diff --git a/app/views/user_mailer/email_verification.html.erb b/app/views/user_mailer/email_verification.html.erb
new file mode 100644
index 0000000..893c367
--- /dev/null
+++ b/app/views/user_mailer/email_verification.html.erb
@@ -0,0 +1,11 @@
+
Hey there,
+
+
This is to confirm that <%= @user.email %> is the email you want to use on your account. If you ever lose your password, that's where we'll email a reset link.
+
+
You must hit the link below to confirm that you received this email.
+
+
<%= link_to "Yes, use this email for my account", identity_email_verification_url(sid: @signed_id) %>
+
+
+
+
Have questions or need help? Just reply to this email and our support team will help you sort it out.
diff --git a/app/views/user_mailer/invitation_instructions.html.erb b/app/views/user_mailer/invitation_instructions.html.erb
new file mode 100644
index 0000000..04cfa11
--- /dev/null
+++ b/app/views/user_mailer/invitation_instructions.html.erb
@@ -0,0 +1,11 @@
+
Hey there,
+
+
Someone has invited you to the application, you can accept it through the link below.
If you don't want to accept the invitation, please ignore this email. Your account won't be created until you access the link above and set your password.
+
+
+
+
Have questions or need help? Just reply to this email and our support team will help you sort it out.
diff --git a/app/views/user_mailer/password_reset.html.erb b/app/views/user_mailer/password_reset.html.erb
new file mode 100644
index 0000000..c570a0a
--- /dev/null
+++ b/app/views/user_mailer/password_reset.html.erb
@@ -0,0 +1,11 @@
+
Hey there,
+
+
Can't remember your password for <%= @user.email %>? That's OK, it happens. Just hit the link below to set a new one.
+
+
<%= link_to "Reset my password", edit_identity_password_reset_url(sid: @signed_id) %>
+
+
If you did not request a password reset you can safely ignore this email, it expires in 20 minutes. Only someone with access to this email account can reset your password.
+
+
+
+
Have questions or need help? Just reply to this email and our support team will help you sort it out.
diff --git a/config/routes.rb b/config/routes.rb
index 48254e8..72feb4c 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -1,4 +1,19 @@
Rails.application.routes.draw do
+ namespace :authentications do
+ resources :events, only: :index
+ end
+ resource :invitation, only: [ :new, :create ]
+ get "sign_in", to: "sessions#new"
+ post "sign_in", to: "sessions#create"
+ get "sign_up", to: "registrations#new"
+ post "sign_up", to: "registrations#create"
+ resources :sessions, only: [ :index, :show, :destroy ]
+ resource :password, only: [ :edit, :update ]
+ namespace :identity do
+ resource :email, only: [ :edit, :update ]
+ resource :email_verification, only: [ :show, :create ]
+ resource :password_reset, only: [ :new, :edit, :create, :update ]
+ end
# Define your application routes per the DSL in https://guides.rubyonrails.org/routing.html
# Reveal health status on /up that returns 200 if the app boots with no exceptions, otherwise 500.
@@ -10,5 +25,5 @@ Rails.application.routes.draw do
# get "service-worker" => "rails/pwa#service_worker", as: :pwa_service_worker
# Defines the root path route ("/")
- # root "posts#index"
+ root "home#index"
end
diff --git a/db/migrate/20260520205214_create_users.rb b/db/migrate/20260520205214_create_users.rb
new file mode 100644
index 0000000..de6393d
--- /dev/null
+++ b/db/migrate/20260520205214_create_users.rb
@@ -0,0 +1,12 @@
+class CreateUsers < ActiveRecord::Migration[8.1]
+ def change
+ create_table :users do |t|
+ t.string :email, null: false, index: { unique: true }
+ t.string :password_digest, null: false
+
+ t.boolean :verified, null: false, default: false
+
+ t.timestamps
+ end
+ end
+end
diff --git a/db/migrate/20260520205215_create_sessions.rb b/db/migrate/20260520205215_create_sessions.rb
new file mode 100644
index 0000000..216185e
--- /dev/null
+++ b/db/migrate/20260520205215_create_sessions.rb
@@ -0,0 +1,11 @@
+class CreateSessions < ActiveRecord::Migration[8.1]
+ def change
+ create_table :sessions do |t|
+ t.references :user, null: false, foreign_key: true
+ t.string :user_agent
+ t.string :ip_address
+
+ t.timestamps
+ end
+ end
+end
diff --git a/db/migrate/20260520205436_create_events.rb b/db/migrate/20260520205436_create_events.rb
new file mode 100644
index 0000000..a106871
--- /dev/null
+++ b/db/migrate/20260520205436_create_events.rb
@@ -0,0 +1,12 @@
+class CreateEvents < ActiveRecord::Migration[8.1]
+ def change
+ create_table :events do |t|
+ t.references :user, null: false, foreign_key: true
+ t.string :action, null: false
+ t.string :user_agent
+ t.string :ip_address
+
+ t.timestamps
+ end
+ end
+end
diff --git a/db/schema.rb b/db/schema.rb
new file mode 100644
index 0000000..2e829d3
--- /dev/null
+++ b/db/schema.rb
@@ -0,0 +1,44 @@
+# This file is auto-generated from the current state of the database. Instead
+# of editing this file, please use the migrations feature of Active Record to
+# incrementally modify your database, and then regenerate this schema definition.
+#
+# This file is the source Rails uses to define your schema when running `bin/rails
+# db:schema:load`. When creating a new database, `bin/rails db:schema:load` tends to
+# be faster and is potentially less error prone than running all of your
+# migrations from scratch. Old migrations may fail to apply correctly if those
+# migrations use external dependencies or application code.
+#
+# It's strongly recommended that you check this file into your version control system.
+
+ActiveRecord::Schema[8.1].define(version: 2026_05_20_205436) do
+ create_table "events", force: :cascade do |t|
+ t.string "action", null: false
+ t.datetime "created_at", null: false
+ t.string "ip_address"
+ t.datetime "updated_at", null: false
+ t.string "user_agent"
+ t.integer "user_id", null: false
+ t.index ["user_id"], name: "index_events_on_user_id"
+ end
+
+ create_table "sessions", force: :cascade do |t|
+ t.datetime "created_at", null: false
+ t.string "ip_address"
+ t.datetime "updated_at", null: false
+ t.string "user_agent"
+ t.integer "user_id", null: false
+ t.index ["user_id"], name: "index_sessions_on_user_id"
+ end
+
+ create_table "users", force: :cascade do |t|
+ t.datetime "created_at", null: false
+ t.string "email", null: false
+ t.string "password_digest", null: false
+ t.datetime "updated_at", null: false
+ t.boolean "verified", default: false, null: false
+ t.index ["email"], name: "index_users_on_email", unique: true
+ end
+
+ add_foreign_key "events", "users"
+ add_foreign_key "sessions", "users"
+end
diff --git a/test/controllers/identity/email_verifications_controller_test.rb b/test/controllers/identity/email_verifications_controller_test.rb
new file mode 100644
index 0000000..90d8513
--- /dev/null
+++ b/test/controllers/identity/email_verifications_controller_test.rb
@@ -0,0 +1,34 @@
+require "test_helper"
+
+class Identity::EmailVerificationsControllerTest < ActionDispatch::IntegrationTest
+ setup do
+ @user = sign_in_as(users(:lazaro_nixon))
+ @user.update! verified: false
+ end
+
+ test "should send a verification email" do
+ assert_enqueued_email_with UserMailer, :email_verification, params: { user: @user } do
+ post identity_email_verification_url
+ end
+
+ assert_redirected_to root_url
+ end
+
+ test "should verify email" do
+ sid = @user.generate_token_for(:email_verification)
+
+ get identity_email_verification_url(sid: sid, email: @user.email)
+ assert_redirected_to root_url
+ end
+
+ test "should not verify email with expired token" do
+ sid = @user.generate_token_for(:email_verification)
+
+ travel 3.days
+
+ get identity_email_verification_url(sid: sid, email: @user.email)
+
+ assert_redirected_to edit_identity_email_url
+ assert_equal "That email verification link is invalid", flash[:alert]
+ end
+end
diff --git a/test/controllers/identity/emails_controller_test.rb b/test/controllers/identity/emails_controller_test.rb
new file mode 100644
index 0000000..dc8ecc4
--- /dev/null
+++ b/test/controllers/identity/emails_controller_test.rb
@@ -0,0 +1,25 @@
+require "test_helper"
+
+class Identity::EmailsControllerTest < ActionDispatch::IntegrationTest
+ setup do
+ @user = sign_in_as(users(:lazaro_nixon))
+ end
+
+ test "should get edit" do
+ get edit_identity_email_url
+ assert_response :success
+ end
+
+ test "should update email" do
+ patch identity_email_url, params: { email: "new_email@hey.com", password_challenge: "Secret1*3*5*" }
+ assert_redirected_to root_url
+ end
+
+
+ test "should not update email with wrong password challenge" do
+ patch identity_email_url, params: { email: "new_email@hey.com", password_challenge: "SecretWrong1*3" }
+
+ assert_response :unprocessable_entity
+ assert_select "li", /Password challenge is invalid/
+ end
+end
diff --git a/test/controllers/identity/password_resets_controller_test.rb b/test/controllers/identity/password_resets_controller_test.rb
new file mode 100644
index 0000000..5b807c5
--- /dev/null
+++ b/test/controllers/identity/password_resets_controller_test.rb
@@ -0,0 +1,65 @@
+require "test_helper"
+
+class Identity::PasswordResetsControllerTest < ActionDispatch::IntegrationTest
+ setup do
+ @user = users(:lazaro_nixon)
+ end
+
+ test "should get new" do
+ get new_identity_password_reset_url
+ assert_response :success
+ end
+
+ test "should get edit" do
+ sid = @user.generate_token_for(:password_reset)
+
+ get edit_identity_password_reset_url(sid: sid)
+ assert_response :success
+ end
+
+ test "should send a password reset email" do
+ assert_enqueued_email_with UserMailer, :password_reset, params: { user: @user } do
+ post identity_password_reset_url, params: { email: @user.email }
+ end
+
+ assert_redirected_to sign_in_url
+ end
+
+ test "should not send a password reset email to a nonexistent email" do
+ assert_no_enqueued_emails do
+ post identity_password_reset_url, params: { email: "invalid_email@hey.com" }
+ end
+
+ assert_redirected_to new_identity_password_reset_url
+ assert_equal "You can't reset your password until you verify your email", flash[:alert]
+ end
+
+ test "should not send a password reset email to a unverified email" do
+ @user.update! verified: false
+
+ assert_no_enqueued_emails do
+ post identity_password_reset_url, params: { email: @user.email }
+ end
+
+ assert_redirected_to new_identity_password_reset_url
+ assert_equal "You can't reset your password until you verify your email", flash[:alert]
+ end
+
+ test "should update password" do
+ sid = @user.generate_token_for(:password_reset)
+
+ patch identity_password_reset_url, params: { sid: sid, password: "Secret6*4*2*", password_confirmation: "Secret6*4*2*" }
+ assert_redirected_to sign_in_url
+ end
+
+ test "should not update password with expired token" do
+ sid = @user.generate_token_for(:password_reset)
+
+ travel 30.minutes
+
+ patch identity_password_reset_url, params: { sid: sid, password: "Secret6*4*2*", password_confirmation: "Secret6*4*2*" }
+
+ assert_redirected_to new_identity_password_reset_url
+ assert_equal "That password reset link is invalid", flash[:alert]
+ end
+end
diff --git a/test/controllers/passwords_controller_test.rb b/test/controllers/passwords_controller_test.rb
new file mode 100644
index 0000000..430f1a1
--- /dev/null
+++ b/test/controllers/passwords_controller_test.rb
@@ -0,0 +1,24 @@
+require "test_helper"
+
+class PasswordsControllerTest < ActionDispatch::IntegrationTest
+ setup do
+ @user = sign_in_as(users(:lazaro_nixon))
+ end
+
+ test "should get edit" do
+ get edit_password_url
+ assert_response :success
+ end
+
+ test "should update password" do
+ patch password_url, params: { password_challenge: "Secret1*3*5*", password: "Secret6*4*2*", password_confirmation: "Secret6*4*2*" }
+ assert_redirected_to root_url
+ end
+
+ test "should not update password with wrong password challenge" do
+ patch password_url, params: { password_challenge: "SecretWrong1*3", password: "Secret6*4*2*", password_confirmation: "Secret6*4*2*" }
+
+ assert_response :unprocessable_entity
+ assert_select "li", /Password challenge is invalid/
+ end
+end
diff --git a/test/controllers/registrations_controller_test.rb b/test/controllers/registrations_controller_test.rb
new file mode 100644
index 0000000..1636fd8
--- /dev/null
+++ b/test/controllers/registrations_controller_test.rb
@@ -0,0 +1,16 @@
+require "test_helper"
+
+class RegistrationsControllerTest < ActionDispatch::IntegrationTest
+ test "should get new" do
+ get sign_up_url
+ assert_response :success
+ end
+
+ test "should sign up" do
+ assert_difference("User.count") do
+ post sign_up_url, params: { email: "lazaronixon@hey.com", password: "Secret1*3*5*", password_confirmation: "Secret1*3*5*" }
+ end
+
+ assert_redirected_to root_url
+ end
+end
diff --git a/test/controllers/sessions_controller_test.rb b/test/controllers/sessions_controller_test.rb
new file mode 100644
index 0000000..975c1ca
--- /dev/null
+++ b/test/controllers/sessions_controller_test.rb
@@ -0,0 +1,46 @@
+require "test_helper"
+
+class SessionsControllerTest < ActionDispatch::IntegrationTest
+ setup do
+ @user = users(:lazaro_nixon)
+ end
+
+ test "should get index" do
+ sign_in_as @user
+
+ get sessions_url
+ assert_response :success
+ end
+
+ test "should get new" do
+ get sign_in_url
+ assert_response :success
+ end
+
+ test "should sign in" do
+ post sign_in_url, params: { email: @user.email, password: "Secret1*3*5*" }
+ assert_redirected_to root_url
+
+ get root_url
+ assert_response :success
+ end
+
+ test "should not sign in with wrong credentials" do
+ post sign_in_url, params: { email: @user.email, password: "SecretWrong1*3" }
+ assert_redirected_to sign_in_url(email_hint: @user.email)
+ assert_equal "That email or password is incorrect", flash[:alert]
+
+ get root_url
+ assert_redirected_to sign_in_url
+ end
+
+ test "should sign out" do
+ sign_in_as @user
+
+ delete session_url(@user.sessions.last)
+ assert_redirected_to sessions_url
+
+ follow_redirect!
+ assert_redirected_to sign_in_url
+ end
+end
diff --git a/test/fixtures/users.yml b/test/fixtures/users.yml
new file mode 100644
index 0000000..4c5f5d7
--- /dev/null
+++ b/test/fixtures/users.yml
@@ -0,0 +1,6 @@
+# Read about fixtures at https://api.rubyonrails.org/classes/ActiveRecord/FixtureSet.html
+
+lazaro_nixon:
+ email: lazaronixon@hotmail.com
+ password_digest: <%= BCrypt::Password.create("Secret1*3*5*") %>
+ verified: true
diff --git a/test/mailers/user_mailer_test.rb b/test/mailers/user_mailer_test.rb
new file mode 100644
index 0000000..e74b76e
--- /dev/null
+++ b/test/mailers/user_mailer_test.rb
@@ -0,0 +1,19 @@
+require "test_helper"
+
+class UserMailerTest < ActionMailer::TestCase
+ setup do
+ @user = users(:lazaro_nixon)
+ end
+
+ test "password_reset" do
+ mail = UserMailer.with(user: @user).password_reset
+ assert_equal "Reset your password", mail.subject
+ assert_equal [@user.email], mail.to
+ end
+
+ test "email_verification" do
+ mail = UserMailer.with(user: @user).email_verification
+ assert_equal "Verify your email", mail.subject
+ assert_equal [@user.email], mail.to
+ end
+end
diff --git a/test/test_helper.rb b/test/test_helper.rb
index 0c22470..3631664 100644
--- a/test/test_helper.rb
+++ b/test/test_helper.rb
@@ -2,14 +2,15 @@ ENV["RAILS_ENV"] ||= "test"
require_relative "../config/environment"
require "rails/test_help"
-module ActiveSupport
- class TestCase
- # Run tests in parallel with specified workers
- parallelize(workers: :number_of_processors)
+class ActiveSupport::TestCase
+ # Run tests in parallel with specified workers
+ parallelize(workers: :number_of_processors)
- # Setup all fixtures in test/fixtures/*.yml for all tests in alphabetical order.
- fixtures :all
+ # Setup all fixtures in test/fixtures/*.yml for all tests in alphabetical order.
+ fixtures :all
- # Add more helper methods to be used by all tests here...
+ # Add more helper methods to be used by all tests here...
+ def sign_in_as(user)
+ post(sign_in_url, params: { email: user.email, password: "Secret1*3*5*" }); user
end
end