RubyGems - trusty-cms - Versions diffs - 7.1.3 → 8.0 - Mend

trusty-cms 7.1.3 → 8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (49) hide show

checksums.yaml +4 -4
data/Gemfile.lock +118 -123
data/config/application.rb +5 -1
data/lib/string_extensions/string_extensions.rb +4 -2
data/lib/trusty_cms/version.rb +1 -1
data/spec/controllers/admin/assets_controller_spec.rb +124 -0
data/spec/controllers/admin/changes_controller_spec.rb +72 -0
data/spec/controllers/admin/configuration_controller_spec.rb +49 -0
data/spec/controllers/admin/page_attachments_controller_spec.rb +54 -0
data/spec/controllers/admin/pages_controller_spec.rb +162 -0
data/spec/controllers/admin/preferences_controller_spec.rb +44 -0
data/spec/controllers/admin/security_controller_spec.rb +85 -0
data/spec/controllers/admin/sessions_controller_spec.rb +56 -0
data/spec/controllers/admin/two_factor_controller_spec.rb +63 -0
data/spec/controllers/admin/users_controller_spec.rb +132 -0
data/spec/controllers/page_status_controller_spec.rb +66 -0
data/spec/dummy/bin/rails +3 -3
data/spec/dummy/bin/rake +2 -2
data/spec/dummy/bin/setup +21 -13
data/spec/dummy/config/application.rb +2 -0
data/spec/dummy/config/boot.rb +1 -1
data/spec/dummy/config/cable.yml +10 -0
data/spec/dummy/config/initializers/content_security_policy.rb +25 -0
data/spec/dummy/config/initializers/filter_parameter_logging.rb +6 -2
data/spec/dummy/config/initializers/inflections.rb +4 -4
data/spec/dummy/config/initializers/new_framework_defaults_7_2.rb +70 -0
data/spec/dummy/config/initializers/permissions_policy.rb +13 -0
data/spec/dummy/config/puma.rb +34 -0
data/spec/dummy/config/storage.yml +28 -1
data/spec/dummy/db/migrate/20260729201444_add_service_name_to_active_storage_blobs.active_storage.rb +22 -0
data/spec/dummy/db/migrate/20260729201445_create_active_storage_variant_records.active_storage.rb +27 -0
data/spec/dummy/db/migrate/20260729201446_remove_not_null_on_active_storage_blobs_checksum.active_storage.rb +8 -0
data/spec/dummy/public/404.html +6 -6
data/spec/dummy/public/406-unsupported-browser.html +66 -0
data/spec/dummy/public/422.html +6 -6
data/spec/dummy/public/500.html +6 -6
data/spec/dummy/public/icon.png +0 -0
data/spec/dummy/public/icon.svg +3 -0
data/spec/dummy/public/robots.txt +1 -0
data/spec/helpers/admin/configuration_helper_spec.rb +62 -0
data/spec/helpers/admin/node_helper_spec.rb +132 -0
data/spec/helpers/admin/pages_helper_spec.rb +84 -0
data/spec/helpers/application_helper_spec.rb +115 -0
data/spec/lib/string_extensions_spec.rb +41 -0
data/spec/support/active_record_encryption.rb +10 -0
data/spec/support/asset_type_registry.rb +29 -0
data/trusty_cms.gemspec +2 -1
metadata +74 -6
data/spec/controllers/assets_controller.rb +0 -66

data/spec/dummy/public/406-unsupported-browser.html ADDED Viewed

@@ -0,0 +1,66 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Your browser is not supported (406)</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <style>
+  .rails-default-error-page {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+    margin: 0;
+  }
+  .rails-default-error-page div.dialog {
+    width: 95%;
+    max-width: 33em;
+    margin: 4em auto 0;
+  }
+  .rails-default-error-page div.dialog > div {
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 12% 0;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  .rails-default-error-page h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+  .rails-default-error-page div.dialog > p {
+    margin: 0 0 1em;
+    padding: 1em;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+<body class="rails-default-error-page">
+  <!-- This file lives in public/406-unsupported-browser.html -->
+  <div class="dialog">
+    <div>
+      <h1>Your browser is not supported.</h1>
+      <p>Please upgrade your browser to continue.</p>
+    </div>
+  </div>
+</body>
+</html>

data/spec/dummy/public/422.html CHANGED Viewed

@@ -4,7 +4,7 @@
   <title>The change you wanted was rejected (422)</title>
   <meta name="viewport" content="width=device-width,initial-scale=1">
   <style>
-  body {
+  .rails-default-error-page {
     background-color: #EFEFEF;
     color: #2E2F30;
     text-align: center;
@@ -12,13 +12,13 @@
     margin: 0;
   }
-  div.dialog {
+  .rails-default-error-page div.dialog {
     width: 95%;
     max-width: 33em;
     margin: 4em auto 0;
   }
-  div.dialog > div {
+  .rails-default-error-page div.dialog > div {
     border: 1px solid #CCC;
     border-right-color: #999;
     border-left-color: #999;
@@ -31,13 +31,13 @@
     box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
   }
-  h1 {
+  .rails-default-error-page h1 {
     font-size: 100%;
     color: #730E15;
     line-height: 1.5em;
   }
-  div.dialog > p {
+  .rails-default-error-page div.dialog > p {
     margin: 0 0 1em;
     padding: 1em;
     background-color: #F7F7F7;
@@ -54,7 +54,7 @@
   </style>
 </head>
-<body>
+<body class="rails-default-error-page">
   <!-- This file lives in public/422.html -->
   <div class="dialog">
     <div>

data/spec/dummy/public/500.html CHANGED Viewed

@@ -4,7 +4,7 @@
   <title>We're sorry, but something went wrong (500)</title>
   <meta name="viewport" content="width=device-width,initial-scale=1">
   <style>
-  body {
+  .rails-default-error-page {
     background-color: #EFEFEF;
     color: #2E2F30;
     text-align: center;
@@ -12,13 +12,13 @@
     margin: 0;
   }
-  div.dialog {
+  .rails-default-error-page div.dialog {
     width: 95%;
     max-width: 33em;
     margin: 4em auto 0;
   }
-  div.dialog > div {
+  .rails-default-error-page div.dialog > div {
     border: 1px solid #CCC;
     border-right-color: #999;
     border-left-color: #999;
@@ -31,13 +31,13 @@
     box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
   }
-  h1 {
+  .rails-default-error-page h1 {
     font-size: 100%;
     color: #730E15;
     line-height: 1.5em;
   }
-  div.dialog > p {
+  .rails-default-error-page div.dialog > p {
     margin: 0 0 1em;
     padding: 1em;
     background-color: #F7F7F7;
@@ -54,7 +54,7 @@
   </style>
 </head>
-<body>
+<body class="rails-default-error-page">
   <!-- This file lives in public/500.html -->
   <div class="dialog">
     <div>

data/spec/dummy/public/icon.png ADDED Viewed

Binary file

data/spec/dummy/public/icon.svg ADDED Viewed

@@ -0,0 +1,3 @@
+<svg width="100" height="100" xmlns="http://www.w3.org/2000/svg">
+  <rect width="100%" height="100%" fill="red"/>
+</svg>

data/spec/dummy/public/robots.txt ADDED Viewed

	@@ -0,0 +1 @@
1	+ # See https://www.robotstxt.org/robotstxt.html for documentation on how to use the robots.txt file

data/spec/helpers/admin/configuration_helper_spec.rb ADDED Viewed

@@ -0,0 +1,62 @@
+require 'spec_helper'
+# Exercises Admin::ConfigurationHelper, which renders TrustyCms::Config settings
+# as read-only rows (show_config) and as edit fields (edit_config), branching on
+# whether a setting is boolean, a selector, or free text.
+describe Admin::ConfigurationHelper, type: :helper do
+  describe '#setting_for' do
+    it 'finds or initializes the config entry for a key' do
+      setting = helper.setting_for('admin.title')
+      expect(setting).to be_a(TrustyCms::Config)
+      expect(setting.key).to eq('admin.title')
+    end
+    it 'memoizes into @trusty_config' do
+      helper.setting_for('admin.title')
+      expect(helper.instance_variable_get(:@trusty_config)).to have_key('admin.title')
+    end
+  end
+  describe '#definition_for' do
+    it 'returns the setting definition' do
+      expect(helper.definition_for('admin.title')).to eq(TrustyCms.config.definition_for('admin.title'))
+    end
+  end
+  describe '#show_config' do
+    it 'renders a label and value span for a text setting' do
+      html = helper.show_config('admin.title')
+      expect(html).to include('<label')
+      expect(html).to include('id="admin_title"')
+    end
+    it 'renders yes/no for a boolean setting' do
+      html = helper.show_config('assets.create_image_thumbnails?')
+      expect(html).to match(/yes|no/i)
+    end
+    it 'includes a units span for a setting with units' do
+      html = helper.show_config('assets.max_asset_size')
+      expect(html).to include('class="units"')
+    end
+  end
+  describe '#edit_config' do
+    it 'renders a text field for a plain text setting' do
+      html = helper.edit_config('admin.title')
+      expect(html).to include('type="text"')
+      expect(html).to include('name="trusty_config[admin.title]"')
+    end
+    it 'renders a checkbox (plus hidden field) for a boolean setting' do
+      html = helper.edit_config('assets.create_image_thumbnails?')
+      expect(html).to include('type="checkbox"')
+      expect(html).to include('type="hidden"')
+    end
+    it 'renders a select for a selector setting' do
+      html = helper.edit_config('defaults.page.status')
+      expect(html).to include('<select')
+    end
+  end
+end

data/spec/helpers/admin/node_helper_spec.rb ADDED Viewed

@@ -0,0 +1,132 @@
+require 'spec_helper'
+# Exercises Admin::NodeHelper, which renders the admin page-tree nodes. The
+# partial-rendering entry points are driven with `render` stubbed (the real
+# partials need the full admin layout), while the node-presentation helpers
+# (title, icon, expander, expansion state) are exercised directly.
+describe Admin::NodeHelper, type: :helper do
+  let!(:home) { FactoryBot.create(:home, title: 'Home') }
+  let(:page) { FactoryBot.create(:page, title: 'Child', slug: 'child', parent: home) }
+  before do
+    # image() lives in ApplicationHelper (not mixed into this helper) and returns
+    # an <img> tag; stub it so the presentation helpers can be tested in isolation.
+    allow(helper).to receive(:image) { |name, *| "<img data-name='#{name}'/>".html_safe }
+    allow(helper).to receive(:cookies).and_return({})
+  end
+  describe '#prepare_page' do
+    it 'extends the page with MenuRenderer and wires up the view' do
+      result = helper.prepare_page(page)
+      expect(result).to be(page)
+      expect(result.view).to be(helper)
+    end
+  end
+  describe '#homepage' do
+    it 'returns the page with no parent' do
+      expect(helper.homepage).to eq(home)
+    end
+  end
+  describe '#show_all?' do
+    it 'is true only on the remove action' do
+      allow(helper.controller).to receive(:action_name).and_return('remove')
+      expect(helper.show_all?).to be(true)
+      allow(helper.controller).to receive(:action_name).and_return('index')
+      expect(helper.show_all?).to be(false)
+    end
+  end
+  describe '#expanded_rows' do
+    it 'parses the expanded_rows cookie and always includes the homepage' do
+      allow(helper).to receive(:cookies).and_return(expanded_rows: "#{page.id},not-a-number")
+      rows = helper.expanded_rows
+      expect(rows).to include(page.id)
+      expect(rows).to include(home.id) # homepage is always expanded
+    end
+    it 'defaults to just the homepage when no cookie is set' do
+      expect(helper.expanded_rows).to eq([home.id])
+    end
+  end
+  # @current_node is normally set by render_node; set it directly so the
+  # presentation helpers (which read it) can be exercised in isolation.
+  def make_current(a_page)
+    helper.instance_variable_set(:@current_node, helper.prepare_page(a_page))
+  end
+  describe 'node presentation' do
+    before { make_current(page) }
+    describe '#expanded' do
+      it 'is true on the remove action regardless of cookie state' do
+        allow(helper).to receive(:show_all?).and_return(true)
+        expect(helper.expanded).to be(true)
+      end
+    end
+    describe '#expander' do
+      it 'is blank at the top level' do
+        expect(helper.expander(0)).to eq('')
+      end
+      it 'is blank for a childless node' do
+        make_current(page) # child has no children
+        expect(helper.expander(1)).to eq('')
+      end
+      it 'renders a toggle image for a node with children at a nested level' do
+        make_current(home) # home has the child page
+        expect(helper.expander(1)).to include('<img')
+      end
+    end
+    describe '#icon' do
+      it 'renders an icon image' do
+        expect(helper.icon).to include('<img')
+      end
+    end
+    describe '#node_title' do
+      it 'wraps the escaped title in a span' do
+        expect(helper.node_title).to eq(%{<span class="title">Child</span>})
+      end
+    end
+    describe '#page_type' do
+      it 'is blank for a plain Page' do
+        expect(helper.page_type).to eq('')
+      end
+    end
+    describe '#spinner' do
+      it 'renders a hidden spinner image' do
+        expect(helper.spinner).to include('<img')
+      end
+    end
+  end
+  describe 'rendering entry points' do
+    before { allow(helper).to receive(:render).and_return('<node/>'.html_safe) }
+    it '#render_node accumulates rendered HTML and returns the index' do
+      helper.instance_variable_set(:@rendered_html, '') # normally done by render_nodes
+      expect(helper.render_node(page, 2)).to eq(2)
+      expect(helper.instance_variable_get(:@rendered_html)).to eq('<node/>')
+    end
+    it '#render_nodes resets and returns the accumulated HTML' do
+      expect(helper.render_nodes(page, 0)).to eq('<node/>')
+    end
+    it '#render_search_node renders the search partial' do
+      helper.render_search_node(page)
+      expect(helper.instance_variable_get(:@rendered_html)).to eq('<node/>')
+    end
+  end
+end

data/spec/helpers/admin/pages_helper_spec.rb ADDED Viewed

@@ -0,0 +1,84 @@
+require 'spec_helper'
+# Exercises Admin::PagesHelper — small presentation helpers used by the page
+# editor (class/filter lookups, meta-error detection, description cleanup,
+# parent-page select options, and the revert confirmation copy).
+describe Admin::PagesHelper, type: :helper do
+  describe '#class_of_page' do
+    it 'returns the assigned page class' do
+      helper.instance_variable_set(:@page, Page.new)
+      expect(helper.class_of_page).to eq(Page)
+    end
+  end
+  describe '#filter' do
+    it "returns the first part's filter when parts are present" do
+      part = double('PagePart', filter: 'markdown')
+      helper.instance_variable_set(:@page, double('Page', parts: [part]))
+      expect(helper.filter).to eq('markdown')
+    end
+    it 'returns nil when there are no parts' do
+      helper.instance_variable_set(:@page, double('Page', parts: []))
+      expect(helper.filter).to be_nil
+    end
+  end
+  describe '#meta_errors?' do
+    # Admin::PagesHelper#meta_errors? is shadowed by ApplicationHelper#meta_errors?
+    # in the view ancestry, so `helper.meta_errors?` would call the wrong one.
+    # Bind this module's implementation to the helper to exercise it directly.
+    def meta_errors?
+      Admin::PagesHelper.instance_method(:meta_errors?).bind(helper).call
+    end
+    it 'is true when slug has an error' do
+      page = Page.new
+      page.errors.add(:slug, 'is invalid')
+      helper.instance_variable_set(:@page, page)
+      expect(meta_errors?).to be(true)
+    end
+    # NOTE: latent bug — errors[:attr] returns an array, and an empty array is
+    # truthy, so `!!(errors[:slug] or errors[:breadcrumb])` is true even with no
+    # meta errors. This implementation always returns true; characterizing it.
+    it 'also (incorrectly) returns true when there are no meta errors' do
+      helper.instance_variable_set(:@page, Page.new)
+      expect(meta_errors?).to be(true)
+    end
+  end
+  describe '#clean_page_description' do
+    it 'strips leading/trailing whitespace and collapses internal runs' do
+      page = double('Page', description: '  hello    world  ')
+      expect(helper.clean_page_description(page)).to eq('hello world')
+    end
+    it 'removes tab characters entirely' do
+      page = double('Page', description: "tab\there")
+      expect(helper.clean_page_description(page)).to eq('tabhere')
+    end
+  end
+  describe '#parent_page_options' do
+    it 'builds options_for_select from the available parent pages' do
+      home = FactoryBot.create(:home, title: 'Home')
+      child = FactoryBot.create(:page, title: 'Child', slug: 'child', parent: home)
+      current_site = double('Site', homepage_id: home.id)
+      allow(Page).to receive(:parent_pages).with(home.id).and_return([home])
+      html = helper.parent_page_options(current_site, child)
+      expect(html).to include('Home')
+      expect(html).to include("value=\"#{home.id}\"")
+    end
+  end
+  describe '#revert_confirmation_message' do
+    it 'includes the version date and time' do
+      message = helper.revert_confirmation_message(update_date: 'July 29, 2026', update_time: '10:00 AM')
+      expect(message).to include('July 29, 2026')
+      expect(message).to include('10:00 AM')
+    end
+  end
+end

data/spec/helpers/application_helper_spec.rb CHANGED Viewed

@@ -99,4 +99,119 @@ describe ApplicationHelper, type: :helper do
       expect(helper.body_classes).to eq(['reversed'])
     end
   end
+  describe '#onsubmit_status' do
+    it 'reports a creating status for a new record' do
+      expect(helper.onsubmit_status(Snippet.new)).to match(/creat/i)
+    end
+    it 'reports a saving status for a persisted record' do
+      snippet = FactoryBot.create(:snippet, name: 'saved')
+      expect(helper.onsubmit_status(snippet)).to match(/saving/i)
+    end
+  end
+  describe '#save_model_button' do
+    it 'labels the button Create for a new record' do
+      html = helper.save_model_button(Snippet.new)
+      expect(html).to include('type="submit"')
+      expect(html).to match(/Create/)
+    end
+    it 'labels the button Save Changes for a persisted record' do
+      snippet = FactoryBot.create(:snippet, name: 'persisted')
+      expect(helper.save_model_button(snippet)).to match(/Save Changes/)
+    end
+  end
+  describe '#save_model_and_continue_editing_button' do
+    it 'renders a continue submit button' do
+      html = helper.save_model_and_continue_editing_button(Snippet.new)
+      expect(html).to include('name="continue"')
+    end
+  end
+  describe '#image' do
+    # Stub image_tag so the test exercises the path-building logic without doing
+    # a real asset-pipeline lookup (which warns for assets not in the pipeline).
+    before { allow(helper).to receive(:image_tag) { |path, _opts| path } }
+    it 'builds an admin image path, defaulting the extension to .png' do
+      helper.image('foo', alt: 'Foo')
+      expect(helper).to have_received(:image_tag).with('admin/foo.png', { alt: 'Foo' })
+    end
+    it 'keeps an explicit extension' do
+      helper.image('bar.gif')
+      expect(helper).to have_received(:image_tag).with('admin/bar.gif', {})
+    end
+  end
+  describe '#timestamp' do
+    it 'localizes the time with the :timestamp format' do
+      time = Time.zone.local(2026, 7, 29, 10, 0, 0)
+      expect(helper.timestamp(time)).to eq(I18n.localize(time, format: :timestamp))
+    end
+  end
+  describe '#updated_stamp' do
+    it 'returns nil for a new record' do
+      expect(helper.updated_stamp(Snippet.new)).to be_nil
+    end
+    it 'renders an updated line for a persisted record' do
+      snippet = FactoryBot.create(:snippet, name: 'stamped')
+      html = helper.updated_stamp(snippet)
+      expect(html).to include('updated_line')
+    end
+  end
+  describe 'asset overrides' do
+    it 'returns no stylesheet overrides when the override files are absent' do
+      expect(helper.stylesheet_overrides).to eq([])
+    end
+    it 'returns no javascript overrides when the override file is absent' do
+      expect(helper.javascript_overrides).to eq([])
+    end
+    it 'includes the stylesheet override when the file exists' do
+      allow(File).to receive(:exist?).and_return(true)
+      expect(helper.stylesheet_overrides).to eq(['admin/overrides'])
+    end
+    it 'includes the javascript override when the file exists' do
+      allow(File).to receive(:exist?).and_return(true)
+      expect(helper.javascript_overrides).to eq(['admin/overrides'])
+    end
+  end
+  describe '#current_url?' do
+    it 'matches the current request path' do
+      allow(helper.request).to receive(:original_fullpath).and_return('/admin/pages/1/edit')
+      expect(helper.current_url?('/admin/pages')).to be_truthy
+    end
+    it 'does not match an unrelated path' do
+      allow(helper.request).to receive(:original_fullpath).and_return('/admin/snippets')
+      expect(helper.current_url?('/admin/pages')).to be_falsey
+    end
+  end
+  describe '#current_tab?' do
+    it 'is true for a tab containing the current url and memoizes it' do
+      item = double('NavItem', relative_url: '/admin/pages')
+      tab = [item]
+      allow(helper).to receive(:current_url?).with('/admin/pages').and_return(true)
+      expect(helper.current_tab?(tab)).to be(true)
+      expect(helper.instance_variable_get(:@current_tab)).to eq(tab)
+    end
+  end
+  describe '#pagination_for' do
+    it 'returns nil for a collection that is not paginatable' do
+      expect(helper.pagination_for(%w[a b c])).to be_nil
+    end
+  end
 end

data/spec/lib/string_extensions_spec.rb CHANGED Viewed

@@ -44,5 +44,46 @@ describe 'String extensions' do
       expect('Hello World'.slugify).to eq('hello-world')
       expect('Hello World'.slugerize).to eq('hello-world')
     end
+    it 'downcases by default' do
+      expect('Hello World'.parameterize).to eq('hello-world')
+    end
+    it 'preserves case when preserve_case: true' do
+      expect('Hello World'.parameterize(preserve_case: true)).to eq('Hello-World')
+    end
+    it 'uses a custom string separator' do
+      expect('Hello World'.parameterize('_')).to eq('hello_world')
+    end
+    it 'honours the separator and preserve_case together' do
+      expect('Hello World'.parameterize('_', preserve_case: true)).to eq('Hello_World')
+    end
+    # The upgrade added the guard `separator = '-' unless separator.is_a?(String)`
+    # so that Rails internals passing a non-String (e.g. a Symbol or nil)
+    # fall back to the default rather than blowing up.
+    it 'falls back to a dash when the separator is not a String' do
+      expect('Hello World'.parameterize(:_)).to eq('hello-world')
+      expect('Hello World'.parameterize(nil)).to eq('hello-world')
+    end
+    # `locale:` is part of the ActiveSupport-compatible signature; accepted and ignored.
+    it 'accepts a locale keyword without raising' do
+      expect('Hello World'.parameterize(locale: :en)).to eq('hello-world')
+    end
+    it 'transliterates accented characters before downcasing' do
+      expect('Café Déjà Vu'.parameterize).to eq('cafe-deja-vu')
+    end
+    it 'collapses repeated whitespace into a single separator' do
+      expect('Hello   World'.parameterize).to eq('hello-world')
+    end
+    it 'returns an empty string for an empty string' do
+      expect(''.parameterize).to eq('')
+    end
   end
 end

data/spec/support/active_record_encryption.rb ADDED Viewed

@@ -0,0 +1,10 @@
+# The app configures ActiveRecord::Encryption from ENV vars (see
+# config/initializers/active_record_encryption.rb), which are unset in the test
+# environment. Without keys, writing an encrypted attribute (e.g. User#otp_secret
+# from devise-two-factor) raises a Configuration error. Configure deterministic
+# test keys here so specs can exercise encrypted attributes.
+ActiveRecord::Encryption.configure(
+  primary_key: 'test_primary_key_for_specs_only_0001',
+  deterministic_key: 'test_deterministic_key_for_specs_0001',
+  key_derivation_salt: 'test_key_derivation_salt_for_specs_0001'
+)

data/spec/support/asset_type_registry.rb ADDED Viewed

@@ -0,0 +1,29 @@
+# AssetType keeps its registry in class variables (@@types, @@type_lookup,
+# @@default_type memoized by .catchall) with no reset hook, so registrations
+# persist for the whole suite. Rather than snapshot/restore around individual
+# specs — which desyncs the memoized catchall when a type is removed and later
+# re-registered as a fresh object — every spec that needs asset types registers
+# the SAME canonical definitions, guarded by `.known?`. Whichever spec runs
+# first wins; the rest are no-ops. Definitions here mirror spec/models/asset_spec.rb
+# so nothing gets shadowed by a thinner definition.
+module AssetTypeRegistry
+  def register_standard_asset_types
+    unless AssetType.known?(:image)
+      AssetType.new(:image, icon: 'image', styles: :standard,
+                            extensions: %w[jpg jpeg png gif],
+                            mime_types: %w[image/png image/x-png image/jpeg image/pjpeg image/jpg image/gif])
+    end
+    unless AssetType.known?(:video)
+      AssetType.new(:video, icon: 'video',
+                            mime_types: %w[video/mp4 video/mpeg video/quicktime video/webm])
+    end
+    unless AssetType.known?(:document)
+      AssetType.new(:document, icon: 'document',
+                               mime_types: %w[application/msword application/rtf text/plain text/html])
+    end
+  end
+end
+RSpec.configure do |config|
+  config.include AssetTypeRegistry
+end

data/trusty_cms.gemspec CHANGED Viewed

@@ -42,6 +42,7 @@ a general purpose content management system--not merely a blogging engine.'
   s.add_dependency 'highline', '>= 1.7.8', '< 3.2.0'
   s.add_dependency 'image_processing'
   s.add_dependency 'kraken-io'
+  s.add_dependency 'mini_magick', '~> 5.0'
   s.add_dependency 'mini_racer'
   s.add_dependency 'mutex_m'
   s.add_dependency 'mysql2'
@@ -51,7 +52,7 @@ a general purpose content management system--not merely a blogging engine.'
   s.add_dependency 'rack', '>= 2.0.1', '< 3.2.0'
   s.add_dependency 'rack-cache', '~> 1.7'
   s.add_dependency 'radius', '~> 0.8'
-  s.add_dependency 'rails', '~> 7.2.2.1'
+  s.add_dependency 'rails', '~> 8.0.0'
   s.add_dependency 'rake', '< 14.0'
   s.add_dependency 'ransack', '~> 4.2.1'
   s.add_dependency 'rdoc', '>= 5.1', '< 9.0'