auth via somethingawful cookie

This commit is contained in:
2024-03-29 15:54:42 +01:00
parent b26434b795
commit c111723740
21 changed files with 408 additions and 1134 deletions

View File

@ -6,42 +6,34 @@ defmodule SomethingErlang.Accounts do
import Ecto.Query, warn: false import Ecto.Query, warn: false
alias SomethingErlang.Repo alias SomethingErlang.Repo
alias SomethingErlang.AwfulApi.Client
alias SomethingErlang.Accounts.{User, UserToken, UserNotifier} alias SomethingErlang.Accounts.{User, UserToken, UserNotifier}
## Database getters ## Database getters
@doc """ def get_user_by_bbuserid(bbuserid) when is_binary(bbuserid) do
Gets a user by email. Repo.get_by(User, :bbuserid, bbuserid)
## Examples
iex> get_user_by_email("foo@example.com")
%User{}
iex> get_user_by_email("unknown@example.com")
nil
"""
def get_user_by_email(email) when is_binary(email) do
Repo.get_by(User, email: email)
end end
@doc """ def get_or_create_user_by_bbuserid(bbuserid)
Gets a user by email and password. when is_binary(bbuserid) do
if user = Repo.get_by(User, bbuserid: bbuserid) do
user
else
%User{bbuserid: bbuserid} |> Repo.insert!()
end
end
## Examples def login_sa_user_and_get_cookies(username, password)
when is_binary(username) and is_binary(password) do
case Client.login(username, password) do
%{bbuserid: userid, bbpassword: _hash} = bbuser ->
user = get_or_create_user_by_bbuserid(userid)
Map.merge(user, bbuser)
iex> get_user_by_email_and_password("foo@example.com", "correct_password") _ ->
%User{}
iex> get_user_by_email_and_password("foo@example.com", "invalid_password")
nil nil
end
"""
def get_user_by_email_and_password(email, password)
when is_binary(email) and is_binary(password) do
user = Repo.get_by(User, email: email)
if User.valid_password?(user, password), do: user
end end
@doc """ @doc """
@ -90,129 +82,7 @@ defmodule SomethingErlang.Accounts do
""" """
def change_user_registration(%User{} = user, attrs \\ %{}) do def change_user_registration(%User{} = user, attrs \\ %{}) do
User.registration_changeset(user, attrs, hash_password: false, validate_email: false) User.registration_changeset(user, attrs)
end
## Settings
@doc """
Returns an `%Ecto.Changeset{}` for changing the user email.
## Examples
iex> change_user_email(user)
%Ecto.Changeset{data: %User{}}
"""
def change_user_email(user, attrs \\ %{}) do
User.email_changeset(user, attrs, validate_email: false)
end
@doc """
Emulates that the email will change without actually changing
it in the database.
## Examples
iex> apply_user_email(user, "valid password", %{email: ...})
{:ok, %User{}}
iex> apply_user_email(user, "invalid password", %{email: ...})
{:error, %Ecto.Changeset{}}
"""
def apply_user_email(user, password, attrs) do
user
|> User.email_changeset(attrs)
|> User.validate_current_password(password)
|> Ecto.Changeset.apply_action(:update)
end
@doc """
Updates the user email using the given token.
If the token matches, the user email is updated and the token is deleted.
The confirmed_at date is also updated to the current time.
"""
def update_user_email(user, token) do
context = "change:#{user.email}"
with {:ok, query} <- UserToken.verify_change_email_token_query(token, context),
%UserToken{sent_to: email} <- Repo.one(query),
{:ok, _} <- Repo.transaction(user_email_multi(user, email, context)) do
:ok
else
_ -> :error
end
end
defp user_email_multi(user, email, context) do
changeset =
user
|> User.email_changeset(%{email: email})
|> User.confirm_changeset()
Ecto.Multi.new()
|> Ecto.Multi.update(:user, changeset)
|> Ecto.Multi.delete_all(:tokens, UserToken.user_and_contexts_query(user, [context]))
end
@doc ~S"""
Delivers the update email instructions to the given user.
## Examples
iex> deliver_user_update_email_instructions(user, current_email, &url(~p"/users/settings/confirm_email/#{&1})")
{:ok, %{to: ..., body: ...}}
"""
def deliver_user_update_email_instructions(%User{} = user, current_email, update_email_url_fun)
when is_function(update_email_url_fun, 1) do
{encoded_token, user_token} = UserToken.build_email_token(user, "change:#{current_email}")
Repo.insert!(user_token)
UserNotifier.deliver_update_email_instructions(user, update_email_url_fun.(encoded_token))
end
@doc """
Returns an `%Ecto.Changeset{}` for changing the user password.
## Examples
iex> change_user_password(user)
%Ecto.Changeset{data: %User{}}
"""
def change_user_password(user, attrs \\ %{}) do
User.password_changeset(user, attrs, hash_password: false)
end
@doc """
Updates the user password.
## Examples
iex> update_user_password(user, "valid password", %{password: ...})
{:ok, %User{}}
iex> update_user_password(user, "invalid password", %{password: ...})
{:error, %Ecto.Changeset{}}
"""
def update_user_password(user, password, attrs) do
changeset =
user
|> User.password_changeset(attrs)
|> User.validate_current_password(password)
Ecto.Multi.new()
|> Ecto.Multi.update(:user, changeset)
|> Ecto.Multi.delete_all(:tokens, UserToken.user_and_contexts_query(user, :all))
|> Repo.transaction()
|> case do
{:ok, %{user: user}} -> {:ok, user}
{:error, :user, changeset, _} -> {:error, changeset}
end
end end
## Session ## Session
@ -241,113 +111,4 @@ defmodule SomethingErlang.Accounts do
Repo.delete_all(UserToken.token_and_context_query(token, "session")) Repo.delete_all(UserToken.token_and_context_query(token, "session"))
:ok :ok
end end
## Confirmation
@doc ~S"""
Delivers the confirmation email instructions to the given user.
## Examples
iex> deliver_user_confirmation_instructions(user, &url(~p"/users/confirm/#{&1}"))
{:ok, %{to: ..., body: ...}}
iex> deliver_user_confirmation_instructions(confirmed_user, &url(~p"/users/confirm/#{&1}"))
{:error, :already_confirmed}
"""
def deliver_user_confirmation_instructions(%User{} = user, confirmation_url_fun)
when is_function(confirmation_url_fun, 1) do
if user.confirmed_at do
{:error, :already_confirmed}
else
{encoded_token, user_token} = UserToken.build_email_token(user, "confirm")
Repo.insert!(user_token)
UserNotifier.deliver_confirmation_instructions(user, confirmation_url_fun.(encoded_token))
end
end
@doc """
Confirms a user by the given token.
If the token matches, the user account is marked as confirmed
and the token is deleted.
"""
def confirm_user(token) do
with {:ok, query} <- UserToken.verify_email_token_query(token, "confirm"),
%User{} = user <- Repo.one(query),
{:ok, %{user: user}} <- Repo.transaction(confirm_user_multi(user)) do
{:ok, user}
else
_ -> :error
end
end
defp confirm_user_multi(user) do
Ecto.Multi.new()
|> Ecto.Multi.update(:user, User.confirm_changeset(user))
|> Ecto.Multi.delete_all(:tokens, UserToken.user_and_contexts_query(user, ["confirm"]))
end
## Reset password
@doc ~S"""
Delivers the reset password email to the given user.
## Examples
iex> deliver_user_reset_password_instructions(user, &url(~p"/users/reset_password/#{&1}"))
{:ok, %{to: ..., body: ...}}
"""
def deliver_user_reset_password_instructions(%User{} = user, reset_password_url_fun)
when is_function(reset_password_url_fun, 1) do
{encoded_token, user_token} = UserToken.build_email_token(user, "reset_password")
Repo.insert!(user_token)
UserNotifier.deliver_reset_password_instructions(user, reset_password_url_fun.(encoded_token))
end
@doc """
Gets the user by reset password token.
## Examples
iex> get_user_by_reset_password_token("validtoken")
%User{}
iex> get_user_by_reset_password_token("invalidtoken")
nil
"""
def get_user_by_reset_password_token(token) do
with {:ok, query} <- UserToken.verify_email_token_query(token, "reset_password"),
%User{} = user <- Repo.one(query) do
user
else
_ -> nil
end
end
@doc """
Resets the user password.
## Examples
iex> reset_user_password(user, %{password: "new long password", password_confirmation: "new long password"})
{:ok, %User{}}
iex> reset_user_password(user, %{password: "valid", password_confirmation: "not the same"})
{:error, %Ecto.Changeset{}}
"""
def reset_user_password(user, attrs) do
Ecto.Multi.new()
|> Ecto.Multi.update(:user, User.password_changeset(user, attrs))
|> Ecto.Multi.delete_all(:tokens, UserToken.user_and_contexts_query(user, :all))
|> Repo.transaction()
|> case do
{:ok, %{user: user}} -> {:ok, user}
{:error, :user, changeset, _} -> {:error, changeset}
end
end
end end

View File

@ -3,153 +3,14 @@ defmodule SomethingErlang.Accounts.User do
import Ecto.Changeset import Ecto.Changeset
schema "users" do schema "users" do
field :email, :string field :bbuserid, :string
field :password, :string, virtual: true, redact: true
field :hashed_password, :string, redact: true
field :confirmed_at, :naive_datetime
timestamps() timestamps()
end end
@doc """
A user changeset for registration.
It is important to validate the length of both email and password.
Otherwise databases may truncate the email without warnings, which
could lead to unpredictable or insecure behaviour. Long passwords may
also be very expensive to hash for certain algorithms.
## Options
* `:hash_password` - Hashes the password so it can be stored securely
in the database and ensures the password field is cleared to prevent
leaks in the logs. If password hashing is not needed and clearing the
password field is not desired (like when using this changeset for
validations on a LiveView form), this option can be set to `false`.
Defaults to `true`.
* `:validate_email` - Validates the uniqueness of the email, in case
you don't want to validate the uniqueness of the email (like when
using this changeset for validations on a LiveView form before
submitting the form), this option can be set to `false`.
Defaults to `true`.
"""
def registration_changeset(user, attrs, opts \\ []) do def registration_changeset(user, attrs, opts \\ []) do
user user
|> cast(attrs, [:email, :password]) |> cast(attrs, [:bbuserid])
|> validate_email(opts) |> validate_required([:bbuserid])
|> validate_password(opts)
end
defp validate_email(changeset, opts) do
changeset
|> validate_required([:email])
|> validate_format(:email, ~r/^[^\s]+@[^\s]+$/, message: "must have the @ sign and no spaces")
|> validate_length(:email, max: 160)
|> maybe_validate_unique_email(opts)
end
defp validate_password(changeset, opts) do
changeset
|> validate_required([:password])
|> validate_length(:password, min: 12, max: 72)
# |> validate_format(:password, ~r/[a-z]/, message: "at least one lower case character")
# |> validate_format(:password, ~r/[A-Z]/, message: "at least one upper case character")
# |> validate_format(:password, ~r/[!?@#$%^&*_0-9]/, message: "at least one digit or punctuation character")
|> maybe_hash_password(opts)
end
defp maybe_hash_password(changeset, opts) do
hash_password? = Keyword.get(opts, :hash_password, true)
password = get_change(changeset, :password)
if hash_password? && password && changeset.valid? do
changeset
# If using Bcrypt, then further validate it is at most 72 bytes long
|> validate_length(:password, max: 72, count: :bytes)
|> put_change(:hashed_password, Bcrypt.hash_pwd_salt(password))
|> delete_change(:password)
else
changeset
end
end
defp maybe_validate_unique_email(changeset, opts) do
if Keyword.get(opts, :validate_email, true) do
changeset
|> unsafe_validate_unique(:email, SomethingErlang.Repo)
|> unique_constraint(:email)
else
changeset
end
end
@doc """
A user changeset for changing the email.
It requires the email to change otherwise an error is added.
"""
def email_changeset(user, attrs, opts \\ []) do
user
|> cast(attrs, [:email])
|> validate_email(opts)
|> case do
%{changes: %{email: _}} = changeset -> changeset
%{} = changeset -> add_error(changeset, :email, "did not change")
end
end
@doc """
A user changeset for changing the password.
## Options
* `:hash_password` - Hashes the password so it can be stored securely
in the database and ensures the password field is cleared to prevent
leaks in the logs. If password hashing is not needed and clearing the
password field is not desired (like when using this changeset for
validations on a LiveView form), this option can be set to `false`.
Defaults to `true`.
"""
def password_changeset(user, attrs, opts \\ []) do
user
|> cast(attrs, [:password])
|> validate_confirmation(:password, message: "does not match password")
|> validate_password(opts)
end
@doc """
Confirms the account by setting `confirmed_at`.
"""
def confirm_changeset(user) do
now = NaiveDateTime.utc_now() |> NaiveDateTime.truncate(:second)
change(user, confirmed_at: now)
end
@doc """
Verifies the password.
If there is no user or the user doesn't have a password, we call
`Bcrypt.no_user_verify/0` to avoid timing attacks.
"""
def valid_password?(%SomethingErlang.Accounts.User{hashed_password: hashed_password}, password)
when is_binary(hashed_password) and byte_size(password) > 0 do
Bcrypt.verify_pass(password, hashed_password)
end
def valid_password?(_, _) do
Bcrypt.no_user_verify()
false
end
@doc """
Validates the current password otherwise adds an error to the changeset.
"""
def validate_current_password(changeset, password) do
if valid_password?(changeset.data, password) do
changeset
else
add_error(changeset, :current_password, "is not valid")
end
end end
end end

View File

@ -10,7 +10,6 @@ defmodule SomethingErlang.Application do
children = [ children = [
{Registry, [name: SomethingErlang.Registry.Grovers, keys: :unique]}, {Registry, [name: SomethingErlang.Registry.Grovers, keys: :unique]},
{DynamicSupervisor, [name: SomethingErlang.Supervisor.Grovers, strategy: :one_for_one]}, {DynamicSupervisor, [name: SomethingErlang.Supervisor.Grovers, strategy: :one_for_one]},
# Start the Ecto repository
# Start the Telemetry supervisor # Start the Telemetry supervisor
SomethingErlangWeb.Telemetry, SomethingErlangWeb.Telemetry,
# Start the Ecto repository # Start the Ecto repository

View File

@ -3,12 +3,12 @@ defmodule SomethingErlang.AwfulApi.Client do
@user_agent "SomethingErlangClient/0.1" @user_agent "SomethingErlangClient/0.1"
def thread_doc(id, page, user) do def thread_doc(id, page, user) do
resp = new_request(user) |> get_thread(id, page) resp = new(user) |> get_thread(id, page)
:unicode.characters_to_binary(resp.body, :latin1) :unicode.characters_to_binary(resp.body, :latin1)
end end
def thread_lastseen_page(id, user) do def thread_lastseen_page(id, user) do
resp = new_request(user) |> get_thread_newpost(id) resp = new(user) |> get_thread_newpost(id)
%{status: 302, headers: headers} = resp %{status: 302, headers: headers} = resp
{"location", redir_url} = List.keyfind(headers, "location", 0) {"location", redir_url} = List.keyfind(headers, "location", 0)
[_, page] = Regex.run(~r/pagenumber=(\d+)/, redir_url) [_, page] = Regex.run(~r/pagenumber=(\d+)/, redir_url)
@ -16,11 +16,11 @@ defmodule SomethingErlang.AwfulApi.Client do
end end
def bookmarks_doc(page, user) do def bookmarks_doc(page, user) do
resp = new_request(user) |> get_bookmarks(page) resp = new(user) |> get_bookmarks(page)
:unicode.characters_to_binary(resp.body, :latin1) :unicode.characters_to_binary(resp.body, :latin1)
end end
defp get_thread(req, id, page \\ 1) do defp get_thread(req, id, page) do
url = "showthread.php" url = "showthread.php"
params = [threadid: id, pagenumber: page] params = [threadid: id, pagenumber: page]
Req.get!(req, url: url, params: params) Req.get!(req, url: url, params: params)
@ -32,13 +32,34 @@ defmodule SomethingErlang.AwfulApi.Client do
Req.get!(req, url: url, params: params, follow_redirects: false) Req.get!(req, url: url, params: params, follow_redirects: false)
end end
defp get_bookmarks(req, page \\ 1) do defp get_bookmarks(req, page) do
url = "bookmarkthreads.php" url = "bookmarkthreads.php"
params = [pagenumber: page] params = [pagenumber: page]
Req.get!(req, url: url, params: params) Req.get!(req, url: url, params: params)
end end
defp new_request(user) do def login(username, password) do
form = [action: "login", username: username, password: password]
url = "account.php"
new()
|> Req.post!(url: url, form: form)
|> extract_cookies()
end
defp extract_cookies(%Req.Response{} = response) do
cookies = response.headers["set-cookie"]
for cookie <- cookies, String.starts_with?(cookie, "bb"), into: %{} do
cookie
|> String.split(";", parts: 2)
|> List.first()
|> String.split("=")
|> then(fn [k, v] -> {String.to_existing_atom(k), v} end)
end
end
defp new(user) do
Req.new( Req.new(
base_url: @base_url, base_url: @base_url,
user_agent: @user_agent, user_agent: @user_agent,
@ -49,6 +70,16 @@ defmodule SomethingErlang.AwfulApi.Client do
# |> Req.Request.append_request_steps(inspect: &IO.inspect/1) # |> Req.Request.append_request_steps(inspect: &IO.inspect/1)
end end
defp new() do
Req.new(
base_url: @base_url,
user_agent: @user_agent,
redirect: false
)
# |> Req.Request.append_request_steps(inspect: &IO.inspect/1)
end
defp cookies(args) when is_map(args) do defp cookies(args) when is_map(args) do
Enum.map_join(args, "; ", fn {k, v} -> "#{k}=#{v}" end) Enum.map_join(args, "; ", fn {k, v} -> "#{k}=#{v}" end)
end end

View File

@ -5,10 +5,17 @@ defmodule SomethingErlang.Grover do
require Logger require Logger
def mount(user) do def mount(user) do
grover =
DynamicSupervisor.start_child( DynamicSupervisor.start_child(
SomethingErlang.Supervisor.Grovers, SomethingErlang.Supervisor.Grovers,
{__MODULE__, [self(), user]} {__MODULE__, [self(), user]}
) )
case grover do
{:ok, pid} -> pid
{:error, {:already_started, pid}} -> pid
{:error, error} -> {:error, error}
end
end end
def get_thread!(thread_id, page_number) do def get_thread!(thread_id, page_number) do

View File

@ -2,12 +2,17 @@ defmodule SomethingErlangWeb.CoreComponents do
@moduledoc """ @moduledoc """
Provides core UI components. Provides core UI components.
The components in this module use Tailwind CSS, a utility-first CSS framework. At first glance, this module may seem daunting, but its goal is to provide
See the [Tailwind CSS documentation](https://tailwindcss.com) to learn how to core building blocks for your application, such as modals, tables, and
customize the generated components in this module. forms. The components consist mostly of markup and are well-documented
with doc strings and declarative assigns. You may customize and style
them in any way you want, based on your application growth and needs.
Icons are provided by [heroicons](https://heroicons.com), using the The default components use Tailwind CSS, a utility-first CSS framework.
[heroicons_elixir](https://github.com/mveytsman/heroicons_elixir) project. See the [Tailwind CSS documentation](https://tailwindcss.com) to learn
how to customize them or feel free to swap in another framework altogether.
Icons are provided by [heroicons](https://heroicons.com). See `icon/1` for usage.
""" """
use Phoenix.Component use Phoenix.Component
@ -20,30 +25,21 @@ defmodule SomethingErlangWeb.CoreComponents do
## Examples ## Examples
<.modal id="confirm-modal"> <.modal id="confirm-modal">
Are you sure? This is a modal.
<:confirm>OK</:confirm>
<:cancel>Cancel</:cancel>
</.modal> </.modal>
JS commands may be passed to the `:on_cancel` and `on_confirm` attributes JS commands may be passed to the `:on_cancel` to configure
for the caller to react to each button press, for example: the closing/cancel event, for example:
<.modal id="confirm" on_confirm={JS.push("delete")} on_cancel={JS.navigate(~p"/posts")}> <.modal id="confirm" on_cancel={JS.navigate(~p"/posts")}>
Are you sure you? This is another modal.
<:confirm>OK</:confirm>
<:cancel>Cancel</:cancel>
</.modal> </.modal>
""" """
attr :id, :string, required: true attr :id, :string, required: true
attr :show, :boolean, default: false attr :show, :boolean, default: false
attr :on_cancel, JS, default: %JS{} attr :on_cancel, JS, default: %JS{}
attr :on_confirm, JS, default: %JS{}
slot :inner_block, required: true slot :inner_block, required: true
slot :title
slot :subtitle
slot :confirm
slot :cancel
def modal(assigns) do def modal(assigns) do
~H""" ~H"""
@ -51,9 +47,10 @@ defmodule SomethingErlangWeb.CoreComponents do
id={@id} id={@id}
phx-mounted={@show && show_modal(@id)} phx-mounted={@show && show_modal(@id)}
phx-remove={hide_modal(@id)} phx-remove={hide_modal(@id)}
data-cancel={JS.exec(@on_cancel, "phx-remove")}
class="relative z-50 hidden" class="relative z-50 hidden"
> >
<div id={"#{@id}-bg"} class="fixed inset-0 bg-zinc-50/90 transition-opacity" aria-hidden="true" /> <div id={"#{@id}-bg"} class="bg-zinc-50/90 fixed inset-0 transition-opacity" aria-hidden="true" />
<div <div
class="fixed inset-0 overflow-y-auto" class="fixed inset-0 overflow-y-auto"
aria-labelledby={"#{@id}-title"} aria-labelledby={"#{@id}-title"}
@ -66,54 +63,23 @@ defmodule SomethingErlangWeb.CoreComponents do
<div class="w-full max-w-3xl p-4 sm:p-6 lg:py-8"> <div class="w-full max-w-3xl p-4 sm:p-6 lg:py-8">
<.focus_wrap <.focus_wrap
id={"#{@id}-container"} id={"#{@id}-container"}
phx-mounted={@show && show_modal(@id)} phx-window-keydown={JS.exec("data-cancel", to: "##{@id}")}
phx-window-keydown={hide_modal(@on_cancel, @id)}
phx-key="escape" phx-key="escape"
phx-click-away={hide_modal(@on_cancel, @id)} phx-click-away={JS.exec("data-cancel", to: "##{@id}")}
class="hidden relative rounded-2xl bg-white p-14 shadow-lg shadow-zinc-700/10 ring-1 ring-zinc-700/10 transition" class="shadow-zinc-700/10 ring-zinc-700/10 relative hidden rounded-2xl bg-white p-14 shadow-lg ring-1 transition"
> >
<div class="absolute top-6 right-5"> <div class="absolute top-6 right-5">
<button <button
phx-click={hide_modal(@on_cancel, @id)} phx-click={JS.exec("data-cancel", to: "##{@id}")}
type="button" type="button"
class="-m-3 flex-none p-3 opacity-20 hover:opacity-40" class="-m-3 flex-none p-3 opacity-20 hover:opacity-40"
aria-label={gettext("close")} aria-label={gettext("close")}
> >
<Heroicons.x_mark solid class="h-5 w-5 stroke-current" /> <.icon name="hero-x-mark-solid" class="h-5 w-5" />
</button> </button>
</div> </div>
<div id={"#{@id}-content"}> <div id={"#{@id}-content"}>
<header :if={@title != []}>
<h1 id={"#{@id}-title"} class="text-lg font-semibold leading-8 text-zinc-800">
<%= render_slot(@title) %>
</h1>
<p
:if={@subtitle != []}
id={"#{@id}-description"}
class="mt-2 text-sm leading-6 text-zinc-600"
>
<%= render_slot(@subtitle) %>
</p>
</header>
<%= render_slot(@inner_block) %> <%= render_slot(@inner_block) %>
<div :if={@confirm != [] or @cancel != []} class="ml-6 mb-4 flex items-center gap-5">
<.button
:for={confirm <- @confirm}
id={"#{@id}-confirm"}
phx-click={@on_confirm}
phx-disable-with
class="py-2 px-3"
>
<%= render_slot(confirm) %>
</.button>
<.link
:for={cancel <- @cancel}
phx-click={hide_modal(@on_cancel, @id)}
class="text-sm font-semibold leading-6 text-zinc-900 hover:text-zinc-700"
>
<%= render_slot(cancel) %>
</.link>
</div>
</div> </div>
</.focus_wrap> </.focus_wrap>
</div> </div>
@ -131,67 +97,103 @@ defmodule SomethingErlangWeb.CoreComponents do
<.flash kind={:info} flash={@flash} /> <.flash kind={:info} flash={@flash} />
<.flash kind={:info} phx-mounted={show("#flash")}>Welcome Back!</.flash> <.flash kind={:info} phx-mounted={show("#flash")}>Welcome Back!</.flash>
""" """
attr :id, :string, default: "flash", doc: "the optional id of flash container" attr :id, :string, doc: "the optional id of flash container"
attr :flash, :map, default: %{}, doc: "the map of flash messages to display" attr :flash, :map, default: %{}, doc: "the map of flash messages to display"
attr :title, :string, default: nil attr :title, :string, default: nil
attr :kind, :atom, values: [:info, :error], doc: "used for styling and flash lookup" attr :kind, :atom, values: [:info, :error], doc: "used for styling and flash lookup"
attr :autoshow, :boolean, default: true, doc: "whether to auto show the flash on mount"
attr :close, :boolean, default: true, doc: "whether the flash can be closed"
attr :rest, :global, doc: "the arbitrary HTML attributes to add to the flash container" attr :rest, :global, doc: "the arbitrary HTML attributes to add to the flash container"
slot :inner_block, doc: "the optional inner block that renders the flash message" slot :inner_block, doc: "the optional inner block that renders the flash message"
def flash(assigns) do def flash(assigns) do
assigns = assign_new(assigns, :id, fn -> "flash-#{assigns.kind}" end)
~H""" ~H"""
<div <div
:if={msg = render_slot(@inner_block) || Phoenix.Flash.get(@flash, @kind)} :if={msg = render_slot(@inner_block) || Phoenix.Flash.get(@flash, @kind)}
id={@id} id={@id}
phx-mounted={@autoshow && show("##{@id}")}
phx-click={JS.push("lv:clear-flash", value: %{key: @kind}) |> hide("##{@id}")} phx-click={JS.push("lv:clear-flash", value: %{key: @kind}) |> hide("##{@id}")}
role="alert" role="alert"
class={[ class={[
"fixed hidden top-2 right-2 w-80 sm:w-96 z-50 rounded-lg p-3 shadow-md shadow-zinc-900/5 ring-1", "fixed top-2 right-2 mr-2 w-80 sm:w-96 z-50 rounded-lg p-3 ring-1",
@kind == :info && "bg-emerald-50 text-emerald-800 ring-emerald-500 fill-cyan-900", @kind == :info && "bg-emerald-50 text-emerald-800 ring-emerald-500 fill-cyan-900",
@kind == :error && "bg-rose-50 p-3 text-rose-900 shadow-md ring-rose-500 fill-rose-900" @kind == :error && "bg-rose-50 text-rose-900 shadow-md ring-rose-500 fill-rose-900"
]} ]}
{@rest} {@rest}
> >
<p :if={@title} class="flex items-center gap-1.5 text-[0.8125rem] font-semibold leading-6"> <p :if={@title} class="flex items-center gap-1.5 text-sm font-semibold leading-6">
<Heroicons.information_circle :if={@kind == :info} mini class="h-4 w-4" /> <.icon :if={@kind == :info} name="hero-information-circle-mini" class="h-4 w-4" />
<Heroicons.exclamation_circle :if={@kind == :error} mini class="h-4 w-4" /> <.icon :if={@kind == :error} name="hero-exclamation-circle-mini" class="h-4 w-4" />
<%= @title %> <%= @title %>
</p> </p>
<p class="mt-2 text-[0.8125rem] leading-5"><%= msg %></p> <p class="mt-2 text-sm leading-5"><%= msg %></p>
<button <button type="button" class="group absolute top-1 right-1 p-2" aria-label={gettext("close")}>
:if={@close} <.icon name="hero-x-mark-solid" class="h-5 w-5 opacity-40 group-hover:opacity-70" />
type="button"
class="group absolute top-2 right-1 p-2"
aria-label={gettext("close")}
>
<Heroicons.x_mark solid class="h-5 w-5 stroke-current opacity-40 group-hover:opacity-70" />
</button> </button>
</div> </div>
""" """
end end
@doc """
Shows the flash group with standard titles and content.
## Examples
<.flash_group flash={@flash} />
"""
attr :flash, :map, required: true, doc: "the map of flash messages"
attr :id, :string, default: "flash-group", doc: "the optional id of flash container"
def flash_group(assigns) do
~H"""
<div id={@id}>
<.flash kind={:info} title={gettext("Success!")} flash={@flash} />
<.flash kind={:error} title={gettext("Error!")} flash={@flash} />
<.flash
id="client-error"
kind={:error}
title={gettext("We can't find the internet")}
phx-disconnected={show(".phx-client-error #client-error")}
phx-connected={hide("#client-error")}
hidden
>
<%= gettext("Attempting to reconnect") %>
<.icon name="hero-arrow-path" class="ml-1 h-3 w-3 animate-spin" />
</.flash>
<.flash
id="server-error"
kind={:error}
title={gettext("Something went wrong!")}
phx-disconnected={show(".phx-server-error #server-error")}
phx-connected={hide("#server-error")}
hidden
>
<%= gettext("Hang in there while we get back on track") %>
<.icon name="hero-arrow-path" class="ml-1 h-3 w-3 animate-spin" />
</.flash>
</div>
"""
end
@doc """ @doc """
Renders a simple form. Renders a simple form.
## Examples ## Examples
<.simple_form :let={f} for={:user} phx-change="validate" phx-submit="save"> <.simple_form for={@form} phx-change="validate" phx-submit="save">
<.input field={{f, :email}} label="Email"/> <.input field={@form[:email]} label="Email"/>
<.input field={{f, :username}} label="Username" /> <.input field={@form[:username]} label="Username" />
<:actions> <:actions>
<.button>Save</.button> <.button>Save</.button>
</:actions> </:actions>
</.simple_form> </.simple_form>
""" """
attr :for, :any, default: nil, doc: "the datastructure for the form" attr :for, :any, required: true, doc: "the datastructure for the form"
attr :as, :any, default: nil, doc: "the server side parameter to collect all input under" attr :as, :any, default: nil, doc: "the server side parameter to collect all input under"
attr :rest, :global, attr :rest, :global,
include: ~w(autocomplete name rel action enctype method novalidate target), include: ~w(autocomplete name rel action enctype method novalidate target multipart),
doc: "the arbitrary HTML attributes to apply to the form tag" doc: "the arbitrary HTML attributes to apply to the form tag"
slot :inner_block, required: true slot :inner_block, required: true
@ -200,7 +202,7 @@ defmodule SomethingErlangWeb.CoreComponents do
def simple_form(assigns) do def simple_form(assigns) do
~H""" ~H"""
<.form :let={f} for={@for} as={@as} {@rest}> <.form :let={f} for={@for} as={@as} {@rest}>
<div class="space-y-8 mt-10"> <div class="mt-10 space-y-8 bg-white">
<%= render_slot(@inner_block, f) %> <%= render_slot(@inner_block, f) %>
<div :for={action <- @actions} class="mt-2 flex items-center justify-between gap-6"> <div :for={action <- @actions} class="mt-2 flex items-center justify-between gap-6">
<%= render_slot(action, f) %> <%= render_slot(action, f) %>
@ -229,7 +231,7 @@ defmodule SomethingErlangWeb.CoreComponents do
<button <button
type={@type} type={@type}
class={[ class={[
"phx-submit-loading:opacity-75 rounded-lg bg-red-900 hover:bg-red-700 py-2 px-3", "phx-submit-loading:opacity-75 rounded-lg bg-zinc-900 hover:bg-zinc-700 py-2 px-3",
"text-sm font-semibold leading-6 text-white active:text-white/80", "text-sm font-semibold leading-6 text-white active:text-white/80",
@class @class
]} ]}
@ -243,65 +245,85 @@ defmodule SomethingErlangWeb.CoreComponents do
@doc """ @doc """
Renders an input with label and error messages. Renders an input with label and error messages.
A `%Phoenix.HTML.Form{}` and field name may be passed to the input A `Phoenix.HTML.FormField` may be passed as argument,
to build input names and error messages, or all the attributes and which is used to retrieve the input name, id, and values.
errors may be passed explicitly. Otherwise all attributes may be passed explicitly.
## Types
This function accepts all HTML input types, considering that:
* You may also set `type="select"` to render a `<select>` tag
* `type="checkbox"` is used exclusively to render boolean values
* For live file uploads, see `Phoenix.Component.live_file_input/1`
See https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input
for more information.
## Examples ## Examples
<.input field={{f, :email}} type="email" /> <.input field={@form[:email]} type="email" />
<.input name="my-input" errors={["oh no!"]} /> <.input name="my-input" errors={["oh no!"]} />
""" """
attr :id, :any attr :id, :any, default: nil
attr :name, :any attr :name, :any
attr :label, :string, default: nil attr :label, :string, default: nil
attr :value, :any
attr :type, :string, attr :type, :string,
default: "text", default: "text",
values: ~w(checkbox color date datetime-local email file hidden month number password values: ~w(checkbox color date datetime-local email file hidden month number password
range radio search select tel text textarea time url week) range radio search select tel text textarea time url week)
attr :value, :any attr :field, Phoenix.HTML.FormField,
attr :field, :any, doc: "a %Phoenix.HTML.Form{}/field name tuple, for example: {f, :email}" doc: "a form field struct retrieved from the form, for example: @form[:email]"
attr :errors, :list
attr :errors, :list, default: []
attr :checked, :boolean, doc: "the checked flag for checkbox inputs" attr :checked, :boolean, doc: "the checked flag for checkbox inputs"
attr :prompt, :string, default: nil, doc: "the prompt for select inputs" attr :prompt, :string, default: nil, doc: "the prompt for select inputs"
attr :options, :list, doc: "the options to pass to Phoenix.HTML.Form.options_for_select/2" attr :options, :list, doc: "the options to pass to Phoenix.HTML.Form.options_for_select/2"
attr :multiple, :boolean, default: false, doc: "the multiple flag for select inputs" attr :multiple, :boolean, default: false, doc: "the multiple flag for select inputs"
attr :rest, :global, include: ~w(autocomplete cols disabled form max maxlength min minlength
pattern placeholder readonly required rows size step) attr :rest, :global,
include: ~w(accept autocomplete capture cols disabled form list max maxlength min minlength
multiple pattern placeholder readonly required rows size step)
slot :inner_block slot :inner_block
def input(%{field: {f, field}} = assigns) do def input(%{field: %Phoenix.HTML.FormField{} = field} = assigns) do
assigns assigns
|> assign(field: nil) |> assign(field: nil, id: assigns.id || field.id)
|> assign_new(:name, fn -> |> assign(:errors, Enum.map(field.errors, &translate_error(&1)))
name = Phoenix.HTML.Form.input_name(f, field) |> assign_new(:name, fn -> if assigns.multiple, do: field.name <> "[]", else: field.name end)
if assigns.multiple, do: name <> "[]", else: name |> assign_new(:value, fn -> field.value end)
end)
|> assign_new(:id, fn -> Phoenix.HTML.Form.input_id(f, field) end)
|> assign_new(:value, fn -> Phoenix.HTML.Form.input_value(f, field) end)
|> assign_new(:errors, fn -> translate_errors(f.errors || [], field) end)
|> input() |> input()
end end
def input(%{type: "checkbox"} = assigns) do def input(%{type: "checkbox"} = assigns) do
assigns = assign_new(assigns, :checked, fn -> input_equals?(assigns.value, "true") end) assigns =
assign_new(assigns, :checked, fn ->
Phoenix.HTML.Form.normalize_value("checkbox", assigns[:value])
end)
~H""" ~H"""
<label phx-feedback-for={@name} class="flex items-center gap-4 text-sm leading-6 text-zinc-600"> <div phx-feedback-for={@name}>
<label class="flex items-center gap-4 text-sm leading-6 text-zinc-600">
<input type="hidden" name={@name} value="false" /> <input type="hidden" name={@name} value="false" />
<input <input
type="checkbox" type="checkbox"
id={@id || @name} id={@id}
name={@name} name={@name}
value="true" value="true"
checked={@checked} checked={@checked}
class="rounded border-zinc-300 text-zinc-900 focus:ring-zinc-900" class="rounded border-zinc-300 text-zinc-900 focus:ring-0"
{@rest} {@rest}
/> />
<%= @label %> <%= @label %>
</label> </label>
<.error :for={msg <- @errors}><%= msg %></.error>
</div>
""" """
end end
@ -312,7 +334,7 @@ defmodule SomethingErlangWeb.CoreComponents do
<select <select
id={@id} id={@id}
name={@name} name={@name}
class="mt-1 block w-full py-2 px-3 border border-gray-300 bg-white rounded-md shadow-sm focus:outline-none focus:ring-zinc-500 focus:border-zinc-500 sm:text-sm" class="mt-2 block w-full rounded-md border border-gray-300 bg-white shadow-sm focus:border-zinc-400 focus:ring-0 sm:text-sm"
multiple={@multiple} multiple={@multiple}
{@rest} {@rest}
> >
@ -329,22 +351,22 @@ defmodule SomethingErlangWeb.CoreComponents do
<div phx-feedback-for={@name}> <div phx-feedback-for={@name}>
<.label for={@id}><%= @label %></.label> <.label for={@id}><%= @label %></.label>
<textarea <textarea
id={@id || @name} id={@id}
name={@name} name={@name}
class={[ class={[
input_border(@errors), "mt-2 block w-full rounded-lg text-zinc-900 focus:ring-0 sm:text-sm sm:leading-6",
"mt-2 block min-h-[6rem] w-full rounded-lg border-zinc-300 py-[7px] px-[11px]", "min-h-[6rem] phx-no-feedback:border-zinc-300 phx-no-feedback:focus:border-zinc-400",
"text-zinc-900 focus:border-zinc-400 focus:outline-none focus:ring-4 focus:ring-zinc-800/5 sm:text-sm sm:leading-6", @errors == [] && "border-zinc-300 focus:border-zinc-400",
"phx-no-feedback:border-zinc-300 phx-no-feedback:focus:border-zinc-400 phx-no-feedback:focus:ring-zinc-800/5" @errors != [] && "border-rose-400 focus:border-rose-400"
]} ]}
{@rest} {@rest}
> ><%= Phoenix.HTML.Form.normalize_value("textarea", @value) %></textarea>
<%= @value %></textarea>
<.error :for={msg <- @errors}><%= msg %></.error> <.error :for={msg <- @errors}><%= msg %></.error>
</div> </div>
""" """
end end
# All other inputs text, datetime-local, url, password, etc. are handled here...
def input(assigns) do def input(assigns) do
~H""" ~H"""
<div phx-feedback-for={@name}> <div phx-feedback-for={@name}>
@ -352,13 +374,13 @@ defmodule SomethingErlangWeb.CoreComponents do
<input <input
type={@type} type={@type}
name={@name} name={@name}
id={@id || @name} id={@id}
value={@value} value={Phoenix.HTML.Form.normalize_value(@type, @value)}
class={[ class={[
input_border(@errors), "mt-2 block w-full rounded-lg text-zinc-900 focus:ring-0 sm:text-sm sm:leading-6",
"mt-2 block w-full rounded-lg border-zinc-300 py-[7px] px-[11px]", "phx-no-feedback:border-zinc-300 phx-no-feedback:focus:border-zinc-400",
"text-zinc-900 focus:outline-none focus:ring-4 sm:text-sm sm:leading-6", @errors == [] && "border-zinc-300 focus:border-zinc-400",
"phx-no-feedback:border-zinc-300 phx-no-feedback:focus:border-zinc-400 phx-no-feedback:focus:ring-zinc-800/5" @errors != [] && "border-rose-400 focus:border-rose-400"
]} ]}
{@rest} {@rest}
/> />
@ -367,12 +389,6 @@ defmodule SomethingErlangWeb.CoreComponents do
""" """
end end
defp input_border([] = _errors),
do: "border-zinc-300 focus:border-zinc-400 focus:ring-zinc-800/5"
defp input_border([_ | _] = _errors),
do: "border-rose-400 focus:border-rose-400 focus:ring-rose-400/10"
@doc """ @doc """
Renders a label. Renders a label.
""" """
@ -394,8 +410,8 @@ defmodule SomethingErlangWeb.CoreComponents do
def error(assigns) do def error(assigns) do
~H""" ~H"""
<p class="phx-no-feedback:hidden mt-3 flex gap-3 text-sm leading-6 text-rose-600"> <p class="mt-3 flex gap-3 text-sm leading-6 text-rose-600 phx-no-feedback:hidden">
<Heroicons.exclamation_circle mini class="mt-0.5 h-5 w-5 flex-none fill-rose-500" /> <.icon name="hero-exclamation-circle-mini" class="mt-0.5 h-5 w-5 flex-none" />
<%= render_slot(@inner_block) %> <%= render_slot(@inner_block) %>
</p> </p>
""" """
@ -437,8 +453,13 @@ defmodule SomethingErlangWeb.CoreComponents do
</.table> </.table>
""" """
attr :id, :string, required: true attr :id, :string, required: true
attr :row_click, :any, default: nil
attr :rows, :list, required: true attr :rows, :list, required: true
attr :row_id, :any, default: nil, doc: "the function for generating the row id"
attr :row_click, :any, default: nil, doc: "the function for handling phx-click on each row"
attr :row_item, :any,
default: &Function.identity/1,
doc: "the function for mapping each row before calling the :col and :action slots"
slot :col, required: true do slot :col, required: true do
attr :label, :string attr :label, :string
@ -447,43 +468,48 @@ defmodule SomethingErlangWeb.CoreComponents do
slot :action, doc: "the slot for showing user actions in the last table column" slot :action, doc: "the slot for showing user actions in the last table column"
def table(assigns) do def table(assigns) do
assigns =
with %{rows: %Phoenix.LiveView.LiveStream{}} <- assigns do
assign(assigns, row_id: assigns.row_id || fn {id, _item} -> id end)
end
~H""" ~H"""
<div id={@id} class="overflow-y-auto px-4 sm:overflow-visible sm:px-0"> <div class="overflow-y-auto px-4 sm:overflow-visible sm:px-0">
<table class="mt-11 w-[40rem] sm:w-full"> <table class="w-[40rem] mt-11 sm:w-full">
<thead class="text-left text-[0.8125rem] leading-6 text-zinc-500"> <thead class="text-sm text-left leading-6 text-zinc-500">
<tr> <tr>
<th :for={col <- @col} class="p-0 pb-4 pr-6 font-normal"><%= col[:label] %></th> <th :for={col <- @col} class="p-0 pb-4 pr-6 font-normal"><%= col[:label] %></th>
<th class="relative p-0 pb-4"><span class="sr-only"><%= gettext("Actions") %></span></th> <th :if={@action != []} class="relative p-0 pb-4">
<span class="sr-only"><%= gettext("Actions") %></span>
</th>
</tr> </tr>
</thead> </thead>
<tbody class="relative divide-y divide-zinc-100 border-t border-zinc-200 text-sm leading-6 text-zinc-700"> <tbody
<tr id={@id}
:for={row <- @rows} phx-update={match?(%Phoenix.LiveView.LiveStream{}, @rows) && "stream"}
id={"#{@id}-#{Phoenix.Param.to_param(row)}"} class="relative divide-y divide-zinc-100 border-t border-zinc-200 text-sm leading-6 text-zinc-700"
class="relative group hover:bg-zinc-50"
> >
<tr :for={row <- @rows} id={@row_id && @row_id.(row)} class="group hover:bg-zinc-50">
<td <td
:for={{col, i} <- Enum.with_index(@col)} :for={{col, i} <- Enum.with_index(@col)}
phx-click={@row_click && @row_click.(row)} phx-click={@row_click && @row_click.(row)}
class={["p-0", @row_click && "hover:cursor-pointer"]} class={["relative p-0", @row_click && "hover:cursor-pointer"]}
> >
<div :if={i == 0}>
<span class="absolute h-full w-4 top-0 -left-4 group-hover:bg-zinc-50 sm:rounded-l-xl" />
<span class="absolute h-full w-4 top-0 -right-4 group-hover:bg-zinc-50 sm:rounded-r-xl" />
</div>
<div class="block py-4 pr-6"> <div class="block py-4 pr-6">
<span class="absolute -inset-y-px right-0 -left-4 group-hover:bg-zinc-50 sm:rounded-l-xl" />
<span class={["relative", i == 0 && "font-semibold text-zinc-900"]}> <span class={["relative", i == 0 && "font-semibold text-zinc-900"]}>
<%= render_slot(col, row) %> <%= render_slot(col, @row_item.(row)) %>
</span> </span>
</div> </div>
</td> </td>
<td :if={@action != []} class="p-0 w-14"> <td :if={@action != []} class="relative w-14 p-0">
<div class="relative whitespace-nowrap py-4 text-right text-sm font-medium"> <div class="relative whitespace-nowrap py-4 text-right text-sm font-medium">
<span class="absolute -inset-y-px -right-4 left-0 group-hover:bg-zinc-50 sm:rounded-r-xl" />
<span <span
:for={action <- @action} :for={action <- @action}
class="relative ml-4 font-semibold leading-6 text-zinc-900 hover:text-zinc-700" class="relative ml-4 font-semibold leading-6 text-zinc-900 hover:text-zinc-700"
> >
<%= render_slot(action, row) %> <%= render_slot(action, @row_item.(row)) %>
</span> </span>
</div> </div>
</td> </td>
@ -512,9 +538,9 @@ defmodule SomethingErlangWeb.CoreComponents do
~H""" ~H"""
<div class="mt-14"> <div class="mt-14">
<dl class="-my-4 divide-y divide-zinc-100"> <dl class="-my-4 divide-y divide-zinc-100">
<div :for={item <- @item} class="flex gap-4 py-4 sm:gap-8"> <div :for={item <- @item} class="flex gap-4 py-4 text-sm leading-6 sm:gap-8">
<dt class="w-1/4 flex-none text-[0.8125rem] leading-6 text-zinc-500"><%= item.title %></dt> <dt class="w-1/4 flex-none text-zinc-500"><%= item.title %></dt>
<dd class="text-sm leading-6 text-zinc-700"><%= render_slot(item) %></dd> <dd class="text-zinc-700"><%= render_slot(item) %></dd>
</div> </div>
</dl> </dl>
</div> </div>
@ -538,13 +564,40 @@ defmodule SomethingErlangWeb.CoreComponents do
navigate={@navigate} navigate={@navigate}
class="text-sm font-semibold leading-6 text-zinc-900 hover:text-zinc-700" class="text-sm font-semibold leading-6 text-zinc-900 hover:text-zinc-700"
> >
<Heroicons.arrow_left solid class="w-3 h-3 stroke-current inline" /> <.icon name="hero-arrow-left-solid" class="h-3 w-3" />
<%= render_slot(@inner_block) %> <%= render_slot(@inner_block) %>
</.link> </.link>
</div> </div>
""" """
end end
@doc """
Renders a [Heroicon](https://heroicons.com).
Heroicons come in three styles outline, solid, and mini.
By default, the outline style is used, but solid and mini may
be applied by using the `-solid` and `-mini` suffix.
You can customize the size and colors of the icons by setting
width, height, and background color classes.
Icons are extracted from the `deps/heroicons` directory and bundled within
your compiled app.css by the plugin in your `assets/tailwind.config.js`.
## Examples
<.icon name="hero-x-mark-solid" />
<.icon name="hero-arrow-path" class="ml-1 w-3 h-3 animate-spin" />
"""
attr :name, :string, required: true
attr :class, :string, default: nil
def icon(%{name: "hero-" <> _} = assigns) do
~H"""
<span class={[@name, @class]} />
"""
end
## JS Commands ## JS Commands
def show(js \\ %JS{}, selector) do def show(js \\ %JS{}, selector) do
@ -599,24 +652,17 @@ defmodule SomethingErlangWeb.CoreComponents do
# When using gettext, we typically pass the strings we want # When using gettext, we typically pass the strings we want
# to translate as a static argument: # to translate as a static argument:
# #
# # Translate "is invalid" in the "errors" domain
# dgettext("errors", "is invalid")
#
# # Translate the number of files with plural rules # # Translate the number of files with plural rules
# dngettext("errors", "1 file", "%{count} files", count) # dngettext("errors", "1 file", "%{count} files", count)
# #
# Because the error messages we show in our forms and APIs # However the error messages in our forms and APIs are generated
# are defined inside Ecto, we need to translate them dynamically. # dynamically, so we need to translate them by calling Gettext
# This requires us to call the Gettext module passing our gettext # with our gettext backend as first argument. Translations are
# backend as first argument. # available in the errors.po file (as we use the "errors" domain).
#
# Note we use the "errors" domain, which means translations
# should be written to the errors.po file. The :count option is
# set by Ecto and indicates we should also apply plural rules.
if count = opts[:count] do if count = opts[:count] do
Gettext.dngettext(SomethingErlangWeb.Gettext, "errors", msg, msg, count, opts) Gettext.dngettext(DingeWeb.Gettext, "errors", msg, msg, count, opts)
else else
Gettext.dgettext(SomethingErlangWeb.Gettext, "errors", msg, opts) Gettext.dgettext(DingeWeb.Gettext, "errors", msg, opts)
end end
end end
@ -626,8 +672,4 @@ defmodule SomethingErlangWeb.CoreComponents do
def translate_errors(errors, field) when is_list(errors) do def translate_errors(errors, field) when is_list(errors) do
for {^field, {msg, opts}} <- errors, do: translate_error({msg, opts}) for {^field, {msg, opts}} <- errors, do: translate_error({msg, opts})
end end
defp input_equals?(val1, val2) do
Phoenix.HTML.html_escape(val1) == Phoenix.HTML.html_escape(val2)
end
end end

View File

@ -15,7 +15,7 @@
<ul class="flex justify-end gap-2"> <ul class="flex justify-end gap-2">
<%= if @current_user do %> <%= if @current_user do %>
<li> <li>
<%= @current_user.email %> <%= @current_user.bbuserid %>
</li> </li>
<li> <li>
<.link href={~p"/users/settings"}>Settings</.link> <.link href={~p"/users/settings"}>Settings</.link>

View File

@ -28,7 +28,6 @@ defmodule SomethingErlangWeb.PageController do
end end
def to_forum_path(conn, params) do def to_forum_path(conn, params) do
params |> IO.inspect()
render(conn, :home) render(conn, :home)
end end
end end

View File

@ -19,17 +19,17 @@ defmodule SomethingErlangWeb.UserSessionController do
end end
defp create(conn, %{"user" => user_params}, info) do defp create(conn, %{"user" => user_params}, info) do
%{"email" => email, "password" => password} = user_params %{"username" => username, "password" => password} = user_params
if user = Accounts.get_user_by_email_and_password(email, password) do if user = Accounts.login_sa_user_and_get_cookies(username, password) do
conn conn
|> put_flash(:info, info) |> put_flash(:info, info)
|> put_session(:bbpassword, user.bbpassword)
|> UserAuth.log_in_user(user, user_params) |> UserAuth.log_in_user(user, user_params)
else else
# In order to prevent user enumeration attacks, don't disclose whether the email is registered.
conn conn
|> put_flash(:error, "Invalid email or password") |> put_flash(:error, "Login failed!")
|> put_flash(:email, String.slice(email, 0, 160)) |> put_flash(:email, String.slice(username, 0, 160))
|> redirect(to: ~p"/users/log_in") |> redirect(to: ~p"/users/log_in")
end end
end end

View File

@ -73,7 +73,7 @@ defmodule SomethingErlangWeb.ThreadLive do
<%= for btn <- buttons(@thread) do %> <%= for btn <- buttons(@thread) do %>
<.link <.link
class={["btn btn-sm btn-ghost", btn.special]} class={["btn btn-sm btn-ghost", btn.special]}
navigate={~p"/thread/#{@thread.id}?page=#{btn.page}"} patch={~p"/thread/#{@thread.id}?page=#{btn.page}"}
> >
<.label_button label={btn.label} page={btn.page} /> <.label_button label={btn.label} page={btn.page} />
</.link> </.link>
@ -127,9 +127,11 @@ defmodule SomethingErlangWeb.ThreadLive do
] ]
end end
def mount(params, session, socket) do def mount(_params, session, socket) do
Grover.mount(socket.assigns.current_user) socket.assigns.current_user
session |> IO.inspect() |> Map.put(:bbpassword, session["bbpassword"])
|> Grover.mount()
{:ok, socket} {:ok, socket}
end end

View File

@ -1,45 +0,0 @@
defmodule SomethingErlangWeb.UserConfirmationInstructionsLive do
use SomethingErlangWeb, :live_view
alias SomethingErlang.Accounts
def render(assigns) do
~H"""
<.header>Resend confirmation instructions</.header>
<.simple_form :let={f} for={:user} id="resend_confirmation_form" phx-submit="send_instructions">
<.input field={{f, :email}} type="email" label="Email" required />
<:actions>
<.button phx-disable-with="Sending...">Resend confirmation instructions</.button>
</:actions>
</.simple_form>
<p>
<.link href={~p"/users/register"}>Register</.link>
|
<.link href={~p"/users/log_in"}>Log in</.link>
</p>
"""
end
def mount(_params, _session, socket) do
{:ok, socket}
end
def handle_event("send_instructions", %{"user" => %{"email" => email}}, socket) do
if user = Accounts.get_user_by_email(email) do
Accounts.deliver_user_confirmation_instructions(
user,
&url(~p"/users/confirm/#{&1}")
)
end
info =
"If your email is in our system and it has not been confirmed yet, you will receive an email with instructions shortly."
{:noreply,
socket
|> put_flash(:info, info)
|> redirect(to: ~p"/")}
end
end

View File

@ -1,58 +0,0 @@
defmodule SomethingErlangWeb.UserConfirmationLive do
use SomethingErlangWeb, :live_view
alias SomethingErlang.Accounts
def render(%{live_action: :edit} = assigns) do
~H"""
<div class="mx-auto max-w-sm">
<.header class="text-center">Confirm Account</.header>
<.simple_form :let={f} for={:user} id="confirmation_form" phx-submit="confirm_account">
<.input field={{f, :token}} type="hidden" value={@token} />
<:actions>
<.button phx-disable-with="Confirming..." class="w-full">Confirm my account</.button>
</:actions>
</.simple_form>
<p class="text-center mt-4">
<.link href={~p"/users/register"}>Register</.link>
|
<.link href={~p"/users/log_in"}>Log in</.link>
</p>
</div>
"""
end
def mount(params, _session, socket) do
{:ok, assign(socket, token: params["token"]), temporary_assigns: [token: nil]}
end
# Do not log in the user after confirmation to avoid a
# leaked token giving the user access to the account.
def handle_event("confirm_account", %{"user" => %{"token" => token}}, socket) do
case Accounts.confirm_user(token) do
{:ok, _} ->
{:noreply,
socket
|> put_flash(:info, "User confirmed successfully.")
|> redirect(to: ~p"/")}
:error ->
# If there is a current user and the account was already confirmed,
# then odds are that the confirmation link was already visited, either
# by some automation or by the user themselves, so we redirect without
# a warning message.
case socket.assigns do
%{current_user: %{confirmed_at: confirmed_at}} when not is_nil(confirmed_at) ->
{:noreply, redirect(socket, to: ~p"/")}
%{} ->
{:noreply,
socket
|> put_flash(:error, "User confirmation link is invalid or it has expired.")
|> redirect(to: ~p"/")}
end
end
end
end

View File

@ -1,51 +0,0 @@
defmodule SomethingErlangWeb.UserForgotPasswordLive do
use SomethingErlangWeb, :live_view
alias SomethingErlang.Accounts
def render(assigns) do
~H"""
<div class="mx-auto max-w-sm">
<.header class="text-center">
Forgot your password?
<:subtitle>We'll send a password reset link to your inbox</:subtitle>
</.header>
<.simple_form :let={f} id="reset_password_form" for={:user} phx-submit="send_email">
<.input field={{f, :email}} type="email" placeholder="Email" required />
<:actions>
<.button phx-disable-with="Sending..." class="w-full">
Send password reset instructions
</.button>
</:actions>
</.simple_form>
<p class="text-center mt-4">
<.link href={~p"/users/register"}>Register</.link>
|
<.link href={~p"/users/log_in"}>Log in</.link>
</p>
</div>
"""
end
def mount(_params, _session, socket) do
{:ok, socket}
end
def handle_event("send_email", %{"user" => %{"email" => email}}, socket) do
if user = Accounts.get_user_by_email(email) do
Accounts.deliver_user_reset_password_instructions(
user,
&url(~p"/users/reset_password/#{&1}")
)
end
info =
"If your email is in our system, you will receive instructions to reset your password shortly."
{:noreply,
socket
|> put_flash(:info, info)
|> redirect(to: ~p"/")}
end
end

View File

@ -4,7 +4,7 @@ defmodule SomethingErlangWeb.UserLoginLive do
def render(assigns) do def render(assigns) do
~H""" ~H"""
<div class="mx-auto max-w-sm"> <div class="mx-auto max-w-sm">
<.header class="text-center"> <.header class="text-center text-neutral-content">
Sign in to account Sign in to account
<:subtitle> <:subtitle>
Don't have an account? Don't have an account?
@ -15,19 +15,12 @@ defmodule SomethingErlangWeb.UserLoginLive do
</:subtitle> </:subtitle>
</.header> </.header>
<.simple_form <.simple_form for={@form} id="login_form" action={~p"/users/log_in"} phx-update="ignore">
:let={f} <.input field={@form[:username]} type="text" label="Username" required />
id="login_form" <.input field={@form[:password]} type="password" label="Password" required />
for={:user}
action={~p"/users/log_in"}
as={:user}
phx-update="ignore"
>
<.input field={{f, :email}} type="email" label="Email" required />
<.input field={{f, :password}} type="password" label="Password" required />
<:actions :let={f}> <:actions>
<.input field={{f, :remember_me}} type="checkbox" label="Keep me logged in" /> <.input field={@form[:remember_me]} type="checkbox" label="Keep me logged in" />
<.link href={~p"/users/reset_password"} class="text-sm font-semibold"> <.link href={~p"/users/reset_password"} class="text-sm font-semibold">
Forgot your password? Forgot your password?
</.link> </.link>
@ -44,6 +37,7 @@ defmodule SomethingErlangWeb.UserLoginLive do
def mount(_params, _session, socket) do def mount(_params, _session, socket) do
email = live_flash(socket.assigns.flash, :email) email = live_flash(socket.assigns.flash, :email)
{:ok, assign(socket, email: email), temporary_assigns: [email: nil]} form = to_form(%{"email" => email}, as: "user")
{:ok, assign(socket, form: form), temporary_assigns: [form: form]}
end end
end end

View File

@ -1,74 +0,0 @@
defmodule SomethingErlangWeb.UserRegistrationLive do
use SomethingErlangWeb, :live_view
alias SomethingErlang.Accounts
alias SomethingErlang.Accounts.User
def render(assigns) do
~H"""
<div class="mx-auto max-w-sm">
<.header class="text-center">
Register for an account
<:subtitle>
Already registered?
<.link navigate={~p"/users/log_in"} class="font-semibold text-brand hover:underline">
Sign in
</.link>
to your account now.
</:subtitle>
</.header>
<.simple_form
:let={f}
id="registration_form"
for={@changeset}
phx-submit="save"
phx-change="validate"
phx-trigger-action={@trigger_submit}
action={~p"/users/log_in?_action=registered"}
method="post"
as={:user}
>
<.error :if={@changeset.action == :insert}>
Oops, something went wrong! Please check the errors below.
</.error>
<.input field={{f, :email}} type="email" label="Email" required />
<.input field={{f, :password}} type="password" label="Password" required />
<:actions>
<.button phx-disable-with="Creating account..." class="w-full">Create an account</.button>
</:actions>
</.simple_form>
</div>
"""
end
def mount(_params, _session, socket) do
changeset = Accounts.change_user_registration(%User{})
socket = assign(socket, changeset: changeset, trigger_submit: false)
{:ok, socket, temporary_assigns: [changeset: nil]}
end
def handle_event("save", %{"user" => user_params}, socket) do
case Accounts.register_user(user_params) do
{:ok, user} ->
{:ok, _} =
Accounts.deliver_user_confirmation_instructions(
user,
&url(~p"/users/confirm/#{&1}")
)
changeset = Accounts.change_user_registration(user)
{:noreply, assign(socket, trigger_submit: true, changeset: changeset)}
{:error, %Ecto.Changeset{} = changeset} ->
{:noreply, assign(socket, :changeset, changeset)}
end
end
def handle_event("validate", %{"user" => user_params}, socket) do
changeset = Accounts.change_user_registration(%User{}, user_params)
{:noreply, assign(socket, changeset: Map.put(changeset, :action, :validate))}
end
end

View File

@ -1,87 +0,0 @@
defmodule SomethingErlangWeb.UserResetPasswordLive do
use SomethingErlangWeb, :live_view
alias SomethingErlang.Accounts
def render(assigns) do
~H"""
<div class="mx-auto max-w-sm">
<.header class="text-center">Reset Password</.header>
<.simple_form
:let={f}
for={@changeset}
id="reset_password_form"
phx-submit="reset_password"
phx-change="validate"
>
<.error :if={@changeset.action == :insert}>
Oops, something went wrong! Please check the errors below.
</.error>
<.input field={{f, :password}} type="password" label="New password" required />
<.input
field={{f, :password_confirmation}}
type="password"
label="Confirm new password"
required
/>
<:actions>
<.button phx-disable-with="Resetting..." class="w-full">Reset Password</.button>
</:actions>
</.simple_form>
<p class="text-center mt-4">
<.link href={~p"/users/register"}>Register</.link>
|
<.link href={~p"/users/log_in"}>Log in</.link>
</p>
</div>
"""
end
def mount(params, _session, socket) do
socket = assign_user_and_token(socket, params)
socket =
case socket.assigns do
%{user: user} ->
assign(socket, :changeset, Accounts.change_user_password(user))
_ ->
socket
end
{:ok, socket, temporary_assigns: [changeset: nil]}
end
# Do not log in the user after reset password to avoid a
# leaked token giving the user access to the account.
def handle_event("reset_password", %{"user" => user_params}, socket) do
case Accounts.reset_user_password(socket.assigns.user, user_params) do
{:ok, _} ->
{:noreply,
socket
|> put_flash(:info, "Password reset successfully.")
|> redirect(to: ~p"/users/log_in")}
{:error, changeset} ->
{:noreply, assign(socket, :changeset, Map.put(changeset, :action, :insert))}
end
end
def handle_event("validate", %{"user" => user_params}, socket) do
changeset = Accounts.change_user_password(socket.assigns.user, user_params)
{:noreply, assign(socket, changeset: Map.put(changeset, :action, :validate))}
end
defp assign_user_and_token(socket, %{"token" => token}) do
if user = Accounts.get_user_by_reset_password_token(token) do
assign(socket, user: user, token: token)
else
socket
|> put_flash(:error, "Reset password link is invalid or it has expired.")
|> redirect(to: ~p"/")
end
end
end

View File

@ -1,161 +0,0 @@
defmodule SomethingErlangWeb.UserSettingsLive do
use SomethingErlangWeb, :live_view
alias SomethingErlang.Accounts
def render(assigns) do
~H"""
<.header>Change Email</.header>
<.simple_form
:let={f}
id="email_form"
for={@email_changeset}
phx-submit="update_email"
phx-change="validate_email"
>
<.error :if={@email_changeset.action == :insert}>
Oops, something went wrong! Please check the errors below.
</.error>
<.input field={{f, :email}} type="email" label="Email" required />
<.input
field={{f, :current_password}}
name="current_password"
id="current_password_for_email"
type="password"
label="Current password"
value={@email_form_current_password}
required
/>
<:actions>
<.button phx-disable-with="Changing...">Change Email</.button>
</:actions>
</.simple_form>
<.header>Change Password</.header>
<.simple_form
:let={f}
id="password_form"
for={@password_changeset}
action={~p"/users/log_in?_action=password_updated"}
method="post"
phx-change="validate_password"
phx-submit="update_password"
phx-trigger-action={@trigger_submit}
>
<.error :if={@password_changeset.action == :insert}>
Oops, something went wrong! Please check the errors below.
</.error>
<.input field={{f, :email}} type="hidden" value={@current_email} />
<.input field={{f, :password}} type="password" label="New password" required />
<.input field={{f, :password_confirmation}} type="password" label="Confirm new password" />
<.input
field={{f, :current_password}}
name="current_password"
type="password"
label="Current password"
id="current_password_for_password"
value={@current_password}
required
/>
<:actions>
<.button phx-disable-with="Changing...">Change Password</.button>
</:actions>
</.simple_form>
"""
end
def mount(%{"token" => token}, _session, socket) do
socket =
case Accounts.update_user_email(socket.assigns.current_user, token) do
:ok ->
put_flash(socket, :info, "Email changed successfully.")
:error ->
put_flash(socket, :error, "Email change link is invalid or it has expired.")
end
{:ok, push_navigate(socket, to: ~p"/users/settings")}
end
def mount(_params, _session, socket) do
user = socket.assigns.current_user
socket =
socket
|> assign(:current_password, nil)
|> assign(:email_form_current_password, nil)
|> assign(:current_email, user.email)
|> assign(:email_changeset, Accounts.change_user_email(user))
|> assign(:password_changeset, Accounts.change_user_password(user))
|> assign(:trigger_submit, false)
{:ok, socket}
end
def handle_event("validate_email", params, socket) do
%{"current_password" => password, "user" => user_params} = params
email_changeset = Accounts.change_user_email(socket.assigns.current_user, user_params)
socket =
assign(socket,
email_changeset: Map.put(email_changeset, :action, :validate),
email_form_current_password: password
)
{:noreply, socket}
end
def handle_event("update_email", params, socket) do
%{"current_password" => password, "user" => user_params} = params
user = socket.assigns.current_user
case Accounts.apply_user_email(user, password, user_params) do
{:ok, applied_user} ->
Accounts.deliver_user_update_email_instructions(
applied_user,
user.email,
&url(~p"/users/settings/confirm_email/#{&1}")
)
info = "A link to confirm your email change has been sent to the new address."
{:noreply, put_flash(socket, :info, info)}
{:error, changeset} ->
{:noreply, assign(socket, :email_changeset, Map.put(changeset, :action, :insert))}
end
end
def handle_event("validate_password", params, socket) do
%{"current_password" => password, "user" => user_params} = params
password_changeset = Accounts.change_user_password(socket.assigns.current_user, user_params)
{:noreply,
socket
|> assign(:password_changeset, Map.put(password_changeset, :action, :validate))
|> assign(:current_password, password)}
end
def handle_event("update_password", params, socket) do
%{"current_password" => password, "user" => user_params} = params
user = socket.assigns.current_user
case Accounts.update_user_password(user, password, user_params) do
{:ok, user} ->
socket =
socket
|> assign(:trigger_submit, true)
|> assign(:password_changeset, Accounts.change_user_password(user, user_params))
{:noreply, socket}
{:error, changeset} ->
{:noreply, assign(socket, :password_changeset, changeset)}
end
end
end

View File

@ -11,6 +11,7 @@ defmodule SomethingErlangWeb.Router do
plug :protect_from_forgery plug :protect_from_forgery
plug :put_secure_browser_headers plug :put_secure_browser_headers
plug :fetch_current_user plug :fetch_current_user
plug :load_bbcookie
end end
pipeline :api do pipeline :api do
@ -24,16 +25,30 @@ defmodule SomethingErlangWeb.Router do
post "/", PageController, :to_forum_path post "/", PageController, :to_forum_path
live_session :user_browsing, live_session :user_browsing,
on_mount: [{SomethingErlangWeb.UserAuth, :mount_current_user}] do on_mount: [{SomethingErlangWeb.UserAuth, :ensure_authenticated}] do
live "/thread", ThreadLive live "/thread", ThreadLive
live "/thread/:id", ThreadLive live "/thread/:id", ThreadLive
end end
end end
# Other scopes may use custom stacks. ## Authentication routes
# scope "/api", SomethingErlangWeb do
# pipe_through :api scope "/", SomethingErlangWeb do
# end pipe_through [:browser, :redirect_if_user_is_authenticated]
live_session :redirect_if_user_is_authenticated,
on_mount: [{SomethingErlangWeb.UserAuth, :redirect_if_user_is_authenticated}] do
live "/users/log_in", UserLoginLive, :new
end
post "/users/log_in", UserSessionController, :create
end
scope "/", SomethingErlangWeb do
pipe_through [:browser]
delete "/users/log_out", UserSessionController, :delete
end
# Enable LiveDashboard and Swoosh mailbox preview in development # Enable LiveDashboard and Swoosh mailbox preview in development
if Application.compile_env(:something_erlang, :dev_routes) do if Application.compile_env(:something_erlang, :dev_routes) do
@ -47,46 +62,11 @@ defmodule SomethingErlangWeb.Router do
scope "/dev" do scope "/dev" do
pipe_through :browser pipe_through :browser
live_dashboard "/dashboard", ecto_repos: [SomethingErlang.Repo], metrics: SomethingErlangWeb.Telemetry live_dashboard "/dashboard",
ecto_repos: [SomethingErlang.Repo],
metrics: SomethingErlangWeb.Telemetry
forward "/mailbox", Plug.Swoosh.MailboxPreview forward "/mailbox", Plug.Swoosh.MailboxPreview
end end
end end
## Authentication routes
scope "/", SomethingErlangWeb do
pipe_through [:browser, :redirect_if_user_is_authenticated]
live_session :redirect_if_user_is_authenticated,
on_mount: [{SomethingErlangWeb.UserAuth, :redirect_if_user_is_authenticated}] do
live "/users/register", UserRegistrationLive, :new
live "/users/log_in", UserLoginLive, :new
live "/users/reset_password", UserForgotPasswordLive, :new
live "/users/reset_password/:token", UserResetPasswordLive, :edit
end
post "/users/log_in", UserSessionController, :create
end
scope "/", SomethingErlangWeb do
pipe_through [:browser, :require_authenticated_user]
live_session :require_authenticated_user,
on_mount: [{SomethingErlangWeb.UserAuth, :ensure_authenticated}] do
live "/users/settings", UserSettingsLive, :edit
live "/users/settings/confirm_email/:token", UserSettingsLive, :confirm_email
end
end
scope "/", SomethingErlangWeb do
pipe_through [:browser]
delete "/users/log_out", UserSessionController, :delete
live_session :current_user,
on_mount: [{SomethingErlangWeb.UserAuth, :mount_current_user}] do
live "/users/confirm/:token", UserConfirmationLive, :edit
live "/users/confirm", UserConfirmationInstructionsLive, :new
end
end
end end

View File

@ -31,11 +31,16 @@ defmodule SomethingErlangWeb.UserAuth do
conn conn
|> renew_session() |> renew_session()
|> put_hashcookie_in_session(user.bbpassword)
|> put_token_in_session(token) |> put_token_in_session(token)
|> maybe_write_remember_me_cookie(token, params) |> maybe_write_remember_me_cookie(token, params)
|> redirect(to: user_return_to || signed_in_path(conn)) |> redirect(to: user_return_to || signed_in_path(conn))
end end
defp put_hashcookie_in_session(conn, bbpassword) do
put_resp_cookie(conn, "bbpassword", bbpassword)
end
defp maybe_write_remember_me_cookie(conn, token, %{"remember_me" => "true"}) do defp maybe_write_remember_me_cookie(conn, token, %{"remember_me" => "true"}) do
put_resp_cookie(conn, @remember_me_cookie, token, @remember_me_options) put_resp_cookie(conn, @remember_me_cookie, token, @remember_me_options)
end end
@ -84,6 +89,11 @@ defmodule SomethingErlangWeb.UserAuth do
|> redirect(to: "/") |> redirect(to: "/")
end end
def load_bbcookie(conn, _opts) do
conn
|> put_session(:bbpassword, conn.cookies["bbpassword"])
end
@doc """ @doc """
Authenticates the user by looking into the session Authenticates the user by looking into the session
and remember me token. and remember me token.
@ -91,6 +101,7 @@ defmodule SomethingErlangWeb.UserAuth do
def fetch_current_user(conn, _opts) do def fetch_current_user(conn, _opts) do
{user_token, conn} = ensure_user_token(conn) {user_token, conn} = ensure_user_token(conn)
user = user_token && Accounts.get_user_by_session_token(user_token) user = user_token && Accounts.get_user_by_session_token(user_token)
assign(conn, :current_user, user) assign(conn, :current_user, user)
end end

48
notebook.livemd Normal file
View File

@ -0,0 +1,48 @@
# Soemthing Erlang Diagnosix
## Intro
Fork this or die!
```elixir
alias SomethingErlang.Accounts.User
alias SomethingErlang.Repo
alias SomethingErlang.AwfulApi.Client
:ok
```
```elixir
%User{bbuserid: "21234"}
|> Repo.insert!()
```
<!-- livebook:{"branch_parent_index":0} -->
## database
```elixir
for user <- Repo.all(User) do
user.email
end
```
<!-- livebook:{"branch_parent_index":0} -->
## client
```elixir
res = Client.login()
```
```elixir
cookies = res.headers["set-cookie"]
for cookie <- cookies, String.starts_with?(cookie, "bb"), into: %{} do
cookie
|> String.split(";", parts: 2)
|> List.first()
|> String.split("=")
|> then(fn [k, v] -> {String.to_existing_atom(k), v} end)
end
```

View File

@ -0,0 +1,15 @@
defmodule SomethingErlang.Repo.Migrations.AddBbuserid do
use Ecto.Migration
def change do
alter table(:users) do
remove :email
remove :hashed_password
remove :confirmed_at
add :bbuserid, :citext
end
# drop index(:users, [:email])
create unique_index(:users, [:bbuserid])
end
end