unsakini 0.0.3.1 → 0.0.4.pre.1

data/app/controllers/api/users_controller.rb

@@ -1,27 +0,0 @@
-class Api::UsersController < ApplicationController
-
-  include LoggedInControllerConcern
-  include ::ActionController::Serialization
-
-  # Renders the current user as json
-  #
-  # `GET /api/user/:id`
-  #
-  def show
-    render json: @user
-  end
-
-# Returns the user with matching email
-#
-# `GET /api/users/search?email=xxx`
-#
-  def search
-    user = User.where("email = ? AND id != ?", params[:email], @user.id).first
-    if user
-      render json: user
-    else
-      render json: {}, status: :not_found
-    end
-  end
-
-end

data/app/controllers/concerns/board_owner_controller_concern.rb

@@ -1,38 +0,0 @@
-#Ensure user has access to the board and sets the `@board` variable in the controller
-module BoardOwnerControllerConcern
-  extend ActiveSupport::Concern
-
-  #Ensure user has access to the board and sets the `@board` variable in the controller
-  def ensure_board
-    board_id = params[:board_id] || params[:id]
-    result = has_board_access(board_id)
-    @board = result[:board]
-    @user_board = result[:user_board]
-    render json: {}, status: result[:status] if result[:status] != :ok
-  end
-
-  # Validate if user has access to board
-  #
-  # @param board_id [Integer] board id
-  def has_board_access(board_id)
-    board = nil
-    if !board_id.nil?
-      board = Board.find_by_id(board_id)
-    else
-      return {status: :bad_request}
-    end
-    if (board)
-      user_board = UserBoard.where(user_id: @user.id, board_id: board_id).first
-      return {status: :forbidden }if user_board.nil?
-        return {status: :ok, board: board, user_board: user_board}
-      else
-        return {status: :not_found}
-      end
-    end
-
-    #Ensures user is owner of the board. Must be run after {#ensure_board} method.
-    def ensure_board_owner
-      render json: {}, status: :forbidden if !@user_board.is_admin
-    end
-
-  end

data/app/controllers/concerns/comment_owner_controller_concern.rb

@@ -1,33 +0,0 @@
-# Ensures user is owner of the comment and sets the `@comment` variable in the controllers
-module CommentOwnerControllerConcern
-  extend ActiveSupport::Concern
-  
-  # Ensures user is owner of the comment and sets the `@comment` variable in the controllers
-  def ensure_comment
-    post_id = params[:post_id]
-    comment_id = params[:comment_id] || params[:id]
-    result = has_comment_access post_id, comment_id
-    @comment = result[:comment]
-    status = result[:status]
-    render json: {}, status: status if status != :ok
-  end
-
-  # Validate if user has access to comment in the post
-  #
-  # @param post_id [Integer] post id
-  # @param comment_id [Integer] comment id
-  def has_comment_access(post_id, comment_id)
-    comment = Comment.where(id: comment_id, post_id: post_id, user_id: @user.id).first
-    if comment.nil?
-      return {status: :forbidden, comment: comment}
-    else
-      return {status: :ok, comment: comment}
-    end
-  end
-
-  # Ensures user is the owner of the comment. Must be run after {#ensure_comment} method.
-  def ensure_comment_owner
-    render json: {}, status: :forbidden if @comment.user_id != @user.id
-  end
-
-end

data/app/controllers/concerns/logged_in_controller_concern.rb

@@ -1,21 +0,0 @@
-# Ensures users are logged in and sets `@user` instance variable in the controllers.
-# This is included in the base api controller.
-#
-# Returns `401` error if user is not authenticated
-module LoggedInControllerConcern
-  extend ActiveSupport::Concern
-
-  included do
-    include Knock::Authenticable
-  	before_action :authenticate_user
-    before_action :set_user
-  end
-
-  private
-  # Sets the `@user` variable in the controllers
-  def set_user
-  	render json: {}, status: :unauthorized if current_user.nil?
-    @user = current_user
-  end
-
-end

data/app/controllers/concerns/post_owner_controller_concern.rb

@@ -1,36 +0,0 @@
-# Ensures user is owner of the post and sets the `@post` variable in the controllers
-module PostOwnerControllerConcern
-  extend ActiveSupport::Concern
-
-  # Ensures user is owner of the post and sets the `@post` variable in the controllers
-  def ensure_post
-    post_id = params[:post_id] || params[:id]
-    board_id = params[:board_id]
-    result = has_post_access(board_id, post_id)
-    status = result[:status]
-    @post = result[:post]
-    render json: {}, status: status if status != :ok
-  end
-
-  # Validate if user has access to the post in the board
-  #
-  # @param board_id [Integer] board id
-  # @param post_id [Integer] post id
-  def has_post_access(board_id, post_id)
-    post = Post.where(id: post_id, board_id: board_id)
-                .joins("LEFT JOIN user_boards ON user_boards.board_id = posts.board_id")
-                .where("user_boards.user_id = ?", @user.id)
-                .first
-    if post.nil?
-      return {status: :forbidden}
-    else
-      return {status: :ok, post: post}
-    end
-  end
-
-  # Ensures user is owner of the post. Must be run after {#ensure_post}`.
-  def ensure_post_owner
-    render json: {}, status: :forbidden if @post.user_id != @user.id
-  end
-
-end

data/app/controllers/concerns/serializer_controller_concern.rb

@@ -1,11 +0,0 @@
-module SerializerControllerConcern
-
-  extend ActiveSupport::Concern
-
-  included do
-    include ::ActionController::Serialization
-    # respond_to :json
-  end
-
-
-end

data/app/controllers/user_token_controller.rb

@@ -1,2 +0,0 @@
-class UserTokenController < Knock::AuthTokenController
-end

data/app/controllers/web_base_controller.rb

@@ -1,15 +0,0 @@
-# Base controller for web pages
-
-class WebBaseController < ActionController::Base
-  include ActionController::ImplicitRender
-  include ActionView::Layouts
-
-  # Renders welcome page
-  def index
-  end
-
-  # Renders the angular index view when request url is /app/* to enable html5 pushState capability of angularjs
-  def app
-    render file: "#{Rails.root}/public/app/index.html", layout: false
-  end
-end

data/app/models/application_record.rb

@@ -1,5 +0,0 @@
-# Base application model
-
-class ApplicationRecord < ActiveRecord::Base
-  self.abstract_class = true
-end

data/app/models/board.rb

@@ -1,14 +0,0 @@
-#Board model
-
-class Board < ApplicationRecord
-  include EncryptableModelConcern
-  encryptable_attributes :name
-
-  validates :name, presence: true
-
-  has_many :users, through: :user_boards
-
-  has_many :user_boards, :dependent => :delete_all
-  has_many :posts, :dependent => :destroy
-
-end

data/app/models/comment.rb

@@ -1,9 +0,0 @@
-#Comment model
-class Comment < ApplicationRecord
-  include EncryptableModelConcern
-  encryptable_attributes :content
-  validates :content, presence: true
-
-  belongs_to :post
-  belongs_to :user
-end

data/app/models/concerns/encryptable_model_concern.rb

@@ -1,96 +0,0 @@
-require 'openssl'
-require 'base64'
-
-# Responsible for encryption and decryption of certain model attributes
-
-module EncryptableModelConcern
-  extend ActiveSupport::Concern
-
-  included do
-    before_save :encrypt_encryptable_attributes
-    after_save :decrypt_encryptable_attributes
-    after_find :decrypt_encryptable_attributes
-  end
-
-  module ClassMethods
-    # Sets the `encryptable_attributes` class instance variable in the model.
-    #
-    # Encryptable attributes are encrypted before saving using `before_save` hook and decrypted using `after_save` and `after_find` hooks.
-    #
-    # Example:
-    # ```
-    #   class Board < BaseModel
-    #     encryptable_attributes :name, :title, :content
-    #   end
-    # ```
-    # @param attrs [Symbol] model attributes
-    #
-    def encryptable_attributes(*attrs)
-      @encryptable_attributes = attrs
-    end
-
-  end
-
-  # Returns the model's `encryptable_attributes` class instance variable.
-  #
-  def encryptable_attributes
-    self.class.instance_variable_get(:@encryptable_attributes) || []
-  end
-
-  private
-  # Encryptes the model's encryptable attributes before saving using Rails' `before_save` hook.
-  #
-  # **Note: Be careful in calling this method manually as it can corrupt the data.**
-  def encrypt_encryptable_attributes
-    encryptable_attributes.each do |k|
-      self[k] = encrypt(self[k])
-    end
-  end
-
-  # Decrypts the model's encryptable attributes using Rails' `after_save` and `after_find` hooks.
-  #
-  # **Note: Be careful in calling this method manually as it can corrupt the data.**
-  def decrypt_encryptable_attributes
-    encryptable_attributes.each do |k|
-      self[k] = decrypt(self[k])
-    end
-  end
-
-  # Determins if the value being encrypted/decryped is empty.
-  def is_empty_val(value)
-    !value or value.nil? or value == ""
-  end
-
-  # Returns the cipher algorithm used
-  def cipher
-    OpenSSL::Cipher::Cipher.new('aes-256-cbc')
-  end
-
-  # Returns the encryption key from the `unsakini_crypto_key` config
-  def cipher_key
-    begin
-      Rails.configuration.unsakini_crypto_key
-    rescue Exception => e
-      raise 'Encryption key is not set! Please run `rails g unsakini:config` before you proceed.'
-    end
-  end
-
-  # Encrypts model attribute value
-  def encrypt(value)
-    return value if is_empty_val(value)
-    c = cipher.encrypt
-    c.key = Digest::SHA256.digest(cipher_key)
-    c.iv = iv = c.random_iv
-    Base64.encode64(iv) + Base64.encode64(c.update(value.to_s) + c.final)
-  end
-
-  # Decrypts model attribute value
-  def decrypt(value)
-    return value if is_empty_val(value)
-    c = cipher.decrypt
-    c.key = Digest::SHA256.digest(cipher_key)
-    c.iv = Base64.decode64 value.slice!(0,25)
-    c.update(Base64.decode64(value.to_s)) + c.final
-  end
-
-end

data/app/models/post.rb

@@ -1,12 +0,0 @@
-#Post model
-
-class Post < ApplicationRecord
-  include EncryptableModelConcern
-  encryptable_attributes :title, :content
-  validates :title, presence: true
-  validates :content, presence: true
-
-  belongs_to :user
-  belongs_to :board
-  has_many :comments, :dependent => :delete_all
-end

data/app/models/user.rb

@@ -1,6 +0,0 @@
-class User < ApplicationRecord
-  has_secure_password
-  has_many :user_boards
-  has_many :boards, through: :user_boards
-
-end

data/app/models/user_board.rb

@@ -1,82 +0,0 @@
-# UserBoard model, links the user and it's boards
-
-class UserBoard < ApplicationRecord
-  include EncryptableModelConcern
-  encryptable_attributes :encrypted_password
-
-  validates :encrypted_password, :presence => true, if: :is_admin
-
-  before_validation :validate_before_create, on: :create
-  before_validation :validate_before_update, on: :update
-
-  belongs_to :user
-  belongs_to :board
-
-  scope :admin, -> { where(is_admin: true) }
-
-  def name=(str)
-    @name = str
-  end
-
-  def name
-    if !@name.nil?
-      @name
-    else
-      self.board.name
-    end
-  end
-
-  # Returns user_boards where {Board} is `is_shared`
-  #
-  # @param is_shared [Boolean] wether to return shared or not shared boards
-  def self.shared(is_shared)
-    joins("LEFT JOIN boards ON user_boards.board_id = boards.id")
-    .where("boards.is_shared = ?", is_shared)
-  end
-
-  def share(user_ids, new_key)
-    ActiveRecord::Base.transaction do
-      user_ids.each do |usr_id|
-        UserBoard.new({
-                        user_id: usr_id,
-                        board_id: self.board_id,
-                        encrypted_password: nil,
-                        is_admin: false
-        })
-        .save!
-      end
-      self.board.is_shared = true
-      self.encrypted_password = new_key
-      self.save!
-    end
-    true
-
-  rescue
-    self.errors[:base] << "Unable to share the this board"
-    false
-  end
-
-  private
-
-  def reset_user_boards_encrypted_password
-    UserBoard.where("board_id = ? AND user_id != ?", self.board_id, self.user_id).update_all(encrypted_password: nil)
-  end
-
-  def validate_before_create
-    if self.board.nil?
-      b = Board.new(name: @name)
-      if b.save
-        self.board_id = b.id
-      else
-        self.errors[:base] << "Board name is invalid"
-      end
-    end
-  end
-
-  def validate_before_update
-    self.board.name = @name if !@name.blank?
-    reset_user_boards_encrypted_password if self.encrypted_password_changed?
-    self.errors[:base] << "Board name is invalid" if !self.board.save
-  end
-
-end

data/app/serializers/board_serializer.rb

@@ -1,5 +0,0 @@
-class BoardSerializer < ActiveModel::Serializer
-
-  attributes :id, :name, :created_at, :updated_at
-
-end

data/app/serializers/post_serializer.rb

@@ -1,23 +0,0 @@
-# Serializes the `Post` model instance to json.
-# Read more about active model serializers - https://github.com/rails-api/active_model_serializers
-
-class PostSerializer < ActiveModel::Serializer
-
-  attributes :id, :title, :content, :created_at, :updated_at
-
-  belongs_to :user
-
-  belongs_to :board do |serializer|
-    user_board = object.board.user_boards.where(user_id: object.user_id).first
-
-    {
-      "id" => object.board.id,
-      "name" => object.board.name,
-      "is_admin" => user_board.is_admin,
-      "encrypted_password" => user_board.encrypted_password,
-      "created_at" => object.board.created_at,
-      "updated_at" => object.board.updated_at
-    }
-  end
-
-end

data/app/serializers/user_board_serializer.rb

@@ -1,11 +0,0 @@
-# Serializes the `UserBoard` model instance to json.
-# Read more about active model serializers - https://github.com/rails-api/active_model_serializers
-#
-
-class UserBoardSerializer < ActiveModel::Serializer
-
-  attributes :id, :is_admin, :encrypted_password, :created_at, :updated_at
-
-  belongs_to :board
-
-end

data/app/views/web_base/index.html

@@ -1,16 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-	<meta charset="UTF-8">
-	<title>Welcome to Unsakini</title>
-</head>
-<body>
-	<h1>Welcome to Unsakini</h1>
-	<ul>
-		<li>
-			<a href="/app/login">Login</a>
-			<a href="/app/signup">Sign Up</a>
-		</li>
-	</ul>
-</body>
-</html>

data/db/migrate/20161116114222_create_boards.rb

@@ -1,9 +0,0 @@
-class CreateBoards < ActiveRecord::Migration[5.0]
-  def change
-    create_table :boards do |t|
-      t.text :name
-
-      t.timestamps
-    end
-  end
-end

data/db/migrate/20161118221508_add_encrypted_password_to_user_board.rb

@@ -1,5 +0,0 @@
-class AddEncryptedPasswordToUserBoard < ActiveRecord::Migration[5.0]
-  def change
-    add_column :user_boards, :encrypted_password, :string
-  end
-end

data/db/migrate/20161122211105_create_users.rb

@@ -1,12 +0,0 @@
-class CreateUsers < ActiveRecord::Migration[5.0]
-  def change
-    create_table :users do |t|
-      t.string :name
-      t.string :email
-      t.string :password_digest
-      t.boolean :confirmed
-
-      t.timestamps
-    end
-  end
-end

data/db/migrate/20161124102633_add_is_shared_to_boards.rb

@@ -1,5 +0,0 @@
-class AddIsSharedToBoards < ActiveRecord::Migration[5.0]
-  def change
-    add_column :boards, :is_shared, :boolean, default: false
-  end
-end

data/lib/generators/unsakini/angular/USAGE

@@ -1,8 +0,0 @@
-Description:
-    Generates the angular source files
-
-Example:
-    rails generate unsakini:angular
-
-    This will create:
-        angular/ directory in your project root directory

data/lib/generators/unsakini/angular/angular_generator.rb

@@ -1,7 +0,0 @@
-class Unsakini::AngularGenerator < Rails::Generators::Base
-  source_root File.expand_path('../../../../../', __FILE__)
-
-  def copy_initializer_file
-    directory 'angular/dist', 'public/app'
-  end
-end

data/spec/dummy/config/initializers/assets.rb

@@ -1,11 +0,0 @@
-# Be sure to restart your server when you modify this file.
-
-# Version of your assets, change this if you want to expire all your assets.
-Rails.application.config.assets.version = '1.0'
-
-# Add additional assets to the asset load path
-# Rails.application.config.assets.paths << Emoji.images_path
-
-# Precompile additional assets.
-# application.js, application.css, and all non-JS/CSS in app/assets folder are already added.
-# Rails.application.config.assets.precompile += %w( search.js )

data/spec/dummy/config/initializers/cookies_serializer.rb

@@ -1,5 +0,0 @@
-# Be sure to restart your server when you modify this file.
-
-# Specify a serializer for the signed and encrypted cookie jars.
-# Valid options are :json, :marshal, and :hybrid.
-Rails.application.config.action_dispatch.cookies_serializer = :json

data/spec/dummy/config/initializers/session_store.rb

@@ -1,3 +0,0 @@
-# Be sure to restart your server when you modify this file.
-
-Rails.application.config.session_store :cookie_store, key: '_dummy_session'

data/spec/dummy/db/migrate/20161124210219_create_boards.unsakini_engine.rb

@@ -1,10 +0,0 @@
-# This migration comes from unsakini_engine (originally 20161116114222)
-class CreateBoards < ActiveRecord::Migration[5.0]
-  def change
-    create_table :boards do |t|
-      t.text :name
-
-      t.timestamps
-    end
-  end
-end

data/spec/dummy/db/migrate/20161124210220_create_user_boards.unsakini_engine.rb

@@ -1,12 +0,0 @@
-# This migration comes from unsakini_engine (originally 20161116200034)
-class CreateUserBoards < ActiveRecord::Migration[5.0]
-  def change
-    create_table :user_boards do |t|
-      t.integer :user_id
-      t.integer :board_id
-      t.boolean :is_admin, :default => false
-
-      t.timestamps
-    end
-  end
-end

data/spec/dummy/db/migrate/20161124210221_create_posts.unsakini_engine.rb

@@ -1,13 +0,0 @@
-# This migration comes from unsakini_engine (originally 20161118031023)
-class CreatePosts < ActiveRecord::Migration[5.0]
-  def change
-    create_table :posts do |t|
-      t.text :title
-      t.text :content
-      t.integer :user_id
-      t.integer :board_id
-
-      t.timestamps
-    end
-  end
-end

data/spec/dummy/db/migrate/20161124210222_create_comments.unsakini_engine.rb

@@ -1,12 +0,0 @@
-# This migration comes from unsakini_engine (originally 20161118100454)
-class CreateComments < ActiveRecord::Migration[5.0]
-  def change
-    create_table :comments do |t|
-      t.text :content
-      t.integer :user_id
-      t.integer :post_id
-
-      t.timestamps
-    end
-  end
-end

data/spec/dummy/db/migrate/20161124210223_add_encrypted_password_to_user_board.unsakini_engine.rb

@@ -1,6 +0,0 @@
-# This migration comes from unsakini_engine (originally 20161118221508)
-class AddEncryptedPasswordToUserBoard < ActiveRecord::Migration[5.0]
-  def change
-    add_column :user_boards, :encrypted_password, :string
-  end
-end

data/spec/dummy/db/migrate/20161124210224_create_users.unsakini_engine.rb

@@ -1,13 +0,0 @@
-# This migration comes from unsakini_engine (originally 20161122211105)
-class CreateUsers < ActiveRecord::Migration[5.0]
-  def change
-    create_table :users do |t|
-      t.string :name
-      t.string :email
-      t.string :password_digest
-      t.boolean :confirmed
-
-      t.timestamps
-    end
-  end
-end

data/spec/dummy/db/migrate/20161124210225_add_is_shared_to_boards.unsakini_engine.rb

@@ -1,6 +0,0 @@
-# This migration comes from unsakini_engine (originally 20161124102633)
-class AddIsSharedToBoards < ActiveRecord::Migration[5.0]
-  def change
-    add_column :boards, :is_shared, :boolean, default: false
-  end
-end