fallback = nil )
+        @_out_buf ||= ''.html_safe # !!! FIXME this might be fixed at tilt 1.3.8+
+        if Padrino.env == :production
+          messages = ''
+          [ "Swift caught a runtime error at #{subsystem}",
+            "Fallback for development was #{fallback||'empty'}, production displayed empty string.",
+            error.message,
+          ].each do |message|
+            logger.error message
+            messages << message + "\r\n"
+          end
+          error.backtrace.reject{ |e| e.match /phusion_passenger/ }.each do |step|
+            logger << step
+            messages << step + "\r\n"
+          end
+          swift.error_messages ||= []
+          swift.error_messages << messages
+          ''
+        else
+          fallback || raise
+        end
+      end
+
+      def url_replace( target, *args )
+        uri = URI.parse(URI::DEFAULT_PARSER.escape target)
+        uri.path = CGI.escape(args.first)  if args.first.kind_of?(String)
+        if args.last.kind_of?(Hash)
+          query = uri.query ? CGI.parse(uri.query) : {}
+          args.last.each{ |k,v| v ? query[k.to_s] = v.to_s : query.delete(k.to_s) }
+          uri.query = query.any? && URI.encode_www_form(query)
+        end
+        CGI.unescape(uri.to_s)
+      end
+
+      def mk_datetime(date, time)
+        DateTime.new date.year, date.month, date.day, time.hour, time.min, time.sec
+      end
+
+      def show_asset(asset, options={})
+        @file = asset
+        @opts = options
+        element_view 'File/view'
+      end
+
+      def icon_for(filename)
+        iconfile = 'images/extname/16/file_extension_'+File.extname(filename)[1..-1]+'.png'
+        iconpath = Padrino.root('public', iconfile)
+        if File.file?(iconpath)
+          image_tag '/'+iconfile
+        else
+          image_tag '/images/extname/16/file_extension_bin.png'
+        end
+      end
+    end
+  end
+end

data/lib/tight-engine/version.rb

@@ -0,0 +1,5 @@
+module Tight
+  module Engine
+    VERSION = '0.0.2'
+  end
+end

data/tight-engine.gemspec

@@ -1,9 +1,9 @@
 $LOAD_PATH << File.expand_path('../lib', __FILE__)
-require 'tight/version'
+require 'tight-engine/version'
 
 Gem::Specification.new do |spec|
   spec.name          = 'tight-engine'
-  spec.version       = Tight::VERSION
+  spec.version       = Tight::Engine::VERSION
   spec.description   = 'Tight engine for Swift CMS'
   spec.summary       = 'A tight engine for a swift content management system'
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tight-engine
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
 platform: ruby
 authors:
 - Igor Bochkariov
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-03-12 00:00:00.000000000 Z
+date: 2014-07-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -74,21 +74,19 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".gitignore"
+- Gemfile
 - LICENSE
 - README.md
 - Rakefile
-- lib/tight-auth.rb
-- lib/tight-auth/access.rb
-- lib/tight-auth/login.rb
-- lib/tight-auth/login/controller.rb
-- lib/tight-auth/login/layout.slim
-- lib/tight-auth/login/new.slim
-- lib/tight-auth/permissions.rb
-- lib/tight/version.rb
-- test/auth_helper.rb
-- test/test_padrino_access.rb
-- test/test_padrino_auth.rb
-- test/test_padrino_login.rb
+- lib/tight-engine.rb
+- lib/tight-engine/defer.rb
+- lib/tight-engine/init.rb
+- lib/tight-engine/locale.rb
+- lib/tight-engine/render.rb
+- lib/tight-engine/template.rb
+- lib/tight-engine/url.rb
+- lib/tight-engine/utils.rb
+- lib/tight-engine/version.rb
 - tight-engine.gemspec
 homepage: https://github.com/ujifgc/tight-engine
 licenses:
@@ -114,9 +112,5 @@ rubygems_version: 2.2.2
 signing_key: 
 specification_version: 4
 summary: A tight engine for a swift content management system
-test_files:
-- test/auth_helper.rb
-- test/test_padrino_access.rb
-- test/test_padrino_auth.rb
-- test/test_padrino_login.rb
+test_files: []
 has_rdoc: 

data/lib/tight-auth.rb

@@ -1,10 +0,0 @@
-require 'sinatra/base'
-
-class Sinatra::Base
-  def self.default(option, *args, &block)
-    set(option, *args, &block) unless respond_to?(option)
-  end
-end
-
-require 'tight-auth/access'
-require 'tight-auth/login'

data/lib/tight-auth/access.rb

@@ -1,148 +0,0 @@
-require 'tight-auth/permissions'
-
-module Tight
-  ##
-  # Tight authorization module.
-  #
-  # @example
-  #   class Nifty::Application < Tight::Application
-  #     # optional settings
-  #     set :credentials_reader, :visitor # the name of getter method in helpers
-  #     # required statement
-  #     register Tight::Access
-  #     # example persistance storage
-  #     enable :sessions
-  #   end
-  #
-  #   # optional helpers
-  #   Nifty::Application.helpers do
-  #     def visitor
-  #       session[:visitor] ||= Visitor.guest_account
-  #     end
-  #   end
-  #
-  #   # example visitor model
-  #   module Visitor
-  #     extend self
-  #     def guest_account
-  #       OpenStruct.new(:role => :guest, :id => 1)
-  #     end
-  #   end
-  #
-  #   # example controllers
-  #   Nifty::Application.controller :public_area do
-  #     set_access :*
-  #     get(:index){ 'public content' }
-  #   end
-  #   Nifty::Application.controller :members_area do
-  #     set_access :member
-  #     get(:index){ 'secret content' }
-  #   end
-  #   Nifty::Application.controller :login do
-  #     set_access :*
-  #     get(:index){ session[:visitor] = OpenStruct.new(:role => :guest, :id => 1) }
-  #   end
-  #
-  module Access
-    class << self
-      def registered(app)
-        included(app)
-        app.default(:credentials_reader, :credentials)
-        app.default(:access_errors, true)
-        app.send :attr_reader, app.credentials_reader unless app.instance_methods.include?(app.credentials_reader)
-        app.set :permissions, Permissions.new
-        app.login_permissions if app.respond_to?(:login_permissions)
-        app.before do
-          authorized? || error(403, '403 Forbidden')
-        end
-      end
-
-      def included(base)
-        base.send(:include, InstanceMethods)
-        base.extend(ClassMethods)
-      end
-    end
-
-    module ClassMethods
-      ##
-      # Empties the list of permission.
-      #
-      def reset_access!
-        permissions.clear!
-      end
-
-      ##
-      # Allows access to action with objects.
-      #
-      # @example
-      #   # in application
-      #   set_access :*, :with => :login # allows everyone to interact with :login controller
-      #   # in controller
-      #   App.controller :members_area do
-      #     set_access :member # allows all members to access :members_area controller
-      #   end
-      #
-      def set_access(*args)
-        options = args.extract_options!
-        options[:object] ||= Array(@_controller).first.to_s.singularize.to_sym if @_controller.present?
-        permissions.add(*args, options)
-      end
-    end
-
-    module InstanceMethods
-      ##
-      # Checks if current visitor has access to current action with current controller.
-      #
-      def authorized?
-        access_action?
-      end
-
-      ##
-      # Returns current visitor.
-      #
-      def access_subject
-        send settings.credentials_reader
-      end
-
-      ##
-      # Checks if current visitor is one of the specified roles. Can accept a block.
-      #
-      def access_role?(*roles, &block)
-        settings.permissions.check(access_subject, :have => roles, &block)
-      end
-
-      ##
-      # Checks if current visitor is allowed to to the action with object. Can accept a block.
-      #
-      def access_action?(action = nil, object = nil, &block)
-        return true if response.status/100 == 4 && settings.access_errors
-        if respond_to?(:request) && action.nil? && object.nil?
-          object = request.controller
-          action = request.action
-          if object.nil? && action.present? && action.to_s.index('/')
-            object, action = request.env['PATH_INFO'].to_s.scan(/\/([^\/]*)/).map(&:first)
-          end
-          object ||= :''
-          action ||= :index
-          object = object.to_sym
-          action = action.to_sym
-        end
-        settings.permissions.check(access_subject, :allow => action, :with => object, &block)
-      end
-
-      ##
-      # Check if current visitor is allowed to interact with object by action. Can accept a block.
-      #
-      def access_object?(object = nil, action = nil, &block)
-        allow_action action, object, &block
-      end
-
-      ##
-      # Populates the list of objects the current visitor is allowed to interact with.
-      #
-      def access_objects(subject = access_subject, action = nil)
-        settings.permissions.find_objects(subject, action)
-      end
-    end
-  end
-end

data/lib/tight-auth/login.rb

@@ -1,138 +0,0 @@
-require 'tight-auth/login/controller'
-
-module Tight
-  ##
-  # Tight authentication module.
-  #
-  # @example
-  #   class Nifty::Application < Tight::Application
-  #     # optional settings
-  #     set :session_key, "visitor_id"       # visitor key name in session storage, defaults to "_login_#{app.app_name}")
-  #     set :login_model, :visitor          # model name for visitor storage, defaults to :account, must be constantizable
-  #     set :credentials_accessor, :visitor # the name of setter/getter method in helpers, defaults to :credentials
-  #     enable :login_bypass                # enables or disables login bypass in development mode, defaults to disable
-  #     set :login_url, '/sign/in'          # sets the utl to be redirected to if not logged in and in restricted area, defaults to '/login'
-  #     disable :login_permissions          # sets initial login permissions, defaults to { set_access(:*, :allow => :*, :with => :login) }
-  #     disable :login_controller           # disables default login controller to show an example of the custom one
-  #
-  #     # required statement
-  #     register Tight::Login
-  #     # example persistance storage
-  #     enable :sessions
-  #   end
-  #
-  #   TODO: example controllers
-  #
-  module Login
-    class << self
-      def registered(app)
-        warn 'Tight::Login must be registered before Tight::Access' if app.respond_to?(:set_access)
-        included(app)
-        setup_storage(app)
-        setup_controller(app)
-        app.before do
-          log_in if authorization_required?
-        end
-      end
-
-      def included(base)
-        base.send(:include, InstanceMethods)
-      end
-
-      private
-
-      def setup_storage(app)
-        app.default(:session_key, "_login_#{app.app_name}")
-        app.default(:login_model, :account)
-        app.default(:credentials_accessor, :credentials)
-        app.send :attr_reader, app.credentials_accessor unless app.instance_methods.include?(app.credentials_accessor)
-        app.send :attr_writer, app.credentials_accessor unless app.instance_methods.include?(:"#{app.credentials_accessor}=")
-        app.default(:login_bypass, false)
-      end
-
-      def setup_controller(app)
-        app.default(:login_url, '/login')
-        app.default(:login_permissions) { set_access(:*, :allow => :*, :with => :login) }
-        app.default(:login_controller, true)
-        app.controller(:login) { include Controller } if app.login_controller
-      end
-    end
-
-    module InstanceMethods
-      # Returns the model used to authenticate visitors.
-      def login_model
-        @login_model ||= settings.login_model.to_s.classify.constantize
-      end
-
-      # Authenticates the visitor.
-      def authenticate
-        resource = login_model.authenticate(:email => params[:email], :password => params[:password])
-        resource ||= login_model.authenticate(:bypass => true) if settings.login_bypass && params[:bypass]
-        save_credentials(resource)
-      end
-
-      # Checks if the visitor is authenticated.
-      def logged_in?
-        !!(send(settings.credentials_accessor) || restore_credentials)
-      end
-
-      # Looks for authorization routine and calls it to check if the visitor is authorized.
-      def unauthorized?
-        respond_to?(:authorized?) && !authorized?
-      end
-
-      # Checks if the current location needs the visitor to be authorized.
-      def authorization_required?
-        if logged_in?
-          if unauthorized?
-            # 403 Forbidden, provided credentials were successfully
-            # authenticated but the credentials still do not grant
-            # the client permission to access the resource
-            error 403, '403 Forbidden'
-          else
-            false
-          end
-        else
-          unauthorized?
-        end
-      end
-
-      # Logs the visitor in using redirect to login page url.
-      def log_in
-        login_url = settings.login_url
-        if request.env['PATH_INFO'] != login_url
-          save_location
-          # 302 Found
-          redirect url(login_url) 
-          # 401 Unauthorized, authentication is required and
-          # has not yet been provided
-          error 401, '401 Unauthorized'
-        end
-      end
-
-      # Saves credentials in session.
-      def save_credentials(resource)
-        session[settings.session_key] = resource.respond_to?(:id) ? resource.id : resource
-        send(:"#{settings.credentials_accessor}=", resource)
-      end
-
-      # Restores credentials from session using visitor model.
-      def restore_credentials
-        resource = login_model.authenticate(:id => session[settings.session_key])
-        send(:"#{settings.credentials_accessor}=", resource)
-      end
-
-      # Redirects back to saved location or '/'
-      def restore_location
-        redirect session.delete(:return_to) || url('/')
-      end
-
-      # Saves location to session for following redirect in case of successful authentication.
-      def save_location
-        uri = env['REQUEST_URI'] || url(env['PATH_INFO'])
-        return if uri.blank? || uri.match(/\.css$|\.js$|\.png$/)
-        session[:return_to] = "#{ENV['RACK_BASE_URI']}#{uri}"
-      end
-    end
-  end
-end