RubyGems - unsakini - Versions diffs - 0.0.0 - Mend

unsakini 0.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (184) hide show

checksums.yaml +7 -0
data/MIT-LICENSE +20 -0
data/README.md +28 -0
data/Rakefile +34 -0
data/angular/README.md +31 -0
data/angular/angular-cli.json +59 -0
data/angular/karma.conf.js +45 -0
data/angular/package.json +49 -0
data/angular/protractor.conf.js +32 -0
data/angular/src/app/app.component.css +0 -0
data/angular/src/app/app.component.html +4 -0
data/angular/src/app/app.component.spec.ts +47 -0
data/angular/src/app/app.component.ts +10 -0
data/angular/src/app/app.module.ts +29 -0
data/angular/src/app/app.routes.module.ts +29 -0
data/angular/src/app/index.ts +2 -0
data/angular/src/app/registration/registration.component.css +0 -0
data/angular/src/app/registration/registration.component.html +14 -0
data/angular/src/app/registration/registration.component.spec.ts +157 -0
data/angular/src/app/registration/registration.component.ts +42 -0
data/angular/src/environments/environment.prod.ts +3 -0
data/angular/src/environments/environment.ts +8 -0
data/angular/src/favicon.ico +0 -0
data/angular/src/index.html +14 -0
data/angular/src/main.ts +12 -0
data/angular/src/polyfills.ts +19 -0
data/angular/src/styles.css +1 -0
data/angular/src/test.ts +31 -0
data/angular/src/tsconfig.json +18 -0
data/angular/src/typings.d.ts +2 -0
data/angular/tslint.json +114 -0
data/angular/typings.json +4 -0
data/app/controllers/api/boards_controller.rb +67 -0
data/app/controllers/api/comments_controller.rb +51 -0
data/app/controllers/api/posts_controller.rb +58 -0
data/app/controllers/api/share_board_controller.rb +118 -0
data/app/controllers/api/users_controller.rb +27 -0
data/app/controllers/application_controller.rb +5 -0
data/app/controllers/concerns/board_owner_controller_concern.rb +38 -0
data/app/controllers/concerns/comment_owner_controller_concern.rb +33 -0
data/app/controllers/concerns/logged_in_controller_concern.rb +21 -0
data/app/controllers/concerns/post_owner_controller_concern.rb +36 -0
data/app/controllers/concerns/serializer_controller_concern.rb +11 -0
data/app/controllers/user_token_controller.rb +2 -0
data/app/controllers/web_base_controller.rb +11 -0
data/app/models/application_record.rb +5 -0
data/app/models/board.rb +14 -0
data/app/models/comment.rb +9 -0
data/app/models/concerns/encryptable_model_concern.rb +96 -0
data/app/models/post.rb +12 -0
data/app/models/user.rb +6 -0
data/app/models/user_board.rb +71 -0
data/app/serializers/board_serializer.rb +5 -0
data/app/serializers/comment_serializer.rb +10 -0
data/app/serializers/post_serializer.rb +23 -0
data/app/serializers/user_board_serializer.rb +10 -0
data/app/serializers/user_serializer.rb +6 -0
data/config/initializers/unsakini.rb +4 -0
data/config/routes.rb +22 -0
data/db/migrate/20161116114222_create_boards.rb +9 -0
data/db/migrate/20161116200034_create_user_boards.rb +11 -0
data/db/migrate/20161118031023_create_posts.rb +12 -0
data/db/migrate/20161118100454_create_comments.rb +11 -0
data/db/migrate/20161118221508_add_encrypted_password_to_user_board.rb +5 -0
data/db/migrate/20161122211105_create_users.rb +12 -0
data/lib/generators/unsakini/angular/USAGE +8 -0
data/lib/generators/unsakini/angular/angular_generator.rb +7 -0
data/lib/generators/unsakini/config/USAGE +8 -0
data/lib/generators/unsakini/config/config_generator.rb +7 -0
data/lib/generators/unsakini/config/templates/unsakini.rb +4 -0
data/lib/tasks/unsakini_tasks.rake +33 -0
data/lib/unsakini/engine.rb +30 -0
data/lib/unsakini/version.rb +3 -0
data/lib/unsakini.rb +5 -0
data/spec/concerns/models/encryptable_concern.rb +40 -0
data/spec/dummy/Rakefile +6 -0
data/spec/dummy/angular/README.md +31 -0
data/spec/dummy/angular/angular-cli.json +59 -0
data/spec/dummy/angular/e2e/app.e2e-spec.ts +14 -0
data/spec/dummy/angular/e2e/app.po.ts +11 -0
data/spec/dummy/angular/e2e/signup.e2e-spec.ts +28 -0
data/spec/dummy/angular/e2e/signup.po.ts +31 -0
data/spec/dummy/angular/e2e/tsconfig.json +16 -0
data/spec/dummy/angular/karma.conf.js +45 -0
data/spec/dummy/angular/package.json +50 -0
data/spec/dummy/angular/protractor.conf.js +32 -0
data/spec/dummy/angular/src/app/app.component.css +0 -0
data/spec/dummy/angular/src/app/app.component.html +4 -0
data/spec/dummy/angular/src/app/app.component.spec.ts +47 -0
data/spec/dummy/angular/src/app/app.component.ts +10 -0
data/spec/dummy/angular/src/app/app.module.ts +29 -0
data/spec/dummy/angular/src/app/app.routes.module.ts +29 -0
data/spec/dummy/angular/src/app/index.ts +2 -0
data/spec/dummy/angular/src/app/registration/registration.component.css +0 -0
data/spec/dummy/angular/src/app/registration/registration.component.html +14 -0
data/spec/dummy/angular/src/app/registration/registration.component.spec.ts +157 -0
data/spec/dummy/angular/src/app/registration/registration.component.ts +42 -0
data/spec/dummy/angular/src/environments/environment.prod.ts +3 -0
data/spec/dummy/angular/src/environments/environment.ts +8 -0
data/spec/dummy/angular/src/favicon.ico +0 -0
data/spec/dummy/angular/src/index.html +14 -0
data/spec/dummy/angular/src/main.ts +12 -0
data/spec/dummy/angular/src/polyfills.ts +19 -0
data/spec/dummy/angular/src/styles.css +1 -0
data/spec/dummy/angular/src/test.ts +31 -0
data/spec/dummy/angular/src/tsconfig.json +18 -0
data/spec/dummy/angular/src/typings.d.ts +2 -0
data/spec/dummy/angular/tslint.json +114 -0
data/spec/dummy/angular/typings.json +4 -0
data/spec/dummy/app/assets/config/manifest.js +3 -0
data/spec/dummy/app/assets/javascripts/application.js +13 -0
data/spec/dummy/app/assets/stylesheets/application.css +15 -0
data/spec/dummy/app/channels/application_cable/channel.rb +4 -0
data/spec/dummy/app/channels/application_cable/connection.rb +4 -0
data/spec/dummy/app/controllers/application_controller.rb +2 -0
data/spec/dummy/app/jobs/application_job.rb +2 -0
data/spec/dummy/app/mailers/application_mailer.rb +4 -0
data/spec/dummy/app/models/application_record.rb +3 -0
data/spec/dummy/app/views/layouts/mailer.html.erb +13 -0
data/spec/dummy/app/views/layouts/mailer.text.erb +1 -0
data/spec/dummy/bin/bundle +3 -0
data/spec/dummy/bin/rails +4 -0
data/spec/dummy/bin/rake +4 -0
data/spec/dummy/bin/setup +34 -0
data/spec/dummy/bin/update +29 -0
data/spec/dummy/config/application.rb +22 -0
data/spec/dummy/config/boot.rb +5 -0
data/spec/dummy/config/cable.yml +9 -0
data/spec/dummy/config/crypto.yml +7 -0
data/spec/dummy/config/database.yml +25 -0
data/spec/dummy/config/environment.rb +5 -0
data/spec/dummy/config/environments/development.rb +47 -0
data/spec/dummy/config/environments/production.rb +78 -0
data/spec/dummy/config/environments/test.rb +42 -0
data/spec/dummy/config/initializers/application_controller_renderer.rb +6 -0
data/spec/dummy/config/initializers/backtrace_silencers.rb +7 -0
data/spec/dummy/config/initializers/cors.rb +16 -0
data/spec/dummy/config/initializers/inflections.rb +16 -0
data/spec/dummy/config/initializers/mime_types.rb +4 -0
data/spec/dummy/config/initializers/new_framework_defaults.rb +18 -0
data/spec/dummy/config/initializers/wrap_parameters.rb +14 -0
data/spec/dummy/config/locales/en.yml +23 -0
data/spec/dummy/config/puma.rb +47 -0
data/spec/dummy/config/routes.rb +3 -0
data/spec/dummy/config/secrets.yml +22 -0
data/spec/dummy/config/spring.rb +6 -0
data/spec/dummy/config.ru +5 -0
data/spec/dummy/db/development.sqlite3 +0 -0
data/spec/dummy/db/schema.rb +56 -0
data/spec/dummy/db/test.sqlite3 +0 -0
data/spec/dummy/public/app/favicon.ico +0 -0
data/spec/dummy/public/app/index.html +14 -0
data/spec/dummy/public/app/inline.bundle.js +139 -0
data/spec/dummy/public/app/inline.map +1 -0
data/spec/dummy/public/app/main.bundle.js +64689 -0
data/spec/dummy/public/app/main.map +1 -0
data/spec/dummy/public/app/styles.bundle.js +364 -0
data/spec/dummy/public/app/styles.map +1 -0
data/spec/factories/boards.rb +5 -0
data/spec/factories/comments.rb +7 -0
data/spec/factories/posts.rb +8 -0
data/spec/factories/user_boards.rb +9 -0
data/spec/factories/users.rb +10 -0
data/spec/models/board_spec.rb +19 -0
data/spec/models/comment_spec.rb +26 -0
data/spec/models/post_spec.rb +19 -0
data/spec/models/user_board_spec.rb +193 -0
data/spec/models/user_spec.rb +5 -0
data/spec/rails_helper.rb +58 -0
data/spec/requests/api/api_boards_spec.rb +238 -0
data/spec/requests/api/api_share_board_spec.rb +167 -0
data/spec/requests/api/api_users_spec.rb +52 -0
data/spec/requests/api/board/api_board_posts_spec.rb +299 -0
data/spec/requests/api/board/post/api_board_post_comments_spec.rb +370 -0
data/spec/requests/render_app_index_spec.rb +19 -0
data/spec/schema/board.json +39 -0
data/spec/schema/comment.json +51 -0
data/spec/schema/post.json +87 -0
data/spec/schema/user.json +27 -0
data/spec/spec_helper.rb +67 -0
data/spec/support/auth_helper.rb +17 -0
data/spec/support/scenario_helper.rb +134 -0
data/spec/support/serialize_helper.rb +37 -0
metadata +540 -0

data/angular/src/index.html ADDED Viewed

@@ -0,0 +1,14 @@
+<!doctype html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <title>Angular</title>
+  <base href="/app/">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <link rel="icon" type="image/x-icon" href="favicon.ico">
+</head>
+<body>
+  <app-root>Loading...</app-root>
+</body>
+</html>

data/angular/src/main.ts ADDED Viewed

@@ -0,0 +1,12 @@
+import './polyfills.ts';
+import { platformBrowserDynamic } from '@angular/platform-browser-dynamic';
+import { enableProdMode } from '@angular/core';
+import { environment } from './environments/environment';
+import { AppModule } from './app/';
+if (environment.production) {
+  enableProdMode();
+}
+platformBrowserDynamic().bootstrapModule(AppModule);

data/angular/src/polyfills.ts ADDED Viewed

@@ -0,0 +1,19 @@
+// This file includes polyfills needed by Angular 2 and is loaded before
+// the app. You can add your own extra polyfills to this file.
+import 'core-js/es6/symbol';
+import 'core-js/es6/object';
+import 'core-js/es6/function';
+import 'core-js/es6/parse-int';
+import 'core-js/es6/parse-float';
+import 'core-js/es6/number';
+import 'core-js/es6/math';
+import 'core-js/es6/string';
+import 'core-js/es6/date';
+import 'core-js/es6/array';
+import 'core-js/es6/regexp';
+import 'core-js/es6/map';
+import 'core-js/es6/set';
+import 'core-js/es6/reflect';
+import 'core-js/es7/reflect';
+import 'zone.js/dist/zone';

data/angular/src/styles.css ADDED Viewed

	@@ -0,0 +1 @@
1	+ /* You can add global styles to this file, and also import other style files */

data/angular/src/test.ts ADDED Viewed

@@ -0,0 +1,31 @@
+import './polyfills.ts';
+import 'zone.js/dist/long-stack-trace-zone';
+import 'zone.js/dist/proxy.js';
+import 'zone.js/dist/sync-test';
+import 'zone.js/dist/jasmine-patch';
+import 'zone.js/dist/async-test';
+import 'zone.js/dist/fake-async-test';
+import { getTestBed } from '@angular/core/testing';
+import {
+  BrowserDynamicTestingModule,
+  platformBrowserDynamicTesting
+} from '@angular/platform-browser-dynamic/testing';
+// Unfortunately there's no typing for the `__karma__` variable. Just declare it as any.
+declare var __karma__: any;
+declare var require: any;
+// Prevent Karma from running prematurely.
+__karma__.loaded = function () {};
+// First, initialize the Angular testing environment.
+getTestBed().initTestEnvironment(
+  BrowserDynamicTestingModule,
+  platformBrowserDynamicTesting()
+);
+// Then we find all the tests.
+let context = require.context('./', true, /\.spec\.ts/);
+// And load the modules.
+context.keys().map(context);
+// Finally, start Karma to run the tests.
+__karma__.start();

data/angular/src/tsconfig.json ADDED Viewed

@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "baseUrl": "",
+    "declaration": false,
+    "emitDecoratorMetadata": true,
+    "experimentalDecorators": true,
+    "lib": ["es6", "dom"],
+    "mapRoot": "./",
+    "module": "es6",
+    "moduleResolution": "node",
+    "outDir": "../dist/out-tsc",
+    "sourceMap": true,
+    "target": "es5",
+    "typeRoots": [
+      "../node_modules/@types"
+    ]
+  }
+}

data/angular/src/typings.d.ts ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ // Typings reference file, you can add your own global typings here
2	+ // https://www.typescriptlang.org/docs/handbook/writing-declaration-files.html

data/angular/tslint.json ADDED Viewed

@@ -0,0 +1,114 @@
+{
+  "rulesDirectory": [
+    "node_modules/codelyzer"
+  ],
+  "rules": {
+    "class-name": true,
+    "comment-format": [
+      true,
+      "check-space"
+    ],
+    "curly": true,
+    "eofline": true,
+    "forin": true,
+    "indent": [
+      true,
+      "spaces"
+    ],
+    "label-position": true,
+    "label-undefined": true,
+    "max-line-length": [
+      true,
+      140
+    ],
+    "member-access": false,
+    "member-ordering": [
+      true,
+      "static-before-instance",
+      "variables-before-functions"
+    ],
+    "no-arg": true,
+    "no-bitwise": true,
+    "no-console": [
+      true,
+      "debug",
+      "info",
+      "time",
+      "timeEnd",
+      "trace"
+    ],
+    "no-construct": true,
+    "no-debugger": true,
+    "no-duplicate-key": true,
+    "no-duplicate-variable": true,
+    "no-empty": false,
+    "no-eval": true,
+    "no-inferrable-types": true,
+    "no-shadowed-variable": true,
+    "no-string-literal": false,
+    "no-switch-case-fall-through": true,
+    "no-trailing-whitespace": true,
+    "no-unused-expression": true,
+    "no-unused-variable": true,
+    "no-unreachable": true,
+    "no-use-before-declare": true,
+    "no-var-keyword": true,
+    "object-literal-sort-keys": false,
+    "one-line": [
+      true,
+      "check-open-brace",
+      "check-catch",
+      "check-else",
+      "check-whitespace"
+    ],
+    "quotemark": [
+      true,
+      "single"
+    ],
+    "radix": true,
+    "semicolon": [
+      "always"
+    ],
+    "triple-equals": [
+      true,
+      "allow-null-check"
+    ],
+    "typedef-whitespace": [
+      true,
+      {
+        "call-signature": "nospace",
+        "index-signature": "nospace",
+        "parameter": "nospace",
+        "property-declaration": "nospace",
+        "variable-declaration": "nospace"
+      }
+    ],
+    "variable-name": false,
+    "whitespace": [
+      true,
+      "check-branch",
+      "check-decl",
+      "check-operator",
+      "check-separator",
+      "check-type"
+    ],
+    "directive-selector-prefix": [true, "app"],
+    "component-selector-prefix": [true, "app"],
+    "directive-selector-name": [true, "camelCase"],
+    "component-selector-name": [true, "kebab-case"],
+    "directive-selector-type": [true, "attribute"],
+    "component-selector-type": [true, "element"],
+    "use-input-property-decorator": true,
+    "use-output-property-decorator": true,
+    "use-host-property-decorator": true,
+    "no-input-rename": true,
+    "no-output-rename": true,
+    "use-life-cycle-interface": true,
+    "use-pipe-transform-interface": true,
+    "component-class-suffix": true,
+    "directive-class-suffix": true,
+    "templates-use-public": true,
+    "invoke-injectable": true
+  }
+}

data/angular/typings.json ADDED Viewed

@@ -0,0 +1,4 @@
+{
+  "globalDevDependencies": {
+  }
+}

data/app/controllers/api/boards_controller.rb ADDED Viewed

@@ -0,0 +1,67 @@
+class Api::BoardsController < ApplicationController
+  include LoggedInControllerConcern
+  include SerializerControllerConcern
+  include BoardOwnerControllerConcern
+  include ::ActionController::Serialization
+  before_action :ensure_board, :only => [:show, :update, :destroy]
+  before_action :ensure_board_owner, :only => [:update, :destroy]
+  # Returns boards belonging to current user
+  #
+  # `GET /api/boards`
+  #
+  def index
+    render json: @user.user_boards
+  end
+  # Creates board belonging to current user.
+  #
+  # `POST /api/boards`
+  #
+  def create
+    @user_board = UserBoard.new(
+      name: params[:board][:name],
+      user_id: @user.id,
+      encrypted_password: params[:encrypted_password],
+      is_admin: true
+    )
+    if @user_board.save
+      render json: @user_board, status: :created
+    else
+      render json: @user_board.errors.full_messages, status: 422
+    end
+  end
+  # Render a single board.
+  #
+  # `GET /api/boards/:id`
+  #
+  def show
+    render json: @user_board
+  end
+  # Updates a single board.
+  #
+  # `PUT /api/boards/:id`
+  def update
+    if @user_board.update(name: params[:board][:name], encrypted_password: params[:encrypted_password])
+      render json: @user_board
+    else
+      errors = @board.errors.full_messages.concat @user_board.errors.full_messages
+      render json: errors, status: 422
+    end
+  end
+  # Deletes a board resource.
+  #
+  # `DELETE /api/boards/:id`
+  def destroy
+    @board.destroy
+    render status: :ok
+  end
+end

data/app/controllers/api/comments_controller.rb ADDED Viewed

@@ -0,0 +1,51 @@
+class Api::CommentsController < ApplicationController
+  include LoggedInControllerConcern
+  include PostOwnerControllerConcern
+  include CommentOwnerControllerConcern
+  include ::ActionController::Serialization
+  before_action :ensure_post, only: [:index, :create]
+  before_action :ensure_comment, only: [:show, :update, :destroy]
+  before_action :ensure_comment_owner, only: [:update, :destroy]
+  # Renders the comments belonging to the post
+  #
+  # `GET /api/boards/:board_id/posts/:post_id/`
+  def index
+    render json: @post.comments
+  end
+  # Creates new comment belonging to the post
+  #
+  # `POST /api/boards/:board_id/posts/:post_id/`
+  def create
+    @comment = Comment.new(params.permit(:content))
+    @comment.user = @user
+    @comment.post = @post
+    if @comment.save
+      render json: @comment
+    else
+      render json: @comment.errors, status: 422
+    end
+  end
+  # Updates a comment
+  #
+  # `PUT /api/boards/:board_id/posts/:post_id/comments/:id`
+  def update
+    if @comment.update(params.permit(:content))
+      render json: @comment
+    else
+      render json: @comment.errors, status: 422
+    end
+  end
+  # Deletes a comment
+  #
+  # `DELETE /api/boards/:board_id/posts/:post_id/comments/:id`
+  def destroy
+    @comment.destroy
+    render status: :ok
+  end
+end

data/app/controllers/api/posts_controller.rb ADDED Viewed

@@ -0,0 +1,58 @@
+class Api::PostsController < ApplicationController
+  include LoggedInControllerConcern
+  include BoardOwnerControllerConcern
+  include PostOwnerControllerConcern
+  include ::ActionController::Serialization
+  before_action :ensure_board, only: [:index, :create]
+  before_action :ensure_post, only: [:show, :update, :destroy]
+  before_action :ensure_post_owner, only: [:update, :destroy]
+# Renders the post belonging to the board
+#
+# `GET /api/boards/:board_id/posts`
+  def index
+    render json: @board.posts
+  end
+# Renders a single post belonging to the board
+#
+# `GET /api/boards/:board_id/posts/:id`
+  def show
+    render json: @post
+  end
+# Creates a single post belonging to the board
+#
+# `POST /api/boards/:board_id/posts/`
+  def create
+    @post = Post.new(params.permit(:title, :content, :board_id))
+    @post.user = @user
+    if (@post.save)
+      render json: @post, status: :created
+    else
+      render json: @post.errors, status: 422
+    end
+  end
+# Updates a single post belonging to the board
+#
+# `PUT /api/boards/:board_id/posts/:id`
+  def update
+    if (@post.update(params.permit(:title, :content)))
+      render json: @post, status: :ok
+    else
+      render json: @post.errors, status: 422
+    end
+  end
+# Deletes a single post belonging to the board
+#
+# `DELETE /api/boards/:board_id/posts/:id`
+  def destroy
+    @post.destroy
+    render status: :ok
+  end
+end

data/app/controllers/api/share_board_controller.rb ADDED Viewed

@@ -0,0 +1,118 @@
+class Api::ShareBoardController < ApplicationController
+  include LoggedInControllerConcern
+  include BoardOwnerControllerConcern
+  include PostOwnerControllerConcern
+  include CommentOwnerControllerConcern
+  before_action :validate_params
+  # Shares a board to other users. Example payload param:
+  #
+  # `POST /api/share/board`
+  #
+  # ```
+  # {
+  #   board: {
+  #     id: 1,
+  #     name: 'some encrypted text',
+  #   },
+  #   posts: [
+  #     {
+  #       board_id: 1,
+  #       title: 'some encrypted text',
+  #       content: 'some encrypted text',
+  #       comments: [
+  #         {
+  #           id: 1,
+  #           content: 'some encrypted text',
+  #           user_id: 1,
+  #           post_id: 1,
+  #         }
+  #       ]
+  #     }
+  #   ],
+  #   shared_user_ids: [1, 2, 3, 4],
+  #   encrypted_password: 'some encrypted password'
+  # }
+  # ```
+  # The `encrypted_password` param will be used to decrypt contents of this board. The encryption happens in the client so
+  # the server don't really know what is the original password. The board creator will have to share it privately to other users whom he/she shared it with so they can access the board.
+  #
+  # `posts` and `comments` fields can be empty.
+  def index
+    ActiveRecord::Base.transaction do
+      if params[:posts]
+        params[:posts].each do |post|
+          p = Post.find(post[:id])
+          p.title = post[:title]
+          p.content = post[:content]
+          p.save!
+          if post[:comments] and p.valid?
+            post[:comments].each do |comment|
+              c = Comment.find(comment[:id])
+              c.content = comment[:content]
+              c.save!
+            end
+          end
+        end
+      end
+      if @user_board.share(params[:shared_user_ids], params[:encrypted_password])
+        render status: :ok
+      else
+        raise "An error occured"
+      end
+    end
+  rescue
+    # clean up the created {UserBoard}s
+    render status: 422, json: ["Some of the data can't be saved."]
+  end
+  # Validates the contents of params against the database records.
+  def validate_params
+    if params[:encrypted_password].nil? or params[:shared_user_ids].nil? or params[:board].nil?
+      render status: 422
+      return
+    end
+    result = has_board_access(params[:board][:id])
+    if result[:status] != :ok
+      render status: result[:status]
+      return
+    else
+      if !result[:user_board].is_admin
+        render status: :forbidden
+        return
+      end
+      @board = result[:board]
+      @user_board = result[:user_board]
+    end
+    if params[:posts]
+      params[:posts].each do |post|
+        s = has_post_access(params[:board][:id], post[:id])[:status]
+        if s != :ok
+          render status: s
+          return
+        end
+        if post[:comments]
+          post[:comments].each do |comment|
+            s = has_comment_access(post[:id], comment[:id])[:status]
+            if s != :ok
+              render status: s
+              return
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/api/users_controller.rb ADDED Viewed

@@ -0,0 +1,27 @@
+class Api::UsersController < ApplicationController
+  include LoggedInControllerConcern
+  include ::ActionController::Serialization
+  # Renders the current user as json
+  #
+  # `GET /api/user/:id`
+  #
+  def show
+    render json: @user
+  end
+# Returns the user with matching email
+#
+# `GET /api/users/search?email=xxx`
+#
+  def search
+    user = User.where("email = ? AND id != ?", params[:email], @user.id).first
+    if user
+      render json: user
+    else
+      render status: :not_found
+    end
+  end
+end

data/app/controllers/application_controller.rb ADDED Viewed

@@ -0,0 +1,5 @@
+# Base controller for API controllers
+class ApplicationController < ActionController::API
+end

data/app/controllers/concerns/board_owner_controller_concern.rb ADDED Viewed

@@ -0,0 +1,38 @@
+#Ensure user has access to the board and sets the `@board` variable in the controller
+module BoardOwnerControllerConcern
+  extend ActiveSupport::Concern
+  #Ensure user has access to the board and sets the `@board` variable in the controller
+  def ensure_board
+    board_id = params[:board_id] || params[:id]
+    result = has_board_access(board_id)
+    @board = result[:board]
+    @user_board = result[:user_board]
+    render status: result[:status] if result[:status] != :ok
+  end
+  # Validate if user has access to board
+  #
+  # @param board_id [Integer] board id
+  def has_board_access(board_id)
+    board = nil
+    if !board_id.nil?
+      board = Board.find_by_id(board_id)
+    else
+      return {status: :bad_request}
+    end
+    if (board)
+      user_board = UserBoard.where(user_id: @user.id, board_id: board_id).first
+      return {status: :forbidden }if user_board.nil?
+        return {status: :ok, board: board, user_board: user_board}
+      else
+        return {status: :not_found}
+      end
+    end
+    #Ensures user is owner of the board. Must be run after {#ensure_board} method.
+    def ensure_board_owner
+      render status: :forbidden if !@user_board.is_admin
+    end
+  end

data/app/controllers/concerns/comment_owner_controller_concern.rb ADDED Viewed

@@ -0,0 +1,33 @@
+# Ensures user is owner of the comment and sets the `@comment` variable in the controllers
+module CommentOwnerControllerConcern
+  extend ActiveSupport::Concern
+  # Ensures user is owner of the comment and sets the `@comment` variable in the controllers
+  def ensure_comment
+    post_id = params[:post_id]
+    comment_id = params[:comment_id] || params[:id]
+    result = has_comment_access post_id, comment_id
+    @comment = result[:comment]
+    status = result[:status]
+    render status: status if status != :ok
+  end
+  # Validate if user has access to comment in the post
+  #
+  # @param post_id [Integer] post id
+  # @param comment_id [Integer] comment id
+  def has_comment_access(post_id, comment_id)
+    comment = Comment.where(id: comment_id, post_id: post_id, user_id: @user.id).first
+    if comment.nil?
+      return {status: :forbidden, comment: comment}
+    else
+      return {status: :ok, comment: comment}
+    end
+  end
+  # Ensures user is the owner of the comment. Must be run after {#ensure_comment} method.
+  def ensure_comment_owner
+    render status: :forbidden if @comment.user_id != @user.id
+  end
+end

data/app/controllers/concerns/logged_in_controller_concern.rb ADDED Viewed

@@ -0,0 +1,21 @@
+# Ensures users are logged in and sets `@user` instance variable in the controllers.
+# This is included in the base api controller.
+#
+# Returns `401` error if user is not authenticated
+module LoggedInControllerConcern
+  extend ActiveSupport::Concern
+  included do
+    include Knock::Authenticable
+  	before_action :authenticate_user
+    before_action :set_user
+  end
+  private
+  # Sets the `@user` variable in the controllers
+  def set_user
+  	render status: :unauthorized if current_user.nil?
+    @user = current_user
+  end
+end

data/app/controllers/concerns/post_owner_controller_concern.rb ADDED Viewed

@@ -0,0 +1,36 @@
+# Ensures user is owner of the post and sets the `@post` variable in the controllers
+module PostOwnerControllerConcern
+  extend ActiveSupport::Concern
+  # Ensures user is owner of the post and sets the `@post` variable in the controllers
+  def ensure_post
+    post_id = params[:post_id] || params[:id]
+    board_id = params[:board_id]
+    result = has_post_access(board_id, post_id)
+    status = result[:status]
+    @post = result[:post]
+    render status: status if status != :ok
+  end
+  # Validate if user has access to the post in the board
+  #
+  # @param board_id [Integer] board id
+  # @param post_id [Integer] post id
+  def has_post_access(board_id, post_id)
+    post = Post.where(id: post_id, board_id: board_id)
+                .joins("LEFT JOIN user_boards ON user_boards.board_id = posts.board_id")
+                .where("user_boards.user_id = ?", @user.id)
+                .first
+    if post.nil?
+      return {status: :forbidden}
+    else
+      return {status: :ok, post: post}
+    end
+  end
+  # Ensures user is owner of the post. Must be run after {#ensure_post}`.
+  def ensure_post_owner
+    render status: :forbidden if @post.user_id != @user.id
+  end
+end