14.3 Iteration I3: Limiting Access 14.1 Iteration I1: Adding Users

14.2 Iteration I2: Authenticating Users

57 (tests|runs), 172 assertions, 0 failures, 0 errors.
<0> expected to be
>=
<1>.

Traceback:
  /home/rubys/git/awdwr/edition4/checkdepot.rb:36:in `assert_test_summary'
  /home/rubys/git/awdwr/edition4/checkdepot.rb:327:in `block in <class:DepotTest>'

Generate empty controllers for sessions and administration

rails generate controller Sessions new create destroy

DEPRECATION WARNING: alias_method_chain is deprecated. Please, use Module#prepend instead. From module, you can access the original method using super. (called from rescue in <class:Exception> at /home/rubys/.rvm/gems/ruby-head-n50123/gems/web-console-2.1.2/lib/web_console/integration/cruby.rb:37)

      create  app/controllers/sessions_controller.rb

       route  get 'sessions/destroy'

       route  get 'sessions/create'

       route  get 'sessions/new'

      invoke  erb

      create    app/views/sessions

      create    app/views/sessions/new.html.erb

      create    app/views/sessions/create.html.erb

      create    app/views/sessions/destroy.html.erb

      invoke  test_unit

      create    test/controllers/sessions_controller_test.rb

      invoke  helper

      create    app/helpers/sessions_helper.rb

      invoke    test_unit

      invoke  assets

      invoke    coffee

      create      app/assets/javascripts/sessions.coffee

      invoke    scss

      create      app/assets/stylesheets/sessions.scss

rails generate controller Admin index

DEPRECATION WARNING: alias_method_chain is deprecated. Please, use Module#prepend instead. From module, you can access the original method using super. (called from rescue in <class:Exception> at /home/rubys/.rvm/gems/ruby-head-n50123/gems/web-console-2.1.2/lib/web_console/integration/cruby.rb:37)

      create  app/controllers/admin_controller.rb

       route  get 'admin/index'

      invoke  erb

      create    app/views/admin

      create    app/views/admin/index.html.erb

      invoke  test_unit

      create    test/controllers/admin_controller_test.rb

      invoke  helper

      create    app/helpers/admin_helper.rb

      invoke    test_unit

      invoke  assets

      invoke    coffee

      create      app/assets/javascripts/admin.coffee

      invoke    scss

      create      app/assets/stylesheets/admin.scss

Implement login in and out by storing the user_id in the session

edit app/controllers/sessions_controller.rb

class SessionsController < ApplicationController

  def new

end

  def create

    user = User.find_by(name: params[:name])

    if user and user.authenticate(params[:password])

      session[:user_id] = user.id

      redirect_to admin_url

    else

      redirect_to login_url, alert: "Invalid user/password combination"

end

end

  def destroy

    session[:user_id] = nil

    redirect_to store_url, notice: "Logged out"

end

end

Create the view using form_for as there is no underlying model

edit app/views/sessions/new.html.erb

<div class="depot_form">

  <% if flash[:alert] %>

    <p id="notice"><%= flash[:alert] %></p>

  <% end %>

  <%= form_tag do %>

    <fieldset>

      <legend>Please Log In</legend>

      <div>

        <%= label_tag :name, 'Name:' %>

        <%= text_field_tag :name, params[:name] %>

      </div>

      <div>

        <%= label_tag :password, 'Password:' %>

        <%= password_field_tag :password, params[:password] %>

      </div>

      <div>

        <%= submit_tag "Login" %>

      </div>

    </fieldset>

  <% end %>

</div>

Create a landing page for the administrator

edit app/views/admin/index.html.erb

<h1>Welcome</h1>

It's <%= Time.now %>

We have <%= pluralize(@total_orders, "order") %>.

Make the orders count available to the admin page

edit app/controllers/admin_controller.rb

class AdminController < ApplicationController

  def index

    @total_orders = Order.count

end

end

Connect the routes to the controller actions

edit config/routes.rb

Rails.application.routes.draw do

  get 'admin' => 'admin#index'

  controller :sessions do

    get  'login' => :new

    post 'login' => :create

    delete 'logout' => :destroy

end

  resources :users

  resources :orders

  resources :line_items

  resources :carts

  get 'store/index'

  resources :products do

    get :download, :on => :member

    get :who_bought, on: :member

end

  # The priority is based upon order of creation:

  # first created -> highest priority.

  # See how all your routes lay out with "rake routes".

  # You can have the root of your site routed with "root"

  root 'store#index', as: 'store'

  # ...

end

Do a login

get /login

post /login

name => dave
password => secret

You are being redirected.

get http://localhost:3000/admin

Welcome

It's 2015-03-30 06:46:27 -0400 We have 0 orders.

Fix the sessions controller test

edit test/controllers/sessions_controller_test.rb

require 'test_helper'

class SessionsControllerTest < ActionController::TestCase

  test "should get new" do

    get :new

    assert_response :success

end

  test "should login" do

    dave = users(:one)

    post :create, name: dave.name, password: 'secret'

    assert_redirected_to admin_url

    assert_equal dave.id, session[:user_id]

end

  test "should fail login" do

    dave = users(:one)

    post :create, name: dave.name, password: 'wrong'

    assert_redirected_to login_url

end

  test "should logout" do

    delete :destroy

    assert_redirected_to store_url

end

end

rake test

DEPRECATION WARNING: alias_method_chain is deprecated. Please, use Module#prepend instead. From module, you can access the original method using super. (called from rescue in <class:Exception> at /home/rubys/.rvm/gems/ruby-head-n50123/gems/web-console-2.1.2/lib/web_console/integration/cruby.rb:37)

DEPRECATION WARNING: alias_method_chain is deprecated. Please, use Module#prepend instead. From module, you can access the original method using super. (called from block in <top (required)> at /home/rubys/.rvm/gems/ruby-head-n50123/gems/web-console-2.1.2/lib/web_console/extensions.rb:18)

DEPRECATION WARNING: alias_method_chain is deprecated. Please, use Module#prepend instead. From module, you can access the original method using super. (called from included at /home/rubys/.rvm/gems/ruby-head-n50123/gems/turbolinks-2.5.3/lib/turbolinks/xhr_url_for.rb:7)

rake aborted!

SyntaxError: /home/rubys/git/awdwr/edition4/work-220/depot/test/controllers/line_items_controller_test.rb:23: syntax error, unexpected keyword_end, expecting '}'

/home/rubys/git/awdwr/edition4/work-220/depot/test/controllers/line_items_controller_test.rb:68: syntax error, unexpected end-of-input, expecting keyword_end

/home/rubys/git/rails/activesupport/lib/active_support/dependencies.rb:274:in `require'

/home/rubys/git/rails/activesupport/lib/active_support/dependencies.rb:274:in `block in require'

/home/rubys/git/rails/activesupport/lib/active_support/dependencies.rb:240:in `load_dependency'

/home/rubys/git/rails/activesupport/lib/active_support/dependencies.rb:274:in `require'

/home/rubys/git/rails/railties/lib/rails/test_unit/runner.rb:118:in `block in run_tests'

/home/rubys/git/rails/railties/lib/rails/test_unit/runner.rb:117:in `each'

/home/rubys/git/rails/railties/lib/rails/test_unit/runner.rb:117:in `run_tests'

/home/rubys/git/rails/railties/lib/rails/test_unit/runner.rb:88:in `run'

/home/rubys/git/rails/railties/lib/rails/test_unit/runner.rb:82:in `run'

/home/rubys/git/rails/railties/lib/rails/test_unit/testing.rake:9:in `block in <top (required)>'

Tasks: TOP => test

(See full trace by running task with --trace)

14.3 Iteration I3: Limiting Access 14.1 Iteration I1: Adding Users

Agile Web Development with Rails, Edition 4

14.2 Iteration I2: Authenticating Users

Welcome