usps-support 0.2.23 → 0.2.25

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '080904d8a62c91987b2636b03553504e62dcac2b36bce4f6bb2cf72acf23885b'
-  data.tar.gz: 4ebfa6b6df1dbf65b2ed001049b992b0163ab87ce6d5737085ea60c45d092947
+  metadata.gz: 9f99b23db7bb362080785a59d911fd245db2c275e711d1c57c7c1e23adad47a6
+  data.tar.gz: 7b679be331e8013b9e6c590da7efce055e0166ee3a27aec92273f50f9ef19146
 SHA512:
-  metadata.gz: d75e9ec3ac5fe55498740a81d41c96e80c84305461005e8fedf0d620424354a69bbf976cb971de32abc439011431603598690069a1fe0e31dd62baaa12fd81a6
-  data.tar.gz: 8fc9eb6bebe7c1cb8a64e3b1eae6915bae3e12af7dccd2bdb8b01cb340b3acdc9988d8bdbc527adbfb317357662705ecde2da1eb8a70d59c677597c3214499a7
+  metadata.gz: 62be219931f610630e316702c62a16600db301f8631ccc0035b68e3a9ffddf196931dd94ce17e3f766f09a71f24de8f1b94bdaa15d0748b015687f3a5349bf86
+  data.tar.gz: 64e822a0d5625c4aeecb13afb4a2612f99532c2f401d3018ba95d3a955c6ccd3bc26ac386a6e7be27e9f09424fbec33c1d91fc0fcb089bf85c2f23416bf007ad

data/app/controllers/concerns/usps/support/admin_menu.rb

@@ -0,0 +1,24 @@
+module Usps::Support
+  # Exposes `impersonation` and `admin_menu_expanded` helpers to host views,
+  # backed by the session state that AdminsController manages.
+  #
+  module AdminMenu
+    extend ActiveSupport::Concern
+
+    included do
+      helper_method :impersonation
+      helper_method :admin_menu_expanded
+    end
+
+    def impersonation
+      return @impersonation if defined?(@impersonation)
+
+      impersonated = Members::Member.find_by(certificate: session.dig('impersonate', 'impersonated'))
+      @impersonation = impersonated && { name: impersonated.simple_name, certificate: impersonated.certificate }
+    end
+
+    def admin_menu_expanded
+      session['admin_menu_expand']
+    end
+  end
+end

data/app/controllers/usps/support/admins_controller.rb

@@ -0,0 +1,67 @@
+module Usps::Support
+  # Shared impersonation and admin-menu-toggle endpoints. See config/routes.rb
+  # for the mount point; host apps authenticate via their ApplicationController.
+  #
+  class AdminsController < ::ApplicationController
+    before_action :authorize_admin
+
+    def impersonate
+      @certificate = params[:certificate]
+      impersonate!
+      render_admin_response(:OK, reload: impersonated.present?)
+    end
+
+    def cancel
+      session.delete('impersonate')
+      render_admin_response(:OK, reload: true)
+    end
+
+    def collapse
+      session['admin_menu_expand'] = false
+      render_admin_response(:OK)
+    end
+
+    def expand
+      session['admin_menu_expand'] = true
+      render_admin_response(:OK)
+    end
+
+  private
+
+    def authorize_admin
+      authorize(:admin)
+    end
+
+    def impersonate!
+      return unless impersonated
+
+      session['impersonate'] = {
+        'admin' => current_user.certificate,
+        'impersonated' => impersonated.certificate
+      }
+    end
+
+    def impersonated
+      return @impersonated if defined?(@impersonated)
+      return if @certificate.blank?
+
+      @impersonated = Members::Member.find_by(certificate: @certificate)
+    end
+
+    def pundit_user
+      Usps::Support::Policy::AdminContext.new(current_user, session['impersonate'])
+    end
+
+    # Apps that expose `react_response!` (toast handling, etc.) will reuse it.
+    # Otherwise we render the minimal JSON shape the React admin menu expects.
+    #
+    # options is spread into the fallback render hash, so it must stay named.
+    # rubocop:disable Style/ArgumentsForwarding
+    def render_admin_response(status, **options)
+      return react_response!(status, **options) if respond_to?(:react_response!, true)
+
+      render(json: { status: status.to_s.upcase, toasts: [], reload: false, **options })
+    end
+    # rubocop:enable Style/ArgumentsForwarding
+  end
+end

data/app/models/usps/support/policy/admin_context.rb

@@ -0,0 +1,26 @@
+module Usps::Support
+  module Policy
+    # Pundit user context that carries both the current user and any active
+    # impersonation session, so policies can distinguish the acting admin from
+    # the impersonated member.
+    #
+    class AdminContext
+      attr_reader :user, :impersonate
+
+      def initialize(user, impersonate)
+        @user = user
+        @impersonate = impersonate
+      end
+
+      def admin?
+        (impersonate&.fetch('impersonated', nil).present? ? original : user).admin?
+      end
+
+    private
+
+      def original
+        Members::Member.find(impersonate['admin'])
+      end
+    end
+  end
+end

data/config/routes.rb

@@ -0,0 +1,10 @@
+Usps::Support::Engine.routes.draw do
+  resource :admin, only: [], controller: '/usps/support/admins' do
+    collection do
+      post :impersonate
+      post :expand
+      post :collapse
+      delete :cancel
+    end
+  end
+end

data/lib/usps/support/engine.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'rails/engine'
+
+module Usps
+  module Support
+    # Rails engine hosting shared controllers, concerns, policies, and routes.
+    #
+    # Not isolated: host applications share the engine's ApplicationController,
+    # helpers, and authentication plumbing.
+    #
+    class Engine < ::Rails::Engine
+    end
+  end
+end

data/lib/usps/support/models/git_hub.rb

@@ -11,6 +11,10 @@ module Usps::Support::Models
         client.check_suites_for_ref("#{ORG}/#{repo}", branch).check_suites
       end
 
+      def check_runs(repo, check_suite_id)
+        client.check_runs_for_check_suite("#{ORG}/#{repo}", check_suite_id).check_runs
+      end
+
       def fetch_head_commit(repo, branch)
         sha = client.ref("#{ORG}/#{repo}", "heads/#{branch}").object.sha
         client.commit("#{ORG}/#{repo}", sha).commit

data/lib/usps/support/version.rb

@@ -2,6 +2,6 @@
 
 module Usps
   module Support
-    VERSION = '0.2.23'
+    VERSION = '0.2.25'
   end
 end

data/lib/usps/support.rb

@@ -15,5 +15,8 @@ require_relative 'support/models'
 require_relative 'support/lib'
 
 # :nocov:
-require 'usps/support/railtie' if defined?(Rails)
+if defined?(Rails)
+  require 'usps/support/railtie'
+  require 'usps/support/engine'
+end
 # :nocov:

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: usps-support
 version: !ruby/object:Gem::Version
-  version: 0.2.23
+  version: 0.2.25
 platform: ruby
 authors:
 - Julian Fiander
@@ -59,10 +59,15 @@ extensions: []
 extra_rdoc_files: []
 files:
 - Readme.md
+- app/controllers/concerns/usps/support/admin_menu.rb
+- app/controllers/usps/support/admins_controller.rb
+- app/models/usps/support/policy/admin_context.rb
+- config/routes.rb
 - lib/usps/all.rb
 - lib/usps/support.rb
 - lib/usps/support/db/members_schema.rb
 - lib/usps/support/db/websites_schema.rb
+- lib/usps/support/engine.rb
 - lib/usps/support/helpers.rb
 - lib/usps/support/helpers/badges_helper.rb
 - lib/usps/support/helpers/flags_helper.rb
@@ -100,10 +105,10 @@ files:
 - lib/usps/support/models/toast.rb
 - lib/usps/support/railtie.rb
 - lib/usps/support/version.rb
-homepage: https://github.com/unitedstatespowersquadrons/usps-rails
+homepage: https://github.com/unitedstatespowersquadrons/usps-support
 licenses: []
 metadata:
-  homepage_uri: https://github.com/unitedstatespowersquadrons/usps-rails
+  homepage_uri: https://github.com/unitedstatespowersquadrons/usps-support
   rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths: