workarea-api 4.4.6

data/storefront/test/dummy/config/initializers/inflections.rb

@@ -0,0 +1,16 @@
+# Be sure to restart your server when you modify this file.
+
+# Add new inflection rules using the following format. Inflections
+# are locale specific, and you may define rules for as many different
+# locales as you wish. All of these examples are active by default:
+# ActiveSupport::Inflector.inflections(:en) do |inflect|
+#   inflect.plural /^(ox)$/i, '\1en'
+#   inflect.singular /^(ox)en/i, '\1'
+#   inflect.irregular 'person', 'people'
+#   inflect.uncountable %w( fish sheep )
+# end
+
+# These inflection rules are supported but not enabled by default:
+# ActiveSupport::Inflector.inflections(:en) do |inflect|
+#   inflect.acronym 'RESTful'
+# end

data/storefront/test/dummy/config/initializers/mime_types.rb

@@ -0,0 +1,4 @@
+# Be sure to restart your server when you modify this file.
+
+# Add new mime types for use in respond_to blocks:
+# Mime::Type.register "text/richtext", :rtf

data/storefront/test/dummy/config/initializers/new_framework_defaults.rb

@@ -0,0 +1,21 @@
+# Be sure to restart your server when you modify this file.
+#
+# This file contains migration options to ease your Rails 5.0 upgrade.
+#
+# Read the Guide for Upgrading Ruby on Rails for more info on each option.
+
+# Enable per-form CSRF tokens. Previous versions had false.
+Rails.application.config.action_controller.per_form_csrf_tokens = true
+
+# Enable origin-checking CSRF mitigation. Previous versions had false.
+Rails.application.config.action_controller.forgery_protection_origin_check = true
+
+# Make Ruby 2.4 preserve the timezone of the receiver when calling `to_time`.
+# Previous versions had false.
+ActiveSupport.to_time_preserves_timezone = true
+
+# Require `belongs_to` associations by default. Previous versions had false.
+# Rails.application.config.active_record.belongs_to_required_by_default = true
+
+# Configure SSL options to enable HSTS with subdomains. Previous versions had false.
+Rails.application.config.ssl_options = { hsts: { subdomains: true } }

data/storefront/test/dummy/config/initializers/session_store.rb

@@ -0,0 +1,3 @@
+# Be sure to restart your server when you modify this file.
+
+Rails.application.config.session_store :cookie_store, key: '_dummy_session'

data/storefront/test/dummy/config/initializers/workarea.rb

@@ -0,0 +1,8 @@
+Workarea.configure do |config|
+  config.site_name = 'Workarea API'
+  config.host = 'www.example.com'
+  config.asset_store = :file_system, {
+    root_path: '/tmp/workarea_api',
+    server_root: '/tmp/workarea_api'
+  }
+end

data/storefront/test/dummy/config/initializers/wrap_parameters.rb

@@ -0,0 +1,14 @@
+# Be sure to restart your server when you modify this file.
+
+# This file contains settings for ActionController::ParamsWrapper which
+# is enabled by default.
+
+# Enable parameter wrapping for JSON. You can disable this by setting :format to an empty array.
+ActiveSupport.on_load(:action_controller) do
+  wrap_parameters format: [:json]
+end
+
+# To enable root element in JSON for ActiveRecord objects.
+# ActiveSupport.on_load(:active_record) do
+#   self.include_root_in_json = true
+# end

data/storefront/test/dummy/config/locales/en.yml

@@ -0,0 +1,23 @@
+# Files in the config/locales directory are used for internationalization
+# and are automatically loaded by Rails. If you want to use locales other
+# than English, add the necessary files in this directory.
+#
+# To use the locales, use `I18n.t`:
+#
+#     I18n.t 'hello'
+#
+# In views, this is aliased to just `t`:
+#
+#     <%= t('hello') %>
+#
+# To use a different locale, set it with `I18n.locale`:
+#
+#     I18n.locale = :es
+#
+# This would use the information in config/locales/es.yml.
+#
+# To learn more, please read the Rails Internationalization guide
+# available at http://guides.rubyonrails.org/i18n.html.
+
+en:
+  hello: "Hello world"

data/storefront/test/dummy/config/puma.rb

@@ -0,0 +1,47 @@
+# Puma can serve each request in a thread from an internal thread pool.
+# The `threads` method setting takes two numbers a minimum and maximum.
+# Any libraries that use thread pools should be configured to match
+# the maximum value specified for Puma. Default is set to 5 threads for minimum
+# and maximum, this matches the default thread size of Active Record.
+#
+threads_count = ENV.fetch('RAILS_MAX_THREADS') { 5 }.to_i
+threads threads_count, threads_count
+
+# Specifies the `port` that Puma will listen on to receive requests, default is 3000.
+#
+port        ENV.fetch('PORT') { 3000 }
+
+# Specifies the `environment` that Puma will run in.
+#
+environment ENV.fetch('RAILS_ENV') { 'development' }
+
+# Specifies the number of `workers` to boot in clustered mode.
+# Workers are forked webserver processes. If using threads and workers together
+# the concurrency of the application would be max `threads` * `workers`.
+# Workers do not work on JRuby or Windows (both of which do not support
+# processes).
+#
+# workers ENV.fetch("WEB_CONCURRENCY") { 2 }
+
+# Use the `preload_app!` method when specifying a `workers` number.
+# This directive tells Puma to first boot the application and load code
+# before forking the application. This takes advantage of Copy On Write
+# process behavior so workers use less memory. If you use this option
+# you need to make sure to reconnect any threads in the `on_worker_boot`
+# block.
+#
+# preload_app!
+
+# The code in the `on_worker_boot` will be called if you are using
+# clustered mode by specifying a number of `workers`. After each worker
+# process is booted this block will be run, if you are using `preload_app!`
+# option you will want to use this block to reconnect to any threads
+# or connections that may have been created at application boot, Ruby
+# cannot share connections between processes.
+#
+# on_worker_boot do
+#   ActiveRecord::Base.establish_connection if defined?(ActiveRecord)
+# end
+
+# Allow puma to be restarted by `rails restart` command.
+plugin :tmp_restart

data/storefront/test/dummy/config/routes.rb

@@ -0,0 +1,6 @@
+Rails.application.routes.draw do
+  mount Workarea::Core::Engine => '/'
+  mount Workarea::Admin::Engine => '/admin', as: 'admin'
+  mount Workarea::Storefront::Engine => '/', as: 'storefront'
+  mount Workarea::Api::Engine => '/api', as: 'api'
+end

data/storefront/test/dummy/config/secrets.yml

@@ -0,0 +1,22 @@
+# Be sure to restart your server when you modify this file.
+
+# Your secret key is used for verifying the integrity of signed cookies.
+# If you change this key, all old signed cookies will become invalid!
+
+# Make sure the secret is at least 30 characters and all random,
+# no regular words or you'll be exposed to dictionary attacks.
+# You can use `rails secret` to generate a secure secret key.
+
+# Make sure the secrets in this file are kept private
+# if you're sharing your code publicly.
+
+development:
+  secret_key_base: f02bb38df30a4450a062a761c00e2c537fe80b2dde6e2896682720bc1c7ba6e009b48488790065ebd9410391390b62e6d35f881b887e24d2ddf92c2d083a95d7
+
+test:
+  secret_key_base: 2eb74b7e24c45e52269da795c8591fb8f5b197184bc604b8329c57a7a1f1b595920827191443f30969180fccf5f8e53d2e735cd3b6caf7edb64d32d473ea7dca
+
+# Do not keep production secrets in the repository,
+# instead read values from the environment.
+production:
+  secret_key_base: <%= ENV["SECRET_KEY_BASE"] %>

data/storefront/test/dummy/config/spring.rb

@@ -0,0 +1,6 @@
+%w(
+  .ruby-version
+  .rbenv-vars
+  tmp/restart.txt
+  tmp/caching-dev.txt
+).each { |path| Spring.watch(path) }

data/storefront/test/dummy/config.ru

@@ -0,0 +1,4 @@
+# This file is used by Rack-based servers to start the application.
+
+require_relative 'config/environment'
+run Rails.application

data/storefront/test/dummy/db/seeds.rb

@@ -0,0 +1,2 @@
+require 'workarea/seeds'
+Workarea::Seeds.run

data/storefront/test/dummy/public/404.html

@@ -0,0 +1,67 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>The page you were looking for doesn't exist (404)</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <style>
+  body {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+    margin: 0;
+  }
+
+  div.dialog {
+    width: 95%;
+    max-width: 33em;
+    margin: 4em auto 0;
+  }
+
+  div.dialog > div {
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 12% 0;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+
+  h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+
+  div.dialog > p {
+    margin: 0 0 1em;
+    padding: 1em;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+
+<body>
+  <!-- This file lives in public/404.html -->
+  <div class="dialog">
+    <div>
+      <h1>The page you were looking for doesn't exist.</h1>
+      <p>You may have mistyped the address or the page may have moved.</p>
+    </div>
+    <p>If you are the application owner check the logs for more information.</p>
+  </div>
+</body>
+</html>

data/storefront/test/dummy/public/422.html

@@ -0,0 +1,67 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>The change you wanted was rejected (422)</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <style>
+  body {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+    margin: 0;
+  }
+
+  div.dialog {
+    width: 95%;
+    max-width: 33em;
+    margin: 4em auto 0;
+  }
+
+  div.dialog > div {
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 12% 0;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+
+  h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+
+  div.dialog > p {
+    margin: 0 0 1em;
+    padding: 1em;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+
+<body>
+  <!-- This file lives in public/422.html -->
+  <div class="dialog">
+    <div>
+      <h1>The change you wanted was rejected.</h1>
+      <p>Maybe you tried to change something you didn't have access to.</p>
+    </div>
+    <p>If you are the application owner check the logs for more information.</p>
+  </div>
+</body>
+</html>

data/storefront/test/dummy/public/500.html

@@ -0,0 +1,66 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>We're sorry, but something went wrong (500)</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <style>
+  body {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+    margin: 0;
+  }
+
+  div.dialog {
+    width: 95%;
+    max-width: 33em;
+    margin: 4em auto 0;
+  }
+
+  div.dialog > div {
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 12% 0;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+
+  h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+
+  div.dialog > p {
+    margin: 0 0 1em;
+    padding: 1em;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+
+<body>
+  <!-- This file lives in public/500.html -->
+  <div class="dialog">
+    <div>
+      <h1>We're sorry, but something went wrong.</h1>
+    </div>
+    <p>If you are the application owner check the logs for more information.</p>
+  </div>
+</body>
+</html>

data/storefront/test/dummy/public/favicon.ico

@@ -0,0 +1 @@
+

data/storefront/test/integration/workarea/api/storefront/accounts_integration_test.rb

@@ -0,0 +1,49 @@
+require 'test_helper'
+
+module Workarea
+  module Api
+    module Storefront
+      class AccountsIntegrationTest < IntegrationTest
+        include AuthenticationTest
+
+        def test_show
+          set_current_user(create_user(first_name: 'Ben', last_name: 'Crouse'))
+          get storefront_api.account_path
+
+          results = JSON.parse(response.body)
+          assert_equal('Ben', results['first_name'])
+          assert_equal('Crouse', results['last_name'])
+        end
+
+        def test_create
+          assert_difference 'User.count', 1 do
+            post storefront_api.account_path,
+              params: { email: 'bcrouse@weblinc.com', password: 'aP@ssw0rd!' }
+          end
+
+          assert(response.ok?)
+          results = JSON.parse(response.body)
+
+          assert_equal('bcrouse@weblinc.com', results['account']['email'])
+          assert(results['authentication_token'].present?)
+        end
+
+        def test_update
+          user = create_user(first_name: 'Ben', last_name: 'Crouse')
+          set_current_user(user)
+
+          put storefront_api.account_path,
+            params: { first_name: 'Bob', last_name: 'Clams' }
+
+          results = JSON.parse(response.body)
+          assert_equal('Bob', results['first_name'])
+          assert_equal('Clams', results['last_name'])
+
+          user.reload
+          assert_equal('Bob', user.first_name)
+          assert_equal('Clams', user.last_name)
+        end
+      end
+    end
+  end
+end

data/storefront/test/integration/workarea/api/storefront/analytics_integration_test.rb

@@ -0,0 +1,36 @@
+require 'test_helper'
+
+module Workarea
+  module Api
+    module Storefront
+      class AnalyticsIntegrationTest < Workarea::IntegrationTest
+        def test_saving_category_view
+          post storefront_api.analytics_category_view_path(category_id: 'foo')
+          assert_equal(1, Metrics::CategoryByDay.first.views)
+        end
+
+        def test_saving_product_view
+          post storefront_api.analytics_product_view_path(product_id: 'foo')
+          assert_equal(1, Metrics::ProductByDay.first.views)
+        end
+
+        def test_saving_search
+          post storefront_api.analytics_search_path,
+            params: { q: 'foo', total_results: 5 }
+
+          insights = Metrics::SearchByDay.first
+          assert_equal(1, insights.searches)
+          assert_equal(5, insights.total_results)
+        end
+
+        def test_saving_search_abandonment
+          # Saving abandonment is deprecated, and this will be removed in v3.5
+        end
+
+        def test_saving_filters
+          # Saving filters is deprecated, and this will be removed in v3.5
+        end
+      end
+    end
+  end
+end

data/storefront/test/integration/workarea/api/storefront/assets_integration_test.rb

@@ -0,0 +1,24 @@
+require 'test_helper'
+
+module Workarea
+  module Api
+    module Storefront
+      class AssetsIntegrationTest < IntegrationTest
+        setup :set_asset
+
+        def set_asset
+          @asset = create_asset
+        end
+
+        def test_shows_assets
+          get storefront_api.asset_path(@asset)
+          result = JSON.parse(response.body)
+
+          assert_equal(@asset.id.to_s, result['id'])
+          assert_equal(@asset.name, result['name'])
+          assert_includes(result['url'], @asset.optim.url)
+        end
+      end
+    end
+  end
+end

data/storefront/test/integration/workarea/api/storefront/authentication_integration_test.rb

@@ -0,0 +1,50 @@
+require 'test_helper'
+
+module Workarea
+  module Api
+    module Storefront
+      class AuthenticationIntegrationTest < IntegrationTest
+        include AuthenticationTest
+
+        setup :set_user
+
+        def set_user
+          @user = create_user(password: 'p@assword!')
+        end
+
+        def test_authentication
+          get storefront_api.account_path
+          refute(response.ok?)
+          assert_equal(401, response.status)
+
+          post storefront_api.authentication_tokens_path,
+            params: { email: @user.email, password: 'p@assword!' }
+
+          token = JSON.parse(response.body)['token']
+
+          get storefront_api.account_path,
+            headers: { 'HTTP_AUTHORIZATION' => encode_credentials(token) }
+
+          assert(response.ok?)
+          assert_equal(@user.id.to_s, JSON.parse(response.body)['id'])
+        end
+
+        def test_expired_token
+          post storefront_api.authentication_tokens_path,
+            params: { email: @user.email, password: 'p@assword!' }
+
+          token = JSON.parse(response.body)['token']
+
+          expired = (Workarea.config.authentication_token_expiration + 1.day).from_now
+          travel_to expired
+
+          get storefront_api.account_path,
+            headers: { 'HTTP_AUTHORIZATION' => encode_credentials(token) }
+
+          refute(response.ok?)
+          assert_equal(401, response.status)
+        end
+      end
+    end
+  end
+end

data/storefront/test/integration/workarea/api/storefront/authentication_tokens_integration_test.rb

@@ -0,0 +1,87 @@
+require 'test_helper'
+
+module Workarea
+  module Api
+    module Storefront
+      class AuthenticationTokensIntegrationTest < IntegrationTest
+        include AuthenticationTest
+
+        setup :set_user
+
+        def set_user
+          @user = create_user(password: 'p@assword!')
+        end
+
+        def test_creating_tokens
+          post storefront_api.authentication_tokens_path,
+            params: { email: @user.email, password: 'p@assword!' }
+
+          assert(response.ok?)
+          results = JSON.parse(response.body)
+          auth = @user.authentication_tokens.first
+          assert_equal(auth.token, results['token'])
+          assert_equal(auth.expires_at, results['expires_at'])
+        end
+
+        def test_wrong_password
+          post storefront_api.authentication_tokens_path,
+            params: { email: @user.email, password: 'wrongpassword' }
+
+          refute(response.ok?)
+          assert(JSON.parse(response.body)['problem'].present?)
+        end
+
+        def test_wrong_email
+          post storefront_api.authentication_tokens_path,
+            params: { email: 'foo@bar.com', password: 'p@assword!' }
+
+          refute(response.ok?)
+          assert(JSON.parse(response.body)['problem'].present?)
+        end
+
+        def test_expiring_auth_tokens_when_a_password_changes
+          post storefront_api.authentication_tokens_path,
+            params: { email: @user.email, password: 'p@assword!' }
+
+          token = JSON.parse(response.body)['token']
+
+          get storefront_api.account_path,
+            headers: { 'HTTP_AUTHORIZATION' => encode_credentials(token) }
+
+          assert(response.ok?)
+
+          @user.update_attributes!(password: 'a_different_password')
+
+          get storefront_api.account_path,
+            headers: { 'HTTP_AUTHORIZATION' => encode_credentials(token) }
+
+          refute(response.ok?)
+        end
+
+        def test_locking_login
+          Workarea.config.allowed_login_attempts.times do
+            post storefront_api.authentication_tokens_path,
+              params: { email: @user.email, password: 'wrongpassword' }
+          end
+
+          post storefront_api.authentication_tokens_path,
+            params: { email: @user.email, password: 'p@assword!' }
+
+          refute(response.ok?)
+          assert(JSON.parse(response.body)['problem'].present?)
+        end
+
+        def test_refreshing_token
+          post storefront_api.authentication_tokens_path,
+            params: { email: @user.email, password: 'p@assword!' }
+
+          token1 = JSON.parse(response.body)
+          patch storefront_api.authentication_tokens_path,
+            headers: { 'HTTP_AUTHORIZATION' => encode_credentials(token1['token']) }
+          token2 = JSON.parse(response.body)
+          assert_operator(token2['expires_at'].to_datetime, :>, token1['expires_at'].to_datetime)
+        end
+      end
+    end
+  end
+end