workarea-api-admin 4.4.6

data/test/dummy/config/locales/en.yml

@@ -0,0 +1,23 @@
+# Files in the config/locales directory are used for internationalization
+# and are automatically loaded by Rails. If you want to use locales other
+# than English, add the necessary files in this directory.
+#
+# To use the locales, use `I18n.t`:
+#
+#     I18n.t 'hello'
+#
+# In views, this is aliased to just `t`:
+#
+#     <%= t('hello') %>
+#
+# To use a different locale, set it with `I18n.locale`:
+#
+#     I18n.locale = :es
+#
+# This would use the information in config/locales/es.yml.
+#
+# To learn more, please read the Rails Internationalization guide
+# available at http://guides.rubyonrails.org/i18n.html.
+
+en:
+  hello: "Hello world"

data/test/dummy/config/puma.rb

@@ -0,0 +1,47 @@
+# Puma can serve each request in a thread from an internal thread pool.
+# The `threads` method setting takes two numbers a minimum and maximum.
+# Any libraries that use thread pools should be configured to match
+# the maximum value specified for Puma. Default is set to 5 threads for minimum
+# and maximum, this matches the default thread size of Active Record.
+#
+threads_count = ENV.fetch('RAILS_MAX_THREADS') { 5 }.to_i
+threads threads_count, threads_count
+
+# Specifies the `port` that Puma will listen on to receive requests, default is 3000.
+#
+port        ENV.fetch('PORT') { 3000 }
+
+# Specifies the `environment` that Puma will run in.
+#
+environment ENV.fetch('RAILS_ENV') { 'development' }
+
+# Specifies the number of `workers` to boot in clustered mode.
+# Workers are forked webserver processes. If using threads and workers together
+# the concurrency of the application would be max `threads` * `workers`.
+# Workers do not work on JRuby or Windows (both of which do not support
+# processes).
+#
+# workers ENV.fetch("WEB_CONCURRENCY") { 2 }
+
+# Use the `preload_app!` method when specifying a `workers` number.
+# This directive tells Puma to first boot the application and load code
+# before forking the application. This takes advantage of Copy On Write
+# process behavior so workers use less memory. If you use this option
+# you need to make sure to reconnect any threads in the `on_worker_boot`
+# block.
+#
+# preload_app!
+
+# The code in the `on_worker_boot` will be called if you are using
+# clustered mode by specifying a number of `workers`. After each worker
+# process is booted this block will be run, if you are using `preload_app!`
+# option you will want to use this block to reconnect to any threads
+# or connections that may have been created at application boot, Ruby
+# cannot share connections between processes.
+#
+# on_worker_boot do
+#   ActiveRecord::Base.establish_connection if defined?(ActiveRecord)
+# end
+
+# Allow puma to be restarted by `rails restart` command.
+plugin :tmp_restart

data/test/dummy/config/routes.rb

@@ -0,0 +1,6 @@
+Rails.application.routes.draw do
+  mount Workarea::Core::Engine => '/'
+  mount Workarea::Admin::Engine => '/admin', as: 'admin'
+  mount Workarea::Storefront::Engine => '/', as: 'storefront'
+  mount Workarea::Api::Engine => '/api', as: 'api'
+end

data/test/dummy/config/secrets.yml

@@ -0,0 +1,22 @@
+# Be sure to restart your server when you modify this file.
+
+# Your secret key is used for verifying the integrity of signed cookies.
+# If you change this key, all old signed cookies will become invalid!
+
+# Make sure the secret is at least 30 characters and all random,
+# no regular words or you'll be exposed to dictionary attacks.
+# You can use `rails secret` to generate a secure secret key.
+
+# Make sure the secrets in this file are kept private
+# if you're sharing your code publicly.
+
+development:
+  secret_key_base: f02bb38df30a4450a062a761c00e2c537fe80b2dde6e2896682720bc1c7ba6e009b48488790065ebd9410391390b62e6d35f881b887e24d2ddf92c2d083a95d7
+
+test:
+  secret_key_base: 2eb74b7e24c45e52269da795c8591fb8f5b197184bc604b8329c57a7a1f1b595920827191443f30969180fccf5f8e53d2e735cd3b6caf7edb64d32d473ea7dca
+
+# Do not keep production secrets in the repository,
+# instead read values from the environment.
+production:
+  secret_key_base: <%= ENV["SECRET_KEY_BASE"] %>

data/test/dummy/config/spring.rb

@@ -0,0 +1,6 @@
+%w(
+  .ruby-version
+  .rbenv-vars
+  tmp/restart.txt
+  tmp/caching-dev.txt
+).each { |path| Spring.watch(path) }

data/test/dummy/db/seeds.rb

@@ -0,0 +1,2 @@
+require 'workarea/seeds'
+Workarea::Seeds.run

data/test/dummy/public/404.html

@@ -0,0 +1,67 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>The page you were looking for doesn't exist (404)</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <style>
+  body {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+    margin: 0;
+  }
+
+  div.dialog {
+    width: 95%;
+    max-width: 33em;
+    margin: 4em auto 0;
+  }
+
+  div.dialog > div {
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 12% 0;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+
+  h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+
+  div.dialog > p {
+    margin: 0 0 1em;
+    padding: 1em;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+
+<body>
+  <!-- This file lives in public/404.html -->
+  <div class="dialog">
+    <div>
+      <h1>The page you were looking for doesn't exist.</h1>
+      <p>You may have mistyped the address or the page may have moved.</p>
+    </div>
+    <p>If you are the application owner check the logs for more information.</p>
+  </div>
+</body>
+</html>

data/test/dummy/public/422.html

@@ -0,0 +1,67 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>The change you wanted was rejected (422)</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <style>
+  body {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+    margin: 0;
+  }
+
+  div.dialog {
+    width: 95%;
+    max-width: 33em;
+    margin: 4em auto 0;
+  }
+
+  div.dialog > div {
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 12% 0;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+
+  h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+
+  div.dialog > p {
+    margin: 0 0 1em;
+    padding: 1em;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+
+<body>
+  <!-- This file lives in public/422.html -->
+  <div class="dialog">
+    <div>
+      <h1>The change you wanted was rejected.</h1>
+      <p>Maybe you tried to change something you didn't have access to.</p>
+    </div>
+    <p>If you are the application owner check the logs for more information.</p>
+  </div>
+</body>
+</html>

data/test/dummy/public/500.html

@@ -0,0 +1,66 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>We're sorry, but something went wrong (500)</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <style>
+  body {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+    margin: 0;
+  }
+
+  div.dialog {
+    width: 95%;
+    max-width: 33em;
+    margin: 4em auto 0;
+  }
+
+  div.dialog > div {
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 12% 0;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+
+  h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+
+  div.dialog > p {
+    margin: 0 0 1em;
+    padding: 1em;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+
+<body>
+  <!-- This file lives in public/500.html -->
+  <div class="dialog">
+    <div>
+      <h1>We're sorry, but something went wrong.</h1>
+    </div>
+    <p>If you are the application owner check the logs for more information.</p>
+  </div>
+</body>
+</html>

data/test/dummy/public/favicon.ico

@@ -0,0 +1 @@
+

data/test/integration/workarea/api/admin/audit_log_integration_test.rb

@@ -0,0 +1,20 @@
+require 'test_helper'
+
+module Workarea
+  module Api
+    module Admin
+      class AuditLogIntegrationTest < IntegrationTest
+        include Workarea::Admin::IntegrationTest
+
+        def test_records_changes_in_the_audit_log
+          assert_difference 'Mongoid::AuditLog::Entry.count', 1 do
+            product = create_product
+
+            patch admin_api.product_path(product.id),
+              params: { product: { name: 'foo' } }
+          end
+        end
+      end
+    end
+  end
+end

data/test/integration/workarea/api/admin/authentication_integration_test.rb

@@ -0,0 +1,61 @@
+require 'test_helper'
+
+module Workarea
+  module Api
+    module Admin
+      class AuthenticationIntegrationTest < IntegrationTest
+        def encode_credentials(*args)
+          ActionController::HttpAuthentication::Basic.encode_credentials(*args)
+        end
+
+        def test_requires_basic_authentication
+          get admin_api.products_path
+          assert_equal(401, response.status)
+        end
+
+        def test_only_allows_admin_users_with_api_access
+          user = create_user(admin: false, password: 'Ap1_test')
+          admin = create_user(admin: true, password: 'Ap1_test')
+          admin_with_api = create_user(
+            admin: true,
+            password: 'Ap1_test',
+            api_access: true
+          )
+
+          get admin_api.products_path,
+            headers: {
+              'HTTP_AUTHORIZATION' => encode_credentials(user.email, 'Ap1_test')
+            }
+          assert_equal(401, response.status)
+
+          get admin_api.products_path,
+            headers: {
+              'HTTP_AUTHORIZATION' => encode_credentials(admin.email, 'Ap1_test')
+            }
+          assert_equal(401, response.status)
+
+          get admin_api.products_path,
+            headers: {
+              'HTTP_AUTHORIZATION' => encode_credentials(admin_with_api.email, 'Ap1_test')
+            }
+          assert_equal(200, response.status)
+        end
+
+        def test_allows_super_admins
+          super_admin = create_user(
+            admin: false,
+            super_admin: true,
+            api_access: false,
+            password: 'Ap1_test'
+          )
+
+          get admin_api.products_path,
+            headers: {
+              'HTTP_AUTHORIZATION' => encode_credentials(super_admin.email, 'Ap1_test')
+            }
+          assert_equal(200, response.status)
+        end
+      end
+    end
+  end
+end

data/test/integration/workarea/api/admin/categories_integration_test.rb

@@ -0,0 +1,64 @@
+require 'test_helper'
+
+module Workarea
+  module Api
+    module Admin
+      class CategoriesIntegrationTest < IntegrationTest
+        include Workarea::Admin::IntegrationTest
+
+        setup :set_sample_attributes
+
+        def set_sample_attributes
+          @sample_attributes = create_category.as_json.except('_id', 'slug')
+        end
+
+        def test_lists_categories
+          categories = [create_category, create_category]
+          get admin_api.categories_path
+          result = JSON.parse(response.body)['categories']
+
+          assert_equal(3, result.length)
+          assert_equal(categories.second, Catalog::Category.new(result.first))
+          assert_equal(categories.first, Catalog::Category.new(result.second))
+        end
+
+        def test_creates_categories
+          data = @sample_attributes
+          assert_difference 'Catalog::Category.count', 1 do
+            post admin_api.categories_path, params: { category: data }
+          end
+        end
+
+        def test_shows_categories
+          category = create_category
+          get admin_api.category_path(category.id)
+          result = JSON.parse(response.body)['category']
+          assert_equal(category, Catalog::Category.new(result))
+        end
+
+        def test_updates_categories
+          category = create_category
+          patch admin_api.category_path(category.id), params: { category: { name: 'foo' } }
+
+          category.reload
+          assert_equal('foo', category.name)
+        end
+
+        def test_bulk_upserts_categories
+          data = [@sample_attributes] * 10
+          assert_difference 'Catalog::Category.count', 10 do
+            patch admin_api.bulk_categories_path, params: { categories: data }
+          end
+        end
+
+        def test_destroys_categories
+          category = create_category
+
+          assert_difference 'Catalog::Category.count', -1 do
+            delete admin_api.category_path(category.id)
+          end
+        end
+      end
+    end
+  end
+end