30d4a58f-53bc-4b66-b703-a349cb65318b

Committed 07 Nov 2025 09:54PM UTC coverage: 91.229% (-0.01%) from 91.243%

Build # 30d4a58f-53bc-4b66-b703-a349cb65318b

Build Type

Pull #2171

circleci

Committed by

tpendragon

Commit Message

Add some other dependencies pulled from Circle.

Pull Request Pull Request #2171: Add devbox as an option.

Run Details

2850 of 3124 relevant lines covered (91.23%)

543.42 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

100.0

/app/services/princeton_users.rb

# frozen_string_literal: true
class PrincetonUsers
  CHARS_AND_NUMS =  ('a'..'z').to_a + (0..9).to_a + ['-']

  # `cbentler` and `az3007` are required because they come as data manager and data sponsor
  # in the default project in the Mediaflux in our Docker image.
  RDSS_DEVELOPERS = %w[bs3097 jrg5 cac9 hc8719 rl3667 kl37 pp9425 jh6441 cbentler az3007].freeze

  class << self


    # Returns a list of Users that match the given query
    def user_list_query(query)
      tokens = query.downcase.strip.split(/[^a-zA-Z\d]/).compact_blank
      return [] if tokens.count == 0
      if (tokens.count == 1)
        # if I have a single token I might be trying a uid search, so put all the uid matches at the top
        uid_query(tokens[0]) | name_query(tokens)
      else
        name_query(tokens)
      end.map{|user| { uid: user.uid, name: user.display_name, display_name: user.display_name_safe } }
    end

    def uid_query(token)
      order_sql = User.sanitize_sql_for_order("LENGTH(uid)-LENGTH('#{token}')")
      search_token = User.sanitize_sql_like(token)+'%'
      User.where("(uid like ?)",search_token).order(Arel.sql(order_sql)).order(:uid)
    end

    def name_query(tokens)
      tokens.inject(User.all) do |partial_query, token|
        search_token = '%'+User.sanitize_sql_like(token)+'%'
        partial_query.where("(LOWER(display_name) like ?) OR (LOWER(uid) like ?)", search_token, search_token)
      end.order(:given_name).order(:family_name)
    end

    def load_rdss_developers
      RDSS_DEVELOPERS.each do |netid|
        create_user_from_ldap_by_uid(netid)
        rescue TigerData::LdapError
        raise TigerData::LdapError, "Unable to create user from LDAP. Are you connected to VPN?"
      end
    end

    # Creates users from LDAP data, starting with the given uid prefix.
    def create_users_from_ldap(current_uid_start: "", ldap_connection: default_ldap_connection)
      CHARS_AND_NUMS.each do |char|
        filter =(~ Net::LDAP::Filter.eq( "pustatus", "guest" )) & Net::LDAP::Filter.eq("uid", "#{current_uid_start}#{char}*")
        people = ldap_connection.search(filter:, attributes: [:pudisplayname, :givenname, :sn, :uid, :edupersonprincipalname]);
        if ldap_connection.get_operation_result.message == "Success"
          people.each{|person| user_from_ldap(person)}
        else
          create_users_from_ldap(current_uid_start: "#{current_uid_start}#{char}", ldap_connection:)
        end
      end
    end

    def create_user_from_ldap_by_uid(uid, ldap_connection: default_ldap_connection)
      filter = Net::LDAP::Filter.eq('uid', uid)
      person = ldap_connection.search(filter:, attributes: [:pudisplayname, :givenname, :sn, :uid, :edupersonprincipalname]);
      raise TigerData::LdapError, "More than one user matches supplied uid: #{uid}" if person.length > 1
      raise TigerData::LdapError, "No user with uid #{uid} found" if person.empty?
      user_from_ldap(person.first)
    end

  # Creates or updates a User from an LDAP entry.
  # @param ldap_person [Net::LDAP::Entry] an LDAP entry representing a person
  # @return [User, nil] the created or updated User, or nil if the LDAP entry is missing a edupersonprincipalname
    def user_from_ldap(ldap_person)
      return if check_for_malformed_ldap_entries(ldap_person)
      uid = ldap_person[:uid].first.downcase
      current_entries = User.where(uid:)
      if current_entries.empty?
        User.create(uid: , display_name: ldap_person[:pudisplayname].first,
                    family_name: ldap_person[:sn].first, given_name: ldap_person[:givenname].first,
                    email: ldap_person[:edupersonprincipalname].first, provider: "cas")
      else
        user = current_entries.first
        if user.display_name.blank?
          user.display_name = ldap_person[:pudisplayname].first
          user.family_name = ldap_person[:sn].first
          user.given_name = ldap_person[:givenname].first
          user.provider = "cas"
          user.save
        end
        user
      end
    end

    # If any required LDAP fields are missing, return true
    # @param ldap_person [Net::LDAP::Entry] an LDAP entry representing a person
    # @return [Boolean] true if the LDAP entry is missing required fields, false otherwise
    def check_for_malformed_ldap_entries(ldap_person)
      uid_blank = ldap_person[:uid].blank?
      edupersonprincipalname_blank = ldap_person[:edupersonprincipalname].blank?
      malformed = uid_blank || edupersonprincipalname_blank
      malformed
    end

    def default_ldap_connection
      @default_ldap_connection ||= Net::LDAP.new host: "ldap.princeton.edu", base: "o=Princeton University,c=US", port: 636,
                                                  encryption: {
                                                    method: :simple_tls,
                                                    tls_options: OpenSSL::SSL::SSLContext::DEFAULT_PARAMS
                                                  }
    end
  end
end

1	# frozen_string_literal: true
2	class PrincetonUsers	2✔
3	CHARS_AND_NUMS = ('a'..'z').to_a + (0..9).to_a + ['-']	2✔
4
5	# `cbentler` and `az3007` are required because they come as data manager and data sponsor
6	# in the default project in the Mediaflux in our Docker image.
7	RDSS_DEVELOPERS = %w[bs3097 jrg5 cac9 hc8719 rl3667 kl37 pp9425 jh6441 cbentler az3007].freeze	2✔
8
9	class << self	2✔
10
11
12	# Returns a list of Users that match the given query
13	def user_list_query(query)	2✔
14	tokens = query.downcase.strip.split(/[^a-zA-Z\d]/).compact_blank	41✔
15	return [] if tokens.count == 0	41✔
16	if (tokens.count == 1)	40✔
17	# if I have a single token I might be trying a uid search, so put all the uid matches at the top
18	uid_query(tokens[0]) \| name_query(tokens)	23✔
19	else
20	name_query(tokens)	17✔
21	end.map{\|user\| { uid: user.uid, name: user.display_name, display_name: user.display_name_safe } }	42✔
22	end
23
24	def uid_query(token)	2✔
25	order_sql = User.sanitize_sql_for_order("LENGTH(uid)-LENGTH('#{token}')")	23✔
26	search_token = User.sanitize_sql_like(token)+'%'	23✔
27	User.where("(uid like ?)",search_token).order(Arel.sql(order_sql)).order(:uid)	23✔
28	end
29
30	def name_query(tokens)	2✔
31	tokens.inject(User.all) do \|partial_query, token\|	40✔
32	search_token = '%'+User.sanitize_sql_like(token)+'%'	69✔
33	partial_query.where("(LOWER(display_name) like ?) OR (LOWER(uid) like ?)", search_token, search_token)	69✔
34	end.order(:given_name).order(:family_name)
35	end
36
37	def load_rdss_developers	2✔
38	RDSS_DEVELOPERS.each do \|netid\|	2✔
39	create_user_from_ldap_by_uid(netid)	11✔
40	rescue TigerData::LdapError
41	raise TigerData::LdapError, "Unable to create user from LDAP. Are you connected to VPN?"	1✔
42	end
43	end
44
45	# Creates users from LDAP data, starting with the given uid prefix.
46	def create_users_from_ldap(current_uid_start: "", ldap_connection: default_ldap_connection)	2✔
47	CHARS_AND_NUMS.each do \|char\|	5✔
48	filter =(~ Net::LDAP::Filter.eq( "pustatus", "guest" )) & Net::LDAP::Filter.eq("uid", "#{current_uid_start}#{char}*")	185✔
49	people = ldap_connection.search(filter:, attributes: [:pudisplayname, :givenname, :sn, :uid, :edupersonprincipalname]);	185✔
50	if ldap_connection.get_operation_result.message == "Success"	185✔
51	people.each{\|person\| user_from_ldap(person)}	188✔
52	else
53	create_users_from_ldap(current_uid_start: "#{current_uid_start}#{char}", ldap_connection:)	1✔
54	end
55	end
56	end
57
58	def create_user_from_ldap_by_uid(uid, ldap_connection: default_ldap_connection)	2✔
59	filter = Net::LDAP::Filter.eq('uid', uid)	10✔
60	person = ldap_connection.search(filter:, attributes: [:pudisplayname, :givenname, :sn, :uid, :edupersonprincipalname]);	10✔
61	raise TigerData::LdapError, "More than one user matches supplied uid: #{uid}" if person.length > 1	10✔
62	raise TigerData::LdapError, "No user with uid #{uid} found" if person.empty?	10✔
63	user_from_ldap(person.first)	10✔
64	end
65
66	# Creates or updates a User from an LDAP entry.
67	# @param ldap_person [Net::LDAP::Entry] an LDAP entry representing a person
68	# @return [User, nil] the created or updated User, or nil if the LDAP entry is missing a edupersonprincipalname
69	def user_from_ldap(ldap_person)	2✔
70	return if check_for_malformed_ldap_entries(ldap_person)	18✔
71	uid = ldap_person[:uid].first.downcase	15✔
72	current_entries = User.where(uid:)	15✔
73	if current_entries.empty?	15✔
74	User.create(uid: , display_name: ldap_person[:pudisplayname].first,	14✔
75	family_name: ldap_person[:sn].first, given_name: ldap_person[:givenname].first,
76	email: ldap_person[:edupersonprincipalname].first, provider: "cas")
77	else
78	user = current_entries.first	1✔
79	if user.display_name.blank?	1✔
80	user.display_name = ldap_person[:pudisplayname].first	1✔
81	user.family_name = ldap_person[:sn].first	1✔
82	user.given_name = ldap_person[:givenname].first	1✔
83	user.provider = "cas"	1✔
84	user.save	1✔
85	end
86	user	1✔
87	end
88	end
89
90	# If any required LDAP fields are missing, return true
91	# @param ldap_person [Net::LDAP::Entry] an LDAP entry representing a person
92	# @return [Boolean] true if the LDAP entry is missing required fields, false otherwise
93	def check_for_malformed_ldap_entries(ldap_person)	2✔
94	uid_blank = ldap_person[:uid].blank?	19✔
95	edupersonprincipalname_blank = ldap_person[:edupersonprincipalname].blank?	19✔
96	malformed = uid_blank \|\| edupersonprincipalname_blank	19✔
97	malformed	19✔
98	end
99
100	def default_ldap_connection	2✔
101	@default_ldap_connection \|\|= Net::LDAP.new host: "ldap.princeton.edu", base: "o=Princeton University,c=US", port: 636,	11✔
102	encryption: {
103	method: :simple_tls,
104	tls_options: OpenSSL::SSL::SSLContext::DEFAULT_PARAMS
105	}
106	end
107	end
108	end

pulibrary / tigerdata-app / 30d4a58f-53bc-4b66-b703-a349cb65318b

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous