usps-support 0.2.24 → 0.2.25

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2de5a952c183d34fe003ca662e8e408a7e6799fffdd989aa9dc9fc8fe93bf9e2
-  data.tar.gz: 69d8fb6ba1f9e914c83d0a32ad94077b0529fc6ea20a7958e0796a09fcd96c57
+  metadata.gz: 9f99b23db7bb362080785a59d911fd245db2c275e711d1c57c7c1e23adad47a6
+  data.tar.gz: 7b679be331e8013b9e6c590da7efce055e0166ee3a27aec92273f50f9ef19146
 SHA512:
-  metadata.gz: f50ab5d7028a4c8408398e6fd3173377e69670bcebd581395a4b4c4565df81d31eed8c3f0c17fae0a578d6a498fe8ae9d51a54cc3341766a34ad0b1e5be118de
-  data.tar.gz: 3644f1f76351721fa5ae135315680f3a79072cc7ddca89c2d982356788a9ec73f8ca72f59a4eb48a6519543fff8c41ce7f0c734e2648bb845298d40d485e2ede
+  metadata.gz: 62be219931f610630e316702c62a16600db301f8631ccc0035b68e3a9ffddf196931dd94ce17e3f766f09a71f24de8f1b94bdaa15d0748b015687f3a5349bf86
+  data.tar.gz: 64e822a0d5625c4aeecb13afb4a2612f99532c2f401d3018ba95d3a955c6ccd3bc26ac386a6e7be27e9f09424fbec33c1d91fc0fcb089bf85c2f23416bf007ad

data/app/controllers/concerns/usps/support/admin_menu.rb

@@ -0,0 +1,24 @@
+module Usps::Support
+  # Exposes `impersonation` and `admin_menu_expanded` helpers to host views,
+  # backed by the session state that AdminsController manages.
+  #
+  module AdminMenu
+    extend ActiveSupport::Concern
+
+    included do
+      helper_method :impersonation
+      helper_method :admin_menu_expanded
+    end
+
+    def impersonation
+      return @impersonation if defined?(@impersonation)
+
+      impersonated = Members::Member.find_by(certificate: session.dig('impersonate', 'impersonated'))
+      @impersonation = impersonated && { name: impersonated.simple_name, certificate: impersonated.certificate }
+    end
+
+    def admin_menu_expanded
+      session['admin_menu_expand']
+    end
+  end
+end

data/app/controllers/usps/support/admins_controller.rb

@@ -0,0 +1,67 @@
+module Usps::Support
+  # Shared impersonation and admin-menu-toggle endpoints. See config/routes.rb
+  # for the mount point; host apps authenticate via their ApplicationController.
+  #
+  class AdminsController < ::ApplicationController
+    before_action :authorize_admin
+
+    def impersonate
+      @certificate = params[:certificate]
+      impersonate!
+      render_admin_response(:OK, reload: impersonated.present?)
+    end
+
+    def cancel
+      session.delete('impersonate')
+      render_admin_response(:OK, reload: true)
+    end
+
+    def collapse
+      session['admin_menu_expand'] = false
+      render_admin_response(:OK)
+    end
+
+    def expand
+      session['admin_menu_expand'] = true
+      render_admin_response(:OK)
+    end
+
+  private
+
+    def authorize_admin
+      authorize(:admin)
+    end
+
+    def impersonate!
+      return unless impersonated
+
+      session['impersonate'] = {
+        'admin' => current_user.certificate,
+        'impersonated' => impersonated.certificate
+      }
+    end
+
+    def impersonated
+      return @impersonated if defined?(@impersonated)
+      return if @certificate.blank?
+
+      @impersonated = Members::Member.find_by(certificate: @certificate)
+    end
+
+    def pundit_user
+      Usps::Support::Policy::AdminContext.new(current_user, session['impersonate'])
+    end
+
+    # Apps that expose `react_response!` (toast handling, etc.) will reuse it.
+    # Otherwise we render the minimal JSON shape the React admin menu expects.
+    #
+    # options is spread into the fallback render hash, so it must stay named.
+    # rubocop:disable Style/ArgumentsForwarding
+    def render_admin_response(status, **options)
+      return react_response!(status, **options) if respond_to?(:react_response!, true)
+
+      render(json: { status: status.to_s.upcase, toasts: [], reload: false, **options })
+    end
+    # rubocop:enable Style/ArgumentsForwarding
+  end
+end

data/app/models/usps/support/policy/admin_context.rb

@@ -0,0 +1,26 @@
+module Usps::Support
+  module Policy
+    # Pundit user context that carries both the current user and any active
+    # impersonation session, so policies can distinguish the acting admin from
+    # the impersonated member.
+    #
+    class AdminContext
+      attr_reader :user, :impersonate
+
+      def initialize(user, impersonate)
+        @user = user
+        @impersonate = impersonate
+      end
+
+      def admin?
+        (impersonate&.fetch('impersonated', nil).present? ? original : user).admin?
+      end
+
+    private
+
+      def original
+        Members::Member.find(impersonate['admin'])
+      end
+    end
+  end
+end

data/config/routes.rb

@@ -0,0 +1,10 @@
+Usps::Support::Engine.routes.draw do
+  resource :admin, only: [], controller: '/usps/support/admins' do
+    collection do
+      post :impersonate
+      post :expand
+      post :collapse
+      delete :cancel
+    end
+  end
+end

data/lib/usps/support/engine.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'rails/engine'
+
+module Usps
+  module Support
+    # Rails engine hosting shared controllers, concerns, policies, and routes.
+    #
+    # Not isolated: host applications share the engine's ApplicationController,
+    # helpers, and authentication plumbing.
+    #
+    class Engine < ::Rails::Engine
+    end
+  end
+end

data/lib/usps/support/version.rb

@@ -2,6 +2,6 @@
 
 module Usps
   module Support
-    VERSION = '0.2.24'
+    VERSION = '0.2.25'
   end
 end

data/lib/usps/support.rb

@@ -15,5 +15,8 @@ require_relative 'support/models'
 require_relative 'support/lib'
 
 # :nocov:
-require 'usps/support/railtie' if defined?(Rails)
+if defined?(Rails)
+  require 'usps/support/railtie'
+  require 'usps/support/engine'
+end
 # :nocov:

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: usps-support
 version: !ruby/object:Gem::Version
-  version: 0.2.24
+  version: 0.2.25
 platform: ruby
 authors:
 - Julian Fiander
@@ -59,10 +59,15 @@ extensions: []
 extra_rdoc_files: []
 files:
 - Readme.md
+- app/controllers/concerns/usps/support/admin_menu.rb
+- app/controllers/usps/support/admins_controller.rb
+- app/models/usps/support/policy/admin_context.rb
+- config/routes.rb
 - lib/usps/all.rb
 - lib/usps/support.rb
 - lib/usps/support/db/members_schema.rb
 - lib/usps/support/db/websites_schema.rb
+- lib/usps/support/engine.rb
 - lib/usps/support/helpers.rb
 - lib/usps/support/helpers/badges_helper.rb
 - lib/usps/support/helpers/flags_helper.rb
@@ -100,10 +105,10 @@ files:
 - lib/usps/support/models/toast.rb
 - lib/usps/support/railtie.rb
 - lib/usps/support/version.rb
-homepage: https://github.com/unitedstatespowersquadrons/usps-rails
+homepage: https://github.com/unitedstatespowersquadrons/usps-support
 licenses: []
 metadata:
-  homepage_uri: https://github.com/unitedstatespowersquadrons/usps-rails
+  homepage_uri: https://github.com/unitedstatespowersquadrons/usps-support
   rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths: