c6dbc802-7ed5-4316-a643-fa13324e6609

Committed 19 Dec 2024 06:30PM UTC coverage: 83.626% (+0.3%) from 83.376%

Build # c6dbc802-7ed5-4316-a643-fa13324e6609

Build Type

push

circleci

Committed by

web-flow

Commit Message

Clear the session to allow the ssytem user to be refreshed (#1156)

Run Details

4 of 4 branches covered (100.0%)

5 of 8 new or added lines in 1 file covered. (62.5%)

2283 of 2730 relevant lines covered (83.63%)

371.29 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

87.18

/app/controllers/application_controller.rb

# frozen_string_literal: true
class ApplicationController < ActionController::Base
  protect_from_forgery with: :exception
  before_action :authenticate_user!
  before_action :mediaflux_session
  around_action :mediaflux_session_errors
  around_action :mediaflux_login_errors
  before_action :emulate_user

  helper_method :breadcrumbs

  def new_session_path(_scope)
    new_user_session_path
  end

  def after_sign_in_path_for(_resource)
    mediaflux_passthru_path
    # "/users/#{@user.id}"
  end

  def require_admin_user
    head :forbidden unless current_user&.eligible_sysadmin?
  end

  def breadcrumbs
    @breadcrumbs ||= []
  end

  def add_breadcrumb(name, path = nil)
    breadcrumbs << Breadcrumb.new(name, path)
  end

  private

    def mediaflux_session
      logger.debug "Application Session #{session[:mediaflux_session]} cas: #{session[:active_web_user]}"
      unless ["passthru", "cas"].include?(action_name)
        current_user&.mediaflux_from_session(session)
      end
    end

    def mediaflux_session_errors
      yield
    rescue ActionView::Template::Error, Mediaflux::SessionExpired => e
      raise unless e.is_a?(Mediaflux::SessionExpired) || e.cause.is_a?(Mediaflux::SessionExpired)
      if session[:active_web_user]
        redirect_to mediaflux_passthru_path(path: request.path)
      elsif session_error_handler
        retry
      else
        raise
      end
    end

    def mediaflux_login_errors
      yield
    rescue Mediaflux::SessionError
      if session_error_handler
        retry
      else
        raise
      end
    end

    def session_error_handler
      @retry_count ||= 0
      @retry_count += 1

      current_user.clear_mediaflux_session(session)
      current_user.mediaflux_from_session(session)
      @retry_count < 3 # If the session is expired we should not have to retry more than once, but let's have a little wiggle room
    end

    def emulate_user
      return if Rails.env.production?
      return if current_user.blank? || !current_user.trainer

      if session[:emulation_role]
        if session[:emulation_role] == "Eligible Data Sponsor"
          emulate_sponsor
        elsif session[:emulation_role] == "Eligible Data Manager"
          emulate_manager
        elsif session[:emulation_role] == "System Administrator"
          emulate_sysadmin
        elsif session[:emulation_role] == "Eligible Data User"
          emulate_data_user
        elsif session[:emulation_role] == "Return to Self"
          return_to_self
        end
      end
    end

    def emulate_sponsor
      current_user.eligible_sponsor = true
      current_user.eligible_manager = false
      current_user.sysadmin = false
    end

    def emulate_manager
      current_user.eligible_manager = true
      current_user.eligible_sponsor = false
      current_user.sysadmin = false
    end

    def emulate_sysadmin
      current_user.sysadmin = true
      current_user.eligible_manager = false
      current_user.eligible_sponsor = false
    end

    def emulate_data_user
      current_user.eligible_sponsor = false
      current_user.eligible_manager = false
      current_user.trainer = false
      current_user.sysadmin = false
    end

    def return_to_self
      current_user.trainer = true
      current_user.eligible_sponsor = false
      current_user.eligible_manager = false
      current_user.sysadmin = false
    end
end

1	# frozen_string_literal: true
2	class ApplicationController < ActionController::Base	1✔
3	protect_from_forgery with: :exception	1✔
4	before_action :authenticate_user!	1✔
5	before_action :mediaflux_session	1✔
6	around_action :mediaflux_session_errors	1✔
7	around_action :mediaflux_login_errors	1✔
8	before_action :emulate_user	1✔
9
10	helper_method :breadcrumbs	1✔
11
12	def new_session_path(_scope)	1✔
13	new_user_session_path	×
14	end
15
16	def after_sign_in_path_for(_resource)	1✔
17	mediaflux_passthru_path	1✔
18	# "/users/#{@user.id}"
19	end
20
21	def require_admin_user	1✔
22	head :forbidden unless current_user&.eligible_sysadmin?	4✔
23	end
24
25	def breadcrumbs	1✔
26	@breadcrumbs \|\|= []	740✔
27	end
28
29	def add_breadcrumb(name, path = nil)	1✔
30	breadcrumbs << Breadcrumb.new(name, path)	316✔
31	end
32
33	private	1✔
34
35	def mediaflux_session	1✔
36	logger.debug "Application Session #{session[:mediaflux_session]} cas: #{session[:active_web_user]}"	285✔
37	unless ["passthru", "cas"].include?(action_name)	285✔
38	current_user&.mediaflux_from_session(session)	282✔
39	end
40	end
41
42	def mediaflux_session_errors	1✔
43	yield	285✔
44	rescue ActionView::Template::Error, Mediaflux::SessionExpired => e
45	raise unless e.is_a?(Mediaflux::SessionExpired) \|\| e.cause.is_a?(Mediaflux::SessionExpired)	4✔
46	if session[:active_web_user]	4✔
47	redirect_to mediaflux_passthru_path(path: request.path)	1✔
48	elsif session_error_handler	3✔
49	retry	2✔
50	else
51	raise	1✔
52	end
53	end
54
55	def mediaflux_login_errors	1✔
56	yield	285✔
57	rescue Mediaflux::SessionError
NEW 58	if session_error_handler	×
NEW 59	retry	×
60	else
NEW 61	raise	×
62	end
63	end
64
65	def session_error_handler	1✔
66	@retry_count \|\|= 0	3✔
67	@retry_count += 1	3✔
68
69	current_user.clear_mediaflux_session(session)	3✔
70	current_user.mediaflux_from_session(session)	3✔
71	@retry_count < 3 # If the session is expired we should not have to retry more than once, but let's have a little wiggle room	3✔
72	end
73
74	def emulate_user	1✔
75	return if Rails.env.production?	285✔
76	return if current_user.blank? \|\| !current_user.trainer	285✔
77
78	if session[:emulation_role]	20✔
79	if session[:emulation_role] == "Eligible Data Sponsor"	9✔
80	emulate_sponsor	3✔
81	elsif session[:emulation_role] == "Eligible Data Manager"	6✔
82	emulate_manager	3✔
83	elsif session[:emulation_role] == "System Administrator"	3✔
84	emulate_sysadmin	2✔
85	elsif session[:emulation_role] == "Eligible Data User"	1✔
86	emulate_data_user	1✔
87	elsif session[:emulation_role] == "Return to Self"	×
88	return_to_self	×
89	end
90	end
91	end
92
93	def emulate_sponsor	1✔
94	current_user.eligible_sponsor = true	3✔
95	current_user.eligible_manager = false	3✔
96	current_user.sysadmin = false	3✔
97	end
98
99	def emulate_manager	1✔
100	current_user.eligible_manager = true	3✔
101	current_user.eligible_sponsor = false	3✔
102	current_user.sysadmin = false	3✔
103	end
104
105	def emulate_sysadmin	1✔
106	current_user.sysadmin = true	2✔
107	current_user.eligible_manager = false	2✔
108	current_user.eligible_sponsor = false	2✔
109	end
110
111	def emulate_data_user	1✔
112	current_user.eligible_sponsor = false	1✔
113	current_user.eligible_manager = false	1✔
114	current_user.trainer = false	1✔
115	current_user.sysadmin = false	1✔
116	end
117
118	def return_to_self	1✔
119	current_user.trainer = true	×
120	current_user.eligible_sponsor = false	×
121	current_user.eligible_manager = false	×
122	current_user.sysadmin = false	×
123	end
124	end

pulibrary / tigerdata-app / c6dbc802-7ed5-4316-a643-fa13324e6609

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous