Graham McIntire
c52f313e2d
- Full auth system with email/password (using phx.gen.auth) - Login, registration, password reset - Session management with remember-me functionality - Magic link login support 2. Organization Management - Multi-tenant organization system - Organizations schema with unique slugs - Automatic organization creation when users register - Organization switcher UI at /orgs 3. Membership System - Users can belong to multiple organizations - 4 permission levels: Owner, Admin, Member, Viewer - Complete permission matrix implemented - Join/leave organizations 4. Invitation System - Email-based invitations with secure tokens - 7-day expiration on invites - Track who invited and who accepted 5. Authorization - Full policy system (Organizations.Policy) - can?(membership, :action, :resource) helper - Enforced via plugs in router 6. LiveView Pages - /orgs - List all your organizations - /orgs/new - Create new organization - /orgs/:slug - Organization dashboard (placeholder) 7. Database Schema - users table - organizations table - organization_memberships table - organization_invitations table - All migrations run successfully
89 lines
2.1 KiB
Elixir
89 lines
2.1 KiB
Elixir
defmodule Towerops.AccountsFixtures do
|
|
@moduledoc """
|
|
This module defines test helpers for creating
|
|
entities via the `Towerops.Accounts` context.
|
|
"""
|
|
|
|
import Ecto.Query
|
|
|
|
alias Towerops.Accounts
|
|
alias Towerops.Accounts.Scope
|
|
|
|
def unique_user_email, do: "user#{System.unique_integer()}@example.com"
|
|
def valid_user_password, do: "hello world!"
|
|
|
|
def valid_user_attributes(attrs \\ %{}) do
|
|
Enum.into(attrs, %{
|
|
email: unique_user_email()
|
|
})
|
|
end
|
|
|
|
def unconfirmed_user_fixture(attrs \\ %{}) do
|
|
{:ok, user} =
|
|
attrs
|
|
|> valid_user_attributes()
|
|
|> Accounts.register_user()
|
|
|
|
user
|
|
end
|
|
|
|
def user_fixture(attrs \\ %{}) do
|
|
user = unconfirmed_user_fixture(attrs)
|
|
|
|
token =
|
|
extract_user_token(fn url ->
|
|
Accounts.deliver_login_instructions(user, url)
|
|
end)
|
|
|
|
{:ok, {user, _expired_tokens}} =
|
|
Accounts.login_user_by_magic_link(token)
|
|
|
|
user
|
|
end
|
|
|
|
def user_scope_fixture do
|
|
user = user_fixture()
|
|
user_scope_fixture(user)
|
|
end
|
|
|
|
def user_scope_fixture(user) do
|
|
Scope.for_user(user)
|
|
end
|
|
|
|
def set_password(user) do
|
|
{:ok, {user, _expired_tokens}} =
|
|
Accounts.update_user_password(user, %{password: valid_user_password()})
|
|
|
|
user
|
|
end
|
|
|
|
def extract_user_token(fun) do
|
|
{:ok, captured_email} = fun.(&"[TOKEN]#{&1}[TOKEN]")
|
|
[_, token | _] = String.split(captured_email.text_body, "[TOKEN]")
|
|
token
|
|
end
|
|
|
|
def override_token_authenticated_at(token, authenticated_at) when is_binary(token) do
|
|
Towerops.Repo.update_all(
|
|
from(t in Accounts.UserToken,
|
|
where: t.token == ^token
|
|
),
|
|
set: [authenticated_at: authenticated_at]
|
|
)
|
|
end
|
|
|
|
def generate_user_magic_link_token(user) do
|
|
{encoded_token, user_token} = Accounts.UserToken.build_email_token(user, "login")
|
|
Towerops.Repo.insert!(user_token)
|
|
{encoded_token, user_token.token}
|
|
end
|
|
|
|
def offset_user_token(token, amount_to_add, unit) do
|
|
dt = DateTime.add(DateTime.utc_now(:second), amount_to_add, unit)
|
|
|
|
Towerops.Repo.update_all(
|
|
from(ut in Accounts.UserToken, where: ut.token == ^token),
|
|
set: [inserted_at: dt, authenticated_at: dt]
|
|
)
|
|
end
|
|
end
|