Merge pull request #44 from PHPSP/develop

Release 0.2.0

.gitignore

@@ -11,5 +11,6 @@
 # Project Files
 
 config/config.ini
+phpunit.xml
 public/uploads/*
 tests/_reports/*

Boxfile

@@ -0,0 +1,20 @@
+web1:
+  name: liga-solidaria-storage
+  shared_writable_dirs:
+    - public/uploads
+  document_root: public
+  php_version: 5.4.14
+  php_default_locale: "pt_BR"
+  php_date_timezone: "America/Sao_Paulo"
+  php_error_reporting: -1
+  php_display_errors: "1"
+  php_extensions:
+    - zip
+  after_build:
+    - "if [ ! -f composer.phar ]; then curl -s http://getcomposer.org/installer | php; fi"
+    - "php composer.phar install --no-dev --optimize-autoloader"
+    - "cp config/config.ini.dist config/config.ini"
+
+db1:
+  name: liga-solidaria-storage
+  type: mysql

config/config.ini.dist

@@ -11,6 +11,11 @@ default_charset     = 'UTF-8'
 
 view_path           = '../templates/'
 
+; Login credentials
+
+user                = 'admin'
+pass                = '123456'
+
 ; Database parameteres
 
 db_driver           = "mysql"

data/db.sql

@@ -0,0 +1,19 @@
+-- Database: Liga Solidaria Storage
+
+CREATE DATABASE `liga`;
+
+CREATE TABLE `user` (
+    `id` int(11) NOT NULL AUTO_INCREMENT,
+    `name` varchar(40) NOT NULL,
+    `password` varchar(40) NOT NULL,
+    `email` varchar(100) NOT NULL,
+    `group_id` int(11) NOT NULL,
+    PRIMARY KEY (`id`),
+    KEY `group` (`group_id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8;
+
+CREATE TABLE `group` (
+    `id` int(11) NOT NULL AUTO_INCREMENT,
+    `name` varchar(45) NOT NULL,
+    PRIMARY KEY (`id`)
+) ENGINE=InnoDB DEFAULT CHARSE=utf8;

phpunit.xml.dist

@@ -24,4 +24,4 @@
         <log type="tap" target="tests/_reports/logfile.tap"/>
         <log type="junit" target="tests/_reports/logfile.xml" logIncompleteSkipped="false"/>
     </logging>
-</phpunit>
+</phpunit>

public/index.php

@@ -4,14 +4,22 @@
 
 use Respect\Rest\Router;
 
+$auth = new LigaSolidariaStorage\Routine\Auth;
+$authenticated = function() use($auth) {return $auth();};
 $r = new Router;
 $r->isAutoDispatched = false;
 
-$r->any('/', 'LigaSolidariaStorage\Storage\Controller\HomeController');
+$r->any('/login', 'LigaSolidariaStorage\Storage\Controller\Login');
+$r->get('/logout', 'LigaSolidariaStorage\Storage\Controller\Logout');
 
-$r->get('/list/*', 'LigaSolidariaStorage\Storage\Controller\ArtefatoListController' );
+$r->any('/', 'LigaSolidariaStorage\Storage\Controller\HomeController')
+    ->by($authenticated);
 
-$r->any('/upload', 'LigaSolidariaStorage\Storage\Controller\ArtefatoUploadController');
+$r->get('/list/*', 'LigaSolidariaStorage\Storage\Controller\ArtefatoListController' )
+    ->by($authenticated);
+
+$r->any('/upload', 'LigaSolidariaStorage\Storage\Controller\ArtefatoUploadController')
+    ->by($authenticated);
 
 $r->any('/contact', 'LigaSolidariaStorage\Storage\Controller\ContactController', array($c->mailer));
 

src/LigaSolidariaStorage/Routine/Auth.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace LigaSolidariaStorage\Routine;
+
+use \PHP_SESSION_ACTIVE;
+
+class Auth
+{
+    public function __construct()
+    {
+        session_start();
+    }
+
+    public function __invoke()
+    {
+        if (isset($_SESSION['email']))
+            return true;
+
+        header('HTTP/1.1 403 Permission denied');
+        header('Location: /login');
+        return false;
+    }
+}

src/LigaSolidariaStorage/Storage/Controller/Login.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace LigaSolidariaStorage\Storage\Controller;
+
+use Respect\Rest\Routable;
+use \InvalidArgumentException as Argument;
+
+class Login implements Routable
+{
+    public function get()
+    {
+        return array('_view' => 'login.html.twig');
+    }
+
+    public function post()
+    {
+        try {
+            $vars   = array('_view'=>'index.html.twig');
+            $email = filter_input(INPUT_POST, 'email');
+            $pass = filter_input(INPUT_POST, 'password');
+
+            if (empty($email) || empty($pass)) {
+                throw new Argument('Email ou senha inválidos');
+            }
+
+            $_SESSION['email'] = $_POST['email'];
+
+            header('Location: /');
+
+        } catch(Argument $e) {
+            $vars['message'] = $e->getMessage();
+            return $vars;
+        }
+    }
+}

src/LigaSolidariaStorage/Storage/Controller/Logout.php

@@ -0,0 +1,14 @@
+<?php
+
+namespace LigaSolidariaStorage\Storage\Controller;
+
+use Respect\Rest\Routable;
+
+class Logout implements Routable
+{
+    public function get()
+    {
+        session_destroy();
+        header('Location: /');
+    }
+}

templates/elements/navbar.html.twig

@@ -17,6 +17,9 @@
                 <li>
                     <a href="/contact/">Contato</a>
                 </li>
+                <li>
+                    <a href="/logout">Logout</a>
+                </li>    
             </ul>
         </div><!--/.nav -->
     </div>