old mode 100755

new mode 100644

@@ -5,4 +5,4 @@ You are allowed to:

 2. Remove generators

 3. Add installed generators

 To add new installed generators automatically delete this file and reload the project.

+--><GeneratorsGroup><Generator name="active_record:migration" /><Generator name="active_record:model" /><Generator name="active_record:observer" /><Generator name="active_record:session_migration" /><Generator name="assets" /><Generator name="coffee:assets" /><Generator name="controller" /><Generator name="erb:controller" /><Generator name="erb:mailer" /><Generator name="erb:scaffold" /><Generator name="generator" /><Generator name="helper" /><Generator name="integration_test" /><Generator name="jquery:install" /><Generator name="js:assets" /><Generator name="mailer" /><Generator name="migration" /><Generator name="model" /><Generator name="mongoid:config" /><Generator name="observer" /><Generator name="performance_test" /><Generator name="resource" /><Generator name="scaffold" /><Generator name="scaffold_controller" /><Generator name="session_migration" /><Generator name="task" /></GeneratorsGroup></Settings>

old mode 100755

new mode 100644

@@ -22,13 +22,18 @@ group :assets do

 end

 group :development, :test do

-  gem 'rspec-rails'

-  gem 'spork'

 end

 group :development do

 end

+group :test do

+	gem "minitest"

+	gem 'minitest-reporters', '>= 0.5.0'

+	gem 'test-unit'

+	gem 'timecop'

+end

+

 gem 'jquery-rails'

 gem "haml", "~> 3.1.7"

 gem "haml-rails", "~> 0.3.5"

@@ -28,6 +28,7 @@ GEM

     activesupport (3.2.11)

       i18n (~> 0.6)

       multi_json (~> 1.0)

+    ansi (1.4.3)

     arel (3.0.2)

     builder (3.0.4)

     capistrano (2.14.1)

@@ -48,7 +49,6 @@ GEM

       chunky_png (~> 1.2)

       fssm (>= 0.2.7)

       sass (~> 3.1)

-    diff-lcs (1.1.3)

     erubis (2.7.0)

     execjs (1.4.0)

       multi_json (~> 1.0)

@@ -59,6 +59,7 @@ GEM

       activesupport (>= 3.1, < 4.1)

       haml (~> 3.1)

       railties (>= 3.1, < 4.1)

+    hashie (1.2.0)

     highline (1.6.15)

     hike (1.2.1)

     i18n (0.6.1)

@@ -72,6 +73,12 @@ GEM

       mime-types (~> 1.16)

       treetop (~> 1.4.8)

     mime-types (1.20.1)

+    minitest (4.5.0)

+    minitest-reporters (0.14.7)

+      ansi

+      builder

+      minitest (>= 2.12, < 5.0)

+      powerbar

     mongoid (3.0.21)

       activemodel (~> 3.1)

       moped (~> 1.2)

@@ -88,6 +95,9 @@ GEM

       net-ssh (>= 1.99.1)

     origin (1.0.11)

     polyglot (0.3.3)

+    powerbar (1.0.11)

+      ansi (~> 1.4.0)

+      hashie (>= 1.1.0)

     rack (1.4.4)

     rack-cache (1.2)

       rack (>= 0.4)

@@ -113,30 +123,20 @@ GEM

     rake (10.0.3)

     rdoc (3.12)

       json (~> 1.4)

-    rspec-core (2.12.2)

-    rspec-expectations (2.12.1)

-      diff-lcs (~> 1.1.3)

-    rspec-mocks (2.12.2)

-    rspec-rails (2.12.2)

-      actionpack (>= 3.0)

-      activesupport (>= 3.0)

-      railties (>= 3.0)

-      rspec-core (~> 2.12.0)

-      rspec-expectations (~> 2.12.0)

-      rspec-mocks (~> 2.12.0)

     sass (3.2.5)

     sass-rails (3.2.6)

       railties (~> 3.2.0)

       sass (>= 3.1.10)

       tilt (~> 1.3)

-    spork (0.9.2)

     sprockets (2.2.2)

       hike (~> 1.2)

       multi_json (~> 1.0)

       rack (~> 1.0)

       tilt (~> 1.1, != 1.3.0)

+    test-unit (2.5.4)

     thor (0.17.0)

     tilt (1.3.3)

+    timecop (0.5.9.1)

     treetop (1.4.12)

       polyglot

       polyglot (>= 0.3.1)

@@ -156,10 +156,12 @@ DEPENDENCIES

   haml (~> 3.1.7)

   haml-rails (~> 0.3.5)

   jquery-rails

+  minitest

+  minitest-reporters (>= 0.5.0)

   mongoid (~> 3.0.20)

   rails (= 3.2.11)

-  rspec-rails

   sass-rails (~> 3.2.3)

-  spork

+  test-unit

+  timecop

   uglifier (>= 1.0.3)

   xmpp4r (~> 0.5)

new file mode 100644

@@ -0,0 +1,3 @@

+# Place all the behaviors and hooks related to the matching controller here.

+# All this logic will automatically be available in application.js.

+# You can use CoffeeScript in this file: http://jashkenas.github.com/coffee-script/

@@ -1,3 +1,34 @@

 class ApplicationController < ActionController::Base

-  protect_from_forgery

+  #protect_from_forgery

+

+	before_filter :require_login

+

+	def require_login

+		#if controller_name == 'sessions' && action_name == 'new'

+		#	true

+		#end

+

+		if authenticated?

+			create_new_authentification()

+		else

+			#create_new_authentification()

+			#Redirect to login page

+		end

+	end

+

+	protected

+

+	def authenticated?

+		!! Token.authenticate(session)

+	end

+

+	def create_new_authentification

+		Token.remove_old_session(session[:token])

+

+		session[:token] = Token.generate_token()

+		session[:created_at] = Time.now

+		session[:ip] = request.remote_ip

+

+		Token.save_session(session)

+	end

 end

new file mode 100644

@@ -0,0 +1,13 @@

+class SessionsController < ApplicationController

+	def new

+

+	end

+

+	def create

+

+	end

+

+	def destroy

+		self.remove_old_session(session[:token])

+	end

+end

new file mode 100644

@@ -0,0 +1,2 @@

+module SessionsHelper

+end

new file mode 100644

@@ -0,0 +1,49 @@

+require 'ipaddr'

+

+class Token

+	include Mongoid::Document

+	include Mongoid::Timestamps::Created

+

+	index({ token: 1 })

+

+	field :token, type: String

+	field :date_expiring, type: DateTime

+	field :ip, type: Integer

+

+	def self.authenticate(session)

+		if session[:created_at] == nil

+			return false

+		end

+

+		matched_token = self.where(:token				=> session[:token],

+								   :ip					=> IPAddr.new(session[:ip]).to_i,

+								   :date_expiring.lte	=> session[:created_at] + Rails.application.config.max_lifetime,

+								   :created_at			=> session[:created_at]

+				).limit(1).first

+

+		matched_token

+	end

+

+	def self.save_session(session)

+		date_expiring = session[:created_at] + Rails.application.config.max_lifetime

+

+		self.create!(:token 		=> session[:token],

+					 :date_expiring	=> date_expiring,

+					 :created_at	=> session[:created_at],

+					 :ip			=> IPAddr.new(session[:ip]).to_i)

+	end

+

+	def self.remove_old_session(token)

+		self.delete_all(token: token)

+	end

+

+	private

+

+	def self.generate_token

+		begin

+			token = SecureRandom.urlsafe_base64

+		end while Token.where(token: token).exists?

+

+		token

+	end

+end

@@ -3,7 +3,7 @@

   %head

     %title= yield(:title) + " | App"

     %meta{:charset => "utf-8"}/

-    %link{ :href => "/css/screen.css", :media => "screen", :rel => "stylesheet" }

+    -#%link{ :href => "/css/screen.css", :media => "screen", :rel => "stylesheet" }

     = csrf_meta_tags

   %body

     = yield

\ No newline at end of file

new file mode 100644

@@ -0,0 +1,3 @@

+- content_for(:title, 'Login')

+

+Hello

\ No newline at end of file

new file mode 100644

@@ -0,0 +1,2 @@

+# How long session will be remembered. 2 Weeks.

+Xmpp::Application.config.max_lifetime = 60 * 60 * 24 * 2

\ No newline at end of file

@@ -1,55 +1,8 @@

 Xmpp::Application.routes.draw do

-  # Sample of regular route:

-  #   match 'products/:id' => 'catalog#view'

-  # Keep in mind you can assign values other than :controller and :action

+	resources :sessions, only: [:new, :create, :destroy]

-  # Sample of named route:

-  #   match 'products/:id/purchase' => 'catalog#purchase', :as => :purchase

-  # This route can be invoked with purchase_url(:id => product.id)

+  	root :to => 'sessions#new'

-  # Sample resource route (maps HTTP verbs to controller actions automatically):

-  #   resources :products

-

-  # Sample resource route with options:

-  #   resources :products do

-  #     member do

-  #       get 'short'

-  #       post 'toggle'

-  #     end

-  #

-  #     collection do

-  #       get 'sold'

-  #     end

-  #   end

-

-  # Sample resource route with sub-resources:

-  #   resources :products do

-  #     resources :comments, :sales

-  #     resource :seller

-  #   end

-

-  # Sample resource route with more complex sub-resources

-  #   resources :products do

-  #     resources :comments

-  #     resources :sales do

-  #       get 'recent', :on => :collection

-  #     end

-  #   end

-

-  # Sample resource route within a namespace:

-  #   namespace :admin do

-  #     # Directs /admin/products/* to Admin::ProductsController

-  #     # (app/controllers/admin/products_controller.rb)

-  #     resources :products

-  #   end

-

-  # You can have the root of your site routed with "root"

-  # just remember to delete public/index.html.

-  root :to => 'login#index'

-

-  # See how all your routes lay out with "rake routes"

-

-  # This is a legacy wild controller route that's not recommended for RESTful applications.

-  # Note: This route will make all actions in every controller accessible via GET requests.

-  # match ':controller(/:action(/:id))(.:format)'

+	match '/signin',  to: 'sessions#new'

+	match '/signout', to: 'sessions#destroy', via: :delete

 end

new file mode 100644

@@ -0,0 +1,13 @@

+# Read about fixtures at http://api.rubyonrails.org/classes/ActiveRecord/Fixtures.html

+

+one:

+  token: MyString

+  date_created: 

+  date_expiring: 

+  ip: 1

+

+two:

+  token: MyString

+  date_created: 

+  date_expiring: 

+  ip: 1

new file mode 100644

@@ -0,0 +1,7 @@

+require 'test_helper'

+

+class SessionsControllerTest < ActionController::TestCase

+  # test "the truth" do

+  #   assert true

+  # end

+end

@@ -1,6 +1,8 @@

 ENV["RAILS_ENV"] = "test"

 require File.expand_path('../../config/environment', __FILE__)

 require 'rails/test_help'

+require 'minitest/autorun'

+require 'timecop'

 class ActiveSupport::TestCase

   # Add more helper methods to be used by all tests here...

new file mode 100644

@@ -0,0 +1,4 @@

+require 'test_helper'

+

+class SessionsHelperTest < ActionView::TestCase

+end

new file mode 100644

@@ -0,0 +1,41 @@

+require 'test_helper'

+require 'ipaddr'

+

+class TokenTest < ActiveSupport::TestCase

+

+	def setup

+		@frozen_time = Time.now

+	end

+

+	def teardown

+		Token.delete_all()

+	end

+

+	test "should authentificate" do

+		Timecop.freeze(@frozen_time) do

+			Token.save_session({token: "123", ip: "8.8.8.8", created_at: Time.now})

+			assert !! Token.authenticate({token: "123", created_at: Time.now, ip: "8.8.8.8"})

+		end

+	end

+

+	test "shouldnt auth with wrong token" do

+		Timecop.freeze(@frozen_time) do

+			Token.save_session({token: "123", ip: "8.8.8.100", created_at: @frozen_time})

+			assert_false !! Token.authenticate({token: "14423", created_at: @frozen_time, ip: "8.8.8.100"})

+		end

+	end

+

+	test "shouldnt auth with wrong time" do

+		Timecop.freeze(@frozen_time) do

+			Token.save_session({token: "123", ip: "8.1.1.1", created_at: @frozen_time})

+			assert_false !! Token.authenticate({token: "123", created_at: @frozen_time + Rails.application.config.max_lifetime + 10, ip: "8.1.1.1"})

+		end

+	end

+

+	test "shouldnt auth with wrong ip" do

+		Timecop.freeze(@frozen_time) do

+			Token.save_session({token: "123", ip: "8.1.1.1", created_at: @frozen_time})

+			assert_false !! Token.authenticate({token: "123", created_at: @frozen_time, ip: "8.1.1.100"})

+		end

+	end

+end