thorin/redmine_ldap_sync

# encoding: utf-8
# Copyright (C) 2011-2013  The Redmine LDAP Sync Authors
#
# This file is part of Redmine LDAP Sync.
#
# Redmine LDAP Sync is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Redmine LDAP Sync is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with Redmine LDAP Sync.  If not, see <http://www.gnu.org/licenses/>.
module LdapSync::Infectors::User
  ::User::STANDARD_FIELDS = %w( firstname lastname mail )

  module InstanceMethods
    def add_to_fixed_group
      return unless auth_source.try :has_fixed_group?

      self.groups << ::Group.where(:lastname => auth_source.fixed_group).first_or_create
    end

    def sync_fields_and_groups
      return unless sync_on_create?

      auth_source.sync_user(self, false, :login => login, :password => password, :try_to_login => true)
    end

    def set_default_values
      custom_fields = UserCustomField.where("default_value is not null")
      self.custom_field_values = custom_fields.each_with_object({}) do |f, h|
        h[f.id] = f.default_value
      end

      self.language = Setting.default_language
      self.mail_notification = Setting.default_notification_option
    end

    def synced_fields=(attrs)
      self.attributes = attrs.slice(*::User::STANDARD_FIELDS)
      self.custom_field_values = attrs.except(*::User::STANDARD_FIELDS)
    end

    def member_of_group?(groupname)
      self.groups.exists?(:lastname => groupname)
    end

    def set_admin!
      self.update_attribute(:admin, true)
    end

    def unset_admin!
      self.update_attribute(:admin, false)
    end

    def archive!
      self.groups.destroy_all
      self.memberships.each {|m| m.member_roles.destroy_all}
      self.lock!
    end

    def sync_on_create!; @sync_on_create = true; end
    def sync_on_create?; @sync_on_create == true; end

    # Compatibility with redmine 2.x
    def email_is_taken
      if respond_to?(:email_address)
        # Redmine > 3.x
        email_address.errors.added? :address, :taken
      else
        # Redmine < 3.x
        errors.added? :mail, :taken
      end
    end
  end

  module ClassMethods
    def try_to_login_with_ldap_sync(*args)
      user = try_to_login_without_ldap_sync(*args)
      return user unless user.try(:sync_on_login?)

      login, password = *args
      if user.new_record?
        user.sync_on_create!
        user unless user.auth_source.locked_on_ldap?(user,
          :login => login,
          :password => password)
      else
        user.auth_source.sync_user(user, false, :login => login, :password => password, :try_to_login => true)
        user if user.active?
      end
    rescue => text
      raise text
    end
  end

  def self.included(receiver)
    receiver.extend(ClassMethods)
    receiver.send(:include, InstanceMethods)

    receiver.instance_eval do
      after_create :add_to_fixed_group, :sync_fields_and_groups
      delegate :sync_on_login?, :to => :auth_source, :allow_nil => true
    end
    receiver.class_eval do
      class << self
        alias_method :try_to_login_without_ldap_sync, :try_to_login
        alias_method :try_to_login, :try_to_login_with_ldap_sync
      end
    end
  end
end